skysight-inc/HackerNews huggingface dataset:
While I believe Linux is a more reasonable operating system than Windows, shit can happen everywhere.

So if you have truly mission critical systems you should probably have more have at least 2 significantly different systems, each of them being able to maintain some emergency operations independently. Doing this with 2 Linux distros is easier than doing it with Linux and Windows. For workstations Macs could considered, for servers BSD.

Probably many companies will accept the risk that everything goes down. (Well, they probably don't say that. They say maintaining a healthy mix is too expensive.)

In that case you need a clearly phased approach to all updates. First update some canaries used by IT. If that goes well update 10% of the production. If that goes well (well, you have to wait until affected employees have actually worked a reasonable time) you can roll out increasingly more.

No testing in a lab (whether at the vendor or you own IT) will ever find all problems. If something slips through and affects 10% of your company it's significantly different from affecting (nearly) everyone.
Does the price go down proportionally with the degree of tilt?
I work in a hospital system. The OR is only doing emergency cases today; ambulatory clinics are closed; everything is being done on paper; response communication is via email and peer-to-peer text.
Which means a denial of service attack on the system is most certainly coming via that jurisdiction in Texas that has the single judge who loves issuing national injunctions.
The situation might have changed since I last used Excel on Mac, but in 2018, the "Excel" on Mac barely resembled the Excel on Windows. Many obvious and useful features were missing.
Some kind of phone telecom funded pseudo grassroots lobby group.
Also the reason that Microsoft skipped from Windows 8 to Windows 10. Too much risk of apps testing the first 8 characters of the Windows version against "Windows 9" and concluding they were running on 95/98 rather than 9.
I want to see strong AI used in video games, especially strategy games. People often retort that strong AI is not fun; it's too challenging and that's not what players want. But once we have a strong AI we can adjust its goal function in fun ways. What you're describing is effectively the same, and it's the first time I've seen this used in a strong AI.
This is true. You are basically one escalation attack on the CFO away from someone wiring money to hackers and a new remotely embedded admin freely roaming your network.
Most of the software you list either has a Mac version or will interop well with Apple's ecosystem and has for a decade.
I went, too. Unfortunately at least some sites are not okay: https://www.nationalgeographic.com/history/article/150901-is... (2015).
Have you tried KOreader? https://koreader.rocks
Unintentionally troubleshooting a systemd way to filter traffic
I don't know that incompetence is the best way to describe the forces at play but I agree with your sentiment.

There is always tension between business people and engineering. Where the engineers want things to be perfect and safe, because we need to fix the arising issues during nights and weekends.
The business people are interested in getting features released, and don't always understand the risks by pushing arbitrary dates.

It's a tradeoff which in healthy organizations where the two sides and leadership communicate effectively is well managed.
Unfortunately Google did not succeed to get more into schools around the globe with chromebooks, which is a pity by my opinion. That helps to keep the Win/Office monopoly situation to go on in organizations and businesses hiring people who never used another software than one from Microsoft.
C is Great, Long Live C! (ACCU 2023) [video]
Priority gives you 1 small bag and 1 cabin bag. I pay just so I can take a cabin bag.
Today's incident shows that the real problem is actually that organisations spend too much (money, but too little time / manpower) on security.

Hey, third-party vendor, I'll give you all the money you want, I'll let you pwn all my systems, I'll be your little bitch, just make me secure, I don't have time for all that security shit, kthxbye.
Blaster legit took down over half of computers on the internet.
I know a few people who have Zscaler deployed at work. It will routinely kick them of the internet, like multiple times a day. It has gotten to the point where they can sort of tell in advance that it's about to happen.

The theory so far it that it's related to their activities, working in DevOps they will sometimes generate "suspicious" traffic patterns which will then trigger someone policy in Zscaler, but they're not actually sure.
> which is fast and secure out of the box

Disagree. At least in the context of business networks.

My favorite example is the SMB service, which is enabled by default.

In the Linux world, people preach:

- disabling SSH unless necessary

- use at least public key-based auth

- better both public key and password

- don't allow root login

In Windows, the SMB service:

- is enabled by default

- allows command execution as local admin via PsExec, so it's essentially like SSH except done poorly

- is only password-based

- doesn't even support MFA

- is not even encrypted by default

It's a huge issue why everyone gets encrypted by ransomware.

I always recommend disabling it using the Windows firewall unless it is actually used, and if it is necessary define a whitelist of address ranges, but apparently it is too hard to figure out who needs access to what, and much easier to deploy products like Crowdstrike which admittedly strongly mitigate the issue.

The next thing is that Windows still allows the NTLM authentication protocol by default (now finally about to be deprecated), which is a laughably bad authentication protocol. If you manage to steal the hash of the local admin on one machine, you can simply use it to authenticate to the next machine. Before LAPS gained traction, the local admin account password was the same on all machines in basically every organization. NT hashes are neither salted nor do they have a cost factor.

I could go on, but Microsoft made some very questionable security decisions that still haunt them to this day because of their strong commitment to backwards compatibility.
I'd kinda agree if it didn't include actively trying to scam me for extra money. It's not about them saving cost anymore, it's about them trying to trick customers for extra money against their will.
Isn't that basically the point of WinRT and Windows 10 S Mode? The problem is getting developers to adopt the new more secure APIs.
Frontier airlines literally wouldn't let me check in to my flight back without paying 25$, I would just get a loading bar if I didn't select a seat.

https://www.youtube.com/watch?v=hIw5WlBZ-ds

I tried every trick in the book, but in the end only dev console could save the day. It was a null reference exception on not buying a bundle...
not affected because the bug is in the windows specific code, not because it works so much different on linux
Ryanair is not straight forward, it's tricksy and only cheap if you hit the magic set of conditions that let you get the cheap deals at the cheap times.

What people object to is not the no frills concept but the

"ahaha you didn't opt for <insert obscured choice> so now you have to pay an extra €20 would you like to pay in GBP? That will £40 please or you're not getting on the flight home.

p.s. Our cabin bags are ever so slightly smaller than the standard every other airline uses and if yours don't fit it will another €50 surcharge."

situation.
I find that the best way to avoid abuse is to fly first class. Plus, it includes free checked bags, champagne, and a nice curtain to hide the view of the peasants.
New framework allows robots to learn via online human demonstration videos
To add to your comment, music from that time was contemporary and reflected the needs and wants of the general population of the time.

Forcing new composers to conform to what old people want from because tradition, damn it is a recipe for creative disaster.
Doubtful, but if it isn't authorized by statute, a law should be passed not regulation.
Oh. It's Minecraft.
"And yet no one cares. Have you heard of this work before? How many times will you hear of it from now on?" I think he might have answered his own questino.
This screenshot is a real eye opener: https://hallofshame.design/content/images/size/w1000/2022/07...

So, if you want a check-in bag, you pay almost 50% more than the "value" price, and if you want the same level of service as with "legacy" airlines (except "fast track through security"), you pay almost double?
It takes years to learn to compose in Bach's way. However, if you go to a university for this, they will tell that they don't want new compositions in Bach style, they want some "modern" classical music. So what is missing is some kind of Bach academy, where they would promote composers writing new music in this style.
I wish. Only (mostly small) tech savvy companies might maybe make that move at some point. Herd mentality and short term convenience have already won that battle. AI will only add to that since for 99.9% of people LLMs and cloud are synonyms.
What's even better is the reaction here:
https://www.reddit.com/r/sysadmin/comments/1e6vx6n/comment/l...
arm is also surprisingly high at 557.95x according to my broker btw. yet it's the only stock in my portfolio that reliably goes up.
It's funny how that works.

Leave FAANG and most internal developers at large corporations are running Windows. It wasn't until I started at a smaller shop that I found people regularly using Linux to do their jobs, usually in a dual-boot or with a virtual Windows install "just in case" but most never touched it.

I'm presently working supporting a .NET web app (some of which is "old .NET Framework) but my work machine runs OpenSUSE Tumbleweed. I can't see that flying at the larger shops I have previously worked at. I'll admit, that might be different -- today -- I haven't worked at a large shop in more than a decade.
>All this tells me is that you don’t like scientists

I think you’re extrapolating too much. Again, you’re making a strong claim based on limited evidence which is the hallmark of bad reasoning. I work in research and publish/referee articles regularly. I have no qualms with scientists, but I’m also acutely aware of how the system is flawed.

>I think the first claim is made without evidence

I get the impression you’re too riled to actually see my point so I’ll be explicit. We have lots of evidence that bad science is pretty widespread, especially in certain disciplines. We also have anecdotal examples of fraud. The latter is a subset of the former, with the remainder being good work. How big of a subset is it? Your claim is that it's small; my claim is we don't know.

There’s no goalpost shifting. All of the points made are related to the issue of fraud. Asking for evidence of your claim is not goalpost shifting, nor is understanding that fraud is a consequence of human incentives for status that exist in practically every domain. I simply made the point that we know there’s a problem, but likely don’t know the extent of it. Meanwhile, you made the claim that academic fraud is rare. And yet you also claim it’s impossible to prove that it’s not rare. It’s pretty clear that you’re not making a reasoned argument, which is the irony of someone defending the current state of science.
Show HN: A matcher designed to solve logical and text variations match problem
A high performance matcher designed to solve AND OR NOT logical word matching and TEXT VARIATIONS problems.
> My org which does mission critical healthcare just deployed ZScaler on every computer which is now in the critical path of every computer starting up

Hi fellow CVS employee. Are you enjoying your zscaler induced SSO outages every week that torpedo access to email and every internal application? Well now your VMs can bluescreen too. A few more vendor parasites and we'll be completely nonfunctional. Sit tight!
Yes. I stopped flying RA after a problematic experience booking.

I find all airline bookings never work first time - usually three, four or five attempts are required.

RA bury deeply the option for automatic currency conversion at their extremely high rates, which is active by default.

On a third or so attempt to book, I managed to miss turning that off, and was accordingly ripped off, despite my explicit wish not for it happen.

If a company is actively, knowingly and willingly harming you, it's time to walk away.
Peoples inability to come up with a better alternative doesn’t mean there aren’t issues with capitalism.

Fossil fuels are the easiest and most effective way of powering transport at the moment (and pretty much the only game in town for air travel). Doesn’t mean they aren’t a massive problem.
Back around 2000 or 2001 McAfee or Symantec (I can’t remember) released some virus definitions that caused Macs to kernel panic repeatedly. I worked at a college at the time which required students run it, and had to deal with the fallout.

OS X was using Unix back then as well, and the foundational design didn’t save it. But like you mention, Apple does more to protect the underlying system today than they did back then. I can’t even remember the last kernel panic I had. They used to be a semi-regular occurrence.
Southwest is one, where late boarders always get the middle seat.

That sucks.

BTDT.
To leave Malta. I was interrogated by a member of Israel Defense Forces, though.
Man, talk about a mass-phishing opportunity.
This seems more like premature indirection than abstraction.

There are other design “paradigms,” such as denotational design. You start with and build from abstractions.
I'm guessing someone somewhere said that "it must be stored in hard copy in a safe" and the answer was in the range of "we don't have a safe, we'll be fine".

Or worse, if it's like where I worked in the past, they're still in the buying process for a safe (started 13 months ago) and the analysts are building up a general plan for the management of the safe combination.
They still have to start the discussions with the union to see how they'll adapt the salary for the people that will have to remember the code for the safe and who's gonna be legally responsible for anything that happens to the safe.
Last follow-up meeting summary is "everything's going well but we'll have to modify the schedule and postpone the delivery date of a few months, let's say 6 to be safe"
This is gold. My friend and me were joking around that they probably did this to macos and linux before, but nobody gave a shit since it's... macos and linux.

(re: people blaming it on windows and macos/linux people being happy they have macos/linux)
The first time I experienced crowdstrike in a corporate environment it seemed obvious that something like this would eventually happen.
Ask HN: Why Crowdstrike posts no rank more better
Honest question. I've never wondered too much about ranking on the front page. Not mad, just curious. There have been multiple posts about today's outage with hundreds more votes than posts ranking above them.
Considering what CrowdStrike's software does, I'd say the majority of their updates could be quite easily argued as being "emergency" updates, so yeah, quite possibly they've gotten into the habit of "omg URGENT must break glass" way too often.
But do you try your hardest to be first onto the plane?!
Quite nice achievement.
Those EDR software is implemented as a kernel driver.

A third party closed source Windows kernel driver that can't be audited. It gathers massive amount of activities and send back to the central server(which can be sold) as well as execute arbitrary payload from the central server.

It became single point of failure to your whole system.

If an attacker gain control of the sysadmin PC, it's over.

If an attacker gain administrator privilege on EDR-installed system, it run the same privilege with EDR so attacker can hide their activities from EDR. There aren't many EDR products in the world it can be done.

I'd like to call it "full trust security model".
those are all valid questions though.
Thanks for info, but I do NOT need network stack. I have my own, I can build my own. I need decent hardware, because I lack knowledge and skills here. Also, its not an interesting stuff to me to play with DSPs and all that stuff really.
The only reason I do it is because if you get on the plane last, there may not be any room for your bag in the overhead compartment near you.
What I dislike in Unity and Godot in regards to C#, is magic methods outside common .NET practices.

I guess it is a price to pay for making the language relevant for game devs.
With numbers like that, either the market is crazy or the market believes the actual meaningful earnings are substantially higher than the GAAP reported numbers. Although even there the difference would have to be pretty big.
Isn't it currently the #1 thread on the frontpage? I don't see why we need more posts than that.
Monocultures are known to be points of failure, but people keep going down that path because they optimize for efficiency (heck, most modern economics is premised on the market being efficient).

This problem is pervasive and effects everything from food supply (planting genetically identical seeds rather than diversified "heirloom" crops) to businesses across the board buying and gutting their competitors thus reducing consumer choice.

It's a tough problem akin to a multi-armed bandit: exploit a known strategy or "waste" some effort exploring alternatives in the hopes of better returns. The more efficient you are (exploitation), the higher the likelihood of catastrophic failure in weird edge cases.
Study: Automation's Ripple Effects on Careers and Voting Patterns
Show HN: Voximity – gather everyone, without crosstalk
Most of the time I spend with friends and family is online because we like to get on Discord and play games together. All of the time I spend with co-workers is online because I work at a remote company.

But as these online social gatherings got bigger, I started to loathe them. Everyone wants to get together in the same room because it's fun, like a big party! But once there's more than one topic of conversation, the crosstalk becomes unbearable. It's like trying to socialize over a conference call. This is what Voximity aims to solve, in the simplest way I could think of. Voximity allows everyone to get together and have many different conversations naturally by mimicking what it's like to hang out in person, like in the olden days.

You can see it in action here: https://voximity.chat/. I would greatly appreciate your feedback!
Even Excel is beginning to be regarded as a dangerous piece of software that gives the illusion of power while silently bankrupting departments who depend on the idea that large spreadsheets is an accurate and reliable way to analyze large/complex datasets.

the 90ies are over but for some reason average enterprise department have a problem internalizing the fact that the demands today is different then they were 25 years ago.
Well, then why would we have Linux and macOS versions of CrowdStrike Falcon Sensor (tm), too?
[dupe]

Some more discussion: https://news.ycombinator.com/item?id=40999575
Security technology harming security? Shocker. We need less monoculture. Trouble is monoculture pays. Write the software once, deploy it everywhere - free money.

I manage a simple Tier-4 cloud application on Azure, involving both Windows and Linux machines. Crowdstrike, OMI, McAfee and endpoint protection in general has been the biggest thorn in my side.
Probably, given that they've probably done more open research than anyone else (open compute, llama, basically all of the Big Data stuff came from papers by Google and code from Facebook).

They're unlikely to be praised around here, but I think history will potentially be kinder to them.
If the user want remote code execution (auto updates are) in kernel space, let them.

Apple sell the whole hardware stack. I don't think limeting drivers would fly on Windows or Linux.
Yeah! I know about NPR.. cool project :)
There is a big difference between working when you want to, and working when you have to. Even if you find the most fulfilling job in the world, you may still wish you had more flexible vacation, possibility to work from home, etc. Working extra hours is nice when that is your choice, and it sucks when it means you have no time for things that happen in your personal life.

If I had enough money to be "early retired", I would probably still spend most of my days doing something meaningful, but the difference would be that I could take a break any time I would want to, change my focus anytime I would want to, etc. So it would feel completely different from having to follow someone else's rules.
On a positive note, I'm in morocco and getting money from ATM wasn't working for the whole day I believe because of this outage. I was at the till in a supermarket and people started asking if they can chip in to pay for some food I bought because I didn't have the cash.

Humanity 1 - Technology 0

Edit: Outage of all ATM's in Morocco was yesterday not today. so not sure how the two are related.
> Apart from the low cost part

Yes, no, that. It used to be extremely expensive to fly.
Past performance is not necessarily indicative of future performance
You got to admire Apple fanboy's nerve to say Apple is a better company when it comes to IT in a professional setting.

It appears whatever their basic and narrow use-case is becomes what the whole "corporate IT" is.

Windows sucks and recently Microsoft has been on a path to make it suck more, but saying Apple is better for this part of the IT universe is.. hilarious.
I think it's related to the business culture in Ireland. Interacting with local businesses here, they don't seem to have any problems with ripping you off. Irish people don't complain enough. Also there's no enforcement of the law. Ryanair gets brought to account by the British CAA (civil aviation authority) now and again because of it's dodgy practices never by the Irish one. Government has told it's regulators to have a soft touch on businesses so that the country is attractive to foreign companies.
> No one “loves” Teams, but honestly it serves its purpose for us at no cost.

Of course there's a cost, its just hidden and you are forced to pay it. Microsoft used its monopoly position to move into a new market.
You don't need Crowdstrike to disable any of these things. You can use regular group policy. I'm not saying Windows can't be hardened. I'm saying these third party kernel hooks add negative value.
TL;DR: Join your local climbing/bouldering gym.

I never get tired of saying this. I moved across the ocean at the age of 33, about 10 years ago. I have 3 main groups of friends. Some of them I see very frequently, others less so - but still keep in touch frequently with some of the people in them.

Almost everyone in these groups met through climbing and bouldering.

That is still the main (not only!) forum where I meet one of the groups. Another group is balanced between climbing, meeting up at the park, board game sessions / house reunions, etc.

Climbing, despite being mostly an individual endeavour, is a highly social sport. Most people are nice and will be willing to help out and exchange beta (tips on how to achieve a certain move), or just generally chatting. Soon enough you'll start exchanging phone numbers and creating or being invited to whatsapp groups or similar.

It helps you keep fit and active, helps with socialising, and will probably eventually lead to trips to places you never thought visiting, if that's your thing.
Alas, can't watch youtube videos without logging in as of yesterday. Any text/archive link?