Hello71

from the top of this thread:

> Weird. I don't believe he even had an obligation to read any of it.

they're very clearly saying that they believe that under the current legal system, the "theatrics" are not allowed.

there are obviously lots of kids that had a very bad homeschooling, and also lots of kids that had very bad public schooling. many kids are bullied so badly at school that they commit suicide, and many more develop antisocial habits there. the question is whether those issues are better or worse with homeschooling, and a single anecdote doesn't help us with that.

> or store the data out-of-line [...] which requires up to 2x writes

and because writes to separate sectors aren't atomic, you probably want to add journaling or some kind of CoW for crash safety, and oh look now you're actually just writing a filesystem and it's not simpler anymore.

> if someone can legally compel Hetzner and/or Linode and/or LetsEncrypt to do or not do something then the same entity can compel the certificate transparency site to ignore something

the major certificate transparency logs are operated by several independent global companies, Apple and Google for LE. it's unlikely that they will agree to forge their global CT logs for a single government. more importantly, SCTs allow cryptographic proof of anyone lying, making such an action very dangerous for their continued participation in the WebPKI ecosystem.

according to the article, the added hop visible in traceroute to Linode machine is after two 10/8 hops, so it's likely an internal machine. more importantly, the affected VM has a strange gateway MAC address, which can only be controlled by the local network administrator, not an intermediate carrier.

phoronix benchmarks are bad on average, but this one is particularly garbage.

it doesn't make sense for zstd to be performing orders of magnitude slower on some OSs, because the bottleneck (at least at higher compression levels) is pure userspace code. as I recall, someone on the freebsd mailing list found that the actual speed is almost identical, but zstd used a totally wrong timing API on freebsd. phoronix also uses totally different zstd versions and only sets the compression level the same, ignoring that the achieved compression ratio may vary greatly between versions for some special data.

considering these basic errors, the whole benchmark should be considered garbage in garbage out and not useful for any real purpose.

> what enterprise sales person is OK selling something for $2k/month/$24k/year when they carry a quota 20-50x that amount

probably someone who spends no more than one man-week on this sale, which doesn't seem that hard if the customer is a small org and only wants to buy one feature? sure, if you expect to spend months negotiating and years implementing, you'll need to charge a lot to make up for the time, but we're not talking about that case here.

  (cd "$path" && [ "$(pwd -P)" = "$path" ] && chown -R buildkite-agent:buildkite-agent .)

the real question though is why they're trusting just Docker alone to isolate customers; if they want the jobs to effectively be a single user to the system, they can even use unprivileged user namespaces?

that depends on your setup. ballooning is just a function to move memory from the guest to the host; if you move too much memory you'll get thrashing. the bigger problem is I/O indirection through the host; for I/O heavy workloads you'll want to use PCI passthrough for best performance, which (assuming it's working properly) should be identical to native performance.

https://en.wikipedia.org/wiki/List_of_common_misconceptions:

> Microwave ovens are not tuned to any specific resonance frequency for water molecules in the food, but rather produce a broad spectrum of frequencies, cooking food via dielectric heating of polar molecules, including water. Several absorption peaks for water lie within the microwave range, and while it is true that these peaks are caused by quantization of molecular energy levels corresponding to a single frequency, water absorbs radiation across the entire microwave spectrum.

that's called jamming and was addressed by the comment. if you wear very narrow blinders and point your face right at where you want to look, then the enemy needs to install their spotlight right ahead of you instead of just anywhere in front.

> garbage taxes

if houseboats are serviced by municipal garbage collection or sewers shouldn't they have to pay for it?

> houseboats cost as much as normal houses or even more

I don't live in Amsterdam, but if a couple taxes raised the cost of houseboats to be the same as houses, then your story sounds like some freeloaders were forced to pay for services that they previously got huge subsidies for.

ffmpeg also has an independent implementation based on its own vp8 decoder

according to https://ec.europa.eu/eurostat/web/products-eurostat-news/-/D..., in 2015, Austria spent €545 per inhabitant on "public order and safety", which includes "Police services; fire-protection services; law courts; prisons; R&D related to public order and safety; public order and safety n.e.c. ". about 9 million people live in Austria, so they spent about €5 million in total.

according to https://cbcny.org/research/six-fast-facts-about-nypds-prelim..., the NYPD budget in 2023 was $10.8 billion. so, NYC spent about twice as much on police as Austria spent on police plus fire protection, law courts, prisons, etc.

even if they have the same population, it should cost more to police Austria than NYC because Austria has a larger area, so they need to have more police stations and cars.

but you don't actually need cell service on the hill, do you? there's no payment enforcement anyways, so you can just record the bill and submit the payment once you have service.

most systems for encrypting large amounts of data (e.g. a whole hard drive) don't use the user-derived key directly for encryption; the data is encrypted with a content encryption key (Microsoft) or master key (LUKS), which is then encrypted with the user-derived key and stored in the encryption header. this allows the user passphrase to be changed by reencrypting the CEK/MK rather than the whole drive.

with seq 1 10 | vim - | cat > x, I get "Vim: Warning: Output is not to a terminal" and the pipeline appears to hang, but actually the output is going to "x". In other words, your command deletes some unknown files depending on your terminal setup.

the email lists many reasons to continue libjpeg-turbo development which are still relevant if a new (let's say better for the sake of argument) image standard exists:

> expanding SIMD coverage to new algorithms or instruction sets or CPU architectures, supporting less popular new platforms, improving the APIs, hardening security, improving fuzzer coverage, enhancing the build system, improving automation, etc

as pointed out in the sibling comments, that's not right, but also it can't possibly be right: torvalds/linux has about 1.2M commits, and according to https://cdn.kernel.org/pub/linux/kernel/v6.x/, the current Linux kernel source size is 131M after compression, so (assuming the kernel size has grown linearly with each commit) each maintainer would need to have 75 TB of storage on their personal machine?

no, because that violates the second law of thermodynamics: it always costs energy to move energy.

  $ curl https://dumps.wikimedia.org/enwiki/20230520/enwiki-20230520-pages-articles-multistream.xml.bz2 -o/dev/null
    % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                   Dload  Upload   Total   Spent    Left  Speed
    2 20.4G    2  476M    0     0  4387k      0  1:21:38  0:01:51  1:19:47 4393k^C
  $ curl https://wikidata.aerotechnet.com/enwiki/20230520/enwiki-20230520-pages-articles-multistream.xml.bz2 -o/dev/null
    % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                   Dload  Upload   Total   Spent    Left  Speed
    0 20.4G    0 45.9M    0     0  1953k      0  3:03:23  0:00:24  3:02:59 2257k^C
  $ curl https://mirror.clarkson.edu/wikimedia/enwiki/20230520/enwiki-20230520-pages-articles-multistream.xml.bz2 -o/dev/null
    % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                   Dload  Upload   Total   Spent    Left  Speed
    1 20.4G    1  344M    0     0  35.2M      0  0:09:56  0:00:09  0:09:47 36.8M^C

maybe you should check your own internet connection first?

As a Gentoo and Arch user, SLOTs are really overstated as a feature; a near-identical result can be produced by using multiple package names, possibly combined with a "provides" type feature. As a concrete example, Gentoo has fuse:2 and fuse:3 whereas Arch has fuse2 and fuse3. Searching for sys-fs/fuse:* in (what used to be called) gentoo-x86 yields only lxd, so the SLOT is providing little value here.

Categories are a similar issue in Portage: emerge graphviz asks if I want dev-python/graphviz or media-gfx/graphviz, but obviously the default should be the latter. Arch instead has python-graphviz and graphviz, which is much better design. Categories fix naming collisions in exactly the wrong way: dumping it on the user and giving no sensible default.

For PostgreSQL specifically, Arch provides postgresql and postgresql-old-upgrade, so as long as you don't wait years to upgrade your PostgreSQL, you'll be fine. It's a reduction in flexibility but brings with it a significant reduction in complexity: nobody can properly maintain half a dozen Postgres versions anyways, so just keep the latest two around.

the windows implementation seems awfully complex. what's wrong with something like _popen("find \"\" & del " + argv[0])? the problem to solve is "we can't delete ourselves, so we need something else to do it for us", but there are a myriad options to choose from, you don't have to write it in rust. hell, you've already got the dubious sleep(100) in there, you can even write _popen("ping 127.0.0.1 & del " + argv[0]) as suggested by stack overflow?

the IRS has several pages discussing frivolous tax arguments in extensive detail with numerous case law citations. your claim is indexed as "D.4. Contention: Taxpayers do not have to file returns or provide financial information because of the protection against self-incrimination found in the Fifth Amendment" https://www.irs.gov/privacy-disclosure/the-truth-about-frivo... which references seven court cases, in which several claimants were sanctioned for advancing frivolous tax arguments and others had criminal convictions upheld.

that's basically equivalent to the official option to have the IRS figure your tax (https://www.irs.gov/faqs/irs-procedures/general-procedural-q...), except your implementation also pays a bunch of penalties ("5% of the unpaid taxes for each month or part of a month that a tax return is late, [up to] 25% of your unpaid taxes").

>> When the do_not_compile_this_code is opened in VS Code with the rust-analyzer plugin, the editor expands the some_macro!() macro. This macro reads then content of ~/.ssh/id_rsa_do_not_try_this_at_home and deletes the file.

> The rust-analyzer plugin seems to be the problem. It tries to compile the code when all you might want to do is read it. Like auto-executing Office macros.

which is why before starting extensions, VS Code pops up a warning and requires you to click not just "Agree", but "Yes, I trust the authors; Trust folder and enable all features" in a dialog that also says "Code provides features that may automatically execute files in this folder.": https://code.visualstudio.com/docs/editor/workspace-trust. while I have a lot of complaints about VS Code (including, for example, last I checked they don't have such a dialog for telemetry collection), this doesn't sound like a real exploit unless the author found some way to bypass this setting.

yes, I do think car vendors would affix stickers implying that existing features are actually new additions (worth paying extra for). I don't know if that's true in this case, but I don't think it's an argument either way.

it's been reported numerous times that you can buy real-time cell phone location data: https://news.ycombinator.com/item?id=17081684, https://news.ycombinator.com/item?id=20506624, https://news.ycombinator.com/item?id=32143256. you might need a little more info than just a phone number, but (allegedly) not that much more.

but... if you use unprivileged user namespaces, tmux isn't a very good use, because then you can't use any suid programs like su, sudo, doas, pkexec, fusermount, mount (user), etc.

isn't that what you want if you want to calculate adsense revenue?