skysight-inc/HackerNews huggingface dataset:
RCTL can enforce specific limits, which is good if you either want to divide resources such that there can't be (or is unlikely to be) contention.

cgroups offers hard limits for some things, like memory, but it mostly opts for a model using "shares" that determine the fractional access to resources versus other cgroups holding shares against the same resource.

For example, assume there's CPU contention. cgroup A has 10 CPU shares and cgroup B has 90. Processes in cgroup A will get 90% of the CPU time, but it will not starve cgroup A because cgroup A will still get 10%.

This shares-based model also has a major effect when there isn't contention. Shares-based resources are burstable. Even cgroup A (with 10 CPU shares) can use 100% of CPU if nothing else needs it.

This "burstable" nature can be good or bad. It's good in the sense that most users will probably get more CPU than their shares guarantee most of the time. It's bad because users can start expecting more than their shares guarantee and get a nasty surprise when resources get under contention.

It's time to drop some analogies.

cgroups are very much like a highway with an HOV lane (or more): anyone can go very fast when there's no contention. But, during rush hour, lanes get distributed as "shares" of the road to the HOV and non-HOV groups. Neither the HOV nor the non-HOV drivers get starved for road access (though responsiveness may not be equivalent, by design).

Traditional "nice" is like emergency vehicle traffic. An ambulance every now and then works fine as "-20 nice" traffic. But, if you filled the road with ambulances, it would starve normal traffic of roadway access.

RCTL is sort of like a person riding reserved right-of-way public transit. From the time the person hops on the train at point A to when they get off at point B, it will be the same duration any time of day. They don't get to go faster during low-traffic times, but they also don't have to worry about a significantly worse experience during rush hour.

Capsicum seems focused on intra-application isolation; I'm not sure how to compare it to other OS-level containers.
I was just discussing personal dashboards last Friday specifically I was looking for something to run on a Pi. Probably a web dashboard. I didn't really find anything (Kipfolio seems to be the business one) so I ended up registerding some domains. I was thinking of exploring it as my Startup Engineering project.

Best of luck with Morning!
You could start charging a subscription fee for the service. This should help you find out very quickly how much people are willing to spend and therefore how much value your service adds. You don't necessarily need funding from a third party if your project is self-sustaining. Give it a shot and you might be surprised.
Considering the article, 50 planned attacks would not result in thousands of convictions, and it isn't known how many of them were in the US (Other countries could have different standards for evidence or may have, in good faith, believed that it was all acquired legally.) Even so, the point was not that some people were convicted of planning attacks but that the attacks were prevented.

Meanwhile, it's the method of prevention that should be disputed, not the fact of it.
I only noticed the animations after reading this comment... thought the screens were just blank.
Who were the classical terrorists?
The main office also doesn't have a dedicated Perf Room.
Wait, what?

You have literally three links on that page. Each at MAX two words.

If there's a person who wouldn't even read a total of five words when they see a new interface then I really don't want them to be my customer. They sound like far more trouble than they're worth.
What oversight would you be referring to here? Does someone (not chosen by the people in charge of the NSA, up to and including the President) come in to periodically audit the NSA and ensure that they are only spying on Americans when they have a warrant? Do their computers even keep logs to enable such auditing?

The problem here is that you have a secret agency that is saying, "Look, really, we have these policies and we promise that we follow them. Of course, you cannot come in and check to see if we are following them, because our operations are a secret." It does not help that whistleblowers are considered to be traitors in this situation. How exactly do you think the rule of law works?
Why does a person on a public road infringe on rights but not a person on a plane in public airspace? In both cases, the idea seems to be "You can't use this public conduit if we believe you'd be an unreasonable danger to the other people around." Neither requires a trial.
This seems like the Better Place strategy. But unlike them, Tesla didn't base their whole company on that strategy. I still think the right strategy is the Supercharger network one, and they need to expand that all over the world as soon as possible.

But this swappable battery thing is certainly a nice "feature" and I'm sure some customers will take advantage of it, and it's a decent stop-gap until superchargers are everywhere, which could be another decade or more.
It will be interesting to see how few or many FISA requests there really are. Google implies its a small number. The government was okay releasing the numbers opaquely, inside an aggregate of all law enforcement requests, which also implies to me the number may actually be low. If it's conspicuously low, we're left to wonder what alternative sources of raw data they're relying upon primarily. They may be trying to avoid that implication, thus, release of a low number may appeal to Google, but not the government.
You don't need to put scare quotes around words, I'm well aware of the potential legality of all three categories.

Slavery used to be legal too. I'm sorry the government is not completely perfect, but the answer is to go fix it and make things that should not be legal, illegal. Until then it's like complaining about shell companies used by Google and Facebook to avoid paying taxes (a strategy typically well-defended on HN because they're "technically complying with the law").
Please, as a progressive which are my pet issues?

I think you're aggregating people in a way that's dishonest.
True flat design, none of that nearly flat nonsense :-)
How to Stop Hating Conference Calls
ReClock: the problem solving clock widget for Android
I dunno, from a purely tech standpoint, it's a classic problem isn't it? How do you stop your sysadmin from fleeing with all of your company's data?

I think the current solution is to just trust that your sysadmin's career would be over if he/she took your data. Kind of doesn't work as well for stuff like this, though, considering the person who'd steal your data probably at this point doesn't care.
Developers writing new apps see two things:

- High adoption rate of iOS6

- Cool iOS6 APIs (Autolayout, UIKit attributed text, indexed subscripting, etc)

and they decide to write for iOS6 only. They could support iOS 5, but the work is not worth the reward with the adoption rate of iOS6 being as high as it is.

For developers with existing customers, it is a different story.
Be sure to watch the promo video at the top. It does nothing to dispel the stereotype that the best academics are borderline crazy.. ;-)
Dude, everything is a weapon. Your brain is a weapon. Water is a weapon.

Weaponness is not in the thing; it's in the intent of the wielder.
Small world, I just started an empty GitHub repository last Friday to build a dashboard to run on my pi.
The cynic in me notes that the companies were spurred into action by the leak. Google has always showed some interest in providing transparency about government requests, but even they were not taking the US government to court over it.

The companies involved are taking these actions because the leak may have undermined consumer trust (eg. small drops in activity) in them. Perhaps even wrongly, if PRISM isn't as widespread as the initial leak suggested.
So Oracle acquired Sun to stifle MySQL develop for fear that it would encroach on their own DB.

However, by blatantly damaging the product, more and more users moved (and continue to move) to better alternatives. Thus damaging the company's reputation.

However, MySQL is hardly a competitor to Oracle. Oracle 11g is meant for use at completely different type of company. I don't get it.

Time to donate to Apache. Sound familiar?
Hmmm. But how does either stance invalidate or even weaken my "intellectual firepower"?
Yes. I don't like most gun control legislation either. My only belief regarding gun control is that if we want to do it properly we have to repeal the 2nd Amendment.
I'm going to go against the grain and say yes [1].

Static HTML hosted by nginx? How many hits do you honestly think being on TechCrunch would get you? 100,000? 200,000? 500,000? And over how much time? 500,000 requests in total over the course of a day?

nginx or any high-performance platform is designed to deliver hundreds of thousands of static responses in a second on high-performance hardware. Even a micro instance, for all its infinitesimally tiny CPU power, can deliver a small fraction of that. Let's say for the sake of argument a micro instance provides 0.5% the performance of an i7 2600K.

Knowing that an i7 2600K can easily saturate a gigabit Ethernet connection with over 200,000 small responses per second [2], and knowing that it's even easier to do so with large responses, we just have to be comfortable that our micro instance can handle your 500,000 requests per day. 0.5% of 200,000 rps is 1,000 rps. With 1,000 rps, we could fulfill our entire day's worth of 500,000 requests in 500 seconds.

Being #1 on the HN home page will yield sustained traffic in the realm of 10 to 30 requests per second. I think there's a lot of confusion about the load generated by being on the HN home page because we all have seen sites taken off-line by upvotes. That is more of an indication of architectural failures in web applications than a failure of the hardware.

[1] An important caveat being I understand that Amazon throttles active micro instances using some arcane algorithm that I've never actually taken the time to understand. It is certainly possible that they would throttle its performance so much that you could not handle a few dozen requests per second. But that too seems implausible to me.

[2] http://www.techempower.com/benchmarks/

Additional caveat: you need to not make silly mistakes in your nginx configuration.
PayTango, pay with your fingerprints
I think it's funny that the author talks about the shortcomings of categories, then compares physics to biology. The modern conception of biology rests directly on physics; evolution for example involves physical processes that affect the chemical reactions within mating animals--chemical reactions that rely directly on quantum mechanics.

Biology is still treated as a distinct science only as a form of abstraction-- because it would be practically impossible to study the mating habits of elk by studying the characteristics of the fermions and bosons that make up two elk. There are just too many starting conditions to measure and reactions to calculate. But certainly most biologists would consider themselves part of the same system of knowledge as physicists.

Likewise the concept of a separation between mind and body is dying, if it is not already dead. Today we might say that the mind is a behavior of the body, or rather that a particular set of actions by the body are collectively called "mind" by humans. The implications of this made headlines most recently in NIH's rejection of the DSM V.

Ultimately all of what we call "thoughts" or "stories" are just patterns of information that emerge from the fundamental physical processes of the universe. When we consider the universe, the universe is actually considering itself. The power of science is that it closes the loop--the universe (in part) accurately predicts the future of the universe (in part). There are no pangolins. It's all one thing.
I can't think of a legitimate reason to use online banking through TOR. A bank account is an inherently non-anonymous account, which defeats the purpose of accessing it anonymously.
I'm very late to this discussion, but SFUSD schools really aren't terrible, they're just very uneven. SF has an unusually high number of extremely highly rated schools, a large number of middling ones, and a notable number of failing schools.

To see more about this, there's a site called greatschools.net. You can list the schools by API score (adjusted by expectations based on demographics as well). What you'll see is that SF has an unusual number of schools scoring 8, 9, and 10 out of 10. Below that, there are plenty of decent performing schools. And then, there are some 1's and 2's. Pretty grim.

If you list schools in the suburbs, you'll find a similar situation. The big difference is that in the suburbs, you can convert a very high mortgage payment or rent into priority access for a top school. If you can't afford that, you're stuck in middling or poor schools.

SF uses a lottery, where parents list their choices and then get an assignment. If you only list highly in demand schools, you do risk getting a default assignment to a very low performing school across town (you can still get on wait lists). These people often do leave.

Prop H would have recommended giving priority access to district residents. It failed by a whisker. Probably the most interesting thing it revealed is that voters in good school districts favor priority access for district residents, whereas residents in poor school districts don't. Yeah, huge surprise there.

I feel some ambivalence about this, because I do see advantages to neighborhood schools. However, there was an article in reason magazine making a very surprising libertarian case for SF's school lottery...

http://reason.com/archives/2006/04/01/the-agony-of-american-...

Article is a little old, but I'd say schools have improved since it was written.
http://nauminous.net/gr/subscriptions.xml
> lots of odd libraries use things like partial functions and the error function.

This is very naughty and I hate it.
Just to make it completely clear (I hope), I'm saying a country should not shoot at entities of another county it is not in a hot war with.
I think you're generalizing a bit much.

Yes, computers were originally used for ballistic calculations, code-breaking, even.

What's different now is that virtually every computer is connected to a world-wide network which is connected to physical things. That means you're no longer having a special-purpose computer assisting a specialized weapon. Instead you've opened up all sorts of mayhem and damage to anybody with a smartphone.

An axe is also a weapon, but it's also the best thing we have to cut wood. Computers are moving into a similar role: things that have practical value which can also be very deadly. And any computer, with the right program/operator can inflict far more damage than an axe.
This seems odd. I mean, if their code was properly modular, they would have just one place where they "fetchUserIdByName(userName)", which returns one user ID or null if it's not used yet.

When a new user is created, it then gets assigned a unique user ID. The email address is assigned to that user ID.

Then, if they do a password reset on user = "bigbird", it should do the exact same lookup to find the email address.

The security bug was not really about having an improper function to do unicode translation. It was more about having different functions for the same check, simply because they were in different parts of the code.

Modular code is just so much better on all fronts, including security.
I'm not entirely sure that this is what has me worried. The government should be using the same tools I could rent from Russian botnet owners and a geolocation service.

What has me scared is that the people directing this don't actually understand it all. They don't understand Big Data analysis and why that requires all the phone records. They don't understand how boring a concept geolocation is, or in fact how boring a database of possible attack vectors is.

It's all magic - magic they can control if they just pass another law abolishing some silly, antiquated civil rights that only pertained in the age of musketry.
Oh, and they are YC backed.
re: [1]... Right. In fact, this morning I think we heard this is definitely policy and not technology. We were told that for this to happen [paraphrasing from memory] "One person would have to break the law [analyst], his boss would have to break the law [because he's supposed to approve the access], and remember this entire process is 100% auditable, so we'd catch them for sure."

Of course, this isn't remotely reassuring for a bunch of reasons. Most of all though, I'd be curious to hear more about how the auditing process works. He kept saying "auditable" I noticed, not you know... "actually audited".
Jony Ive’s icon grid in iOS 7 is wrong
What does that mean? Reaching an audience today takes money so a individual who wishes to be heard will need to raise money from her like minded citizens. Are you suggesting the the EFF should not be allowed to buy issue-oriented advertising during an election season?
You may want to check out their wiki: http://seeks-project.info/wiki/index.php/Contributing_code
Most likely explanation is that they acquired Sun for their hardware line to directly compete against system integrators like HP. MySQL, Java, etc. just came as part of the package.
For as much as I'm familiar with the CU vs. FEC case, the reasons don't stack up all that well for corportation's 'right of speech' in this context. Trevor Potter I think very reasonably explains why here: http://www.pbs.org/moyers/journal/09042009/watch2.html

Mainly, that it's essentially overstepping the speech of the less powerful. It results in the poor having unequal, lesser freedom of speech.

I would have expected you to be on my side on this issue, as you seemed to be more of a 'spirit of the law' guy rather a 'letter of the law' kind of guy.
The Curse of the Network Effect
Good grief Mike Rogers is a windbag. His opening statement to the hearing is a pretty good indication to me that he/they intend to investigate nothing, but rather to distract and deceive the public wrt to their activities.
"For as long as there is a war on terror"
Indeed, and communicating that clearly and effectively is something that we don't always succeed at. This is the reason why, on many occasions I had to resist fairly vociferous requests that we split up the parallel computing code from the shell, and also all the clients.

In the future that may make sense, once our internal protocols and APIs are so stable that we can do so without breaking functionality just as a way to help decouple development. But as a way to think about computational workflow, these pieces are all part of a coherent vision. It's just one that we don't always communicate clearly :)
so basically they are trying to copy the flat design of Windows 8
You are implicitly assuming that there is nothing that the government legitimately needs to keep secret. Can you justify that assumption?
http://www.thereisnopagefold.com/
You are right about nginx and it's performance. The only problem is that micro instances don't only have low cpu power. But also only a cpu boost. If it's get hit with multiple request after each other, the cpu boost is exhausted and the requests will pile up.

For a static page, S3 hosting of the html file is way more efficient.
Seriously, java? On the modern web?
More like their conquer and receive tribute strategy started to not work any more and military technology and techniques were transferred to their conquered territories.
I'd like to point out that even though not every website accepts unicode characters on registration, some software such as vBulletin let the administrator/user to replace the username with such characters once the user is signed up.

You may not create as much havoc as in the original post, but some level of confusion at least.
The organized crime in the Soviet block was put away but not eradicated (https://en.wikipedia.org/wiki/Vor_v_zakone .) Which, of course, resulted in a shitstorm after the collapse of USSR.
I tend to agree with you (not on the basis of facts, but on hunch).

One thing about your calculations I would challenge is that 500,000 requests per day is 1,000 rps. If a site gets 500,000 requests because it was on TechCrunch for example, then the traffic flow is likely to be lumpy rather than smooth, with an initial very high peak requests per second declining over time.

The point being that you can't plan for traffic by dividing requests per day into requests per second. You need to plan for peak requests in any given second in that day, which is some number up to the total, hard to work out what.
"'Probably' is probably an understatement" is probably an understatement.

Oh dear, I think I've broken it.
> I don't think the evidence we have is reliable enough to call someone "wildly misinformed" or "intentionally misleading", though.

Perhaps not. However, my original challenge to rayiner's comment has produced far more meaningful and mostly-cited comments. Could it have been less inflammatory? Absolutely. Would it have produced this discussion if it had been? Uncertain.

The original comment did not add any value to the post. I have never read Orrin Kerr's writings and both of you citing him caused me to do so.

Perhaps citing Kerr in the original comment, as he has well regarded opinions on the subject, would have been additive as I assume rayiner intended to be.

After all, if we don't challenge for citation and additional information, what are we doing here?
Do you mean a micro instance held up fine?
Why does NSA endorsement of an encryption scheme mean anything, after hundreds of thousands of man-hours have been spent auditing and attempting to break those systems?

Auditing is more important than origins. See also, Tor.

The days of DES S-boxes are behind us, and in fact, the NSA's meddling helped the security of that scheme, though that fact wasn't known until decades later.
You're right about what the 4th amendment really says, and it's so spectacularly inane that I would never believe that educated adults could be fooled if I hadn't seen it personally. It really does just say "the government cannot search you unless the government deems the search reasonable or the government writes a piece of paper saying that it can conduct a search." And people sincerely think that is in any way a protection of rights.
The JVM situation
This could be a new freedom index: How many bodies are required to stop the truth from getting out?
Yes fixed for me as well!
If you host from S3 does that mean that we cannot have things like forms for example - because all requests to the domain are going to S3?
Rand Paul accuses James Clapper of lying to Congress over NSA suveillance
In short, they'll price beer in BTC as soon as their suppliers price their beer in BTC.
I love how each of the slider images is from the introduction paragraph.
Pretty soon NSA employees won't be allowed to bring small pocket knives and shampoo into the office.
HyperLogLog Venn diagram in JavaScript
Unfortunately, I can't run KVM on my Windows workstation... :(
The Reminders and Events panels both use EventKit which only added reminders support in iOS 6. Also the high adoption rate of iOS 6 makes it not worth while to support older versions.

I've spent many hours on other applications, mostly Mac, where the time spent making something backwards compatible was never really worth it. Example: I worked on getting fancy animations in an app that had to support Panther, which didn't even have NSAnimation support. However at this time Leopard had just came out and had all the new Core Animation hotness. Needless to say I would have saved countless hours if I didn't try back porting new features to older OSes no longer supported by Apple.