skysight-inc/HackerNews huggingface dataset:
Ok, so your [0] shows that the real work has barely been started. The only indication it was ever planned for the next release was a misunderstanding on your part about the meaning of a tag that was applied to the issue for less than one day last fall, and they've stopped tagging issues with milestones to prevent such misunderstandings in the future. It still looks to me like your exaggerated claim was grounded in little more than wishful thinking.
I believe instances like this will push people to reconsider the lax stance. Humans in general have a hard time regulating something abstract. The fact that people can be killed is well-known since the 80s', see https://en.wikipedia.org/wiki/Therac-25
Maybe they should have updated the server capacity?
/me goes back in the trans closet
And the non-professional pictures, like your everyday smartphone pictures everyone takes, pass through so many layers of computational photography that sometimes make it pretty far off from reality.
We'll be alright:

https://www.forbes.com/sites/michaelshellenberger/2019/07/29...

https://www.newscientist.com/article/mg22029445-000-admit-it...

What value do you get out of believing in Earth Overshoot Day? Does it provide real, actionable utility? Does such a belief instill good feelings?

If I had to guess: it tickles the reward pathways in your brain, connected to your survival instinct to be aware of possible threats, whether real or (as I would argue is the case here) imagined. I would doubt there's anything you plan to personally do about Earth Overshoot Day, and I doubt thinking about it instills positive feelings. It's doom porn.
There's a Crowdstrike joke in there...
Thank you for the information. I'm sorry for you and your family. Are public jobs so numerous that a lot of people survive off of them?
Hindsight is 20/20

This is a public company after all. In this market, you don’t become a “Top-Tier Cybersecurity Company At A Premium Valuation” with amazing engineering practices.

Priority is sales, increasing ARR, and shareholders.
Spending and investing trends across different generations
The strange thing is that when I interviewed there years ago with the team that owns the language that runs in the kernel, they said their ci has 20k or 40k machine os combinations/configurations. Surely some of them were vanilla windows!
CrowdStrike: Some bad code just broke a billion Windows machines [video]
So interfaces > modelling

ConsoleLogger is a Logger because they share a method (log),
PaidUser and User can have some common things, but I don't think it's only in the way it behaves, but also in the way you contact/use them
The Internet has been flooded with crap content for some time now so AI is simply accelerating the existing trends.
I hate to be the guy that's like "Nix is the solution," but...Nix is the solution.

Nearly every corporate machine that needs to run Windows should run it as a VM on a NixOS base, unless there is an extremely good reason not to.
Booting into safe mode still works to delete the bad file.
This seems like it would only work if you deliberately rank AI-generated text above human generations.

If the AI generations are correct, is it really that bad? If they're bad, I feel like they're destined to fall to the bottom like the accidental Facebook uploads and misinformed "experts" of yesteryear.
So the standard today is incompetence. An excellent lesson to learn early.

A can of Coke will not harm you in any meaningful way, but people do not have a can of Coke. They have 1+ cans of Coke every day. That absolutely will harm you.

I don't know how you took me to suggest someone eat only potatoes. I said a potato (anything, really) is a better source of calories than a Coke for pretty much all purposes. Pretty much no person anywhere needs an extra 39 g sugar with no nutrients at all in their diet.

Currently, 74% of the US is overweight or obese by BMI, which is likely an under-estimate of excess bodyfat: another 10% or so may have Normal Weight Obesity (i.e. skinnyfat), which is an understudied but increasingly recognized problem. Even without the issue of excess bodyfat, regularly creating large blood sugar spikes like that is not good for you. If nutritionists are working really hard to combat the idea that drinking literal sugar water is inappropriate for anyone to be doing with any regularity, then they are dropping the ball. In fact, you can find plenty of resources for the general public from the CDC about the deleterious effects of sugary beverages[0], and encouragement to reduce consumption of added sugars[1], specifically sugary beverages[2], the leading source of excess sugar in American diets.

Saying that candy is not food is not fear based nutrition. It is saying that candy is not food. We're not "afraid" of sugar or carbs; we just know "Skittles" aren't a food group, and have no purpose in any meal plan. Part of teaching kids how to be healthy is teaching them that we eat a variety of foods which each contribute different necessary nutrients with an appropriate calorie budget for our activity levels so that they understand how to one day develop their own plans. In that context, it ought to be obvious why our diet doesn't include pure sugar.

The competent thing to do is to teach people not to have emotional attachments to food. "This is not good for me (in fact injures me) and serves me no purpose, so I will not eat/drink it, and I will not buy it." That's it. The disorder is getting emotional about it and thinking it's somehow "damaging" to exclude junk food from one's diet.

[0] https://www.cdc.gov/nutrition/data-statistics/sugar-sweetene...

[1] https://www.cdc.gov/healthy-weight-growth/be-sugar-smart/ind...

[2] https://www.cdc.gov/healthy-weight-growth/rethink-your-drink...
Disturbing. Real sociopath energy. They'll probably be millionaires in no time, honestly.
imo anti-cheat should mostly be server-side behavior based
Cultural tendencies turned out to be a pendulum when we assume it was a linear progression.
I'm starting to think that the timing (Friday) and the scale as well as other things (like this finding) might -- just might point to a bad actor.

We will probably have to wait for CS' own report.
Someone in Nebraska should start a site named Cornhub.
Because we won't be able to get more chips for a while after Taiwan goes under? AI is not the only use for chips.
I think the big reason why BERT and T5 have fallen out of favor is the lack of zero shot (or few shot) ability.

When you have hundreds or thousands of examples, BERT works great. But that is very restricting.
And will be about as effective at prevention
True, especially when a reboot of Windows takes several minutes because it started auto-applying updates!
This is what happens when you treat IT as a cost center.
The Freakonomics podcast [1] did a whole episode on this topic. It's one of the more fascinating episodes in my opinion, and I can't eat a banana now without thinking about the Gros Michel.

[1] https://freakonomics.com/podcast/the-most-interesting-fruit-...
Yeah, it was definitely a silly, not economically viable leap of faith move.
We enjoyed all of it.
I find it pretty funny that immediately on the first click of this article I was greeted with an internal server error.
True, but ChatGPT has been interviewed by a national television broadcaster in the UK at least, so I think it broke out of our bubble no later than December 2022: https://youtu.be/GYeJC31JcM0?si=gdmlxbtQnxAvBc1i
Or test in local environments first. Slow rollouts like this tend to make deployments very very painful.
There should be no "post-QC". You do gradual rollout across the fleet, while checking your monitoring to ensure the fleet hasn't gone down.
Maybe paper-based book will be fashionable again.
Speaking as somebody who manages a large piece of a 911 style system for first responders and has done so for 10 years (and is not affected by this outage) - this is why we do not allow third parties to push live updates to our systems.

It's unfortunate, the ambulances are still running in our area of responsibility, but it's highly likely that the hospitals they are delivering patients to are in absolute chaos.
Those who like him, love him. Those who don’t despise him. I doubt dosage matters.

Any restriction on speech ought to be frowned upon, especially in tech circles, which historically stood for liberal (progressive/inclusive) values.
You can pay for it and sign a file full of null characters. Signing has nothing to do with quality from what I understand.
Returning all zeros randomly is one of the failure modes of crappy consumer SSDs with buggy controllers. Especially those found in cheap laptops and on Amazon. If it’s a fully counterfeit drive it might even be maliciously reporting a size larger than it has flash chips to support. It will accept writes without error but return zeros for sectors that are “fake”. This can appear random due to wear-leveling in the controller.
> Furthermore, old-timey PDFs are chock full of the things, for God knows what reason, and a huge amount of data I work with are old-timey PDF.

Probably UCS-2/UTF-16 encoding with ascii data.
The fact that this website simply refuses to do any kind of age verification says a lot about their leadership and possibly their motives...
> Ideally protests should be peaceful.

Other people in the thread are saying that Bangladesh is a dictatorship, and security forces are killing people for protesting.

Just to be clear, if that's the case, violence against the state is entirely justified. There is nothing morally wrong about rebelling against autocracy, in fact, it's quite a good thing.
Well, if only he had updated his server stack to something more scalable...
Can you name a first world country that gives out 40% of the public sector jobs to veterans or their children?
Except that 16 year olds will likely pass this better than a quarter of adults.

Also, is there some magic knowledge you somehow learn the day you turn 18?

The problem is from a legal standpoint, 17 and 364 days, is not allowed. But "turned 18 an hour ago" is.

Also: we live in the age of chatgpt. Knowledge proves nothing anymore.
Is Crowdstrike the Final Straw?
Why would a machine that is required for a MRI machine to work (as one of the examples given in the thread here) need to be online? I understand about logging, though even then I think it is too risky. Do all these machines _really_ need to be online, or just nobody bothered after all the times something happened or, even worse, software companies profit in certain ways and would not want to change their models? Can we imagine no other way to do things apart from connecting everything to some server wherever that is?
How are you going to catch wallhackers that aren't blatantly obvious?
Classification is just too damn convenient with LLMs.
The trick is to shelve it indefinitely until you feel like touching it again
Windows update actually provides sensible control over when and how to supply updates since I think Windows 2000 (definitely was there by vista time). You just need to use it.
So what you are saying ... Karma struck ... could be weeks...

I was thinking I could go around to companies doing their updates, for a fee of course. Waste a weekend, but make a bunch o money. But then it struck, how will I find the customers as their computers are down ...
I really appreciate Zach saying it out loud. Especially to his audience, which likes to see itself as scientific.

I'd pair it with this XKCD:

https://xkcd.com/1520/

And with this SMBC:

https://www.smbc-comics.com/comic/2012-03-21

They illustrate the internalized hierarchy, where the hard scientists are seen as better than the soft scientists. So the physicists must know everything about everything, and anything "softer" than biology must just be charlatanism.

Everybody remembers the great victory Alan Sokal had over "Social Text". But did anybody actually read Social Text? Can we name any of the people that it published? Scientists won a great war... over who? Did they even show up?

The foolish bits attract all the attention. But the vast majority of the humanities work is dull, boring, and rigorous. They're trying to solve important problems, and unlike physics, those problems aren't amenable to equations that fit on a single line.
>might need to migrate over to something else for the blog, with a proper cache

Never Update _Anything_ :)
Why Story Points Don't Work
I strongly assume there are higher rate limits, more than once I've seen the Right Kind of Startup, (buzzworthy, ex-FAANG with $X00m in investment in a market that's always been free, think Arc browser), make a plea on twitter because they launched a feature for free, were getting rate limited, and wanted a contact at OpenAI to raise their limit.

Arc is an excellent example because AFAIK it's still free, and I haven't heard a single complaint about throttling, availability, etc., and they've since gone on to treat it as a marketing tentpole instead of experiment.
Well done!

rscott2049, you sir, have earned yourself a follower on GitHub!

And I'd love to follow you on other Social Media as well -- if you have any other Social Media accounts!
Rioting puts you in jail.
Do you want to pitch demos, or do you want to sell software? I'll repeat myself, enterprises don't buy stuff unless it's certified to the standard they promise to their customers. SOC2 isn't the only compliance you'll need but it's definitely not the last. Enterprises have much higher standards than the small-time customers you might have imagined dealing with. If you're not already thinking about getting a security audit, you're not prepared for enterprise customers.
Here you go. <https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/commen...>
Wasn't "nuke the messenger" the default?
I'm a bit embarrassed to admit, but I still don't understand decoder vs encoder vs decoder/encoder models.

Is the input/output of these models any different? Are they all just "text context goes in, scores for all tokens in the vocabulary come out" ? Is the difference only in how they achieve this output?
'It looks like your client Bob is no longer housed in this facility and therefore no longer has standing. Case dismissed. If you can find someone else willing to initiate a case, you can start the year long process that got you here again. Of course, if they happen to get transferred to a new institution should their case make it this far in the process that case will also be dismissed for lack of standing.' -- The US Justice System
Currently it's running on a VPS that has 1 CPU core and 4 GB of RAM, resources which are shared with a few other processes. I'm thinking that I might move over from multiple smaller VPSes (better separation of resources, smaller fallout from various issues) to a fewer bigger ones in the future (also cheaper), in which case the containers would struggle less under load spikes.
It's not, which is my point. Criticize it on the merits of how the law's used in Ireland instead of coming up with "things that happen" that don't happen.
Source code is of course a static thing. It's text. It only changes during commits.

Code is dynamic. It runs. The abstractions in the machine are doing things, which are changing things over time, in many different places, and it can be difficult to keep those movements all in your head without either a ton of practice, or lots of practice and some decent foundation to build off of.
I agree. It's an invasion of privacy dressed up as a cute story.
FYI: If you can access the website on your phone (I'm assuming you can since you made this comment), you can make small edits like this from there. Navigate to your repo, click on the ".gitignore" file, select the 3 dots to the right, and click "edit in place". You can then add the line and make the commit. But note that this will not remove the __pycache__ file from the repo, though you can also perform that from your browser through a similar process.
He isnt saying there is, but hes saying that its better than the alternative
Do actual conversations normally happen in digital modes (whether CW or one of the ones that need a computer)? I got my technician license years ago and quit for the reasons others have listed above but have considered getting back into it for digital HF, but I've gotten the impression that people mostly just exchange callsigns and signal reports then move on to the next contact. I'm basically looking for old internet chatroom vibes but over radio.
You need to be a very special kind of stupid to think postprocessing anything after you've tested it is a good idea.
Alpine linux was designed for web services, as it includes the bare minimum resources necessary for deployment.

https://wiki.alpinelinux.org/wiki/Nginx

Also, may want to consider a flat html site if you don't have time to maintain a framework/ecosystem. =3
We do not know if the update was new version of the driver (which also can be updated without reboot on Windows since... ~17 years ago at least) or if it was done data that was hot-reloaded that triggered a latent big in the driver
If Benjamin Graham and Jason Calacanis swapped investment styles
Whenever I get to the slog part of a project I have to remind myself: "If it was easy, everyone would do it". Getting through the slog is what makes something an accomplishment.

That said, when I get to that point is also when I evaluate whether an accomplishment is truly important to me. If it's not worth the slog it can't be that important.
Ah, bought it while I'm in China. Just checked Amazon and even aliexpress and you are right, it's 150-200. Didn't realize it could differ by 2x.
I believe many high-quality embedding models are still based on BERT, even recent ones, so I don't think it's entirely fair to characterize it as "deprecated".
What do you mean? CornHub already exists

https://cornhub.website/
Surprised and impressed at your using HN as a resource.
the react module bloat example is not a fair one, the recommended way to start a react project isn't to use create-react-app. other methods are more streamlined. but then again, the deprecation of create-react-app perhaps proves the point that updates create problems.
I am very much tempted not to because it works under lower loads, could just put it on a faster server, but how could I pass up the chance to write my own CMS (well, a better one than the previous ones I've done)? That's like a rite of passage. But yes, the irony isn't lost on me, I just had to go for that title.
It sounds like you no longer see value in the work. What were your original motivations and goals? How have they changed? From a distance, it's easy to guess that you're not confident the project will be useful to anyone. If that's true, it would make sense that you're demotivated--nobody likes doing work that isn't useful to themselves or others.

If the goal was simply to learn and stay sharp, then perhaps an incomplete project is a success——you did some coding, and learned something about what motivates you. If the goal was more specific, then perhaps you've (subconsciously) re-evaluated the requirements for success, and it no longer feels achievable or worth the effort.

I could be wrong, of course, but this sounds less like a problem of technical ability than one of deepening your understanding of your own motivation. If that sounds right, maybe check out https://x.com/scottdomes — I like his writing about how to identify what you want and why.
I mean I don't want to be responsible for keeping a bunch of people's photo IDs secure either. What does that say about my leadership and motives?
Replace require and must with expected to, and you get the difference of policy and reality.
This is what I don’t get, it’s extremely hard for me to believe this didn’t get caught in CI when things started blue screening. Every place I ever did test rebooting/powercycling was part of CI, with various hardware configs. This was before even our lighthouse customers even saw it.
It's honestly terrifying that someone would opt for Windows in systems critical to medical emergencies.

I hope organisations start revisiting some of these insane decisions.
The file was just full of null bytes.

It's very possible the signature validation and verification happens after the bug was triggered.
Looks cool I’ll keep an eye on it.
5 Ways Ozempic, Wegovy, and Other Weight Loss Drugs May Improve Your Health
Yeah, it says a lot of good.

You can't do it without turning your site into a panoptical dystopia where even more of your personal data ends up with the NSA, third party data brokers, or hackers on the darknet. None of that's worth people's silly moralism to me.
How? It does absolutely nothing to prove the person is an adult. All it does is block actual, legally allowed users.
The whole purpose of the proof of ID is legal liability. The quiz doesn't do anything for legal liability.
Yes. Reading and learning.
I don't understand this myopic thinking. Maybe a Trump administration will deregulate Big Tech, but how does that help you when the EU will just block you and fine you? What's the real gain to be had there?

What's the point in having your tax burden reduced if it means realizing greater interest? Have they forgotten that Trump had the largest increase in US deficits in history? Have they forgotten that those deficits, along with wrecking the global supply chain before the pandemic due to a trade war with China created the inflation that we're just now getting under control? What's the point in expanding your business when your customer is unable to buy any more product?

The Big Tech Billionaires may know a thing or two about business, but it's becoming clear they don't know much about economics - and ultimately, that ignorance is going to hurt their business.
Two weeks ago it was just about all car dealers
I blame Microsoft. Why? Because they rely on third parties to fill in their gaps. When I buy a Mac it already has drivers for my printers, but not if I buy a Windows PC. Some of these printers drivers are 250 MB, which is a crazy size for a driver. If it is more than a few 100 KB it means the manufacturer does not know how to make a driver software. Microsoft should make it unnecessary to rely on crappy third party software so much.
Crowdstrike will not exist after this is over.
It’s easy to encourage this when there’s nothing at stake. I personally have friends and family who are trapped and fear violent protestors as much as violent police.

And when the protests die down in a few days or weeks, there will be even fewer jobs. And the attacks aren’t against the state but against the people as well.
Here's part of the answer:

https://github.com/minimaxir/hacker-news-undocumented?tab=re...
The entire reason email (and the internet) took off is because there are many ways to use it, for many purposes.

Handing down diktats about the correct use cases and workflows for a flexible thing that is currently being used by billions of people in billions of ways - like email - will either reduce your personal relevance to them, or, if you succeed in pushing your vision onto the popular thing, drive people away from it.
Hotel, not home. It may have started as "man was not meant to live in these temperatures" but it turned into a phenomenally ahead-of-its-time idea.

We went there a few years ago and it's insane that what you see is only half of what he did: the family was stupid enough to buy half and then destroy it "to use the land". In the category "not understanding what you have", this one's up there.
Not setting computers that are in any critical path on proper maintenance schedule (which, btw, overrides automatic updates on Windows and doesn't require extra licenses!) is the same as willfully ignoring maintenance just because the car didn't punch you in the face every time you need to up some fluids
> The US had that many decades ago when it sent people to the Moon

This is a bad example. The only reason the US achieved it is because the Soviets ate their lunch over and over and over again.
Stuck culture? Meet REAL stuck culture.
Operation Sicilian Vespers (1992–1998)