skysight-inc/HackerNews huggingface dataset:
Much of the media has reported the crowdstrike mess as a Microsoft problem (because it only affected Windows hosts). Even still, this is not a good look for Windows. In no way is Microsoft happy about the crowdstrike situation.
This is why I help my family and friends switch to ddg.gg
https://spreadprivacy.com/is-duckduckgo-a-good-search-engine...
Nor are we obligated to conform to your view of what HN should be.
For sure, by no means am I married to the method and am very flexible and open to trying various approaches. I do believe however that a little bit of structure can be helpful in the beginner to intermediate levels, where it's less likely that one has formed a habit/urges to watch/listen to foreign media without subtitles or read untranslated print media. It's a real slog when you don't have a decent arsenal of words to work with.
>How many Fortune 500s are mainly Windows?

Front end or back end?

Because the backend hasn't been windows in most places for a very long while.
The great replacement theory requires there to be a conspiracy (i.e. a desire to replace white people for some nefarious reason).

It also requires there to be replacement. I.e. an attempt to somehow remove white people.

What the parent seems to be suggesting appears to be more akin to cultural exchange and/or the traditional idea of America as a "melting pot".
If I design and sell a car and you electrocute yourself replacing a head unit cutting wires - despite warnings from me saying "I don't recommend replacing the head unit, it could be dangerous. I've provided you one with basic functionality" - can you reasonably argue that I should have made it harder to replace head units, or been out auditing third party head units on the market?

Your argument is anti software freedom. My Windows computer (or any other OS I choose to put on) should be able to run whatever code I instruct it to. The flip side of that coin is that the consequences are mine from doing so.
> Pay toilets are banned across many states but there has been absolutely no work put into replacing them with public, free toilets. Nobody is willing to pay to maintain these

They'll be willing to maintain them as soon as we start to demand that they do. Right now, our government is more concerned with funneling tax money into their own pockets and those of their "friends" than they are about providing services to the people. If we put a stop to that, there would be more than enough money available to maintain public toilets.

We see the same thing happening with every other public amenity and accommodation that used to be commonplace. Drinking fountains and public pools are disappearing, public parks and playgrounds go underfunded/neglected, and the public spaces that remain are increasingly filled with hostile architecture.

The Committee To End Pay Toilets did a great thing for this country. You can be certain that if they hadn't worked to stop the greedy people who wanted to profit from the necessity of our own basic bodily functions back then, today we would still have people priced out of being able to use a bathroom in public while the rest of us would still be stuck paying $10 to use the facilities only without also getting the sugared coffee to help expedite the process.
With a flexible array member, updating the length in-place is rather infrequent, at least in certain use cases (given that to expand it you might have to reallocate the entire struct, including the count field).

What it helps with is fortified builds, as now the compiler/libc can now get an upper bound on the intended size, whereas before it's had to just assume flexible array members are infinitely-long and thus is largely never able to add bounds checking.
I'm with you on this, but imagine being an American in prison for 10 years because you drilled a 1/8" hole .123" from the edge of a funny shaped piece of aluminum.
100000 tons is 907184749 kgs and the max capacity of a starliner is 150000kgs. So to launch 100000 tons it would require 6048 launches or one launch a day for 16.5 years.

That would mean we'd have all the mass launched by 2040, if we started today. Nope, not feasible.
But Windows has to boot before it can send telemetry, right?
Are IT-sector workers even that low-paid in Canada anyway?
Huh? We're talking about hypotheticals here. You're saying availability is clearly more important than data integrity. I'm saying that if a buggy kernel loadable module allowed systems to keep on running as if nothing was wrong, but actually caused data integrity problems while the system is running, that's just as bad or worse.
> When I see a knowledge panel result, I expect everything within it to relate to a single entity, regardless of name collisions. If it doesn't, that's incorrect.

Sure, that's the goal. But it's not like this is an unreasonable thing to get wrong on Google's part. It's hard, this is not like they're failing at easy tasks here.
> Hundreds of Americans have been killed by illegal immigrants recently.

Care to link any crime statistic from an official source to back up that statement?
Not on production critical systems where there are human lives at stake. Last Friday is a pretty good example of what comes together with ungoverned ‘autoupdate’.
Rust in Linux kernel is a bold statement. It's a PoC, nothing relevant is implement in it yet.
To send a malicious payload into the kernel, you would have to take over crowdstrikes deploy infrastructure first, right? I hope the program doesn’t just accept updates from anywhere
It's always fun trying to guess which product Google will sunset next month
Is there really a need for antivirus software anyway? What does it actually prevent?
Yes, and it’s been broken for a long time. The crossroads of siting on one’s laurels and conflict of interest have resulted in Google’s results not being particularly good.

The only reason they remain on top (IMO) is that the dynamics of search, how information is published, and how people discover new information are rapidly changing.
The thing is that even today, where it's "easy", still nearly nobody is writing code to directly support the six different credit card types. Instead, businesses mostly rely on payment processors.

In a world where it's impossible to support all six card types directly with one codebase, one of the key dimensions on which payment processors would compete for mindshare, would be abstracting away those difficulties in supporting all six card types, enabling the business that uses them to accept more cards, more easily, than if the business went with some rival payment-processor. This would be a headline feature, however hard it is for them to accomplish internally.

The only difference from today, would be that now, due to those potentially-conflicting requirements, the payment processors would have to build six entirely-distinct payment backends that don't share a data model. (Basically treating each credit card platform's cards as different "payment rails", as distinctive from one-another as credit card payment rails today are from debit card payment rails.)

And then, of course, the payment processors themselves would come up with guidelines for handling those six different data warehouses and associated infrastructure, separate/downstream from the guidelines enforced upon each data warehouse by the associated credit platform... and those payment-processor-produced guidelines, might look again quite a lot like PCI-DSS :P
Maybe if my antivirus has basic filtering of input values. But in a critical systems scenario, I want to validate in my testing stage first, or at least run a split rollout so that my entite fleet doesn't shit the bed.
I can't really help with what you're specifically looking for, but I'm pretty sure my grandfather worked on these as an engineer. He retired from Boeing in 1985. Died almost 20 years ago.
Docs with Runnable Code Blocks
Unsurprising given that the founders are Trumpists now: https://siliconangle.com/2024/07/17/co-founders-andreessen-h...
Only part of the GGC fleet are Dell machines (that pdf lists Dell, HP, and Equus). Paraphrasing one of the leads from some years back: "Single-vendor is not a vendor strategy."

Between improved negotiating position and resilience to vendor-specific firmware bugs / vulnerabilities, the additional maintenance cost associated with supporting two or more platforms pays for itself very quickly.
How can an anti virus software protect from new threats if it can't auto update as soon as new threat is there?
Typst comes as a blank slate. You want to start with template, which defines things for you.

The difference between LaTeX and Typst is that LaTeX wants you to define a template with the "documentclass", if you want the same experience in Typst you want to setup typst with a template, there the headings will be defined for you already.

>However I believe this functionality should be available in the typst core.

You can trivially define headings in typst without using packages.
They are skilled. Try taking the best and brightest out of Silicon Valley and put them on farms, orchards, and in construction, and see how well they do.

This elitist attitude that low-paid workers are "unskilled" workers is bullshit and needs to go.
You would be surprised. Yes Linux dominates, but there are many millions, easily billions of windows backend servers
I had completely forgotten about the keyboard layout hacking.

I loved ResEdit. I basically lived there.
I agree that's an argument. I would contend that argument is obviously false. If it were true, LLMs could multiply scalar numbers together trivially. It should be the easiest thing in the world for them. The network required to do that well is extremely small, the parameter sizes of these models are gigantic, and the textual expression is highly regular: multiplication is the simplest concept imaginable.

That they cannot do that basic task implies to me that they have almost no conceptual understanding unless the fit is almost memorizable or the space is highly regular. That LLMs can't multiply numbers properly isn't surprising if they don't really understand concepts prior to emitting text. Where they do logical tasks, that can be done with minimal or no understanding, because syllogisms and logical formalisms are highly structured in text arguments.
Agreed. It's a safer culture because it grew up in the wild. Windows, by contrast, is for when everybody you're using it with has the same boss... places where sanity can be imposed by fiat.

If Microsoft is to be blamed here, it's not for the quality of their software, it's for fostering a culture where dangerous practices are deemed acceptable.
Transform Any Device into a Live Bitcoin Ticker
PSA: Using the ChatGPT action button shortcut on iOS bypasses lock screen
If you're using iPhone 15 Pro and you've configured the action button to use ChatGPT, anyone can access your previous prompts without entering the iOS passcode by simply pressing the action button and asking.

Can be avoided by disabling memory in OpenAI, or simply not remapping the button.

Edit: Forgot to mention, this is on iOS 17.5.1 (latest stable release).
Totally agree here. There should be a mechanism to go back to ‘last known good’ regardless of kernel level issues. Innovations like Fedora Silverblue with ostree and greenboot tech should be adopted by Windows.
Enhancements to consider:

- Make the demos and especially the demos editable.
So this is clearly a bot, right?

This is the first real data-point for me on HN for how the LLM rot is slowly spreading to the entirety of the web.
> there is significant brain drain from many countries to the U.S. and that contributes to our success

And I find it so tragic. It means that the best elements of a given country are being sucked out of it. How can this country ever get better if the best elements just leave it ? Immigration exists because some parts of the world just suck, with corrupt governments, wars, you name it. I don't see how anyone can be happy of migrations, it means fleeing your home and leaving your roots. I don't think most migrations are something to be happy about.
You're right, but I don't think it changes anything. Third party software bringing anything new in needs to go through a test phase. That could be automated and a simple 30 minute VM boot, regular tasks run, and a longer 24 hour one running in the background whilst you start rolling updates.

Either way, it's unacceptable for critical services to be beholden to the validation of a third party upstream. The companies in question are responsible for that negligent handing off of ownership.
> and that only rarely needs to ship a security patch. OpenBSD comes to mind.

How is that accomplished? Are OpenBSD programmers somehow vastly more competent, that they make security mistakes only 0.1% as often as other OS's?

I find that hard to believe. People are people.

> If software has frequent security updates over a long period of time, that implies that the authors of the system will continue to repeat the mistakes that led to the vulnerabilities in the first place.

Why would that be the case? Authors come and go, systems live on.

Security updates arise from a combination of auditing/testing and competence. 100 times as many security updates can arise simply because one OS is being used and battle-tested 100x more than another.

Nobody's smart enough to write code that "only rarely needs to ship a security patch". Not at the scope of an entire OS with thousands of people contributing to it.
Patronage vs. Constituent Parties
So let's imagine that it has to be updated manually. New threat appears and since it takes a while to manually update it means bad actors can act on it meanwhile, causing a similar or even worse disruption since it could have far more severe impact, because of the bad intents.

Would that be better?
Realistically what is the alternative if you are running servers that could seriously be the target of an attack?

I will give you that I highly doubt that a large number of these machines are anywhere near that critical nature, but there are some that will fall within that much risk.

What do you do, just not update to handle new risks? A lot of systems going down is really bad, don't get me wrong. But is it worse that you could be breached depending on the data (and other services) those systems may have access too?

To me this is a flaw in Crowdstrike but also Windows that this could happen in the first place, and a serious flaw on Crowdstrike's side that this somehow got out.

And yes I do acknowledge that much of this is security theatre, but I also would not be surprised if it does sometimes work.
Humans are gonna human, if you have an environment where you fail to account for this, this will happen. Reminds me of a dev dropping a production database, or the aws engineer who incorrectly entered a command and brought down s3: many things have gone wrong to even be at this point, blaming a human for behaving like a human in an inhospitable environment is silly. Effort is almost always better spent building a system which is safer to operate for the people involved.
In usual quiescent conditions, the "insurance" companies often do their damnedest to delay medical care as long as they can get away with. I've had to suffer them only allowing one week of a prescription to be filled at a time, with fulfillment done by overnight shipping. I don't even think it's about saving money per se (overnight shipping of a refrigerated package isn't cheap, and I sure as shit wouldn't have been eating the cost of a misdelivery), but rather control for control's sake.

So ultimately it's not bona fide regulation taking away that last few weeks of slack and creating a needless mad rush, but rather the common setup of the "free market" unaccountably setting uniform policy in lock step, while you might get to choose which hold music you listen to.
Know someone who makes $10m a year pumping out “casual” games full of ads and dark patterns
That is 0001.5-M out of 1400.0-M windows devices in all.

That is about -.1% of all the MS machines.

As a linux user, I dont understand the big deal, the effects of this.
Not if you are running critical systems and the antivirus is not 100% guarantied to be safe and running in an isolated environment.

Hospitals should not loose their ability to provide care to sick people, just because of an misconfiguration of an antivirus. That is as bad as airplanes crashing because of a lack of redundancy and management of risks.
Some Black startup founders feel betrayed by Ben Horowitz's support for Trump
Maine has it for the general presidential election too. They were the first to use RCV in a general presidential election.

I don't care why Republicans did it, the effect is the same: It forces a two party system which benefits them in the states they've banned it. You can claim that there's no movement towards RCV in the Democratic party (there is in the progressive members), but you can't pretend like there's no movement to ban it in the Republican party, as is evidenced by their actions.

The future of the Republican party is clearly only more of the same, only the Democratic party is interested in trying something new; which we clearly desperately need.
I doubt they'd even need to go through Microsoft
> various European nations [...] some immigrant groups

American Jew here, who spent years living in France and Spain. I've heard the same polite euphemisms refering to Arabs and Gypsies from the mouths of members of the Front National. You know, before 1945 it was said in Europe that Jews weren't able to integrate fully with the host society.

One might ask: Was that the Jews' fault? Or the host society's fault?

It's a relevant question. You are blaming it on the particular group of migrants involved in the case of Europe right now. But historically Europe has ghettoized other groups.

When the US ghettoized Chinese economic migrants, American politicians claimed they could never integrate. And yet the Chinese-American population is well integrated and hugely successful since the host society allowed it. Same with Jews in America, and increasingly with Hispanics.

Why is it that economic migrants do, after a few generations, become successfully integrated in America, while they tend not to in Europe?

I don't think the evidence definitively supports the conclusion that it's down to which group. Europe has a problem with integration that has its roots in the ethnic character of its states (something America does not have), in deep-seated xenophobia that causes social exclusion of immigrant or out-groups, and in the fact that its states' reasons for existence are based on tribal boundaries and wars for territory rather than on achieving broader democratic and economic flourishing by harnessing the capability of the whole population. And thus Europe presents neither a dream of integration nor a path toward integration (as in, "to become American"; there is neither an equivalent aspiration nor option "to become French"). And then, once again, Europe blames the groups it refuses to accept.
It's a trade off. That said, we're in an age where companies do 100+ pushes per day. Automate a build, run a test, then deploy rolling updates across the fleet.

The options aren't "everyone auto updates or no updates for weeks", there's a balance point. It's very clear what choice most critical companies this week did though.
What welfare costs are you referring to? Is there actual evidence that immigrants are a drain on the country? The information that I'm seeing suggests that they are a net positive in terms of taxes.
Unskilled labor isn't a thing. There are plenty of people who can go from zero skill to writing decent python in a weekend (literally better than I've seen on some production systems) if given the chance. The same goes for building houses or airplanes. In real life, shit just isn't that complicated if someone is willing to spend a couple hours teaching the basics.
Totally agree. Even I have a niche app for a specific group. Its tremendously hard for me to find 20 testers. And to be honest the app is pretty simple and doesn’t even require that many testers.
ChatGPT and any other LLM does the same thing, no?
I am just trying to understand how you expect a typesetting system to be designed around a paradigm that doesn't exist yet.
>Third party software bringing anything new in needs to go through a test phase. That could be automated and a simple 30 minute VM boot, regular tasks run, and a longer 24 hour one running in the background whilst you start rolling updates.

I don't think anyone is going to disagree that's engineering best practice and should theoretically be done, but how is microsoft going to enforce this? Do you want to force developers wanting to publish software for windows to undergo annual audits (soc-2 style) to confirm that all the engineering best practices are indeed being followed? Not even Apple is that strict.
> And I find it so tragic. It means that the best elements of a given country are being sucked out of it. How can this country ever get better if the best elements just leave it ?

They don't leave irreversibly, they can go back if the political and institutional milieu in their home country improves, and bring valuable insights from abroad. This dynamic has been quite common wrt. those who migrated to the Americas throughout the 19th and 20th centuries.
Well, what's more important is which devices compared to how many, because many many many consumer home PC's are running windows, and not all machines are equal. A windows server running a train station != grandmas PC, so when they say "it's only 1% of the windows fleet" they are missing out "it's all of the production machines that are running society"
System call internal numbers are meaningless, are different across platforms and can change across kernel compiles/upgrades. There are also gaps in the internal numbering, so the max value seen in define _NR_syscall doesn't show the actual number of used syscall numbers in your current kernel...

Edit: this answer has some relevant details:

https://stackoverflow.com/questions/63713056/why-is-their-a-...
And those would be valid comments within a production system maintained by a team. If you think code written as a play exercise and as part of professional software environments should be the same then you need to start listening to your team.
"Immediate across the fleet" and "Entirely manual process" are not the only two options. HN rules say we must assume good faith, but there are obviously options in between, and all of them stop the issue that happened on Friday.
https://www.ice.gov/news/releases/ice-arrests-171-noncitizen...

> In fiscal year (FY) 2023 ERO arrested 73,822 noncitizens with criminal histories; this group had 290,178 associated charges and convictions with an average of four per individual. These included 33,209 assaults; 4,390 sex and sexual assaults; 7,520 weapons offenses; 1,713 charges or convictions for homicide; and 1,655 kidnapping offenses.
There was as much (more, even) pressure on the Italians and Irish to do the same.

But, to add to and enforce OP's point, their cultures were a larger schism away and they instead held on and entrenched their identities (to their objective detriment, no matter your moral stance). Meanwhile, Anglo, Franco, German, Dutch, etc cultures all kind of melded into the early "White American" identity; due to the general ease of assimilation.
Broken if you're trying to search for things, working great if you're an advertiser buying traffic.
> How can this country ever get better if the best elements just leave it ?

By competing for their talent. I'm not a huge proponent of capitalism, but that's the world we live in and the world we'll die in. These countries simply aren't competitive in a way to encourage their people to stay. There are innumerous ways to combat this. But our current thinking is so clouded by short sighted profit that today's outcomes shouldn't surprise anyone.
If you're going to make the argument undocumented immigrants are murdering everyone, you have to actually cite something. This is conjecture.