skysight-inc/HackerNews huggingface dataset:
I did a similar thing with the Xiongmai camera's I bought to keep an eye on a newly built barn/stable/clinic here on the farm and used the information to create a CLI tool to control the camera's:

https://github.com/Yetangitu/cam

I never allowed these camera's or the included DVR (which I do not use since I use Zoneminder [1]) access to the internet, they are confined on their own subnet which does not allow egress other than to my own networks nor ingress from other sources. That is true for any and all network-connected special-purpose hardware, e.g. the Fronius inverter - made in Austria - does not get to access the internet either. I pay for the hardware and I provide my own service infrastructure, I see no need to pay again with my data.

[1] https://zoneminder.com/
Are you serious?

If I push a code change in production before going through the test environment and this cause trouble, I'll be fired.

We already have rules and procedures that work for "normal" software, why they cannot be applied to AV software?
Anecdote: my first job was IT at a small org. We had somehow gotten a 15 minute remote meeting with Kevin Mitnick, and asked him several questions about security best practices and software recommendations. I don't remember a lot about that meeting, but I do remember his strong recommendation of Crowdstrike. Interesting to see it brought up again in this context.
You end up with the ebook file and an annotations and bookmarks file. I'm assuming that the program would just look in the same directory as the ebook file or some configurable location.
This is cool, thanks for sharing it with us!

Also to those downvoting my comment - would you be kind enough to also leave a comment? I’d like to know what part did you disagree with.
And this is how the entire math gets done in 5 simple JIRA tasks. :D
You could have been using the bed. You still pay the full time if you are released early.

Now, if they made the "bed fee" proportional to your net worth, that would be interesting. But that would be Communism, can't have that.
> “This is a very, very uncomfortable illustration of the fragility of the world’s core internet infrastructure,” said Ciaran Martin, the former Head of Britain’s National Cyber Security Center who is now a professor at Oxford University’s Blavatnik School of Government.

Is it? Azure is not "core internet infrastructure" in the same way that DNS, network peering, oceanic cables and the like are. They're just a big CSP. Your on-prem Windows box is definitely not internet infra.
Where is Ocean gate was charged with dealing with pressures above one atmosphere, this company will have to deal with pressures between zero and one atmospheres. Probably the same outcome will occur at some point.
Why do we call managers "leaders" now? That's not what they are.
There's nothing inherently unhealthy about freeze-dried food. You can freeze dry pretty much anything.

However, you get what you pay for, and freeze drying itself adds cost. Ingredient quality/price must be very low.
i'll admit i have no idea what i'm talking about but isn't there some Plan B options? something that's more manual? or are surgeons too reliant on computers?
I have tried nearly all the epub readers mentioned.

Koodo is now what I use, it renders the best for me, I feel like I'm reading a paper book, which is great to me, the fonts and theme are great.

Calibre's epub reader is painfully slow to start, and it does not look that good either.

I wish other epub readers can have better fonts and color.
I thought that is a deployment issue? Or maybe a QA one because looks like no QA has been performed...
It's going to be the spectral locus.
It might not be legal. Has it been challenged in court yet?
Probably a top ten mistake by the government to break up bell labs.
Fandango Founder J. M. Cline, 64, Dies After Plunge from 20th Floor of NYC Hotel
I tried using Aider but my codebase is a mix of Clojure Clojurescript and Java . I gave up making it work for me it as it created more issues for me. What I really hated about Aider was that it made code changes without my approval.
> Not you, or me

Then who? If two parts of the same party, with equal bonafides, have differing opinions then how is that resolved?

It will get weird, and stupid, very quickly. Either it will turn into some outrageous purity contest or lead to the removal of any multiculturalism - or basically what @jackbravo said here https://news.ycombinator.com/item?id=40998946
> Orgs are doing this because they are more scared of failing an audit than they are of the consequences failure of the underlying systems the audits are supposed to be protecting.

I've been someone in one of those audit meetings defending decisions made and defending things based on the records we keep and I understand this because it is both a deeply unpleasant and expensive affair to pull people from current projects and place them before auditors for several hours to debate what compliance actually means.
In enterprise software, you don't need to be good. Just better than your competitors. I distinctly remember doing a happy jig about 6 years ago when we moved from Skype for Business (shudder) to Teams. Did teams drive me nuts? Absolutely. But I was free from the particular hell of SFB.
https://archive.is/20230318045621/https://www.politico.com/n...
Your comment seems pretty accurate because, from my perspective, I've never seen comments of type #1. And so, despite me explicitly saying otherwise, people like the GP commenter may be reading my comments as #1.
Frivolous?

Stalin's campaign against various subjugated nations (Baltic, Crimean Tatars etc.) would fit right in, only it happened generation(s) later, in a supposed Paradise of Workers and Peasants.

Mass deportations, artificial famine, mass executions, torture.
I wonder how many people in this thread generally vote for Republicans, who are disproportionally the recipients of for-profit prison company money? https://www.opensecrets.org/industries/indus?ind=G7000
Teams, and it's not even close. Azure DevOps usually fails in understandable ways. Teams usually fails in ways that make me doubt my understanding of technology, society, and the nature of reality.
https://en.wikipedia.org/wiki/Shadow_IT
https://archive.ph/L7ddo
Langfuse co-founder/maintainer here, while the underlying architecture will change in v3 (thanks for referencing the thread), the docker-composed based self-hosting setup will remain as simple as shown in the video

verdverm, thanks for all your feedback by the way!
"We breach your systems to hackers can't!"
Is this the part where someone says the rest of us are working too damn hard?

Because on days like today, I do wonder….
This isn't a Github project with a MIT license. When you do B2B software, there aren't software licenses, there are contractual terms and conditions. The T&Cs outline any number of elements but including SLAs, financial penalties for contractual breaches, etc. Larger customers negotiate these T&Cs line by line. Smaller customers often accept the standard T&Cs.
Because of Security Theater.
And if you are released early, somebody else will probably get that bed and they too will be paying the fee. I bet they are double and triple collecting on a significant number of beds.
It's actually an explicit religious expectation to prep for emergencies. I believe the generally understood requirement is a 3 months supply, but I'm not LDS, so I don't know the details of Mormon practice and variations therein.

What's interesting to me is that Judaism doesn't have any kind of similar requirement. There you also have a history (or at least a stereotype) of having to pick and up and move in response to religious persecution. I wonder if it's because in reality the gaps in time between periods of stability and persecution were often quite large? I don't think Jews have historically seen themselves as a wandering people as much as outsiders have seen them that way.

Mormons, meanwhile, had to move from place to place in quick succession over less than half a decade. It's another reason why LDS Church feels like the ultimate American religion: prepping is baked directly into the religious practice.
Check out this Reddit comment (not mine)

https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/bsod_e...

Quote: "Multiple sensor versions apparently. I checked we haven't received a sensor update since the 13th so it must be something else they're updating to cause it.
So much for our Sensor Update Policies avoiding things like this..."

Edit to add: Based on the Reddit comment and this thread, https://news.ycombinator.com/item?id=41004103, I would put this on CrowdStrike doing something that was unavoidable by the customer (CrowdStrike could have avoided this). But maybe there are some customer settings that could have prevented this.
When we figure out how this formed, I wonder if that will have any impact on the feasibility of sulfur based lifeforms?
I absolutely abhor these end point solutions that "auto update for your convenience and safety."

I can control and manage my own systems. I do not need nanny state auto updating for me.

Crowdstrike should be held liable for financial losses associated with this nonsense.
... and security vendors themselves becoming the clear and present danger if they're able to push untested kernel drivers, bypassing testing, directly into production systems. A significant portion of these production systems are 'life-critical' (i.e. people die if these systems fail).
Is it working for you? It is not working for me, it keeps demanding permissions. It might be something specific to my phone, but also unlikely, since there are video and audio players that can play videos and audio without any permission at all.
Should CrowdStrike themselves not follow a canary deployment model?
Calibre has a 'standalone' ebook viewer component.
I think there is a defined wifi mesh standard, 802.11s https://en.wikipedia.org/wiki/IEEE_802.11s

I think it was used by the deployed OLPC (One Laptop Per Child) project back in the 90s/early 2000s, which wanted to send them to areas with no internet.

If you can get such a network set up, you should be able to route IP packets over it as normal?

I think during the Hong Kong protests, they also used peer to peer smartphone meshes over either Wifi or Bluetooth (can't remember). Might be worth looking into?
If the balloon malfunctions, they can feel weightlessness until they reach terminal velocity. The problem is they're also going to experience a pretty large acceleration when reaching the surface.
The Biggest Churches in the World: Anglo-Norman Eleventh-Century Cathedrals
> Ryanair is a prime example of a company that employs various manipulative techniques, known as "dark patterns," to increase its profits.

You can say "to increase its profits" about anything a company does. The problem with using dark patterns isn't the profit motive. The problem is it's coercing people through deception.
I don’t think their crisis management team has formulated an apology in corporate speak yet, but he was on NBC (remotely) saying “we apologize”.

I’d rather a commitment to a thorough and public accounting of what went wrong. Not just something locked behind the portal login. They owe the world answers about why this wasn’t caught in testing.
Yes. Many of the Russian Empire's, and later USSR's former territories have their own versions of the trail of tears, reservations, and atrocities in Congo, except with Russian/Soviets at the privileged end. It's not a frivolous use of the word at all.
It's silly that the government allows for service providers to charge excessive rates, when they should have contracted rates. And your solution is equally absurd.

Provide prisoners with tablets or cellphones and let them choose their own service provider?

You know that prison phone calls are monitored right?
What if your company mandated your customers run crowdstrike in order to run your software? What are the legal implications of that? Wouldn't that also put your contracts on the hook?
Rushed to finish enough Jira points by the end of this sprint - because those points matter more in a corporation than sensible periodic slowdown.
Such a nutritionist or psychologist would be an incompetent fool, of course. Sugary beverages are horrible for you, and are associated with a variety of poor health outcomes (obviously T2D and tooth decay, but also e.g. heart disease and liver disease). If a nutritionist can't identify that a can of literal sugar water is a worse calorie source than e.g. a potato in pretty much all scenarios (perhaps except during the act of running an ultra-marathon), then I can't imagine what use consulting them could possibly have.

You don't have to give a kid an eating disorder to explain that candy for breakfast isn't acceptable, and we don't drink dissolved sugar (except perhaps as an extremely rare treat, like cake). Just set an example of a normal life where we don't do those things. Let them see the results speak for themselves as they observe society, and let them eventually ponder if everyone is wrong about something so obvious, how good could society (including, apparently, credentialed 'experts') possibly be at other judgements it makes?
I work for government organization that is constantly audited and I've seen this play out over and over.

An important aspect I never see mentioned is most Cyber Security personnel don't have the technical experience to truly understand the systems they are assessing, they are, like you said, just pushing to check those compliance boxes.

I say this as someone who is currently in a Cyber Security role, unfortunately, as I'm coming to learn cyber roles suck. But this isn't a jab at those Cyber Security personnel's intelligence. It's literally impossible to understand multiple systems at a deep level, it takes employees working on those systems weeks to months to understand this stuff, and that's with them being in the loop. Cyber is always on the outside looking in, trying like hell to piece it all together.

Sorry for the rant. I just wanted to add on with my personal opinions on the cyber security framework being severely broken because I deal with it on a daily basis.
The poor quality of Windows and associated software is not the problem here. The problem is that Microsoft especially, but software vendors generally, encourage users to blindly accept updates which they do not understand or know how to roll back. And by "encourage" I mean that they've removed the "no thanks" and "undo" buttons.

Here on Linux (NixOS), I am prompted at boot time:

> which system config should be used?

If I applied a bad update today, I can just select the config that worked yesterday while I fix it. This is not a power that software vendors want users to have, and thus the users are powerless to fix problems of this sort that the vendors introduce.

It's not faulty software, it's a problematic philosophy of responsibility. Faulty software is the wake-up call.
I think I preferred it AS-WAS.
Prisons serve many purposes and rehabilitation should be lowest priority of them, after incapacitation, deterrence, and retribution. Prisons are for society’s benefit, not for prisoners. If inmates can be rehabilitated, great, but all those other things are more important.
Integral? I would argue that is wild that a piece of software so useless for the basic and correct function gets so much privilege.
Had to move my Cube this past week-end, and it made me incredibly sad.

Using a NeXT Cube w/ Wacom ArtZ and an NCR-3125 running Go Corp.'s PenPoint (and rebooting into Windows for Pen Computing when I wanted to run Futurewave Smartsketch) was the high-water mark of my computing experience.

It was elegant, consistent, reliable, and "just worked" in a way no computer has since (and I had such high hopes for Rhapsody and the Mac OS Public Beta).
It's not universal enough to be advised to someone as a solution, increasing the already existing social pressure to have children, and also exposing both the potential parent and child to the risk of lifelong unhappiness together.

Also "spouse or children" – those are too different, Personally, I've been married for over a decade, but I don't have the emotional capacity to be a parent and desire to have kids in the first place.
There is a fair point there, but a few things - HSV and Lab are only models, they don’t necessarily capture all visible colors (esp. when it comes to tetrachromats). Brightness is a dimension, and can affect the perception of a color, esp. as you get very bright - HSV and Lab are 3D spaces. Arguing that brightness should be ignored or factored out is problematic and only a small step from arguing that saturation should be factored out too and that color is mostly one dimensional.
Could you talk us through this one? I am interested in the equation of "above one atmosphere" to between 0 and 1.
Of course it can be fixed in an automated fashion; it just requires effort. The machines should have netboot enabled so that new validated operating system images can be pushed to them anyway, so you just write a netboot script to mount the filesystem and delete the file, then tell the netboot server that you're done so it doesn't give you the same script again when it reboots.

It's like two hours of work with dnsmasq and a minimal Linux ISO. The only problem is that much of the work is not shareable between organisations; network structures differ, architectures may differ, partition layout may differ, the list of assets (and their MAC addresses) will differ.

Edit: + individual organisations won't be storing their BitLocker recovery keys in the same manner as each other either. You did back up the recovery keys when you enabled BitLocker, right? Modern cryptsetup(8) supports a BITLK extension for unlocking said volumes with a recovery key. Again, this can be scripted.
Well, if you fail at compliance, you can be fired and sometimes even sued. If your compliance efforts cause system wide outage - nobody's to blame, shit happens. I predict this screwup will end up with zero consequences for anyone who took the decisions that led to it too. So how else do you expect this system to evolve, given this incentive structure?
I love this on my laptop - but struggling for iOS - particularly iPad - any good suggestions?
I just want to read books, keep my place and not have any ads -is this that hard?
I had to pay hundreds of dollars in court fees after all shoplifting charges against me were dropped by the prosecutor when they noticed the person on camera was not, in fact, me, or anyone looking even remotely like me. The mall cop just grabbed the wrong person.
You're missing the flip side: falsely believing something is forged.

Now that the technology is so accessible and widespread, someone could deny truth by saying whatever audio/visual evidence was deepfaked, and people will believe it.
Their stock is down only 9%; barely an event for a tech stock. He didn't even apologize.
Oh, if you are also running Crowdstrike on linux, here are some things we identified that you _can_ do:

- Make sure you're running in user mode (eBPF) instead of kernel mode (kernel module), since it has less ability to crash the kernel. This became the default in the latest versions and they say it now offers equivalent protection.

- If your enterprise allows, you can have a test fleet running version n and the main fleet run n-1.

- Make sure you know in advance who to cc on a support ticket so Crowdstrike pays attention.

I know some of this sounds obvious, but it's easy to screw up organizationally when EDR software is used by centralized CISOs to try to manage distributed enterprise risk -- like, how do you detect intrusions early in a big organization with lots of people running servers for lots of reasons? There's real reasons Crowdstrike is appealing in that situation. But if you're the sysadmin getting "make sure to run this thing on your 10 boxes out of our 10,000" or whatever, then you're the one who cares about uptime and you need to advocate a bit.
i end up paying the higher price instead of attention which I do not have. just recently I got given a deliveroo voucher, which I added to my account. there's no way to figure out how much is left at any time, unless you're about to commit to an order. I ordered some food, thinking I'll pay with the free credit - nope, I missed the bit where you have to change the payment option from card to voucher credit.
If it wreaks global havoc when it fails, then it's de facto core infrastructure.
The situation with articles and country names in German is quite different. The article is essentially affixed to many country names as a standard part of the language, and the lack or presence of the article does not immediately convey regional or sub-national status like it generally does in English.

If anything the connotation is the opposite from English -- articles are generally more attached to certain countries for which Germany has historically had significant relations (for good reasons or bad). In modern times though, it's just another fussy part of the language that one is obliged to put up with and not give a second thought to. One simply has to say "im Frankreich", "in der Türkei", "im Iran" and so forth (but also not attach the article to most other countries), and that's all there is to it.

I wish I could point to an authoritative reference for this, but that's impossible nowadays that we have the zombie internet and everything online has been reduced to shitty apps, flashcards and "didya know?" pages.
Leaders don't care about employee engagement. Here's why
The issue isn't the interfaces; it's that there is only one implementation (the base classes) per interface—so why even bother having an interface? Otherwise, I agree with you to a degree.

The main issue with the codebase is that if you want to, say, change the behavior of a Book, you have to go change the behavior of some base class (after working out which one is actually being called). This base class might be used in a Clock, Field, or Filesystem as well—something so conceivably far away that their similar behavior is a coincidence and not really related at all. Then you get to argue with the architect about whether "reading a book" is different than "reading a clock."
How should corporate IT do it?

You have 100,000 devices to manage. How do you handle that efficiently without creating a monoculture?

It's not a "90ies PC metaphor" problem. Swap Chromebooks for PCs and you still have the problem-- how do you handle centralized management of that "fleet"?

Should every employee "bring their own device" leaving corporate IT "hands-off"? There are still monocultures within that world.

Poor quality assurance on the part of software providers is the root cause. The monocultures and having software that treats the symptoms of bad computing metaphors aren't good either, but bad software quality assurance is the reason this happened today.
I'm stuck with them on my company Macbook and will definitely say, they suck.

In the 5 years I've been here, Outlook has never addressed this bug (not even sure they consider it a bug): Get an invitation to an event. See it on calendar view. Respond to it on calendar view. Go to inbox. Unread invitation is sitting there in your inbox requesting a response.

I don't even need to talk about why Teams is trash. Terrible design is in Teams's DNA.
The built in Books meets all those criteria.
> See Boeing doing military stuff and now their planes and ISS shuttles don't work.

Explain please. How does one lead to the other?

> Also so Cheney transferring the military biodefense budget to Fauci and the NIH and now we have lab leaks and covid

That’s a bold claim.
If you know anything about how MCAF was organized, or about what GK does at Crowdstrike, the idea that he was in some way involved with MCAF's AV or with the installers/updaters at either company is especially funny.

MCAF was a conglomerate of security products driven by sales of their AV suite, which might as well have been developed on a different planet for all that it mattered to the "security people". Same with SYMC.
Now, if we only had a test to distinguish between just and unjust laws.