skysight-inc/HackerNews huggingface dataset:
He was pretty senior for his role, but really I have no idea whether he was representative of the wider company culture.

We had a buggy client release during the rollout which consumed all the CPU in one of our test environments (something he assured us could never happen), and he calmed down a bit after that. Prior to that though he was doing stuff like finding our CISO on LinkedIn to let him know how worried he was about our rollout pace, and that without CS protection a major breach could be imminent.
Well, if the vault says you have COPD, and the devious bank robber is interested in your continued breathing, perhaps we can just review the footage after the fact.

This is one of those cases where you don't disable emergency systems to defend against rogue employees. If people abuse emergency procedures, you let the legal system sort it out.
Harmonia Project
Harmonia is a microservices-based application designed to demonstrate the integration of various modern technologies. It includes multiple services that communicate with each other using synchronous and asynchronous messaging.

Technologies Used
- ASP.NET Core: This is for building the web APIs.
- Entity Framework Core: For database interactions.
- Microsoft SQL Server: For relational database management.
- RabbitMQ: For asynchronous messaging between services.
- gRPC: For high-performance, language-agnostic remote procedure calls.
- Docker: For containerizing the services.
- Kubernetes: For container orchestration and management.
Foliate is really good with the security aspects of rendering ebooks. See the author's foliate-js library project (https://github.com/johnfactotum/foliate-js?tab=readme-ov-fil...).

I've recently written an article about the dangers of ebooks. Maybe it's of interest to some:
https://gebir.ge/blog/every-trick-in-the-book/
The worst part is that I get the need to do something to rein it in, but I get the feeling it will, as always, not be the actual rich ( owns color blue rich level ), who will suffer from those plans. There are less and less moves the government has as time progresses.
Thank you so much! This is all incredibly helpful, I felt like I needed to respond when it had my full attention haha

1: The countdown is definitely something I can adjust so we have some way of letting you know without thinking anything is loading.

2:Search is super bogus right now, what I'd actually love to do is run the search on the database itself but wanted to prioritize speed. Even so, I had not included the code itself as searchable since I thought it may bloat results a bit too much vs only searching for the high level descriptions of what you need to do. I am playing around today with how I can weight and sort so the search is more useful to everyone but may need more data to make it great :)

3: Absolutely agreed, went over the site and pulled the 100s up to 2-300, ty :)

4: hahaha I am struggling to figure out the riddle of the first sentence, but I do agree this was an embellishment. In an app where the goal is efficiency and clarity there is no need for a bell or whistle like that. I do want to give character somehow, without getting in the way. Some way to make it feel snappy without completely stripping it down.

5: Love clickable tags, the tags being in the show more is just a matter of visual clutter. My thinking: Most users will likely not need tags > description, so they are easy to find if you need them but not distracting. Open to other points of view on this

6: oooooo I will do more testing on browserstack

7: I don't have an image atm, but I can put that together :) though aside from consistency and scalability, I don't know how much of a benefit it has as an end user, but I admit I am semi-ignorant to the k8s world

8: This is foreign to me and seems like a decent project to take on, but I can't knock the benefits.

9: I'm working on putting this together for the faq and to display on signup, but more or less never sharing with any third party, I only collect google profile information for sake of creating a user profile on the app, with email to future-proof the accounts system if I decide to expand to something other than google accounts. I'm using a trusted cloud storage provider for data. The app currently only retains some details in local and session storage to smooth out the app's operations, but don't save any cookies on users, that's all on the client side. I do currently use vercel/google analytics so it may be reporting things like location, device, browser, and page visits.

10: Lmao I'll take that compliment, It was for me and I will not be accepting revisions <3

Thank you for all the information! I can use a lot of this to improve experience, and hopefully make this useful to someone :)
Great advice. I’ve used submit hub for many years, it is a great product.

The issue with have with genre is you really can have any genre, and new ones are being made up all the time. We won’t be able to have competitive lists for all of these so decided to approach it from as few genres as possible, then will Implement a tagging system that an artist can write anything in. We will then offer search by tag so they can be found.

It’s a slow process as this is a part time project but hopefully we will get there!
This is after all the airline which inspired following musical number: https://youtu.be/FLoHL2O04aI?si=eNqNBRrbSQ_INQYy
It's bizarre reading all the headlines about companies offline, flights canceled, banks not working because of a piece of antivirus software in 2024.

Mostly because I lived through Y2K and every fear about Y2K just materialised but because of Crowdstrike instead.

I can't imagine the amount of wasted work this will create, not only the lost of operations across many industries but recovery will be absolute hell with Bitlocker. How many corporate users have access to their encryption keys? And when stored centrally, how many of the servers have Crowdstrike running and just got stuck in a boot loop now?

I don't envy the next days/weeks for Windows IT admins of the world...
The funny thing is I think they’d have more business if they just made it one (temporarily reversible) click.
Yes each computer has only one anti-virus installed, it's basically a random distribution among the estate.
Just looking at that location on the map, it struck me how 'continental' it was, i.e. how inland it was. Turns out it's actually pretty near Eurasia's "Pole of inaccessibility", which is basically on the border between Kazakhstan and China [1].

As an Australian, I find our vast hinterland somewhat intimidating and haven't spent much time there. Like most Australians I live on its coastline. I also feel somewhat intimidated by Eurasia's vast inner continent, but also curious about it too. Would love to visit Kazakhstan sometime, but maybe not your hometown.

[1] https://en.wikipedia.org/wiki/Pole_of_inaccessibility#Eurasi...
Well, let’s see how much insurance companies will pay now
Brilliant press release:

- Not apologetic

- An 'issue' in a 'single' release

I bet they were originally planning on starting with a '[reported by a] small number of customers' too.
Having another look in, it looks like they're overlaying a static banner along the bottom rather than having a fully working graphics system still (as off 11:30), as that's the only graphics I've seen.
> Canary offers more bang for the buck

I'm not sure that justifies potentially bricking the devices of hundreds(?) of your clients by shipping untested updates to them. Of course it depends... and would require deeper financial analysis.
Just adding my two cents: I work as a pentester and arguably all of my colleagues agree that engagements where Crowdstrike is deployed are the worst because it's impossible to bypass.
It's consistent; 'it' refers to the player and 'them' refers to humanity as a whole
When has a software company successfully been sued (or settled) over this liability?
We were also forced to run that until the agent had introduced a memory leak that ate almost all the memory on all the hosts. Thankfully we managed to convince our compliance people that we could run an immutable OS rather than deploy this ~~malware~~ XDR agent.
yeah, I guess it works because it exists, but I want to understand the mindset of the developers. Are they open about what they're doing or is there some cognitive dissonance where they manage to justify it?
Probably more to do with luck than being "good".
This is the point of much of the security efforts we see now.

Outsourcing of security functions, and things like login push a lot of liability and legal issues off into someone else's house.

It's hard to be the source of a password leak, or be compromised when you don't control the passwords. But like any chain your only as secure as your weakest link... Snowflake is a great current example of this. Mean while the USPS just told us "oops" we had tracking pixels for a bunch of vendors all over our delivery preview tool.

Candidly, most people stacks look a lot less like software and more like a toolbar riddled IE5 install circa 2000. I don't think our industry is in a good place.
Basically every machine gets a randomly picked anti-virus suite assigned at deployment. I'm not running multiple AV products on one machine.
I think the parent was correct in the use of the word "Risk"; it's different than your definition, which appears to be closer to "likelihood".

Risk is a combination of likelihood and impact. If "risk" were just equivalent to "likelihood" then leaving without an umbrella on a cloudy day would be a "high-risk situation".

A rational person needs to weigh both the likelihood and impact of a threat in order to properly evaluate its risk. In many cases, the impact is high enough that even a low likelihood needs to be addressed.
We definitely need to be cautious of people gamifying the system. Humans are smart though and they will always find a way!

We will do our best and hopefully can always find a positive way to turn any bad acting on its head and make it benefit the whole community… wish me luck!! XD
I'm not in IT anymore and we run 100% macs, so serious question here: isn't nearly everything a webapp nowadays? Every "non dev" thing that I have to do for work happens in my browser or an electron app. I guess maybe MS Office apps may be the biggest hitch? We use Google Workspace and that's all in browser.
Not on a fully patched system. 0-days are relatively rare and fixed pretty quickly by Microsoft.
The thing that amazes me is how they've rolled out such a buggy change at such a scale. I would assume that for such critical systems, there would be a gradual rollout policy, so that not everything goes down at once.
I think pfsense does this (from memory, been a while using it). Basically dual-partitions, and if it failed to come up on the active partition after an update it'd revert. Granted you need to have the space to have two partitions, but for a small partition/image not so bad.

What surprises me is if its a content update, and the code fell over when dealing with it - just basically bad release engineering isn't it not to cater for that in the first place? i.e. some tests in the pipeline before releasing the content update would've picked it up given it sounds like 100% failure rates.
Is It BSOD Friday?
At least it's still possible to book over website. Wizzair disabled searching and booking over web browser with permanent "System maintenance". You're forced to use their mobile app, and always update the app to the latest version, and of course today their app shat itself.
I too want to see Linux more widely adopted, but it won't prevent this from happening. People will install corrupted kernel modules on Linux too for anti-virus purposes.
I'm saying you're allowed to have whatever belief you want, no one is stopping you from stating it on the internet either.
I will be putting some more focus on the mobile experience after seeing how many people will be using/checking this out on mobile! It's tough as a primarily desktop app I assume since most will be working, but I won't let that stop me from making the mobile experience as good as it can be. Admittedly I did have mobile on the sidelines :)))

But thank you so much!
The production simplicity of having a standardized OS and being able to drop in a .exe and have it run everywhere without worrying about building for 1000 system combinations cannot be beat.
> I always wonder about the people that implement this.

In my experience behind that curtain, it's not the developers, it's the marketing and sales people. Yes, they have such meetings, then they spend an inordinate amount of time trying to explain to the developers why that particular approach is "necessary," while the developers try to explain that jumping through three hoops cannot possibly be simpler (to implement or use) than jumping through a single hoop.

i literally had one such person come to me one afternoon and say, "we need you to add such-and-such to the website, but do it in such a way that we can remove it quickly if needed because it's not entirely kosher and our competitors will report it as soon as one of them sees it." When i asked why they bother to do it the answer was (i kid you not), "because we expect to make more money through this than we will have to pay in the resulting fines."

No joke.

i told him no, i wouldn't knowingly participate in that (and i knew that my boss would back me up, so wasn't concerned about my job), so he went to some other guy who wasn't as stubborn and talked him into it.
that same kind of thinking encouraged Russia to go on a 3-day march on Kyiv.
Ask an average participant of that march how that has gone for them.
Oh wait
What I'm curious about: other than checkbox compliance, how does Crowdstrike convince companies to buy their product? Do they present evidence that their product is effective at protecting customers? Because certainly Crowdstrike customers still get hacked.
Do Linux systems not crash if a third party kernel module crashes? Or was your comment sarcastic?
These AI Models Are Pretty Mid. That's Why Companies Love Them
Thank you, I didn’t know about this tool, I’ll take it into service :thumbs-up:
Type in those Bitlocker recovery keys for as long as you can stay awake!
I have never seen a company that uses multiple AV products rolled out to user machines, ever. Sure, when you transition from one product to another, but across the whole company, at the same time? Never... I have also never seen a distribution of something like active directory servers based on antivirus software. I think these stories are purely academic, "why didn't you just..." tall tales.
If companies want the nice parts of being "a person", they should also deal with the bad parts of being a person. Financial fines are not enough. Though I'm not sure how we'd build a jail cell for an entire company.
It's not a matter of intelligence, but it's definitely a modern form of "street smarts".
Probably also voter registration information in your state. And I'm sure there are real estate databases. And while much less applicable with the decline of landlines, most people's addresses used to be published annually in the white pages delivered to everyone. Your address just wasn't considered to be sensitive information for the most part historically.
I was given to understand that Crowdstrike provided some protection from unvetted export of data. I'm not sure that data would be useful without the rare domain expertise to use it, but I wasn't shown the risk analysis. And then someone else demands and gets ssh access to GitHub. Sigh.
Because there lying and cheating for bribes are how politicians make money. Here, lying and cheating are how they keep the job that allows them to make money in other dishonest ways.
It's basically "nobody got fired for buying from Microsoft".
The discussed issue is not related to any meaningful difference between Windows and Linux – Crowdstrike used a kernel driver, apparently containing a serious bug, which took down the system, which is something any kernel driver can do, no matter which kernel you use. At least Windows have a well-developed framework for writing userspace drivers, unlike Linux.

> Linux being the most advanced operating system in the world without question.

Very strong and mostly unfounded claim; there are specific aspects where Linux is "more advanced", and others where Windows come out ahead (e.g. almost anything related to hardware-based security and virtualization).

> your system will be supported for many years

Windows Server 2008 was supported until earlier this year, longer than any RHEL release.

> you won't suffer BSoDs in 2024

Until you install a shitty driver for a dubious (anti)malware service.
Thanks so much! I’d love to hear about your experience and what ways this sort of community might benefit you. Send us an email hello@tracklist.it if you fancy :)
Might be worth reaching out to the creator of HN badges: https://news.ycombinator.com/user?id=quickthrower2

It seems they were very active on HN, until about 4 months ago.
The best of Ryanair dark patterns, that is now gone, was on the travel insurance. They forced you to select your country as if insurance was mandatory but you had to go and find the "No insurance" country so you could continue without insurance.
This is becoming more and more common. Originally I saw it only at sketchy ATMs but it is now nearly ubiquitous in many places. Sites like Amazon and even POS systems at restaurants and grocery stores now try the same trick.

It ought to be illegal, in fact it ought to be retroactively illegal and these companies should be forced to refund any money they've made this way. It's just a pure money grab from confused customers.
At one point overnight airlines were calling for an "international ground stop for all flights globally". Planes in the air were unable to get clearance to land or divert. I don't believe such a thing has ever happened before except in the immediate aftermath of 9/11.
DEC had (at least) three workstation lines and they are very different beasts.

1. DECstation: MIPS CPU, running Ultrix, DEC's own traditional UNIX, despite CEO Ken Olsen's claim that "UNIX is snake oil."

2. VAXstation: VAX minicomputers in a workstation form-factor. Only later models had single-chip CPUs, I think: the earlier ones were multi-chip CPUs. The CISCiest of CISC processors in the 1980s/1990s. Could run VAX-VMS or various UNIXes as this is one of the original architectures Unix grew up on. So it can run Ultrix, or original BSD, or NetBSD, or older versions of OpenBSD, and others.

3. AlphaStation: 64-bit RISC microprocessor. Came in 2 firmware variants, one for VMS or OSF/1 Unix, and a different one for Windows NT.

The Alpha machines were an order of magnitude (or 2+ OOM) times more powerful than the DECstations, and there is no realistic hope of emulating them on an RP2040 or low-end Pi, machines considerably less powerful and capacious than the host.
Altos Labs, which specializes on a very complicated topic (anti-aging, longevity), is fully privately funded, though.

Even Bezos can look 20 years into the future and doesn't want to die.
I definitely think humans will always be the best to recommend things to humans who want to remain human.
Not convinced that that, in and of itself, is a dark pattern.

Now using that to essentially get customers to overpay over the year, feels like it might be. Guess it depends on how much you save with them in the first loads using DD.
Two different "it". As an analogy: selling pizza Hawaii is dicey, but you can sell pineapple slices and customers can add those to their pizza themselves.
CS needs some hardcore permissions to scan items on a VERY low level. So they can essentially push out shit code to screw up any OS. Including Mac and Linux. Don't see how MS/Windows are to blame for someone not testing a content update before pushing to the whole damn world. They should at least push out to a subset of users before destroying everyone's Friday!
Hey! thank you! I actually have a great use for my site itself, you can find the language detection utility on this list: https://snippp.io/list/18

but tldr I'm using hljs to detect and return a string with the language title, and comparing that key against my array of categories.
"Whenever I hear a boomer raving about how back in their day, you’d stay at a job for your entire life and earn a gold watch and a pension and the respect of your ancestors, ..."

Back in the boomer's day? You're talking about this boomer's grandfathers' day.
Correct. And that game only ends when you step foot at the plane.

I've been on a Ryanair flight where I was first fined for not printing the ticket beforehand (of course printing it at the airport was already too late). Later, during onboarding, all passengers had to measure their trolley at the entrance to the plane in a very slim trolley frame that would not fit any regular trolley, only briefcases. My regularly sized trolley was too big to fit so I was fined again.

all in all, fines cost around twice the price of the ticket.

This was my first (and last) time flying Ryanair. Other passengers on that flight told me that they always get you once, but second time you know how to play the game...
To be fair, I'd claim that it's pretty rare for anything anyone ever does to not be a trade-off.
I never said they should be profitable, just that junk mail funds them.
Enoch Root?
Was there any situation where having 3 anti-virus was more beneficial than having only 2?
Maybe someone tried to backdoor Crowdstrike and messed up some shell code? It would fit and at this point we can't rule it out, but there is also no good reason to believe it. I prefer to assume incompetence over maliciousness.
Please more details. What do you mean with "is a remote shell anyways"? thanks!
> We can't migrate our workstations to Ubuntu 24.04 because Crowdstrikes

Should you upgrade before 24.04.1 is released? It's scheduled for August 15.
Billions in losses means a somewhat worse life for a huge number of people and potentially much worse healthcare problems down the line, the NHS was affected
Historical facts are not "thinking". I don't get your snark to be honest. These Russians, are they in the room with us right now?
Some very interesting stuff in here, love the playlist idea. Thanks for the insight!
Imagine a supply chain attack on a closed system and nobody finding out about it.