skysight-inc/HackerNews huggingface dataset:
There is nothing special about Elon choosing to do that, it isn’t some contrarian masterstroke.

Of Arianaspace, Blue Origin, Rocketlab, SpaceX, United Launch Alliance: only Rocketlab is publicly traded.
The article doesn't go far enough back in time to flesh out quite how absurd the Cavendish story is as a tale of exploitation. After centuries of generational wealth transfer in the Cavendish family, it was developed by gardeners working for a Duke who was sent some as a gift from the recently invaded colony of Mauritius (the British overthrowing previous French colonists).

They were grown in the middle of England in the largest greenhouse in the world (heated by 8 coal fired furnaces requiring so much fuel that a small railway was installed). It sat a few minutes walk from a house (one of 8 the Duke inherited), literally covered in gold so it would look nice during sunsets.

The bananas won a horticultural prize in London and were then shipped off around the world - setting the scene for where the article picks up.
Nobody does that anymore. :)
Not true. Making C-level executives of software companies criminally liable with the chance to go to jail did change their behaviour in some recent lawmaking situation (forgot which, sorry).
Show HN: I made a directory of Mac apps and tools and made $126 after 24 hours
One week ago, I launched a new directory, which is a curated list of useful and cool Mac apps and tools that are not available on the app store. Initially, I wasn't sure if it was a good idea, but I managed to create it in just one day. I started promoting it on Twitter and some communities, and although I got some views, I didn't make any sales.

Then the next day, I wrote a post on a subreddit related to Mac apps about the directory I launched. People loved it so much, and I got 39k views on that post, leading to around 2.5k visitors on my site. Thanks to this exposure, I made my first 4 sales.

I hope to get more sales soon. I'm also working on the SEO to attract organic traffic to the site.

Any feedback on the site will be great from your side.
I never understood why you'd want to be on the plane early. I don't really find it more comfortable on the plane than at the gate, and it's not like you're gonna take off faster than the last people to board. Almost feels like a trap to get people who don't fly often to pay a little more.
You save money when you pay energy bills via monthly direct debit, the direct debit unit rate is slightly cheaper.
I think for types you could do without the dots in T...[0], but it mirrors the usage for values (values...[0] is different from (values[0]...). So consistency I guess.
Yet I can't ever think of a Ryanair flight I've seen go out with a single spare seat. There are plenty enough people who don't mind abuse of the save a few cents. Good luck to them. Keeps them off my flights.
It's worth noting that KOReader is available for desktop Linux users, both as a Debian package and AppImage. The interface is better suited to touch screens though. I suspect that is why noone has bothered to port/build it for other desktop operating systems.
In Australia "baked in store" actually meant baked in Ireland, frozen, shipped to the other side of the would, and warmed-up/finished-off in an oven at the supermarket!
Star is part of a command to delete any file matching a wildcard `C-00000291*.sys` meaning "starts with 'C-00000291', has any kind of text after that and ends with '.sys'". Actual files appear to differ for every machine
It's ridiculous how many people here are blaming Windows for something that's really completely unrelated
Legacy airlines do this too. “Upgrade to business class from $100!” Turns out it’s $100 for your random short connecting flight, and $2000 for your main flight.
My experiences with British Gas are infinitely worse than anything Ryanair has done....

Did you know that suppliers like British Gas can randomly assign you to another supplier, without you asking or even being told? And the other supplier has to requirement to ask if you want to be a new customer of theirs?
I can’t imagine the merchant gets that extra currency conversion money, nor why they’d care, they are still getting the exact same amount in their local currency while it’s their bank who profits on the arbitrage.
What's the actual magnitude of this outage? Is there a way to estimate how many machines were down?
Yeah, true... There is currently a big anti-EU/Schengen backslash in my state because we can't control entry of Russians that got the visa elsewhere. Which is a problem as we stopped giving them out because they acted as if we were the next in line for invasion.
> malware signatures, which are essentially determined by the malware itself.

No they're not. The tool vendor decides the signature, they pick something characteristic that the malware has and other things don't, that's the whole point.

> how hard would it be to craft a malware that has the same signature as an important system file?

Completely impossible, unless you mean, like, bribe one of the employees to put the signature of a system file instead of your malware or something.
> those smarter than you.

That’s such a terrible and unfair take.

Less tech savvy or more busy/tired people are not less smart than you. I can’t believe I actually have to put that in words.
Sorry but you just didn't inform yourself. The dimensions for the luggage are very clearly stated. Nowadays I would expect it to be common knowledge that when flying with a budget airline you have to pay attention to your luggage size and should have the boarding ticket QR code ready. For a small effort you get a small price.
Beautiful app, how did you deal with Qt licensing if I may ask?

One nit regarding website, toggling dark mode causes a video change that has some ugly flashing, I think you could improve this by recording the video without dropshadow and adding the shadow with CSS.
it would be crazy not to at least investigate migration paths away from Crowdstrike, or better redundancies for yourself
I can see vague blaming the person becoming more the norm when LLMs are responsible for precrime and restrictions etc.

“Oh you couldn’t take a train to work? Must have been something you did, the Palantir is usually great and helps our society. It always works great for me and my friends.”
I guess people who continue to use Windows in 2024 arguably deserve this, particularly those utilizing it in a production environment.
Perhaps it's a bit more than tangentially relevant? Yes, SW[U] predates it for hashing, and Brier et al builds indifferentiability on that. But Elligator2 is simpler and faster, and also works with Brier et al, though it only supports even-order curves. As a result, Elligator2 is specified in RFC 9380 along with SW[U], and has fairly broad implementation.

Also yes, SwiftEC is faster than Elligator2 + Brier et al, at least if Jacobi symbols are fast with your parameters/hardware. But you can do something very similar to SwiftEC with Elligator2. This is simpler than SwiftEC and probably still faster, and was published earlier (https://eprint.iacr.org/2020/1513).
Meta: In Millennium Towers, as with competing standards, there are 15 to choose from (at this writing):

<https://en.wikipedia.org/wiki/Millennium_Tower>

(Obxkcd: <https://xkcd.com/927/>)

Discovered en route to looking up background on the SF tower, engineering problems, and fix(es): <https://en.wikipedia.org/wiki/Millennium_Tower_(San_Francisc...>
I used to use DropBox quite a bit for file sharing directories of photos. I used to be able to upload them, create a shared link for the directory and just email that link - no need to invite specific people as collaborators, and the space used by the folder wouldn't be deducted from the recipient's quota.

They've since employed every dark pattern in the book to make that flow next-to-impossible, without having technically withdrawn it.

Yesterday they emailed me to say "We've noticed you're not using your DropBox account..."
Nobody, not one person, thought that documentation should be stored in hard copy?
Overhead space. Not being forced to check a bag at the gate.
This is what AI's first strike will look like
Boy, that is some corny branding.
FWIW - OO has the same (or more) problems in GUI toolkits.
Thanks a lot! Your feedbacks are so on point and helpful. we will definitely work on the pricing, privacy and TA part.If it's not too much trouble, your signup will be a huge encouragement for us!It’s completely free now!
Serious Mental Illness Is an Optimization Problem
I’m guessing it’s completely incidental that the CEO of crowdstrike was critical of China earlier this year, and that China is somehow unaffected by this ‘global’ issue!
I lost out on a front end job about 15 years ago because I marked up a business’s open and close hours in a table during a coding test. I was told that my skills were clearly out of date.
We did, but then they managed to convince us that the unions weren't on our side. But there's not much stopping us from organise ourselves again.
Those focusing on QA and staged rollouts are misguided. Yes of course a serious company should do it but CrowdStrike is a compliance checkbox ticker.

They exist solely to tick the box. That’s it. Nobody who pushes for them gives a shit about security or anything that isn’t “our clients / regulators are asking for this box to be ticked”.

The box is the problem. Especially when it’s affecting safety critical and national security systems. The box should not be tickable by such awful, high risk software. The fact that it is reflects poorly on the cybersecurity industry (no news to those on this forum of course, but news to the rest of the world).

I hope the company gets buried into the ground because of it. It’s time regulators take a long hard look at the dangers of these pretend turnkey solutions to compliance and we seriously evaluate whether they follow through on the intent of the specs. (Spoiler: they don’t)
Audit is papering over the problem rather than fixing it. The only way to make them responsible is to put real liability on them.
you may be able to get overhead bin space (near your seat)
Prolog is a really interesting language. It's like lisp in that, it's definitely worth learning very well, even if you don't find a use-case for it, because the things you learn help you think about programming in a whole new way.

The prolog community is pretty active. SWI has a discourse group. There's SWISH, CLP(FD/Z), abduction via CHR (a rewrite system) or libraries like ACLP. Prolog is homoiconic, and it achieves it in a unique way, via things like functor/3 and =../2 rather than a macro system. There's growing interest in ISO-standard, pure, monotonic prolog for writing large, clean prolog codebases. SWI is the most mature prolog, but Scryer and Trealla are very active and ISO conformant. Trealla is quite embeddable, particularly in javascript codebases. There's also janus for python, and the community is looking to integrate prolog with LLMs.

Prolog shines for writing bidirectional parsers, NLP, expert systems, abductive reasoning, and constraint logic programming. Pure monotonic prolog has some very useful properties in terms of debuggability, making it useful for large prolog programs. There's also some interesting work in developing pure io (library(pio)). Prolog also has a few different techniques for coroutining, including shift/reset. Markus Triska has a very nice youtube series and book on prolog that's worth watching/reading.

The main downside to prolog is really just that there's a steep learning curve to it that puts a lot of people off and prevents it from gaining more traction, similar to why langs like lisp, haskell, and idris have trouble gaining traction. SWI has a lot of features, but it's also not ISO conformant, and a lot of libraries aren't portable and/or feel very procedural/imperative, which defeats the purpose of prolog. The useful libraries can often be ported to less popular prologs that are more promising, like scryer and trealla. For example, I managed to port ACLP to trealla yesterday without much effort, which is a pretty useful abductive system for writing expert systems or any sort of abductive reasoning.
If he provides emergency services like fire and ambulance people care a lot.
Vyxos: My laptop and server Nix configuration
Who needs regulation when you can have free Fentanyl with your CrowdStrike subscription! All of your systems will go down, but you won't care, and the chance of accidental overdose is probably less than 10%!
> 'speedy boarding'

More like speedy boarding (i.e. first to board) the bus that takes all passengers from the terminal to the aircraft!
I like USB-C in my iPhone.
If you get on later, there might not be room in the overhead compartment. That's the only rational reason I can come up with to get on the plane earlier.
A Multi-Parametric Wearable System to Monitor Neck Movements of Computer Workers
Are prices also down in buildings adjacent to the Tower?
Thanks for trying it out - adding land area and supporting queries like "population density" will definitely be doable, and I'd like to make the legend and map color scheme a bit better (and ideally user-configurable) as well.

Really appreciate the feedback!
Yes, discussing politics or broadcasting music is not allowed over ham radio. Basically all we can do is exchange call signs, locations and details about our signals and stations.

I have wondered if you could use the fact that analog radio over short distances has latencies measured in the microseconds, so you could have a jazz band with players scattered over an entire city, but they can play like they are in the same room. Internet comms have too much latency (measured in the milliseconds).
Worked for a fairly largish org (~40k emps), and one of the "security" gurus roped me into a conversation because he found a batch file in my Teams shared files. The contents:

set JAVA_HOME="what_ever_path"

and asked me to explain this egregious hacking attempt.
> Well yes, Ryanair itself put their flights on Amadeus

Pretty sure 99% of OTAs don't book Ryanair flights through Amadeus, but through screen scraping.
I mean… yeah? almost everyone in the west except for some highly corrupt people is critical of china, and china doesn’t deploy crowdstrike.
Sounds like they exist to serve big business pumping out tons and tons of land fill routed trash, subsidized by the federal government/taxpayers. Given they're unionized, they can just lobby whomever to keep this unicorn status. Federal agencies should not be allowed to unionize.
The tool vendor decides the signature

Sure, but they do it following a certain process. It's not that CrowdStrike employees get paid to be extra creative in their job, so you likely could predict what they choose to include in the signature.

In addition to that, you have no pressure to get it right the first time. You can try as often as you want and analyzing the updated signatures you even get some feedback about your attempts.
Don't root kit yourself then cry about it when it falls over. Problem solved.
the management that enabled the process. And follow the chain to the top, they are paid very well to own the risks
I always said if you want to create real chaos, don't write malware. Get on the inside of a security product like this, and push out a bad update, and you can take most of the world down.
FBI Used Unreleased Cellebrite Software to Crack Trump Shooter's Phone
I know I'm taking the wrong takeaway from this, but that jenga metaphor animation is kind of genius.
With fear of sounding like a douche-bag, I honestly believe there's A LOT of incompetence in the tech-world, which permeates all layers, security companies, AV companies, OS companies etc.

I really blame the whole power-structure, it looked like the engineers had the power, but last 10 years tech has been turned upside-down and exploited as any other industry, controlled by the opportunistic and greedy people. Everything is about making money, shipping features, the engineering is lost.

Would you rather tick compliance boxes easily or think deep about your critical path? Would you rather pay 100k for a skilled engineer or 5 cheaper (new) ones? Would you rather sell your HW now despite pushing feature-incomplete buggy app ruining the experience for many many customers? Will you listen to your engineers?

I also blame us, the SWE engineers, we are waay to easily busied around by these types of people who have no clue. Have professional integrity, tests is not optional or something that can be cut, it's part of SWE. Gradual rollout, feature-toggles, fall-backs/watchdogs etc. basic tools everyone should know.
https://archive.ph/9K2Fq
“zero hidden costs” — lol. maybe one?
How about a simple username and password? Not everyone likes to connect all the things.
Can I get this upscaled to a poster? https://www.crowdstrike.com/wp-content/uploads/2021/02/2019-...
Did you try wsl?
Pure, unADULTerated, HTML ...
It depends on what your position is. Are you there to actually provide security to your org or to tick a in an audit. If both which is more important. Because failing an audit have real consequences, while having breaches in security have almost none. Just look at credit score companies.
The trick here is soft bags, or weekend bags. Hard bags with wheels always get checked, but soft weekend bags usually can get pushed in no problem. My partner had to pay because her bag fit "correctly" but the wheels did not. So - fair game to them - it didn't fit. Funnily enough, the charge was less than the online advertised price, so we still came out better off.
One of the problems possibly preventing this is that budgets for buying software aren't controlled by people administering the software. Definitely not by people using it.
Moldovan/Romanian is not written with cyrillics, "rachiu" is the proper spelling.
I think that for the average person, not represented on this website, it's actually very important to save money, and just suffer the cheapest option available.
From what I've seen, it is actually a simple design, with very few moving parts, which should make it quite robust.

This simplicity is what allows it to be "rotating just right", as it is very close to a rigid body, it is just a matter of applying the right thrust at the right time from cold gas thrusters. There are no gyros, reaction wheels, etc... to take into account.
Hope you get paid a lot! Otherwise you are either in a very young or very stupid job.

I regularly spend multiples of my salary every month on various commitments my company makes, any small mistake could easily mean that its multiples of my salary type of problem within 10 days.
Some Canonical guy I think many years ago mentioned this as their sales strategy a few year ago after a particularly nasty Windows outage:

We don't ask customers to switch all systems from Windows to Ubuntu, but to consider moving maybe a third to Ubuntu so they won't sit completely helpless next time Windows fail spectacularly.

While I see more and more Ubuntu systems, and recently have even spotted Landscape in the wild I don't think they were as successful as they hoped with that strategy.

That said, maybe there is a silver lining on todays clouds both WRT Ubuntu and Linux in general, and also WRT IT departments stopping to reconsider some security best practices.
Random delays don’t stop timing attacks. You just need to gather more data before your estimate of the “unrandomized timing” is good enough for you to make your conclusions.
This exchange reminds me of a time many years ago where I was reading a computer magazine and they talked about “Windows 9x” and I thought they were referring to some version of Windows that I had never heard of.

Only a couple of years later did I understand that it was simply a shorthand for talking about Windows 95 and Windows 98.

Edit: And looking now at Wikipedia apparently it also covers Windows Me. (The Millennium Edition that came between Windows 98 and Windows XP.) https://en.wikipedia.org/wiki/Windows_9x
> It is being removed.

Congratulations on actually fixing the root cause, as opposed to hand wringing and hoping they don't break you again. I'm expecting "oh noes, better keep it on anyway to be safe" to be the popular choice.
I love stuff like this. I made a widget for MacOS where you can see incoming |hi messages sent to your Urbit, as a kind of poor man's p2p chat. But I didn't add a feature to send hi messages, so you still need a CLI for that.

You can see what it looks like here: https://www.youtube.com/watch?v=_bAx4Jx39jE&t=384s

(it's the widget in the bottom right of the screen)
In my experience, futo is actually pretty good at just knowing the right punctuation to use.
Because some companies sell more than places in the plane and there are places that same sit is given to more than one person and there are situations when last on the line can not get on the place since all places are occupied. It happened for friends of us.
I think it requires a third thing: long-term thinking.

Other commenters noted that Google and Microsoft had big piles of money and a decent moat. They have not created anything like Bell Labs. Google tried, with DeepMind.

The problem is that companies used to think about 5,10,20 years out. Modern companies are gauged and gauge themselves by metrics that are quarterly or annual. They, to borrow from The Fast and the Furious, are living their life one business quarter at a time.

I don't think you can build something like Bell Labs, PARC, or the Lockheed-Martin Skunkworks with short-term thinking.
*sale
I remember thinking, after watching Margin Call first and then The Big Short, that you could pretty much identify exactly where within The Big Short the (single-night) events of Margin Call would have taken place...
They talk about so little because that’s what the fcc rules limit them to. Can’t blame people for behaving like Elmer the safety elephant all the time.

What can you do with a license?
Jam live music with other people over the air, in full duplex mode. Thats something only analog radio can do—because the latency is so low.
I flew Ryanair only twice this year, but both times you had to pay extra to use the overhead bins anyway. They were fairly empty thanks to this.
Some people in the comments claim CS was used for compliance reasons. Some others claim Windows & CS do not offer warranties. How can a product satisfy the compliance check-box, if it does not offer the warranty and not accept liability for the related features?
Annoying way I've caught myself between Ryanair and agent. I didn't want to book layover flights myself (painful using Ryanair website) so I've used one of the agent sites.

If you wanna do online checking you need to login using email and not PNR+last_name like most sites. Of course agent used their email and flight was early enough that agent wasn't reachable by phone when my flight commenced. I had to pay 6x20 euro fee at airport for printing a boarding pass, which is a dark pattern by itself.
> Do you have any good sources that explain this?

The most famous result is OthelloGPT, where they trained a transformer to complete lists of Othello moves, and the transformer generated an internal model of where the pieces were after each move.

The rough consensus is that if you train a model to predict the output of a system for long enough with weight decay and some nebulous conditions are met (see "lottery ticket hypothesis"), eventually your model develops an internal simulation of how the system works because that simulation uses fewer weights than "memorize millions of patterns found in the system", and weight decay "incentivizes" lower-weight solutions.
These files are apparently just definitions/input for the actual CrowdStroke driver, that presumably someone named .sys so it sounds more scary and important.

Peak irony then that you can just delete them. Surely an antivirus should recognize when its being rollbacked?