skysight-inc/HackerNews huggingface dataset:
I noticed seemingly all deaths in Manhattan are labeled as having occurred in flushing, a nearby neighborhood. Perhaps an off by one error?
HN rewrites URLs to the canonical link which most of the time works fine, but does mean it loses anchor tags and things sometimes.
There is no reason why pornhub could not create a system whereby they did not themselves need to see the ID
We do ATM's - it runs on Windows IOT - before that it was OS/2.
Pretty shitty to not even give a token amount bounty for such a broad hole
Perhaps they don't have a good enough business model then
Finger-pointing someone higher in hierarchy always is a bad idea, even if there is clear evidence.

Talk personally to the lead first... If you can 100% exclude misunderstanding and the boss likes the lead dev, I would look for a new job, but:

While doing it, be professional. Keep doing your work (even if it is not accepted), don't be mad or raise your voice. Collect evidence and print it.

If you found something new, you will have to talk to your boss. Have the printed evidence with you and tell/show him, as soon as he asks why you are leaving. Maybe you can prevent others from having a toxic environment by this.
Yes. I’ve had the same experience. Literally have had engineers get upset with me when I asked them to consider optimizing code or refactor out complexity. “Yeah we’ll do it in a follow up, this needs to ship now,” is what I always end up hearing. We’re not their technical leads but we get pulled into a lot of PRs because we have oversight on a lot of areas of the codebase. From our purview, it’s just constantly deteriorating.
IBM watsonx Code Assistant for Z: Transform COBOL services to Java™ by using an AI-assisted approach with IBM watsonx Code Assistant for Z and IBM Z Open Editor.

https://www.ibm.com/docs/en/watsonx/watsonx-code-assistant-4...

HN discussion: https://news.ycombinator.com/item?id=38508250
MonsterWriter is your product, correct?
Compared to managing thousands of printers? And then the resulting printouts? Buying ink, changing the cartridges?

Technologically it seems doable. Big enough order brings down the costs.

https://soldered.com/product/soldered-inkplate-5-5-2%e2%80%b...

Of course the real backup plan should be designed based on the actual needs, perhaps the whole system needs an "offline mode" switch. I assume they already run things locally, in case the big cable seeker machine arrives in the neighborhood.
And it’s a publicly traded company that went down 10% on Friday due to these events.

I hope no one is dumb enough to spill the beans just for some karma. Especially when you don’t know what the official findings are yet.
Because you haven't created it yet.
Putting on my tin foil hat for a moment…

I suspect the US government might have pressured them to push this update because they’ve found out that Crowdstrike’s system has either already been breached or has a significant zero-day security vulnerability.

Now, taking off my tin foil hat…
That is absolutely one of the A-tier "certain type of a criminal a55hole".
Thanks for the feedback!

Yes, it can run projects with using existing frameworks, both if its Restful API or also it can be embedded into Tailwind UI.

Symbols was built to enhance your existing tech stack, with open source development. Not to force you to leave it, or vendor lock you.
We have had kernel exploits like dirty copy on write that got you root, but got blocked by selinux.
Yeah, I've loved the ThinkPads I've had, but universally they felt slow, hot, and poorly built (especially the Yogas). Loud too, under load. And I always buy the on site service with them because I've had to use that a few times as various parts broke. They're Lenovo's premium brand but ultimately still just commodity PC parts enclosed in plastic/carbon.

They are very light though. Not sure if the T model workstations are different (heavier and more robust?)

The modern MacBooks are in a different world altogether, IMO. They make even the best ThinkPads I've owned feel like toys. They are just so so nice and leaving legacy x86 feels so liberating. Incredible power and battery life and performance.

If I had to buy a PC laptop it'd probably be a ThinkPad. But because Apple Silicon is a thing, I don't think I'll buy another PC laptop again. It's such a dramatic difference.

I don't need Linux (on the desktop) though. If that were a firm requirement, I wouldn't want to rely only on Asahi for production use.
Agree, was disappointed there was no easter egg here.
> Designing a fake delivery company seemed to be the most logical, straightforward way of contacting a person.

That does not sound logical or straightforward to me at all.

> To keep the intrigue going, we resorted to just sending cryptic emails to everyone a couple of days before the delivery

So, they’re spammers? And physical spam too?

This post reads as rather unethical to me… I wouldn’t want to work with them.
MapleRead, but it’s a paid app. Apple Books is ok for reading, bad at everything else.
If you don’t want to maintain the infrastructure, you can also just commit to git and push to GitHub, and there have CI build the Hugo/Jekyll website and host it using GitHub pages.

You can easily have your own domain connected to it and GitHub will provide an SSL certificate.
How about github gists? It has comment support built in
I've heard anecdotes about active-over-100 cigar smokers crediting their good health to the cigars. Ditto with whiskey drinkers. Ditto monks still doing the full daily routine of arising at 5am, praying for an hour, taking communion, etc, etc.

Other than "because emotions", is there any reason to suspect that healthy-over-100 people would have some special insight into why they are so far to the right edge of the bell curve? You could also ask mothers of L<=>R -switched babies ( https://en.wikipedia.org/wiki/Situs_inversus ) what they did, to cause that to happen.

(Yes, I'm well aware that lacking daily routines, positive social interaction, purpose to life, etc. can be quite bad for one's health. And "gotta work!" can check many of those boxes.)
Can’t say I’m surprised. Every major org will at least attempt to get compensation so playing entirely open cards is maybe not ideal
Modchipping a Fridge
This is probably EU innovation funds at work. Still impressing that they assembled something resembling a functional prototype, and not only gigabytes of PDFs and DOCXs.
https://whc.unesco.org/en/news/1684/

Also "Efforts must be continued to ensure the coherence of new developments with the Outstanding Universal Value of the Historic Centre of Vienna, especially of high-rise buildings outside the buffer zone."
2 things:

1. critical infrastructure around the globe seemed to depend on CrowdStrike

2. "If I ever get a sales pitch from..." suggested you are in an environment that is far from critical infrastructure.
Arweave: Permanent Information Storage
Mini-Neptune turned out to be a frozen super-Earth
A lot of things that come as "mandatory patches" in IT, not just for Windows, are things that tend to generate recalls - or "sucks to be you, buy new car" in automotive world.

In more professional settings than private small car ownership, you often will both have regular maintenance updates provided and mandates to follow them. Sometimes they are optional because your environment doesn't depend on them, sometimes they are mandatory fixes, sometimes they change from optional to mandatory overnight when previous assumptions no longer apply.

Several years ago a bit over 100 people and uncounted amount of possible more had their lives endangered because an extra airflow directing piece of metal was optional, and after the incident it was quickly made mandatory, with hundreds of aircraft being stopped to have the fix applied (which previously was only required for hot locations - climate change really bit it).

Similarly, when you drive your car and it fails to operate, that's just you. When it's a more critical service, you're either facing corporate, or in worst case, governmental questions.
Usually things like this can be explained by basic human incompetence or a misstep. Tin foils are rarely ever needed
There are three+ theories

1) Natural origin, natural transmission to humans.

2) Natural origin, sampled for the lab an escaped.

3) Artificial origin in the lab (like a genetic modification) and then escaped.

4) Evil artificial origin and on purpose release.

Ignoring 4), one of the problem is that people mix 2) and 3). I read many post with "proofs" of 3) that were debunked one week later, and then people claimed that it also debunked 2).

Disclaimer: I think there are many similar cases of 1), like a covirus local epidemic every 10 years, or a flu variant every 5 years, so for me 1) is the natural explanation.

From the article:

> In the USA in particular, they have produced amateurish reports that have even misrepresented work published in The Lancet Microbe.

They are angry because people (they don't like) is misquoting them in the Internet. It's very common to be misquoted (if you are famous enough) and it's very common to get angry about that.
when companies say they are “hacked”, it’s now a corporate term for “we were negligent in securing important credentials, but please shift blame to this no-name entity we called a ‘hacker’”
TSMC Seeks to Make Itself More Indispensable Than It Already Is
If the article could only provide a balanced view of that. Instead, the article is hammering home a specific viewpoint designed to manipulate it's audience into believing working is required for a long life, which for those who live that long, is generally not the case.
I made a similar mistake actually.

We used a nodejs cms called apostrophecms that had an admin panel called global settings.

We used that for managing api keys to our auth server.

We only found out a few months in that it was outputted in the html source code. They did this so it was available to JS, of course it was in their docs. So not blaming them. We glossed over it.

Annoyingly we paid a reasonable amount of money for a pen test with one of the big consultancy companies but they also didn’t see it.

I ended up finding it and checking the logs seems like it wasn’t abused but it was shocking and a big leak
I got the reference ;-)
Nowadays, I use Latex mainly for letters using the great KOMA package. I wouldn't mind switching to a markdown based system for that. Would Typst work to produce DIN format letters?
I don't anyone have solved to do this automatically, in this community.

Value it provides is for the business. If a tool can do it, there is no need to hire or keep an engineering team.

Engineering team has a running cost. Where as, using a tool or if someone makes the tool, sells it at a price slightly lower than what's spent for engineering team, doesn't it add a value?

First. It's a tool that does, so reliable more than a human.

If it is a sales pitch, someone will get it done, as there is an opportunity
Is OpenSUSE at Crossroads?
Sincere question: how do you actually make this mistake while having the skills to build a web app of this complexity level? All the frontend and full stack frameworks that I’m familiar with try pretty hard to stop you.
What is with this paranoia on HN?

5s Google says that vPro is the Remote management platform offered by Intel for business, basically a fleet management tool, which is typical for corp
they are busy writing a giant "architecture of generative AI" whitepaper.
give them a pause, they are dreaming a future agentic world of half-assed chatbots.

while the world burns with botched software updates.
I have to say man.. as I read this stuff I can't but help to understand why Bill Hicks, Douglas Adams and many others talk about marketing the way do. I found myself repulsed, because I am absolutely willing to believe that this is not an isolated frame of mind.

I will say one nice thing. There is a level of whimsy to the idea, but good grief the execution of it is a violation of everything I consider appropriate. But then. as my marketing prof once said, marketing lives on the greyish side of legal. Moral is not even a thing.
Outstanding comment, you're absolutely correct about everything. Except this:

> 1 mistake is all it takes to get a prison sentence

On the contrary, on top of everything you've pointed out, if you do kill someone (or multiple someones) at the wheel of a car you're unlikely to get more than a few months in prison AT MOST.
I’d also say “no, they can’t” given crowdstrike is at risk of being litigated into non-existence right now. Also NDAs because security.
What does all this activity in the firmament do to the worldview of premodern populations around the world ?
I can't comment on why a competitor might do this, however, from our end, it was clear there was a big gap in the market for an improved user experience.
tmux + ssh multiplexing has been a big time saver for me. I have a single script that I run when I open my terminal and I have an entire dashboard to manage my dev environment. Now I just need to figure out copy and paste in tmux lol.
Looks like the main reason is - Cuba's two main benefactors stopped supplying fuel on the cheap, as they have their hands full with their own crises.
We're already at https://threadreaderapp.com/thread/1718654143110512741.html ? xD
Submitting https://nouptime.com/support.php calls error('5') but error is not defined anywhere in the JavaScript code.
Hypermedia.Systems does - https://dz4k.com/2024/new-hypermedia-systems/

https://hypermedia.systems
I would like to nominate the title: ChaosStruck
Everything works mostly fine as long as it's not obviously dealing with gender, but will fall over as soon as anything appears to refer to gender, either due to comments or due to variable naming.

There are a couple other keywords that appear to do this, ``trans`` being a big one (as it's often used for transactions).

It does also use assumptions from comments. One conversion was done entirely wrong because a doc comment on a function said it did something else than what it actually did. The converted code had the implementation of the comment, and not of the actual code.
No, it was not degrading - Windows 10 introduced forced updating in home editions because it was weighed to be better for general cases (that it got abused later is separate issue).

The assumption is that "pros" and "enterprise" either know how to use provided controls or have WSUS server setup which takes over all of scheduling updates.
Where does it get its font from?
And those, too, are a plague of sorts. I genuinely am at a point where I tense when I see anyone approaching with a camera up.
The software I was working on in the late '80s made use of Btrieve, a ISAM database server running on Netware. IIRC there was also a SQL server of some sort that we used with it, mostly for reporting.
What is the use case for generating that many PDFs?
Maybe they should have installed CrowdStrike
When Is the Right Time to Call It Quits? Ask These Stars and CEOs
It's a crazy comparison because Germany for example is still an incredibly car-centric country.
Isn't it fairly easy to get an address like marca's? I'm sure anyone who is responsible for the place would make the connection to IT security.
How We Got from There to Here: A Story of Real Analysis
> No, but even if the US and Western Europe went net zero, that's still not enough to offset global GHG emissions coming out of China to prevent catastrophic climate change.

Show me the math/source, if you want to claim this, please. US and W. Europe outsource their emissions because they buy their electronics and clothes from e.g. China and Bangladesh. What is a US/WE net zero? They stop buying Chinese product, and China stops producing them for US/WE?
Unfortunately not. Proper writeup would require sitting down for some software (and hardware) archeology to dig out stuff that in some cases seems to have been pulled off the internet on purpose (original open source EFI 1.10 release) or by virtue of disappearing companies (SRM source & documentation disks for OEMs, various random workstation documentation and programs that don't necessarily made it to bitsavers, things like that)
"Stux got out potentially because someone brought their laptop to work, the malware got into said laptop and moved outside the airgap from a different network."

The lesson here is that even in an air-gapped system the infrastructure should be as proprietary as is possible. If, by design, domestic Windows PCs or USB thumb drives could not interface with any part of the air-gapped system because (a) both hardwares were incompatible at say OSI levels 1, 2 & 3; and (b) software was in every aspect incompatible with respect to their APIs then it wouldn't really matter if by some surreptitious means these commonly-used products entered the plant. Essentially, it would be almost impossible† to get the Trojan onto the plant's hardware.

That said, that requires a lot of extra work. By excluding subsystems and components that are readily available in the external/commercial world means a considerable amount of extra design overhead which would both slow down a project's completion and substantially increase its cost.

What I'm saying is obvious, and no doubt noted by those who've similar intentions to the Iranians. I'd also suggest that the use of individual controllers etc. such as the Siemens ones used by Iran either wouldn't be used or they'd need to be modified from standard both in hardware and with the firmware (hardware mods would further bootstrap protection if an infiltrator knew the firmware had been altered and found a means of restoring the default factory version).

Unfortunately, what Stuxnet has done is to provide an excellent blueprint of how to make enrichment (or any other such) plants (chemical, biological, etc.) essentially impenetrable.

† Of course, that doesn't stop or preclude an insider/spy bypassing such protections. Building in tamper resistance and detection to counter this threat would also add another layer of cost and increase the time needed to get the plant up and running. That of itself could act as a deterrent, but I'd add that in war that doesn't account for much, take Bletchley and Manhattan where money was no object.
I was a little confused when reading "Getting Started" page as it is not immediately obvious that you need a vynil player and a timecoded disc to use it.

And I am surprised that there was an open-source software for this.

I wonder if there is software to do scratches using a mouse or a MIDI slider? It looks like Mixxx might allow that using scripting.
The IRS doesnt require any auth if you print out whatever and mail it to them, no internet. They just believe you
The pthread_mutex_t is focused on compatibility at any cost. So while you're right that the C++ stdlib chooses this too, it's not actually a good choice for performance.

But I think you're right be sceptical that somehow this is to blame for the Python perf leak.
Isn't GPT-4, rather than GPT-4o the general best one? I am not talking about benchmarks, but the personal experience instead. GPT-4 always seem more understanding, says no where it should more often, corrects and identifies errors more often. 4o seems to go with the flow without much notice/inspection and keeps blabbering the way it does instead of following the conversation style.
That is even scarier. Which means that they might already got hacked due to some other incompetence or misstep.

But I 100% agree. There is a good book on that topic:
Normal Accidents: Living with High-Risk Technologies by Charles Perrow
That's how we use S3 in Peergos (built on IPFS). You can get S3 to verify the sha256 of a block on write and reject the write if it doesn't match. This means many mutually untrusting users can all write to the same bucket at the same time with no possibility for conflict. We talk about this more here:

https://peergos.org/posts/direct-s3
Both are assumptions.

Cant follow either of you XD
Don’t mistake complexity for intelligence.
Siblings miss crucial life-extending treatment because of CrowdStrike outage
Full title:

Siblings miss crucial life-extending treatment at Seattle Children’s because of CrowdStrike outage
The Netherlands was as car-supremacist a country as any other until the 70s. They fixed their stuff and now their bike infrastructure is excellent: people move to their destinations faster and safer and cheaper and cleaner than in everyone had to travel in an automobile.
I’ve seen people make exactly this mistake with Next.js. IMO React server components is a fantastic tool for losing track of what’s exposed client side and what isn’t.
It only takes a single mistake.

A little tired because you didn't sleep well, or worried about a relative in the hospital, or you stubbed your toe that morning and it's distracting... and whoops.
> I've seen systems written this way that have been running for over 20 years.

So? History and same mistakes have repeated for centuries in many areas. Does that make it good?

> I have anecdotal data from many projects developed by many teams in multiple companies now that show the business disruptions have decreased and decreased considerably.

And so? Someone else likely has anecdotal data otherwise. How do you even show this? Was everything else the same except this "server" vs "serverless" change? That in itself is impossible unless you know how to freeze time. Lots of variables in your company are likely different every week or month. People come and go. The market changes. Etc.

> some aren't affected at all.

Like if you close your eyes and pretend it doesn't exist? Sure. If you don't care it definitely doesn't exist otherwise cold starts are always slower, the end. It's not just about the programming language, jit, VMs or anything. It's a worse outcome.

> that's a subjective opinion

It's objective based on your measures of objectiveness - as seen above.

> I call faster time to delivery with fewer business disruptions better.

Is that a given? How did you jump to this? Either approach has its complexities. I've seen "serverless" take longer to deliver.

> I call that making the world better.

How does that make it better? What does doing better than an estimate have to do with serverless? You can do that regardless.

We're here just going over the straw man. Where's your actual argument? About server vs serverless. Not something else.
You’re totally right. And it’s important to distinguish between the many forms of homelessness. There’s visible homeless, they are what most people think of. There are also invisible homeless, they don’t “look” homeless. Often you don’t know they are homeless except for carrying around some belongings and brushing their teeth in public places.

Businesses care about the first type because of the associated problems and are completely fine with the later.
Super cheap robotaxi rides spark widespread anxiety in China
Regulatory requirements mandate that. Stock brokers in India are required to generate this document called “Contract Notes” which includes all the trades done by the user on the stock exchanges. It also contains a breakdown of all charges incurred by the user (brokerage, various taxes etc). And this has to be emailed to every user before the next trading session begins.
I saw a post somewhere that said configuration data was added after the QE cycle, but before the broad push to the world
Cant get hacked if youre bluescreened.
If the Earth's population was 1 billion, 10 billion, or 100 billion, but the emissions were the same, in each of those cases we would be cooked to death by our own atmosphere. Even though they have wildly different per capita emissions.

Or to put it a different way, if all I knew were the parts per million of carbon in the atmosphere, and all you knew were per capita consumption figures, I would know when the atmosphere was truly cooked and you wouldn't.