skysight-inc/HackerNews huggingface dataset:
Does CS actually offer any real protection? I always thought it was just feel-good software, that Windows had caught up to separating permissions since after XP or so. Either one is lying/scamming, but which one?
Might need to manually do it. Depends on if there is any lower level admin access than windows for each system.
That's not really the point. If they didn't push junk mail so hard, they'd be insolvent and fail. Profitability is not the issue.

> But being profitable is a non-goal; they exist to serve the people

Agree, but someone should probably tell Congress that.

The situation is trash (literally; 95% of my mail goes directly to the recycling bin), but conservatives want the USPS to behave more like a business, and its funding -- and need to do crappy things -- reflects that.
Well, there’s this one app, written in VB6 using lots of DCOM that produces XML and XSLT transforms that only work in IE6, and the entire organisation depends on it, and the nephew who built it is now a rodeo clown and is unavailable for consultation.

True story.
That's why we've invented emulators, sandboxing, ...

People have continued to run old management systems inside of virtual machines and similar solutions. You can sandbox it, reset it, do all kinds of wondrous things if you use modern technologies in an era-appropriate way. Run your old Windows software inside of a VM, or tweak it to run well on Wine if you have the source. The reason this mess happened is that all of those software are literally running a desktop OS in mission critical applications.

I have worked as an embedded engineer for a while and I can't count the number of nonsensical stuff I've seen incompetent people running on unpatched, obsolescent Windows XP and 7 machines. This mess is 100% self inflicted.
You're saying I should diversify my 100% Linux operation to also use Windows?
i have rag-chewed on both HF and repeaters (and simplex VHF/UHF) for hours at a time. It's fun, but to me the hobby was a lot more interesting when there were other people using fldigi and such. everyone now is using JT's software and i find automated stuff like that "boring" to participate in, in the general sense. It is extremely useful and powerful as a tool to help detect "skip", the ability and positioning of your antenna, the efficiency of your choking and transmission lines (run wspr at 200mW, say).

With that said you can do all of that with fldigi or RTTY or even just using the morse function on most radios thanks to online sdr receivers. but talking to oneself is also "boring" after a bit.

If anyone has a ticket but doesn't really "get" the hobby, go to a field day. The official ARRL field day just passed june 12th or something, but there is a quasi-official winter field day in a few months, It's a 3 day thing, if you want it to be, but noon on saturday till noon on sunday the goal is to make as many confirmed contacts on any bands you can using whatever modes you want. The scoring isn't simple "1 contact = 1 point", you get more points if you're off-grid, or low power, or "outdoors", for instance.

If you've ever been the person that "fixed the LAN" at a LAN party, you might just get a kick out of the entire thing, and it's usually bankrolled by a local club, so if they have a decent number of members you even get good food and a great location.

Our club gets the Sheriff's dept command post truck every field day, and half the people operate out of it, and the other half out of a building somewhere nearby (the rules say all of your antennas and transmitters that score have to be within an explicit radius).
The only surprising thing is that this doesn't happen every month.
Nobody understands their runtime environment. Most IT org's long ago "surrendered" control and understanding of it, and now even the "management" of it (I use the term loosely) is outsourced.
Yes you should be able to pull it from your domain controllers. Unless they're also down, which they're likely to be seeing as Tier 0 assets are most likely to have crowdstrike on them. So you're now in a catch 22.
This has been the story of the antivirus "industry" all along. They simultaneously seem to employ actual bona-fide security researchers while also making sure none of their software products are ever touched by people you could even refer to as "developers". I can't even imagine the noise at Microsoft from all the crash reports solely caused by antivirus software written by utter clowns injecting into other programs and, as here, into the kernel.

Previous: https://infosec.exchange/@wdormann/112530285189478825

Previous: https://thehackernews.com/2022/05/chinese-hackers-caught-exp...

Previous: https://www.ftc.gov/news-events/news/press-releases/2024/02/...

Previous: https://www.fortiguard.com/psirt/FG-IR-24-015

...
> It's morning here in Europe, departure peak time. We're still flying, but...

Looks like some airlines aren't flying, KLM being one of them.
Crowdstrike's stock closed at $343 yesterday, I imagine that and MSFT are going to be cratering later this morning.
In a way, this might end up being a blessing in disguise. It's an emergency drill for something potentially catastrophic (e.g. massive cyberattack, solar flare), and it's a large enough wake-up call that society can't just ignore it.
"CIO of CS here: we suck."
Because it would mess with the backroom deal the executive making the decision has with MS.
It has some challenges ahead still:

https://i.redd.it/xr8uxqayv68d1.jpeg

For demos sure, but I'm not super hopeful on this frankly. LLMs are inherently about generating next char in sequential order. Nothing about real world spreadsheets is linear like that - they're all interlinked chaos.
This is a testing and deployment issue rather than coding... mistakes and bugs happen - but most serious businesses have routines setup to catch them before rolling them out globally!
We’ll never know if you’re trolling or not but just in case you’re serious: https://en.m.wikipedia.org/wiki/Blender_(software)
Nothing is without flaws, it's about limiting risk to an acceptable amount. Critical software should be held against higher standards.
Maybe they do perform canary deployments and Australia was the canary?

Certainly feels like it's disproportionately affecting us down under.
It's enterprise anti-malware that [in addition to other bits] has a client component installed on all PCs in the corporate network. An update to that client component (called an "endpoint") is causing those Windows machines to BSOD.

It's unlikely you'd have heard of it unless you've worked at a large enterprise that runs primarily Microsoft IT.

Crowdstrike does have Mac/Linux "endpoints" also (IIRC) but I'm unsure if they're affected as well.
Not filtering, no, but I would like them to set bulk mail prices high enough to actually reflect the cost of the externalities of sending (and trashing) that mail. Fewer companies would send so much junk if they had to pay for its true cost.
This isn't a windows issue. For what it's worth, I've had plenty of problems in the past with kernel panics from crowdstrike's macos system extension, although it was fairly random, nothing like today's issue.
It’s not security, it’s compliance. The two are sometimes aligned, sometimes less so.
I haven’t seen a simultaneous outage as big as this in my entire life. I’m just hoping this gets enterprises to move off of Windows.
Sioyek uses the MuPDF engine, which supports EPUB: https://mupdf.com/
Yeah I mean you probably shouldn't put mission critical systems on a laptop with an external monitor either.
Hopefully less will be after this!
corporate IT heads need to roll for that to ever change.

The romans used to make the architects stand under the arches they built, to enforce the idea of consequences for bad work.
You've got to be kidding. The notion of "non-lethal defense" is a naive fantasy.
Oh, I don’t disagree, and I don’t think burying it in the EULA would necessarily be sufficient (especially in Europe, where the courts and regulators have tended to take a dim view of “but we told you, in three-point type on page 473 in the middle of the trademark acknowledgements”). But ultimately the blame for using known-unreliable tools is largely on the user.
I've seen orgs get through soc2 and pci-dss without kernel anti virus.

It's all about compensating controls.
1. this is a crowdstrike issue not windows

2. plenty of malware and c2 systems happily operate off all systems, regardless of how hardened (or how unix) they are - IDS/IPS is a reactive way to try and mitigate this

3. you don't need third party software to compromise the unix kernel, you just need to wait a week or two until someone finds a bug in the kernel itself

all that being said, this has solarwinds vibes. the push for these enterprise IDS systems needs to be weighted, the approach adjusted
Maybe some OpenBSD would be a good hedge. It can also help spot over-reliance on some Linux quirks.
Yeah I saw! I hope it comes to ollama soon.
afaiu at that time tweet size was still intertwined with text message size
I'd argue the infrastructure of the Internet isn't to blame here, it sounds like a software/config bug at Crowdstrike. There are wider discussions around over-reliance on cloud-based tech too. But the good old Internet can hold its head up high IMHO.
Why would the BitLocker keys not be recoverable?
I’m on vacation right now, but I do compile a lot of code when at work
I've never seen a non-Windows machine tbh. But our IT just send out an update that we don't use crowdstrike. Strange that I never heard of it if it's so widespread. But thanks
The article is on point.

I've been a paying customer for years, but this makes me worried.

I hope they come to their senses and this is just a one-off
I would like to inform you that none of the AV product on the market will be able to protect you from piping a bad script from the web. Case closed.
The "x viewing" has just mistakenly been copied in with the original title.
That's pretty easy: you cross the border, the border guard sees recent stamp showing you traveled to r---ia and you don't fit the profile of someone having a family there, which trip the alarm to look into you slightly more than usual (in normal days the only thing border guards do is check that passport is not forged).

Then the obvious question to "where you exactly you have been there and what for" will come out unexpectedly for you and you will start making up a bullshit story on the spot (after being on the road for the last whole day) and spit out enough signals to look into you even more.

At this point you are taken to a room for a talk and asked to show pictures in your phone, hotel confirmations, train tickets, etc, which obviously show you have been where you are not supposed to and you lying as well. If you panic and refuse to show the phone contents, you are likely just barred from entrance on the spot and put on a list. If you do show the phone contents and there isn't anything noteworthy, but your story is not coherent enough (or the opposite: coherent enough to the point you prepared for it), you get at date with a three letter agency who is supposed to not rely on feelings.

The "how do they know" is always a bad idea as long as people need to know and your actions leave extensive digital papertrail.
Mærsk is kind of a bad example, because they made real security mitigations afterwards.[0] I cannot speak to whether they whitelist applications, but neither can you.

[0] https://www.csoonline.com/article/567845/rebuilding-after-no...
All of the hardware that's attached to workstations in our hospital are designed for windows. Certain departments have specific needs as well and depend on software that is Windows only. After decades of Windows it develops an insidious grasp that is difficult to escape, even moreso when your entire industry is dependent on Windows.

Switching over to windows wouldn't just be extremely costly from an IT perspective but would require millions of dollars in new hardware. We are in the red in part because of the pandemic, existing problems in our industry accelerated by the last few years, and because a large percentage of our patients are on Medicare, which the fed govt shrinks fixed service payments for every year.

I can't imagine convincing our administration to switch over to Linux across the hospital without a clear, obvious, and more importantly short-term financial payoff.
Perhaps you should study history. So far the 21st century looks on average to be less terrifying than any previous century.
seems to be an MDM solution thats doing tons of stuffs
I tried gemma2 but it has to be quantified to hell to fit in a 16gb card and then it performs a lot worse than llama3 8b unforutnately.

I hope the new mistral comes out soon for ollama.

True about the context window but with llama3 this was not a problem as it has such a small context window anyway.
Windows Defender is more than sufficient for most of these companies, but they need that false sense of security, or maybe they have excess budget to spare, or they are transferring the risk per their risk management plan.
Technically a payment terminal can go into island mode and take offline credit card transactions and post them later. PIN can be verified against the card.

Depends if the retailer wants to take the chance of all that.
You mean this one? https://en.wikipedia.org/wiki/Blue_Banana I kid, I kid.
> For 3 computers, 2 laptops, I've never _not_ had display bugs/oddities/issues. System upgrades always make me nervous because there is a very real chance of something getting fucked up and my screen staying black the next time it boots, having to go into a TTY, and manually fixing stuff up or booting the previous version that was still saved in GRUB.

I've had a Debian update break GRUB itself as well: https://blog.kronis.dev/everything%20is%20broken/debian-and-...

I still use some Linux distros because when they work, they're pretty good, but when they don't, be prepared for a bunch of annoyances and debugging.
I'm not that confident that they're going to be around to recover from after their stock price falls into the toilet and they get sued out the yin-yang. I don't think 'read the EULA terms lol' is gonna cut it here.
I have a Raspberry Pi running a read-only server where some friends and I have a "poor man's IRC" chat, in that we all log in from Termux and post messages to one another using `wall`. It's absolutely ridiculous and I love it.
Probably not, but maybe they rely on some Active Directory server that is running it?
That is a fair clarification. More an issue with the stuff on top of the internet.

As per your point, the base infrastructure is working perfectly for better or worse!
I'm in italy and I can access archive.ph

Perhaps just the ISP you're roaming with blocks the site?
I think you’ve accidentally remapped ‘.’ to ‘?’ On your keyboard.
A whole lot of people are running Crowdstrike in the cloud and on local PC
An crowdstrike update last night caused a windows kernel panic Azure/Crowdstrike personel have spend rolled back the update in the cloud
Local IT people will have to revert it from local machines manually
What's "critical software"? Software controlling flight systems in planes is already held to very high standards, but is enormously expensive to write and modify.

In this case it seems most of the software which is failing is dull back office stuff running on Windows - billing systems, train signage, baggage handling - which no one thought was critical, and there's no way on earth we could afford to rewrite it in the same way as we do aircraft systems.
If anyone feels like disagreeing about Azure, here's a comment of mine from a few months ago:

A random selection of serious security incidents from Azure:

just from Wiz from the past 2-3 years, and of course they aren't the only ones:

https://www.wiz.io/blog/secret-agent-exposes-azure-customers...

https://www.wiz.io/blog/storm-0558-compromised-microsoft-key...

https://www.wiz.io/blog/azure-active-directory-bing-misconfi...

https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-o...

https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-v...

Of course Microsoft AI researchers sucking at security: https://www.wiz.io/blog/38-terabytes-of-private-data-acciden...

Nice overview from Corey Quinn that predates some of those but things were already horrifically bad: https://www.lastweekinaws.com/blog/azures-terrible-security-...

Go and look for similar things for AWS and GCP, and there's nothing on this level (cross-tenant, trivial to exploit).

Oh and there's also this, them selling your usage patterns to partners (hopefully they've stopped): https://twitter.com/QuinnyPig/status/1359769481539506180

Oh and another one where they bungled the response: https://twitter.com/QuinnyPig/status/1536868170815795200

I find it impossible to believe that Azure as a whole organisation takes security seriously. There might be individuals that do, but definitely nobody with decision making power. Half of the above described exploits are trivial and should have never passed any sort of competent review process.
Spreadsheets can fill the gap between ad-hoc prompting/prompt workbooks and custom software for special business tasks.

By using a prompt function like LABS.GENERATIVEAI in Excel you can create solutions that combine calculations, data, and Generative AI. In my experience, transforming data to and from CSV works best for prompting in spreadsheets. Getting data to and from CSV format can be done with other spreadsheet functions.

I've created a book and course (https://mitjamartini.com/resources/ai-engineering/ebooks/han...) that teaches how to do this (both more beginner level). Just working through the examples or the examples provided by Anthropic for Claude for Sheets should be enough to get going.
Nothing, in fact there have been many cases where python's and nodejs's package systems were exploited to achieve arbitrary code execution (because that's a feature, not a bug, to allow "complicated installation processes to just work").

https://arstechnica.com/information-technology/2021/12/malic...

AVs are the wrong way to go about security anyway, it's a reactionary strategy in a cat and mouse game by definition. For prevention, I think the BSDs are doing some promising work with the "pledge" mechanism. And as much hate as they get, I like appimages and snap et al for forcing people to consider a better segmentation model and permission system for installed software.
I responded to another comment with this and you are right, that is a fair clarification.

The base infrastructure worked perfectly fine. The stuff on top of it, not so great.
I dunno, Coast Guard?
It's the view counter above the headline. C&P error
"Endpoint protection" is just the new, hip term for antivirus/intrusion prevention/incident logging of the past. Why not provide immutable Linux based machines (like Chromebooks, Fedora Silverblue) which are locked down outside of the browser? I am aware that this isn't possible in some areas of the industry that rely on large amounts of Windows-only desktop software, but in many cases it may be worth a thought.

If I am being naive here, happy to hear other opinions. But I hate opening my company Windows laptop and having the fans turn to 11 just because some "security" software is parsing random files for malicious signatures or running an update that BSOD loops.
I remember when my big regional train system had like 95% of its morning trains cancelled overnight due to a big snowstorm in 2014.

Of course, no news on its websites or socials because those people didn’t start until 9am.

I think they finally fixed that.
With SCAYLE, we offer our in-house developed eCommerce infrastructure as a licensed product for online retailers who want to grow quickly and innovatively. SCAYLE was launched as the first API solution for online retailers who want to scale their stores with ABOUT YOU’s proven infrastructure.

WHAT YOU WILL DO

- Work on high-scalable products with PHP8 hosted on a cloud-based infrastructure (e.g. AWS)

- Build and provide internal & external RESTful APIs that ensure a fast & frictionless updating of our backend products

- Develop multiple backend platforms ranging from high throughput to maximum faultlessness

- Constantly challenge and expand your knowledge of reliable software architecture, programming, and new technologies

- Work with agile processes that are adapted to the team’s and project’s needs

- Exchange your knowledge with other developers and be part of our SCAYLE Tech community

WHO YOU ARE

- Excellent and MVP-focused programming skills in PHP of at least 5 years

- Practical & recent experience with MVC Frameworks like Laravel, Symfony, Zend, or Yii2

- Deep technical understanding of RESTful APIs

- Solid background in building scalable distributed products and practical experience with Caching

- Previous experience with handling & querying relational databases (e.g. MySQL, MariaDB, or PostgreSQL)

- Passionate about writing well-structured, efficient, and maintainable code, actively keeping the quality of the code base in check

- Comfortable working in an English-speaking & agile environment

YOU ARE THE CORE OF ABOUT YOU.
We take responsibility for creating an inclusive and exceptional environment where all genders, nationalities and ethnicities feel welcomed and accepted exactly as they are. We believe that a diverse workforce essentially contributes to the ABOUT YOU culture. In order to maintain talent and diversity, we emphasize the care for physical health, mental health and overall well-being. Our values and work ethics essentially contribute to our brand mission: empower acceptance and shape an inclusive, fair and circular fashion culture.
We are looking forward to receiving your application – preferably via our online application portal! This way, we can ensure a faster process and for you it is very easy to upload your application documents. :-)
"MDM solution" leaves me even more confused than before.
Does ubuntu count ?
I think you have to be careful with saying stuff like "optimal strategies are unexploitable", because it usually means "unexploitable in a particular game theory sense".

Whether the assumptions of the Nash equilibrium (or any of the others) make sense for your situation in a game of poker is an empirical question, right? It's not a given that playing a NE means you'll be "perfect" in the human sense of the word, or that you'll get the best possible outcome.

The best superhuman poker AIs at the moment do not play equilibriums either, for instance.
I hope so but never under estimate businesses to cut corners to stay on top. I hope I am wrong.
I'm confused, is this an issue with Windows or with Crowdstrike software installed on Windows?
I think these are just technical excuses, but the real answer lies somewhere in the fields of politics and economics. If people in charge are to make a decision – then us tech nerds are going to migrate and refactor 1000 applications and update 20 years of byzantine code mess. I saw entities so large and boring they can barely move one step – changing rapidly and evolving once their economic stability is at stake, and this is a great example of such a disruption which can push them into chasm of change.
Pre-market is -12% down at the moment of writing this. I'd say this definitely has an effect.
> Do not install third party software that runs in kernel mode. T

You mean don't install Steam nor the Epic Store, nor many of the games.

Note: I'm agreeing with you except that pretty much the only reason I have a Windows machine is for games. I do have Steam installed. I also have the Oculus software installed. I suspect both run in kernel mode. I have to cross my fingers that Valve and Facebook don't do bad things to me and don't leave too many holes.

I don't install games that require admin.

Oh, and I have Photoshop and I'm pretty sure Adobe effs with the system too >:(
For a while I've joked with family and colleagues that software is so shitty on a widespread basis these days that it won't be long before something breaks so badly that the planet stops working. Looks like it happened.