skysight-inc/HackerNews huggingface dataset:
> It was, by all appearances, purely human error — a few bad keystrokes that demonstrated the fragility of a vast set of interconnected networks in which one mistake can cause a cascade of unintended consequences.

Cute. It's always those bad keystrokes. If only these crowdstrike employees worked on their good keystrokes that morning. I blame management.

> Russian hackers working on behalf of Vladimir V. Putin bring down hospital systems across the United States. In others, China’s military hackers trigger chaos, shutting down water systems and electric grids to distract Americans from an invasion of Taiwan.
... Among Washington’s cyberwarriors, the first reaction on Friday morning was relief that this wasn’t a nation-state attack. For two years now, the White House, the Pentagon and the nation’s cyberdefenders have been trying to come to terms with “Volt Typhoon,” a particularly elusive form of malware that China has put into American critical infrastructure.

So we have cyberwarriors and cyberdefenders? And the russians, china, etc have 'hackers'. If ever there was a doubt what the nytimes really is.

> The fear is, in an election year, that the next digital meltdown may have a deeper political purpose.

Oh dear. More bad keystrokes on the way?

Did anyone glean anything of value from the article? There was a lot of words but no substance.
You’re not wrong, but the price of diamonds isn’t due to their scarcity, but rather control od supply. De Beers controls the supply and therefore the price.
The loss of the future is hard to accept; I don’t think I ever really have. Every year is the hottest year of your life, or the coolest for the rest of your life; watching the destruction of the biosphere that is your home. Facing down decades of that is terrifying, and the young have more decades ahead of them than anyone.
It's pretty obvious they meant the material possessions. Isn't it in guidelines to look for the more charitable options?
I have profound respect for Walter and all his work, same for Andrei; but his comment was off-topic.
How nice of the NSA to help them after their exploit was leaked (vulnerability known for many years before that) and weaponized by Russia to attack Ukraine.
I’m not even sure Microsoft could actually restrict 3rd party code running in kernel mode like that from a legal perspective. There are a certain requirements about documenting interfaces in Windows from the 90s antitrust stuff.
> my information was exchanged only between the two parties with my consent, on an encrypted channel

Say WhatsApp is found to have a security hole that has been leaking data to 3rd parties. What may be the fate of dentists / doctors that decided to use it an "encrypted channel" for medical records? Are doctors / dentists not fat targets for lawsuits? What might the guidance be from their lawsuit insurance policy?
OP's article is not about LaTeX. Why are we discussing Typst and LaTeX in this thread? They're not what OP's article is about.
>There is a frustrating amount of nuance being lost in this discussion, and as usual it's devolving into tribalism.

It's ironic that you're saying this given the points you're making below. Let's go through them:

>Are kernel mode drives maybe a bad idea? Yes!

You can't have a EDR product that isn't kernel mode. Otherwise it's trivial for malware to evade (eg. by being kernel mode themselves).

>Should Windows be able to automatically roll back if a kernel mode driver fails? Yes!

see: https://news.ycombinator.com/item?id=41019743

>Should hospitals, police stations, airlines, etc be testing any and all updates that come their way prior to releasing them onto the rest of their fleets? Yes!

Getting companies to test updates is already like pulling teeth. Besides, crowdstrike said the update they pushed was "designed to target newly observed, malicious named pipes being used by common C2 frameworks in cyberattacks". Is this something you really want to sit on for testing, which might take weeks or months?

>Windows should not be the foundation upon which critical infrastructure is built. It is a bad OS. It is a rickety, insecure mess; this observation (note that I did not say opinion) has only ever increased with time.

>The NT kernel, I hear, is great. I generally trust those who say this, as they tend to be demonstrably much smarter than I am, especially with regards to kernel design, which is something I know next to nothing about.

>But Windows? Nah man. Maybe there's a good kernel running the show, but the OS as a whole is a shitshow.

What specific security issues do you think windows/NT kernel has? Moreover, how is windows being a "shitshow" relevant to the question of resiliency or dependence? Don't get me wrong, windows spying on you or using dark patterns to get you to use Edge or whatever isn't great, but it's a weird thing to bring up in a discussion about how airports run on windows, and reeks of "don't let a disaster go to waste" on the part of the anti-windows tribe.
Really cool stuff! Does it have save/load functions?
I talked to people in charge of the operations on a daily basis for years. I really don't think these considerations have changed that much since my times of leadership of an entire department managing just that.
Was generic but this quite specific example is very fine.
It's all relative to expectations. Habits can make a big difference. Participatory culture (making music, church, extended family and friend group socializing) don't need to cost much money. Consumer culture (streaming, concerts) costs more, plus you are now expected to pay $$$ for communication technology.

People can make other people happy without much money, that's my point.
> The way I remember it NLMs were pretty stable.

I think this depends on what NLMs you were running. An old job had a NetWare 3.12 server running btrieve/pervasive and it ABENDed enough that I learned how to use the debugger to get the console back and dismount volumes to avoid triggering VREPAIR on restart.
Why China Is So Interested in Kazakhstan
"Fragile" isn't the same as "will eventually fail".
Step into a realm where coding meets creativity. Explore https://github.com/cedricfrancoys/taggerand uncover a treasure trove of cutting-edge projects that challenge the status quo. Each repository is a testament to relentless curiosity and technical prowess, offering a glimpse into the future of technology.

Be a part of the journey—discover, learn, and get inspired by work that transforms ideas into reality. Your next great innovation could start here!
Kindly click.on the link below to check one of the best profile
https://github.com/cedricfrancoys/tagger
https://archive.ph/YnClG
> So complex that there are now only two

There are more than two, and the vast majority of the time people don't need anywhere near the complexity that modern browsers have shoved into them. A lean browser that supported only a bare minimum of features would go a long way to reducing attack surface. As it is now, I already find myself disabling more and more functionality from my browsers (service workers, WebRTC, JS, SVG, webgl, PDF readers, prefetch, mathml, etc)
Coins (specie that had a direct connection to a ruler, usually with the name or visage of the ruler struck on them) were invented to facilitate war. They were given to soldiers to allow them to participate in the economy of the conquered. Since the free peasantry wouldn't trade with them (unreliable: they "died for a living"). The ruler demanded to be paid taxes in his own coin. This solved several important problems: reduction of military unrest against the ruler, free peasantry became a reliable source of goods and services, and the ruler could make war as needed. A market economy emerged as a side effect.
Ditto. I did the same with GoLang a couple of years back, but didn't aim for clean/terse code: https://github.com/jedib0t/go-mines
I don't think that would work.

I've thought about this when I see bottles and other crap strewn on the streets or in parks.

Then I see a garbage can nearby that's been tipped over by someone, or an animal, or the wind.

A cigarette butt or bottle on the ground doesn't mean the person who bought it and used it tossed it on the ground. It could mean they put it in the designated garbage and someone came along and strew garbage everywhere.
Well shit, I guess I have to pivot. I was going to operate my nuclear facility with Quicktime.
The article isn't about a name collision, it's about the photo:

> confused pictures of my face with the biography of another man who shared my name
Iodine doesn't matter. You do have to account for the difference in weight/volume vs table salt though.
The current solution in many cities is no bathroom. I would rather pay for a bathroom than shit myself
Just for the sake of discussion, as a long time Linux user (but never a Crowdstrike user) -- is there anything about this outage that could only have happened on Windows? If the update had been broken in another way, could it have crashed all Ubuntu machines, or all Macs?

Not excusing what happened in any way, I'm just curious.
I vote we stop putting George Kurtz in charge of things.
Thanks for the feedback, glad you liked it!
It does, and they work similarly to their PyTorch counterparts. The explanation is on the “Running it Yourself” part of the README.
Would you mind explaining some points typst gets wrong?
A throwaway peddling anti-china propaganda in a thread having nothing to do with china? How shocking.
It’s not unusual for right wingers to not be sentimental.
aside from this being appalling, “notorious for rats and explosions” is pretty funny
you need to learn to address what people say in their comments, not keep harping on one point.

the Ranch says the building "is now a storage facility and office for the Harris Ranch Express BBQ management team, also featuring a walk-in refrigerator." Therefore, Tesla does not use or lease that building.

the Ranch says "While we host Tesla’s charging infrastructure, it is crucial to note that Tesla merely leases the property from Harris Ranch. We neither own nor operate the charging station." They don't own the charging station, it is not their property. It is Tesla's property. When you rent an apartment, it is your property, you get to say "stay off my property" and to the police "you can't search my property without a warrant"

the Ranch says, "There are no diesel plants or diesel generators on our property, a point we fervently assert" says nothing about Tesla's property. They drew a line between Tesla's property (leased from the Ranch) and the Ranch's property. Then thy issued a denial that does not include what Tesla is doing.

is how you should be reading those statements; you're welcome. Like I said, I don't have a belief or a suspicion or a care about what Tesla is doing, I have no dog in this fight. Just explaining how to analyze what the Ranch said.

Has somebody perhaps made a mistake and said "it's in that building"? Maybe, but neither the Ranch nor Tesla has said that Tesla is not doing this, and the Ranch could be hiding behind that error to mislead us about what Tesla is doing.
>The oldest coins on the planet are believed to date to approximately the second half of the seventh century BC during the reign of King Alyattes who was in power in Lydia from 619 to 560 BC.

This was nowhere near the first currency. Not even the first coins...
>> "What Happened to Digital Resilience?"

> Was there ever such a time? If so then tell me when it was

It seems very plausible that "digital resilience" that this has been buzz phrase repeated often enough in meetings of security-adjacent corporate bureaucrats that some number of people convinced themselves it was a real thing.

And the same divorced-from-specifics approach allows these decision makers to paper over any and all choices that inherently weakened security 'cause the triage needed to partially protect the resulting structurally insecure system can be presented with similar glowing buzz phrases.
SDV Deprecation Announcement
I wonder how they came to this number? And how reliable is it? It is very quick and relatively a very small number. Very convenient for damage management.
Absolutely not. If they did, we would immediately have a walled garden. We’re moving too far in that direction already, we don’t need to give Microsoft an excuse to jump there immediately. If you install stupid shit on your computer, that’s on you, not Windows, not MacOS, not Linux.
>Microsoft didn’t do enough due diligence on the behaviour of CrowdStrike updates. It shouldn’t allow out-of-band updates.

You want Microsoft to be doing code reviews of third party software? That might have prevented this disaster but would get them in hot waters for other reasons (eg. anti-competition accusations). Not even Apple gatekeeps that hard.

>Third-parties should not be signing code that allows third-parties to reach into corporate services and push files.

So dropbox should be banned as well? It's also a third party service that pushes files onto computers.

>Microsoft InTune is the mechanism that all configuration updates should use.

Okay, so crowdstrike pushes its virus definition updates via intune instead. The bad file still lands on computers, the kernel mode driver still crashes before the computer can boot and the computer is bricked. How is this any better?
> exclude people who are unwilling or unable to constructive contribute

Exclusion comes with the brutal side-effect that the excluded people become ignorant towards and alienated from their own kind and thus accept any cost of punishment and negative consequences, including their own suffering! It's crazy. This then becomes the base and nourishment for extremists and their marketing strategies.
I am highly skeptical of LLMs as a mechanism to achieve AGI, but I also find this paper fairly unconvincing, bordering on tautological. I feel similarly about this as to what I've read of Chalmers - I agree with pretty much all of the conclusions, but I don't feel like the text would convince me of those conclusions if I disagreed; it's more like it's showing me ways of explaining or illustrating what I already believed.

On embodiment - yes, LLMs do not have corporeal experience. But it's not obvious that this means that they cannot, a priori, have an "internal" concept of reality, or that it's impossible to gain such an understanding from text. The argument feels circular: LLMs are similar to a fake "video game" world because they aren't real people - therefore, it's wrong to think that they could be real people? And the other half of the argument is that because LLMs can only see text, they're missing out on the wider world of non-textual communication; but then, does that mean that human writing is not "real" language? This argument feels especially weak in the face of multi-modal models that are in fact able to "see" and "hear".

The other flavor of argument here is that LLM behavior is empirically non-human - e.g., the argument about not asking for clarification. But that only means that they aren't currently matching humans, not that they couldn't.

Basically all of these arguments feel like they fall down to the strongest counterargument I see proposed by LLM-believers, which is that sufficiently advanced mimicry is not only indistinguishable from the real thing, but at the limit in fact is the real thing. If we say that it's impossible to have true language skills without implicitly having a representation of self and environment, and then we see an entity with what appears to be true language skills, we should conclude that that entity must contain within it a representation of self and environment. That argument doesn't rely on any assumptions about the mechanism of representation other than a reliance on physicalism. Looking at it from the other direction, if you assume that all that it means to "be human" is encapsulated in the entropy of a human body, then that concept is necessarily describable with finite entropy. Therefore, by extension, there must be some number of parameters and some model architecture that completely encode that entropy. Questions like whether LLMs are the perfect architecture or whether the number of parameters required is a number that can be practically stored on human-manufacturable media are engineering questions, not philosophical ones: finite problems admit finite solutions, full stop.

Again, that conclusion feels wrong to me... but if I'm being honest with myself, I can't point to why, other than to point at some form of dualism or spirituality as the escape hatch.
Yeah, they’re only superficially similar in that they’re both college-based groups capable of force.
Did already happen https://news.ycombinator.com/item?id=41018029 and https://news.ycombinator.com/item?id=41005936
You could take the rest of the developed world as well, but the question wouldn’t be very different.
Linux doesn't have a BSOD .. is this the equivalent of a kernel panic?
I did read somewhere yesterday that macOS does not allow third party software to run at kernel level in the same way, thus couldn’t face the same issue.
"Moral authority" isn't a thing. Stuff is either right or wrong regardless of who participates or believes it.

Anyone who claims to have moral authority is just opressing others with their opinions.

"Should we do something" is a personal question, that my comment is not going to answer.
I think that's pretty obviously a joke, no?
That's irrelevant when crowdstrike admitted it's caused by them.
That 'self-hosting' you are referring to was actually 'hosting your own stuff on other people's computers in a data center somewhere, most likely the ISP that originally took away your static IP so you can't do it yourself'. True self-hosting is from your own basement.

I'm honestly in the 'old guy from the 1990s' camp. ... once there was a fleeting glimpse of beauty, called 'Internet'.
You are absolutely right. In that sense the right abstraction is what one should go after.

But what I mean is the more popular Java / OOP style abstractions like a repository which returns a builder which returns class which you new up and pass to some sort of super interface and its just such a mess.

As a technology I really like the JVM and hotspot but good Lord if I have to wade through 10 different things to get there.

Finally to answer your question I have started using the actual name of the thing in the language I'm using. Such as a "struct" in c and rust which I mostly use these days.
Windows has telemetry out the wazoo doesn't it?
1. It wasn't a null pointer: https://xcancel.com/patrickwardle/status/1814343502886477857

2. If the driver crashed due to a Rust panic, the result (boot loop) would be the same.
I miss having a world where the threat model of having your computer compromised wasn't "your entire life ends". Where a device wasn't assumed to be online all the time, and where every device didn't contain the keys to your bank account.
Three months ago I made a post here with an early version of this project, and received some great feedback! One of the most asked features was GPU support, so I added it alongside many other improvements. Hope you like it!
You misunderstood me, I am easily convinced that this is the case - what I don't get is how they could let it be the case.
No.

Software freedom 0 is that you should be free to run the program as you wish, for any purpose.

If that means loading your system up with third-party crapware, that's on you, not them. That doesn't mean Microsoft shouldn't work on making it easy to recover a system, if they can, but preventing you from running software would make the cure worse that the disease.
The problem occurs when the newcomers adopt a haughty, colonialist attitude and yet have little to offer to their hosts.
Honey is formed by the hydrolysis of the complex sugars in nectar into fructose and glucose. HFCS (high fructose corn syrup) is formed by the hydrolysis of cornstarch into fructose and glucose. They're chemically extremely similar, except for differences in the ratio of fructose to glucose, and for small traces of other stuff (pollen etc.).

The statements I was responding to claimed that "until recently it was very expensive to get sugar" and then "honey is not the same as refined sugar". Honey is refined sugar formed by the same process as HFCS[0], and some hunter-gatherers get a surprisingly high amount of daily calories from it with seemingly little impact on their health.

[0] From a different precursor, but the general process of breaking down complex carbohydrates into simple sugars is the same, and so is the output
Does YC reference previous application answers?
Hello community, I am asking because I am curious. I would like to know if YC (YCombinator) reference previous application answers while reviewing a new response to same questions (during a fresh application)?

Thanks.
“I am, somehow, less interested in the weight and convolutions of Einstein’s brain than in the near certainty that people of equal talent have lived and died in cotton fields and sweatshops.”
― Stephen Jay Gould

If you believe that quote as I do then unskilled laborers can have intelligent children. Making to the United States is quite a test of endurance, flexability and competance so people who pass that filter are quite likely to be intelligent
Also, pressure from product owners and business can affect delivery negatively.
The problem with TeX is that the programming language TeX is extremely bad. It is genuinely painful to use and so while the idea of using an open ended programming language to do typesetting is great the hurdles you have to move over make it very unpleasant.

Macro expansion just is not a good programming paradigm. And often when I was facing a problem which could have been handled programmatically in TeX, e.g. generation of a table, it turned out far more complex than expected. No doubt if I didn't have hundreds of hours typesetting LaTeX, but hundreds of hours programming TeX it would have been relatively easy. But my point is that having a good language at the core would make these tasks immediately obvious to someone with significant programming experience.
Isn’t LaTeX the most popular way of using TeX? Why is it bad to compare that to alternatives?

It’s like writing an article about Python and someone comments about speed differences between Cpython and Julia. Sure, Cpython isn’t Python, but isn’t that still valid and interesting?
This happens because of the US embargo, so I'll blame US until they stop.
Well, here's to the "Burkites" then, whole reason for the post :)
(Was also watching ...)
Microsoft is just jealous, it took the focus from their large Azure outage, also on Friday: "Major Microsoft 365 outage caused by Azure configuration change" - https://www.bleepingcomputer.com/news/microsoft/major-micros...

To compensate and keep the focus on them, as masters of all outages...They will take at least until Tuesday, (according to their own info...) to fix the current ongoing issue with Teams scheduling: https://portal.office.com/servicestatus
His methods are unsound
MacOS doesn’t allow third party kernel modules any more, so CrowdStrike on Mac can’t cause the same problem. On Linux, the latest versions of CrowdStrike use eBPF while older versions were kernel modules. The older versions definitely could have had the same issue. In theory, use of eBPF should prevent the same problem in the newer Linux version.
If we're doing originalism, an amateur is someone who does not engage in any wage-earning labor.
If you install some pointless garbage as root on a free OS, it can make your system unbootable. I don't think an OS vendor has any blame here.

The mistake here is people think they need third party security solutions that are actually worse than nothing.
Not fixed in mobile (Chrome). Normal scroll jumps to the end. Needed to meticulosity slow scroll.
Sure but as a library author, your audience is greatly diminished if you don’t provide some typings in 2024. More than half the professional Javascript programmers use Typescript these days.