skysight-inc/HackerNews huggingface dataset:
> Another partisan article about “truth” by a leftwing author

It is a review article about a study (that is linked to in the article) that was done by multiple authors? I am not sure we are reading the same thing.

> Joe Biden claimed in his town hall that if we took covid vaccines we would not contract covid

The experiments in the paper use that exact statement to demonstrate the effect.
TBF although I worried about this possibility the first time the IT dude wandered into my office in 1989 holding a floppy he said he wanted to put into all the PCs we had (we had no PCs), it has actually taken a very long time for the shit to hit the fan.
Agreed, but Carbon Black can stop scripts from running.
Show HN: Building a Next.js and Firebase boilerplate to save 80% of my time
2024 Zeekr 001 – fastest charging EV in China
Oh, look at that, TV has suddenly become watchable without all of the scrolling garbage all over the screen.
Windows IT admins of the world, now is your time. This is what you've trained for. Everything else has led to this moment. Now, go and save the world!!
All airlines in Russia are operating as usual. Sanctions work in unpredictable ways
Anyone knows why upgrading postgres is shit?

I love postgres but every major upgrade needs weird interventions...
How is Hisbollah doing?
It's yet another Soviet country on the Great European Plains. Lots of forests, bliny, potatoes, and vodka. A thin coat of "western culture" (pizza and burger places, coke, etc.) over a poor state governed in a way that's been out of fashion in that part of Europe since 1989, now also a vassal state of Russia. People are "nice", but when you talk to them you realise the want western levels of prosperity (as seen in the movies) with the way of living that fits the mentality of Homo Sovieticus. It's not a pleasant mix.
But only $243.6M for fraud, which caused death of 346 people.
I quoted Cavafy's Ithaka:

"And if you find her poor, Ithaka won’t have fooled you.
Wise as you will have become, so full of experience,
you’ll have understood by then what these Ithakas mean."

https://www.poetryfoundation.org/poems/51296/ithaka-56d22eef...
In London it’s really common
The 2024 Zeekr 001 can hit a peak of 546 kW:

https://carnewschina.com/2024/04/02/zeekr-001-fastest-chargi...
If you are struggling to get Prolog.

Think about it this way. In a regular programming language you write code and then write unit test cases to validate it.

In prolog, all you do is write the test cases and then its up to the compiler to write and run the code for you. In other words you define a set of cases for which a logic is supposed to hold true. The compiler then decides what the code must look like if that is the case.

This might look easy for simple True/False kind of cases. But when you have to write test cases for functions that return deeply nested data structures and all their variations. Then it becomes easier said than done. The other part that makes Prolog hard to get, is you are only allowed recursion to iterate or define things. All of this makes it a little hard to think, write and trouble shoot Prolog.

If you are reading Prolog code then try to think of it like you have access to a code repo's unit test cases, but the actual code doesn't exist. The test cases are considered sufficient enough to define the code in a concrete way.

As you might have started to notice by now. This is actually harder than writing the code itself. In a regular programming language, you get sufficient space to write a function that might not do 100% of what was intended(bugs). Im prolog such an adventure will produce absolutely something else altogether.
Then don't memorize. I'm OP and as I said I give the solution, candidate only has to code. Like I would with FizzBuzz.

People still fail.
With a crowdstrike kernel driver, so technically not a microsoft/windows issue.
And that is fine. It definitely looks cute.
If it lets you spawn a shell I would bet money against that
Another point is that by default, we don't apply special processing to faces. However, enabling the face enhancement option will greatly improve the quality of photo images.
IIRC sunflowers store heavy metals in their fatty tissues, which means it's particularly concentrated in their seeds, so if you're using them to pull heavy metals out of your soil you should probably be sending the wilted plant away at the end of the season, seeds and all.
"Gentlemen! You can't fight in here, this is the War Room!"

Have a nice day, anyway.
It's definitely the driver itself if it blue screens the kernel. Quite possibility data-sensitive of course.
We got day or maybe even week of linux on the desktop at least :)
Most IT departments would not be patching all their servers or clients at the same time when Microsoft release updates. This is a pretty well followed standard practice.

For security software updates this is not a standard practice, I'm not even sure if you can configure a canary update group in these products? It is expected any updates are pushed ASAP.

For an issue like this though Crowdstrike should be catching it with their internal testing. It feels like a problem their customers should not have to worry about.
> Instead, HTMX re-allocates most responsibilities from the front end to the backend.

Before we had SPAs that part of the “backend” was actually called the front-end. You had business logic, and output models in the form of json, views if substitutions and logic by itself, etc.
But the Ticketmaster software would buckle under the strain :-)
The contracts are rarely specifying stuff like antivirus explicitly, but instead compliance with one or more of the security standards like PCI DSS. Those say you have to use antivirus, but they all have an escape hatch called a "compensating control" which is basically "we solved the problem this is trying to solve this other way that's more conducive to our overall security posture, and got the auditor to agree with us".
Azure having problems is not a black swan event.
Nowadays it seems like everyone is running stuff inside VMs because IT removes all the rights in the host system.
The sheer coverage of this outage across multiple businesses and industries, the impact must be greater than some of the malicious cyber attacks from ransomware, worms etc.
This title doesn’t nearly describe the breadth and severity of the problem…
Is that just for shared services or does it go towards the costs to repair the bad design?
Centralisation vs decentralisation.
Cost-savings vs localisation of disaster.

It's a swinging pendulum of decisions. And developers know that software/hardware provision is a house of cards. The more levels of dependency, the more fragile the system is.

Absolutely horrible when lives will be lost, but determining the way our global systems are engineered and paid for will always be a moving target based on policy and incentive.

My heart goes out to life and death results of this. There are no perfect tech solutions.
CS is an EDR (Endpoint Detection & Response) and it connects to other parts like XDR (Extended Detection and Response) and MDM (Mobile Device Management). They differ from the typical antivirus in how they detect threats. The AV usually checks against known threats, while EDR detects endpoint behavior anomalies. For example, if your browser spawns a shell, it will be marked and the process quarantined. Of course, they do share a lot of common domains like real-time protection, cloud analysis, etc., and some AVs have most of the EDR capabilities, and some EDRs have most of the AV capabilities.
This is briefly described.
They sponsor the Mercedes F1 team https://crowdstrikeracing.com/f1/about-partnership/ , who have a race this weekend and practice sessions today. It'd be funny if their cars can't go on track because their computers are down...
In Japan, even the bees know martial arts.
So I went through the 1090 entries on https://nlnet.nl/project/ and found 19 projects I've actually used:

Conversations.im https://nlnet.nl/project/Conversations/

Dolphin file manager https://nlnet.nl/project/DolphinAuth/

F-Droid https://nlnet.nl/project/Reproducible-F-Droid/

GPLv3 https://nlnet.nl/project/gpl3/

Jabber/XMPP https://nlnet.nl/project/xmpp/

Jitsi https://nlnet.nl/project/jitsi/

KDE Connect https://nlnet.nl/project/KDE-Connect/

LibreOffice https://nlnet.nl/project/LibreOffice-CRDT/

Marginalia Search https://nlnet.nl/project/Marginalia/

Mastodon https://nlnet.nl/project/Mastodon/

Matrix https://nlnet.nl/project/Matrix/

Nextcloud https://nlnet.nl/project/NextCloudSearch/

Nitter https://nlnet.nl/project/Nitter/

Oilshell/Oils for Unix https://nlnet.nl/project/Oils/

Okular https://nlnet.nl/project/Okular/

PulseAudio https://nlnet.nl/project/pulseaudio/

SeedVault https://nlnet.nl/project/Seedvault/

StreetComplete https://nlnet.nl/project/StreetComplete/

XWiki https://nlnet.nl/project/WikiActivityPub/

A few projects were funded multiple times for different features, but I've not necessarily used the particular feature that received funding, so let's say 2% of grants benefited me in some way. I suspect that's a different 2% for most people.

It doesn't look like they're averse to funding Rust projects (none of which I've used, like HN favorite Servo), so unless the Rust Foundation applied for a grant and was rejected, I don't think you can criticize NLnet for not funding them.
For some reason I can't edit and fix the typo. Anyhow, thanks for the correction.

No idea what the leaderboard says, it's just been night and day for me since Sonnet 3.5 got out. Maybe my use case is just what sonnet does best.
I dont understand? Linux servers dont need endpoint protection?

I venture the vast majority of servers with crowdstrike are linux
Fun fact from Poland:
Here a real "Professional State Licensed Engineer" degree (anything outside IT) is absolutely NOT worth it because the market for most jobs is local.
Only Software "Enginneering" (with or without degree, doesn't matter) is.

I do have a masters degree in computer science (software engineering specialization) and since I'm working as a contractor from the start nobody ever saw it or wanted to see it.
Go to every system manually, boot to safe mode, rename the sys files, run a fix.

Easier to just rebuild from the image. For every windows machine your company has. lol.
My company MacBook with the falcon client does not seem to be affected by this.
The workaround involves booting into Safe mode or Recovery environment, so I'd guess that's a personal visit to most machines unless you've got remote access to the console (e.g. KVM)

The info is apparently behind here: https://supportportal.crowdstrike.com/s/article/Tech-Alert-W...
Thanks a lot for your response. Yes, I get your point: you have to do the work. I agree.

Learning used to be fun for me before the uni, because it was largely multiplayer.
Many people in the classes, many heads to think together, many things to talk about after class.

I'd like to organize a similar environment for myself in the remote uni if it's not provided.

Obviously there won't be many people in this boat by the nature of this boat.

Thanks again.
What amazes me and leaves me breathless is the incredibly and profound ability of a thinker on a coabre of such magnitude to express such complex and intricate ideas blah blah blah blah blah blah shoot me. Kill me please. I am empty and I must use a speech made long ago by someone trying to sell his product to give me meaning and feel like I’m alive. Help me. Help me. My personhood is fading….buy mac. Buy Mac. Buy Mac. Think different. Think different. Buy Mac. Don’t be like others. Be cool. Buy Mac.
https://archive.ph/YFyqS
Ah the "move fast and break things" philosophy gets a demonstration.
> Not sure how we can have a "peaceful and happy mind" while everyone outside of our little bubble suffers. This line of thinking is, to me, an example of why we'll never fix any of this.

I agree with you that this individualistic line of thinking will never fix the systemic issues we find here. But I challenge you on your conclusion, "That's why we'll never fix any of this". There should be another "line of thinking" that will fix stuff. What is it? Maybe something not individualistic, aren't people able to cooperate?

> Folks, remember we're all in the same boat!

By "we" in this sentence I understand you mean ones reading this, or interacting here. Just want to point out that, there are people out of this boat. Their interests are protected by the State and they never, never had to do a 8h work shift.
I think the update will be applied overnight, which is a different window (no pun intended) dependent on timezone and the impact will be reported when users come back online (or not) and identify the issue.

Currently seeing this happening in real time in the UK.
But no damage actually ended up happening with the xz utils exploit. It didn't even get released because someone picked it up pre-release.

Every system gets attacked, but I think your point shows that even with state-level attacks Linux handles it better than other platforms.
i'd never heard of this before... i'm allowed to transmit in the 600 meter band, this might actually be something interesting to do with that ability.
What happened at Zillow? How a prized real estate site lost at iBuying (2011)
Nothing like that, basically what sitharus said above you. Extra network level, zero trust to minimize lateral movement and giving the pen testers a leg up by letting them start already within the corporate network.
> It is risk management 101, never put all your digital eggs in one (or even a few) baskets.

The fact it's widespread is because so many individual organisations individually chose to use CrowdStrike, not because they all got together and decided to crown CrowdStrike as king, surely?

I agree with you in principle, but the only solution I can think of would be to split up a company with reach like CrowdStrike's. The consequences of having to do that are up for debate.
A bunch of unprotected endpoints all at once on critical systems… what could possibly go wrong?

Hope they role out a proper fix soon…
This is not a Ferrari
Almost certainly Azure using Crowdstrike on Windows in one way or another.

Not surprising that AWS and GCP don't seem to be hit as they wouldn't run anything on Windows, unlike Azure, who I'm sure are forced to do so under MS' infamous interdepartmental structure.
EDH is the variant of the game for people who aren't that competitive. They spend a lot of time trying not to win too hard. The format is fine but I don't like it beacuse of this culture around it, it basically has this social metagame where you can get better players removed out of play by complaining about them.

Draft, Standard and Modern are for people who want a real game without having to worry about playing too well.
>I had to do a heuristic layer on top to break up the PDFs into small chunks so the output didn’t overflow

How do you stitch the outputs of all chunks without losing the overall context?
Yes, SLA. No one gets held liable if the legal is done correctly and there were no guarantees, but on cloud there is 100% SLA so they will pay out.
Absolute props on the cleanliness of that source!
Donating for Trump doesn't make you racist (well, not directly). Designing and selling mass surveillance systems for borders control that use AI (and all biases and racism that are embedded in most training datasets) makes you a racist.

Also naming your company after Tolkien nowadays scream "I am a far right libertarian or a white supremacist"
Huge sympathies to you. If it's any consolation, because the scale of the outage is SO massive and widely reported, it will quickly become apparent that this was beyond your control, and those demanding your 'head on a plate' are likely to appear rather foolish. Hang in there my friend.
> It puzzles me why this isn't the case for software

In my anecdotal experience, its because corporate software projects are not typically run by people who are good at building safe things - but rather, just building things quickly.

There's a huge issue with the mentality of "it works, ship it" being propagated.

I build systems software for safety-critical and mission-critical markets, and I can say without a doubt that if there aren't at least two quality stages in your process workflow (and your workflow isn't waterfall), then you're going to be in for a rough time, rookies.

Always, always delay your releases, and always, always, eat your own dog food by testing your delayed releases in your own customer-like environment, which is to say, never release a developers build ..
It won't be the troops and their missiles and planes have better targeting. They'll be flying over your heads. Still, GTFO ASAP when shit hits the fan.
Nah they'll be fine. It happened 7 months ago on a smaller scale, people forgot about that pretty quickly.

You don't ditch the product over something like this as the alternative is mass hacking.
I don't think the parent comment was ignoring that. The penalty for a company who does this can't be to bring someone back from the dead, it's likely to be financial, which is the aspect they're talking about.
I'm very sorry, I usually use Google the most. Could you please let me know your preferred login method? Email or something else?
The IBM quip is an old saying: pick the dominant vedor because even if it's a mistake no one will blame you for it.
The workaround suggests removing a file with .sys extension. What does the file do normally? If removed, what happens to the state of security on that system?
The dawn of the hybrid model: on premise will be back soon.

The impact is vast: imagine being blocked by an hostile administration in this way. Disaster recovery of this magnitude is like a global pandemic.

AI won’t save us. Network topology and admins will have their comeback.
My contacts abroad are saying "that software US government mandated us to install on our clients and servers to do business with US companies is crashing our machines".

When did Crowdstrike get this gold standard super seal of approval? What could they be referring to?
Schipol (Amsterdam, europe's largest) and Melbourne Airport are down
Apparently (I've got no login) it includes this info:

CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes.

Workaround Steps:

Boot Windows into Safe Mode or the Windows Recovery Environment

Navigate to the C:\Windows\System32\drivers\CrowdStrike directory

Locate the file matching “C-00000291*.sys”, and delete it.

Boot the host normally.

(Got this info from a reddit thread: https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/commen...)
"I'm going to install an agent from Company X, on this machine, which it is essential that they update regularly, and which has the potential to both increase your attack surface and prevent not just normal booting but also successful operation of the OS kernel too". I am not going to provide you with a site specific test suite, you're going to just have to trust me that it wont interrupt your particular machine".
I'm very sorry, I usually use Google the most. Could you please let me know your preferred login method? Email or something else? I will add some additional login options.
that Hotel Hawaii song ...

"you can never leave" :)

https://genius.com/Eagles-hotel-california-lyrics
Microsoft are going to be pissed that this is widely being discussed as a Microsoft outage. Do AV vendors like Crowdstrike need a license or something from Microsoft to push these kernal driver based things? Or is it just like anyone can make one?
I periodically watch the status of Lanzaboote [1] to know when it will be upstreamed to Nixpkgs so that it will be easier for people (e.g. me) to switch to NixOS. It has been funded by the Next Generation Internet initiative that the article says is being eliminated.

[1] https://github.com/nix-community/lanzaboote
Fuck this fucking article. You know one reason I know my math degree is bullshit? Because I figured out quickly my profs wouldn’t explain jack shit and I would have to “learn the math early” which meant just teach my self with other kids the god damned material.

This isn’t a life hack. This is the sign of a failing system. Jesus fucking Christ.
Heavily,

Call summarisation at scale, for further insights of key topics/sentiments for diarized & fused channel call data

Lead mining quality improvement by asking questions instead of merely classification

Internal simple RAG chatbot across ~1000 PDFs, not yet down the GraphRAG route

Better chatbot experience over RASA

Contract mining for speeding up mundane governance tasks
How many people still believe the "cloud" was worth it? Maybe we should go back to the days of buying software and running it ourselves with our own infrastructure.

I know, I'm dreaming.
Any PDF, screenshot or otherwise accessible version of this?
Username "mehh" has been noted.
They all should have used some expensive corporate-and-government-level product that promises protection against exactly that kind of large scale attack on infrastructure.
Society was able to move to mass WFH on a global scale in a single month during Covid, thanks to the highly centralized and efficient cloud infrastructure. That could have easily saved tens of millions of lives (Imagine the Spanish flu with mass air travel, no vaccines, no strain-weakening)

These small 'downages' basically never cause serious issue. Your solutions are just alarmist and extremely costly (though they will provide developer employment...).
Admin privileges aren't the same thing as a kernel-mode driver. Steam does require admin to be installed, but it does not install a kernel-mode driver.
Wow that's terrible. I'm curious as to whether your contract with them allows for meaningful compensation in an event like this or is it just limited to the price of the software?
Crowdstrike was hacked by Russians?
That piece of "AV software" slowed down my brand new corporate i7 Lenovo to shit so I switched to M2 Pro. Best decision ever.
Just got their ticker back at 09:42 !
Root and kernel are different levels.
Hopefully just EU and not the European countries outside of EU.
Mixing up the responsibility, in your world hospitals shouldn't purchase it.
>I hope this sort of thing humbles them a little.

Hopefully not. It would be better that this company is sued into oblivion by all the customers that were affected by this huge outage.
It's easy, the users can do it themselves. Just send them an e-mail with the inst... oh wait...
#CorrugatedPaperMachine #PaperMachineEquipment
Leave your email for price!
If you are interested, you can contact us.
Email address: wastepapermachine@gmail.com
https://drumpulper.com/corrugated-paper-machine-manufacturer...
#papermill #papermachinepulpmachine #everyone
This was apparently caused by a faulty "channel file"[0], which is presumably some kind of configuration database that the software uses to identify malware.

So there wasn't any new kernel driver deployed, the existing kernel driver just doesn't fail gracefully.

[0]: https://x.com/brody_n77/status/1814185935476863321
Currently, we are using a third-party API directly. Based on my tests, if you enlarge an image repeatedly, the first enlargement might make the image too large, causing the second attempt to fail.
When I stayed in the hospital for 2 weeks without being able to move, nurses where doing everything for me. I remember how much I cried over that when I left the hospital, how much grateful I was. They all just looked like angels to me.
Banks seem fine now. At least ING and NAB.
Yeah, progressive rollout would have dramatically reduced the impact, I think that should be mandatory for any of these systems.
It's never that simple. There is a strong herd mentality in the business space.
Just yesterday I've been in a presentation from the risk department and they described the motives around choosing a specific security product as `safe choice, because a lot of other companies use it in our space, so regulator can't complain`...the whole decision structure boiled down to: `I don't want to do extra work to check the other options, we go with whatever the herd chooses`. Its terrifying to hear this...