riyakhanna1983

If someone were to build a paid, privacy-preserving wrapper of ChatGPT, it may not see as much traction because ChatGPT is free.

That makes sense. I’m mostly curious to know if parents are actively encouraging their kids to develop programming skills.

I’m curious to know your opinions on teaching coding to kids. Is it a good idea given claims around AI taking over programming jobs in the near future? How many parents here would like their children to learn coding?

The hypervisor needs hardware virtualization extensions. So if you are running in a public cloud, then yes you would need nested virtualization.

Many have attempted to offer services that allow developers to "sell their FOSS projects". Unfortunately, no successful model has emerged so far.

[MORE: cannot edit] We're looking to cut down our Cloud costs, so over provisioning to make up for cold starts is not an option for us. Curious to know how others are in the same situation and how they are handling this?

We have not, but suspect that cold starts would be worse for GAE apps.

Plug: in the past, I helped a few companies and OSS devs track usage of their code in mobile apps https://codescout.app/ and provide leads. Happy to chat if this is relevant.

Malicious packages are yanked as and when they are found or reported by the community.

Tool: https://github.com/ossillate-inc/packj

Thanks, Peter! Would you know the processing time for IEP application? Could it be expedited?

Thanks! gVisor intercepts app syscalls and serve them in user space (inside separate VMs, one for each container), which reduces runtime performance significantly. Both Firecracker and gVisor use VMs to sandbox container code.

Kwarantine, on the other hand, directly runs container code on the hardware (no VMs). It uses MMU/page tables to provide a different kernel to each container.

We will post more publicly soon.

You can read about its IO performance against QEMU in their NSDI paper (table 8,9): https://www.usenix.org/system/files/nsdi20-paper-agache.pdf

Even though the startup times are fast, the IO performance is poor compared to native. This is primarily because of IO emulation. We've been working on a new hypervisor that can directly run isolated containers (no VMs). Email me if you are interested in learning more.

Thanks for making this website! It will be very useful to a number of us.

Been working on a new hypervisor that can directly run isolated containers (not VMs) to enable secure micro-services without virtualization overhead. Email me if interested in testing or contributing.

Been working on a new hypervisor that can directly run isolated containers (not VMs) to enable secure micro-services without virtualization overhead. Email me if interested in testing or contributing.

> "There's also benefits of being able o run a special kernel per workload."

I wonder if we will see kernel namespaces that would let you run specialized kernel for each container just like a VM.

I'm confused. If the product targets tech savvy customers, does Google not already know its reputation among the group?

But does FC not incur high I/O overhead at runtime?

Why not just run Docker containers natively?

Just like mine :)

Could the waiting be attributed to your country of citizenship? I know there's a long wait for citizens of a few countries because there are per-country limits on green cards.

Doesn't this mean more opportunities to inject malicious code?

I'm looking to improve the security posture by stripping the kernel off unwanted stuff (ebpf, zillion different file systems, drivers) that introduce CVEs into the kernel.

Sorry, I should have made it clearer. Yes, I'm talking about the Linux kernel on the host that's running Docker containers. If I use the default Ubuntu kernel, it contains a bunch of unnecessary functionality. Is there a tool that I can use to configure the host kernel to only contain the absolutely necessary functionality required by the Docker container image?

Build tech that replaces phone numbers with something that cannot be spoofed.

A friend of mine has furnished his garage, and is renting it out as a private working space in his neighborhood.

Out of curiosity, what advantage would that provide?

Not only that, you could end up shipping malicious code to your customer.