skysight-inc/HackerNews huggingface dataset:
Their big claim to (public, non-technical crowd) fame before this was their role in "auditing" the DNC servers. It was their widely-disseminated claim that the DNC servers were hacked by Russians, who subsequently gave the DNC emails to Wikileaks. Later, under oath, in 2017, CrowdStrike's president of services and chief security officer Shawn Henry admitted to the US House Permanent Select Committee on Intelligence that they not only had no evidence that the data was hacked by Russians, but that they had no evidence that it was exfiltrated at all (rather than leaked), but rather that it was an assumption. Unfortunately this admission wasn't declassified until the Mueller report was publicly released and many people had already been fooled, and (in my eyes) did little to establish Crowdstrike as a reliable or trustworthy organization.

Some notable quotes from Shawn Henry regarding this from that hearing:

>"There are times when we can see data exfiltrated, and we can say conclusively. But in this case it appears it was set up to be exfiltrated, but we just don’t have the evidence that says it actually left."

>"There’s not evidence that they were actually exfiltrated. There's circumstantial evidence but no evidence that they were actually exfiltrated."

>"There is circumstantial evidence that that data was exfiltrated off the network. … We didn't have a sensor in place that saw data leave. We said that the data left based on the circumstantial evidence. That was the conclusion that we made."

>"Sir, I was just trying to be factually accurate, that we didn't see the data leave, but we believe it left, based on what we saw."

>Asked directly if he could "unequivocally say" whether "it was or was not exfiltrated out of DNC," Henry told the committee: "I can't say based on that."

https://intelligence.house.gov/uploadedfiles/shawn_henry_tes...
There's plenty of situations where telling developers to go change their code so it doesn't panic might be an appropriate lint. Think safety critical rust for example.
There is a Titan II missile silo you can tour an hour out of Tucson, AZ. Also well worth it.

https://www.nps.gov/places/titanmissilemuseum.htm
That’s what a lot of us are wondering. There’s a lot of outside thinking of the box right now about this in certain circles.
Ah, the French mutation testing. Has never been celebrated for its excellence. </orson>
This definitely wasn't true when I was researching during university (~2005). That was obviously a long time ago, so it's very plausible that things have changed. However, I'd want to see some very well-vetted data to believe it.
I was about to say this, and DMD compiles C code insanely FAST!
Mesh doesn’t have the bandwidth. You would be sending a whole country over a wireless link. Multiple wireless links. Even with some special point to point links, you can’t beat fiber.

The other problem would be how to do the routing. The world sends the IP addresses to routers which are disconnected. Network is centralized so all the packets from country go to the router. Would have to VPN, which the whole country would have to install.
Additionally, can it match or best the MBA without a fan? What about when unplugged?

The appeal of the M1 MBA even today isn't that it's fast, it's that it's fast enough while also delivering great battery life, not throttling when unplugged, and being dead silent and cool to the touch. It's everything that an everyday laptop should be.
> I wonder if Apple has plans to make something faster than the air.

… like the Mac book pro?
> History and data from various European nations suggest that some immigrant groups aren't able to integrate with the host society after multiple generations...

I wish we as a society could focus on people, not ethnic groups.

Deport people who can't assimilate, keep those who can. Figure out more accurate ways to determine who is who then skin color (or even things like personal taste).

Some stereotypes are backed by statistics, but there's a reason why all stereotypes are bad.
Air Pro Max
I wonder when they will deliver.

I started using Apple when the M1 was launched, the battery duration and the no moving parts (e.g. fan) in the Air plays in a different league. I continue to have a love "relationship" with my "old" XPSs but I can only use them plugged or buying a new battery every year...

BTW the Thunderbolt support on the 2018 XPS continues to be superior to Apple now (e.g. more monitors) but the battery duration is a lifechanger.
What about the fake house? Was that realistic? I've always wondered.

I can imagine shaping buildings like a house to fool satellites but the furnished living room looked a bit too much. I assume these bases were military territory with fences around them.
I have seen first hand the mental gymnastics that finance/MBA leadership will go through to pretend to themselves (and the regulators) that a particular IT system isn’t “critical”.

“We have a tested backup paper procedure” - Yes, but have you tested being able to access that document when the system is down? Have you tested it when everyone’s workload is 5x normal during a real life incident, given that doing it on paper takes much longer and everyone’s already at the edge of their capacity on a normal day? Have you considered in a real life disaster scenario that something like 20% of the employees might just call out sick?

Of course not, but nobody asks that, so they just tick the “risk mitigated” box and don’t allocate any engineering effort to ensuring the system is robust.
because the left were good at talking but bad at producing.
most of your comments on HN are being marked as dead
There are many beach cleaning machines. A medium-sized robotic one.[1] A large one that Virginia Beach uses to clean up after spring break.[2] As with agricultural equipment, self-contained robots tend to lose out to wide implements towed behind tractors.

Nobody vacuums sand to clean it. Sand is scooped up, screened, and returned to the ground.

[1] https://searial-cleaners.com/bebot/

[2] https://www.youtube.com/watch?v=Z8yaGaCGqeM
Not just Debian. RHEL too.

Kernel panic observed after booting 5.14.0-427.13.1.el9_4.x86_64 by falcon-sensor process : https://access.redhat.com/solutions/7068083
Cash has to be dispensed first, and ATM's run on Windows, and so do banking terminals at bank branches.

I do not have the information about what happened to the ATM's during the meltdown on Friday, but the bank branches where CrowdStrike had been deployed were rendered inoperable.

So, no, cash is not going to help.
> he should have went into a little more detail

If there's interest, I can give more detail.
It's really difficult to evaluate the risk the CrowdStrike system imposed. Was this a confluence of improbable events or an inevitable disaster waiting to happen?

Some still-open questions in my mind:

- was the broken rule in the config file (C-00000291-...32.sys) human authored and reviewed or machine-generated?

- was the config file syntactically or semantically invalid according to its spec?

- what is the intended failure mode of the kernel driver that encounters an invalid config (presumably it's not "go into a boot loop")?

- what automated testing was done on both the file going out and the kernel driver code? Where would we have expected to catch this bug?

- what release strategy, if any, was in place to limit the blast radius of a bug? Was there a bug in the release gates or were there simply no release gates?

Given what we know so far, it seems much more likely that this was a "disaster waiting to happen" but I still think there's a lot more to know. I look forward to the public post-mortem.
Restricting the supply of housing raises costs
Mingw has been paving over the differences for years. Node.js paves over them, makes windows look very posix'y.

I'm tired of Windows being an excuse, a forever dragging boat anchor, a lower than low denominator that justifies doing shitty jobs. Keep the current virtualized file system for Windows that's fine, but man, we should stop designing specs, setting the future to keep targeting the dirty distant sad past. And we have decades of experiences (mingw) showing that we can polyfill a good platform atop the big bad no good windows Boogeyman.

It just feels like the make excuse for bad camp has been in charge of our spiritual direction for 25 years here & it's never gotten us anywhere. It's always pretty shitty. I struggle to believe these protestations against doing the natural good thing help. We should 100% just triple down on trying, on bringing WASI forward.
What is French mutation testing? A casual kagi seems to imply its a type of genetic testing, or perhaps just tests that have been done in France?
I got this…

::cracks knuckles::

$$$$$$$
One of the best posts of the year!

Tech, caring and humor in butt one in and out

And there's even an acceptable self-plug!
I use substack thinkingthrough.substack.com

I have hosted many in the past. Self hosted, wordpress, and a php version (I forgot what it was called)

The biggest problem with all those was dealing in spam comments and bad cross links.

Then I tried medium but it didn’t use to share subscriber emails.

Ended up migrating to Substack and been very happy with it for past 3 years
> "A veteran investigator of video-game leaks reveals the tricks of the trade"

Complete lie by the way. The highest revelation is that the found out that some streamer leaked something, because they noticed the leaked photos had the same icons as he did. Besides bullying a kid, this is just irrelevant.
Same dialog and divide exists here in Sweden. What some call illegal immigrants, others call paperless. So it is not a US-exclusive thing, and also here, the government have a hard time to execute deportions.
Besides ticking off a few boxes, there’s not much substance to the piece. It’s framed as a domestic issue, not a roadmap of vulnerabilities on a global scale. If I’m reading the NYT, I expect more effort.
No. The revocation of that law from the Reconquista didn't change anything immediately. Jewish residents, some of whom were the descendents of those who had been there since Roman and even Phoenecian times, were not recognized as full citizens in modern Spain until 1978.

https://www.jewishwikipedia.info/spain.html
You withdraw cash every single time you need it?! The point of cash is that you don't ping the systems on every transaction and you decide how frequently it's withdrawn.
>The goal of a host society should be to study where the differences present themselves acutely and how to alleviate the pain and rejection of individual emigrants without accepting extremism or compromising the values of the culture into which they have immigrated.

Doesn't that presuppose the conclusion? That such emigrants should be received regardless of how fundamentally different their hard drives' formatting is? Why should that be?

If South Korea did not have strong familial and ethnic ties with North Koreans, it would never accept any NK defectors at all, and said differences in software would a big reason why. Heck, one can imagine the South putting up walls to prevent a large-scale influx of North Koreans after the Pyongyang regime collapses.
I would have to disagree, PXE boot is default for most enterprise shops, they are not usb booting or burning dvd images w/ OOBE and such.

This is also Windows world, where everything to do PXE booting is literally click and click.

Devops/SRE and "cloud" are also different, I would say Devops/SRE's would have no experience w/ general windows deployment. Cloud can be 50/50 if they are on Azure, doing Windows servers and mass deployment/runbooks there.

AS for the old geezer, those are the ones I'd be worried about. While in the XP days pxe boot was a bit new, and USB booting was finally getting implemented in bios's - they are the ones that'd probably suggest a windows recovery via DVD.

And not to mention, the skills really for this are really low - the barrier is bitlocker, whether the key was backedup on the AD server and/or if the ad server was essentially bricked as well. There'd be a few, and if they go down, then disaster recovery would be the other half and hopefully they wouldn't restore backups - but thats another side of the coin here.

tl;dr the clients are easy enough to fix, any proper org can reimage a computer probably in an hour or 2 per client - if needbe can re-AD join them and be almost up and ready, if non-encrypted (rare but sure) then a quick repair would probably work if org was not aware of how to boot and delete says file in system32.
Now realizing it's been... 23 years since I saw Cex open for Kid606 and I'm gonna go crumble to dust now.
The FBI data also shows a 59% reduction in the U.S. property crime rate between 1993 and 2022, with big declines in the rates of burglary (-75%), larceny/theft (-54%) and motor vehicle theft (-53%).

Using the BJS statistics, the declines in the violent and property crime rates are even steeper than those captured in the FBI data. Per BJS, the U.S. violent and property crime rates each fell 71% between 1993 and 2022.

Of course the real reason for comments such as that above are that:

Americans tend to believe crime is up, even when official data shows it is down.

In 23 of 27 Gallup surveys conducted since 1993, at least 60% of U.S. adults have said there is more crime nationally than there was the year before, despite the downward trend in crime rates during most of that period.

The only real uptick of note in recent years has been the murder rate in the US during the COVID years, staying home and feeling under threat led to an increase in US citizen on citizen crime - not immigration.

Of course those with a blinkered news bubble (Fox, et al) tend to believe the hyped up overstaing of every low occurrence incidence and clutch their pearls in response.

The data says otherwise.

https://www.pewresearch.org/short-reads/2024/04/24/what-the-...
Yes. Look at Europe. The UK's policy was "hostile environment", which was basically make staying illegally so hostile that people wouldn't come.

Canada loved to mock the US's treatment of illegal aliens (for political gain) until they started pouring into Canada. Even with those seeking asylum, Canada was pushing the "third country" agreement that people need to seek asylum in the first country they enter, not pass through the US and come to Canada. For illegal aliens, Canada is deporting record numbers,[2] but Canadians are pretty united in "you can't enter Canada illegally".

I lived in Asia and it was similar. Very strict tracking of legal immigrants and a robust process for removing people staying illegally.

[1]https://en.wikipedia.org/wiki/Home_Office_hostile_environmen...

[2]https://www.newcanadianmedia.ca/alarming-number-of-deportati...
PSA: Don't Use Namecheap
what is the point of a service like namecheap? to find and buy a domain right?

so i am using namecheap to find a domain. i search and search and finally find a domain that suits my needs. i sleep on it before buying it. the next day i decide to go ahead but wait.. it's been taken. by namecheap. and instead of being $10, it's now "make an offer"

thanks ICANN...

are there any registrars who have pledged not to do this?
Stack Overflow makes $100M ARR on its SaaS (without ad revenue) [video]
RCV and multi-member works in other countries for their parliaments, I'm not sure why it wouldn't work in the US (the president is a different issue, given it's a single person with lots of power).
And it's exactly those things that keep it in my bag instead of something else. Sometimes I'll have both a recent i7 laptop plus the MBA, and 99% of the time.its the MBA I'm reaching for.

Open lid, it's on, instantly.
Close lid, its asleep without any nonsense phantom power draw (looking at you, dell.)
On battery, it runs all day despite being 3 years old.
There's no.moving parts, no fan throttling, etc.
It doesnt warm up my lap or care if I block a fan port.
Its also very, very light.

I'll happily use whatever OS. But I adore that bit of hardware. The software is a bonus. I dont see a scenario where Microsoft puts in the same transformation effort that Apple did in pairing the OS to next gen hardware an optimising for power, compatibility, stability, etc.
The response of cities to Texas bussing immigrants to them is pretty stark evidence: https://www.nytimes.com/2024/07/20/us/abbott-texas-migrant-b...

If they were a net gain, cities presumably wouldn't be playing hot potato with migrants by paying for one way bus tickets to "not here".
> It's because the US has historically promulgated a nudge-nudge wink-wink attitude that could be summed up as "You can't come here legally, but if you get through our defenses, there will be plenty of work waiting for you."

Do you mean official US government policy? Do you have a source for that claim?
Was just using OP's own word choice ("pal") to highlight the unnecessariness of it. Given the current color of your comment, it seems like others have correctly picked up on what I was doing there. :)
Have you considered not having Comments?

That would completely eliminate spam and ~100% of your troubles.
4E71 was nice for … ahem… discounts on shareware software?
A few months in advance? I've gone to another SD site multiple times and you don't even need a ticket.
As a Mac user, I'm very interested in the success of the new Qualcomm chips, the new AMD chips, whatever Intel might come up with, and Asahi Linux. Competition benefits us all. I read with interest a Phoronix article today about the progress of getting the new Snapdragon chips on Lenovo laptops. The Linux community appears to be stronger than ever with timely hardware support.

I've been in the market for a Linux laptop (casually browsing) for a while. I love the Framework mission. I periodically look at System76's offerings. Maybe Lenovo, hence the interest in Snapdragon. I'm not looking to replace my Macs, I just have a strong affinity for quality software and neat hardware. I recently added a bunch of new NUCs and mini-PCs to my renewed homelab after a multi-year hiatus. I can't imagine a better time to start investing in alternative (to me) hardware again.

Bring it, AMD. I want you to slay.
The Right issues tax cuts for the corporations and the Left wants to tax corporations to pay for social programs.

ELI5: The right is pro-corporations and the left is anti-corporations.
Would any of these, or even a collection of these, resolving in some direction make it highly improbable that it'll never happen again?

Seems to me 3rd party code, running in the kernel, on parsed inputs, that can be remotely updated is enough to be disaster waiting to happen gestures breezily at Friday

That's, in the Taleb parlance, a Fat Tony argument, but barring it being a cosmic ray causing a uncorrected bit flop during deploy, I don't think there's room to call it anything but "a disaster waiting to happen"
> I’m trying to understand the reasons and future outlook from a tech perspective.

There are no reasons or future outlook from a tech perspective.

You exist in a society of people. Technology is quite beside the point.
Recent Literature on Causal Diagrams
As a former member of the Windows Update software engineering team, I can say this is absolutely false. The updates are signed.
Still mad about Amalek.
A 'channel file' is a file interpreted by their signature detection system. How far is this from a bytecode compiled domain specific language? Javascript anyone?

eBPF, much the same thing, is actually thought about and well designed. If it wasn't it would be easy to crash linux.

This is what they do and they are doing badly. I bet it's just shit on shit under the hood, developed by somewhat competent engineers, all gone or promoted to management.
Relationships are coevolutionary loops (2023)
That's how the BigTrak was programmed. Didn't realize I'm qualified for that job. :-D

https://en.wikipedia.org/wiki/Big_Trak
Their real mission is to sell ads on web pages. For this reason, they feel entitled to show web search as well as AI hallucinations.
These articles are incredibly unhelpful. I have no doubt that in a short amount of time AI models will also have learned the statistical dependence between reflections in eyes. It is inevitable that this "trick" will become obsolete. This just gives a the false impression, both about AI and how to spot AI generation.
Two ways of thinking about heart rate (HR) max formula (2020)
Just worth pointing out, exactly 100 years ago, they didn't think Jews could integrate into the America - https://en.wikipedia.org/wiki/Immigration_Act_of_1924
i'd think it would be fine to touch it if you wash it with soap and water first and maybe a few swipes with an antibacterial wipe?
No, this author has just been blogging about low-level Mac details for a long time. And I feel like it's readily apparent from the quality of the posts that they're written by an expert and not by AI.
https://news.ycombinator.com/from?site=eclecticlight.co
>If it were true, LLMs could multiply scalar numbers together trivially.

I mean, it's not like GPT-4 can't do this with more accuracy than a human without a calculator.
> tech elites are turning to the right

This assumption requires scrutiny. One theory is: some of the left moved further left (perhaps without noticing), so from their perspective centrist (or even slightly left folks) now appear as right or far right.
Yes, for which they gave specific examples, which I repeated in my comment (only have text or a single wallpaper"
Bluetooth is bad at a spiritual level
I admit none, but isn't that just because ransomware frequently comes into a network through user error which usually is using a Windows machine?
As an example to illustrate the sibling comments’ explanations:

int *array = NULL

int position = 0x9C

int a = *(array[pos]) //equivalent to *(array + 0x9C) - dereferencing NULL+0x9C, which is just 0x9C

This will segfault (or equivalent) due to reading invalid memory at address 0x9C. Most people would call array[pos] a null pointer dereference casually, even though it’s actually a 0x9C pointer dereference, because there’s very little effective difference between them.

Now, whether this case was actually something like this (dereferencing some element of a null array pointer) or something like type confusion (value 0x9C was supposed to be loaded into an int, or char, or some other non-pointer type) isn’t clear to me. But I haven’t dug into it really, someone smarter than me could probably figure out which it is.
I have not visited Cuba, but from everything that see and read, it is far more free than North Korea.
Those weren't problems that needed solving. They are just the features that the software implements.

What I mean is that if it did solve a problem, it'd be used more widely. It offers some features that aren't really all that useful to the majority of people. So it's solving a problem most people simply don't have.