skysight-inc/HackerNews huggingface dataset:
That reads like a gift to US and Chinese tech companies. Also explains why Apple isn’t launching in EU:

“Like the EU's General Data Protection Regulation, the Act can apply extraterritorially to providers from outside the EU if they have users within the EU.”
At where though? The example given was in 711 which is a nationwide chain a bit like a Tesco Express or Sainsbury's Local, both of which still accept cash nationwide in the UK too.
> It needs to be done manual by each crew.

I can't imagine believing that this computation, ordinarily automated by these out of service systems, can be performed correctly by crews that probably haven't had to do this in ... years?
Thou, thee, ye [,thy, thine] are variants of 2nd person pronouns.

"You" used to be the formal plural form.

All of these have different connotations and/or subtly different meanings, and context will affect if they are to be taken at face value or are e.g. sarcastic (I've not read enough Shakespeare to recall if he made use of that)

[Thy/thine is your/yours and which is right depends on if it's before a vowel or consonant...]
almost exactly opposite in a geographical sense, is the Rub' al Khali (The Empty Quarter):

https://en.m.wikipedia.org/wiki/Rub%27_al_Khali

i don't kid. it's huge, and mainly empty. I first read about it in an English children's novel about Arabia, as a kid.
Our experience so far has been:

• Servers, you have to apply the workaround by hand.

• Desktops, if you reboot and get online, CrowdStrike often picks up the fix before it crashes. You might need a few reboots, but that has worked for a substantial portion of systems. Otherwise, it’ll need a workaround applied by hand.
What makes Clojure a non-starter for me is that it runs on the JVM.
Not a helpful takeaway, I've yet to see a Java kernel driver.
compensating controls ftw. the spirit of the law vs the letter of the law. our system was more secure with the compensating controls, vs the prescribed design. this meant no having to rotate passwords because fuck that noise.
Yet, catastrophic failures like this happen, and people move on. Sure, there is that one guy who spent 10 years building a 10-fold redundancy plan, and his service didn't go down when the whole planet went down, but do people really care?
If that's the tradeoff for them not training on our photos and videos, then I am happy with that. However I suspect they might do it anyway, and it will just be harder for us to find out.
I find this sensible. Kinda like a bounty system, right?
They did, around four hours ago.
No, the ‘internet’ was created to allow US defence researchers to access shared computers more easily. It adopted the packet switched model that had been developed theoretically to support command and control applications, but which was never actually implemented by the extant C2 providers (in a dentist’s waiting room now so don’t have links)
In the demo image, I used a relatively blurry picture for enhancement, so the difference appears more noticeable.
> Its like building a gigantic factory farm. And then realizing that environment itself is the birthing chamber and breeding ground of superbugs with the capacity to wipe out everything.

Factorio player detected
The name sounds like something security researchers would name a botnet.
Microsoft/Crowdstrike outage ground planes, banks and the London Stock Exchange
The first comparison by country do not make any sense. There are parts of Spain that have never seen a tourist, let alone foreign. Also China has an enormous amount of national tourism. People should stop thinking countrywise and start thinking more localwise for certain measures.
Yeah, and that fixes some issues. But even with those conservative settings, Intel CPUs are failing in droves, especially in the data center (specifically game servers, where the high single core of the Core series makes more sense than Xeon). Wendell from Level1Tech has more details here: https://youtu.be/QzHcrbT5D_Y
So, how did they got around Apple Watch locking up once the heartrate sensor detects it's been taken off the hand?

They didn't, and they were extremely careful not to mention the issue anywhere on the page. So, be aware that you'll have to enter the PIN code every time you pick it up.
> - Services at London Stock Exchange disrupted

just their news service.

> The London Stock Exchange says it's working as normal - but says there are problems with its RNS (regulatory news service).

> "RNS news service is currently experiencing a third party global technical issue, preventing news from being published on www.londonstockexchange.com," the statement says.

> "Technical teams are working to restore the service. Other services across the group, including London Stock Exchange, continue to operate as normal."
My employers pays Crowdstrike to double my build times. Quite astounding really.
The bug only affects Windows machines
Yes. CrowdStrike for Linux has had bugs in the past, though. This time the Windows version is affected.
More likely crash looping of so many VMs overloading some system with insufficient back pressure, possibly combined with unfortunate cluster management scheduler behavior at this scale of crash looping (e.g. too eager to retry scheduling instances, maybe even on new hosts which causes more infrastructure load).
You also get Israel bombing the south of the country and a Syrian border run by drug cartels.

Agree with the sentiment on OP. These libertarian views are so often held by comfortable Americans who've never seen what an absence of government looks like.
VM storage is probably on Windows Server, plus AD. I'd bet out of band management is all in the impact zone too. Might be back to someone pushing physical switches and hooking up a KVM.
What is WITCH?
What We Learned About Technology from 1995's The Net (2013)
You’re right, it’s a mix of both.
this isn't even the first time something like this has happened. it's literally a running joke in programmer circles that AWS East going down will take down half the internet, and yet there's absolutely zero initiative being taken by anyone who makes these sorts of decisions to maybe not have every major service on the internet be put into the same handful of points of failure. nothing will change, no one will learn anything, and this will happen again.
The sensor was only needed to park spinning disks when the laptop was in free fall. Without the spinning disks they no longer fitted the sensor.
Until the VPN is affected by the Domain Controller that is on Windows.
Good lesson in rollout and heterogenous software stacks.
It's 2024. Using Azure should be a firing offense....

https://www.lastweekinaws.com/blog/azures_vulnerabilities_ar...
In theory. I've seen it not happen twice. (The worst part is that you can hit the Bitlocker recovery somewhat randomly because of an irrelevant piece of hardware failing, and now you have to rebuild the OS because the recovery key is MIA.)
There's potentially a huge issue here for people using BitLocker with on-prem AD, because they'll need the BitLocker recovery keys for each endpoint to go in an fix it.

And if all those recovery keys are stored in AD (as they usually are), and the Domain Controllers all had Crowdstrike on them...
LOL yeah I'm sure they'll get right on prosecuting that.
Or perhaps it's just because companies release features, planes, devices, etc. without any form of QA, aiming just to increase their profits?

In this case, has CS done any QA on this release? Have they tested it for months on all the variations of the devices that they claim to support? It seems not.
Berlin airport is down
afaiu google (and I presume other operators of large number of computers) deploy updates to their software first to a small set of nodes and only if after a given time the update has been deemed successful, continue to update an increasingly larger set til complete.

Isn't this done as well with automatic updates of end user software or embedded systems and if not, why not?
Things like hospitals, airlines, 911, should have multiple systems with different software stacks and independent backends running in-parallel, so that when one infra goes down they can switch to another.
Good day for OSINTers, APTs, redteamers, to find out who uses Crowdstrike on their endpoints.
Ask HN: Flexible Schema (Airtable Clone)
Not that I am building another Airtable clone, but I'd like to understand what the best way is to give the end users ability to add new fields. The requirement is to use a relational database.
So far, I have seen two approaches.
1. Using a Json column, not a big fan of this approach, as it will be difficult to do reports and searches;
2. Create specialized data abstraction layer, that allows adding, showing fields without structural changes to database schema.
Any other ideas?
It's the Torygraph. Only really read by people rich enough to blow that sort of money on a trip to [checks notes] Moldova.
I wonder how many of those orgs were "independently" audited by security firms which made passing audit without Crowdstrike specifically a hell.

Most of crap security I met in big organisations was driven by checklist audits and compliance audits by a few "security" firms. Either you did it the dumb way or good luck fighting your org and their org to pass the audit.
I did not mean to imply this, as there's a very long culpability chain. For this reason, I'm not sure if it makes any sense to imprison individuals for this. A lot of people playing a part in this causing such chaos.

But it is something to be very aware of for those of us who develop software run in e.g. hospitals and airlines, and should receive more attention, instead of only bringing up financial losses which is what usually happens. I noticed the same with the big ransomware attacks.
dumb techbro c-suites: what, why would you have an issue with a proprietary closed source app that frequently self updates and sends tons of data to a third party while essentially being a backdoor? We said we wanted security and this has Security(tm) all over the literature! Look we even have dashboards for the gui-ninjas like the security team!
STM32 Development Without an IDE
With small events cloud engineers scale better, with large events local engineers scale better.
OpenAI is releasing a cheaper, smarter model. ChatGPT 4o mini launches today
Having tried hard to only wear LTE watch instead of phone, I can confirm that yes, that is what Apple fears. They could easily turn AW into an iPhone replacement with a few fixes, but they won't.
AFAIK, most of the people I know that deploy CrowdStrike (including us) just do it to check a box for audits and certifications. They don't care much about protections and will happily add exceptions on places where it gives problems (and that's a lot of places)
BitLocker for Business stores the bitlocker key centrally. Still, it is a huge manual undertaking fixing every system.
It kills me every time I see a link to a github project that sounds promising, but there's no screenshot.
That's misplaced. Windows is an ancient platform. CrowdStrike is ubiquitous and routinely updated. There was no "move fast" here, at least on the part of the people operating these systems.
I've been in Ukraine last year and one thing I noticed that while people speak in Russian or in a dialect in private, they instantly switch to Ukrainian in public, like when ordering an ice cream from the street stall. They then switch back among them. It's fascinating how things changed in a few years.
Efficiency goes against resilience.

Can you imagine having just one road connecting two big cities to cut costs? No alternative roads, nor big nor small.

That will be really cheap to maintain, and you can charge as much as you want in tolls as there are no alternatives. And you can add ads all over the road as people has to watch them to move from one city to the other.

And if the road breaks, the goverment needs to pay for the cost as they cannot allow the cities to go unconnected.

We live in the middle-ages of technology.
I've tried casually to take this approach and what I've found is that basically none of the Prologs out there are really designed to be properly embeddable. Even Scryer Prolog, written in Rust, isn't really set up to linked into a Rust program and run this way. I was able to "sort-of" make it happen, but it wasn't a workflow that had been optimized for.

To be clear what I'd like is to be able to fire up a thread hosting a Prolog runtime and stick predicates into it and query it using an API in the host language's syntax. Instead the best I could do was munge strings together and parse result out, sort-of. And that was after a bunch of time spent trying to reverse-engineer Scryer's API.

I would love to embed a Prolog to host my application's business rules and knowledge. I could see it super useful in a game even (think of the myriad of crazy rules and interactions and special cases in a game like Dwarf Fortress...)
Considering CS Falcon causes your performance to drop by about half and does the same to your battery life, I doubt they have any sort of QA that cares about anything but hitting stakeholder goals.
When it comes to security products, the size of the customer base matters. More customers means more telemetry. More telemetry means better awareness of IOCs, better training sets to determine what's good and what's bad.
[dupe] https://news.ycombinator.com/item?id=40997585

https://news.ycombinator.com/item?id=40996248
> For instance, interpreting double-quoted strings differently from what the standard prescribes is not an extension in the sense the standard defines it, but a modification of the standard.

Agreed, but also minor as you can and should set the double_quotes flag, otherwise your program doesn't have portable semantics even among ISO Prolog systems.

> Even though it may sound easy to say "as long as that dialect has a reliable specification and implementation", I know no such system that exists, and what I see from systems that do not adhere to the Prolog standard makes me doubt that such a thing is possible.

Of course it is possible to program against the quirks of a given implementation. That's what you yourself are doing with your CLP libraries. As you note, your main target has different quirks from other targets.

More broadly, Scryer itself demonstrates that it's possible to program against a programming language that doesn't have an ISO standard but does have a good enough specification and an implementation that adheres to that specification.

> The systems that do not follow the standard often have elementary syntactic problems, such as reading a Prolog term that they themselves emit into a different Prolog term, a recipe for disaster and unacceptable in every domain I know.

You're painting with a very broad brush here. What implementations, and what kinds of terms? If your examples involve infix dot, that would be the kind of term nobody uses and nobody should use in modern Prolog, as you well know. Some of these syntactic problems only appear if you go looking for them. Minor syntactic annoyances will be caught in testing.

I agree that such things are bad, but they are knowable, controllable, and quite probably much less relevant in practice than you suggest.

Very very tangentially: The company I work for is very serious about its software supply chains. If we want to use external software for development, we must apply for permission. For that permission, actual programmers and lawyers trawl through the code and licenses and documentation. Scryer's license file lists one copyright holder, and there are many source files without copyright headers, and then there are many source files with copyright headers that name another copyright holder. Our lawyers would not allow us to touch such a system. If you're serious about promoting Scryer as a serious Prolog for serious use, you might want to consider cleaning this up.
It is also risk management 101 that managing (i.e. avoiding or insuring) risks doesn't come for free.

The cost and benefits of managing risks need to be balanced.

So I am not convinced that there need to be "at least ten alternatives" to be fail safe as society.

Where I agree with you is that these decisions should be deliberate and done after a cost / benefit analysis.
Yeah, manual GUI work. Like any good MS product.
Probably only a violation if you distribute the linked result. Not if you only install it.
Croatian (Balkan) Rakija is more like Greek Tsipouro. It is very easy to mistake though, since the names are so similar. Plenty of bulgarian tourists have been disappointed to get a totally different tasting alchohol from what they were expecting.
Yes, it offers very real protection. Crowdstrike in particular is the best in the market, speaking from experience and having worked with their competitor's products as well and responded to real world compromises.
Berlin airport is down. I guess it’s related
Finally the crowd has struck!

ba-dum ching!
Why on earth don't they have staged rollouts for updates?
Your original image might already be quite clear, so a simple comparison makes it hard to notice differences. I've tested with some clear images, and the differences become more apparent when carefully compared.
As a redteamer I guarantee you that a Windows endpoint without EDR is caviar for us...
There's a strong drive for everyone to do things the same way in IT. Some of the same pressure that drives us towards open standards can also drive us towards using a standard vendor.

> I agree with you in principle, but the only solution I can think of would be to split up a company with reach like CrowdStrike's.

Changing corporate structures doesn't necessarily help. It's possible that if CrowdStrike were split up into to smaller companies, all the customers would go to the one with the "better" product and we'd be in a similar position.
you know there's a setting to turn that off, right?
Perfect example of corporate doublespeak.

"The EU regulatory environment is unpredictable" translates to "our products don't comply with regulation, and we'd rather not get fined". It's good that the fines are high enough and enforced now that companies are at least afraid of them.

Meta is still having issues complying with the GDPR, which has been in place for 6 years now. There's nothing "unpredictable" about it.

> A Meta representative told Axios that training on European data is key to ensuring its products properly reflect the terminology and culture of the region.

Sure. You just can't hoover up data without people's consent, as you normally do. What a concept.
Have you tried somewhere else than a supermarket or franchise bakeries?

I have to say though it isn't easy. It's hard to find good bread in the UK. I had a salmon sandwich on a good wholmeal sourdough at a shop in the Canary Wharf tube station in 2015 and I still remember it.

The only way I've found to have a decent loaf of bread in the UK is to make it myself. I kinda recommend it. I don't really care about breadmaking, like I'm not seriously into it, but the bread I make at home is just decent bread and it's tough to find that in the shops.

And don't buy flour from the supermarket, either. I once tried the wholewheal flour from the Waitrose, after I got fed up with their wholemeal loaf tasting like cardboard. Well, the bread I made with their flour tasted exactly the same as their bread. There's something wrong not only with breadmaking, but also with flour sold in this country. But you can get good bread flour (hard white, wholemeal, spelt, rye, barley, anything you want) if you look around online a bit.
Yeah but if it's a hospital, they should be able to operate without these IT systems. Nothing critical / life-or-death / personal injury should rely on Windows / IT systems.
Good luck putting a payment terminal into island mode when it's in a bluescreen loop.
All my customers endpoints are on Linux based endpoints. Because our users' Windows apps run in vdi with disposable instances based off snapshots and highly restrictive networking on the Linux endpoints, none of our users are effected.

Running Windows on bare-metal was always obviously very stupid. The consequences of such stupidity are just being felt now.
be the change you wish to see
Was thinking about a bootable usb-stick that would do that automagically. But I guess it is harder to boot from a usb-stick in these environments than the actual fix.

I guess more feasible and even neater to do it if you have network boot or similar.
That's not really the problem here.

The problem is allowing a single vendor, with a reputation of fucking up over and over again, to push code into your production systems at will with no testing on your part.
True, though tbf it's still part of the running system.

I read that many of those affected are global orgs. When I worked at an oil major, everything was tested to oblivion before going into production in the DCs, the reason being to avoid precisely this kind of situation where at all possible. There were clusters set aside for operational acceptance testing to ensure everything, from business application right down to kernel, ran successfully. The idea of leaving auto-update on in any production system was unthinkable. Yet here we are.
Lol... Again, the point is that unrestricted is harder than restricted to something g specifically designed with this in mind. You go make your own comparison, I compare things that matter in my work. Your Stopwatch api is probably simple, the api to generate PDFs of financial projections that I have to support is not.
I have a GUI/Desktop on Linux, not sure what you're referring to?
It may not be their fault directly but it is causing Windows systems to bluescreen, which IS their fault and their responsibility, ultimately.
> These small 'downages' basically never cause serious issue.

Emergency Departments and 911 were knocked offline. People will indirectly die because of this, just like the last time 911 went down, and just like the last time EDs went down.

It's not alarmist, it's realist.
His customers do
i need something like this for the chromebook / android..

the only app that works fine with chromebook is its own gallery viewer, but has no bookmarks no annotations

in android theres only xodo which is paid and proprietary
A few others as well, it seems.
Lots of systems (not all) are able to reboot, and have CrowdStrike download the fix before the bad code is able to crash things. But otherwise, yes, you have to go to systems manually.
They have a Gartner Magic Quadrant on the landing page.

This is checkbox software, selling to decision makers in enterprises who will never see nor touch the software they are buying.

This kind of software where the user isn’t the customer is always terrible.
I am most annoyed by built-in RCE. Who thought that to be a good idea?
After a while, lesser the magic, the better.

One of the reasons Golang has had a use case in today's age is there is a need for a programming language with just functions, loops and if/else statements.
> there should be at least ten alternatives in any diversified set of critical infrastructure service providers, all of them instantly replaceable / forced to provide interoperability...

And does anyone actually know how to actually implement this, at the scale required (dealing with billions of transactions daily) in a way that would resolve the problems we are seeing?

It very much seems like a data access problem; places can't access/modify data. The physical disks themselves are most likely fine, but the 'interfaces' are having troubles (assuming that the data isn't stored on the devices having the issue).

But in any case how do you design a system that, if the 'main' interface is troubled, you can switch over, instantly, seemlessly, duplicating access controls, permissions, data validation, logic etc.

There is a reason everything is centralised because it makes no financial sense to duplicate for an extremely unlikely and rare chance. The world is random and these things will happen, but a global outage on this type of scale is not a daily occurance.

We'll look back in a few years and think "those were a crazy few hours" and move on...
Please at least an archive link. That website is trash.