Hacker Newsnew | past | comments | ask | show | jobs | submit | andyroid's commentslogin

> never heard anyone suggest the best sports teams should stop competing when they've won enough, or that the best inventors should stop, or the best artists

While they want you to believe that, there’s no correlation between being rich and being best, or even good, at anything. You’re not the best athlete because your mom and dad were the best athletes. But if your parents were wealthy, you’re wealthy.

If they want standards to be applied ”consistently”, great. They can start by paying their taxes.


If you have issue with the taxes they pay then you have issue with the tax code, but that still doesn't address any problems or apply any consistent values. How does moving money from one rich person to the richest organization in the world achieve any goal?


Does a hair transplant really count as a cure though? It’s more akin to a pricey baseball cap.


A transplant isn't any more a hat than having natural untransplanted hair is like wearing a hat. A hair piece could be argued to be something akin to a pricey hat, but a transplant is naturally growing hair that has simply been moved from a donor area.


it's hair and it grows so imo it's a cure


It only works for some people. You need to have a good donor area and a lot of hair. And even then transplant can be rejected. Doesn't work for majority of bald people in their 30s/40s.


You are also most likely going to stay on Minoxidil and Finasteride just to stay safe and not lose your "investment". A botched hair transplant can look pretty terrible once you lose the original hair around it.


Not sure why that matters, but OpenFGA is an implementation of Zanzibar, which isn't exactly new. There are many similar implementations to choose from should one want to model authorization via a graph database.


Bundle servers provide a centralized "data plane" decoupled from the distributed component (OPA). You don't need to rebuild your policy any time data changes. Just push a new bundle with the data that changed, and OPA will fetch it as configured — either periodically or directly if long polling is configured.

https://www.openpolicyagent.org/docs/latest/management-bundl...


Where a company is founded is irrelevant with regards to the GDPR. If they have users in the EU, GDPR applies.


Yes but it matters for how the law is capable of being enforced. The EU does not have as much leverage over entities that have no legal presence there. This is not a value judgment, it is just descriptive.


That's not how sovereignty works.

The EU has no jurisdiction whatsoever over a service outside its borders. It can ban various apps and then penalize its citizens for using them (or just block them) but it can't dictate to companies in other countries what they can put on the internet.

In the extreme case, consider that Tencent and other Chinese companies with social media platforms are required by law to collect user information that violates the GDPR. Do you think they'll follow the laws of their own country where the business is based or EU regulations?


Looks great! Love the OPA integration.


Thanks, I appreciate the love <3 We love OPA :)


They should have just named it errlang.


lol


How about the fact that not all, or even most, dev machines run Linux, which is the only platform podman supports?


I don't use podman, but a quick search shows that you can install podman on Linux, Windows, and MacOS. Are you referring to something else?

https://podman.io/getting-started/installation


> Podman is a tool for running Linux containers. You can do this from a MacOS desktop as long as you have access to a linux box either running inside of a VM on the host, or available via the network. You need to install the remote client and then setup ssh connection information.

Literally the first non-title element in your link. Just because the client is cross-platform doesn't mean the entire solution is turn-key cross-platform.


That's exactly what docker desktop does as well. A Macos or Windows client that runs docker in a Linux VM. There is a really limited concept of container on Windows, but it's far from being great and since not much people use Windows in production to run apps, this is not really usefull.


Well yeah, sure, but Docker for Mac/Windows installs the VM, sets up host-guest file shares, papers over networking and VPN stuff, etc.

I was going to say that installing Podman on macOS/Windows leaves the VM as an exercise to the user, but per another comment, there's podman-machine[1], a new-ish built in to setup a VM. However, it's apparently already deprecated (?) and recommends simply 'Vagrant' as an alternative, so seemingly setting up the VM is back to being a user exercise for Podman?

[1]: https://github.com/boot2podman/machine


The integration (the Linux VM is transparent to the user) is what makes all the difference.


This is currently its big weakness in my opinion.

Most of the problems that devs are facing with docker are not actually docker but this layer that tries to abstract the VM. So in the end, it's quite common that you have fix things in the VM or get rid of it. I don't know if docker on WSL2 makes the matter better, none of the devs in my team using Windows can use it because of the memory usage bug.


Oh yes, whilst Docker was created to help developers to think operationally, it (ironically) ended up helping Developers to not think about operations at all.


If you read the instructions, they basically say that you still need a Linux VM or WSL environment to run Podman in. Which makes it not a complete replacement for Docker desktop, which handles the VM for you. So OP isn't wrong.


Podman 3.3 and up has `podman machine`, which is supposed to do this for you...


Apparently it's already deprecated https://github.com/boot2podman/machine ?


That's an unrelated tool named "podman-machine". "podman machine", as in the subcommand to "podman" proper, is not deprecated.


So that's a couple hours for the first dev to make a list of WSL setup instructions or a VM template, and 5 minutes each for every dev after.


Does Mac have any sort of built-in VM framework like Hyper-V?

I did not know that running basic Linux VMs was something you could do without downloading VMware or Virtual Box - which isn't as easy as just running a few scripts (especially in corporate environments where Brew and other tools might not be so readily available to all employees).


> Does Mac have any sort of built-in VM framework like Hyper-V?

Two, actually. Hypervisor.framework [0] to build virtualization solutions on top of a lightweight hypervisor, without third-party kernel extensions, and Virtualization.framework, to create virtual machines and run Linux-based operating systems.

[0] https://developer.apple.com/documentation/hypervisor?languag...

[1] https://developer.apple.com/documentation/virtualization?lan...


Thanks for the tip. I will have to take a look. It'd be nice if there were some github repos out there that leveraged this to make experimenting with Linux distros (including Desktop environments) as seamless as it is with VMWare Workstation - where things like high DPI resolution, copy & paste, etc. just work without too much trouble.


I meant that for windows. I don't have enough experience with mac to give great answers.

> downloading VMware or Virtual Box - which isn't as easy as just running a few scripts (especially in corporate environments where Brew and other tools might not be so readily available to all employees).

Docker Desktop needs the same level of access, because it runs virtual machines. If you could install it on your own, can't you install those on your own? If it was centrally managed, then IT can switch to one of those programs instead.

> Does Mac have any sort of built-in VM framework like Hyper-V?

Yosemite added Hypervisor.framework, I guess?


> That's cool, until you realise that the majority of the cities outside of the USA doesn't look like Miami Beach. I highly doubt that any "self-driving" car could travel through Munich today without killing at least a couple of pedestrians or cyclists.

Yeah, simply stating that they aren't yet at GA status seems pretty uncontroversial. Gotta start somewhere though :)

> BTW, only because sometimes I feel safe enough to ride my bike without hands on, it doesn't means I have a self-riding-bike.

Right, that was pretty much the point of the article.


> Right, that was pretty much the point of the article.

Agree. Nevertheless there is a flood of articles showing videos recorded under similar conditions but missing this point.


Yeah. It's also used in some RPG games to denote quests which are done independently of the main quest.


Pretty sure that's the origin.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: