Australians accept lira, or do I have to convert to Foster's beer for payment?
You do know that no Australians actually drink Foster's, right? That's the stuff we flog to foreigners.
You drive a hard bargain. I'll send you a six pack of beer we don't drink and beer we flog to foreigners. One six pack of Foster's and one six pack of Bud Light.
Drink the Bud first and then use the Foster's simultaneously wash away the taste of the Bud, drink something that resembles a beer, and be both humbled and amazed by the fact we can make a beer so crappy it makes you enjoy the crappy beer you guys produce. Then be thankful that I didn't send over Bud Light Lime. Yes, that's a thing and it probably tastes as bad as it sounds.
I'm American and I could probably get about 15 million lira together if you give me a few days and will take a check.
On second thought, I'm not very well traveled so I'd appreciate it if someone could help me with the monetary conversion. Australians accept lira, or do I have to convert to Foster's beer for payment? If so, I'll let them keep the change and just give them the entire six pack.
That's the kind of rich I am, ladies, and there's more where that came from.
When I took it in 2002, it was C++ at the time. I think they switched to Java a year or two later.
You're close. I took the AP test the last year it was C++. I was also taking Java with the same instructor, same room, the next period, so I kind of had the best and worst of both worlds. But the instructor was top notch and is regionally well known - I'm very sure he was the primary factor in nearly all of his AP students both passing the AP test and having a job in the industry. Those two classes got me through my first two years of college and put me in a unique position for learning low/high level languages ever since.
That was 2003 when even the standard library was not nearly as defined and the boost/twisted libraries were still in their infancy. 2004 was the first year the AP comp. sci test was in Java and, IIRC, it was Java 1.4 when it was still reasonably fresh. These days I use primary Java and stumble through a handful of dynamic languages on an every day basis, but C++ still holds a special place in my heart - it's a shame I can't realistically use it in our production code; I really miss it.
You know the nice thing about Wikipedia? When you find poorly written or factually incorrect articles you can actually do something about it instead of just whining about it on an unrelated website.
The other nice thing about Wikipedia is that the original author can be notified via RSS/ATOM that someone has changed their factually incorrect page and they can revert it in moments. A lot of people whine about that on unrelated sites because they're done spending their own free time fighting over fiefdoms when they can say "screw it" and just not hire people that come to an interview armed with whatever they read on Wikipedia.
What I'm saying is, while your solution absolutely makes sense in theory, many have found it unsatisfactory in practice but the flip side is that it retains a positive value as a filter; for that we thank the people that insist on misinforming whomever believes that a wiki is an authoritative source.
Because I'm hard pressed to think of a single "product" (and since most of them are free betas that's debatable) which Google has never treated any differently. It's their service, you're just using it in whatever state they give it to you today.
You seem to be confused about their product. You are their product; the advertisers are their clients. That's the service they don't mess with. There's a reason that they don't understand why enterprise customers need Java in the browser or wish they'd stop crying wolf on every SSL cert - selling services to a business isn't their model or one that they really want.
Probably because those customer would say "we need Java to access SuperMicro's IPMI interface on our internal networks. That's the same reason we don't want to click three times every time we use a self-signed/vendor signed cert or a cert that uses older crypto. We're on our internal network. Stop breaking stuff for no reason and fix the outstanding bugs we have open."
How about users of enterprise software, managed switches, Cisco gear, and embedded appliances for whom their shiny Windows 7/8/10 (for those corps that would run 8 or 10 - I'm sure they exist somewhere), Fedora 22, Mac OSX-latest still can't access said software, hardware, appliances? You do understand that I didn't write SuperMicro's Java interface and I'm not at will to upgrade to software that doesn't exist on something I didn't make regardless of how shiny my frakkin' operating system is, right?
You are correct, however about not being "forced" to do anything. What is going to happen is that when all of our stuff stops working on Chrome, we'll all use Internet Explorer because that's all that will work and IT will start enforcing it. Meaning I can count on the day where IT officially won't support my Linux laptop even though they turn a blind eye right now because I can operate without Windows. Same goes for my boss that runs a Mac.
It's a win for management who have been taking a political beating/PR hit for the move from Google Accounts for Domains (or whichever the enterprise suite is) to strictly Microsoft though. Which is a bit troubling since prior to acquisition there was hushed talk about the new management not being too keen on us in the R&D department using, writing and contributing to open source projects.
In summary, breaking an interface to other things breaks stuff on ALL supported platforms, because end users can't upgrade software they didn't write or compel their upstream provider to care what Chrome does; it doesn't matter what version of which operating system you're running. There are also unintended consequences for breaking stuff that corporate customers use, and those of us that have a foothold with Open Source in the company are collateral damage.
You did get the part where he's talking about using Java for work, in a secure environment, yes? You aren't seriously claiming that everyone that uses SuperMicro servers doesn't care about security because their IPMI interface is a Java webstart application, are you?
I mean, for my own part, I have two choices when doing hardware tests of our appliance builds: I can drive across the Twin Cities from my home office and stand at the R&D rack in a cold and noisy staging area for several kickstart/chef bootstrap/chef converge cycles. Conversely I, as a professional, can assume the risk of using a Java IPMI interface to access a server I physically took from a box and placed in the rack of a secured staging room over a secured subnet accessed over a secured VPN connection on my development VM (with a weekly maintenance snapshot, taken every Monday morning, which I don't hesitate reverting to 'cause SystemD, but that's another story), using HTTPS with the SSL cert from that box I physically placed in the rack.
If you are somehow cracking past all those barriers into the imaging subnet of our R&D department's subnet, you've already got half a dozen usernames and passwords and have changed a cert that lives on a box whose OS has an average lifespan on the order of an hour (that is, owning that box isn't incredibly useful in and of itself). Even at that point, the new SSL cert is going to tip me off. But if somehow you managed to get past all that, with all that knowledge just to infect my desktop VM, it seems to me that you already have the keys to the kingdom, so to speak.
That is all to say, just because someone has, or even chooses, to use Java doesn't mean they don't care about security. I'm sure I don't need to explain to you of all people (I read your username and it immediately rang a bell; a quick Google search confirmed my suspicion - I run a lot of code you wrote, and most likely vice versa but to a much lesser degree)that security is about defense in layers, attack surface, vectors and risk/reward. I'm sure there are plenty of other people that use Java in their professional lives that understand and accept the risk of how and where they use it.
As a data point to back you up, here in the Twin Cities (West Saint Paul, at least, I haven't checked in Minneapolis - if I'm going into the office I'm taking my car) there are some bus routes to the shopping district that are free but have a 'suggested donation' amount of $1 or something. They're already mostly paid for, but if you can spare some cash they appreciate it.
Even if you've got the cash and a car, it's a cheap designated driver or as a good way to beat the traffic from the hockey arena after a game (buses have semi-dedicated lanes during congestion). If you want to go intra-city there's also the light rail that goes between Saint Paul and Minneapolis; it also has a station in the Minneapolis Saint Paul International Airport which is convenient for many reasons.
Did it actually evict all the page cache or did you hit the overcommit limit to trigger the OOM killer?
I have mixed feelings about the killing of processes; while I don't necessarily agree with the method, I can't argue with the results. Still, it'd be nice to try a SIGHUP and SIGTERM first.
So far as I know, by default, Linux still over allocates up to 50% of total RAM (not 50% of available memory if you count virtual memory). This parameter can be tuned or set via sysctl. But, yeah, I love Linux, but it's got memory management issues that I don't have on other operating systems. I've found I can usually tune around them somewhat.
Although I've never found a way to have it do what I'd really like and dedicate lots of memory for buffers when writing large files. For instance, when I'm writing a disk image via dd to a reasonably fast RAID array and I've got 32 GB of RAM, I wish I could tell the kernel to not waste the RAM caching the pages I'm writing (they'll be evacuated when memory exhausts, and if I decide to compress the image, the 'end' of the file that's cached will be evacuated to make room for the stuff I've compressed), but rather to dedicate them to the buffer so that once the disk I'm reading is at the slow end of the disk, my RAID array isn't just sitting idle waiting on IO.
What you describe/is/ swapping, which makes it odd since you started with "if you are not using swap".
Care to elaborate on what exactly you did, under what circumstances?
My description is accurate. I have just been normally using the computer. Even without any swap, the HDD goes "krrrrrr..." and the system becomes very unresponsive when you begin to run out of memory. You can easily try it yourself, as it is reproducible every time.
It seems to throw out program pages from memory if it knows that they are disk-backed. It seems to be hard to trigger the OOM killer in this condition as well, even though it should happen.
I believe these memory problems can be somewhat mitigated by some hand tuning of the vm parameters "swappiness" and "vfs_cache_pressure". Unfortunately I don't have the time at the moment to setup a good test, but they're worth a shot if you find yourself in that situation in the future. Ref: https://www.suse.com/documenta...
More likely they slightly adjust the centre of gravity while the bullet is rotating. Adjusting the mass internally would be simpler and more reliable then fins.
IIRC most of our military rounds are intentionally weighted off center so they tumble after hitting a target instead of leaving a straight exit wound. I'm thinking these things might just be bullets with fins and springs to keep the flight path straight. You'd be amazed how much a little wind can affect a bullet at 100 or 200 yards, let alone long distance shots, when you consider how short the duration of their flight is and how much kinetic energy they have in such a dense object.
The problem with that plan is that so many aspects of the way the system is designed give people with money and/or time an advantage that you'd basically have to scrap it.
This is a problem?
Well, it does typically take more than a strongly worded letter. Come to think of it, last time we sent one of those to our king his reaction was much less than accommodating to our requests.
Take it as you will, but second hand smoke might not be the best example. I'm not a huge fan of Penn Gillette, but at the least I thought this was interesting if the facts are accurate - Penn & Teller - Bullshit:: Second Hand Smoke. It feels to have at least a touch of truthiness to it if you can handle Penn for 15 straight minutes (while I appreciate some of the things he has to say, he's not my cup of tea personality wise).
I'm not sure I'm qualified to comment on this. I'm a Professional Engineer in Water Resources in Las Vegas. But, I'm not a Hollywood actor, or famous or anything. Maybe we should just defer to our leaders, like Mr. Shatner, to determine what course of action we should take.
I like you; you understand your place in this world.:)
Seriously though, reasonable people that are willing to compromise never get anything done when dealing with people that aren't reasonable and won't compromise.
For future reference, if you want to comment on a story that you've moderated in I believe you can post AC without having your mod points revoked. I'm reasonably certain I've done this in the past successfully. At the very least it's worth a shot next time.
As to your last point, I was thinking the same thing. The parent post is needlessly inflammatory, accusative, with an air of superiority and without a hint of irony considering its lack of grammar, punctuation or formatting while closing with a zinger about illiteracy.
If, perchance, the parent poster or anyone else that would like a life lesson, reads this, please consider my points. I'm coming from a place of understanding. Many years ago while in college I wrote something with what I thought was a playful tone and got modded 'troll' hard. At the time I was really pretty angry about those mods. Years later I happened to come across that same story on/. and was reading the comments when one particularly rude post stuck out; it was my own from years earlier and I thought, "man, I really was being a jerk needlessly". As you mature you gain a bit of wisdom and hindsight and that's pretty much a life long journey. Take from that what you will.
Just, for what it's worth... Thanks for this (from what I can tell - I don't know the subject matter) reasonably objective, unbiased explanation.
It was actually kind of refreshing and will probably in no way get the appreciation it deserves. I would have modded it up, but my mod points expired before I got to this story/comment section. So all I can give you is a 'kudos'.
My company (specifically, my department) uses and contributes to a number of open source projects. From time to time stuff gets lost in revision control and either a commit isn't upstreamed, upstream doesn't merge pull our changes right away, the patch hasn't made it to the mainline trunk or is staged for the next release.
It's not completely uncommon for me to pull from an upstream project and hit a bug I know we patched and then have to track down that patch's merge history internally (sometimes it doesn't make it from one developer's local working copy to our git/svn server) and then see if it's been accepted upstream. It's nothing intentional, but it happens; sometimes a commit just slips through the cracks and you don't realize it right away.
But it's in the wording how they'll do that. What is "legal content". They'll find all matter of things they don't have to deliver. I mean, I'm sure there's hate speech on Facebook, so...
I'd be interested to see which distro can get their image down to the smallest (functional) size. Strip the OS down to just the absolute minimum required to boot it up, then leave it upto the docker image creators to decide what services to enable. It's a great way to minimize attack vectors, keep image size down and make the container nice and lightweight.
A few years ago for a special purposed built box, I gutted a Slackware install, modified the disk scheduler in the kernel and removed every driver and every module that my hardware didn't use. My memory is a foggy on the numbers, but I believe the install itself was under a handful of GB (with my development tool chain and libraries) and booted to run level 3 using somewhere between 64-128 MB RAM (I think it was actually in the 32 MB range, but that sounds too small for me to be confident about it) and part of that was actually dedicated to the readahead daemon.
Granted I'd never do that again, but it was a fun summer project to build a server rack when I was just out of college. These days I don't flinch to throw hardware at a problem if I think it's going to take up my valuable time and it will scale for whatever values of "N" I'm expecting to be reasonable.
I, for one, am concerned over the constant use of the words "legal content" without defining what is and what isn't "legal content" and under what jurisdictions that falls. My pet theory is that bullying and "hate speech" will become unlawful and then blocked, and you know how the government is when it has a new hammer; everything starts to look like our thumbs.
Slashdot Mirror
You do know that no Australians actually drink Foster's, right? That's the stuff we flog to foreigners.
You drive a hard bargain. I'll send you a six pack of beer we don't drink and beer we flog to foreigners. One six pack of Foster's and one six pack of Bud Light.
Drink the Bud first and then use the Foster's simultaneously wash away the taste of the Bud, drink something that resembles a beer, and be both humbled and amazed by the fact we can make a beer so crappy it makes you enjoy the crappy beer you guys produce. Then be thankful that I didn't send over Bud Light Lime. Yes, that's a thing and it probably tastes as bad as it sounds.
I'm American and I could probably get about 15 million lira together if you give me a few days and will take a check.
On second thought, I'm not very well traveled so I'd appreciate it if someone could help me with the monetary conversion. Australians accept lira, or do I have to convert to Foster's beer for payment? If so, I'll let them keep the change and just give them the entire six pack.
That's the kind of rich I am, ladies, and there's more where that came from.
That is generally what happens when you compare line counts for code on top of a framework against stuff written in other languages.
When I took it in 2002, it was C++ at the time. I think they switched to Java a year or two later.
You're close. I took the AP test the last year it was C++. I was also taking Java with the same instructor, same room, the next period, so I kind of had the best and worst of both worlds. But the instructor was top notch and is regionally well known - I'm very sure he was the primary factor in nearly all of his AP students both passing the AP test and having a job in the industry. Those two classes got me through my first two years of college and put me in a unique position for learning low/high level languages ever since.
That was 2003 when even the standard library was not nearly as defined and the boost/twisted libraries were still in their infancy. 2004 was the first year the AP comp. sci test was in Java and, IIRC, it was Java 1.4 when it was still reasonably fresh. These days I use primary Java and stumble through a handful of dynamic languages on an every day basis, but C++ still holds a special place in my heart - it's a shame I can't realistically use it in our production code; I really miss it.
You know the nice thing about Wikipedia? When you find poorly written or factually incorrect articles you can actually do something about it instead of just whining about it on an unrelated website.
The other nice thing about Wikipedia is that the original author can be notified via RSS/ATOM that someone has changed their factually incorrect page and they can revert it in moments. A lot of people whine about that on unrelated sites because they're done spending their own free time fighting over fiefdoms when they can say "screw it" and just not hire people that come to an interview armed with whatever they read on Wikipedia.
What I'm saying is, while your solution absolutely makes sense in theory, many have found it unsatisfactory in practice but the flip side is that it retains a positive value as a filter; for that we thank the people that insist on misinforming whomever believes that a wiki is an authoritative source.
Because I'm hard pressed to think of a single "product" (and since most of them are free betas that's debatable) which Google has never treated any differently. It's their service, you're just using it in whatever state they give it to you today.
You seem to be confused about their product. You are their product; the advertisers are their clients. That's the service they don't mess with. There's a reason that they don't understand why enterprise customers need Java in the browser or wish they'd stop crying wolf on every SSL cert - selling services to a business isn't their model or one that they really want.
Probably because those customer would say "we need Java to access SuperMicro's IPMI interface on our internal networks. That's the same reason we don't want to click three times every time we use a self-signed/vendor signed cert or a cert that uses older crypto. We're on our internal network. Stop breaking stuff for no reason and fix the outstanding bugs we have open."
Per the Java support site, go here: chrome://flags/#enable-npapi They probably won't support enabling it forever, but for now it's a workaround.
FWIW, that doesn't seem to work under Linux on Chrome 42+.
How about users of enterprise software, managed switches, Cisco gear, and embedded appliances for whom their shiny Windows 7/8/10 (for those corps that would run 8 or 10 - I'm sure they exist somewhere), Fedora 22, Mac OSX-latest still can't access said software, hardware, appliances? You do understand that I didn't write SuperMicro's Java interface and I'm not at will to upgrade to software that doesn't exist on something I didn't make regardless of how shiny my frakkin' operating system is, right?
You are correct, however about not being "forced" to do anything. What is going to happen is that when all of our stuff stops working on Chrome, we'll all use Internet Explorer because that's all that will work and IT will start enforcing it. Meaning I can count on the day where IT officially won't support my Linux laptop even though they turn a blind eye right now because I can operate without Windows. Same goes for my boss that runs a Mac.
It's a win for management who have been taking a political beating/PR hit for the move from Google Accounts for Domains (or whichever the enterprise suite is) to strictly Microsoft though. Which is a bit troubling since prior to acquisition there was hushed talk about the new management not being too keen on us in the R&D department using, writing and contributing to open source projects.
In summary, breaking an interface to other things breaks stuff on ALL supported platforms, because end users can't upgrade software they didn't write or compel their upstream provider to care what Chrome does; it doesn't matter what version of which operating system you're running. There are also unintended consequences for breaking stuff that corporate customers use, and those of us that have a foothold with Open Source in the company are collateral damage.
You did get the part where he's talking about using Java for work, in a secure environment, yes? You aren't seriously claiming that everyone that uses SuperMicro servers doesn't care about security because their IPMI interface is a Java webstart application, are you?
I mean, for my own part, I have two choices when doing hardware tests of our appliance builds: I can drive across the Twin Cities from my home office and stand at the R&D rack in a cold and noisy staging area for several kickstart/chef bootstrap/chef converge cycles. Conversely I, as a professional, can assume the risk of using a Java IPMI interface to access a server I physically took from a box and placed in the rack of a secured staging room over a secured subnet accessed over a secured VPN connection on my development VM (with a weekly maintenance snapshot, taken every Monday morning, which I don't hesitate reverting to 'cause SystemD, but that's another story), using HTTPS with the SSL cert from that box I physically placed in the rack.
If you are somehow cracking past all those barriers into the imaging subnet of our R&D department's subnet, you've already got half a dozen usernames and passwords and have changed a cert that lives on a box whose OS has an average lifespan on the order of an hour (that is, owning that box isn't incredibly useful in and of itself). Even at that point, the new SSL cert is going to tip me off. But if somehow you managed to get past all that, with all that knowledge just to infect my desktop VM, it seems to me that you already have the keys to the kingdom, so to speak.
That is all to say, just because someone has, or even chooses, to use Java doesn't mean they don't care about security. I'm sure I don't need to explain to you of all people (I read your username and it immediately rang a bell; a quick Google search confirmed my suspicion - I run a lot of code you wrote, and most likely vice versa but to a much lesser degree)that security is about defense in layers, attack surface, vectors and risk/reward. I'm sure there are plenty of other people that use Java in their professional lives that understand and accept the risk of how and where they use it.
As a data point to back you up, here in the Twin Cities (West Saint Paul, at least, I haven't checked in Minneapolis - if I'm going into the office I'm taking my car) there are some bus routes to the shopping district that are free but have a 'suggested donation' amount of $1 or something. They're already mostly paid for, but if you can spare some cash they appreciate it.
Even if you've got the cash and a car, it's a cheap designated driver or as a good way to beat the traffic from the hockey arena after a game (buses have semi-dedicated lanes during congestion). If you want to go intra-city there's also the light rail that goes between Saint Paul and Minneapolis; it also has a station in the Minneapolis Saint Paul International Airport which is convenient for many reasons.
Did it actually evict all the page cache or did you hit the overcommit limit to trigger the OOM killer?
I have mixed feelings about the killing of processes; while I don't necessarily agree with the method, I can't argue with the results. Still, it'd be nice to try a SIGHUP and SIGTERM first.
So far as I know, by default, Linux still over allocates up to 50% of total RAM (not 50% of available memory if you count virtual memory). This parameter can be tuned or set via sysctl. But, yeah, I love Linux, but it's got memory management issues that I don't have on other operating systems. I've found I can usually tune around them somewhat.
Although I've never found a way to have it do what I'd really like and dedicate lots of memory for buffers when writing large files. For instance, when I'm writing a disk image via dd to a reasonably fast RAID array and I've got 32 GB of RAM, I wish I could tell the kernel to not waste the RAM caching the pages I'm writing (they'll be evacuated when memory exhausts, and if I decide to compress the image, the 'end' of the file that's cached will be evacuated to make room for the stuff I've compressed), but rather to dedicate them to the buffer so that once the disk I'm reading is at the slow end of the disk, my RAID array isn't just sitting idle waiting on IO.
What you describe /is/ swapping, which makes it odd since you started with "if you are not using swap".
Care to elaborate on what exactly you did, under what circumstances?
My description is accurate. I have just been normally using the computer. Even without any swap, the HDD goes "krrrrrr..." and the system becomes very unresponsive when you begin to run out of memory. You can easily try it yourself, as it is reproducible every time.
It seems to throw out program pages from memory if it knows that they are disk-backed. It seems to be hard to trigger the OOM killer in this condition as well, even though it should happen.
I believe these memory problems can be somewhat mitigated by some hand tuning of the vm parameters "swappiness" and "vfs_cache_pressure". Unfortunately I don't have the time at the moment to setup a good test, but they're worth a shot if you find yourself in that situation in the future. Ref: https://www.suse.com/documenta...
More likely they slightly adjust the centre of gravity while the bullet is rotating. Adjusting the mass internally would be simpler and more reliable then fins.
IIRC most of our military rounds are intentionally weighted off center so they tumble after hitting a target instead of leaving a straight exit wound. I'm thinking these things might just be bullets with fins and springs to keep the flight path straight. You'd be amazed how much a little wind can affect a bullet at 100 or 200 yards, let alone long distance shots, when you consider how short the duration of their flight is and how much kinetic energy they have in such a dense object.
The problem with that plan is that so many aspects of the way the system is designed give people with money and/or time an advantage that you'd basically have to scrap it.
This is a problem?
Well, it does typically take more than a strongly worded letter. Come to think of it, last time we sent one of those to our king his reaction was much less than accommodating to our requests.
Crap! I _KNEW_ I should have checked. I start to google it and then said, "eh, that's gotta' be it."
Take it as you will, but second hand smoke might not be the best example. I'm not a huge fan of Penn Gillette, but at the least I thought this was interesting if the facts are accurate - Penn & Teller - Bullshit :: Second Hand Smoke. It feels to have at least a touch of truthiness to it if you can handle Penn for 15 straight minutes (while I appreciate some of the things he has to say, he's not my cup of tea personality wise).
I'm not sure I'm qualified to comment on this. I'm a Professional Engineer in Water Resources in Las Vegas. But, I'm not a Hollywood actor, or famous or anything. Maybe we should just defer to our leaders, like Mr. Shatner, to determine what course of action we should take.
I like you; you understand your place in this world. :)
Seriously though, reasonable people that are willing to compromise never get anything done when dealing with people that aren't reasonable and won't compromise.
For future reference, if you want to comment on a story that you've moderated in I believe you can post AC without having your mod points revoked. I'm reasonably certain I've done this in the past successfully. At the very least it's worth a shot next time.
As to your last point, I was thinking the same thing. The parent post is needlessly inflammatory, accusative, with an air of superiority and without a hint of irony considering its lack of grammar, punctuation or formatting while closing with a zinger about illiteracy.
If, perchance, the parent poster or anyone else that would like a life lesson, reads this, please consider my points. I'm coming from a place of understanding. /. and was reading the comments when one particularly rude post stuck out; it was my own from years earlier and I thought, "man, I really was being a jerk needlessly". As you mature you gain a bit of wisdom and hindsight and that's pretty much a life long journey. Take from that what you will.
Many years ago while in college I wrote something with what I thought was a playful tone and got modded 'troll' hard. At the time I was really pretty angry about those mods. Years later I happened to come across that same story on
Just, for what it's worth...
Thanks for this (from what I can tell - I don't know the subject matter) reasonably objective, unbiased explanation.
It was actually kind of refreshing and will probably in no way get the appreciation it deserves. I would have modded it up, but my mod points expired before I got to this story/comment section. So all I can give you is a 'kudos'.
My company (specifically, my department) uses and contributes to a number of open source projects. From time to time stuff gets lost in revision control and either a commit isn't upstreamed, upstream doesn't merge pull our changes right away, the patch hasn't made it to the mainline trunk or is staged for the next release.
It's not completely uncommon for me to pull from an upstream project and hit a bug I know we patched and then have to track down that patch's merge history internally (sometimes it doesn't make it from one developer's local working copy to our git/svn server) and then see if it's been accepted upstream. It's nothing intentional, but it happens; sometimes a commit just slips through the cracks and you don't realize it right away.
But it's in the wording how they'll do that. What is "legal content". They'll find all matter of things they don't have to deliver. I mean, I'm sure there's hate speech on Facebook, so...
[...]
I'd be interested to see which distro can get their image down to the smallest (functional) size. Strip the OS down to just the absolute minimum required to boot it up, then leave it upto the docker image creators to decide what services to enable. It's a great way to minimize attack vectors, keep image size down and make the container nice and lightweight.
A few years ago for a special purposed built box, I gutted a Slackware install, modified the disk scheduler in the kernel and removed every driver and every module that my hardware didn't use. My memory is a foggy on the numbers, but I believe the install itself was under a handful of GB (with my development tool chain and libraries) and booted to run level 3 using somewhere between 64-128 MB RAM (I think it was actually in the 32 MB range, but that sounds too small for me to be confident about it) and part of that was actually dedicated to the readahead daemon.
Granted I'd never do that again, but it was a fun summer project to build a server rack when I was just out of college. These days I don't flinch to throw hardware at a problem if I think it's going to take up my valuable time and it will scale for whatever values of "N" I'm expecting to be reasonable.
I, for one, am concerned over the constant use of the words "legal content" without defining what is and what isn't "legal content" and under what jurisdictions that falls. My pet theory is that bullying and "hate speech" will become unlawful and then blocked, and you know how the government is when it has a new hammer; everything starts to look like our thumbs.