skysight-inc/HackerNews huggingface dataset:
Maybe it is. I don't like the connotation of it though.

It implies some sort of individual failure when I think it's an organizational failure is what I am was trying to say.
Notice the "criminal conviction is invalidated by a reviewing court and no retrial will occur" part?
My sentiments are totally with this comment, however as others have pointed out you can deliver both via plaintext fallback

And in defense of html emails: for marketing missions there's nothing like a nice piece of visual design -- layout, color, possibly some type design, but not necessarily images since folks like me turn them off because of tracking -- to get attention and drive interest. Also, html can allow for column layout that could keep email content shorter than plain text version
Where is the recurring revenue in a 3.5mm jack or a SD card slot?
The product affected here is litelarly called "CrowdStrike Falcon® Cloud Security". Meraki all tough they sell routers and switches markets their products as "cloud-based network platform". Jamf all tough their product is run on endpoint devices is marked as "Jamf Cloud MDM". I think its fair to say that cloud these days does not only mean storing data, or running servers in cloud but also if infrastructure is in any way MANAGED in cloud.

So to tie back to what i wrote earlier – none of these services has to have the management part in the cloud. They could just give you a piece of software to run on your own server. That would certainly distribute the risk since now it only takes someone hacking the vendor to go after all their customers, or in this case one faulty update brakes all users experience. And as far as I can see it seems we are willing to take those risks because we think it's nice having someone else manage the infrastructure (and that was my main point in the first comment).
If you scroll down to the Buy Now you will see that Radxa also links to Aliexpress as the only distributor.
When has Crowdstrike taken responsibility for a hack?

I think it's more like, security is heavily check mark based. Crowdstrike and friends have managed to get "endpoint security"[1] added as a "standard security best practice" which every CSO knows they must follow or get labeled incompetent. Therefore "endpoint security" must be installed everywhere with no real proof that it makes things more secure, an arguable case that it makes things less secure, and an undeniable case that it makes things less reliable.

[1] I also never understood how "endpoints" somehow are defined as "any computer connected to any network." I tried to fight security against installing this crap on our database servers with the argument that they are not endpoints. Did not work.
Making everything browser based doesn't help (unless you can walk across the room and touch the server). The web is all about creating fast-acting local dependency on the actions of far-away people who are not known or necessarily trusted by the user. Like crowdstrike, it's about remote control, and it's exactly that kind of dependency that caused this problem.

I love piling on Microsoft as much as the next guy, but this is bigger than that. It's a structural problem with how we (fail to) manage trust.
Nano-Parsing Architecture: Sane and Portable Parsing for Perverse Environments [video]
This is how linux systems are used, when an higher level of security is needed.

The security levels look like this(lowest to highest):

Standard installation > AppArmor > Selinux > selinux with default-deny(everything not explicitly allowed is denied)
Just wait until the PE licensing requirements come to legally charge money for code.
What came to my mind whithout seeing the hovertext. I'm old.
There is, courts just ignore it because administering justice is time-consuming and inconvenient. There are many examples of the judicial system choosing expediency over integrity.
For practical poker, I'd formally define "optimal strategy" as the strategy that maximizes profit per time (or per game) for a set of opponents, including also the actions needed to "explore" and discover any bias before exploiting it.

Assuming at least one of opponents is not playing Nash equilibrium (which is a very solid assumption), playing the Nash equilibrium becomes suboptimal as it doesn't exploit the exploitable as much.
> 1) the prevailing majority of laptop and desktop PC installations (home, business and enterprise) are not Windows Server;

They are not, but the point is elsewhere: that Windows Server is going to provide the WSUS service to your network, so your laptop and desktop installations (in business and enterprise) are going to be handled by this.

Homes, on the other hand, do not have any Windows Server on their network, that's true.

As a hack to disable Windows updates, it is possible to point it to a non-existing WSUS server (so that can be done at home too). The client will then never receive any approval to update. It won't receive any info wrt available updates either.

> 2) kiosk style installs (POS terminals, airport check-in stands etc) are fully managed, unsupervised installations (the ones that ground to a complete halt today) and do not offer any sort of user interaction by design;

That's fine; this is fully-configurable via GPO.

> 3) most Windows Server installations are also unsupervised.

See 2.
Probably a Windows-based HMI (“human-machine interface”).

I used to build sorting machines that use variants of the typical “industrial” tech stack, and the actual controllers are rarely (but not never!) Windows. But it’s common for the HMI to be a Windows box connected into the rest of the network, as well as any server.
Sure but if you’re coming in to learn computer science or software engineering, you should at least know how to use a computer. I’m really baffled how the system fails to filter them out. I’m not being malicious towards them, most drop out before getting the degree anyways
Precheck is super cheap, it's like less than $100 once per 5 years. Yes, it is an invasion of privacy, but I suspect the government already has all that data anyway many times over.
No, don’t abuse the language.

Wrap everything in types and all is fine.

Verbose C++ is the only good kind of C++. Why?

C++ code needs to be debuggable and modifiable so when a profiler shows hotspots, you know where they are coming from and react appropriately.

How do you fix a hotspot on a one line of code somewhere in the middle of a template thingsmajic?

You don’t. You need to unroll the template code to untemplated code and the fix the hotspot.

Cases where you don’t need to fix one line hotspots because the resources consumed by the code are irrelevant are fine. But if performance does not matter it likely means you should use a bette language than C++.

Using C++ and not caring about performance finetuning is the worst of both worlds - you are using a cumbersome language AND it’s not even for any practical benefit.
Can't believe people here hated it so much! Really shows the side of HN
This is the Irish potato famine (essentially due to the farming of a single species of potato) equivalent in IT infrastructure: a single vendor.
Out of curiosity, would you mind pointing it at simonw/datasette? I think that might be interesting, particularly due to the plugin system.
GT Sophy is now a permanent feature in Gran Turismo and basically does this!
There are 300mW class Linux-capable chips like SAMA5D27. 500Mhz Arm Cortex-A5.

There are all kinds of Linux Capable chips available between 0.3W to 5W, and with LPDDR1 or other older standards, you can get very good and cheap prices while still only sipping power.
Just a definitional issue. If you are a beneficiary of a trust and can rely upon it, then it is effectively your wealth.
Maybe. Unless I'm being wined and dined by a client, my expenses have been pretty middle-brow business lodging and restaurants in general. I'm not sure I'd expect a government employee to be going the Motel 6 and McDonald's route just because they work for the government.
Why Can't We End Spam? Ask an Economist (2017)
This is wonderful – however I feel a bit sad that is a museum rather than an active place people live. So many examples of wonderful architecture in California, but they are museums, and around them are built sub par structures.
But why does it need to be remotely updated? Have there been major innovations in lift technology recently? They still just go up and down, right?

Once such a system is deployed why would it ever need to be updated?
it's a root-kit with RCE and C&C is CS headquarters.
This has all the hallmarks of a SSCA (Software Supply Chain Attack).

Either that or Crowdstrike is testing critical software meddling in ring zero so poorly, causing crashes and bootloops out in the wild on 100% of the deployments, that they need to get sued out of existence.

I hope for their sake its the former.
You're ignoring the parent's question of "why do we have systems where we expect malicous files to just show up in random places?", which I think is a good question. If a system is truly critical, you don't secure it by adding antivirus. You secure it by restricting access to it, and restricting what all software on the machine can do, such that it's difficult to attack in the first place. If your critical machines are immune to commodity malware, now you only have to worry about high-effort targeted attacks.
We ran our code on our own accounts on the school’s system.
Windows has an built in method, but make backups, since you can deny yourself access to critical things.
Krell tech support / DR had a few words of wisdom about rollbacks... https://peternorvig.medium.com/last-tweets-of-the-krell-82b8...
We do actually have US CYBER COMMAND but it isn't a branch of the military, it's just a unit inside the DoD.
Well that context makes it make a little more sense... I still wouldn't be trusting a service like that for mission critical hardware that shouldn't be connected to the internet in the first place.

The question with these types of services is: is your goal to keep the system as reliable as possible, or to be able to place the blame on a 3rd party when it goes down? If it's a critical safety system that human lives depend on, the answer better be the former.
A typical chinese N100 minipc takes from 5w at idle to 20W at full load.
Concerns about Passkeys
That's crazy. Thanks!
KLM was flying, but all flights pass through Schiphol Airport (it's their hub) and Schiphol couldn't board fights for a while. Because of that they ran out of gates for arriving flights, so everyone had to cancel flights to avoid compounding delays. As the biggest user of Schiphol that means KLM had to cancel a lot of flights.
The self-intro to wasm project I want to get up to is a service-workers that is a OTel collector/store-and-forward proxy.

It is kind of wild, otel has these collection protocols but there's afaik not any enduring access protocols. It's all over the wire protocols, nothing is defined for reading an archive of traces. Otel avoids specifying any common APIs for the storage layers, seemingly.
I wish your mother the best <3
Yes. In an environment where you have so many clients that they can DDoS the antivirus management server, you have to stagger the update schedule anyway. The way we set it up, sysadmins/help desk/dev deployments updated on day 1, all IT workstations/test deployments updated on day 2, and all workstations/staging/production deployments on day 3.
Hopefully no nasty surprises in firmware.
Windows supports eBPF too.
Thanks! It's a multi stage process where we summarize the code and structure it into articles. We also do some self verification, for example checking for dead links.
Quite a few. But only a couple that continue to get updates. A few older samsungs come to mind.
I would wager that the vast majority of people consume email via Gmail, Outlook, or Mail (Apple). You might have the holdovers like my parents who still use Thunderbird (because in early 2000's that was ideal of POP3 accounts, and they're used to it, and that's just how it will remain). All of those clients display HTML by default, and all marketing / account-related / branded emails are HTML emails. Every single reason cited in your link for choosing plaintext are irrelevant for the overwhelming majority of internet users worldwide. We could definitely productively debate the ethics surrounding marketing initiatives and data privacy, but at the end of the day, to me, plaintext destroys most of the functionality that makes email so useful.
What specifically makes it "incredibly incompetently implemented", and would you simply derisively describe any system that can push updates requiring admin access a "rootkit", or is there some way you envision a "competently implemented rootkit" operating? Your opinion seems incredibly strong so I'm just curious how you arrived at it? I'm not in IT, but the idea of both rolling out updates remotely and outsourcing the timely delivery of these updates to my door* is a no brainer.

* if not directly to all my thousands of PCs without testing, which is 100% a "me" task and not a "that cloud provider over there" task
Nigeria fines Meta $220M for violating consumer, data laws
Solarwinds is still dealing with the reputation damage and fallout today from that breach. People don’t forget about this stuff. the lawsuits will likely be hitting crowdstrike for years to come
It really depends on the size of the system and the definition of fault tolerance. If I have a website calling out to 10 APIs and one API failure takes down the site, that is not fault tolerance. If that 1 API failure gets caught and the rest operate as normal, that is fault tolerance, but 10% of the system is down. If you go to almost any site and open the dev console, you'll see errors coming from parts of the system, that is fault tolerance. Any twin engine airplane is fault tolerant...until both engines fail. I would say the solar system is fault tolerant, the universe even moreso if you consider it a system.

tldr there are levels to fault tolerance and I understand what you are saying. I am not sure if you are advocating for getting rid of fault handling, but generally you can mitigate the big scary monsters and what is left is the really edge case issues, and there really is no stopping one of those from time to time given we live in a world where anything can happen at anytime.

This instance really seems like a human related error around deployment standards...and humans will always make mistakes.
> I would say the government is at fault here

It's always the government that is at fault for either poor/ineffective regulation or lack of enforcement. Unless a company is flagrantly breaking the law, blame the government. Companies are just doing what we know they will always do - engaging in every lawful (or gray area) tactic they can to turn a buck. When we don't like the way a company is turning a buck, we have precisely one recourse - government regulation.
Does anyone know how to proceed if I do not have administrator level access to the computer?

I do not have access to c:\windows\system32\drivers\crowdstrike folder to delete the corrupted .sys file

I was able to boot on recovery mode with network, after waiting 30 min, I rebooted and BSOD persisted.

Are there other alternatives on how to recover?
You can just use normal markdown format.

For example, if you have your screenshots in a directory in the repo called `docs/images` you can include it with:

![alt text goes here](docs/images/example.png)
I would posit that RedHat have a slightly longer and more proven track record than Crowdstrike, and more transparent process with how they release updates.

No entity is infallible but letting one closed source opaque corporation have the keys to break everything isn’t resilient.
Is there a process for that??
Even more likely, the user won't click to the article.

But two days later she'll mention to either me or another space nut like me "Hey, what was that surprise that NASA found on Mars?". And the conversation that sparks will be engaging and interesting for her.
It depends on what you mean by syntactic sugar. I follow this definition: https://en.wikipedia.org/wiki/Syntactic_sugar

You can indeed translate an async function to an equivalent function that uses .then() but it’s a radical change, not syntactic sugar (as I use that term).
We had a false alarm about Venusian phosphine (as the article mentions) a few years back. It would be very exciting to get these tentative detections confirmed.

There is a lot of microbial life on Earth living in clouds, almost all of it uncharacterized. Microbes have been found living high up into the stratosphere. At the very least, a search for life in the clouds of Venus would prompt us to learn more about this fascinating ecosystem here at home.

Review article on terrestrial life in the stratosphere for those interested: https://www.mdpi.com/1467-3045/38/1/8
Here’s an annoying question: how would one play the discovery of Venusian life into personal gain? I’m thinking “startup/invest in space” as a starting point, but surely there’s a more fun/rediculous way.

Let’s assume that these signals are indeed based in life, and that that life is mostly boring to laymen — some type of bacteria or lava tube denizen with minimal complexity, say
>they just know it’s something they can invest their cybersecurity budget into and have an easy way to fullfill their ”implement cybersecurity” kpi:s

To be fair. This is what companies like Crowdstrike are selling to these managers. Emphasis on the world "SELLING"
https://archive.md/oldest/https://coroot.com/blog/instrument...
Source? I have not seen any thing about that and CS themselves say it's Windows only.
Crashes in kernel mode usually result in BSODs.
Hasn't phosphine been ruled out as sulphur dioxide? (Very similar peak in spectrum)
Of course hash is the key, not name.
Sure, on long enough timescales. I mean, there's less lead in the environment than there used to be. We don't practice blood letting anymore. Things change. Eventually enough will be enough and we'll start using systems that are transparent about what their inputs are and have a way of operating in cases where the user disables one of those inputs because it's causing problems (e.g. crowdstrike updates).

I'd just like it to be soon because I'm interested in building such systems and I'd rather be paid to do so instead of doing it on my off time.
Similarly, I now have a Samsung Galaxy A52, which has a headphone jack and a microSD slot (but no user-replaceable battery).

I'm not particularly price conscious, so I feel like Samsung lost out on an opportunity to sell me a flagship phone because those no longer have these features I care about. Luckily, this much cheaper phone still has the two that are most important to me. When they stop offering them at all, I'll be done with Samsung.
"Took down our entire emergency department as we were treating a heart attack. 911 down for our state too."

Why would Windows systems be anywhere near critical infra ?

Heart attacks and 911 are not things you build with Windows based systems.

We understood this 25 years ago.
If I weren't an atheist I would say this is god's punishment for installing malware on your employees' machines, on one hand, and for being a spineless patsy for management by letting them install that crap on your work machine.
I must be missing something. Their list of who they are data with is vague such as "other organisations if this is necessary as part of providing services to you or them."

I suppose it is nice that they tell you that they may send your name, contact information and purchase information to market research companies?
What problems will occur?
Windows, Linux, and Mac desktop OS are so limited still. I'd like a little scripting language built-in to the OS that allows you to do stuff like draw to the screen. No, Python + turtle graphics doesn't count :)

There are simply far too many hurdles to do basic computing things. I think Microsoft could do some minor additions to powershell and maybe get something like this.

I wish some billionaire would put up some money and fund a modern lisp machine or something like that. I know it'll probably never work, but I can dream.
>> Windows is not the issue here.

Yes it is. Windows was created for the "Personal Computer" with zero thought initially put in to security. It has been fighting that heritage for 30 years. The reason Crowdstrike exists at all is due to shortcomings (real or perceived) in Windows security.

Unix (and hence Linux and MacOS) was designed as a multi-user system from the start, so access controls and permissions were there from the start. It may have been a flawed security model and has been updated over time, but at least it started some notion of security. These ideas had already expanded to networks before Microsoft ever heard the word Netscape.
Staggering is necessary in some cases. I've heard of scenarios where a company has lots of devices in the field which all simultaneously try to download a big update, and DDOS the servers hosting that update.
1) It is not enterprise version of Windows; it is any version capable of GPO (so Pro applies too, Home doesn't).

2) it is not disabling them; it is approving or rejecting them (or even holding up the decision indefinitely).

You can do that too, via WSUS. It is not reserved to large enterprises, as I've seen claimed several times in this thread. It is available to anyone, who has Windows Server in their network and is willing to install the WSUS role here.
Ask HN: Did your Potential Customers ghost out on you?
Hi,

Seeking your expert opinion on a situation where you built a product after performing market research on 6 potential customers and once you complete the MVP and go back to them for feedback, they love the product but it's very hard to convert them into customers only because they don't have the authority to use the software on their own? Let me tell you it's a B2B SaaS tool for enterprises. They are also reluctant to introduce you to the management. My head spins on such situation. Please share your experiences and advice.

Thank You.
Oh, nevermind, it's just a third-party cybersecurity tool running on the server detected a potential threat and quarantined the offending database record, just in case!
Yes, one of the first steps of this gradual rollout should be rolling out to your own company in the classic, "eat your own dogfood" style.
Just because everyone does it doesn't not make it a dumb idea. Everyone eats sugar.

If the average corporation hates/mistrusts their employees enough to add a single point of failure to their entire business and let a 3rd party have full access to their systems, then well, they reap what they sow.
but why do they have CS on them? they should be simply not connected to any kinds of networks.

and if there's some sensor network in the building that should be completely separate from the actual machine controls.
I'll also add that the S5 was a much more convenient size than the enormous phones they make these days, some of probably wouldn't even fit in my pocket.
wow. this should help to design invoices, what do you think? html to pdf is not a problem anyway so....
Can you explain how this comment? Many people avoid racism as a matter of course, and this seems rather niche at that. Are you suggesting not knowing a slur is itself racist?
SMBC Comic: "The Humanities"
Thought it was serious enough for this forum, and I’m assuming we all read Zach anyway. Personally I think this sort of thing is prevalent in engineering in general, but especially in Silicon Valley —- billions of dollars investment can tend to make one confident!

Thoughts? Good ways to respond while keeping the convo friendly and cooperative?
You would need to use a hashing algorithm that is not public and cryptographic in some way. Otherwise, a malicious actor can "pad" malware until it reaches a desired checksum and passes the whitelist.

This would also make it extremely difficult for software to be distributed and updated in the way it is currently on Mac and Windows.
Did this actually happen to medical equipment mid-surgery today?
what was the comment about?