skysight-inc/HackerNews huggingface dataset:
> (i.e. people die if these systems fail).

People definitely died today. 911 was down for entire states, dozens of hospitals cancelling surgeries, pharmacies not able to serve customers etc
I had a friend who was incarcerated for a time; he sent me a message from the "jail-approved" platform smartjailmail. In order to respond I had to purchase credits - each message I sent was 50 credits and I could include "return postage" (sending them 50 credits to reply) with a max of 2000 characters per message. Pictures cost 100 credits to send. The minimum number of credits that I could purchase was 500, and all transactions included a payment fee of a few bucks. Glad to see this changing as it struck me as a very predatory business model.
100% agree.

I'm starting to think these vendors are a higher risk and cost than not having them.
fair point, but 100k up hopefully it's a lot smaller. maybe you could pull harder on the rope from the ground as well to balance it somewhat. but yes, you won't be weightless the whole way.
Furthermore, the article states that it was "affecting customers across the Central US region". Doesn't it seem like they should have used "5:00 PM CDT" in the article?
Censorship slows China's AI advances
Phone calls should be a human right. The govt should just make these calls free. We want these folks to be able to connect with family and maintain connection to give them the best chance of integrating back. Charging for phone call is unnecessarily punitive.
Activism is mostly about awareness, because generally you believe your position to be the one a logical person will accept if they learn about it, so doing things that get in the news but only gets you a small fine or month in jail are preferred.

Taking destructive action is usually called "ecoterrorism" and isn't really done much anymore.
> Closed source security software is too often malware by design.

Can you be more specific? Genuinely curious what you mean here.
I wonder if it also has negative implications for finding life there—one of many possible explanations is the lack of biological forces breaking down and heterogenizing the surface.
I think I'm well past 15 on my laptop now. My desktop was unaffected, but I reach over and click restart every once in a while to see if something different happens.
I think they mean that the hash in the JSON record does not match the PDF file anymore, after the PDF has been changed by some other program.
Detecting "DOS" by putting the packets into a Python buffer seems... counterproductive.
> 1) Do you think that an organization should have no protections in place?

Do you think Crowdstrike offers protection ?
Don't forget the press releases all saying "We take security very seriously!"
Some decision tree algorithms use it to decide what variable to split on when creating new branches.
I know about update policies, but afaik those are about the “agent” version. Today’s update doesn’t look like an agent version. The version my box is running was released something like a week ago.

Is there some possibility tu stage rollouts of the other stuff it seems to download?
I can appreciate that and I can still agree with that definition, could be just a semantics discussion. — what I call music doesn't sit well with what is music as defined by our language. (Taking the blame here)

I like to think music exists beyond humans and humanity. Maybe far out there in the galaxy or in some other dimension not yet seen. Not exclusive to us, not an anthropological view, maybe spiritual.

The fact we channel it to express our emotions is incredible, and I love it, I am myself a musician and I rely on it a lot for this matter. — That said though, emotions are deep and complex and there is too much loss when attempting to convert them into a message. — _Maybe this is why there's a lot of copyright out there when artists channel similar sounds trying to express their feelings despite never hearing of those others who came first? Think the language being both extremely rich and poor in terms of what it can offer for this_

It may be that I am being too philosophical about it and like to look at it outside of the human realm. — Similar to the classic https://en.wikipedia.org/wiki/If_a_tree_falls_in_a_forest_an...
I wouldn't know, I could never afford it!
Crowdstrike released a change that should have been caught by automated testing. That does require an explanation, I think, and a change to prevent recurrence.
I wish NASA wouldn't use clickbait headlines :/ "Curiosity rover discovers sulfur crystals in Martian rock" would be nice.
There are similar products for Linux. My organization runs Cortex XDR, it has a kernel module.

Had a few calls with them to figure out its features and how it would impact the systems. They didn't even know.
Their disaster recovery plans include the same faults that brought them down this time, guaranteed.
Not all states have private prisons. Oregon, or example, prohibits them (and prohibits sending Oregon inmates to a private prison in another state). But we still have 9 cents a minute for phone calls. I think it's paid by the outside caller, though, not the inmate.

I generally support prison being a less-than-lavish experience, but charging for phone calls seems over the top. Inhumane, if it prevents inmates from talking with their loved ones. They're still humans, and most of them will get out of prison someday, we should keep that in mind.
As a QE, I wonder how QA process looks in this company. Someone put their stamp of approval on this release. Or did they?
Its built on cms with automation posting process
> these are real, well run companies with good fundamentals

I'm not disputing that. But even "real" companies don't warrant P/E multiples in the three-digit range, unless there's a very good reason to expect them to grow their profits by 10x or more in the foreseeable future – and that has to be the expected value of earnings growth (roughly, the average growth over all possible futures), discounted by the time value of the investment.

P/E multiples over 100 are practically never justifiable, except as "someone else will come along and pay even more" – i.e., the greater fool theory.
Teams isn't better than the competitors. SFB is MS too. You went from one POS to another.
What sort of storage device, just out of curiosity?
If said underwriters don't typically cover things like the current CrowdStrike problem, that seems like a pretty big case of misaligned incentives.
You will NEVER not worry
CrowdStrike, ZScaler, and the rest of these people surely have lobbyists that ensure their software is compelled by regulators.
> I read GP's post to mean that if you take a step back, Windows' history of (in)security is what has led us to an environment where CrowdStrike is used / needed.

Windows does have a history of insecurity, but it is no different from any other software in this regard. The environment would be the same in the absence of Windows.

Attacks are developed for Windows because attacks against Windows are more valuable -- they have a large number of potential targets -- not because they're easier to develop.
I think people misunderstand the deference standard that was actually overturned and explaining looper helps
that's also been updated as not being the greatest advice as they can use the lack of activity for that time period as being abnormal for you device which show suspicion as well.

just like not having any social media accounts looks suspicious. having a laptop with no data on it what so ever looks suspicious. if they want to find you as a suspect, they will find ways of doing it.
I don't know about surgeons, but nursing and labs have paper fallback policies... they can backload the data later.
Because it will look very bad if you answer, "No, our company has no Anti-virus because we are a macOS shop" on a security questionnaire
Security companies are always cowboys.

Gradual rollout? No no, we need the ability to respond to attacks and vulnerabilities fast.

Limiting the service's access and power, like we do for every other service? No no, we need to run as root and access every single user's SSH private keys and browser cookies. How else would we check they're encrypted, in line with your IT policy?

Secure boot? You'll have to bypass it for us so our 'security' kernel module can load, go into the BIOS and install this special key of ours.

Strict code reviews? We consider this bash script run as root to be 'configuration' rather than code.

Installing all software updates? No no, although we need to roll out our changes immediately, we don't support a new LTS Ubuntu release until it's been out for 6 months....
> Kurtz @ CrowdStrike: This is not a security incident

Of course it is a security incident. What planet is this guy on??
This is wishful thinking at its finest.

First off, lots of people in the former Soviet Republics (and beyond the Iron Curtain in general) speak Russian because that's what they had to learn in school and what they were forced to use in some public settings. Speaking Russian has absolutely nothing to do with religion, family values, holidays, food, celebration and traditions.

Second, the USSR didn't have a monopoly on the Christian Orthodox religion. Moldova, in particular, was predominantly orthodox centuries before it was occupied by the Russian empire in 1812. The shared religion, and the consequent values (including family values), celebrations and traditions have nothing to do with Russia.

Third, people don't need Internet randos to tell them what it means to be Russian. There's a very simple way to figure out if the "identify as Russian": you ask people if they identify as Russian, if they say yes, then they identify as Russian, if they say no, then they don't. As of 2014, that's true of about 4% of Moldova's population. Telling the other 96% that they're actually Russian is exactly what gets people angry about these things.
I think about this all the time.

Like if I kill someone of course I go to jail. But if I get some people together, say we're a company, and then kill 100 people, nobody goes to jail. How does that work? What a huge loophole.
It's cool how some minerals are just lying out in the open on Mars. On Earth this would have been washed away or buried under the soil.
For me what takes the fun out of computing is that package management is severely broken. I simply haven't been able to run the latest in DL because of driver issues, compile issues, issues with containers, etc. Sure I can get it to work if I spend 1+ days on it, but it just isn't fun anymore to try out something new.
"Well integrated" is honestly a stretch, but it is fair to say it's integrated with no extra setup.
This is so cute. Coincidentally, my daughter has the same name as your domain, and I myself was making websites at exactly that age (but mine were about cartoon characters). Love to see this.
I agree with your point, I just would like to point out maybe the OR-tools they meant is the one made by Google, so a specific one: https://developers.google.com/optimization
Also I don't think you can use NIM packages in production without a subscription, and I wasn't able to find the cost without signing up. Also NIM package for Mistral Nemo is not yet available anyways.
There's Now 10k Active Satellites in Orbit
I think it's eventually manageable for some subset of medical procedures, but the transition to that from business as usual is a frantic nightmare. Like there's probably a whole manual for dealing with different levels of system failure, but they're unlikely to be well practiced.

Or maybe I'm giving these institutions too much credit?
At least for some time, this was completely ignored. Not sure if it works again.
Easily done if you target x86-64 statically
Sounds like a race condition that some systems hot and others don't
OMG. I not from US and I never heard of this practice, but it's literally sounds like modern financial slavery.
And I guess if they use bitlocker then they need to enter the key as well? Imagine doing that to thousands of computers
The Real Reason Why Music Is Getting Worse / Rick Beato: https://youtu.be/1bZ0OSEViyo

This might provide part of the answer.
In some people’s minds “the government” is a big amorphous mass which includes everything from the local city planner to congress and the post office and their state DMV. Ignore the downvotes.
Why did it put you off?
Japan's real concern here is depopulation, as the article later notes.

Just last year, The Guardian covered ( https://www.theguardian.com/world/2023/may/29/baby-boomtown-... ) a Japanese town which was sustaining 2X the Japanese national birth rate.

(The Guardian is a very pleasant source of news. Beyond that, it's best to keep your expectations low.)

One wonders just how dire the problem would need to become, before the Japanese government would resort to measures which had a real-world history of actually working.
If the affected organizations had such an organized setup, they probably won't need crowdstrike in the first place. The product is made so that companies that don't understand (and won't invest) in security can just check that box by installing the software. Everyone is okay with this.
https://learn.microsoft.com/en-us/defender-endpoint/enable-c...
I have a hunch this valley is hiding many more geological secrets. If you look at the map, Curiosity is finally arriving at the more interesting bits of Mt. Sharp.

https://science.nasa.gov/mission/msl-curiosity/location-map/
Same in Russia. Evan Gershkovich has been sentenced to 16 years in prison today.
I think Moldovans are doing much better that Native Americans in the US.

"have their own versions of the atrocities in Congo"

I think you need to read on the history of Congo.

"except with Russian/Soviets at the privileged end"

This is where you are wrong. Russians suffered from the crimes of bolshevik's/Stalin's regime just as much.
Eating just olive oil? Now not only am I starving, I'm also soiling all of my remaining clean pants?
When a metric becomes a target ...
The problem isn't working too hard. It's working for others. We should be starting companies and then not selling it to FAANG.
Their legal team would definitely not allow nothing else.
> If you can get to a polling station you have more influence than the average Iranian.

Have you not been watching the news? Iran has proven itself to be at least better at performing like a democracy than most of our allies in the region, excepting maybe Turkey.

Regardless, it's extremely difficult to wield real influence with a vote (or via advocating for any sort of elected official) as most problems are directly avoided during campaigning, and citizens can be safely ignored when reelection isn't under threat. And anyway, most of our society is owned privately and outside the reach of democratic oversight.

Anyway, lip service to democratic processes is not the same thing as actual democratic will. Just because you're performing the aesthetics of what you're taught democracy is doesn't demonstrate any actual influence. For the most part, problems are decided long before they hit the ballot box and you can only really weigh in on certain wedge issues.
Good thing we aren't centralized with the cloud - oh wait!
At least with AI you could do something like, destroy all copies including backups, destroy all training data and other code used to generate it. Which to me actually doesn't seem unreasonable punishment.
Looks like crowdstrike are just delivering what their name promised, striking crowds around the world
Other stocks will go up as a result. It's not like money is ever destroyed.
You might be interested in my project Plandex[1]. It’s similar to aider in some ways, but one major difference is that proposed changes are accumulated in a version-controlled sandbox rather than being directly applied to project files.

1 - https://github.com/plandex-ai/plandex
2 calamities so close together in space and time. It makes you wonder if there's a connection.

They are both universally distracting. That's one special thing that they share.

A conspiracist might suggest that our attention is being handled.
I assume from your rhetorical question that you don't. I personally don't know enough about it to say whether it does or not - but, I will make what I believe is a reasonable assumption and say that all else being equal, yes, a fleet of machines with a EDR sensor installed is more "protected" than a fleet without.

If you have a point to make, why not just say what you are trying to say; it will be more effective discourse. I am genuinely curious.
Have you tried turning it off and on and off and on again?
Mostly Mistral/Mixtral models in addition to Whisper.
What do you feel if you're very far from any nearby planet sized object, then?
Wow, I didn't notice this hit the front page until now, will be answering questions momentarily!
What strikes me as the likeliest implementation of a fair-market system is what we have in the Federal Acquisition Regulations (FAR) system, which is that the bureaucracy of ensuring fairness is so high that we end up with $400 tablets costing $4,000, as tech companies try to get into the space but find out that they need to hire a team of contract attorneys and compliance officers and DCAA compliant time-reporting software and retraining their employees to use it and be subject to regular audits etc. etc.
Very, very few people are going to click on the headline you've suggested, and engagement with the public is pretty important for NASA. "Martian surprise" is something that will get people interested, if only to click the link to see the picture of sulfur crystals and then leave the page 5 seconds later. Other news sites will also run with that headline, spreading the engagement far more than just a NASA article.

Getting public engagement is a part of how they defend (and increase) their budget, so it makes sense that they would be more likely to use click-baity headlines. ¯\_(ツ)_/¯
IMO the fault lies 100% at CrowdStrike. The software does not only run on mission critical systems, but also one such systems, where a automatic update is okay and even wanted, where the operators maybe just don't have the capacity to run tests before that. Many people trust CrowdStrike, and yeah, sure, everyone should do tests before updates in a perfect world, but in reality (as we now see) this is not always the case. Not because people are actively sabotaging themselves, but often the priorities are somewhere else, that's why they are using high-quality software, and trust their automatic updates to not cause a total blackout.

I install software -> PC crashes and can't recover itself -> it's the Software's fault.
Sure, I could have prevented it, but this doesn't change who's at fault.
I'm trying to imagine anyone on the CrowdStrike board saying, "As a critical infrastructure single-point-of-failure, we gotta fortify ourselves with McAffe culture, from the top, down!"

In their defense, maybe they don't care about the service they claim to provide, and are just looking at it as a money machine black box.
Germany is not affected since it's Krautstrike only.
Soylent and Huel both only claim around a year of shelf life, hardly in the same category. Whether that means actual degradation in their nutrient content or just taste/texture is a different story.
I went deep into this earlier in the year, here are a few resources I found helpful:

- https://www.ariss.org/uploads/1/9/6/8/19681527/k9jkm_2012_sy... has a good overview of how to hit the ISS (and other sats)

- https://www.va3hdl.com/projects/gpredict-and-hamlib is the software stack you probably want to play with
Hate the game not the player.
I think it was a Dodge charger. That pro-trump KKK guy in the gray car who drove through the crowd while the crowd was I think it was a George Floyd protest?

Also heard today crowd stroke.
Updates do get tested. Windows updates can be held and selectively rolled out when a company is ready. As far as I can tell though, CrowdStrike doesn't give companies the agency to decide if updates should be applied or not.
TPMs embedded in the processor (fTPM) are pretty popular and it's a lot harder to sniff communications that stay inside the cpu.
CYA is the reason you do the audit. But the reason for the audit's existence and requirement is definitely so that hacks don't happen. Don't tell me regulatory agencies require things so that companies can hide behind them.
If you’re only doing vacation travel planning, sure. But there’s a long tail of advanced functionality used across all kinds of industries (with plugins upon plugins) that are most certainly not even close to being supported by any of the options proposed.
Ho do they test this before they roll it out? Looks like a bug thats easy to spot. I would presume they test it at several configurations and when it passes the test ( a reboot), they roll it out. Has this been tested?
That sounds exactly like passing on the costs to the inmate.

Now they are barred from passing the costs to the inmates.

I wonder if the telecoms can opt out of offering service to prisons
Im suspicious that turning it off entirely would also provide equivalent protection as kernel and user space mode. If not more more.
Loss of oxygen in lakes and oceans
With some of the worst engineers. I had the misfortunate of working with a couple of Microsoft principal engineers and I still shudder at how bad they were and how many layer of abstractions they could write.
Node.js – v22.5.1
Gosh, I really hope our premier scientific entities don't have to rely on page visits (ignoring bounce rate) to measure their impact or get funding :/
> If the balloon malfunctions, they can feel weightlessness until they reach terminal velocity

Until they start decelerating, which is immediately. They’ll also feel it fairly rapidly, I think.

https://en.wikipedia.org/wiki/Reduced-gravity_aircraft#Opera... (emphasis added):

“The sensation of weightlessness is achieved by reducing thrust and lowering the nose to maintain a neutral, or "zero lift", configuration such that the aircraft follows a ballistic trajectory, with engine thrust exactly compensating for drag”
Oh wow. I found this by him too: https://theeggandtherock.com/p/the-ihole-by-julian-gough-fic...

Really good! Not sure how I've missed this guy. I guess I never did play Minecraft all the way to the end.
That’s the most charitable hypothesis, and I agree could be possible!

I myself have ninja-shipped a fix a minor problem, but then caused a worse problem since I rushed it.
> so you just write a netboot script to mount the filesystem and delete the file

Because writing such a script (that mounts the filesystem and delete a file) under stress and time constraint is a great idea? That's a recipe for a worse disaster. The best solution, for now, is to go PC by PC manually. The sole reason the situation is as is was the lack of backstage testing.
It would be better than Windows for sure. You’ve got A/B updates, verified boot, selinux, properly sandboxed apps and a whole range of other isolation techniques.

For something truly mission critical, I’d expect something more bespoke with smaller complexity surface. Otherwise Android is actually not a bad choice.
This entire point of this product is to use the apple watch inside this case instead of a phone. If you're using this product, no, you won't have a phone nearby and synced to it.
I'm shocked that you're the only one pointing this out. This is clearly a manic episode. You can tell this was written in one go. Some users have pointed out the authors absolutely absurd resume.

And despite the fact that this article is filled with absolutely wild claims and martyr-laden tangents, the response here on HN proves that passion is worth more than substance in the tech world. Which explains a lot.
As I was reading the article just now it made me wonder: does Mars have a really diverse landscape -- that just happens to be all covered in layers of red dust?

I have no idea. But I'd always thought it looked so homogeneous from the photos. But maybe it's just that the dust covers everything?
Microsoft has serious questions to answer after the biggest IT outage in history