skysight-inc/HackerNews huggingface dataset:
Why do we have operating systems? So that programs cannot cause this sort of problem.

Who required the operating system to be undermined in the name of security? It wasn't that programmer.

Who created the regulatory environment where such decisions actually look like a good idea? It sure wasn't any programmer.

What does real engineering look like?

When the decision was made to use a li-on battery instead of a RAT in the 787, the battery was designed to be fail safe. There was no way it could fail.

The engineer who created the enclosure for it in the airplane started with the assumption that it would fail catastrophically, and that the enclosure would need to contain it.

It's a good thing he did, because that battery did fail, and the enclosure kept the plane from failing.

That's what the OS is for.
Define "they". Not every human knows about things like satellites.
Back in the day we used to insert "memory cards" into cameras in order to store photos on them. You could transfer that memory card to a reader that was plugged into a PC and it would show up as a drive with files you could transfer to your computer's hard drive.

Personally, I usually specify RAM or hard drive/storage just to make sure I'm clear, because "memory" is pretty ambiguous in my experience.
Even if you ran it once a week, or once a month, that might be worthwhile on its own.
Edit: don’t wanna blame apostrophe cms here, it was our multi tenant setup and misunderstanding of apostrophe that lead to this situation
Jsvu is the JavaScript (engine) Version Updater
There are 3 axes of risk: probability that something goes wrong, the impact of something going wrong and the time to remediation when something goes wrong.

You're arguing that on shoring QA would reduce the probability of something going wrong. I'm neither going to agree nor disagree.

However, I think the failure here is to mitigate the impact of something going wrong. Their rollout plan was fundamentally flawed - it shouldn't have taken out so many machines at the same time. It should have been rolled out in stages, with only 1 machine at most at any given customer receiving early versions.

It's best to assume a bug will get through 1 day or another, and spend some time mitigating the other axes too.
And what responsibilities do hospitals and 911 centers or the makers of products to these institutions have for running mission critical software properly? At the bare minimum these systems should have been air gaped.

Microsoft is not recommending to run software that monkey patches kernel for mission critical applications or run them on public networks like this. Does your car download software like this and crash on the road because of faulty update?

Time and again we keep seeing down times at hospitals due to ransomware or hacks, when will these institutions that people trust their lives with, take their IT posture seriously rather than blame anyone else.
Why would that happen? They didn’t cause a security incident. You’d think SolarWinds should have had this problem but they are still plugging along.
All law is nitpicking.
In that case it couldn’t corrupt data, but the orq instruction itself could crash if it pointed to an unmapped address. (Which is kind of the point of stack probes.)
Nvidia have actually been putting a fair amount of work into their OpenCL drivers in the past few years and have a pretty decent implementation, I have a feeling that opencl is more widely used in the embedded space and they were kicked into gear

AMD, very recently have also been putting a bit more work into it, though their drivers are still the worst, and still way worse than their pre-rocm drivers
Finally one can launch startups from their own Garage again.
Cybersecurity industry has regular and annual security testing/competitions done by various Organizations that simulates tons of attacks.

Vendors are tested against these cases and graded with their effectiveness.

I heard Crowdstrike is "best-in-market" for good reasons as others who have more deep knowledge of the industry have shared in this thread.
Gravity exists. It causes things to fall over. Wind exists. It blows trash around. Garbage trucks have items fall over the side. Accidents happen.

You think your trash never ends up where it's not supposed to. There is literally no reason to believe this other than to reserve a position for yourself in the judgement of others.
The dmd D compiler can cross-compile to any of the targets that it supports. I use it all the time to develop on other platforms.

I am currently adding AArch64 support to DMD's code generator. dmd doesn't run on my Raspberry Pi (yet!), so I use sshfs to access the Pi's filesystem from Ubuntu, compile programs on Ubuntu, transfer the .o file to the Pi, link it on the Pi, and run it on the Pi.

I'm sorry you're having trouble with this, so I recommend posting on the D forums, and people are there to help!

https://forum.dlang.org/
Why any machine related to the operation of a CT scanner itself has to be connected to the internet? The problem is not "using technology" in general. The problem is internet connectivity being not correctly identified as a liability in designing our technology infrastructure systems.
You joke, but upgrading from Windows For Workgroups to Windows 95 felt like entering the future. Its hardware discovery was years ahead of Linux. It was an amazing innovation, which IMO peaked with Windows 2000, and then commercial/political goals started dominating over technical goals.
I was in South Korea for about 3 months earlier this year and went in absolutely loving kimchi. But what surprised me was how much a meal is determined by the type of kimchi that’s available.

For example, fresh kimchi is best with boiled pork belly, while a more sour kimchi is better for stew. And then there’s this “peak” kimchi for eating by itself — it’s tremendous when it’s homemade.

Can’t wait to go back to SK and, if you haven’t had it, I highly recommend finding some kimchi & pork belly. It’s an unbeatable combo.
Security is not a feature that can be layered on.

There's an entire industry for guard-railing LLMs now. Go figure.
The headline made me think that that the “parasites” were going to be the Romans!
Why is it advantageous though? Surely the behaviors of managers are incentivised by something.
Ask HN: Fastest way to launch web app
Hello HN. I have a handful of web projects that I want to launch to get user feedback. Each requires user log and authentication, the ability to store and retrieve user content, payment functionality, and to scale with user demand, (all done securely). Is there a single provider or service that offers this off the shelf? I don't want to have to build it all myself as I was to test my ideas quickly. Thank you
Thank you.

I also started reading through the Zig overview [1] and near the end of that document it says this: "Not only can Zig compile C code, but there is a very good reason to use Zig as a C compiler: Zig ships with libc."

From the doc, IIUC, compilation of header files and other C code allows Zig to do direct interop with no intermediaries. Seems useful.

[1] https://ziglang.org/learn/overview/
Bangladesh is a democracy with free and fair elections.

If people wanted younger leaders they would have voted for them.

A revolution because you lost at the ballot box is ridiculous.

It’s not comparable to Pakistan where not a single Prime Minister has ever completed a full term and the country has been led explicitly by the military for decades and implicitly by the military for its entire existence.
Well we kill it for pleasure, to eat them and treat them horribly, and almost absolutely nobody ever bats an eye. Folks that visit slaughterhouse often don't eat meat for few weeks but then revert back. Don't expect miracles, humans are mostly still pretty primitive species driven largely by emotions which swing semi randomly, all wars are, if you drill deep enough caused by this and only this. Or check any elections.

One day, maybe not so long in future as many may think, our descendants will judge us as primitive barbaric savages. And they will be mostly right.
There was an interesting more recent article on life on Mars from idelwords. https://idlewords.com/2023/1/why_not_mars.htm

Not proposing little green men who are unlikely but suggesting there may be bacteria like organisms underground which seems quite possible. A reason I think Musk shouldn't be allowed to build a human settlement there in a hurry. It should be more like a national park with no biological humans. We can always have robots and FPV goggles for the visitors.

(1000+ comments on HN https://news.ycombinator.com/item?id=34213549)
I'm hearing that most hospital cybersecurity insurance requires Crowdstrike (or a product like it) on all the endpoints, so if that's true the liability might fall back on them. It will be a protracted argument for sure.
Started off reasonable and interesting and the slid into:

> For people looking for a conspiracy, the replacement language for C++, Rust, is compromised by a cabal of woke tards that are doing strange things. It's possible this could be a plot to move mission-critical code to Rust.

WTAF? I should have bailed out as soon as I saw it’s from a Twitter Blue Check.
Shape of Motion: 4D Reconstruction from a Single Video
Show HN: Live Demo of GraphRAG with GPT-4o mini
Hi HN,

Microsoft recently open-sourced the GraphRAG framework, which enables more contextual responses than traditional vector-based RAG, especially for summarization-focused queries on textual data.

However, a common critique is the LLM costs for constructing the knowledge graph. With the newly released GPT-4o mini, working with GraphRAG would now be ~30x cheaper.

We built a demo with quarterly earning call transcripts from a few S&P 100 companies comparing GraphRAG with GPT-4o, GraphRAG with GPT-4o mini, and Baseline RAG.

Try out the demo here: https://graphrag-demo.deepset.ai

Looking forward to your feedback!
> be Microsoft could handle this stuff better and not show a BSOD?

How would the OS differentiate between a compromised agent and a faulty one ?. Do you want the OS to continue boot when it is potentially compromised ? That is likely to cause a lot more damage than yesterday did.
Copyright trolls can steal any song on YT Music [video]
That's a good point -- Russia doesn't want to massively escalate against the US with an all-out cyberattack. I've often wondered if total war against Russia or China would show how fragile our internet-connected infrastructure is, with e.g. important people's bank accounts vanishing with no evidence they ever existed.
Massive computer outage, worldwide affecting enterprises with Windows machines running CrowdStrike, a very popular software that is sold as hacking protection but which is, in reality, used by C-suite execs to spy on employee behavior. It is installed with extraordinary permissions and is difficult to fix or remove by design.

I wonder if this will teach absolutely anyone a lesson about anything.
This analogy breaks down when you actually think about its real-world applications.

Structural engineers are held at criminal fault if a bridge they signed off on collapses. Ok, now why do we have the bridge in the first place? Because city planning segregated residential and commercial zones across a body of water. And who was responsible for that decision? The city planning council?

So if a bridge collapses and hundreds of people die you put the blame on the politician who signed off on zoning laws, instead of the engineer who designed a broken bridge?
What is cloud strikes unique selling point? Genuine question, because I'd never heard of them before this.
Let's be honest, he will resign in 2 weeks and move to the next company to be a glorified salesman. I wonder if the companies affected by this will sue Crowdstrike and the CEO or he'll just leave in peace pretending he did a good job there.
Yup.

Another take to be done here is: computers shouldn't have unfiltered internet access all the time.

Whitelist it and once every 3 days open the internet gates.

(Easier said than done)
Yah. But the way it was worded is that a 3rd party company who goofed was able to go to another company and ask for access to it.

I assume that some sort of configuration and opt in step would need to be had.

If this had been done prior to the event it seems like this would have been the first thing to do, not a Hail Mary after being down.
Do kids know what PacMan is?

I thought that was a thing only us old people knew about.
Who would imagine that optimising for profit and profit alone would result in such a fragile ecosystem?

Sorry for the sarcasm.
I wonder what a sensible way forward for Cubans is, and their government. What would it take for the US to lift sanctions (I assume a radical shift within Cuba's government), and for Cuba itself (as a whole) to restructure their government in a way that would benefit them and everyone.

Cuba would be a great travel destination.

Their cigars aren't as on par anymore as far as I know, but there's potential there, Nicaragua and Dominican Republic basically make the best ones last I checked.
Naive question: will scaling laws be sufficient for reliable reasoning, or are transformer architectures incapable of that ?
Yes I have, and I apologize. Unfortunately I can no longer delete the comment :-(
Debian doesn't depend on CrowdStrike. CS provides Linux clients for organizations that want to deploy it with their Linux workstations/servers.

From the article:

> In April, a CrowdStrike update caused all Debian Linux servers in a civic tech lab to crash simultaneously and refuse to boot. The update proved incompatible with the latest stable version of Debian, despite the specific Linux configuration being supposedly supported. The lab's IT team discovered that removing CrowdStrike allowed the machines to boot and reported the incident.

Debian is as at fault for CrowdStrike's incompetence and negligence as Microsoft is. That is to say, not at all.
And if you pick up the wrong one, you might just end up dropping the whole ordeal. It's not so black and white, it makes sense to spend a bit of time and figuring out a good resource. At the least you'll get a sense of the domain's main trunk of knowledge, get into the jargon, etc.
I expect that the AMD also looses out when multigpu starts to be required for it (which is arguably going to be for much larger models than for the h100, but a 70B parameter model with bf16 training is going to hit multigpu in terms of memory requirements) as their interconnect is just way slower.
Does that van fit in your pocket or do you just never walk anywhere?
Unfortunately cybersecurity still revolves around obscurity.
If you want to get mad at someone, YouTube targets classrooms with pre roll ads of some eTHOT talking about getting high with her dad on edibles full of synthetic THC.
Ansible at Scale – working with multiple environments made easy
Because the benefits are reaped well before the full cost becomes evident. By the time everything catches fire, the person responsible has retired into their Mediterranean villas and will never come back to fix what they caused.
The paroled non-citizens who don’t have voting rights are going to vote for trump in droves? How would this be possible exactly?
This is very easy to use compared to latex. My latex resume (or the template I was using) was thousands of lines and had several imports of custom classes.

Re-did my resume using one of their templates, and it’s much easier to maintain now.
Not just a relevant comment; this HN thread serms to be a primary source for the article.
> "Our team had a prototype written in the language, R, and wanted to convert this to our standard production tech stack, Golang and ReactJS."

It's very hard for me to understand how this would work, unless the R code was very very simple.

Like, R is mostly used for stats, and Go doesn't have all of the stats libraries, so what did the LLM generate?

Maybe it was a pretty simple LoB app written in R (which would be pretty weird, even I as an R-head gave up on writing general purpose software in R some time ago) in which case it makes sense, or else the LLM generated lots and lots of boilerplate for matrix multiplication (I imagine any implementation of `model.matrix` would have been fun).

Very very strange to me, at least.
I just built a local-first app called "cluttr".

Uses OPFS + WASM to run SQLite and host files. I've had a pretty healthy response to it from HN so I plan to make a desktop app + add PeerJS for file sharing.
Why so against it though? HTML isn't hard to understand. Like I said you can set it up in an afternoon. With any tool you have to learn how to use it. You use some website builder you aren't going to know what all of their gui functions do off the bat either, you will have to read up how to do what you want in their way. Might as well learn to use the right tool for the job which in this case is probably the easiest programming language there is. You basically write paragraphs of text and put in links to where the image files are and some tags and that's it. It's so easy.

Or you can just not approach it, that's fine too, I don't care what you do. I'm only trying to be helpful.
Free-to-read alternative: https://localnest.xyz/ansible-at-scale-working-with-multiple...
I see it as complete opposite. They did it because they could: for a long while, U.S. admitted virtually everyone as a refugee without even an attempt to cook up a plausible story. That happened only in 2022-2024.

It's a no brainer to see no one ever wanted to live in Cuba. Trick is having a place to go. Until the politically opportunistic immigration loophole was closed this year, they had.
good explanation about Final Scratch here https://en.wikipedia.org/wiki/Final_Scratch
Yep. Some of the garbage I've seen out there is shocking. It scares me.

Then I try and get fractional scaling working on Wayland with my NVidia card and want to gouge my eyes out with frustration that after a decade I still can't do what I can do on a closed source thing that came free with my computer. Actually make that 25 years now. The enterprise crap while horrible, actually mostly does work reasonably well. Sometimes I feel dirty about this.

Quality is therefore relative to the consumer. The attention is on what the engineers care about with Linux, not the users I find. Where there's an impedance mismatch there are a lot of unhappy users.
Sorry, I am not really answering the question, but just my 2 cents on the topic.
Who cares about saving Commodore? The best thing about the Amiga was that it was years ahead of its time. It played a big part in shaping things to come, especially in Europe, particularly in game development, music, graphic design, and what I'll just call the culture of sharing.
Personally I can't imagine who I would be without having the Amiga in my youth - what I would like, how I would perceive the world. As heartbreaking as it was to see it die with a whimper, I wouldn't trade that just to see a Commodore logo on a PC equivalent today.
[edit: typo]
Debian doesn't depend on CrowdStrike. That's about people who installed it on such systems.
I tried learning Motif to write X11 graphical programs in 1994. Another student in the computer lab told me about Tcl / Tk. It was far easier. Then I got a job in the semiconductor design industry in 1997. The next year the leading EDA companies Cadence and Synopsys started using Tcl as the internal scripting language for the tools. So now it is 2024 and our CAD flows are tens of thousands of lines of Tcl code. Every week I still write Tcl code to generate reports or automate something.
So yea let’s not use a company like this as best practice. Everything about this reeks of worst practices rising the wave of regulatory capture.
> Penalty 3: greenlight a union by default.

This should be a fundamental feature in any functioning society that expects (or wishes) to remain functional.
Exercise: Minesweeper in 100 lines of Ruby
> As we have seen, leading edge LLMs, such as the GPT-4o, can solve very complex math problems.

No… they can’t. That’s like saying a search engine can solve math problems — which it can, in a sense.

I suspect that the people repeatedly saying this simply lack the knowledge to know what really constitutes a ‘complex math problem’.

And of course any half-decent new model can answer this particular question correctly; the designers aren’t stupid or unaware of what the expectations and common traps are. The model itself probably will be able to talk about why testing on such comparisons would be interesting (because it ‘knows’ about how this being a recent meme).
It can help a bit yes. For example Mac apps have to ask before accessing your documents folder. But nothing stops the user just clicking yes, except notarization (server side virus scanning) and client side AV like the built in Xprotect.

Re: Linux. Not really no.
A Textbook is good enough for self learning. Almost all university learning is "self learning", at least that has been the case for my mathematical training.

> It's a different mindset from a formal academic setting, where there's a strong focus on cheating prevention.

What? Who cares about cheating prevention, most of my classes had oral exams, you can't cheat there.
The article is not about teaching at all despite the title.

The closest it comes to pedagogy is claiming (without evidence) that BASIC is how computers work instead of those other languages with useful abstractions.

> BASIC lacks some universally agreed-upon programming concepts

> if one wants to understand how computers work, I think it’s easier to start closer to the level they operate

Strangely, there's no mention of the PEEK and POKE commands if the author wants us to be lower level . . .
> Most of those migrants have come to the United States in what experts call the most significant migration wave in Cuban history.

With the destabilization that a population drop of 10% has, the potential for more migration in the long term and the associated costs... Wouldn't it make sense for the U.S. to invest and help Cuba? It would also have the additional benefit of maybe depriving Russia of an ally.
hmm. maybe you're right.

it's just that it seems to me that is senseless of these people to downvote comments for what seems like no good reason at all. and like I said somewhere else here recently, why can't they make a reply comment, saying what they think is wrong with my comment, if they disagree - as you just did. I can't tell, by a downvote, whether they just disapprove, or actually disagree. and if they disagree, it would be helpful if they said why. downvoting seems like the lazy option in the case of disagreement.

but yes, you really cannot change people. either they have some good reason for doing it, which I don't understand, or they just are that way.

anyway I am getting tired of doing it, so maybe I'll take your advice and just ignore it from now on.

thanks for your feedback.
Article starts off “Thanks to VERO, Genoa has fewer cigarette butts littering the ground” but I doubt this has been designed to be deployed at scale, beyond demonstrations.