skysight-inc/HackerNews huggingface dataset:
How can it possibly be a crime? They literally gave the keys to everyone who accessed their website
looks neat! Is the quiz itself what helps with retention, or is this combined with spaced repetition or some other memory technique?
Itsy-gitsy – A static site generator for Git repositories
How are those arguments against kernel level detection from a security perspective?
His arguments show that without kernel level, you either can't catch all bad actors as they can evade detection, or that the latency is too big that an attacker basically has free reign for some time after detection.
Does the law specify PDF? I would have thought pain text or even HTML would be sufficient.
A Linux kernel syscall implementation tracker
> I have long wept for our future and this is likely a reminder of why we fail as a species.

Lay off Reddit, mate.
Your plan is to replace all the software written in C/C++ with... software that doesn't exist.

It's good to criticize the current state of things, but don't pretend you have a solution.

Also, do we know if rust would have helped here? Rust doesn't guarantee no crashes -- in fact, panicking (aka crashing) is the default.
That's because you are comparing it with our current systems. You have to compare it with what it existed before, basically people relieving themselves everywhere.
If you're still looking, Gilbert Strang makes the best introduction book I know of: https://math.mit.edu/~gs/linearalgebra/ila6/indexila6.html
> Politics in developing countries is a business, not ideological.

What a joke! Imperialism flourished due to corporates being allowed to own their own private armies. The US is the best example of a country that exists for, and is run by corporates - and that happened because the older European powers clamped down on corporates, and they fled to the US.
CrowdStrike's widespread deployment is encouraged by regulation.
NT 4 EULA had a similar note, but it was limited in scope to JAVA.

> 8. NOTE ON JAVA SUPPORT. THE SOFTWARE PRODUCT CONTAINS
SUPPORT FOR PROGRAMS WRITTEN IN JAVA. JAVA TECHNOLOGY
IS NOT FAULT TOLERANT AND IS NOT DESIGNED, MANUFACTURED,
OR INTENDED FOR USE OR RESALE AS ON-LINE CONTROL EQUIPMENT
IN HAZARDOUS ENVIRONMENTS REQUIRING FAIL-SAFE PERFORMANCE,
SUCH AS IN THE OPERATION OF NUCLEAR FACILITIES, AIRCRAFT
NAVIGATION OR COMMUNICATION SYSTEMS, AIR TRAFFIC CONTROL,
DIRECT LIFE SUPPORT MACHINES, OR WEAPONS SYSTEMS, IN WHICH
THE FAILURE OF JAVA TECHNOLOGY COULD LEAD DIRECTLY TO DEATH,
PERSONAL INJURY, OR SEVERE PHYSICAL OR ENVIRONMENTAL DAMAGE.
Snoop: What Your Stuff Says About You
What you're describing sounds a lot more like a stroulevard. Not a stroad.
Nothing in his comment suggested he was unaware of that so I'm not sure why you're asking.
Sounds like a plan! If you run into any issues at all, feel free to ping me on X/Twitter (https://x.com/justinskycak) or shoot me an email (justin@mathacademy.com). The first piece of the puzzle to learning math is just getting on the rails at the appropriate level and I want to make sure we help you get over that hump.
You introduce consequences against the people who have created the system that we're in now.
Boston Dynamics has a contact sales button on their site aha
Computers are not people. No need to be afraid to discriminate.

Windows is shit.

Mac is more or less.

Linux is best of all.
I thought most biodegradable plastic bags were just plastic bits, alternating with biodegradable bits, so the bags fall apart but the plastic still exists in little pieces?
Believe it or not, to be able to do that at a high throughput you need half of a GPU anyway, like a cache hierarchy.
Fuzzing...

I'd love to hear from an engineer on the project but unfortunately we're likely not to.
> I think the good news, if it's incompetence, is that they can greatly reduce the risk of recurrence by improved processes and tooling.

And, if the various stories are to believed, removing or neutering the execs and managers that required an update be pushed out immediately without passing through the normal staging system.
In 2015 the situation of the INDEC was strange, the inflation was underestimated [1] and also the dollar/peso ratio was fictional. So take all that numbers with a grain of salt. However I agree that there is (almost) no gro in the GDP in a long time. [2]

[1] Comparison of the official inflation rate and the unofficial one published by the oposition in the congress: https://economictrends.com.ar/2015/01/16/economia-en-1-grafi...

[2] Anyway, I remember 2015 was a good year, we had a huge soy harvest and the international price was very high.
does it also find lost jewelry?
You may find this site interesting: https://folkrnn.org/tune/119105 Thing is tabs and other kinds of notation only capture a small part of the composition, often just the melody. So to generate "real" polyphonic music you need other kinds of data.
The security researcher in this case worked for free to find a hole in their security, reached out via a provided email address, had that bounce, so then chose to reach out via a different messaging system to let them know that there was an issue. ALL OF THIS WAS UNPAID. They have 0 or less responsibility to this firm. The researcher was doing them a huge favor.

> Security researchers get high and mighty extremely quickly, which is immature IMO.

Immature would have been not trying to responsibly disclose this, or disclosing the hole before it was patched.
When I learned BASIC in ca. 1981, my high school had these machines that looked like a keypunch but recorded your "cards" on a floppy disk. You handed the disk to the computer operator and got your printout back later. Terminals were installed a year later.

It meant that you got maybe a couple debug cycles per class hour at most. The lectures, and most programming and debugging, were conducted by tracing through programs on paper or the chalkboard. The simplicity of "thinking like the machine" in BASIC was valuable for this process.

Maybe not any more, now that computers are widely accessible. But I have a hunch that thinking through algorithms is still an important stepping stone towards becoming a programmer.
Generally, the US government pays far less for high-level employees than you can earn in the private sector. But if you're extremely rich, there is a little-known benefit. Conflict-of-interest rules for government positions allow government employees subject to them to sell assets and reinvest them in cash/Treasuries/mutual funds/ETFs without paying capital gains taxes upon selling those assets. The tax is just deferred - you'd still have to pay capital gains taxes when selling the new assets, with the basis being the original purchase price of the assets you were forced to sell.

So the upshot is that it makes sense for extremely rich people in private industry to take government positions where there would be a conflict of interest with their previous company. This allows them to diversify their assets in a tax-efficient manner.

When you die, the basis for capital gains is reset or "stepped up" to the current price of the assets upon death, which means your heirs or estate can immediately sell the assets completely tax-free. This doesn't differ between diversified and non-diversified assets. But taking a government job allows extremely rich people to get out of a concentrated asset position, with the risk inherent to a single stock's performance over decades, and into the much more predictable world of diversified Treasuries or stock index ETFs.
A nice illustrative example of https://en.m.wikipedia.org/wiki/Brouwer_fixed-point_theorem
It was probably used as a toilet brush.
Is there a map of this? Would love to see which topics branch of each other and which start from scratch
Did you know about Instruments?
The company that owns colors
Really interesting to me that none of the commentators I've seen in the press have even hinted that maybe an OS that requires frequent security patches shouldn't be used for infrastructure in the first place. For just one example, I've seen photos of BSODs on airport monitors that show flight lists -- why aren't those built on Linux or even OpenBSD?

Security is not a feature that can be layered on. It has to be built in. We now have an entire industry dedicated to trying to layer security onto Windows -- but it still doesn't work.
The Luckfox Pico Mini B – Linux in a Thumbnail
I don’t know the situation in India but brokers in Austria and Germany do the same. The law does not stipulate the format but PDF is what everyone uses. I assume it’s because it can be signed and archived and will outlast pretty much anything. You need to keep these for 7 years.
two options: link to an external google sheet as well, or add the table as an image
The part of "bootstrap through tarrifs" that's missing here is the "bootstrap" phase.

You can get away with selling domestic rubbish to local consumers when you're a poor country with few options. For an established industrial power:

1. Consumers will not change their behaviour unless you apply punitive levels of tarrifs. A 10% tax probably won't make the customers who have bought a Lexus for their last five cars switch to Lincoln. That's probably why Washington felt they could get away with the huge levies on Chinese EVs (a new market with no established consumer behaviour being disrupted), but didn't breathe a word about Made-in-China Buicks (an established market full of old people who vote).

2. It doesn't grow the total pie very much. When you're Outer Slobavia and just getting your first industrial plants off the ground, there's a lot of growth to be had just reclaiming the domestic market from foreign competitors. But the US is a mature player in most of these markets already. Removing foreign competitors will only buy a few percent market share.

Admittedly, tarriffs don't cause low quality by themselves. It's more that the package deal being presented is "we won't bother making American industry more competitive, since we can just go insular and high-tarriff to create a captive market to keep American factories alive." Even if you win at that captive market, that's a far smaller upside than if they had instead said "we're going to get back on the leading edge of manufacturing and make American products globally aspirational."
> They viewed the source code.

No.

"i like to do this thing where i search twitter, looking for companies, and then try giving them a quick pentest"

"the compromised list of services: their database (containing PII), their AWS, their salesforce (never checked, account may be limited), mailgun (arbitrary emails from a16z domains, and also could read older emails)
... and probably more"

By their own admission, this is a "pentest", and they were able to access a16z's "database" and ascertain that it contains PII. Amongst other services used by a16z.

I'm not the one to judge whether they crossed any legal (or moral) lines though.
If you don't want to maintain infrastructure, don't adopt the kinds of software stacks created by the kinds of people who have only ever shown a giddiness for producing devops shovelware that assumes/requires maintenance.

Even ignoring that, you run into stuff like this:

> the first wall I hit [trying to update the website] was that I: Forgot [...] the esoteric Hugo conventions (has documentation, but it's not easy to parse at a glance) [...] not sure how I could have remembered all of the Hugo-isms, especially since I don't update this site very often and don't do static site generator work outside of this.

Nothing about this sort of thing is unforeseeable. Don't choose these options.

<http://web.archive.org/web/20210331182731/https://corytheboy...>
Honestly makes me angry, if we had a sense of justice in this world this would devastate them financially.
Makes perfect sense if you know your history: _soft_ware for _micro_computers, because in the era where Microsoft was founded, the word "computer" was associated with room or building sized mainframes. Minicomputers were the size of a rack or two and microcomputers / home computers were ones that fit on top of a desk.
Have you tried doing that? It’s no fun at all and far from easy. I don’t quite see a benefit in doing it without some utility.
An awful lots of apparently useless bureaucracy exists because many people, left to themselves, are often very, very stupid.

Bureaucracy certainly stops smart people from doing the right thing, but more often, it stops stupid people from doing the wrong thing. Hack away at bureaucracy at your peril.
If you could get 4 people 81mm mortars (and some training) it's highly likely you could shut down 10% of us gas refining by attacking just 4 facilities along the TX/LA coast. It's very possible you could also do this with drones and avoid getting caught for some time, though your payloads may be a bit lighter. Refineries are large, but typically weak targets with critical areas. This has been something that Ukraine has been exploiting against Russia.
You’re responding to a hypothetical, not what happened.

Let’s say Linux is the leading OS around the world. How can we be sure that they would actually use eBPF if this was the case?

They would likely choose the fastest option in order to support the platform as quickly as possible. Perhaps eBPF didn’t even exist if they prioritized Linux support and implemented that first, since Falcon was first released in 2013 and eBPF in 2014.

Switching from kernel mode to eBPF would be quite a lift, so if it wasn’t baked in from the start it likely wouldn’t have been added in after the fact.

A decade worth of changes is a lot to confidently say what would have happened. If Linux and MacOS were more popular than Windows, it could have been completely different.

This doesn’t even touch on the massive Debian incident CS had earlier this year, which is not a hypothetical.
> If they're putting the effort into vuln scanning the site, they can also put in the effort to get in touch like a professional.

They did. They emailed, and when that was bounced, they used a different medium to reach out. Twitter is a place that many companies actively engage with the public.

> The job is complete when you get in touch.

They got in touch. If A16Z aren't going to respond to people via email, but they do on twitter, they don't get to decide that twitter isn't a viable communication platform.
Mission critical use of Linux still needs malware and breach detection software. It's not as simple as switching OS's.
Or don't use an OS at all. We need to think about minimizing the use of software in critical infrastructure. If that means less efficiency because you have to be near something to maintain it then so be it. That would be good for jobs anyway.
It has boundaries and good psychiatrists will know what to look for.

Every comment here starts with "see a doctor". What do you lose by trying that since it seems you already tried everything else?
Type-checked template application is a benefit.
And yet the cleanup instructions were for the user to delete a file in that directory. That requires booting into safe mode, but if any random user is able to do that, kiss your systems goodbye, a good social engineer (or disgruntled employee) will own any desktop in your organization if he wants to.
But Emacs isn't a requirement by half the STEM research community, LaTeX is.

Typst is not replacing LaTeX in general and should stop advertising being a LaTeX replacement. It isn't a competitor.
Absolutely. The risk being managed is the risk to the CEO/CTO's jobs, not the risk to life.
Interesting article, thanks, IMHO mostly for the low level performance analysis.

When it comes to actual computation of convolutions, the fast Fourier transform should at least be mentioned, even if in passing. Early in grad school I peaked at the source for R's density() function, and was blown away that it was using FFT, and that I had not picked up that trick in my math classes (or maybe I had just forgotten it...)

For a 2d example:

https://stackoverflow.com/questions/50453981/implement-2d-co...

And a recent HN thread that was very good:

https://news.ycombinator.com/item?id=40840396
Surprisingly, the mantra "if it works, don't touch it" doesn't really work so great.
Yeah it's a way of delivering a payload to the driver, which promptly crashed.

Which is horrible!
https://archive.is/Wk6OO
The email the researcher found (engineering) seems more appropriate than the office info emails (menlopark-info, ...) at the bottom of the Connect page (an actual "contact" page used to exist, but is now 404 with no redirect). I don't see anything irresponsible about trying engineering then reaching out over social media.
Then they should make their testing pipelines even faster, and make sure that they can go from detecting a new threat->tested definition file as quickly as possible. You genuinely cannot skimp on testing in this case. It's inherent to the update, threat protection and not breaking their consumers systems should be non-negotiable for a release. That means testing before deploying. If they can't do it fast enough, their product is broken.
It could.

We haven't seen the code but it could be something like:

char *ptr = parsefile(file_we_released_without_testing);
if(ptr[0]=='A') { } // BSOD loop

parsefile returns NULL unexpectedly.

So this style of error can be addressed by using a safe language. Or static analysis. Or code reviews. Or not doing this stuff in the kernel. Or formal methods. Or fuzzing.

As someone else said you likely can't easily use Rust for Windows kernel modules/drivers. I'm sure a strong enough engineering team could do it (e.g. transpile Rust to C) but I'm not sure it's the biggest engineering problem CrowdStrike has. Microsoft has a complete tool-chain for developing these and it's usually C/C++ or assembly.
if wall between client and another client == true; do dont render other client; fi
One benefit I've heard for using different languages for prototyping and production is that it helps you remember to rewrite things properly rather than just dumping prototype-quality code into prod.

Working around this by using tools that aren't exactly known for code quality in the first place seems like a bit of an odd choice.
Kulala.nvim – A minimal HTTP-client interface for Neovim
From what I've seen, it was a NULL pointer dereferencing. Dynamic, not static, so still requires diligence even in Rust.

RE: panic default, don't get fooled by hobby projects, professional Rust code always does pattern matching and does not defer to panics.

The "software that doesn't exist" point is somewhat valid, though it's also the chicken and the egg problem, as in that not many people are working to make it happen because the current state of affairs is wrongly deemed as good enough. And it really is not.
Not remotely. I am aware of the state space explosion and the difficulty with brute forcing the testing. I am suggesting that the damage a broken antivirus update can do should be restricted.
+1 for 'A Philosophy of Software Design.' I read that book a while ago and really liked his views on a lot of things. Off the top of my head some of them are: complexity being the greatest enemy of software engineers, the importance of strategic programming (as opposed to tacit 'somehow-get-the-job-done' programming), general-purpose abstractions, and having deep modules exposed through simple interfaces.
Probably has to do of IT wanting to keep using windows to justify its own existence ;).

Web + chrome is so much better. Then just use qnx or something for embedded. Why is the actual reason that our $600k confocal microscope has to run windows?

Qnx or Unix is much better for scientific and healthcare equipment.
I'm not quite sure what you're doing, but I wonder if a new-ish browser api - Declarative Shadow DOM - could be useful here. It allows for sending a sort of html shell to the browser that contains pre-defined placeholders, and then async sending the html fragments for those placeholders. No JS required.

It recently got support from all the major browsers.

- https://developer.chrome.com/docs/css-ui/declarative-shadow-...

- https://lamplightdev.com/blog/2024/01/10/streaming-html-out-...

I'm also considering trying something similar to you, and thought that perhaps GoQuery (essentially jQuery written in much faster Golang) could be useful here. https://github.com/PuerkitoBio/goquery

If you need to do the scraping stuff, Colly could be used (which uses GoQuery under the hood). https://go-colly.org/

You could also create a sort of hypermedia "single page app" if you serve the shell once, and then use something like HTMX (or even jquery) to swap the body and other html fragments without a full page reload.
It's not like your bank account immediately stops working when you cross the border. There are people who had successful careers finding themselves in this situation, is their story not valid just because they also weren't completely broke? It's not actionable advice (is this even advice?) for someone with zero on their bank account, but why should it?
lol. PG&E has had a culture of malfeasance since at least the 60’s - which is why all the records on those buried pipelines and power lines were missing or never recorded at all. Despite it being a regulatory requirement.

It just got worse as they passed more and more of it into investor pockets.
I started my professional career writing PHP and the deeper I go in everything else, the more I appreciate the fundamentals that PHP defines as it’s happy path.
Text and imagery? Html is made for this.
You have correctly observed that the number of universes that got to experience the joy of a Hitch-Hiker's 4 in which Gimblethrop Tisslwheep put together a crack team of thieves for a heist in the glamorous, newly-built casinos of Squornshellus Zeta, never mind the stunningly thoughtful portrait of Eccentria Gallumbits's later years as a titan of the adult entertainment industry and the incisive, embittered critique of the continuing tragic effects of the British Empire's many sins that made up Hitch-Hiker's 18, is vanishingly small.

But I will note that the idea of an SF/F author having a world to which they return again and again, with a mix of recurring characters and new ones, is pretty common. Asimov had the Foundation and the Robots books, and eventually tied them together. Heinlein had his Future History. Alan Dean Foster's Humanx Commonwealth absorbed a lot of my pocket money in the eighties. So did Larry Niven's Known Space. Tolkien's Middle-Earth. A new book by a beloved author in another corner of the same setting that their big success came from is an easier sell to that "subset of fans who are interested in what Arthur Dent is doing" than a totally different book by the same author.
It's pretty difficult to operate a CT scanner with pen and paper, to name just one thing that fell over yesterday. CT scanners are life-critical.
It's rent control but for toilets. Obviously the problem is that toilet landlords got greedy, and it'll be fine when they stop being greedy /s
I avoid any book that have complicated equations on the first few pages. There is a place for that but in this case the author is just trying to show everyone how smart and complex they are rather than trying to teach people.
php (itself!, not using a library) would be string based instead of DOM based, so the opposite of what OP is asking for.
> The idea of a Walkman is to isolate you from the rest of the environment

I guess my vague memories are that wasn't really how they were used in practice. The primary use case was things like during jogging / exercise, long bus/car/plane trips, that kind of thing.

Batteries were expensive, didn't last that long, and they the amount of music you could store or carry around on tapes was limited, so people weren't using them 24/7 like they do with phones these days.

If anything, they were a catalyst for social interaction as people would share mix tapes, listen to music together either with one earphone each or a headphone splitter, compare notes on the latest and greatest models, etc.
Tcl "powers" the internet in a non-direct way since it is used in Cisco IOS.
Just make a static html page and be done with it after an afternoon.