skysight-inc/HackerNews huggingface dataset:
This is true, but for at least some race conditions the rr "chaos mode" can help in tracking them down. Chaos mode basically randomly adjusts its thread scheduling so that it sometimes doesn't run a thread at all for a few seconds, so you run it a bunch of times until it hits the timing window for the race condition; and then when it does you debug the recording. IME it works at least sometimes but it does require that the thing you're testing doesn't take too long to fall over, since you need to do multiple recordings of it.

https://robert.ocallahan.org/2016/02/introducing-rr-chaos-mo...
This would answer the question that i've not heard anyone asking:

what incentivized the bad decisions that led to this catastrophic failure?
I made something like this too to use myself. It's called `describe dot` and builds a context by recursing over . and putting all the content into the clipboard. It respects the .gitignore files in each folder and I can add .dignore files to ignore more files. At the end it creates a text file folder structure followed by the contents of all the files. It also logs the files in size order so that you can trim down the total size by ignoring them. It's been useful for small projects but I imagine that a whitelist based approach might be more useful for larger ones.
ILOVEYOU is a pretty decent contender, although the Internet was smaller back then and it didn't "crash" computers, it did different damage. Computer viruses and worms can spread extremely quickly.

> infected millions of Windows computers worldwide within a few hours of its release

See: https://en.wikipedia.org/wiki/Timeline_of_computer_viruses_a...
is that likely to you? more likely i am on a chromium or firefox browser on a standard computer experiencing a laggy demo experience with no user modifications. i'm simply making the OP aware that "works on my system" is not true for me, since he stopped getting feedback. this is a kindness.
I only learned recently about usury and the relationship with Jewish groups and their own history. The interplay between local powers needing money at different periods... It was all very fascinating. Especially how simple moral principles (lending for interests) could ripple so far.
eBPF:

> The program does not crash or otherwise harm the system.

https://ebpf.io/what-is-ebpf/#verification
> Losing billions of dollars in stock market cap

Still up 20% ytd from an already high valuation, so they have a long way to fall.

If they don't fall all the way to zero (spoiler alert: they won't) they got off easy.
One of my favorites personal anti-virus anecdotes in enterprise environment is when its file watcher looped with development environment and IDE file watchers and the machine was consuming maybe 60-70% of RAM and CPU in idle state.
So you should interpret xvij as 17, not 16. It's part of the number, not something appended.

The original off-by-one error?
I am also a member of the hospitality -> tech club. in fact, I used to be the GM of one of the restaurants on your list!
The practice of building software would have to completely be flipped on its head to support professional liability. Agile would be the first casualty.
When accessing a closed departure board display then that isn't a problem
I used to share your opinion, but I had to do with the adult content world for work related stuff and it was the filthiest thing I've ever had to deal with in my life. Sex work is an ugly thing, built upon the exploitation of both workers and customers. Nothing freeing or emancipating about that.

Yes we shouldn't treat sex as a taboo and children should be educated to avoid STDs, unwanted pregnancies, etc. No, we shouldn't expose children to the filth of the adult content world.
That could sum up SA as a whole. The culture there has shifted a lot over time, but not due to an influx of new users, it's the same people who have been posting for upwards of a decade and have (mostly) grown up. The founder Lowtax refused to grow up but, well, you know the story and now the site is under new management.
> Citation needed. Compared to what? Casual crime is very high compared to traditional Swedish society. Also a lot of crime goes unreported because the locals don't trust the police to be able to do anything.

Citation needed? You haven't provided a single citation for any of the wild claims you've made.
In the US every 2nd person uses Twitter. Firefox is only used by 7% in the US.
You'd have to take a step back to see it, I think.

It's more like: in general, people will chose fun over not fun, given they have a choice.

And good developers have PLENTY of choices.
I had read somewhere that the definition file was corrupted after testing, during the final CI/CD pipeline.
Yeah I think the line for concern is when they start getting their PRs merged
Internships are often done illegally. They are not to replace other workers. The full purpose must be to help the intern. And the work shouldn’t be used for business.

Hmm seems the law changed recently , there used to be 6 rules

https://www.shrm.org/topics-tools/employment-law-compliance/...
We've seen this week that the world does not want options. It wants a single point of failure in all infrastructure so that nobody is blamed for making the wrong choice.
I'll take the domestic corrupt bureaucrats over Russian installed puppets, because they'll do whatever the US Embassy tells them to.

The Soviets applied the well known Crimea scenario and won past 1945 without firing a single bullet. Eastern Europe was transformed into into buffer states. This time maybe our countries might not fall under the Russian sphere of influence if we shoot'em dead like the Finns did during the Winter War.

I will also gladly vote yes to have US nukes pitched against Russia on my country's soil if I am ever asked to do so. I do hope our politicians will decide to have them anyway as part of being a NATO member and as deterrence all while classifying it, to neuter Russian propaganda.

They won't dare to attack if we're armed to the teeth and have nukes pointed against them, even if they're operated by the US. The Kremlin scare talk of "legitimate targets" is just BS to discourage us from doing so. Real deterrence is done with weapons, not talk.
Critical infrastructure should not use Internet-enabled machines.
Do they follow their own terms though, or do they still try to sell this software to hospitals without mentioning the fine print.
Sure, the small-print is always going to say "anything bad that happens is someone else's fault", but it's a bit embarrassing when you put it next to their marketing materials.
At the same time (and I am looking directly at Unit Tests when I say this) I have seen what is perhaps dangerous confidence that, because such and such tests are in place, we can be a more lax when pushing out changes.
Does anybody know if these “channel files” are signed and verified by the CS driver? Because if not, that seems like a gaping hole for a ring 0 rootkit. Yeah, you need privileges to install the channel files, but once you have it you can hide yourself much deeper in the system. If the channel files can cause a segfault, they can probably do more.

Any input for something that runs at such high privilege should be at least integrity checked. That’s the basics.

And the fact that you can simply delete these channel files suggests there isn’t even an anti-tamper mechanism.
My traffic is minuscule, so for two Hugo blogs it’s something like $1/month.
Why should Windows let users delete system32? If they don't make it impossible to do so accidentally (or even maliciously), then I would indeed blame Windows.

On macOS you can't delete or modify critical system files without both a root password and enough knowledge to disable multiple layers of hardware-enforced system integrity protection.
Have a bunch of Makerile commands (pbcopy-api, pbcopy-ui, pbcopy-curr) that use some mishmash of git ls-files, grep, xargs tail -n +1 piped into pbcopy.

Kitchen sink command:
pbcopy-all: git ls-files | xargs tail -n +1 | pbcopy

Works like a charm in Q2 2024.

I’m sure this will be a very solved problem by 2025.
I attack the idea that someone born and raised in, say, NL whose grandparents moved in from, say, Turkey, is considered a Turk, often both by themselves and other people. In my opinion, if someone is born and raised here, they’re Dutch, or something like “Turkish-Dutch” maybe, but instead everybody talks about them like they are an immigrant.

To lock people inside their little immigrant identity groups, even when done out of some loving inclusive anti-racism vibe, has the adverse effect of what’s intended. It’s totally possible to be Dutch and Turkish and we should celebrate that, not fight it.
It's not a bug when an update to buttplug.io destroys backends around the world, it's a feature.
Hi, Tamar from Namecheap here. This is not a practice we partake in as you can read by the comments. Please share the domain in question via DM (I use the same name on reddit if that helps). My guess is our service reported it accidentally as available due to a technical miscommunication with the registry but it was already registered. However, I would need to know the domain to do that. Otherwise, we can open an investigation into what would've happened but it is not in our interests to do this for a number of reasons. I would like to see what occurred though, so please be in touch.
I agree, browsers should only allow viewing websites which were vetted by the government with approved information.
The cited text has an extra detail:

«… and it is customary to draw a line above all the letters making up the number, the dots of i and j being put above this line; for example, xviij»

So, XVIII would have been written likes this:

_____
XVIII
-----

Lines would clearly delineate the beginning and the end of the number. This is how I have written the Roman numerals since school.

So, if the script had X written that way, adding a C, would have also required both lines to be extended. Not impossible to forge, but an extra effort nevertheless.
They have tried some experiments in this area, like CLR drivers and altogether different kernel.

Nothing stuck for a variety of reasons...

Reverting security to an insecure state is called a downgrade attack. Can't allow that.

What could be done is a better Safe Mode with Networking that would allow for secure remoting over an AD enterprise configuration... And the machines configured to automatically enter that mode.
Still bit of a security issue potential.
Fair point.
Everyone with education, practical skills and high iq is welcome legally. Any reasons why we need the rest? Especially crossing the borders illegally?
From Monster Manual by Gary Gygaxale and David Ångströmson (TSR Inc., 1978), p. 61, in the section on etches:

"An etch exists because of its own desires and the use of powerful and arcane magic. The etch passes from a state of humanity to a non-human, non-living, and non-conductive existence through force of light. It retains this status by certain conjurations, enchantments, and a reticlefactory. An etch is most often encountered within its hidden chambers, this lair typically being in some dry, deserted area or vast underground lab, and in any case both solidly constructed of stone and very sterile.

Through the power which changes this creature from human to etch, the armor class becomes the equivalent of +1 plate armor and +1 shield {armor class 0). Similarly, cast dice are 8-sided, and the etch can be affecied only by magical attack forms or by monsters with magical properties or 6 or more hit dice.

Etches were formerly ultra powerful magic-users of magie-user/clerics of not less than 18th level of magic-use. Their touch is so cold as to cause 1-10 points of damage and paralyze opponents who fail to make their saving throw. The mere sight of an etch will cause any creature below 5 nm {or 5 hit dice) to flee in fear of overexposure. All etches are able to use magic appropriately at the level they had attained prior to becoming non-human.

An etch can only be permanently destroyed when their reticlefactory is destroyed. Unless the etch's reticlefactory is located and destroyed, the dice will be cast, and the etch will re-adhere in 1d10 days after their apparent defect.

The fallowing spells or attack farms have no effect an etches: charm, sleep, enfeeblement, annealing, insanity or death spells/symbols.

Description: An etch appears very much as does a wight or mummy, being of skeletal form, eyesockets mere black holes with radiating points of amplificated light, and garments most often rotting (but most rich)."
In 2024 the ONLY reasonable way to keep a blog is your own personal site. EVERYTHING else will eventually get sold or turn to crap when they need to monetize.
Out of curiosity, is there any specific hosting provider you would recommend for Ghost? For example, would DigitalOcean suffice?
Only the losers, mark my words.
Microsoft personnel are usually more careful with existential risks... usually.
11 years is pretty good, but ...

4 years ago, I discovered that a flame war I had witnessed in rec.music.makers.percussion in the early 2000's was still going on after one side DIED

https://news.ycombinator.com/item?id=24772142

In 2000, Rob Schuh was already infamous for the flames:

https://groups.google.com/g/rec.music.makers.percussion/c/aA...

The Robert Schuh File; How to Not Win Friends and Influence People. Off Topic, extremely long, and not pretty. also occassionally posted at alt.tonya-harding

--those who have chosen to guard themselves against Rob Schuh have done
so with just cause.

If you have been bothered, taunted, insulted, attacked, cursed at, lied
to, lied about, by one Robert Schuh, welcome to the club!

---

I believe he passed away around ~2010; people were celebrating his death in ~2012, and he continued to be mentioned until 2021.

https://groups.google.com/g/rec.music.makers.percussion/sear...

I mentioned in that thread that Schuh was a very interesting character:

https://www.phoenixnewtimes.com/news/drum-and-drummer-643105...

A genius drummer, drum builder, bodybuilder, steroid user (when it was legal), convicted felon, a sufferer of chronic illness, and epic Usenet flamewar participant.
I'm repeating what I've read in many places, but I don't know much detail myself.

So that could be true.

If you have a link explaining how it actually works, I'd appreciate it!
Those EUV lasers are themselves insanely crazy, and unlike the semiconductors they are part of producing, the EUV gear has lots of expensive short-lived consumables — like mirrors!
I'd bet $100 that Crowdstrike won't pay out more than $100m for that dozens of billions of damage.
I tried to return to my Habbo Hotel account in 2016 after a 10 year ban. After some struggling to login, I contacted support, and found out that they delete any account banned for more than SIX MONTHS! I waited 9.5 years to log into an account that didn’t exist. RIP “Mr. Funnyshoes”
My understanding is that the X280 performs at one cycle per element, and that there is supposed to be a faster gather for LMUL=1/2. As you mentioned the data-path width.

If that is true, then their higher LMUL implementations are basically a design mistake. They could've used the LMUL=1/2 vrgather to implement LMUL=1 and above by calling it repeatedly (LMUL*2)^2 times, that should add almost no extra die area. This is what the C908 and X60 seem to do.
Odin makes them (and more!) absolutely lovely to work with:

complex32/64/128, quaternion64/128/256

https://odin-lang.org/docs/overview/#array-programming

https://odin-lang.org/docs/overview/#matrix-type

Probably helps it's the language JangaFX uses for their products used by essentially every major video game, movie, and TV show out there (https://jangafx.com/#headline-603-384)
This reminds me of the vulnerability that hit jwt tokens a few years ago, when you could set the 'alg' to 'none'.

Surely CrowdStrike encrypts and signs their channel files, and I'm wondering if a file full of 0's inadvertently signaled to the validating software than a 'null' or 'none' encryption algo was being used.

This could imply the file full of zeros is just fine, as the null encryption passes, because it's not encrypted.

That could explain why it tried to reference the null memory location, because the null encryption file full of zeroes just forced it to run to memory location zero.

The risk is, if this is true, then their channel loading verification system is critically exposed by being able to load malicious channel drivers through disabled encryption on channel files.

Just a hunch.
Drivers yes, virus signature files or configuration files pushed by third parties, no.
I've done the research. It’s called first hand experience. I was the guy making the arguments, that controls we already have in place obviate the need for edr everywhere, but I was told it doesn’t matter, gotta check the box.
Let's be clear, this wasn't a new version of Crowdstrike. Admins can control version updates, and have a policy if n-1. This was a channel update (similar to antivirus definitions). AFAIK you cannot control channel updates.

This is entirely on cloudstrike, or perhaps clown strike is more appropriate.
Nice to see more web component stuff.

I'm convinced that web components (and the tech that makes up web components) will eventually find its place in everyday web development. That said, I do think people are making a mistake when they try to use it as a one-to-one replacement for react.
Sure, blame the engineer(s).

And from now on every engineer now has the autonomy to refuse to use certain libraries and software stacks they are unfamiliar with, can refuse to submit a change, will have control over whether to push out software they worked on, etc.

And a huge pay bonus as well since they have all this CEO-like risk/responsibility now.
Polish still regularly does this for contracts and all kinds of legal document.

I regularly see verbiage like "person A promises to pay person B 100 (in words, one hundred) zloty upon termination of this contract."
I think states are more and more learning to navigate under the nuclear umbrella.

The method is small doses of escalation. Which means that it is never the time to press the button.

We have lots of conflicts involving nuclear states (USA, India, Pakistan, China, Russia, Israel Great Britain) but never since 1945 has it been used.
Non-genAI/LLM applications of ML are most exciting to me at the moment. Seems like the tooling and techniques are at a good point of proven but with creative prospects not yet explored, especially with generative siphoning off some of the hype. Worst case I’d learn some stats.
I would say that at this point it's trolling/comedy. for maximum effect I would ban them for 200k hours now.
> If a software engineer tells you that this code needs to be 100% test covered, that AI won’t replace them, and that they need 3 months of development—then you better shut the fuck up and let them do their job.

This is so naive that it is impossible to take the author seriously.
My understanding is that the culture (as reported by some customers) is quite aggressive and pushy. They are quite vocal when customers don’t turn in automatic updates.

It makes sense in a way - given their fast growth strategy (from nowhere to top 3) and desire to “do things differently” - the iconoclast upstarts that redefine the industry.

Or to summarise - hubris.
I was also also once banned from a forum for a few years. I kept going back there, never created a new account. Just waiting for the years to pass. It was not some crusade to get back, I was just curious and every few years when I would remember, I would check out the site. Until one day the site disappeared. It would have been fun to be able to log back in and just say "I am back".
It's telling that all the hyperscalers keep taking runs at this, driven by the DoD. I'm not sure anyone is making money at it though.

Azure tried with Stack Hub (private airgapped cloud), Stack Edge (various options, including ruggedized, gpu enabled, battery powered, rackable). The JEDI contract didnt amount to much so I dont know if this range has a future.

AWS have tried with outposts and the snow family. Seems to be doing ok in the commercial space.

Now google.

They all seem to have some weird genesis as data transfer gateways (looks like a local network share, but really sends data back to S3 or some other cloud store), and they all seem to have weird compromises that the disconnected nature forces upon them. For example you need to connect the box to the cloud at least once every 30 days to have it sync to the mother ship, or whatever.

I wish them well on this but I doubt it will be much more than a tickbox for government contracts and won't see much live deployment.

If google came out with a range of box designs that fit in a backpack or a VPX chassis, could be spared and replaced in the field by any vendor in the defense industrial space, could run disconnected for 120 days or more without degrading, could be operated by an 18 year old under duress in a combat environment (no one is following a manual at that point, it needs to be "turn the key and oress the big red button" simple) and could seamlessly upgrade/clean themselves up when reconnected to the cloud back at base, they'd certainly have my attention. Oh and given the geo situation, maybe made from components that have alternatives not made in Taiwan.
Would it have really? I'm not particularly up to speed on the situation in Cuba, but there are a lot of awful regimes on this planet that remain in power simply because they have all the guns. These regimes are unpopular, they govern poorly, but no one can do anything about it, because the guns, tanks and soldiers are all under their control, and they've decided that a peaceful transition of power is not an option they wish to entertain. It's entirely possible for this to be a stable state that lasts for a lifetime.
https://archive.ph/2Ndf4
Sorry I didn't understand that. What's still true? Why would work not being scarce mean that there are loads of people available for jobs?
It’s called hyperbole.
Hebrew has similar word-ending swashes: Final Kaf, Final Mem, Final Nun, Final Fe, Final Tzadi
> Guarding against it anyway is like guarding against someone passing a destroyed object to you - it just doesn't make sense to.

It doesn’t make sense to do so intentionally, but that’s a classic dangling-pointer/use-after-free bug. In some contexts it might make sense to guard against it for the same reasons one may validate arguments passed to a public API (and then not in the internal code)
Do you have a use for a highly specialized vacuum cleaner with 4 hoses 40cm each?
More importantly, the code signing is a security measure. You can in theory vet the signature database by hand preventing the execution of unapproved drivers.

Microsoft normally puts it in revocation mode only, with bad drivers with unfixed holes being blocked.
Show HN: We made AI Teachers using Midjourney, Synthesia, Text-to-Speech, GPT
Really impressive that they got thru an entire develop, build, approval, and documentation process in just about 2 days. Not that any of those steps are extremely hard for this fix, but I'm always impressed when big corporations can move so fast
The only thing this paper prove is that folks at Trinity College in Dublin are poor, envious anthropocentric drunkards, ready to throw every argument to defend their crown of creating, without actually understanding the linguistics concepts they use to make their argument.
Ukraine did not dissolve.

In Northen Europe we have seen enough the last couple of years in Izium, Bucha, Kherson, Mariupol to understand that fighting back is preferable to murder, rape and every war crime in the book.

And we prefer a stable democracy before living as a Muscovite vassal state with ruling based on power corruption and lies.
Getting a prescription for 90 pills instead of 100 would presumably raise suspicion.
Well, Microsoft led by example with #2: https://news.ycombinator.com/item?id=20557488