skysight-inc/HackerNews huggingface dataset:
I believe you have wrong view of how secure FreeBSD Jails are - definitely a lot more secure the rootless Podman for a start.

Isolation: With rootless Podman it seems to be on the same level as Jails - but only if You run Podman with SELinux or AppArmor enabled. Without SELinux/AppArmor the Jails offer better isolation. When you run Podman with SELinux/AppArmor and then you add MAC Framework (like mac_sebsd/mac_jail/mac_bsdextended/mac_portacl) the Jails are more isolated again.

Kernel Syscalls Surface: Even rootless Podman has 'full' syscall access unless blocked by seccomp (SELinux). Jails have restricted use of syscalls without any additional tools - and that can be also narrowed with MAC Framework on FreeBSD.

Firewall: You can not run firewall inside rootless Podman container. You can run entire network stack and any firewall like PF or IPFW independently from the host inside VNET Jail - which means more security.

TL;DR: FreeBSD Jails are generally more secure out-of-the-box compared to Podman containers and even more secure if you take the time to add additional layers of security.

> How battle-tested are FreeBSD Jails?

Jails are in production since 1999/2000 when they were introduced - so 25 years strong - very well battle tested.

Docker is with us since 2014 so that means about 10 years less - but we must compare to Podman ...

Rootless support for Podman first appeared late 2019 (1.6) so only less then 6 years to test.

That means Jails are the most battle tested of all of them.

Hope that helps.

Regards,

vermaden
Pretty much everyone owns stocks.
How recent is the data? I want to know what cyber security companies are signing contracts as soon as possible after those congressional committees meet.

I have no doubt some moves were made before those tariffs, but it seemed it was telegraphed to everyone.
A bit of context regarding Project Gutenberg. Its intake process is far from casual. Take a look at Project Gutenberg Distributed Proofreaders (PGDP, [0],[1]), one of the oldest "crowd-sourcing" projects on the net (est. 2000). As you can see from [0], every book goes through three rounds of proofing, where volunteers read each page of text and compare it to the scanned image; then through two rounds of format review, where other volunteers insert or review format markup.

From that 5-pass process the marked-up text is handed to a volunteer "post-processor" who assembles the final HTML or e-book file; then the completed book gets one more "smooth reading" pass before it is posted to PG.

This it the process that produces the books input to Standard Ebooks. That they can still find scanner errors ("tne" for "the", a typical "scanno") demonstrates how difficult it is to see those. But their presence isn't from carelessness or disregard for the value of the books.

In the 20-teens I put in hundreds of volunteer hours at PGDP in all the above roles, and it was very satisfying work. I'd recommend it to anyone wanting an online hobby that feels constructive. Volunteering time to Standard Ebooks would probably feel good as well.

[0] https://www.pgdp.net/c/activity_hub.php

[1] https://en.wikipedia.org/wiki/Distributed_Proofreaders
I also imagine that quite simply saying "look you can compile this binary as an alternative and run it on the machine" would fit the requirements, even if it doesn't entirely capture the spirit of anti-tivoisation
And when tariffs work their way through, it might stay that way on their way down...
The battery can be large enough that it takes a long time to heat it, but that's usually what an EV is doing when it preconditions the battery for charging. My car (and pretty much all EVs) will precondition the battery if the next navigation stop is a charging station, for example.
Something I've realized over the course of the past few days is that the USA's biggest export is the US dollar. A medium of exchange that can be used as a proxy trade good between two unrelated countries, backed by the power of the US Government and the US Military. Look at any other industry, and save for a few like defence and information technology, most of USA's production exists to be served within the country itself, not to be exported. Most traditional manufacturing industries such as agricultural processing, food, automobiles, steel, shipbuilding, hardware, etc., all either serve solely the domestic market or have been outsourced away. Over the last few decades, the US has basically traded away its manufacturing capabilities and its economic independence, in favour of remaining top dog hegemon, while utilizing its network of allies and friendly countries to provide raw material for its industries and the USD-based markets to sell to. Obviously this system works very well for a country which has made working with allies a steady policy, but for a country now hell-bent on bashing its allies and any others friendly to trading with it, it can only spell a steady decline.
> us equity growth is partly due to rampant government spending

The US government bought a lot of equities? If yes, isn't crashing the stock market bad for the government?

If no, then what does that mean, exactly? The government spends a lot of money buying stuff from companies in the S&P 500? Enough to send their prices sky high? How does crashing the stock market fix that?
Meanwhile the Interior Secretary, who oversees the National Parks Service, insists on freshly baked cookies:

> Interior Secretary Doug Burgum likes chocolate-chip cookies—preferably freshly baked and still warm.

> This peculiar fact became the talk of the Department of Interior in recent weeks after his chief of staff, JoDee Hanson, made an unusual request of the political appointees in his office: Learn to regularly bake cookies for Burgum and his guests, using the industrial ovens at the department headquarters.

* http://archive.is/https://www.theatlantic.com/politics/archi...

On Burgman:

> How rich? Forbes estimates Burgum’s net worth to be at least $100 million—enough to place him among the most loaded 2024 hopefuls (only Donald Trump and Vivek Ramaswamy are richer), but far from enough to qualify for our World’s Billionaires list.

* https://www.forbes.com/sites/kylemullins/2024/11/15/just-how...

> Burgum sold the company to Microsoft for $1.1 billion in 2001. While working at Microsoft, he managed Microsoft Business Solutions. He has served as board chairman for Australian software company Atlassian and SuccessFactors. Burgum is the founder of Kilbourne Group, a Fargo-based real-estate development firm, and also is the co-founder of Arthur Ventures, a software venture capital group.

* https://en.wikipedia.org/wiki/Doug_Burgum
Coming to Google's Blog in 2028:

Focusing on the Future of Secure Communication

[...] Starting next week, E2E emails on Gmail will no longer function, and all your E2E messages on Gmail will be deleted on February 1 2029.
Thanks! I've put off mobile for 2 years - maybe I'll get it done this summer lol
This could never happen in an actual parliamentary democracy. Too bad we don't live in one anymore.
I ended up working on some software and I was deemed the email guy (it's a very small % of my job but it is the biggest pain).

"I need an email when this happens.. and when this happens."

The requests are endless and I'm convinced there are people who if they could would do their entire job from their inbox and get everything and anything an application can do via email.

The insidious problem is that it never solves anything. "I didn't get the email!" is a constant refrain (yes they did, they always did). "Oh someone didn't do the thing so can you add this to the email too." and so on.

It is such an abused tool.
I would say that they oversee the Pentagon and ensure that the military stays in civilian control. In the past, theories from war games percolate through the Joint Chiefs, who meet with SECDEF before presenting options to the President.

I was surprised Hegseth even desired a side channel that had the potential downside that he could accidentally text the coordinates of a carrier. Stuff like that gets Generals relieved immediately.
I've been here a long time (not this account) and have heard this many times. They all died or became irrelevant.
Yes, sure. In a normal computer, the differentiation between data and executable is done by the program being run. Humans writing those programs naturally can make mistakes.

However, the rules are being interpreted programmatically, deterministically. It is possible to get them right, and modern tooling (MMUs, operating systems, memory-safe programming languages, etc) is quite good at making that boundary solid. If this wasn't utterly, overwhelmingly, true, nobody would use online banking.

With LLMs, that boundary is now just a statistical likelihood. This is the problem.
LLMs are capable of playing chess and 3.5 turbo instruct does so quite well (for a human) at 1800 ELO. Does this mean they can truly reason now ?

https://github.com/adamkarvonen/chess_gpt_eval
read that article, and then scroll down for the giant feral herpes carrying goldfish
Because the EU tariffing Chinese exports will be one of the asks for an EU-US trade deal.

The ability of tariffed countries to sell their output elsewhere is understood by the people doing this.

A better way to look at this is the first salvo to economically re-partition the world into spheres of influence. (i.e. circa 1960s)

The principals have all written about how they see political-economic-military alliances as being inherently tied together.

So their intent is to make this a US-dollar-NATO choice, rather than any of those in isolation.

(Agree or disagree with their premise, feasibility, and/or morality, as one might)
Rust’s Optional does close this altogether, yes. All (non-unsafe) users of Optional are required to have some defined behavior in both cases. This is enforced by the language in the match statement, and most of the “member functions” on Optional use match under the hood.

This is an issue with the C++ standardization process as much as with the language itself. AIUI when std::optional (and std::variant, which has similar issues) were defined, there was a push to get new syntax into the language itself that would’ve been similar to Rust’s match statement.

However, that never made it through the standardization process, so we ended up with “library variants” that are not safe in all circumstances.

Here’s one of the papers from that time, though there are many others arguing different sides: https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2015/p00...
Yep. Facts are usually found out during the SEC investigation but we know that isn't going to happen now...
I genuinely think a Great Depression sized 90% reduction is plausible. If the Trump administration somehow makes a trusted ironclad commitment that they will never ever reduce the tariffs, but doesn't actually convince anyone that the tariffs are good, the market will still expect Congress or the next administration to reduce them. And thus capital investments will still be largely impossible in any sector exposed to them. (Even if your investment isn't directly exposed, can you be confident that Trump won't blow it up on some other quixotic crusade?)
I don't really want narrowing conversion to be harder, I just want checked conversion to be at least nearly as convenient. `x as usize` vs `x.try_into().unwrap()` becomes `x tiu usize` or something even. I'm not picky. It's kindof funny that this is the exact mistake C++ made, where the safe version of every container operation is the verbose one: `vector[]` vs `vector.at()` or `*optional` vs `optional.value()`, which results in tons and tons of memory problems for code that has absolutely no performance need for unchecked operations.
After reading the Wikipedia article on Muntzing it is worth also reading the article about Muntz himself [1]. He may have been the first person to sell TVs by diagonal screen size instead of screen width.

[1] https://en.wikipedia.org/wiki/Madman_Muntz
This will be a bad week in general for Wall Street as the most significant tariffs hit on Wednesday. Because of the chaos or lack of organization from the White House, it will still fall afterwards because markets can't be certain what will happen.

I have a price target for the S&P 500 that I would be very surprised if it stayed lower because the last time the markets were at the price point the economy was worse. All I want to say is there might be another 10% drop before it gets any better.
Those aren't quite comparable.

How many people have died because of American attempts to 'shape opinion, control the dissemination of information, and directly reporting users to the law enforcement for problematic searches?'

Sure Russia is much worse than the US but Americans are still being persecuted for smoking weed which is just absurd.
At this rate of economic and market turmoil, you’d need to have the Chinese manufacturing capability domestically by the end of the week for this to make sense?
The ZIRP era ended several years ago.
They're respecting the terms of the license.

Especially when a piece of software changes from GPLv2 to GPLv3, it's asking Apple to stop updating, and they do as asked.
Well "the cloud" will generally store exactly one logical copy of your static jpg, one of the reasons why clouds are pretty good for efficiency.

There is really no sense at all in the article's claims that "we are destroying the environment" to do x y and z thing the author whines about. We are destroying the environment to drive a Dodge Ram to the Circle K to buy a 52oz Polar Pop. Information sector doesn't even show up on top ten lists of things that are destroying the environment.
Enlightening comment!
yeah it a case of Democrats: "Please don't put your hand on the stove it will burn you" MAGA: "well I have to put my hand on the stove to pwn the libs" fallowed shortly by "ouch the libs made me burn my hand"
Fortunately there is a lot of competition in the LLM space.

Edit: and, more importantly, plenty of people willing to pay a subscription for good quality.
To look for NFC stuff like payment or tickets etc.
You might not know this, but Americans aren’t big on “giving up”. Ever.

We’re also not big on defeatism.
Sure, choose any platform before 1990. The modern ansi / iso c didn't exist before 1990. The c language is from 1970's. So code from any old tarball will assume c literals are writable, and will crash if not. It's a common complain when compiling old code, google it. The c standard library is full of functions that assume strings are writable: mktemp() sscanf() strtok() etc.

Quote from gcc manual, explaining why you need to compile old code with -writable-strings option: "you cannot call mktemp with a string constant argument. The function mktemp always alters the string its argument points to.

Another consequence is that sscanf does not work on some systems when passed a string constant as its format control string or input. This is because sscanf incorrectly tries to write into the string constant. Likewise fscanf and scanf."
Laura Loomer Is a Warning
For information about why you might care about who Laura Loomer is, and how her actions may contribute to the weakening of US cybersecurity, see this previous HN discussion:

https://www.nytimes.com/2025/04/03/us/politics/nsa-cyber-com...
It's hard to say because they may back off on the tariffs and things go back to normal or there may be more trade war. Markets can crash by a lot if things go bad.
The BSD ecosystem benefits from MacOS plenty. Apple doesn't need to be a monetary donator, I for one would be grateful if Apple used my tools at all
I am overall suspicious of the degree of confidence used in papers in conjunction with the sheer number of assumptions regarding luminosity, the model of gas and stars in galaxies etc, vs what is discernible in the images (It's a low-resolution set of pixels). Of particular note is inferring mass (or lack thereof) that doesn't correspond to leading-edge luminosity. I.e. gas and stars that are away from the camera, and dim gas.
I believe Gumroad uses Stripe to process payments, so I'd guess this entire validation process is coming from Stripe. When the CEO paid you via Zelle, he probably just wanted to help you out with the hope that you would continue using Gumroad and have a positive experience with the company. I wouldn't look at any of this as a negative reflection of the company.
(I've personally never used Gumroad, so this opinion is only based on your comment and my experience with Stripe)
> I agree the term is vague. But what then would you have us call it?

That right there is an admission that you're just using the term as a generic "person bad" term, which is bad in itself. It's evil to intentionally conflate and manipulate language to serve political goals. You would object to taking a person that's known to be a Nazi and calling them autistic, or vice-versa. That you are not objecting here is malicious.
He probably hasn’t really done that. e.g. If you’ve saved $x/month and put it into SPY, I’m not sure you could pick any starting point where you now have years’ less wealth than if you’d put everything into short-term federal bonds (or even plain cash) instead of SPY.
Door to door salesmen were still a thing in the early 2000s
hopefully we eventually learn that we just can't afford the decadance of electing absolute fucking idiots to lead us. Britain definitely didn't learn that after Cameron and Johnson and Truss, and the US didn't after letting Trump fuck the place up the first time, but everyone else has to learn and learn quick.
> Once China figures out tech and India takes American services, America has nothing.

This is an economically illiterate argument - it ignores the fact that new jobs are created precisely when old ones become redundant. It's like saying that China and India "have nothing" because first-world countries have figured out everything already. It's good for a country when others become better at what they're doing - that's what enables broader supply chains, bigger markets and ultimately a higher variety of products and services.
It’ll save about $300B over ten years vs wiping out $6T in stock valuation in a month.
Interesting that the reception here is much more positive here than on /r/localllama
These people understand this. However they are not willing to have waste in the system. They want to help exactly who needs help and not scammers. If this cannot be done, then help no one.

I’m all for having better checks and stopping fraud. But not at the expense of helping no one. I’d rather keep a system running even if there is waste as long as it mostly works.
> GNU did not have a working system until Linus released Linux in 1992. They had pieces and components which were worthless on their own.

Whether or not GNU had an OS or would ever have an OS has nothing to do with anything, though. What are you trying to illustrate? Those "pieces and components" are some of the most used pieces of software in history.
The C standard, since 1989, has said that attempting to modify the array object corresponding to a string literal has undefined behavior. Whether it "works" or not is not the issue.

The problem is that it's currently legal to pass a string literal to a function expecting a (non-const) pointer-to-char argument. As long as the function doesn't try to write through the pointer, there's no undefined behavior. (If the function does try to write through the pointer, the behavior is undefined, but no compile-time diagnostic is required.) If a future version of C made string literals const, such a program would become invalid (a constraint violation requiring a diagnostic). Such code was common in pre-ANSI C, before const was introduced to the language.

The following is currently valid C. The corresponding C++ code would be invalid. The proposal would make it invalid in C, with the cost of breaking some existing code, and the advantage of catching certain errors at compile time.

#include <stdio.h>

void print_message(char *message) {
puts(message);
// *message = '\0'; // would have undefined behavior
}

int main(void) {
print_message("hello");
}
This comment explains the reason for its existence quite well:

https://news.ycombinator.com/item?id=43605846

Companies fund things because they're useful or necessary. My guess is that some of the companies listed might use BSD — and perhaps wanted/needed an implementation of rsync that was not GPL3 licensed.

And/or they simply have an interest in funding Open Source projects / development.
its too complicated to explain, and i am completely shook by these losses. but there is a growing theory that there is a relationship between government debt/spending and asset prices. the last few years, up to 25% of total USA employment is indirectly from the government. the last 25 years has been a hallowing out of actual economy, replaced with debt, financial engineering, low interest rates, and the like. the growth is mostly fake, which is the why the middle class is almost gone and no one can afford anything
TIL there are land planaria, what a pain that must be: “kill them with salt, vinegar, or neem oil, then dispose of them in a sealed container…avoiding any method that involves cutting the worms, as these segmented creatures can regenerate into two separate worms if split in two.”
No, there are too many things to track, but all of it is in the git history. Editorial changes have a commit message prefaced with [Editorial].
UniGen: Unified Modeling of Initial Agent States and Trajectories
I've written some multithreaded rust and I've gotta say, this does not reflect my experience. It's just as easy to make a mess, as in any other language.
Dennis Gaitsgory Wins Breakthrough Prize
This. Precise text auto-completer. Without reasoning or cognitive processes whatsoever, just a very marketable illusion of it. Despite the lies, a great tool.

As any tool, it takes knowledge and responsibility. Just lile the unix chainsaw.
I mean over the course of his career.
Why Lotus Domino? (2024)
It's certainly possible that someone could spread fake metrics as a victory condition, but this site isn't credible. The "experienced team" they advertise includes not a single economist.
My hunch is some staffer probably flagged this issue early (the Carvallo and Gopinath paper had significant traction in the Biden admin and the EU when crafting policies against China Shock - especially in EVs and Pharma), but if they followed the correct model, they could not force a decoupling from China, as it would place China in the same bracket as much of the rest of the world.

The story about "bringing manufacturing back to the US" is just a fiction, and this tariff is a de facto blockade against China by placing a total tariff rate of 65% against China compared to other Asian countries (20-30% range for Taiwan, India, Japan, and SK) [0].

It's basically another Project 2025 foreign policy initiative.

[0] - https://www.bloomberg.com/news/articles/2025-04-03/us-tariff...
I'm not convinced the supply chain moving isn't just ... how it was going to play out. I don't think you need a conspiracy to discover cheap labor is a place to do manufacturing.
Equally bewildered as there is no real upside to this and the other folks on the line dont have any purpose of knowing prestrike information.

I am not as educated in these manners but this type of information seems to be of the type you don’t text on commercial applications and would be on a need to know basis. Maybe you can communicate the idea that something is planned to happen but not timelines of the specific assets.
new jobs are not created precisely when old ones are redundant, lol - that’s wishful thinking. you think every manufacturing job taken from the USA was matched 1-1, the quality of job is very different. losing a manufacturing job and gaining a job at Wendy’s is hardly a good trade.
Oh I didn’t realize it was open source.

The wording « We help you setup Firecracker VMs » made me think it was a SaaS at first but maybe I was mistaken. Is the idea that a community should host its own instance of shellmates ?