skysight-inc/HackerNews huggingface dataset:
This whole f*up was a failure of management and processes at Crowdstrike. "Intern Steve" pushing faulty code to production on a Friday is only a couple of cm of the tip of an enormous iceberg.
> It is not desirable to have separate ethnic groups who "share the same language, culture and faith" distinct from the mainstream.

How so? Short term or long term?
If you have to describe it in UML, it's over-engineered.
If it is a standard production rocket, I agree. If it is a first of kind or even third of kind launch, celebrating the lessons learned from a failure is a healthy attitude. This production software is not the same thing at all.
If you go through the linked discussion on google groups you'll find Guido van Rossum advocating for using python :P
Part of what perpetuates this sort of thing is a general idea in society that one can’t do or learn something because that’s not possible for them. I’m of the opinion that if sufficiently motivated and with sufficient constraints removed, anyone can learn and do anything. The only difference between an engineer and someone breaking their back for work is that the engineer was probably coddled from birth into being told they can do anything including engineering. Not as a pipe dream but a clear path: take these classes, apply to this college, take this internship, take this job.

Meanwhile the laborer was probably told all their life they don’t have what it takes, either explicitly or not, and that thinking held them back their entire life. Why try hard in school if I am “not smart”? Why try and go to college if I can’t pay for it? Why not just do what my neighbor or my uncle does that I know is possible? Many people need to be reminded that everything is possible if they aren’t dissuaded by unhelpful ideas or people.
kids starving in Africa doesn't mean families struggling to put food on the table for their kids in America have an ideal situation. Grim is relative to local conditions, not global ones. Grim is an expression of an environments impact on the psyche and will to live.
> "Network effects"? You mean like...

In the case of airports, losing ATC at just a few major US airports would effectively paralyze the network. Or yes, the case you mentioned where you depend on four SaaS offerings, and odds are one of them will go down.
and it's also an amateurish video
as a chemist, it does make sense to allow 'invalid' things, you're learning a distribution of numbers, it makes no sense to only allow the numbers you expect, where if you know what to expect, why do you need a model?
I can’t open X on mobile safari for some time now.
Works fine for me on Firefox mobile with strict tracking protection enabled.
I remember when I was called a Dago in NYC as a kid

Yeah all us Italians are just dirty mafiaosa
I don't quite get why resource forks would be less secure. The problem of classic macOS was that there was no authorization/protection mechanism at all. Adding an MDEF to an application is just as dangerous as altering a binary under Linux. It is true that the nature of resource forks makes it a bit easier to write a generic hack, but if Linux would allow everyone and every process to edit all files, malware could latch onto some C or X11 library.
Probably not.

R8 is 0x9c in that example, which is somewhat typical for null+offset, but in the twitter thread it's 0xffff9c8e0000008a.

So the actual bug is further back. It's not a null pointer dereference, but it somehow results in the mov r8, [rax+r11*8] instruction reading random data (could be anything) into r8, which then gets used as a pointer.

Maybe this is a use-after-free?
Conservatives play funny games in their states to appease their racist and misinformed base. I wouldn’t think too deeply about it. California for example doesn’t do that song and dance and their economy is better than texas. 5th best in the world in fact if you considered california its own state separate from the rest of the US.
> Doesn't matter if you speak french every day

Of course you will have the French nationality, and of course we’ll consider you French! Don’t even need a French wife - I have many friends like this.

I might not consider you French if you scream “I hate France, vive l’Algérie” everyday, but a LOT of people will consider you French and, quote, “More French than the right-wing extremists”. Oh, the irony. You can say you hate France and all of the people in the center of Paris and Lyon will consider you are a good French.

So no, what you are saying is blatantly false.
I'm only just discovering his work. From a couple of hours of his youtube talks, he seems like an incredibly original thinker at the intersection of marketing, economics, psychology, and lateral thinking. Alchemy is at the top of my reading list.
I found windows confusing. In Linux speak, was this some kind of kernel module thing that CS installed? It’s all I can think of for why the machines BSOD
I disagree, Python is exactly the glue language that Ousterhout was describing.
Do you have some sources for your claim that MENA migrants are a net loss for Germany?
American government since the beginning of the 20th century has been on a nearly uninterrupted trend of increasing state power, both domestically and internationally. Politicians sometimes pretend to be anti-government to get votes, but every administration spends more than the previous one.

I wouldn’t call that static.
I’ve lived in lots of cities, I don’t think the dynamics are very different. Yes, crappy people mean we can’t have nice things, but that is as true in Lausanne. The problem is the way Seattle/King county mis identify or lie about the problem and then give a fake shocked pikachu face when their fixes for the wrong problem don’t work.
I see, thanks, so I guess it depends on what the solver is actually doing.
why force a shit website to allow us to view it? X is a cess pool of miss-information, over-selling, over-hyping, and generally the worst the internet has to offer. At least 4chan wears its degenerate nature on it's sleeve.
Start a story for them: "and then, the hackers managed to install a rootkit which runs in kernel mode. The rootkit has sophisticated C2 mechanism with configuration files pretending to be drivers suffixed with .sys extensions. And then, they used that to prevent hospitals and 911 systems around the world from working, resulting in delayed emergency responses, injuries, possibly deaths".

After they cuss the hackers under their breath exclaiming something like: "they should be locked up in jail for the rest of their lives!...", tell them that's exactly what happened, but CS were the hackers, and maybe they should reconsider mandating installing that crap everywhere.
I have strict enabled and I have no problem accessing. I even switched off, back on, and restarted the browser. On Mac Air M2 with FF 128.0 FWIW

Other users also noted Safari doesn't load and I couldn't reproduce.

Edit: I guess maybe a good context for a friendly reminder. You can use revanced to edit the Twitter APK and you can hide adds and sanitize sharing links

(dear god, tracking links are so ridiculous sometimes. Am I the only one who is annoyed when I get a text that's a single link and is like 10k characters? With how much time and money these companies spend on UX I'm surprised this is okay. Seriously, can you all stop doing this? I know some users here are the same people in charge of design)
Always wondered why there's non-Linux kernel information in the Linux man pages.

I mentioned this to Greg Kroah-Hartman when he did his second AMA on reddit, hoping he would comment on it.

https://old.reddit.com/r/linux/comments/fx5e4v/im_greg_kroah...

> So we rely on different libc projects to provide this, and work with them when needed.

> This ends up being more flexible as there are different needs from a libc, and for us to "pick one" wouldn't always be fair.

I think putting libc information in the Linux man page is effectively "picking one". The init section of the manual also contains systemd information, giving the impression it's the "official" init. I expected to read about the ways the Linux kernel treats PID 1 specially but got the systemd manual instead.
"The Tcl scripting language grew out of my work on design tools for integrated circuits at the University of California at Berkeley in the early 1980's. "

History of TCL, https://web.stanford.edu/~ouster/cgi-bin/tclHistory.php
anyone else notice that the 2nd reply to this was from Hal Finney? Wild.
Fun exercise! I found that the Ruby in this post resembles modern C# (probably because Ruby is a gold standard in readability, and in the last 5 years or so C# has been making big strides in readability). I've recreated the Ruby code mostly line-for-line in C# and posted it here: https://gist.github.com/waf/5c6a04899e8250cb9a89406b978c9bcc

It mapped from Ruby to C# really well. The only concept I had to add was a `BoardCell` base type for the `Mine` and `Empty` types so we could return either `Mine` or `Empty` in a typesafe way. Everything else matched conceptually 1-1.

It's 118 lines total, with 18 lines of whitespace, so 100 lines exactly. I figure the original Ruby code was also not counting whitespace so it's a fair comparison. I tried to not use any "code golf tricks" that would minimize line count. It's a full program; it could be copy/pasted into a modern .NET 8 project and run without any additional setup.

Note, I posted this same comment on the original blog post, but I've posted it here too as it might be interesting for HN folks.
There’s still work these people are finding in the US. Ever been to socal? Go to an el salvador neighborhood, one of the most recent immigrant communities. Absolutely buzzing with people going to their various jobs. Are they stamping out Fords? No. Pouring cement and hanging drywall maybe, or cooking on the line. There’s still plenty of work for people who can offer their time and their two hands over a credentialed resume in the US.
Cubans have fairly free access to the internet through mobile phones and VPN.
So it’s not like cut off or anything just internet is really slow and expensive.
But you can get a “download” of many sites including popular YouTube/Netflix etc from a neighbourhood dealer.

Source: visited a couple months ago.
https://www.universetoday.com/164890/millions-of-satellites-...
We have not even certainty that highe numbers of satellites and debris won’t alter earth’s outer magnet field
By-passing the discussion whether one actually needs root kit powered endpoint surveillance software such as CS perhaps an open-source solution would be a killer to move this whole sector to more ethical standards. So the main tool would be open source and it would be transparent what it does exactly and that it is free of backdoors or really bad bugs. It could be audited by the public. On the other hand it could still be a business model to supply malware signatures as a security team feeding this system.
Nothing special; here is the pandoc command I use to transform tex without tikz:

for input in *.tex; do
pandoc "${input}" \
--from latex \
--to html \
--pdf-engine=latexmk \
--css="styles/texstyle.css" \
--standalone \
--mathjax \
--toc \
--number-sections \
--output="${input%".tex"}.html" ;
done

My pandoc version is:

pandoc 3.1.9
Features: +server +lua
Scripting engine: Lua 5.4
But is there a need for quick global releases?

Is it realistic that there's a threat actor that will be attacking every computer on the whole planet at once?

I can understand that it's most practical to update everyone when pushing an update to protect a few actively under attack but I can also imagine policies where that isn't how it's done, while still getting urgent updates to those under attack.
This is not behavior exclusive to immigrants though. Either way the welfare state is not very strong in the US. There are 75,000 homeless people in LA county for example.
A customer should be able to test an update, whether a signature file or literally any kind of update, before rolling it out to production systems. Anything else is madness. Being "vulnerable" for an extra few hours carries less risk than auto-updates (of any kind) on production systems. As we've seen here. If you can point to hard evidence to the contrary, where many companies were saved just in time because of a signature update and would have been exploited if they'd waited a few hours, I'd love to read about it. It would have to have happened on a rather large scale for all of the instances combined to have had a larger positive impact than this single instance.
> You may not be concerned about the crime, but many voters are.

Then I have great news for them! Immigrants to the U.S. are responsible for fewer crimes per capita than native-born Americans.
That’s a tautology that seems just as applicable to humans.
Do sysadmins actually run any of them for large systems like stores, hospitals, airports etc?
Interesting, thanks for sharing! Do you have any papers or other publicly available works to share that discuss this? I'd be very interested in reading about it.
If anyone has a problem where Twitter does open for them on Firefox, I found the LeechBlock extension to be very useful. Took less than a week for the muscle memory of opening it to go away.
I guess it's good to be the richest man in the world.
I made one too like this too, it would use .gitignore like files (.gptignore) to filter what goes into the prompt.
> God forbid that the solution is committing binary images to the Git repository.

Where does the misconception that that's somehow a problem stem from? In 30 years of having web sites, that approach has invariably served me well.
None of these features require internet or a windows machine, most of them do not require a computer or even a microcontroller. Strain gauges can be useful for checking for an imbalanced load, but they cannot inspect the metal for you.
We’ll be all right as long as they don’t all jump at the same time, you say? ;)
The question is, what's going on here? Is this Firefox blocking some path/subdomain/cookie on x.com because it's used by their tracking widget, but the same is also used by some important part of the site itself, so it's essentially a false positive and Mozilla need to adjust the filter to be more specific? Or is the site detecting the ad blocker and purposely refusing to load?
in the article they talk about syntactically invalid smile formula (mismatch parenthesis and cie, check figure 1b), impossible molecules can be expressed with syntactically valid SMILE. But nonetheless your explanation appears valid to my non chemist eyes. from the paper:

Structural biases limit generalization An ideal generative model would sample evenly from the chemical space surrounding the molecules in the training set. The observation of structural biases in the outputs of language models trained on SELFIES is at odds with this goal.
I don’t think anyone knows what factors lead to the next einstein or else we’d have nothing but einsteins coming out of the public school system.
That was strange. I had to reread it to confirm that he's just talking about some random kid looking at the publicly-available game data files, not an employee or anyone else with special access.
Once someone gave me a similar argument in a rather rude utilitarian way: Look at all the white kids in our society. They get all the support they need. Any Einstein in there, we will catch. Adding support want change the outcome much. But look at the immigrant's children. There's so much hidden potential. Adding support has the chance to change the outcome dramatically.

I still have to come to terms with this way of thinking but in a world of limited resources it gave something to think about.
Yes, it's been for some time now. This solved my problem of reading X (former Twitter).
There is a solution, but don't use it, use mastodon:

In the settings, enable Firefox containers. This allows you to seperate the cookies of X from all other sites. Also install uBlockOrigin to block all trackers on X itself.
I have no idea what you’re talking about in practice. It felt like MBAs or less competent perspectives abounded when I was in cloud.
spaceX celebrating when their rocket blows up after a certain milestone it's like us devs celebrating when our branch with that new big feature only fails a few tests. Did it pass no? Are you satisfied as first try? Probably
Yup. This is correct.

Firefox taking a hard nose approach here makes it impossible to use this on parents / grandparents computers to help keep them safe.

I don’t mind losing Twitter… but I can’t speak for others in my family. Just sucks. But on popular sites that run blockers, there should be like a little pop-up that says, “Give me access, and let this dumpster fire burn.”
It was a binary data file (supposedly invalid) that caused the actual CS driver component to BSOD. However, they used the „sys“ suffix to make it look just like a driver supposedly to get Windows protection from a malicious actor to just delete it. AFAIU.
DPO most essentially has human feedback, depends on what the preference optimizations are
Stereo HiFi personal music was a new thing though. Transistor radios were mono and were listened to through a low fidelity crystal earphone in one ear. The time was ripe for mobile personal cassette players though, business had been using small portable cassette recorder/players for a while to dictate notes while away from the office. They became very cheap; I bought one in college and connected it to the Sennheiser headphones I used with my stereo using a hacked adapter from Radio Shack. It was mono but I had mobile cassette music perhaps a year before the Walkman came out. It was kind of surreal to have my own personal music while walking, where I could listen to lots of stuff that would never get radio play. For example, listening to King Crimson while walking through a department store. It made the world seem different, I had more control over the environment, I didn't have to listen to the Musak or hear people talking. People would stop me and ask about the system and go off and build their own. There were probably quite a few people who invented their own before Sony released the Walkman.
From what I read and experienced, it makes the size of the Git repository much bigger than it should be with how Git tries to keep copies of old binary files (specifically the data and hash) since it cannot diff those unlike plaintext. You eventually have cache of the old files in the repo if you're not deliberate with setting --depth when cloning.
No it's not. Small businesses are used to paying $5-$15 for remote control, reporting, 3rd party patching, reports, automation, etc. Unless the business has huge margins, you're getting laughed out of the room @60.
Feature :)
No, the problem is Mozilla.

Management has been so bad that Firefox is hard to recommend now. Servo is a great engine but the company behind it isn't earning support and I think it's not going to last. I'll keep using Firefox forks until they don't work, but I won't support Mozilla by using their product directly anymore.
Nobody's defending X. The point is that it doesn't matter that FF has strict privacy controls if sites can afford to just...not support FF. Its market share will dwindle to zero and privacy will be dead.

FWIW it seems like the browser market is shifting away from third party cookies anyways, so I'm not sure this is a huge issue.
On IOS that's just Safari with a firefox logo...
The amount of room they give to interpret that vague statement however they want could fit an aircraft carrier. Their actual policy position is in their project 2025 materials and it curtails legal immigration pretty significantly along similar lines that trump attempted to tread in his first presidency.
The manuals have the following pages on system calls:

https://www.man7.org/linux/man-pages/man2/syscall.2.html

https://www.man7.org/linux/man-pages/man2/syscalls.2.html

There are also the manual pages for each individual system call.

The syscall numbers unfortunately cannot be found in the manual. They are found in published tables on the internet.

They are defined in numerous locations in the Linux kernel tree. They are included via the linux/unistd.h header which in turn includes the appropriate asm-generic/ and asm/ headers.

https://github.com/torvalds/linux/blob/master/include/uapi/a...

https://github.com/torvalds/linux/blob/master/tools/arch/x86...

https://github.com/torvalds/linux/blob/master/tools/arch/x86...

https://github.com/torvalds/linux/blob/master/tools/arch/arm...

There's quite a bit of complexity here. The system call numbers are stable for each architecture but may differ between architectures. Some architectures have multiple historical versions of the same system call which are maintained for backwards compatibility, others have just the latest version of the relevant system call with the version number removed.

I assume this complexity is the reason why this information is not typically included. People expect you to rely on the libc which abstracts all this.
A Minimal Implementation of Vllm
I built vllm from the ground up. Starting from the same kernels, I integrate them into GPT2, build the KV cache manager, the scheduler, and finally the FastAPI server on top. This is purely educational for now, but in the future it will become production ready.
You have to opt-in to turning tracking protection to strict. When you're about to there's a prominent warning that it will likely break some websites.

Using Firefox in its default configuration shouldn't break websites.
This is going to code as radical, but I always assumed it was derivable from bog-standard first principles that would fit in any economics class I sat in for my 40 credits:

the natural cost of these bits we sell is zero, so in the long run, if the bar is "just write a good & tested kernel driver", there will always be one more subsequent market entrant who will go too cheap on engineering. Then, they touch the hot wire and burn down the establishment.

That doesn't mean capitalism bad, but it does mean I expect only Microsoft is capable of writing and maintaining this type of software in the long run.

Ex. The dentist and dental hygienist were asking me who was attacking Microsoft on Friday, and they were not going to get through to the the subtleties of 3rd kernel driver release gating strategy.

MS has a very strong incentive to fix this. I don't know how they will. But I love when incentives align and assume they always will, in the long run.
https://commons.erau.edu/cgi/viewcontent.cgi?article=1153&co...
Yes, if CrowdStrike was following industry best practices and this happened, it would teach us something novel about industry practices that we could learn from and use to reduce the risk of a similar scale outage happening again.

If they weren't following these practices, this is kind of a boring incident with not much to be learned, despite how dramatic the scale is. Practices like staged rollout of changes exist precisely because we've learned these lessons before.
https://qemu-project.gitlab.io/qemu/system/gdb.html
The US (and Russia...) made a commitment to protect Ukraine in exchange for Ukraine giving up its newly-owned nuclear weapons after the USSR broke up.
We use invisible light to draw patterns on crystals to control the power of lightning. Definitely magic.
Meanwhile if we forget what his lips are doing and watch for the fist we’d see his republican party has a different agenda. Namely one about picking certain favorite nations and excluding others. Really just read the project 2025 materials and forget whatever tangents he goes on, as he doesn’t hold himself accountable to what he might say.
"African (predominantly South Sudanese) youth comprise at least 19 per cent of young people in custody despite being less than 0.5 per cent of Victoria's youth population."

https://www.abc.net.au/news/2021-03-25/racial-profiling-conc...
Been 3-4 months since it worked with Firefox Focus.
It's not rare in academia to translate Matlab scientific libraries into Python.