skysight-inc/HackerNews huggingface dataset:
This. From all the comments I've seen in the multiple posts and threads about the incident, this simple fact seems to be the least discussed. How else to protect a complex IT environment with thousands of assets in form of servers and workstations, without some kind of endpoint protection? Sure, these solutions like CrowdStrike et al are box-checking and risk transferring exercises in one sense, but they actually work as intended when it comes to protecting endpoints from novel malware and TTP:s. As long as they don't botch their own software, that is :D
Probably end-to-end testing
The comment I replied to mention sheet notation, last I check we only use that with classical guitar.

(But even “classically”, there are other guitars with many more strings or other tuning systems, etc.)

Lastly, “standard” can be perceived as the most common guitar you can think of. It is very likely if you tell a random Joe go buy a guitar for their nephew, it will be 6 strings 19 frets with EADGBE tuning.
Yeah, 'cause you're technically debugging the python interpreter. I've had some success with tracing tools designed for C/C++ for a python project. Was not easy to set up and will obviously include frames from the interpreter.

Tho, it feels wrong to expect a tool designed for native binaries to work well with python in this context. And that's ok. It feels lucky when it works as much as it does.
User returns after 100k-hours ban to continue conversation that got them banned
.. as long as the people who remember you are wealthy and powerful
I mean I guess you don't care as long as the file is signed if it is just some regulatory stuff that barely anyone would ever read anyway.
I don’t hold LeCun’s opinions in high regard because of his often hyperbolic statements.
"It is expected that the json-threat-protection crate will be faster than the serde_json crate because it never store the deserialized JSON Value in memory, which reduce the cost on memory allocation and deallocation."

"As you can see from the table, the json-threat-protection crate is faster than the serde_json crate for all datasets, but the number depends on the dataset. So you could get your own performance number by specifying the JSON_FILE to your dataset."

However:

"This project is not a parser, and never give you the deserialized JSON Value!"

Is this performance comparison to serde_json fair? If serde_json is a parser and has a different feature set than json-threat-protection, does it make sense to compare performance?
don its freon cap

sorry just had to write out the correct version after parsing your comment

maybe it's a voice dictation thing?
Cite one virus thay crashed the supposed 10 or 100 million machines in 70 minutes.

Just one.
Ok yeah, of course. I'd even argue that cross platform debuggers are not a thing to be desired. Too much low level integration with the operating system is needed when implementing one.
I'm guessing it's just x86-64 vs. AArch64. There are two columns, one marked "(Aarch64)", for Linux too.

I would imagine the "MacOS" bit is there to emphasize that the values haven't been verified on iOS.
rr is awesome. My typical debug workflow:

* rr record
* rr replay until crash or exception (set up catchpoint for that)
* set up hardware watchpoint for borked data that caused the issue
* work backwards in the data flow through watchpoints and reverse-continue

I would say this fundamentally changed how I approach debugging.
The economy sucks for everyone, not only a subset of poor migrants. A subset of african migrants show up in crime stats way more than plenty of other poor migrants coming from pretty much everywhere, be it asia, africa or latam.

Some poor indian has no advantage coming to Spain compared to someone from the Magreb, in fact we could argue quite the opposite as their support networks/country of origin are pretty far away.
> In the coming years, we’re likely to see coding assistants like Copilot become more and more autonomous. Instead of completing your code, the new systems will write new functions given a specification. Instead of writing new functions, they will make small changes to a handful of files. Instead of making small changes, they’ll build new functionality with increasing complexity. They’ll do complex refactors, then start codebases from scratch, then manage projects from scratch.

I see literally 0 evidence of this sort of trend.

Copilot is still BY FAR the best AI coding tool, and it’s just ok and hasn’t improved much since release IMO.

We don’t have infinite code to train models on, we’ve definitely trained GPT on about everything in GitHub and probably gitlab.

I’d be very surprised to see this level of code assistants with our current AI methods.
Well, it depends on what you mean by "popular" history. Popular, were? I grew up in Greece and I learned early on about the Minoan palaces with running water (and internal heating). As to the sanitary practices of mainland Greeks, I remember this joke, variously starring Aesop or Socrates:

Aesop (or Socraters) goes to the public baths. He takes off his clothes, enters the water, rubs himself, etc, then comes out and says to the official: "that was great. Now, were do I go to get cleaned?".

Greeks had public baths, like the Romans and they were probably as filthy as those of the Romans. I've also seen plenty of archeological evidence of plumbing and sewage in various museums around Athens. IIRC there is a section of the floor in the Akropolis Museum covered by glass so one can see the underlying archeological layers, including the terracotta pipes used to carry water. These may have been from Roman times though, I can't say I remember.

(Theories those pipes carried steam for ancient Greek robots with cogwheel brains have been debunked).
Mission Accomplished(tm)
I like the idea of setting an immigration quota based on how many meighborhoods overwhelmingly vote to welcome immigrants, and then requiring the immigrants to live in those neighborhoods as a condition if their immigration status.

If the immigrants enrich the community, those who welcomed them get the enrichment.

If the immigrants bring crime and disease, those who welcomes them get the crime, disease, and decreased property values.

I love solutions that work whether my views are right or wrong.

May I steal that for part of my political platform?
> But what do we get if we take Conway’s law, and flip it on its head? What happens if we design a codebase first, then base the organizational structure around it?

Given that humans have agency and codebases do not, we eventually end up with Conway's Law in effect again as humans start to shape everything around themselves.

I think the author has problems understanding causation.

Take a baseball batter. Pitch to the batter a bunch of times, leaving all the balls to rest wherever they land. If we later move all the balls farther away, we don't expect the batter to hit farther.
Don't know much about embargoes but at least with GPUs it's much more evil

Even if GPU manufacturer sells GPUs to a company which is not in embargo list they usually have agreements in place about not reselling them to the companies in embargo list
Most AV and EDR solutions support exceptions, either on specific assets or fleets of assets. You can make exceptions for some employees (for example developers or IT) while keeping (sane) defaults for everybody else. Exceptions are usually applied on file paths, executable image names, file hashes, signature certificates or the complete asset. It sounds like people are applying these solutions wrong, which of course has a negative outcome for everybody and builds distrust.
Does this mean the correct pronunciation is "deekstra"?
That was debunked over a decade ago.

> The researcher Gilbert Wiplinger put forward a theory on the use of the xylospongium and it seems much more credible. He suggests it was used for secondary cleaning of ancient lavatories in a similar form in which modern toilet brooms are used.

> The discovery of scraps of cloth in an ancient septic tank in Herculaneum led also environmental archaeologist Mark Robinson to conclude that scraps were used for wiping instead of a sponge.

Take a look at the Spa Sanitas Per Aquam conference proceedings from 2009 for more details.
Kompute author here - thank you very much for sharing our work!

If you are interested to learn more, do join the community through our discord here: https://discord.gg/MaH5Jv5zwv

For some background, this project started after seeing various renowned machine learning frameworks like Pytorch and Tensorflow integrating Vulkan as a backend. The Vulkan SDK offers a great low level interface that enables for highly specialized optimizations - however it comes at a cost of highly verbose code which requires 800-2000 lines of code to even begin writing application code. This has resulted in each of these projects having to implement the same baseline to abstract the non-compute related features of the Vulkan SDK.

This large amount of non-standardised boiler-plate can result in limited knowledge transfer, higher chance of unique framework implementation bugs being introduced, etc. We are aiming to address this with Kompute. As of today, we are now part of the Linux Foundation, and slowly contributing to the cross-vendor GPGPU revolution.

Some of the key features / highlights of Kompute:

* C++ SDK with Flexible Python Package
* BYOV: Bring-your-own-Vulkan design to play nice with existing Vulkan applications
* Asynchronous & parallel processing support through GPU family queues
* Explicit relationships for GPU and host memory ownership and memory management: https://kompute.cc/overview/memory-management.html
* Robust codebase with 90% unit test code coverage: https://kompute.cc/codecov/
* Mobile enabled via Android NDK across several architectures

Relevant blog posts:

Machine Learning: https://towardsdatascience.com/machine-learning-and-data-pro...

Mobile development: https://towardsdatascience.com/gpu-accelerated-machine-learn...

Game development (we need to update to Godot4): https://towardsdatascience.com/supercharging-game-developmen...
Thanks, this is a good sign. I had a bad experience with Jetson Nano to realize a few years later that it will be stuck forever to Ubuntu 20.04. I don't want to repeat the experience especially with a more expensive device.
GNU/Systemd is pretty hilarious
A land war in Europe is not viable by conventional means anyway. We're not going to fight door to door. Not that again.

It's good for the border countries to have a deterrent and we in Western Europe should support them on this. But the nuclear umbrella should be the main deterrent.
The Pakistani (most Pahari/Mirpuri) community was segregated in de facto ghettos and were brought to work unskilled manual labor jobs in a couple industrial estates in the 50s-70s.

When the UK began deindustrializing, they were extremely hard hit because the factories shut down.

Poverty and Northern England racism (BNP was normalized and doing hate crimes well into the early 2000s, schools were shite with grammar schools closing, etc) kept Mirpuris stuck in the ghetto.

And trust me - a Brown guy - when I say that tbe UK is miles more racist and passive aggressive to Desis compared to the US or Canada.

Why integrate in a country that keeps being passive aggressive and using your community as a scapegoat.

This is why my parents moved to North America instead of Europe in the 1990s - heck my dad had an offer to work for ARM plc in Cambridge back then around the initial IPO.

None of the doors I was able to open here in the US would have been opened if I were in the UK or Germany.

I'll get amazing schacenfreude when Labour finishes signing the FTA with India in a couple months and Rolls Royce and Dyson begin slowly moving operations.
Var30: Fast variable width 30-bit integers
It also works with Go, I think support for it is built into Goland too
So you think you know box shadows?
Hi, thanks for clarification, I was not aware that other Yugoslavian residents were able to cross the border as freely as those with the special passport ("Propustnica").
We already pay enough taxes. The budget needs to be re-done.
no, daykstra. In the dutch of the middle-ages it might have been deekstra
I guess it isn't actually that hard since CrowdStrike can offer this operating recklessly. /s
The only reason you're thinking this way it's because you're thinking about problematic migrants, but there are many others you don't see. They don't need to become French, Spanish, Dutch, etc. They're perfectly fine feeling from $country in $eurocountry, going on with their lifes.

Europe is not the US, it can't be, and that doesn't mean we're at fault of everything. Many poor migrants come and do ok and have the same opportunities and challenges that others who fail.

But somehow is always the same subset we think about.
> After spending a couple weeks in Cuba it’s not hard to see why.

Which is the consequence of being sanctioned into oblivion for decades by the global hegemon, much to the dislike of the entire rest of the world.
Put aside consciousness or hype or investment. Look at the results; LLMs are well beyond old-school search in many ways. Sure, they are flawed in someways. Previous paradigms for search, were also flawed in their own ways.

Look at the arc of NLP. Large language models fit the pattern. One could even say that their development (next token prediction with a powerful function approximator) is obvious in hindsight.
It’s very enlightening. Math was formalized for a reason. Now you don’t have to argue what something was supposed to mean and whether it is a correct or a false interpretation, eg: https://hsm.stackexchange.com/questions/6867/what-is-the-cor...
They get a salary. And they spend it.

Thought experiment: If you removed half of the population of a country, would that make the rest of the country richer or poorer?
A local theme park as a "dutch quarter" and I as a kid was always fascinated by one booth having a letter "ÿ" in the name. I later learned that it was some kind of alternativ spelling for ij, and if you spell ij in black letters its really easy to see why that might have occured.
Seems like a pain to install. I'm looking forward to this being packaged for Debian.
I don't think it was intended to say that this crate is "better" than serde_json. I interpreted it to be a measurement of the overhead of adding it as an additional step on top of parsing.
Noduerne, may I ask a question? I hope I do not offend you.

I know that million of white men died fighting against the Germans in WW2.

Why is it that 95% of what I hear from Jews is condemnation if white men for being NAZIs, when the majority of white men and the winning side fought against the Germans?

It seems like there should be a 60% gratitude to 40% condemnation split.
There certainly is some opportunity for men with tele-health, for whatever reason were more open to discuss health problems with a semi random person on the internet than to make a dr appointment in our hometown and talk to the guy or gal doctor that we’ve known our whole lives.

I don’t think ozempic or any injectable should be prescribed via platforms like this. I think they have a lot of time needed to mature, so far they are not far off pill mills.

The article mentioned the fellow got generic viagra, which I’ve heard happens on these platforms too, they promise name brand viagra and show pictures of the same then send you a ton of generic viagra. Obviously a profit play there.
> A table for that wouldn't have much value

Just because you can search the source, doesn't mean this wouldn't come in handy to someone some day.
Exactly. It's ridiculous to open up all/most of a companies systems to such a single point of failure. We install redundant PSUs, backup networks, generators, and many more things. But one single automatic update can bring down all systems within minutes. Without any redundancy.
I find discussions of consciousness even more taxing than religion, free will, or politics.

With very careful discussion, there are some really interesting concepts in play. This paper however does not strike me as worth most people’s time. Especially not regarding consciousness.
Here are some details about the ZX Spectrum tape interface:

http://www.zxdesign.info/cassette.shtml

https://sinclair.wiki.zxnet.co.uk/wiki/Spectrum_tape_interfa...
Third-party driver development
Rare photos of uncontacted Amazon tribes
They believe Trump will be best for tech. Ironic, since Trump has pledged roll back our transition to renewable energy, curtail the use of EVs, etc.

Maybe marca and ben meant Trump would be better for VCs and tech investors. Which would be true.
You make it seem like such a terrible thing, but a valueless state is the only exception to "you can make invalid states unrepresentable", and a pretty useful one given the rest of the language. And it's not one that you have to worry about in practice because nobody will intentionally abuse this, and your compiler/linter will diagnose accidental reuses. Guarding against it anyway is like guarding against someone passing a destroyed object to you - it just doesn't make sense to.
people get lazy
Perhaps I am dense or perhaps you are unclear, but I am still unconvinced how what you are describing as positive attributes of a direct vs representative democracy for the US would or could be any better than what we have now. It seems like you are assuming that there is no and never could be tyranny of the majority…or perhaps that’s a feature in your analysis that you feel is a net positive.

In a smaller homogeneous country you could have a point (including our individual states), but in a country as large, diverse, and powerful as the united states it seems to me that you need that balance of power spread amongst the entities of the country..both the people in the form of their representatives and the states via their representatives (i.e. senate and electoral college) as it relates to election of the executive.
- Supporting regimes

- Working against them with sanctions

Don’t you see any other options here?
I agree the problem is hard from a technical level.

The problem is also getting significantly worse because it's trivial to generate entire pages of inorganic content with LLMs.

The backstories of inorganic accounts are also much more convincing now that they can be generated by LLMs. Before LLMs, backstories all focused on a small handful of topics (e.g. sports, games) because humans had to generate them from playbooks of best pracitces. Now they can be into almost anything.
AV software needs kernel privilidges to have access to everything it needs to inspect, but the actual inspection of that data should be done with no privilidges.

I think most AV companies now have a helper process to do that.

If you successfully exploit the helper process, the worst damage you ought to be able to do is falsely find files to be clean.
They probably don't get to claim agile story points until the ticket is in finished state. And they probably have a culture where vanity Metrics like "velocity" are prioritized
Sorry, but what does this have to do with Aro?
What do you mean? Enron Musk is just doing it to improve the world.
> If serde_json is a parser and has a different feature set than json-threat-protection, does it make sense to compare performance?

If you were using serde_json just to validate a payload before passing it on to another service (like a WAF), then the comparison makes sense. If you had more complex validations or wanted to extract some of the data, then maybe not.
Google Wing Drone Delivery Launches in Melbourne
Dedication?
It says on https://rr-project.org/ that it supports Go programm, what's the status?
We all do, every day.
30 years ago I knew a very old Swiss woman who told me they used the ‘letter’ ij (“yotee” if I remember correctly) instead of just a j (j in Swiss/German makes a y sound, like in jawohl). Hoping a Swiss person can fill in the details.
Human behavior is interesting

It’s also pc gamer
There are other commercial reverse debuggers, like Undo.
My experience is that in these workplaces where EDR is enforced on all devices used for work, your hypothetical is true (i.e. you are not expected to work on devices not provided by your employer - on the contrary, that is most likely forbidden).
What is mystical to follow a procedure? And even breaking a big nut with a stone is an "action that we could never do with our biological bodies".

Currently it is more esoteric on how a baby (human but not only) is formed than how we build a microprocessor. So if anything I would say we are statistical acrobats, existing despite the numerous approximations in biology. Compared to us humans, microprocessors are predictable and boring.
Was someone wrong on the internet again?
The job is not done if you produce unaffordable iron. Producing lots of cheap iron is the job for Industrial Revolution
I’d say that it is a bug by definition if your program ungracefully crashes when it’s passed malformed data at runtime.
Hardline socialist countries sometimes survive. Less hardline socialist countries get coup’ed or otherwise brutally interfered with (e.g. Chile).
That’s insightful and terrifying at the same time
Is it? there's also Cursor.sh/Mentat/Aider/rift/Continue.dev

Aider ranks the LLM engines, with claude-3.5-sonnet coming out on top, but doesn't test against Copilot

https://aider.chat/docs/leaderboards/
> 2. Either the corrupted files slipped through internal testing, or there is no internal testing.

This is the most interesting question to me because it doesn't seem like there is an obviously guessable answer. It seem very unlikely to me that a company like CrowdStrike pushes out updates of any kind without doing some sort of testing, but the widespread nature of the outage would also seem to suggest any sort of testing setup should have caught the issue. Unless it's somehow possible for CrowdStrike to test an update that was different than what was deployed, it's not obvious what went wrong here.
Ooh, I'm enjoying the article series.

> But the craziest thing I did was create a new programming language – with Lisp syntax – for coding all of the gameplay. It had all sorts of built in state machine support (very useful with game objects), powerful macros, dynamic loading etc. It was also highly irregular and idiosyncratic, and in true Naughty Dog fashion “powerful but complicated.”

As for how he works these days, I see in the About page:

> Briefly in 2008, and then full time from the second half of 2009 on, Andy has been concentrating on novel writing.

https://all-things-andy-gavin.com/writing/
> I want to get good at "management-style speaking" or “talking a lot and saying little”

Well first of all, stop with the backhanded insults.

Next, figure out what you’re actually trying to achieve because it’s not “talking a lot and saying little.”

Do you just want to make more money? Have more power? What’s your goal here?
I wish I had more upvotes to give you.

A company made a mistake. A kid found out. So the company sicks the lawyers on the kid? Teaches the kid to not be curious? Does he really believe kids should only sit down and mindlessly consume content,only when a bigcorp dictates it, never walking a millimeter from the path? And then the bastard lawyer brags about it?

My blood boils just reading this. I hope that corporate creep never has any kids of his own.
Since the issue manifested at 04:09 UTC, which is 11pm where Crowdstrikes HQ is, I would guess someone was working late at night and skipped the proper process so they could get the update done and go to bed.

They probably considered it low risk, had done similar things of times hundreds of times before, etc.
First thought, without reading article: decimal point! (How else can you write pi in Roman numerals?)
Pernosco is more than merely a reverse debugger.
I don’t think it’s more complicated than people want an abstraction for the complex number instructions you find on processors like the TMS320 series or Qualcomm Hexagon.