skysight-inc/HackerNews huggingface dataset:
NASA: Life Signs Could Survive Near Surfaces of Enceladus and Europa
Go buy the second-best in the market then. Red Team would love you to do that.
> There could be edge cases, but fine tuning doesn't normally concentrate on a single specific feature.

Normally is being strained here: yes, most finetuning isn't for things like this, but quite a substantial minority is for more accurate rendering of some narrow specific feature, especially ones typically identified as signature problems of AI image gen; publicly identifying this as a way to visually distinguish AI gens makes it more likely that fine tuning effort will be directed at addressing it.
I just made an update which should enable "population density" type queries to work a bit better - there is now an option to divide by 'LAND_AREA' for any variable (though this should probably be limited a bit), and this option will be automatically selected for queries including 'density' or a few related strings e.g. 'per sq. mile'
If I’m responsible for it then I should have some experience with it and understand the code already. I can call upon other resources outside my own brain.

It’s certainly not being forced to recall the implementation details of a trie within 30 minutes, when I haven’t seen one in 5 years, unable to reference any docs or knowledge base, or use Google, knowing that if I fail I will remain unemployed.
Maybe, but maybe not? Even if the data showed it was a huge life saving factor, I can't see helmet usage being enthusiastically adopted.
And every proprietary EDA tool in the world too.
I think they learned it from Freedesktop developers.
“Be ruthless with systems and kind to people”

In my experience the software engineers that often get promoted crank out as many features as possible with almost no regard to the defect rate. If you do things at a more deliberate pace, you can be regarded by product or management as slow and unproductive. Real incentives exist in software development that push for quantity over quality.

This is not analogous to the failure of an anesthesiologist to properly sedate a patient. This is a process failure. Clearly the proper amount of QA was not in place for whatever reason and they need to re-examine their approach. Of course their process needs extra diligence given the cost of failure.

It would be a real shame if an individual is punished for this instead of examining the process and system of incentives that led to this failure.
You're free to donate money to Ukraine yourself. They didn't ask to be born there or to be in that situation.

I live in a country with hundreds of thousands of Ukrainian refugees just living their new lives, working - and spending the money, sometimes a lot of it for expensive apartments, nice cars, luxury meals etc. Are all of them bad just because they don't want to be responsible for the state when they didn't sign up for that and nobody paid them to do so? I really don't think so. They are people like you and me, they want to live a happy life. Some contribute to the defense effort, some don't, both is fine.
Please no more fucking apps. If I have to tell someone my legal name to shit I'm gonna shoot myself

Just take quarters and give poor people some cash so they can shit too. Please please please
Gto poker = whatever solvers say.

Common expression is "deviate from GTO" where you know what the solver would do but decide to play differently.
Back in the day, this was the way to get really nice print copies by mail, and a handwritten letter by the author.
What people aren’t understanding is MOST of the outage isn’t caused by a crowdstrike install itself, it’s caused because something upstream of it (a critical application server) is what got borked, and that’s having a domino effect on everything else.
Mangrove forest restoration > Mangrove loss and degradation: https://en.wikipedia.org/wiki/Mangrove_restoration#Mangrove_...
You would likely use other attributes aside from id, and there are a large number of JS based templating frameworks that do this.

https://github.com/Floofies/cdaTemplate
And this new post likely triggered by https://news.ycombinator.com/item?id=41006565
The person I originally replied to, rkagerer, said there was some technical measure preventing rkagerer from uninstalling it even though rkagerer has admin on the computer.
I’m a little confused at the assertion here. What is happening that shouldn’t be happening, and what should be changed?

Should they presume malice, and discount any reference to circumstance? What if the circumstances were actually causal (which one would hope so, otherwise there are far more murderous sociopaths than anyone would have guessed) how should we parse the difference, and how will we identify potential hazards?

Presumably, from the cyclist’s perspective, the story will almost always go like this: “I was riding my bicycle in the correct fashion, in the appropriate lane, equipped with proper safety equipment, and then BAM! They came out of nowhere,” because if they had an opportunity to see the oncoming vehicle, judge whether it’s being operated safely, see where the driver’s attention is focused, and evaluate whether the driver’s awareness has or has not been compromised by the prevailing conditions—one would hope they could have avoided the crash in that space of time.
Enabling Constraints in Software Development
This hacker's story is deranged, hyperbolic, and true
Very nice, honestly the tooling around Zig is even more impressive than the language itself.
I don't agree. I'm glad Microsoft doesn't provide the functionality to do what crowdstrike does to user space. Crowdstrike acts in a similar way to deeply seated malware, except that it is usually installed voluntarily. But the behavior and capabilities that it has are basically what any malware would dream of, and exposing them to user space would imo create a mess (especially on windows). If anything, this is good as it will make people even more weary of kernel mode software.

And I'm not sure epbf actually allows you to do a lot of the stuff crowdstrike-like software does. I know they use it on Linux though so maybe eBPF has evolved a lot since I last looked at it.
I remember on some radio show many years back a program where tech people were going back to government to make the tech better. They interviewed the guy that started it and it was really inspiring. I wish I could remember more details. These are true patriots.
Proposal for a future Direct Sockets web platform API
CrowdStrike CEO apologizes for tech outage
If one studio closes you can imagine the screws are tightening at the others. Unionization arguably wouldn't help for studios closing, but it would help push back against crunch and other labor abuses.
How exactly would a lot of end user systems function without one?
A lot of companies own colors. You can own one too. Just name it, with a description of what it consists of (rgb, ymck, or something you invent!) and copyright it.

Sherwin Williams, BEHR, PPG, lots of companies own colors.
Methane breaks down pretty quickly in the atmosphere, half-life is under 10 years. We don't need to remove it so much as stop leaking it.
Imagine if we built bridges like we build software...
All of this applies to this thread.

Do you cultivate vines with fruit, or do you cultivate brambles and eat thorns?

Remember white hats don't need to exist. Black hats will exist by the very nature they are parasitic and thrive where exploits exist. We can either have a community that warns you that "Hey, the stuff on your porch is going to get stolen" or we can have a community that calls their buddy when they see some stuff fresh for the taking.

A huge portion these discussions under this article are people arguing the minutia of a puddle in the lawn while a 10 meter high tsunami is rushing their way.
but that building is not what Tesla leases; they are not coming out and saying that Tesla does not have diesel, they're saying "that's Tesla, not us"
Frequently Asked Questions about the Glider Emblem
> NT had userspace, protected memory, etc, and a GUI for setting up TCP/IP.

That's because Microsoft hired Dave Cutler who previously worked on VMS and knew what he was doing. Microsoft even had their own Unix, but didn't know what to do with it.
I think the best test for general AI will be to invent a robot that can clean up after a dog.
ILP is instruction-level parallelism, if you had a hard time remembering like me.
cr-sqlite
https://github.com/vlcn-io/cr-sqlite :

> Convergent, Replicated SQLite. Multi-writer and CRDT support for SQLite

From "SQLedge: Replicate Postgres to SQLite on the Edge" (2023) https://news.ycombinator.com/item?id=37063238#37067980 :

>> In technical terms: cr-sqlite adds multi-master replication and partition tolerance to SQLite via conflict free replicated data types (CRDTs) and/or causally ordered event logs
> Assuming that you can take an existing model and simply throw more compute at it will automatically result in higher fidelity illumination modeling takes almost religious levels of faith.

Seems an odd response to a poster who said “as the models are improved...”; the way the models are improved isn't just additional training to existing models, its updated model architectures.
The idea that giving up all your privacy isn't worse than spending a dollar really highlights something
Love this. I am your ICP. Would need baked-in spaced repetition though. What’s it going to cost? How granular will it be. (ie, how many questions does it make for cuz content? What is the sensitivity for that?)
I've taken a position in CRWD and I'm retail, but take that as the opposite of investment advice. Worked well in the past, though.
He is an absolutely amazing and extremely humble person. He agreed to review my article (written under the influence of his book) in his spare time. He does tons of code reviews every week for his students as well.

I was especially impressed by his notion of "deep modules" in "A Philosophy of Software Design". The idea is extremely not-popular, but really sound and practical. I would definitely go for this book instead of "Clean Code" and such.

His book is so fundamental, and it goes far beyond the overused and vague "complexity" term.
I read the T&C of this CrowdStroke garbage and they have the usual blurb about not using it in critical industry. Maybe we just charge & arrest the people that put it there and this checkbox-software mess stops real quick.
But we cannot neglect the poor software update policies (if any) used by those companies.
There are cell phones everywhere, but pedestrian deaths have only increased in the USA, so it is not that.

Walking in my neighborhood is objectively more dangerous than it needs to be. In the past decade there have been several instances where motorists have mowed down and killed pedestrians, sometimes when they were minding their own business walking on the sidewalk.

I'm sick of motorists only valuing their own convenience and using demeaning language to describe the pedestrians that they victimize.
There are many, many possibilities for what could have happened which need to be investigated. Some of which would be surprisingly hard to test for.

1. Did the CDN have a failing disk? A full null read sometimes happens with failing drives.

2. Did the disk holding the update fail just before the CDN upload? (I.e. did the deployment script successfully upload a failed read?)

3. Did the CDN upload fail, but a different process thought it succeeded, activating distribution?

4. Did their updates conform to an internal standard which is later serialized or minified for public distribution, and something broke in the serializer or compression tool?

It is completely possible that the update was tested, good to go, and there was a distribution failure.

However, I do know what Cloudstrike could have done, and should do in the future:

- Staged rollouts, even 15 minutes would help as a gap

- More testing (duh)

- Perhaps most importantly, improving the kernel driver to never crash from any possible input using a fuzzer, but continue booting and warn userspace of failure
Chez Scheme too then!
Yes but any accidental outages from an entity like Kaspersky would have been considered non accidental regardless of the actual root cause. If crowdstrike was Russian, the headlines would be a bit more suspicious about yesterday's event. or if they had brought down Russian infrastructure Russia would have probably been suspicious about American involvement, even if it's just accidental.
I mean, the original article doesn't say anything about video models (where, frankly, spotting fakes is currently much easier), so I think you're shifting what "they" are.

But still:

- input doesn't distinguish what's real vs constructed nonphysical motion (e.g. animations, moving title cards, etc)

- input doesn't distinguish what's motion of the camera versus motion of portrayed objects

- input doesn't distinguish what changes are unnatural filmic techniques (e.g. change of shot, fade-in/out) vs what are in footage

Some years ago, I saw a series of results about GANs for image completion, and they had an accidental property of trying to add points of interest. If you showed it the left half of a photo of just the ocean, horizon and sky, and asked for the right half, it would try to put a boat, or an island, because generally people don't take and publish images of just the empty ocean -- though most chunks of the horizon probably are quite empty. The distribution on images is not like reality.
Probably the proliferation of opiates and, more likely, methamphetamine. Scientific progress that makes these highly addictive and debilitating substances easy to produce can't be undone.

I live in San Francisco, where it now costs over $100,000 per year to operate a single toilet, because without it being under constant guard, people start living in them.
I think we're in agreement. I now realize my previous comment replied to the wrong comment. I meant to reply to Lx1oG-AWb6h_ZG0. Sorry.
At least their old name made sense, "micro-soft" - software for microcomputers.
You should mention you're the creator.
Baking in resiliency is expensive. Its not obvious to me that it would be better to deal with that than to deal with issues like this once in a blue moon. Why not let the markets decide? If this ends up costing a bunch of money it will be fixed, if it doesnt it wasnt that big of a deal.
Maybe "no reason" was a bad word choice. I would say that regardless of the reason, it doesn't matter to workers. What matters to workers is to have as much power as possible over their own situation. The simple calculus is that if you see another studio closing, for any reason, you recognize that this will be used as a cudgel by management and executives to work you and your colleagues even harder. When the true nature of the relationship between employee and worker is revealed, unionization is the obvious response.
I usually agree that we are heading towards regulation (software engineering is already a regulated title where I live) but in this case, crowdstrike had such a blast radius exactly because of regulation.
> why aren't those built on Linux or even OpenBSD

The vendor who makes the software has always written for Windows (or in reality, wrote for either DOS or OS/2 then transitioned to NT4). History, momentum, familiarity, cost, and ease of support all are factors (among others, I'm sure).

Security is a process, not a product.

And yes, distros require frequent updates, though more to your point, you can limit the scope of installed software. I'm sure airport displays don't need MPEG2, VP1 and so on codecs, for instance.

It's also important to remember that there is a lot of 'garageware' out there with these specialized systems. Want SAML/OIDC support? We only support LDAP over cleartext, or Active Directory at best. Want the latest and greatest version of Apache Tomcat? Sorry, the vendor doesn't know how to troubleshoot either, so they only "support" a three year old vulnerable version.

Ran into that more than a few times.

Given the hypothesis of what caused the BSOD with Crowdstrike (NUL pointer), using a safe language would have been appropriate -- it's fairly easy in this case to lay the blame with CS.

Microsoft supplies the shotgun. It's the vendors responsibility to point it away from themselves.
Sorry, wrong, these are the causes of the issues:

* Management and Marketing insisting on having a product done by a specific date, no matter what.

* Testing is always a second thought

* not enough hardware available to test all possible configurations.

Until companies spend real money on Development and Testing instead of cutting corners, this will happen again and again.
I generally agree with you. It's an either-or thing: either Microsoft secures their OS, or they provide safe ways for users to secure their OS. The first option is a million times better, but having neither option leads us to this mess.
Quite a few people in this thread disagree with you though.
It's part of a wider trend where drivers are given the benefit of the doubt at a societal level: https://www.npr.org/sections/publiceditor/2023/09/07/1198102...
Big schools' curricula? Look at some top school's math undergrad courses and graph them
I've considered tracing outgoing responses from nginx/traefik/whatever to watch for known API keys. The difficulty would be identifying the keys amongst the noise.
Then your hardware becomes unprotected, congratulations, you won Cybersecurity award of the year.
Yeah... I understood the ask ;)

In your example the tab is strictly finger-picking over chords since that's how the song goes but some tabs are lead guitar tabs which might be sliding from the 15th fret to the 3rd fret or other things that are not strictly picked from a chord shape. They might still be "from a chord" or "played over a chord" but when you play the tab you may or may not be using that shape at that position. It's still good to know what's the context so definitely having the chord is useful.

If I'm playing a song with a clear picking pattern over chords I might just learn the chords and strum them first and then learn the pattern or often the patterns are just standard and all you need is the chord chart.

I've definitely seen tabs with the chords on top, in Ultimate Guitar it depends on whoever transcribed it, random e.g.: https://tabs.ultimate-guitar.com/tab/misc-traditional/greens...
I come from security background and have been following best practices since 1997 so I’m pretty sure I have not made a blunder of this sort
We need a bigger version, not necessarily a vacuum, to clean up roadside litter.
You mean to code it by yourself? Nah, I, like most people interested in blogging, will pass.
I like that he leaves determinants to a later chapter and doesn't _start_ with them, I never understood why they were useful or made sense. His view, represented on the cover, is great for learning
Not sure "My bad G" is gonna cut it
GP framed leaking all your keys at something that happens when you are tired or distracted.

This is unacceptable behaviour for a professional in my eyes.
microsoft and apple enter the chat
tl;dr You can use table salt if you wish, but you need to use less. This article might help [1] as might this one [5]

Not Korea, but my wife is native born. Her family recipe is a little different than the ones I've seen online, but the result is still kimchi. There's also literally hundreds of different kinds of kimchi, so there's definitely flexibility built into the concept.

It's not really Kosher salt that Koreans use, but very coarse sea salt. It's usually sold in stores in Korea (or Asian food stores elsewhere) either in big bags by the kg [2][3], or often in a big bin near the produce in a grocery and you just scoop up as much as you need into a container and pay by the kg.

The problem you are having is not the ingredients in the salt, it's the coarseness of it. With sea salt, or kosher salt, the grains are very large and so you get less salt per unit volume. I'm 100% certain you can track down some kind of large grained coarse salt as it's used in all kinds of cooking settings, often as a late-in-recipe seasoning on breads and meats. It's likely to either be coarse grained sea salt, unground salt, or even a coarse grained mined salt like Himalayan pink salt. I believe there's a well known French coarse grained grey sea salt called Moulin & Cuisson or Le Guerandais or something that would be a good substitute.

Most major European cities have a large enough Asian population these days that there is probably an Asian grocery where you can also check also. (I'm only aware of this because when we travel in Europe my wife almost always seeks out a few things so we can cook at home instead of going out to save some money).

You might also be curious to know that the world's largest commercial Kimchi maker has a factory in Europe (Poland). [4]

1 - https://kimchimari.com/best-salt-kimchi-12-salts/

2 - https://www.hmart.com/natural-premium-sea-salt-for-kimchi-2-...

3 - https://www.amazon.com/Beksul-Natural-Premium-Coarse-Brining...

4 - https://notesfrompoland.com/2022/11/08/poland-to-become-euro...

5 - https://www.souschef.co.uk/blogs/the-bureau-of-taste/recipe-...
I've been in a few close calls, and in every one the driver was not paying full attention to the road and (nearly) swerved into someone riding a bicycle.

But reporters use such sympathetic language describing the negligent driver.
Mining JIT traces for missing optimizations with Z3
Jars.ai
Great idea! It would be easier to access it without an account.
It wasn’t corrupted. It was bad code. Bad code which clearly wasn’t tested.
Then they use those apps. The point is that since they usage of the OS as such is so minimal as to be irrelevant as long as it has a launcher and an X in the top corner.

They could as well launch that app in OpenBSD.
Well I did not notice whatever affected the banking industry of my country, which at least for me makes my point.

Good e-governance is incredibly difficult, which explains our love for faxes.

E.g. Microsoft faced a lot of scrutiny in the congress hearing in June, some people go as far as saying MS is a danger to the national security of the USA.

If the US, which is the home of these companies and can put pressure in ways the German government cannot, still can‘t force them to deliver secure systems, a fax ( at least an encrypted one) looks pretty attractive.

When the EU parliament still used faxes, the US at least hat to break into the offices and manually install components to the machines to get access.
Don't machine learning books kind of fill that gap? e.g. Bishop uses probabilistic reasoning, Elements of Statistical Learning seems to be heavy on frequentist stats (haven't read it though), etc.
/set Devil's Advocate mode:

from the reporting so far, no one has died as a result of the Crowdstrike botch. For my money, that sounds like it's not being used in 'critical industry'.

/unset

There were several 911 service outages included in the news yesterday, so I would definitely say agree those fall into the category. I haven't seen how many hospitals were deeply affected; I know there were several reports of facilities that were deferring any elective procedures.
> Netware ran entirely in Ring 0

NetWare was TempleOS with networking...
Really? We know, for a fact, yesterday, that the “update” was a file full of complete null characters, unless there was some update on that.

https://news.ycombinator.com/item?id=41009740

That’s quite open to the possibility of a disk failure or CDN failure. Bad code would at least show something that can’t be executed.