skysight-inc/HackerNews huggingface dataset:
They could basically eliminate vendors and make everyone use a Microsoft tool. But I suspect many would object to that solution also.
> It's literally impossible to understand multiple systems at a deep level,\

No, it's not. It takes above average intelligence, and major investment in actual education (not just "training"), and actual depth of experience, but it's not impossible.
At least for myself, I find text on Windows to be more readable than on macOS.
When I was a starving college kid $8/day for food that had some nutritional value would have been a godsend hah.
Apparently Crowdstrike also brought down Linux hosts in the same way in April but it didn’t get widely reported: https://news.ycombinator.com/item?id=41005936
> What a Friday for sys admins.

What sysadmins ? They are all externals now.
so cool. First time I've seen that map

It struck me that I have no idea how curiosity is instructed to move

I suspect someone can't be sitting in front of a computer with a joystick, moving a foot, waiting for curiosity to move a foot, then move another foot...

My next thought is nasa creates a route based on the map and then provides route data to curiosity. But there's no GPS (again, I assume). So is it all dead-reckoning? NASA somehow calculates 'move 100 ft forward, turn left 80 degrees, move 10 ft forward", etc?

(I am also assuming NASA uses metric)

OR does curiosity make its own decisions somehow?

I gotta go google some stuff now
I'm going to follow the guidelines and not be snarky: Microsoft is not some weak company at the mercy of the market. They choose their vendors (they also actively throw their weight around with vendors) and MS on top of that is capable of doing anything in-house (or buying it to bring it in house).

The stance of "let's not hold companies accountable for cutting corners" is one reason everything is getting worse. It's because we collectively let it get worse.
This is amazing. Do you have any information on the implementation?
The standard refrain of "it's always been like this" is a great way to avoid confronting the very real problems facing amateur radio.

But despite your insinuation I'm not a "new ham". After a few brushes with the ham community in my area I very quickly decided I wanted absolutely nothing to do with it.
I mean, Boeing is still around...
I am talking out my ass, but...

Seems like a possible plan would be duplicate computer systems that are using last week's backup and not set to auto-update. Doesn't cover you if the databases and servers go down (unless you can have spares of those too), but if there is a bad update, a crypto-locker, or just a normal IT failure each department can switch to some backups and switch to a slightly stale computer instead of very stale paper.
Oh wow, nice, thanks for the MIT License!
>Prisons serve many purposes and rehabilitation should be lowest priority of them, after incapacitation, deterrence, and retribution.

I dont think any sane person would argue against the first two as priorities. I think the balance retribution vs Rehabilitation is far more debatable, as both DO have conflicting impacts on society's benefit, and not just prisoners.
“The Entire Culture Around So-Called ‘Software Engineering’ And Our Collective Failure to Build Strong Legal Institutions Around That Culture has serious questions to answer after the biggest IT outage in history”

there fixed it for you
“Repeat a lie often enough and it becomes the truth” ?
Nope. It doesn't say why the process itself is cumbersome.

They just state that it is for various reasons.

And I'm not even talking about upgrading without downtime I mean the problem that you can't just replace 14 with 15 without preparing the DB upfront.
"Relevant, critical oxygen thresholds are being approached at rates comparable to other planetary boundary processes."

https://www.researchgate.net/publication/372847863_Anoxia_Be... is a previous paper, I can't find this. The author is qualified and has produced a good deal of original and field research on the topic.

This is a good example of where just reacting to a bad or clickbait headline would be to your detriment. This actually is new information and bad news.
Failure to secure availability is a lose.
Largest, most intact stegosaurus fossil ever found sells for $44.6M
Just an ingress
In 2012 a local bank rolled out an update that basically took all of their customer services offline. Couldn't access your money. Took them a month to get things working again.
Wonderful write-up. One way I really try to avoid premature abstractions is co-locating code wherever it is used. If you don't try to put everything in a shared lib or utils, you keep the surface area small. Putting a function in the same file (or same folder) makes it clear that it is meant to be used in that folder only. You have to be diligent about your imports though and be sure you don't have some crazy relative paths. Then, if you find yourself with that same function in lots of places in your code, you might have an stumbled upon an abstraction. That's when you put it in the shared lib or utils folder. But maybe not, maybe that abstraction should stay in a nested folder because it is specifically used for a subset of problems. Again, that's to avoid over-abstracting. If you are only using it for 3 use cases that are all within the same parent folder path (just different sub-folders), then only co-locate it as far up in the file tree as is absolutely necessary for keeping the import simple. Again, it requires due diligence, but the compartmentalization of the folder structure feels elegant in its simplicity.
Pretty sure most Americans would disgree with this point of view as well.
> Why does this tool exist and must be installed on servers?

Fads, laziness, and lack of forethought. This tool didn't exist a few years ago. Nobody stopped IT departments worldwide and said "hey, maybe you shouldn't be auto-rolling critical software updates without testing, let alone doing this via a third-party tool with dubious checks."

This could have happened on any OS. Auto deployment is the root problem.
It would be like orthopedic surgeons heading down to harbor freight to pick up their saws instead of using medical grade versions.

The tool isn't fit for purpose
From experiencing different AV products at various jobs, they all use kernel level code to do their thing, so any one of them can have this situation happen.
Gas solubility in water decreases pretty strongly due to the gaseous phase being more entropic (in governing thermodynamic potentials the entropic term is -T•∆S). Unfortunately this is unavoidable with rising temperatures.
The now defunct Inbox from Google used to make use of these XML tags to organise your trips into folders. Wish they'd bring that to gmail.
Oh yeah I know all about our people over there. Not a chance I'd go post 2014 unless a revolution happens.

They're all sad stories but there's a ballerina who lived in California for decades and was a US citizen (If you were ever Russian, Russia doesn't recognize your new state, you're always Russian) who was arrested last year when visiting I believe a grandma. Her charge was that she donated $25 to a Ukranian refugee fund. She had a few articles last year but not much keeping her in the news. She's going to have a tough time being an immigrant from Russia who donated to Ukraine. I don't think she has a chance of getting out and the women penal colonies like IK-14 are essentially slave factories.

The Ukraine war has taught me a lot about how Russia treats peope, especially women. Field Wives, et al. Now they're releasing female prisoners to Storm Z groups to go to the front line.

https://nypost.com/2024/03/04/world-news/ksenia-karelinas-le...

https://www.rferl.org/a/notorious-russian-women-s-prison-hel...
You've got it! I definitely aimed for a Google-like simplicity rather than a Yahoo-style portal. Clean interface, powerful search - that's the goal.
Not like hackers haven’t done the same.
https://support.apple.com/guide/security/operating-system-in...
You're confusing the Crowdstrike issue with Azure being down. Microsoft is ultimately responsible for anything regarding Azure even if it was a vendor that did something wrong because they choose their vendors
The they'd get sued by the EU for bundling these tools into the OS and eliminating the market for third party vendors.
WTF? Isn't that exactly the one of the main jobs of the OS, to not crash regardless of what user-space software is doing?
Skimming the conclusion of the paper it seems that, unless there are overlooked measurement errors the effect is robust. The immediate question this suggests to me is this: are there any naturally occurring multi-year (or multi-decade) oxygen concentration cycles in the ocean analogous to already-known salinity cycles?
> As to why Mormons tend to be so into it, I have a theory.

No need to theorize, the rapture plays a big role in their canon, and is proselytized heavily.
"Greatness" is a quality we give to a person as a society, Bach himself risked being forgotten because only a small part of society remembered him. Greatness is of course a question of luck, because no matter how skilled you are you are still at the whims of history.
They could provide a upgrader.

It's a scale issue. If one does it for all, less work for everyone :)
Postgres vs. Pinecone
Pgstream: Postgres replication events with DDL changes
A disturbingly large area of our planet is covered by greenhouses
Alternate, positive headline "Earth's water sinking more carbon, oxygen loss shows".

CO2 is a potent fertilizer and is going to cause a lot of "blooms" and general more life which is going to affect oxygen levels. Loss of oxygen is a dampening effect on this.

Every environmental article has to be about "danger" instead of just stating facts about what is happening now.
We could call it, I don't know, "Protected Mode"?
Because an essential enterprise security application was /able/ to bring down an entire OS like this. The issue is that Microsoft doesn't provide an interface for an application to operate in user-space to have the functionality it requires.

Linux has eBPF which can provide most of the capability that Crowdstrike needs, by using an "in-kernel verifier which performs static code analysis and rejects programs which crash, hang or otherwise interfere with the kernel negatively". If MS had this functionality, it is likely this incident would not have happened.

That said, from personal experience on Linux it's been an extremely long time since a bad kernel module has rendered a system entirely FUBAR'd.

(To Microsoft credit, they have begun copying the eBPF methodoloy to Windows, but it is still in it's infancy https://github.com/Microsoft/ebpf-for-windows/ ).
I’m not following your line of reasoning, can you clarify?

Is the argument that it was MS responsibility to bake something like this in at the OS level? And if they did it would be more robust?

I’m not sure I agree. MS has already gotten in trouble for monopolistic practices before, so from a legal standpoint, I’m not sure that’s the best course of action.
People doing this are probably not interested in the rhetorical efficacy of the justification. In other words it probably doesn't matter whether you find it convincing.
If the government agencies insist on using this particular product then you're right. If it's a choice between many such products than there should be some competition between them.
I wonder if there aren’t zoning laws that create incentives for or against some of these approaches. In dry places the living space can be connected to rain-collecting cisterns that further help to reduce evaporation losses. When you free the surface to other uses, you can also generate power from wind or solar (and solar also helps to protect the top soil from evaporative losses).
Yeah, because no one on Linux or Mac would clone a git repo they just found out about and blindly run the setup scripts listed in the readme.

And no one would pipe a script downloaded with wget/curl directly into bash.

And nobody would copy a script from a code-formatted block on a page, paste it directly into their terminal and then run it.

Im not going to go so far as to claim that these behaviors are as common as installing software on Windows, but they are still definitely common, and all could lead to the same kinds of bad things happening.
If the competition were set up with the right incentives, like payment to the private prisons based on their recidivism rates or job placement after incarceration, it might actually work. But today we're creating backwards incentives.
Prolog is very, very dead. I love Prolog with all my heart, but it excells at problems that are solved today much more efficiently using neuronal networks. So it's utterly obsolete.

The issue of Prolog is that you need to code your rules manually. Doing ML with Prolog is possible, but very clumsy. Better stick to Python.

Speed is irrelevant, because most problems suitable for Prolog are exponential. Implementation is irrelevant, because SWI-Prolog does all you need with good integrations, except that it's a bit slower. But that's irrelevant, see above.

Learning Prolog is a great experience for any advanced computer science student. It amazes, doesn't it?
They have sunset third party kext files. That means if the kern crashes, it is Apple's fault.

I once did a little MacOS driver development and had a kext signing key. It was an unforgiving, poorly-documented environment. Good riddance.
They key to tools like crowdstrike is not so much protection, and being able to trace an attack through the infrastructure. They can see that your credentials were comprimised on your machine, and which systems you then connected to (or that bad process did) so they can trace the attack and make sure get it all cleaned up.
The user isn't being restricted. Third-party software is being restricted, by default, and those restrictions can be disabled by the user.
These prisons are privately operated for-profit ventures and society does not benefit from the enrichment of the prison-industrial complex, and in fact it can be argued that it is a net loss to society because these businesses depend on a steady stream of offenders to incarcerate in order to survive, as well as repeat business from a high rate of recidivism. In order for the people running these businesses to maintain their wealth, they need a steady supply of criminals to shake down, and when they can't do that, they'll just lobby using sympathetic points like yours to say that they deserve to be landed with crippling debt.

Of course, a society that dehumanises criminals, favours retribution over rehabilitation, and believes heavily in the 'free market', has simply opened the space for such a pipeline to exist.

In the case of the wrongful conviction, it sounds like indentured servitude. You're not actually free until you've paid off your contract with Private Prison Inc.
The article is about CrowdStrike incident and not the Azure configuration issue.
With 1 degree?
Honest question. Is clear that is some places is more, but also some places (ask me how I know) are colder. The avg. is “just” 1 degree.
I love Calibre, even calibre-web, which I can use as an ebook store by modifying the URLs in my Kobo eReader so that I can download ebooks from my server directly from the eReader over WiFi.

I use Calibre to manage my collection, create book covers if I need to for non-boo k documents, web for organising and occasional looking up of things, and eReader for reading.
This is a good example of why you don't want ring0 level access for clients.
Or just, you don't want client-based solutions. The provider just becomes another threat vector.
There's so little air up there that the gliders would go supersonic rather quickly until they got into denser air. This would mean you'd need low aspect dart like wings so they don't get ripped off but that means the landing performance would be abysmal. You'd have landing speeds nearing 200kts (as opposed to ~50kts for a normal glider). Since kinetic energy is the square of speed, any fuck up would be very fatal at those speeds.

The U2 was famous for this issue, the pilots were flying on a knife edge because a stall (a less aggressive situation that deploying from a static balloon) would mean the plane starts accelerating well beyond it's structural limit before you can do anything about it.
Weightlessness is very different than just equally balanced forces of drag and acceleration.

If you crush something in a hydraulic press, it might have balanced forces and zero acceleration.

For that matter, Im not accelerating when I lay on the surface of the earth, but I hardly feel weightless.
I know there's a better word to be used here, but what initially looked like a massive cyberattack turning out to be a massive defender foot-broom is chefs kiss.

I saw it was Windows and went to bed. What a great feeling.

I'm sorry to those of you dealing with this. I've had to wipe 1200 computers over a weekend in a past life when a virus got in.

Did I receive any appreciation? Nope. I was literally sleeping under cubicle desks bringing up isolated rows one by one. I switched everything in that call center to linux after that. Ironically it turns out it was a senior engineers ssh key that got leaked somehow and was used to get in and dig around servers in our datacenter outside of my network. My filesystem logging (in Windows, coincidentally) alerted me.

IT is fun.
Well your very first step doesn't really make sense, given that the USDA, a federal organization funded with 150+ billion dollars a year, has 15 different nutrition assistance programs to provide food specifically "to ensure that children, low-income individuals, and families have opportunities for a better future through equitable access to safe, healthy, and nutritious food".

Why commit crimes and steal food when the taxpayer will literally just give you free food or free money for food.
The ultimate hinge test
> So we need to hold regulatory bodies accountable as well - when they frame regulation such that organisations are cornered into this they get to be part of the culpability here too.

Replacing common-law liability with prescriptive regulation is one of the main drivers of this problem today. Instead of holding people accountable for the actual consequences of their decisions, we increasingly attempt to preempt their decisions, which is the very thing that incentivizes cargo-cult "checkbox compliance".

It motivates people who otherwise have skin in the game and immediate situational awareness to outsource their responsibility to systems of generalized rules, which by definition are incapable of dealing effectively with outliers.
What jurisdiction are you in? Did you contact your elected representatives (if you have any)? Did you appeal the fees?
I'm confused as to how this issue is so widespread in the first place. I'm unfamiliar with how Crowdstrike works, do organizations really have no control over when these updates occur? Why can't these airlines just apply the updates in dev first? Is it the organizations fault or does Crowdstrike just deliver updates like this and there's no control? If that's just how they do it, how do they get away with this?
Oh, and we've moved to Texas now!

Fraud.
Coming from you, sir, it’s quite a compliment.
Except that doing those things could be viewed as monopolistic or anti-competitive behaviour.

If Microsoft is responsible, then they need to also need greater control. If Microsoft isn't supposed to have that kind of power, they cannot be blamed.
nothing like this scale. These machines are full blue screen and completely inoperable.
This is an odd take. My electrical power goes out more often than Windows crashes.
No malicious intent here but the post says it was submitted by you.

What exactly were you "not expecting"?
As GP said, 'English is spoken very widely in Ukraine', though he forgot to add 'now' and 'because someone needs to brigade subreddits and do damage control when UA does something stupid and exposes itself again'[0].

The whole '"the" VS lack of "the"' stems from the Russian/Ukranian language distinction somewhat resembling that 'the regions vs the country' in English.

But again, they do demand Russian speakers everywhere to use the language they claim is not even used in their own country[1] as they see it fits them.

And this is the reason they aren't bothered to demand the same treatment to the Netherlands, the Bahamas and whatever else, and that's why they don't bother with German or any other language - it's just self-esteem and identity issues absolutely, totally unrelevant to anyone in the world.

[0] https://old.reddit.com/r/UkraineRussiaReport/comments/1e67jp...

[1] 'not as a primary language, but to a secondary official status nonetheless' https://news.ycombinator.com/item?id=41002437
If you can crash Linux with an eBPF program, many more asses will have fires lit under them than just this one vendor.
Understanding the Xyz Domain (2023)
Large corporations buy Windows _because_ they can have this level of control over their machines. The CTOs and auditors want to be able to say they've personally secured their systems using "top of the line" security software.
They would use those 4 magic words in aviation: "I'm declaring an emergency"
I think the idea is that CrowdStrike doesn’t run in user space.

If an Nvidia driver had bricked the machines, would that be MS fault or Nvidia fault?
My Pitch slides that generates $15K revenue
The day of the blue screens of death
Yep, it’s pretty much a toll on doing business with entities. I’ve no doubt the intention is so your customer can sue you without you winding up, whether it actually works… no idea.
Might be editorialised by op or sky changed the title, it is currently:

"Serious questions to answer after what could be the biggest IT outage in history"
At a minimum, at a minimum, we should absolutely demand that Microsoft abandon requiring Microsoft Accounts to set up Windows. They have lost all rights to do that with a straight face.
> I honestly believe there's A LOT of incompetence in the tech-world

I can understand why. An engineer with expertise in one area can be a dunce in another; the line between concerns can be blurry; and expectations continue to change. Finding the right people with the right expertise is hard.
Endpoint protection is hardly user-space software. It gets deeply privileged access to the entire system.
If you hold power and a volume key on an iPhone will disable biometrics and require your password.