skysight-inc/HackerNews huggingface dataset:
The funny thing for me about this popping up from time to time is, that I like both Tcl and Scheme a lot. Each for their purpose. While certainly not beautiful and never ment to be an implementation language for large-scale applications, Tcl does a wonderful job for its designated tasks. The syntax might seem bizarre, but there is actually a great and simple system behind it, I strongly recommend to read the chapter about the syntax in the book by Ousterhout. Like Lisp Tcl is actually a homoiconic language. And like lisp you can create your own syntax, as required. On top, basic control like function calling, looks more like natural language, little syntax required.

Of course, as programming language, Scheme is much better, and it is the language I use for day to day work. In that respect Stallman is right. However he missed a few important points and that is why Tcl is still so popular, probably more so than Scheme, if you just count users. Tcl didn't just bring a language to the table, it also has an excellent implementation which always was freely available and could be embedded into any software project. It has a nice range of very powerfull tools, Tk obviously the most fameous one. Still today it is one of the most popular GUI toolkits. And that is where Stallman with the GNU project failed. Had they at that time or in the following years provided a comparable Scheme implementation, it would have been extremely popular for application writers. Assuming of course, that it had been licensed under LGPL so that any application could use it. But it took most of the 30 years after this post for Guile becoming an option there.
Neither Tavis Ormanady's, Patrick's or the C++ professional's posts go into detail of how the bug works in CrowdStrike's Falcon sensor. All of it just pointing to a debugger/disassembly output and casting some predictions. (for me personally I trust Tavis' analysis because ... well its his field of specialty over the last decade or so).

But still, none of the tweets mentioned come close to even explaining the issue (as in why the .sys channel update file being filled with zeros leading the CS driver to actually crash, the actual bug in the driver and what how it would've functioned normally before the faulty .sys file was pushed).

for reference, to see the whole tweet without twitter account:

https://twitter-thread.com/t/1814762302337654829
I know, it was a joke :( I thought it was fairly good.
I simply don't understand one thing:
why such company didn't have/used staged rollout?

it's normal that from time to time someone will fuck up, but if they would rollout this update to only 1% and see that nothing that updated is coming back and bailed out this would be literally 100x less disruptive that what happened
At this point I wouldn't be paying too much attention to what Crowdstrike is saying.
Momentum is probably more of a correlation than mode of transport. Real world experience: hit by a bike versus hit by a moped, each time on a “vehicle free” footpath. One was not like the other.
How do you suppose a kid should be "supervised" while browsing on Github for example?
Not everyone in the US might be Carmack, but it's ridiculously nearsighted to assert that cultural differences don't play into people desire and ability to Do It Right.
If you run a properly designed operating system your anti-malware will not need ring-0 access. See mac OS which has now deprecated kexts altogether and will only load them if you explicitly turn off system integrity settings.
Except for owner consent, which in the case of corporate machines is unambiguously and irrefutably the corporation, as much as everyone here seems to despise that reality.

All these “blah blah blah is indistinguishable from malware” things aren’t profound, smart, or even witty. They’re spouted by the peanut gallery that has the luxury of not being responsible for deciding whether or not to use one of these systems.

Needing to explain to techies that ‘informed consent matters’ speaks to an utterly saddening stereotype.
If you wanna be relevant to the conversation you're gonna have to clarify for me: are you in the camp that thinks Gnome treats its users like they're stupid, or not?
> I have written a C compiler in TeX

You must be fun at parties.

There's all kinds of weird stuff that people do, like the other day I saw a guy with a wingsuit that was apparently crafted from a carpet jump into the abyss to ride the winds. "I can not take people seriously who do not just use a carpet and jump off cliffs". You do you I guess.
American Institute of Mathematics: Approved Open Textbooks
Evaluation Criteria

To gain our seal of approval an open source mathematics textbook must be able to serve as the primary text in a mainstream mathematics course at the undergraduate level in U.S. colleges and universities. That means that we are not evaluating instructional modules, Java applets, supplementary lecture notes, or other materials that are designed for limited use within a course. Since the minimum length of a traditional course is 10 weeks with 30 hours of class instruction, the books we evaluate must have enough material for that, and most will have more since most college courses are 14 or 15 weeks in length with at least 40 hours of class time.

We are looking for books that we can recommend for consideration to any of our colleagues, books that are suitable for use in traditional university courses. Books must be mathematically sound and written in standard English with evidence that they have been proofread and edited. They need not have color, flashy graphics, or ancillary materials. They must have exercises, and though it would be desirable to have short answers to many of the problems, it is not necessary for approval. It would also be desirable to have more complete solutions available—at least to an instructor.

Furthermore, we expect books of the quality we seek to be class-tested. They should have been used (and be in current use) by faculty other than the author. We are certainly interested in fostering the writing of open source books, and so we may encourage people to try out a book that looks promising, but we would not label such a book as having our full recommendation.

We do not require any particular form of license, although the Gnu Free Documentation License and the Creative Common licenses (in its many varieties) are what we recommend. These licenses allow the book user the greatest flexibility in making use of the material. We will approve a book with copyright restrictions as long as the book is available in some format at no cost. It is not necessary that printed copies be available from a print on demand service like Lulu, but many students and faculty are willing to spend $25 to get a paperbound or spiral bound copy of a 500 page text.

We are impressed with books that have a support system, signs of which are a website that is maintained, a community of users, a means for submitting support material from faculty such as test questions and project ideas, and a mechanism for improving the book by correcting errors, publishing errata lists, and displaying user comments.

For books that use mathematical software, we consider it desirable to use Sage, which is open source. It makes little sense to have a free textbook that requires expensive proprietary software.

The evaluation process is ongoing. We began several years ago with texts for linear algebra and abstract algebra and now we can recommend books in 19 different course categories. To recommend a book for consideration, please send a message to textbooks@aimath.org.
Not true at all; parsing matters. Json and yaml (and s-expressions and...) are equivalent but yaml having significant whitespace makes it mangleable in a way that the others aren't.
I wonder what privilege level this service runs at. If it's less than ring 0, i think some blame needs to go to Windows itself. If it's ring 0, did it really need to be that high??

Surely an OS doesn't have to go completely kaput due to one service crashing.
At my Uni we have an enterprise contract with Microsoft for Copilot that constrains what can be done with our data.

I’d imagine keeping track of the prompts would be highly valuable for evaluation if not training because you do want to know what people are doing it, where it succeeds, where it fails, etc.
Gen Z should be willing to work for free, long hours, says Squarespace CMO
When looking at how wealthy democracies integrate immigrants the English speaking countries are dramatically more successful across all the standard objective metrics like crime rates or income compared to the native population. So Sweden isn't relevant.
There isn’t really any reason biological neurons should relate to their modelled reality, what does a single cell care about poetry or even simple things like a chair?
not all jews though. Most of them were, I believe, middle class workers. You can see that from the meaning of their last names in the places they originate from.
> The single most marginalised group of people in the West since antiquity have been the Jews

Jewish people have generally been treated abominably for the last 2000 years, but surely he most marginalised groups don't even exist any more, because they were wiped out entirely.

> because that's denying a group of people their homeland

History is full of peoples who left or were kicked out of some original homeland. Jewish people are not special in that regard. My ancestors left Saxony about 1500 years ago to conquer an island, and kicked the inhabitants out to the periphery. That's more recent than the expulsion of the Jews 2000 years ago.

I think Israel should exist in the sense that it already exists so let's favour the status quo. But clearly we've learned that it's a completely stupid way to found new countries. Let's not make more ethnostates in other random parts of the world where people already live. We tried it, it turned out that it makes a mess.
> imperative languages allow us to do so

This problem has a promising solution, WUFFS, "a memory-safe programming language (and a standard library written in that language) for Wrangling Untrusted File Formats Safely."

HN discussion: https://news.ycombinator.com/item?id=40378433

HN discussion of Wuffs implementation of PNG parser: https://news.ycombinator.com/item?id=26714831
That doesn’t fix the issue being discussed at all though. All you’re doing is making it harder for the corporate IT departments that are going to install this anyway.
Interesting! Did you publish it?
It’s a great idea to prioritize based on git history.

As for multiple stages, it means the tool itself is doing a few calls to the model. What do the code summaries look like? Just function and class doctrings? Getting the model to write summaries that are comprehensive enough to guide development but still more compact than the code itself seems like it may not be a trivial problem.
Yes, please shun away kernel extensions for all real-world production settings. You'll probably always need to run kernel-level anti-cheat malware on your gaming rig, but a production machine is not a toy and should not be subject to the same standards.
But you can add a C just as easily as adding a zero, and now you've turned 10 into 110 or 90 depending on whether there was space before or after the X. I guess adding a D or M would be a bit more suspicious.
The one person in America happy about tipping fatigue
Sorry, this is untrue. Enterprises have SOCs and oncalls, if there is a high risk they can do at least minimal testing (which would have found this issue as it has a 100% bsod rate) and then fleet rollout. It would have been rolled out by Friday evening in this case without crashing hundred of thousands of servers.

The CS customer has decided to offload the responsibility of its fleet to CS. In my opinion that's bullshit and negligence (it doesn't mean I don't understand why they did it), particularly at the scale of some of the customers :)
> The glaring question is how and why it was rolled out everywhere all at once?

Because it worked good for them so far? There are plenty of companies that do the same and we don’t hear about them until something goes wrong.
It sounds good. Can you plug it in to a local or online LLM to check grammar & have it proof read if I wanted?
What is temperature? (2022) [video]
Twitter does suppress opinions though. Go on there and criticise Donald Trump or Israeli policy in Gaza and see how quickly you get shadow banned.

It probably works for liberal causes too. A few years ago criticising Jeremy Corbyn could get you shadow banned.

I think any subject where you get a whole community sharing your heresy with each other and mass reporting you will suffer...except somehow the far right seem to be able to stay in my timeline despite my best efforts....because Twitter wants to trigger me.
Yep, because open-source code never has issues.

So many idealists looking to make this a “closed-source bad!!!” thing and in the process muddying the waters enough to take attention away from remedies that might actually work.

All while they sit there getting paid $500k/yr to write closed-source software at FAANG or a startup, which to them is Technically Okay because they work on some sort of SaaS product, thereby alleviating them of the economic realities of Everything Being Open-Source.
Servo is long gone. Since August 2020, which will be 4 years next month. They've been independent ever since. https://servo.org
Prometheus metrics saves us from painful kernel debugging (2022)
> nvidia is finally phasing to an open source kernel implementation

Like, for real - as in, Debian would be happy to include it in their main repo? Or lip service? (Assuming you meant their graphics drivers)
Similar flourish to the "long s" once used in English to spell the "ss" gemination: poſseſs or poſſeſs.

https://en.wikipedia.org/wiki/Long_s
I don’t think so because doing so will mean those IT departments will lose OS support which is more critical. This will force those “benign rootkit” companies to implement their software properly to remain on the market. For reference crowdstrike on current MacOS is a network extension.
I could see an open source solution with "private" or vendor specific definition files. But I think I'd disagree with the statement that open sourcing everything wouldn't cause any problem. Engineering isn't necessarily about peer reviewed studies, it's about empirical observations and applying the engineering method (which can be complemented by a more scientific one but shouldn't be confused for it). It's clear that this type of stuff is a game of cat and mouse. Attackers search for any possible vulnerability, bypass etc. It does make sense that exposing one side's machinery will make it easier for the other side to see how it works. A good example of that is how active hackers are at finding different ways to bypass Windows Defender by using certain types of Office file formats, or certain combinations of file conversions to execute code. Exposing the code would just make all of those immediately visible to everyone.

Eventually that's something that gets exposed anyways, but I think the crucial part is timing and being a few steps ahead in the cat and mouse game.
Otherwise I'm not sure what kind of proof would even be meaningful here.
That's a valid wish, but there is already a large number of people in America who oppose American values. So in principle there is no difference whether their number will grow by immigration, high birthrate, indoctrination of other peoples children, or adults changing their views.

So simply opposing immigration won't accomplish what you want, it will only be used as a weapon against you.

If you really want to keep your values, you need to find ways to
attract more people who have the same values.

E.g. Cubans who run away have a good immunity against communism, that's why people who make it so easy to cross the border by foot, made it hard to enter by boats.
Treading carefully is selling out - Mozilla can't win here - they'll be slammed for selling out, or slammed for breaking all the good websites.
I agree. Their 70B parameter benchmarks are better than 7B. Something is wrong with their software and they need to fix it. They get 4000 token/s on Falcon 7B, which is what you should expect from processing a batch of prompts. The per user performance is atrocious and their hardware should be at least twice as fast as a moderately overclocked DDR5 system.
Inventing the Future: Postcapitalism and a World Without Work
I never claimed it was impossible, just more difficult. Prevention of misreading is more important thar prevention of forgeries, I assume, and any misread og forged number would also have to match existing packaging sizes.
I would love for Rust to adopt formal runtime profiles similar to Ada:

http://www.ada-auth.org/standards/22rm/html/RM-13-12.html

Rust sort of does this with no_std (https://docs.rust-embedded.org/book/intro/no-std.html) but a runtime profile could also define abort versus unwinding and other configuration.
That's a good point, somehow I've never noticed the similarity between ";" and "j" until you pointed it out.
The curse of support.

If you need something that will be supported for the next 20/30/50/100 years, you pick an already established product that is widely used and does not depend on any single organization. You can't rely on volunteer projects, as volunteers have no duty to maintain and support the product. And you can't rely on anything made by a single company, as companies lose interest and die all the time.
In representative democracy there's little to stop the officials from passing laws to suppress opposition or passing laws to hide the fact that they are doing so. In direct democracy, even while you may be in majority in the issues that do not impact your opposition negatively, you still need to convince the voters to actually attack them. Laws to obfuscate things are less likely to pass. Consequently to be in the minority; to disagree will be more dangerous in reprentative democracy. Thus Kropotkin's point in my interpretation was that (since the voters will inevitably be occasionnally wrrong and in these cases those who were right will be needed once the problems shows) this will effectively corrode a community: in the next election there may not be opposition because they have left away.
Benchmarking Results for Vector Databases
I am firmly in the camp where I am not answering this question only to satisfy an irrelevant need to take things literally while ignoring the actual issue being discussed.
This would require a deep dive into analyzing the importance of that specific update and all the other updates they do and at which frequencies and for which reasons. 2 leading causes for ransomware are social engineering and unpatched software which something like CrowdStrike should be able to secure against.

If there's a new pattern of social engineering/phishing attack it might be a question of hours to be able to respond to that and identify those specific patterns. Or just every minute will mean that more companies and machines will be compromised if there's a mass phishing campaign going on.
Sadly enough the "average" instagram user doesn't use threads. It's just a weird subset of them that use it, and imo it's not the subset that makes Instagram great lol. (It's a lot of pre 2021 twitter refugees, and that's an incredibly obnoxious and self centered crowd in my experience)
This is a very controversial topic in Europe where Florence Bergeaud-Blackler's book about how the Muslim Brotherhood is trying to infiltrate European institutions is seen either as a conspiracy theory fueling Islamophobia or a dangerous problem that has to be dealt with to protect society.

https://www.spectator.co.uk/article/the-french-academic-payi...
> Xitter

I fully endorse this use. I’ve been using it myself for some time. I’m so sick of newspapers writing “X (formerly Twitter)” everywhere. And “Xitter” has all of the right connotations for the cess pit that xitter has become.
> often involve topics of a highly sensitive nature regarding events which could potentially reveal the identity of the victim party, which is entirely not appropriate.

And?

On the other hand, allowing people to be removed "no-questions-asked" and accepting zero transparency is dictatorial.

There's a reason why courts proceedings are usually public: there cannot be justice without transparency. Otherwise it's an easy playbook to avoid accountability.
Here I was hoping it was indicating a complex number, since i was already taken.

...on that note, how would one write complex numbers in Roman numerals, now that both i and j are taken?
I've been wondering the same, then wondering: is it possible that they did do a staged rollout, but the cadence was insufficient? The only way for them to receive feedback would be out of band, so they might not have budgeted for the reaction time they should expect.
Hosting Servers in Space
BP predicts oil demand will peak in 2025, bringing to end rising emissions
Last time I tried was in Ubuntu 20.something and ... yes it was trash.
Sure, although, not the common modern spelling.
There is a perspective that the architecture of much anti-malware in general and this anti-malware in particular actually introduces new back doors where there weren't any before.

So while anti-malware might have some merits, on balance much of it would be a detriment to security, from this perspective.

People with this perspective are feeling spectacularly validated today!

As often, it's wise to have a nuanced view of course.
correction: spanish is heavily ablative case instead of accusative. original statement is correct in principle since lex, rex are nominative and first in a nominative-genetive form in latin dictionaries. eg. lex, legis. rex, regis.
Techies are the only ones who can give informed consent and we're constantly over ruled by the risk department, because the glue eaters over there think that a sleek presentation means the saleswoman on the other end knows what she's talking about.
> If we're supposed to go sentinel free does that mean no more numerical types?

sorry what do you mean by "numerical types" here?
Kinda like the same issue with running zoom in browser and not having a persistent login session

https://devforum.zoom.us/t/stay-signed-in-doesnt/63329/3
I wonder what their plan is. The nation states would be dissolved like half an hour into the war.

The elite need a professional army that protects them and force the population to starve to death.

Conscripts are a liability. You need the type of person that like violence and self selects for it.

This pretending there would be some nice and coozy gentleman's war is lunacy.
Who said anything about open source not having issues? I talked about trust. Open source can be trusted simply because the code is scrutinised by many if the software is that important.
CS cannot be trusted by anyone, because you simply don’t know how they develop their software.
Yes, I do work for a private company because otherwise I cannot pay the bills. Companies on the other hand do have the privilege to choose what kind of software they can use (unless the regulation says otherwise, which is in itself something to fix too, but I do lack knowledge in that field to suggest anything)
rr is really cool, but almost every time I have decided to pull it out as one of the "big guns" it turns out that I have a concurrency bug and so rr is unable to reproduce it.

Despite that, it would be very, very, very cool if some languages built rr directly into their tooling. Obviously you can always "just" use rr/gdb, but imagine if rr invocations were as easy to set up and do as pdb is in Python!
Hungry (vs. Not Full)
Right in the money.

No matter how many decades one lives in the Netherlands, one would never be seen as "Dutch". Whereas a Mexican living for 10 years in the USA and throwing BBQs in his backyard would be seen as 100% American.
I think we undersexualise everything and our morals look as if they came straight from the Middle Ages.
Security isn't really a product you can just buy or outsource, but here we are.