Hacker Newsnew | past | comments | ask | show | jobs | submit | pastage's commentslogin

This sounds like a culture issue in the development process, I have seen this prevented many times. Sure I did have to roll back a feature I did not sign off just before new years. So as you say it happens.

Both are illegal, if you just hoard you will never know if what you have is useful. Only way to judge that is by letting people use it.

I have not read the sofa problem I am not qualified to even talk about it.

Given a rectangle tunnel, twist it so the walls become the ceiling, and also turn it in the same time. Seems like the same problem..

What is solved here is maximum shape, it feels like moving a object like this in 3D is basically a robot planning thing which in it self obviously magic for me. Finding a continuous path in a configuration space is the easy part, but then you have to understand how that changes when your shape changes.


One process per sandbox will get you far, if all you want is to execute something. I would go as far as say it is pretty easy.

I want to execute untrusted code. This makes it very difficult indeed.

What's wrong with V8?

You could also look at GraalJS. It's shipped as part of the Oracle Database, there's a security team, patching process etc. It's used in production by Amazon amongst others. It's got flexible sandbox features too.

https://www.graalvm.org/latest/reference-manual/embed-langua...

The way it's written is good for security as well:

https://medium.com/graalvm/writing-truly-memory-safe-jit-com...

Disclosure: I sit next to the GraalVM team.


The challenge with V8 is finding a wrapper for it that doesn't come with a big warning NOT to use it as a sandbox for untrusted code - here's the workerd one https://github.com/cloudflare/workerd?tab=readme-ov-file#war... and here's the PyMiniRacer section: https://bpcreech.com/PyMiniRacer/architecture/#security-goal...

I looked at GraalVM but was put off by the licensing situation: https://www.graalvm.org/22.3/reference-manual/embed-language...

> GraalVM Enterprise provides the experimental Sandbox Resource Limits feature that allows for the limiting of resources used by guest applications. These resource limits are not available in the Community Edition of GraalVM.

Part of my requirements for a sandbox are strong guarantees against memory or CPU exhaustion from poorly written or malicious code.


Licensing has changed since that release. You can use the EE for free, both for personal and commercial use cases:

https://www.graalvm.org/latest/introduction/#licensing-and-s...

> Oracle GraalVM is licensed under GraalVM Free Terms and Conditions (GFTC) including License for Early Adopter Versions. Subject to the conditions in the license, including the License for Early Adopter Versions, the GFTC is intended to permit use by any user including commercial and production use.

It has all the sandboxing features you might want. I don't know if the disclaimers on the other engines changes much, open source software always disclaims all liability. Nobody will stand behind something security sensitive unless it's commercial because otherwise there's no way to pay for the security team it requires.


Now run the "Which programming language is fastest?" Benchmark on all of them.

https://benchmarksgame-team.pages.debian.net/benchmarksgame/...


You can use this docker image with all the pre-built binaries as a starting point: https://hub.docker.com/r/ivankra/javascript-zoo

Just keep benchmark code limited to standard ECMAScript, don't expect any browser or Node APIs besides console.log() or print().


Having spent only a week triaging Mozilla bug reports I do not see how a different ticketing system makes it easier. It is just hard work.

Do you think the things that makes an edition special goes missing while converting to e.g. Standard Ebooks. I remember both the The Castle and Das Schloss like they had typesetting that helped me in perceiving the feel of the book. Is there anyway to preserve that feeling and still keep within the bounds of standardisation you adhere to? (I did a quick look through my copy and it does not seem to be much that makes it unique really, just the size of the book, and the chapter heading graphics..)

Do you know if the project try to look at other languages at all?


Nothing particularly in The Castle, from my production of it. As this was not previously PD there wasn’t any Gutenberg (or other) transcription available, so I did my own from the OCR of the original scans. A large part of the feel of the work, to me at least, comes from the extreme sentence / paragraph lengths though.

We do have a default typography across all our works (the “Standard” in “Standard Ebooks” refers to a standard imprint; think Penguin) but we usually retain specific famous things where possible in a reflowable format. For example, the Mouse’s Tail in Alice’s Adventures in Wonderland,[1] or the letter in E. A. Poe’s “Thou Art the Man”.[2]

We don’t take on other languages, no. Our tooling[3] and style guides[4] are tailored specifically to English. Absolutely nothing stopping another project from forking the codebase (it’s GPL-3) and giving it a go.

[1] https://standardebooks.org/ebooks/lewis-carroll/alices-adven...

[2] https://standardebooks.org/ebooks/edgar-allan-poe/short-fict...

[3] https://github.com/standardebooks/tools

[4] https://standardebooks.org/manual/


It seems you may be making assumptions that the formatting and typesetting of any particular edition were intentional or even deliberate on the part of the author, not any number of people, from editors to printers, who could and would have influenced those things for various reasons.

Something I am rather familiar with is brought out by your mention of the German edition/title; that the continental market seems to generally produce books that are far more densely formatted, i.e., smaller font and typesetting, thinner pages, and leading to overall tighter book formats. I actually appreciate it when, e.g., a book is 1/2 the size and weight, and usually also made far more durably; but it will invariably compromise any author intention related to the arrangement of the lettering.

Maybe you can confirm that based on what seems to be your English and German editions of the same novel.


Well that depends, there are obviously authors that care about these things. I have no idea what Brods intentions were with the book, and if he cared about layout.

The German and Swedish editions I read were similarly typeset, and the first scan I found in English felt similar. What I wanted to know was if there was some thought into it, because the website is nicely designed so striving for a unique typesetting strategy could be a goal.


The formatting they are referring to is not that of the original text but that of the Standard Ebooks project.

> tighter

I found it amusing, considering all those memes about German words with 35 letters each.

And, as I get older, I began to consider letter size relevant to choose a book edition. Gave up buying new books and went for used, older editions with bigger letters.


I seem to remember that they had some very opinionated rules at the beginning regarding allowed spelling and typography. Some of them felt distinctly American to me. I don't know if that's still the case.

Apart from that, they produce nice editions.


It’s en-US typography (flavoured by the Chicago Manual of Style). Spelling is based on the original book, though some modernisations are made. Commits with these always start with [Editorial] for easy later reference, and are typically things like to-day -> today.

My experience is that very few people understand what I am saying if I really explain things. It is usually better to say obvious nonsense that gets people work in the same direction. I most masscommunication is meaningless until you find the meaning yourself, there are some rather wonderful educators that prove I am wrong. I can only think of one that I have met, and he spent 50% of his time talking about "unrelated" topics. He died, teaching to the end.

Use mlock as long as it is allocated it is going to be rather deterministic, of course you might be running in a VM on an over commited host. I guess you can "prefault" in a busy loop instead of only on startup, waste memory and cpu!

> speaking the truth about atrocities committed

Why are they doing this, in what context?

Edit: from reading the thread I think this is about the war against Hamas and the dire situation on the West bank.


It's inaccurate to say there's a war against Hamas. We have enough video evidence by now, posted by the people doing the acts so there can be no doubt to its authenticity, to see it's a war against civilians.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: