skysight-inc/HackerNews huggingface dataset:
I see three issues with the nice ideas presented:

1. Incentives.

I’ve made my contributions to debuggers (Firebug mostly), and devs are not willing to pay for it (we had donations, but I’ve seen people create projects in the space) and so tool makers (browser makers in this case) eat the cost and see it as a cost center. Because of this, the debuggers are at the abstraction layer of the tool itself. The tools change and the cost of keeping the debugger in sync (usually well after the feature is out there) is already high enough.

I put hooks into Firebug to make it better for higher level debugging of frameworks. Later I made a paid extension [*]. It paid for a new computer, and spawned many framework specific extensions over time. I pushed Chrome's DevTools team to add some of the same hooks. Sadly, a decade later, many of those framework level extensions don't use what is available. Again, it is a cost center for the framework development, so just enough gets done, no more.

2. Tools are Siloed.

You may have OpenTelementry, etc., but that data is siloed off somewhere. The IDE doesn't have it. But the IDE has extensions, so maybe someone like Microsoft can bridge the gap and put up a sidebar that is a heatmap of the time that that code takes on the CPU.

3. Levels of Abstraction.

When you talk about state and data modeling, not only is it siloed, but the levels of abstraction are plentiful. It is somewhat possible, but I refer you back to 1--Incentives.

[*] https://vimeo.com/showcase/2541003/video/75271334
Show HN: Built a stupid webiste - What is this page about?
(May 14)
Show HN: I built an app that gives you Reddit TL;DRs instantly
Hey! Just made something cool – SticAI Glance. It's for Reddit.

What it does:

- Summarizes posts and comments fast
- Gives you all important links
- Shows expert opinions
- Answers common questions
- Tells you if people like or hate the post
- Finds funny stuff
- Highlights most upvoted comments & topics
- Compiles FAQs
- Extracts action items & important notes
- Identifies key facts

Try → https://glance.sticai.com

P.S. Personally, I use it to grab all the important links discussed in Reddit threads. It saves me a huge amount of time.
Drivers have to run in the kernel in order to access hardware and other low-level system resources. That's how pretty much every mainstream OS works. For example, here's the guide for writing kernel-mode drivers in Linux: https://docs.kernel.org/driver-api/driver-model/overview.htm...

One might ask whether an anti-virus really needs to run inside the kernel, but the answer might reasonably be yes.
Happy to answer any questions! I'm especially curious to hear how Glance might help with your specific Reddit browsing habits.
Why should any application be able to crash the OS? Poor OS design.
Ah, yeah, they gave us zscaler not too long ago. I wondered if it was logging my keystrokes or not, figured it probably was because my computer slowed _way_ down ever since it appeared.
We test the baffling hubless Verge TS Pro electric motorbike
These numbers are old. They need to update it to "CrowdStrike is not worth 73B Dollars"
Is it normal to make outbound connections during boot? Doesn't that circumvent a firewall? That seems like something a security team evaluating whether they want this software on their network might care about during an eval period.. right?
I haven't been a sys admin in a very long time so my systems knowledge might be outdated, but I reckon functionality like intune's built-in monitoring of specific feature install failures would make a huge difference with a few dozen systems, let alone the hundreds of thousands you see in some of today's deployments. It's not like that stuff isn't possible on Linux, but if you're coordinating more than a few systems, that turns into a big, expensive project pretty quickly.
Is there any way to revive tab groups
Chrome made a major update which meant that closed tabs do not restore by default. You have to restore each group individually in history. Unfortunately, I cannot view more than the last 13 pages, so there is no way to revie these groups anymore ,which means hundreds of lost tabs. Any way to get them back?
In my foodie circles I hear makrut lime more often.
No, they are not ITM until CRWD hits $180/sh.
I think you missed step zero:

0. Rent-seeking private company/ies realize that prisoners could be a literal captive audience, and successfully lobbies governments (state and federal) to require prisoners to use only a single, prison-approved phone operator.

Also, step 2 is now redundant, and replace step three with "Profit!!!"
You can also make rollback easy. Just load the config before the one where you took the bad update.

Of course that means putting the user in control of when they apply updates, but maybe that would be a good thing anyway.
The biggest cloud providers out there (AWS, Azure, GCP) don't.
Exactly. They knocked half the world offline probably killed thousands in ERs and the stock is only down to about June lows.
I can get behind people doing their own custom "licenses" that amount to throwing their work into the public domain, but if someone builds their own limited licenses around a thing, I won't touch their product. This FUTO license is garbage. Use a real license and either be open source or not; inventing new personal licenses doesn't do anyone any good.
Those same contracts are currently trading at $13.65, so close to doubled since yesterday.

If they sold right now, ~$7000 on ~$3500 invested; not bad.
This outage seems to be the natural result of removing QA by a different team than the (always optimistic) dev team as a mandatory step for extremely important changes. And neglecting canary type validations. The big question is will businesses migrate away from such a visibly incompetent organization. (Note I blame the overall org; I am sure talented individuals tried their best inside a set of procedures that asked for trouble.)
Terminal running Windows? Someone is going to make it run Crowdstrike too.
They fixed that. Now you can fly without taking your laptop out, or taking your shoes and belt off. You just have to give them fingerprints, a facial scan and an in-person interview. They give you a little card. It's nifty.
Air Force. Space Force. ...Cyber Force?
Inevitable.
Very popular corporate endpoint protection (malware detection and spyware) that runs telemetry & monitoring agents installed as kernel-mode drivers on windows. Thus if there is a crash, it crashes the entire kernel (BSOD) . And their drivers load at boot.
All this stuff could easily be airgapped or revert to USB stick fail safe.
I haven't read it, but I'd take a leap to presume it's somewhere between the people that say "C is unsafe" and "some other language takes care of all of things".

Basically delegation.
These are some REALLY dumb takes...

> CrowdStrike could potentially behave as a propaganda arm of the US government by creating “fake hacking stories” which are un-disprovable.They are able to do this due to information asymmetries in society.

If this is true, then isn't crowdstrike valuation quite low?

> It’s prohibitively hard to hack into a “cloud system” due to few possible entry points

?????
> Panicking when the file doesn’t parse because it’s not a memory safe language?

Whether a program panics or recovers when attempting to parse bad data is entirely orthogonal to memory safety. Do you have any in-depth technical information about the bug itself that you're basing this on?
The Register is known to make funny, confusing headlines.

I think I found the definition of rocket that makes sense: "(UK slang, originally military) A severe reprimand; a telling-off. [from 20th c.]."

The decoded headline would be: Texas construction workers tell off SpaceX. Or just Texas construction workers place lien on SpaceX.
So the CNC manufacturers pay for crowdstrike licenses? That's crazy
This is a global multi-layer failure: Microsoft allowing kernel mods by third-party software, CrowdStrike not testing this, DevSecOps not doing a staged/canary deployment, half the world running the same OS, things that should not be connected to the internet but are by default. Microsoft and CrowdStrike drove a horse and a cart through all redundancy and failover designs and showed very clearly where there were no such designs in place.
I like the idea that technology is so unreliable in star trek because the computers are all centuries of software accretion with Windows way down the stack somewhere.
Or, much more likely, the malware will use a memory access bug in an existing, poorly written kernel module (say, CrowdStrike?) to load itself at the kernel level without anyone knowing, perhaps then flashing an older version of the BIOS/EFI and nestle there, or finding it's way into a management interface. Hell, it might even go ahead and install an existing buggy driver by itself it's not already there.

All of these invasive techniques end up making security even worse in the long term. Forget malware - there's freely available cheating software that does this. You can play around with it, it still works.
Apple created their own filesystem to make this possible.

The system volume is signed by Apple. If the signature on boot doesn't match, it won't boot.

When the system is booted, it's in read-only mode, no way to write anything to it.

If you bork it, you can simply reinstall macOS in place, without any data/application loss at all.

Of course, if you're a tinkerer, you can disable both, the SIP, and the signature validation, but that cannot be done from user-space. You'll need to boot into recovery mode to achieve that.

I don't think there's anything in NTFS or REFS that would allow for this approach. Especially when you account for the wide variety of setups on which an NTFS partition might sit on. With MBR, you're just SOL instantly.

Apple hardware on the other hand has been EFI (GPT) only for at least 15 years.
Open-Source Retool for Enterprise
Party 'try not to cry', me and you
I forgot about that until this mention. Definitely not relegated to AOL chats.
I kinda wish Hugging Face just did it for people.
hopefully also doesn't entail windows running antivirus
Definitely more than just orbiting it. Even with the rovers having such an extended mission, it's still just a small fraction of the surface.
I love how their company name foreshadows this exact event. It’s malware pretending to be a security suite.
Yes? Like would that actually be a bad thing?
they should have stuck with the SEC whistleblower bounty program

Theyd make way more than that DOOM LEAP they bought, but its worth $13 at time of writing, so 100%

people trading the 0DTE made 18,700% though

just save this comment for when you understand it
This basically means the person has a guaranteed buyer who has to buy a set number of shares of CrowdStrike at $185 per share. If the price drops below that, say to $100, this person can buy a share at market value and immediately execute the contract making the person buy it at $185.

In the meantime, as the share price drops the contract's value itself usually goes up. They can sell the contract itself without having to touch shares and still make a profit.
thanks! we tried to include some info in this post.
This is, in a way, why Kaspersky was banned in the US... "who scans the scanners?". Kaspersky is not that different from a Cloudstrike EDR product.

https://news.ycombinator.com/item?id=4092187
>"poorly communicated" is perfectly well characterized by "how pleasant [it] sounds"

No, it absolutely is not. You should read what people write, not what you read into it to confirm whatever view you took ahead of time.
CrowdStrike Suggestion: Future Changes to Deployment of Security Updates
"Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith."

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/item?id=41005274
Ask HN: Closest Lua web framework to Django?
I am attracted to the simplicity of Lua vs the increasing complexity of Python but I really miss the speed of development of Django. What would be the closest Lua equivalent? I like Orbit and Sailor but they don't seem to be maintained. Openresty is super powerful but is hard for me to grasp all the pieces - it seems not as integrated/documented as Django. Any thoughts?
CNC literally stands for "Computer numerical control". They're like the OG 3D printers, they just work subtractively than additive, and at much much much better precision.

You absolutely need computers to control them and loading up models via USB sticks becomes annoying rather fast, so naturally the control computers are network connected.
Should I invest in broken BGP settings?
Crowdstrike and other tools that have this access is for them to update their agents so that in case they see a ransomware or attack pattern to push it out to as many devices as possible to stem the attack. Do you need all this crazy level of kernel access, probably not, I hope they will have some refactoring efforts in the future.
According to this, humans can't see flicker above 100 Hz for most smooth images, but if the image has high frequency spatial edges then they can see flicker up to 500-1000 Hz. It has to do with saccades.

https://www.nature.com/articles/srep07861
This is a feature not a bug in the enterprise.
I think the criticial systems here are often the ones that need to be connected to some network. Somebody up there mentioned how the MRI worked fine, but they still needed to get the results to the people who needed it. So the problem there was more doctor <-> doctor.
I want to say the problem is that the industry has systematically devalued software testing in favor of continuous delivery and the strategy of hoping that any problems are easy to roll back.

But it's deeper than that: the industry realizes that, once you get to a certain size, no one can hurt you much. Crowdstrike will not pay a lasting penalty for what has just happen, which means executives will shrug and treat this as a random bolt of lightning.
I think another way to say this is that MDF works only if you're in a spot where you have hands that are strong enough to call. If you play every hand, and you see every river in that 100into100 situation, you shouldn't call with 50% of your hands because your hand range is too wide for that to be profitable.

So you can't make a ton of mistakes say "MDF" and call off, you have to have done the right things in previous streets to end up with a range that can call at MDF. That range (and those street actions) require an understanding of GTO (and the adjustments needed when someone isn't playing GTO).
New laws and regulations make companies more liable for being hacked

Companies buy cyber insurance to reduce their risk if they are found liable

Cyber insurance companies force tech staff to install garbage software in order to check compliance boxes.

Garbage software breaks

Turns out everyone used the exact same brand of garbage software to check the same garbage box

People in hospitals die

When you reduce everything to a checkbox and eliminate critical thinking to apply the need to the exact situation you end up with 90% of companies running zscaler and crowdstrike

"This is just how you solve this, everyone does it this way in our industry"
Not familiar with this tool, sorry.

Anyway, had that confirmed by whoever is in charge of security and whatnot, as we have an internal StackOverflow clone and someone asking the same question was pointed to a PowerPoint presentation of dos and don'ts.
Having worked with some of these retail systems, yes, it depends on how they are configured.

There are stores in many places in the country with sporadic internet or where outages are not uncommon, and where you would want to configure the terminals to still work while offline. In these cases, the payment terminals can be configured to take offline transactions, and they are stored locally on the lane or a server located in the store until a connection to the internet is re-established.
What would the sysadmins do in this context? Read the release notes of the update? The only thing they would do is update and then be responsible for the problem, and in that case you're back to this exact problem.

It's not like they'd read the source code or examine every file that's been changed or downloaded for a proprietary kernel module for every crowdstrike update (there must be a LOT of them).
It depends on your setup. If you actually put in the effort to get apparmor or selinux set up, then root is meaningless. There have been so many privilege escalation exploits that simply got blocked by selinux that you should worry more about setting selinux up than some hypothetical exploit.
> no one has ever agreed on everything

Every biologist since 1700 agreed to use the Taxonomic rules (or tried, and failed, to improve the system). This collective project is one of our main success as species. Or maybe we should say "it was", that building has eroded a lot in the last 100 years.

That congress is basically the mess what happens where all scientists had been replaced by politicians.
I love how my comment gets flagged for pointing out the original rage bait headline. Then the headline is changed. What a bunch of shit.
are you sure though that being more CPU-bound will imply more waiting on the GIL? CPU-bound python in my experience means libraries, like eg. numpy, that are well-designed and release the GIL.
I can use engine braking to come to basically a complete stop.
The whole part about civilizing the Middle East and Africa sounds dumb. But it does really ring true for Europe, Korea, and Japan. My Polish and Estonian coworkers really do enthusiastically support Pax Americana. Because when you have a hostile (or potentially hostile) country on your border, you actually have to take a sobering look at your country's survival.
https://archive.is/0i1Yd
Their terms of use undoubtedly disclaim any warranty, fitness for purpose, or liability for any direct or incidental consequences of using their product.

I am LMFAO at the entire situation. Somewhere, George Carlin is smiling.
Do you know of any fault tolerant system? Asking because in all the cases I know, when we make a system "fault tolerant" we increase the complexity and we introduce new systemic failure modes related to our fault-tolerant-making-system, making them effectively non fault tolerant.

In all the cases I know, we traded frequent and localized failure for infrequent but globalized catastrophic failures. Like in this case.
its an accurate take, windows is a mess

didnt red hat have a massive DEI/anti white man scandal? I wouldnt trust their products

the smartest people use and maintain Arch, ergo everything should run on Arch for maximum stability
Anna's Archive Loses .GS Domain Name but Remains Resilient
Not saying it outages wouldn't happen, saying it might not happen on a _global_ scale....and it's not the only downside. There are pros and cons to each solution.
I'd love to know what the original threat was. I hope it was something dumb like applying new branding colors to the systray indicator.
Mission critical systems should be running something like ChromeOS.

Too bad ChromeOS seems be on the way out at Google.
Show HN: Open-source Template for multiplayer AI games
> The tragedy in American civics is far too many are too poor, tired and/or uneducated to fully engage.

Engage with whom?

First Past The Post voting ensures I have no viable political party to vote for that would reasonably represent me.
Both are masterful.-

I really do wish however that we had learned some of the lessons from that whole fiasco ...
"Including Bell Labs alumni. They used their time to create Go. If that isn't game changing, perhaps Bell Labs was also a product of its time"

Failed twice to create anything else, only succeeded yet again thanks to Google moat and a set of lucky events caused by Docker and Kubernetes rewrite in Go, followed by their commercial success.
> Consider the recent npm supply chain attack a few weeks ago

What supply chain attack are you referring to?
> I frankly cannot even guess what you thought that was adding to this conversation.

That what is a slur to some is absolutely benign to others (what else in this context).

> Everyone is imperfect, but there's nothing sacrosanct about this naming tradition, or any particular name emerging from it

By that logic, we could as well have left the name untouched, as the new name wouldn't be unchangeable either. I really couldn't care less either way, but spending time and money on such petty things feels like a waste of resources to me.
Modern Poker Theory by Acevedo was the premier book on this, but I've been out of the game a few years. Idk if I'd fully trust his charts given modern sizing theory, but it's going to improve your game if you understand the concepts. If you're really serious, you want to get a solver: GTO+, PIOSolver, or GTOWizard (online version).
Lol. Of all the stupid internet hills to die on, why did you decide to pick "racist plant names?"
Yes, I'm no security expert by any means but I'd assume that e.g. a rootkit would be best defeated by a kernel driver.

So, this isn't really what's getting on my nerves here. Just how it auto updates and get pushed throughout the organizations without a smidge of quality assurance. Smaller businesses... Sure, I get it. They don't have the resources to set up infra for this, but those... airliners... and hospitals. WTF. I read some org thinking they might not even be able to provide anesthesia. Seriously. What.
> In a hole in the ground there lived a hobbit. Not a nasty, dirty, wet hole, filled with the ends of worms and an oozy smell, nor yet a dry, bare, sandy hole with nothing in it to sit down on or to eat: it was a hobbit-hole, and that means comfort.

> ... The best rooms were all on the left-hand side (going in), for these were the only ones to have windows, deep-set round windows looking over his garden and meadows beyond, sloping down to the river.
Wiktionary has UK slang definition of rocket of "A severe reprimand; a telling-off."

I found quotes for "put a rocket up" that suggest it is UK slang. And pretty common since BBC has article for "How women students put a rocket up Cambridge".
The prevalence of the issue makes it seem unlikely to have been caused by site-specific configurations
Mustangs have a reputation as being 'crowd (or streetlight) seeking' missiles.

This is due to their price making them relatively more available to the enthusiasts than say Hellcats, enthusiasts who may not be experienced enough to deal with having that much power available to them in a RWD car. This confluence of power, confidence and lack of skill often comes to a head when the enthusiast goes to a car meet to show off and meet with like minded folks. At the conclusion of the meet, or during a group drive, they'll often pull a sick burnout as they pull out of the parking lot on to a street.

A sick burnout they haven't practiced, and will often cause them to lose the back end sending the car into the curb, a tree, or a crowd of like minded attendees at the car meet. Therefore, the reputation.

For example: https://www.youtube.com/watch?v=DPx5aBI8UTQ
Hence why Kaspersky got banned just recently [1]. You absolutely do not want some foreign company having above-root rights on (critical) infrastructure in your country.

[1] https://edition.cnn.com/2024/07/15/tech/russian-firm-kaspers...
They probably have to due to CrowdStrike lobbying and fear-mongering requirements for their kind of software into export-controlled hardware.
Batterygate was just making sure the phone doesn't shut down suddenly as the battery deteriotes and is less capable.