skysight-inc/HackerNews huggingface dataset:
"AI" weapons have existed for the better part of a century. The first generation sidewinder missile autonomously homed in on a target. It's logic was simple, and it needed a bright exhaust plume to seek, but it's an autonomously guided munition nonetheless.

Making a quadcopter with a claymore strapped to it home in on enemy troops using image recognition and visible spectrum cameras isn't fundamentally all that different. Most of the complaints - e.g. the potential for friendly fire - existed with older weaponry too. That sidewinder is just going to home in on the hottest IR signature , which may be friendly if employed carelessly.
Recompute Base Encryption Hash key type problem! https://www.youtube.com/watch?v=DlbrL1H1ngs

Seems like people need to be at the physical box to fix and it's complex even then.
or Gamestop
Crowdstrike should be held liable and sued out of existence.
You can do CPR without a computer system, but changing systems in the middle of resuscitation where a delay of seconds can mean the difference between survival and death is absolutely not ideal. CPR in the hospital is a coordinated team response and if one person can’t do their job without a computer then the whole thing breaks down.
I do hope some organizations realize though it’s not a great idea to have a half-baked rootkit as your lucky charm against cybercrime.
But will Europe ban CrowdStrike?
yeah it’s kinda lame, I would like to switch to a epaper phone and still use my Apple Watch
People talk about using LLMs to write code, but is there any work on using RNNS (perhaps LLMs) to explain what a piece of code does? Seems like that might be a good feature for a debugger.
If crowdsource QA department is all that stands between you and days of no operations then you chose to live with the near certainty that you will have days rather then hours of unplanned company wide downtime.

And if you cannot actually abandon someone like microsoft that consistantly screws up their QA then it's basically dishonest for you to claim that reliability is even a concern for your desktop platform.

And that's essentially what i say when i accuse the modern enterprise it's client device teams of being stuck in the 90ies as those risk were totally acceptable back when the stakes were low and outages only impacted non time critical back office clerical work. but what we saw today was that those high risk cost optimized systems got deployed into roles where the risk/consequence profile is entirely different.

So what you do is that you keep the low impact data entry clerks and spreadsheet wranglers on the windows platform but threat the customer facing workers dealing with time sensitive task something a bit less risky.

It's might not be as easy as just deploying the same old platform designed back in the 90ies to everyone but once you leave the Microsoft ecosystem dual sourcing based on open standards become totally feasible, at costs that might not be prohibitive as everything in the unix like ecosystem including web browsers have multiple independent implementations so you basically just have to standardize of 2-4 rather then one platform which again isnt unfeasible.

It's telling that an Azure region failed this news cycle without anyone noticing because companies just don't tolerate the kind of risk people takes with their wintel desktop for their backends so most critical services hosted in microsofts Iowa datacenter had and second site on standby.
The fact that something like CrowdStrike can crash the Windows kernel ... is also part of the reason security products like CrowdStrike are needed in the first place.
The most concerning thing about this is the realization of just how many incredibly critical systems run on Windows.
This just in ‘CrowdStrike Strikes Crowd’
The recommended workflow is to just use /undo to revert any edits that you don’t like.
I woke up after they'd already pulled the bad update, and I don't have an affected system.

If I look at the C-00000291-00000000-00000032.sys version that Crowdstrike LFO serves me, I get something that looks superficially reasonable (not random garbage or full of zeroes).

I would share it, but my understanding is that channel files specifically can have different contents for different customers (as opposed to other files like their Linux kernel drivers, which is definitely the same giant .xz blob for everyone). So I'd rather not upload something that's potentially tied to a specific customer/company without asking for permission

But if you have a valid customer ID from Crowdstrike, I'm happy to point you the little tool I use. You can request old versions of channel files from LFO and look at the diff as much as you like. But I can't guarantee you'll actually be getting a file that's obviously broken or full of zeroes like some people are describing. My C291 0.32 looks superficially normal.
How is it that these major companies aren't rolling out vendor updates to a small number of computers first to make sure that nothing broke, and then rolling out to the entire fleet? That's deployment 101.
It’s a British website using British idiom. Nothing weird about it at all.
You’re learning the wrong lesson here. Automatic security updates in Debian and Ubuntu actually get tested and work.
The RCE in ssh a week ago is an argument for enabling automatic security updates. (And for security in depth, putting everything behind VPN for example)

This example is probably an argument for not running windows on critical systems due to insufficient focus on security from the beginning which has lead to a need for things like crowdstrike.

They do make a version of CS for Linux but nobody runs it unless they’re forced to by overzealous compliance drones.
Best ELI5 ever!
stop hijacking the endusers equipment with mandatory updates to systems that are working as desired; stop bulldozing everything into the cloud; stop implementing all systems must use identical HW SW and configuration regimes.
Amen to that. Software Engineering as a discipline badly suffers from not incorporating well-known methods for preventing these kinds of disasters from Systems Engineering.

And when I say Systems Engineering I don't mean Systems Programming, I mean real Systems Engineering: https://en.wikipedia.org/wiki/Systems_engineering

> How is mission-critical software designed, tested, and QA'd? Why not try those approaches?

Ultimately, because it is more expensive and slower to do things correctly, though I would argue that while you lose speed initially with activities like actually thinking through your requirements and your verification and validation strategies, you end up gaining speed later when you're iterating on a correct system implementation because you have established extremely valuable guardrails that keep you focused and on the right track.

At the end of the day, the real failure is in the risk estimation of the damage done when these kinds of systems fail. We foolishly think that this kind of widespread disastrous failure is less likely than it really is, or the damage won't be as bad. If we accurately quantified that risk, many more systems we build would fall under the rigor of proper engineering practices.
If you realize something horrific, your options are to decide it's not your problem (and feel guilty when it blows up), carefully forget you learned it, or try to do something to get it changed.

Since the last of these involves overcoming everyone else's shared distress in admitting the emperor has no clothes, and the first of these involves a lot of distress for you personally, a lot of people opt for option B.
I'm old-school:

progressline() {
local s=`ttysize w`
local n=0
while read x; do
for i in `seq $n`; do
echo -ne "\e[2K\e[A"
done
echo -ne "\e[2K\r$x"
n=$((${#x}/$s))
done
echo
}
Did there is any history about the name ?
Keep reading "Send nude". Sorry.
Species names change all the time for --Scientific-- reasons. That reflects that our knowledge about the species has improved. This move is totally unrelated with science, is bipartisan (not all scientists agree that the local toponym caffra is a racist word) and just adds a lot of confusion without improving our knowledge about the species.
By the same token, you might be the first person I have ever seen give respect to the 1x developer. I respect that. We could no doubt all learn a thing or two from the 1x developer that doesn't rush through everything with quick solutions.
Lisp 1.5 Hypertext Source Code
I can all but guarantee that very little of the actual coding was done by U.S. citizens.
Unless you use PIC controllers with https://en.wikipedia.org/wiki/Harvard_architecture
My whole childhood I dreamed of digging secret tunnels and chambers all throughout my future house and yard etc. Imagine my dismay when I found out about water table and ventilation :-(
Hear me out here: Maybe if we split the address space into various use-specific segments...
It switched them from CRLF to \n?
$185 puts that cost $7.30 mean they are considered ITM if CRWD drops below $184.27, assuming there's no cost to trade and the $7.30 refers to a single options contract (worth 100 shares). There is likely some (or a lot) extrensic value still remaining in the puts given the far away expiry date. The extrensic value is what makes them valuable.
See also: https://sccei.fsi.stanford.edu/china-briefs/reverse-brain-dr...
The late great Vernor Vinge explored this in A Fire Upon The Deep. One of the characters is/was in a former life a programmer-archeologist. The idea being that so many thousands of years in the future every relevant program has already been written, so his job was to comb the archives for the right mix of codes and integrate them, rather than right something new.
Lets not forget they are repeat offenders for the illegal dumping in California and Texas.
https://blog.esghound.com/p/spacex-violated-the-clean-water-...
https://www.expressnews.com/opinion/editorial/article/spacex...
> USPS did not share anything intentionally.

>> We don't actually know that.

Hanlon's razor: "Never attribute to malice that which is adequately explained by stupidity."
Looks like you are

https://mastodon.social/@RicoElectrico

I am

https://mastodon.social/@UP8

I can’t say I get a huge amount of engagement but I do get some. My content that performs best is pictures of flowers like

https://mastodon.social/@UP8/112280831383416944

with the hashtag #bloomscrolling.

I read that about half of people say they mostly follow hashtags, others mostly follow other users. You want to reach both of these.

You are hardly following anybody, I think you should try to find some friends and get some mutual followers. Adding the word “searchable” to your profile will also improve your visibility.
Microsoft Anti-Virus (MSAV)
Ah right, thanks
The name has "Colorado" in it but it's a SCOTUS case that turns on the 14th amendment to the Constitution, so it's valid in Florida too.
If you’ve ever been forced to use a PC with Crowdstrike it’s not amazing at all. I’m amazed incident of this scale didn’t happen earlier.

Everything about it reeks of incompetence and gross negligence.

It’s the old story of the user and purchaser being different parties-the software needs to be only good enough to be sold to third parties who never neeed to use it.

It’s a half-baked rootkit part of performative cyberdefence theatrics.
It definitely isn't impossible to bypass. It gets bypassed all the time, even publicly. There's like 80 different CrowdStrike bypass tricks that have been published at some point. It's hard to bypass and it takes skill, and yes it's the best EDR, but it's not the best solution - the best solution is an architecture where bypassing the EDR doesn't mean you get to own the network.

An attacker that's using a 0 day to get into a privileged section in a properly set up network is not going to be stopped by CrowdStrike.
JokesGPT – Daily newsletter with 3 jokes and nothing else
Screenshot at the end of the article is from this video. He calls it spatial programming and mentions some other tools which did that in the start of the video.

https://www.youtube.com/watch?v=eQgxFuw8f1U
This kind of thing is required by FedRAMP. Good luck finding a company without ending management software who is legally allowed to be a US government vendor.

If you stick to small privately held companies you might be able to avoid ending management but that's it.. any big brand you can think of is going to be running this or something similar on their machines -- because they're required to
> When they call too much you should obviously not bluff! This leads to very boring games of poker.

I don't know, poker theory is all about optimal ranges and Nash equilibrium, but there's something satisfying (and very practically important, since if all your opponents even understand the phrase Nash equilibrium you should find a different game) about trying to make the most money against an opponent who calls or bluffs way too much.
Thank Chronos I switched to Qubes OS almost two years ago!
I developed Call Stacking as a visual debugger.

It captures everything for a given request - each method call, params/argument/return values, class name/method/line of execution.

You can visibly see which method called which, as each method call is nested relative to its parent callee, in a single consolidated timeline.

https://callstacking.com/
Augmented-Reality Startup Magic Leap Cuts Sales, Marketing Teams
Meanwhile, I'm lucky if the laptop I installed Ubuntu on will keep from crashing for over an hour of continuous use.
even if one is concerned with remarkable similarity of prison labor to slavery, implications of 13th amendment clause, etc., most of the prison labor is for wholly-government-owned enterprises, frequently manufacturing things for other government departments.

As another example, Louisiana is phasing out private prisons. That should be great! Meanwhile Angola (state-run) continues to have prisoners picking cotton.

I know people know about this because they always bring up prisoners picking cotton in these conversations, but then the talking point remains "private prisons" somehow. So I still don't get why this idea is so sticky.
Why do lathes , cranes and laser alignment systems need a new copy of windows?
The title is clickbait. If they did this intentionally, it is much more scandalous and will cause more outrage than just a stupid mistake.
Exactly. You sign up when you're just playing around, and the product is free or cheap. It's easy to ignore the details of the enterprise pricing at that point, even if it exists and is prominently displayed. By the time you need enterprise pricing, you're locked in and they've got you.

I'm not anti-SaaS by any means, but it's a cautionary tale about over-reliance on services that are way outside your control.
Taking the opportunity to plug my favorite blog post ever:

"the truth is everything is breaking all the time, everywhere, for everyone"

https://www.stilldrinking.org/programming-sucks
Implementation inheritance often leads to code that is just awful to read. If class C extends class B and class B extends class A, then to find out what `new C().foo()` actually does, you need to read through the whole C-B-A hierarchy, bottom to top. If `A.foo()` calls `this.bar()`, you have to start again, from the bottom of the hierarchy. With an inheritance hierarchy of depth n, every method call could be going any of n different places. With an interface, there's a single level of indirection. With composition, the code simply tells you what happens next.

If class A and class B both implement interface X, and B wants to borrow code from A, it should just call A's methods—ideally, static methods, but B can keep an instance of A if it wants. Explicit is better than implicit.

Also, I dislike ontological statements like "x is a kind of y." What does that mean? Typically, it's a claim about behaviour: "x offers method w and satisfies invariant v". But the actual blueprint here is an interface, (w,v)—not another object y. The waters get even muddier when we start talking about "is-a" vs "has-a" relationships. It feels like OOP is trying to unhelpfully distance us from what's actually going on with our code. Under the hood, inheritance is no more than syntactic sugar for composition. I think that OOP's focus on the ontological philosophy of inheritance is the reason why it led to so much bad AbstractObserverStrategyFactory-style code.
Such a worthless type of post to make
The law allows people to be total jerks. Should we now hate the law instead of those people?
some of them even have GPS. To prevent selling to sanctioned countries or reselling in general.
there's nothing socially repressive about having airline travel segregated into classes of passengers at all, nope, this is completely normal /s

I go through the regular TSA line out of solidarity and protest. Fuck the security theater.
But it has created a culture of everything needing to be kept up to date all the time no matter what, and pulling control of those updates out of your own hands into the provider's.
its written in javascript, I dont want javascript apps on my system
Option C is to quietly distance yourself from it.
Tenstorrent Wormhole RISC-V Based Workstations for AI Development
Xkcd: CrowdStrike
I am not surprised at all. The level of DevSecOps' skills has been falling over the last two decades as demand for their skills kept growing. Most of them would report you to HR if you suggested they use WireShark to debug a networking issue. They are useless people who came to IT because of the promise of good pay and don't know how computers, networks work.
I was a neutral party just hired to accurately fix the AI-gen'd transcripts, because most of the call is stuff that is fairly slangy prison terms, but the calls would come with unnecessary notes that I didn't need to see where the gov was champing at the bit trying to find crimes where they didn't exist. They were convinced there were crimes happening if they just looked harder.

After that I was given police interrogations, but honestly, when you have to listen to this stuff for hours it is horribly depressing (not because of the crimes, which are often horrific, but more because of the governmental conduct). I had to give it up.

It's an important job though. I've seen transcripts that were entered into evidence that were so totally wrong that it would boggle your mind. And wrong to the point where they logically reverse whole aspects of the case or evidence.
I see. For me it was worse with WSL1, where all file operations were scanned by slow enterprise DLP software.

Now with WSL2 most pains I see are related to broken routing when also using VPNs on host. That is where that vpnkit tool shines.
Can't use X like that anymore.

Makes it sound like you're talking about the site formerly known as Tiwtter.
> We could also rename Harry Potter to Harry Clerk

Hell yeah why not
Exactly my thinking. Asking these questions doesn't help us now. But after all the action is done, they should be asked. And really should be questions that always get asked from time to time, incident or no incident.
The government is the one contracting them out, seems fair for them to set a minimum standard of operation to prevent exploitation of a vulnerable population
> If only we knew how to do that.

We'll never figure out how to do it until we actually start trying to rehabilitate people.

> There are places in this country where attitudes develop for many years, decades even, before that person is ever incarcerated.

This is text book bigotry.
If this is what it takes for us collectively to wake up, I'd say it is bargain.

Pretty sure nothing will change though
I hope she's ok.
Brand new system for horizontal scaling of PostgreSQL
I wonder if these would improve VR/AR headset displays.
That's a pretty cool map. Someone should do a "street-view" version.
If you've never heard of "caffra", you're not woke enough for this; just snooze your alarm and go back to sleep.
If you count OpenAI , Microsoft has produced a lot. Bell Labs existed in an era of conglomeration, where Microsoft existed in an era of startup culture, but the idea of monopolies spending cash on research is still there
I assumed it meant "put a rocket up their ass", a clever SpaceX-themed play on the phrase "put a boot up/in their ass".
As a paramedic, there is very little about running a code that requires IT. You have the crash cart, so not even stuck trying to get meds out of the Pyxis. The biggest challenge is charting / scribing the encounter.
What does this mean?

Windows kernel paged, linux non paged?
Elon ruined the letter X.
> First Past The Post voting ensures I have no viable political party to vote for that would reasonably represent me

Nobody does. In any system. There is always error in any heterogenous group. That isn't an exoneration of our two-party system. Just pointing out that not having a party that perfectly represents you is inherent to civilisation.

What issue do you care most about? Engage on that. With others who think similarly. That’s what engagement means. And due to the shocking lack of civic engagement, it’s ridiculously powerful. I have personally swung judicial elections in New York City by taking some tenant association heads to dinner. I’ve gotten language into state bills because nobody else called and it wasn’t one of my rep’s core issues. I did this before I made any money to speak of; in some sense, I had the time to engage for lack of money.
If what America has is a caste system, then the UK has a caste system. And France. And China. And the entire world. Because to make what America has into caste system, you render the term meaningless.

A caste system is s social hierarchy that determines who you can socialize with, what you can learn, and what you can do for living. That's not how race works in America.
> It is.

It clearly isn't, because so far you've moved the goalposts of colonization several times, including claiming that it couldn't have happened because Soviet authorities said it didn't.

But, sure, what's another goalpopst: sure I can, and you don't have to take my word for it, it's literally the Soviet state apparatus that admitted to it. Law N 1107-I of the Russian Soviet Federative Socialist Republic on the rehabilitation of the repressed people recognizes that there were several peoples "against whom a policy of slander and genocide was pursued at the State level on the grounds of national or other affiliation, accompanied by their forced relocation, the abolition of national and State entities, the redrawing of national and territorial boundaries, the establishment of a regime of terror and violence in places of special settlement" (Art. 2). Several of the peoples on the list were, ironically, indigenous peoples that were supposedly protected by the Soviet Union's policy of indigenization, like the kalmyks.

The Soviet Union never developed a legal theory of racial superiority because it had a theory of political superiority from the very beginning, which it could conveniently apply along ethnic lines.

Edit: oh really now, who's sneak-editing their comments? (Besides, you don't need me editing my comments post-factum to make your own posts seem incomplete: most of your quotes end halfway through the phrase anyway)

> Funny that you have no objection to collective punishment which is enough to make it a crime.

Of course I do. That's the whole thing you're skirting around.

> You mean the parts that were grabbed by Romania 20 years earlier? [0]

Yes, the one that had been grabbed by Russia 100 years before that, and the other one, which it had "grabbed" from the other European empire and had never been incorporated in the Russian empire or the USSR before. Funny how when someone else does it, it's "grabbing", but when the Soviet Union did it, it's the friendship of peoples.

> the USSR signed the non-aggression pact with Germany.

...uh-huh, which included, you know, that part about the partitioning of Poland, the Baltics (which was eventually walked back on through another pact), and the non-interference of Germany in the occupation of Bassarabia and Northern Bukovina. And was promptly executed through the joint invasion of Poland.