skysight-inc/HackerNews huggingface dataset:
> Since the landlock/seccomp filters are at the kernel level

That arguably shows that seccomp is operating at the wrong abstraction level, or the kernel needs another higher level api. With pledge, you operate on capabilities and as new functionality is added to the kernel it is categorized under existing capabilities (for example, if your program pledges not to use networking you can assume that it should not be able to use new networking syscalls added to the kernel in the future).
Yes, after a decade or so of following by E-Mail newsletter, I made an account.
Long live to HN!
We have a limited choice of who to vote for. Here in the UK that is the big parties think, and most of the smaller ones too. The same is true in many democracies.

Douglas Adams described it well:

"No," said Ford, who by this time was a little more rational and coherent than he had been, having finally had the coffee forced down him, "nothing so simple. Nothing anything like so straightforward. On its world, the people are people. The leaders are lizards. The people hate the lizards and the lizards rule the people."
"Odd," said Arthur, "I thought you said it was a democracy."
"I did," said Ford. "It is."
"So," said Arthur, hoping he wasn't sounding ridiculously obtuse, "why don't people get rid of the lizards?"
"It honestly doesn't occur to them," said Ford. "They've all got the vote, so they all pretty much assume that the government they've voted in more or less approximates to the government they want."
"You mean they actually vote for the lizards?"
"Oh yes," said Ford with a shrug, "of course."
"But," said Arthur, going for the big one again, "why?"
"Because if they didn't vote for a lizard," said Ford, "the wrong lizard might get in. Got any gin?"
And there is software today that is simply not usable on computers today, but will be incredible on computers in 20 years time if clock speed continue doubling every 2 years.

Most of it is written in Electron.
Isn’t the point of sharing the info so that it would be public?
I’m a fan of microkernel hosts for guest monoliths, thus our servers are running seL4 as safety layer and backups for FreeBSD VMs with jails for renderfarm, BEAM clusters and Jenkins.

All I’m missing is an ARM port of DragonflyBSD for its threading and in-process kernels (hybrid kernel design). My dream is to run it on 128 cores Ampere Altra to run OpenMoonRay more effectively.
Writing a blog relatively regularly got me job offers from FAANG companies and book offers from publishers (some of the latter I accepted). It's also a good exercise to get better at your job because communicating effectively is just as important a skill for programmers as writing code is.
The secret is that looking to work as a way to fulfill that desire to build and create is not a good idea. The existence of industrial farming takes no joy from my backyard garden. My usage of Gen AI doesn’t diminish the wonder I feel building projects at home.

Looking to corporate work as an out for your creative desires never really worked out. Sure there was a brief golden age where if you worked at a big tech company you could find it but the vast majority of engineers do utilitarian work. As a software engineer your job as always been to drive business value.
I upvoted because I don't think you should be censored, but I kindly disagree :-).

To me (and I think that's the position of cryptography-aware people), requesting a backdoor is a risk so high that it makes absolutely no sense.

Of course, they understand that if an adversary gets access to the backdoor, then it's game over. And of course, they believe that it's possible to prevent the adversary from accessing the backdoor. But that's my whole point: their believing this means that they don't understand the problem.
ISPs have been selling 1G and multi-gig speeds so hard, people seem to feel inadequate if they don’t have such.

“oh no, I have 4 phones and 4 tablets —- is 1G enough ??”

Most people will be happy with 100mbps.
but literally no one is doing that in this scenario so... huh? Also the number of hours you put into a thing does not make it valuable.
Hahaha holy moly they are linking to https://adblock.turtlecute.org/index.html to prove how great their adblocking is.

That site then says:

I found that the uBlock Origin extension breaks the final result. To fix it, add adblock.turtlecute.org as an exception in uBlock rules.

Exactly the kind of belly laugh I needed right now. That side also falsely "measures" that my ad blocker lets all kinds of sites through when in fact my setup lets absolute zero third party sites through. Hilarious!

I wonder how many people fall for sites like that.
This is quite a ship-of-Theseus problem. Steve Jobs hired Avi Tevanian to work at NeXT on the Mach kernel, and later brought Tevanian to Apple; he was still working on the Mach/Darwin kernel as late as the first iPhone release. There is a reasonable argument to be made that the OSF kernel is actually the derivative, by default.
Well, this divine decree isn’t talking about food. It’s actually a metaphor for Christianity opening its doors to Gentile converts instead of just Jews. This is how Peter himself interpreted it:

27 As Peter talked with him, he went inside and found many people gathered together.

28 He said to them, “You know how unlawful it is for a Jew to associate with a foreigner or visit him. But God has shown me that I should not call any man impure or unclean.

29 So when I was invited, I came without objection. I ask, then, why have you sent for me?”

…

34 Then Peter began to speak: “I now truly understand that God does not show favoritism,

35 but welcomes those from every nation who fear Him and do what is right.

36 He has sent this message to the people of Israel, proclaiming the gospel of peace through Jesus Christ, who is Lord of all.”

A better passage would be Mark 9:17, which explicitly talks about food:

14 Again Jesus called the crowd to him and said, “Listen to me, everyone, and understand this.

15 Nothing outside a person can defile them by going into them. Rather, it is what comes out of a person that defiles them.”

17 After he had left the crowd and entered the house, his disciples asked him about this parable.

18 “Are you so dull?” he asked. “Don’t you see that nothing that enters a person from the outside can defile them?

19 For it doesn’t go into their heart but into their stomach, and then out of the body.” (In saying this, Jesus declared all foods clean.)

20 He went on: “What comes out of a person is what defiles them.

21 For it is from within, out of a person’s heart, that evil thoughts come—sexual immorality, theft, murder,

22 adultery, greed, malice, deceit, lewdness, envy, slander, arrogance and folly.

23 All these evils come from inside and defile a person.”
>"Individuals are eligible", not dealerships. Dealerships collect the reimbursement, but the individuals must qualify. If you qualify and he dealer didn't discount the car, they owe you the rebate:

A difference without distinction. From the financial point of view, the cheque goes from the Government of Canada to the dealership. Whether the dealership then cuts another cheque or simply discounts the vehicle $5000 is irrelevant because in either case the money has to enter the dealership's coffers.

Now AFAIK adding in the rebate directly as a discount into the bill of sale is the modus operandi of Tesla and other dealerships in Canada that were participating in the iZEV. And that's why I don't think it's impossible that this is legitimate.

If Tesla sold inventory for the previous years and applied the discounts on the bills of sale, but then didn't get around to filing the paperwork until now near the end of the rebate... well that would explain why the sudden rush to get the paperwork done when the pause was announced. Other dealerships were doing something similar and are now out of pocket for their procrastination.

Now it's a little odd to me why a company as tech savvy as Tesla wouldn't have automated the filling of the forms. But I could see that just being due to to mismanagement and potentially also why the store managers refused to comment to CTVNews when they came asking about it.

The idea that people were rushing out to Tesla's website to buy isn't impossible either but Tesla's never been shy about bragging about good sales performance. The fact that the storage lots near the Toronto or Montreal are also quite full doesn't exactly help sell that story either.

Now it's also possible that this is borderline fraud. It's only $330 to establish a numbered company in Ontario, so hypothetically if someone had $3 million or so to create 8600 numbered companies, those holding companies could in 'buy' a Tesla that qualifies under the iZEV for a $5000 reimbursement. Technically that is not illegal on it's own, and money doesn't have to flow anywhere. And actual buyers would still be buying a new car.

It's also possible that it's just outright fraud and Tesla just submitted forms for sales that never happened. There's nothing on the Transport Canada forms that require only a name of the purchaser and then a make, model, and year of the vehicle, so it'd be trivial to just put falsified information into the forms.

Whatever the reality is, it's still suspicious, and bears further scrutiny. Especially given how politically delicate government funds flowing to Tesla is right now.
If you think their fonts are ugly now, you should go back and look at the pre-Windows 3.x fonts. But you also have to realize they were saddled with CGA/EGA as their target display adapters back then.
YJS CRDT database server written in Golang. 1ms ±x yjs update write latencies
YJS CRDT database server written in Golang. 1ms ±x yjs update write latencies with persistence to disk. Abstracts away long term CRDT data storage behind a simple to use API.
> So much work. makes me wonder why not just earn it legit.

Because they make orders of magnitude more money than they otherwise would. The regional drug lord wouldn't be the next fortune 500 CEO if only he chose to not break the law.
One big reason for fewer babies: phones?
Ask HN: Best geospatial indexing approach for real-time location systems in Go?
I'm building a real-time location-based notification system in Go where users need to receive updates relevant to their geographic position. I initially implemented this using Uber's H3 library with a room-based subscription model in Socket.IO, but I'm hitting some limitations.
The main issue: When a user joins at one resolution (e.g., 8) and an event is created at another resolution (e.g., 9), the user may miss relevant updates due to the mismatch in H3's cell hierarchy. I've tried various solutions involving emitting to parent/child cells, but the code has become overly complex.
I need a geospatial approach that:

Works efficiently in Go
Handles thousands of concurrent users
Delivers updates within 1-2 seconds
Doesn't suffer from the hierarchical complexity issues I'm facing with H3

I'm considering:

Moving away from room-based subscriptions to direct geographic queries
Using a different geospatial library (Redis GEO, S2, GeoHash)
Rethinking how I use H3

Has anyone solved similar problems with real-time location-based systems? What approaches worked best in production?
I’m not surprised by that. I am surprised by failure to police accounts. I was under the impression you needed photo ID these days to get an account.
Yes and there's a very good reason: Linux is safe enough, more efficient, and more scalable.
Show HN: Capture Better Screenshots, Faster
The Brazilianization of the World (2021)
Airliner Was Descending Fast Before It Flipped on Landing, Report Finds
> stand its ground

Now there’s propaganda.

Whataboutism is of course another clear sign. Ironically your example would imply Iraq should have built up its military to defend from such an attack.
He is certainly a troll.

I mean, DOGE.

I guess that makes him not a nazi.

Great.
Admin wants to build more ships in the United States. It's not so simple
https://archive.ph/qbDmk
Thank you - LinkedIn became extremely annoying over time. I'll check how it compares, when I'm hiring for my team.
https://archive.ph/91MKW
Tesla removed the LIDAR and thought advances in AI would be able to do without one. They were wrong.
What age limits did they ignore? There are no upper limits set, and I’m not aware of them ignoring any lower age bounds.
Predictive text? But it's also an example of an incremental improvement that someone could experiment with to see if it works. Much easier than having to prototype entirely new hardware (especially in the 80s, in an era before cheap additive prototyping).
https://yosefk.com/blog/engineers-vs-managers-economics-vs-b...

> ...It's a common story and an interesting angle, but the "best vs good enough" formulation misses something. It sounds as if there's a road towards "the best" – towards the 100%. Engineers want to keep going until they actually reach 100%. And managers force them to quit at 70%:

> > There comes a time in the life of every project where the right thing to do is shoot the engineers and ship the fucker.

> However, frequently the road towards "the best" looks completely different from the road to "the good enough" from the very beginning. The different goals of engineers and managers make their thinking work in different directions. A simple example will illustrate this difference.

> Suppose there's a bunch of computers where people can run stuff. Some system is needed to decide who runs what, when and where. What to do?

> * An engineer will want to keep as many computers occupied at every moment as possible – otherwise they're wasted.

> * A manager will want to give each team as few computers as absolutely necessary – otherwise they're wasted.

> These directions aren't just opposite – "as many as possible" vs "as few as necessary". They focus on different things. The engineer imagines idle machines longing for work, and he wants to feed them with tasks. The manager thinks of irate users longing for machines, and he wants to feed them with enough machines to be quiet. Their definitions of "success" are barely related, as are their definitions of "waste".

> The "good enough" is not 70% of "the best" – it's not even in the same direction. In fact, it's more like -20%: once the "good enough" solution is deployed, the road towards "the best" gets harder. You restrict access to machines, and you get people used to the ssh session interface, which "the best" solution will not provide.
Yes, that's a really good point.
There are a few references to the OSF Mach kernel from '98 in a few files, such as https://github.com/apple-oss-distributions/xnu/blob/main/osf...

EDIT: Apple calls out Mach 3.0.

https://developer.apple.com/library/archive/documentation/Da...

https://developer.apple.com/library/archive/documentation/Da...

Apple took Mach 3.0 and collapsed it into a single address space for performance purposes. Certainly reasonable.
The pull of an autobelay is negligible, surely. The cable is a bit annoying perhaps but the real problem is that the wall is like near vertical, completely flat. Super uninspiring in my opinion.
> Investment Strategy: Organizations should invest more in computing infrastructure than in complex algorithmic development.

> Competitive Advantage: The winners in AI won’t be those with the cleverest algorithms, but those who can effectively harness the most compute power.

> Career Focus: As AI engineers, our value lies not in crafting perfect algorithms but in building systems that can effectively leverage massive computational resources. That is a fundamental shift in mental models of how to build software.

I think the author has a fundamental misconception what making best use of computational resources requires. It's algorithms. His recommendation boils down to not do the one thing that would allow us to make the best use of computational resources.

His assumptions would only be correct if all the best algorithms were already known, which is clearly not the case at present.

Rich Sutton said something similar, but when he said it, he was thinking of old engineering intensive approaches, so it made sense in the context in which he said it and for the audience he directed it at. It was hardly groundbreaking either, the people whom he wrote the article for all thought the same thing already.

People like the author of this article don't understand the context and are taking his words as gospel. There is no reason not to think that there won't be different machine learning methods to supplant the current ones, and it's certain they won't be found by people who are convinced that algorithmic development is useless.
They were just training, surely nothing to be concerned about.
In more recent interviews Cutler has been firm that the NT kernel was designed pragmatically, a view that Tevanian also evidently later adopted, as evident with the great wheel of incarnation that Darwin went through on the road to XNU, although I'm not sure Tevanian ever stated his perspectives on this matter publicly. Neither of these systems were ever true monolithic kernels in the Linux or Unix sense—at all times they both had some measure of sandboxing between e.g. driver code and the scheduler—rather sitting somewhere between.

True microkernels are, alas, more of an ideology than a practical reality, as the long-suffering GNU/HURD team discovered; Tanenbaum has been clear that the MINIX/NetBSD experiment was more about principles than performance. That said, certainly many hypervisors have attained success with configurations that coincidentally happen to be the same footprint as a microkernel.
> Because you’re not going to like the answer to where the line is.

True or not, I’m not “clear” what that has to do with my post. Further, asking what the current administration would have to do to cross GP’s line has, fundamentally, nothing at all to do with this particular soapbox.

It feels like you just wanted to post this, and weren’t all that concerned with where or whether it made any sense as a reply.
Anthem Blue Cross 'refusing to' help NYC crack down on soaring health care costs
I personally like Linkedin - it's so trashy that it makes me work harder to retire early to get away from all those crazy prople. Or at least to close the tab ASAP.
Children are 4 years old sometimes. Of course in a dense metro public transport is (mostly) paying for itself, and older children can use it, ish, but there are large age ranges where children are too young to get the bus or underground rail system.

And yes, a lot of this is about a level of privilege. My wife doesn't have full time paid employment, so she has time to cycle to the kids' school, get them, walk them to a brilliant extra curricular over the other side of the city and back after, walk them back after, then cycle them all to our house. And she takes another kid with her whose parents both work full time, and that's amazing. It's just not normal in the two-parents-working world we live in.

Living near good services is a privilege. Having the time to take children around, regardless of mode of transportation, is a privilege. Having a work from home job where you aren't in a van to a nearby town to do some construction work, but can just relax all day and have a cycle ride be the hardest thing you do is a privilege. Privileged instincts about what's possible for those with that privilege are not generally applicable.
The way of the AI world, AI to review AI to review AI...
I've recently started blogging again, mostly as a form of documentation for myself later at this point. I'm always working on some weird project, I'll get to some milestone, lose a bit of interest, think about it two months later only to realize I'd have to relearn everything and don't do it.

Having a blog allows me to compile my notes into a digestible and easy to read way, so if I revisit a project later I at least don't have to start from scratch.
> Friendships are forged in shared experience and more easily when young

That's great but what if you move to study or for a job.

When you're the new person in town you have to make new friends or be socially isolated forever.
Is everything based on a division of the measure into 16 equally spaced beats?

There is so much more to rhythm.

Like, for starters, oh, triplet eighths?

They come up often, and with them, you can have a heavy form of swing (triple 8 swing).

Oh, never mind, I see this is geared toward a piece of drum machine hardware from 1980.
From your source:

> Home Ownership Rate refers to the percentage of homes that are occupied by the owner

So this rate is not that of people that own a home, but homes that are owned by someone that resides there.

Consider people in shared housing, young adults staying with parents, etc.
Y'all have natural gas lines run to the home but use electric to heat it? That seems so backwards.
If you want a simple but powerful full-stack JS framework (literally, client and server are separated as they should be—no trickery) that is being built carefully and slowly, check out Joystick [1][2]. To put it in simple terms: if Next.js is the hare, Joystick is the tortoise.

It uses plain HTML, CSS, and JS for components (no React, Vue, Svelte, etc.—just simple components any skill-level can grok) in an easy-to-learn API and pairs that with a batteries-included Node.js back-end built on top of Express. The server automatically does old fashioned server-side rendering in routes (literally a callback function mapped to a URL pattern w/ req and res objects).

This is not "just another JS framework." I intentionally designed it to not behave like Next.js and other JS frameworks (I take "never trust the client" very, very seriously).

[1] https://cheatcode.co/joystick

[2] https://github.com/cheatcode/joystick
Which ones stick out the most to you?
Wouldn't this theory be easy to prove by sequencing brain tissue samples from deceased patients?

Probably more than 90% of the reads would be human, but still.
V0.1.11 out, with env support and bunch of other fixes, update!
Exploring Dynamic Dispatch in Rust (2017)
Reversing C++ Virtual Functions
I did. It's behind me now and more importantly I'm fully recovered mentally and physically.

I don't live in the states so it's not as dramatic legally as you may imagine.
I can think of a lot of cases where it theoretically could be a problem, but `cut -d=` is the only one I've found so far where an end user ran into trouble because of this ambiguity, and I think it's the only one for which uutils bothers implementing a workaround. That's why I give it special attention.

> You write a bit as if we disagree, but I don't see any real point of contention. :-)

The `cut -d:=` spelling solves a different problem than the one I meant (and the one you're now talking about). But we're mostly on the same page!
Yeah, it's a pretty awesome place! I didn't expect anyone here to have ever heard of it either!
You can't both tout status-quo economic figures and then point at hypothetical alternatives. If people did as you say and took those lower-paying jobs, then the average person would be less well off -- perhaps closer to the experienced reality for many.
Molten permafrost is unlikely to be arable soil 'just so'. Tends to be rather acidic, and teems with nasty insects. Who knows what else it thawing up, too.

Yay for https://en.wikipedia.org/wiki/Clathrate_gun_hypothesis !
Re: noise complaints, I'd suspect that most neighbors wouldn't mind if you had a generator running during a power outage - especially if you offer to share to keep their fridge cool.
One that i recently experienced is 'reactive athritis' which is a form of athritis commonly experienced after a stomach virus.

If you start looking into it it's due to an immune response that occurs in people with the https://en.wikipedia.org/wiki/HLA-B27 gene and that gene is associated with a large number of athritis risk factors (but also resistance to a lot of things including HIV).
You lost me when you said Reddit is a positive example of social media.
Doesn't work well for potatoes (and other carbohydrate heavy crops) as far as I'm aware.