What would you say are a natural use case for Shuru or Lima vs say a full docker like environment? What does the sandbox allow you to do differently? There's additional overhead of the hypervisor. I'm mostly just trying to learn, as yourself.

installing new tools inside container requires you to update the Dockerfile and rebuild, here it seems you can simply run the installation command and create a checkpoint

You can do this with Docker too without Dockerfile or rebuilding. You can treat the container as mutable and just start/stop it, doing changes manually, and make snapshots with docker commit.

You'll forfeit the benefits of reproducible scripted environment of course but Docker does let you do it.

What did you mean by a dynamic system ?

One where processes, drivers and libraries come and go during the whole OS uptime.

Is instacart a lowballer employer? levels.fyi suggests software engineers at L3 are getting 222k

Looks like Joi Ito saw this coming and pre-emptively put up that post where he claimed he didn't know of Epstein's wrongdoings while happily accepting his money. Well..cat's out of the bag now.

Not quite. The big news here is that Ito's denials were apparently false -- that Ito was fully aware of what kind of stigma would be associated with Epstein's money, and why, and dealt with it by concealing the source and taking the money. As documented by the email trails that someone gave the reporter.

> cat's out of the bag

Perhaps I am too naive but what is wrong with accepting a donation from a person you didn't know was a criminal?

Nothing. But that is certainly, provably not the situation here.

It sounds like you haven't read the article, which is about covering up donations from someone you knew was a disqualified donor because he was a pedophile, because your own staff kept telling you he was and that you should stop talking to him.

And also apparently personally profited from it.

He didn't do a basic Google search to find all the articles about his conviction for child molestation and solicitation?

How does Facebook, hiring some of the best engineers in the industry with the biggest bucks ends up in such a mess

But think of the whiteboard algorithms they can all put together in a pinch

maybe they need passwords to login as user?

even if they want to emulate a user, they can do so without their password. Or if doing so in a simplistic way, they can login with said user's hashed password, instead of the original plaintext.

In many cases your surname/family name can give away your caste. There have been social movements in the country where groups have shunned the practice of using their family names that are used to identify caste.

I wonder why this news is worthy of being discussed on HN?

Because 2 nuclear powers are going at each other

With the recent articles doing rounds about the feds Looking into Oracle paying minorities and women less, this seems part of the scheme to basically get lower wage workers under H1B who they know will work like minions for long hours because their visas are tied to the job. It's a pretty standard way of gaming the H1B. Oracle is no different.