skysight-inc/HackerNews huggingface dataset:
> It just grabbed my attention when people say "software X treats people like they're stupid", and then they want things done for them.

It's a childish argumentation though. As a former GNOME user, the most infuriating things is that stuff was there (already developed) and was working fine, and got removed or dumbed down so much it made GNOME unusable.

It's not about wanting stuff done for me, it's about fine software being actively, purposedly made worse.
I feel like this is sheer incompetence on Twitter’s part. Some ad blocker I have on my iPhone stops Twitter from working and has for several months. It hasn’t prevented

* Me seeing adverts on Twitter
* Me being tracked by Twitter.

It’s yet another half-assed change in Twitter and it turns out that the technical incompetence of it has been my final straw. I’ve been trying to kick the habit for years but Twitter have finally done the job for me.
I don't think it's possible either. But the moment my employer forces me to install a surveillance rootkit on the machine I use for work—regardless of who owns the machine—any trust that existed in the relationship is broken. And trust is paramount, even in professional settings.
6. No development process, no testing.
Very interesting. An example that users of this forum will be familiar with is Edsger Dijkstra.
in programming? otherwise the semi-colon has a history that doesn’t seem to be influenced by final characters https://en.wikipedia.org/wiki/Semicolon
Not a notational consideration that occurred to the Romans
I’ve heard quite a few, unfortunately hearsay, reports that CrowdStrike’s engineering practices are not good. Stories I’ve heard:

• Developers building binaries on their own local systems (identified via metadata) that are then pushed out globally. Inference: 1 xz-insider = global ring0.

• Customer success teams sending 50 page reports on why they can’t do staged rollout (“respond to 0days”), but reality is they’re unwilling to invest in the eng infra to do so.

• When they broke Linux endpoints a few months ago, “post mortem” was ignored and nothing remedied.
> A veteran investigator of video-game leaks reveals the tricks of the trade

Revealing tricks of the trade might be... leaking.
That's bullshit too.

I can build a webcam with an rpi that will play CS better than any human and only communicate with the gaming PC through a mouse and keyboard.

Anti-cheat systems need to look for movements that are super human, no rootkits required.
They'd also have feedback in the sense of "an update was pushed out and none of the updated machines have given us an ACK of 'health: OK' after rebooting".
Algorithmic social media streams are the actual Virtual Reality. The algorithm has agenda by design to create engagement. Another attribute of social media is that you are consuming information through personas not just some faceless article. This creates emotional attachment that divorces you from evaluating information in unbiased way.
You first and do it again within Squarespace, be a role model then and work for free in your organisation.

Why don't these executives all work for free and take no pay?

All the work these executives are doing is just yapping to the CEO about what the people they manage have done.

The people who do the real work shouldn't be working for free.

Such an asinine article, no wonder Gen Z doesn't listen to millenials.
I don’t disagree with your assessment.

But would you agree that if we were to pluck people at random from the journalists population and from the Twitter user base, the first group has a higher probability of returning someone who’s trustworthy when it comes to news reporting?

I’m not saying there aren’t trustworthy people on Twitter. After all there’s plenty of journalists. But there’s also plenty of shitposters. And random people spewing nonsense.
Like sile
So if I understand correctly, this puts x.com under the same entity as twitter.com so third party cookies are allowed between x.com and other twitter sites?
Floorp Browser
https://developer.nvidia.com/blog/nvidia-transitions-fully-t...

Not upstreamed yet so I’m guessing it will take a while to reach Debian.
TPM offers key security guarantees: it ensures the integrity of the boot process, provides secure storage for cryptographic keys and sensitive data, and allows platform attestation to prove system integrity to remote parties. These guarantees benefit system owners by protecting hardware from unauthorized changes, software vendors by securing their software environment, and remote parties by enabling trusted transactions.

TPM isn't just for DRM. It ensures overall system security and trustworthiness. A website might query a TPM to verify a device's security before granting access to sensitive data, but an ad network has no reason to disable DRM. If they try, it's suspicious and unethical.

The TPM-js mentioned is a virtual TPM that shows how TPM works without actually accessing the hardware TPM from a website. It's purely educational.
I actually had a concurrency bug that I was able to capture with rr: an MPI job where I only ran rr on rank 0 and managed to figure out where a different send/recv ordering was causing issues. In fact, it was also a Python model that ties in with a lot of native code generation, so quite a complex issue.
I did math competition when I was in high school and the prize I won opened the door to a top university for me. I would say wrestling with a problem with limited tools (no calculus, no advanced algebra etc), finding a solution as elegant as possible is a game that I enjoyed at that time and still enjoy to this date (I'm close to 30 now, still challenging myself with IMO problems from time to time). But that's it. A game is a game and whatever you do inside the game world, no matter how fancy it is, is not practical in the real world. I didn't feel any privilege compared to fellow students without that experience after entering the university.

Getting into the "higher math" world was really painful for me actually. Seeing how some "modern" techniques (which has already existed for ~400 yrs, not literally modern at all) have solved the problem I struggled with in such an ultimate way made me feel overwhelmed. I felt like a track athlete, gloating over how fast I was running, realizing how modern transportation has revoluted - people no longer move long distances with human power. The quality a good driver needs is attention - on the road and the car simultaneously - not a pair of sporty legs.

The transfer from high school math olympics towards "higher math" requires not only practically a major upgrade in knowledge and toolsets, but also some shift of thinking paradigm - the task is not looking for an elegant and ingenious shortcut to a particular problem, but a highway that is general and inspiring to a fully new field (like how equations opened the door to linear algebra and everything subsequent). I pushed myself to embrace the transition, but it didn't seem to work. I managed to pass the exams and obtained a higher degree, with some expertise in a particular field of application. Still, I always have the feeling that my mathematic understanding is like house built on sand and lack a solid foundation. There is some sort of chasm that I failed to break through...

I agree with the part about mental skills, partially. Experience with math competition improved my concentration and persistence. I found piano practice more contributing in this means.
Hilarious! That's a fantastic name and an and an awesome side effect.
I was asked in a PM how I use the prompts. Basically, whenever I need to write some new code for a project, I start by making a prompt out of the relevant parts of the repo, paste it into GPT or Claude, and follow up with something like (random made up example):

——

I want to add a feature to my Content.js component. In the table that displays names of animals, I want to add an Edit button in a new column on each row. When clicked, it should bring up a modal that allows me to edit the name and emoji of the animal.

Review my codebase to see how CRUD actions are implemented for other features. Make sure you follow the established code patterns in the project.

Before starting to code, consider best practices for UX of a feature like this and make sure the implementation is user friendly and follows best practices.

After reviewing the code, describe how you will implement the feature make a plan for how to implement. After that, write the complete code for the implementation.
It was not a call to replace windows systems with linux, but to replace it with specialised OSes that do less, with better stability guarantees.

And building something around microkernels would definitely not be a bad starting point.
Or if you value community and realize all the folks with ambition leaving an area is sad for that community. I don’t have to be cheering for my hometown to win to think it’s sad someone must choose between the community they grew up in and using their talents.
Traffic calming can be literally some poles or some pots with plants in them. It's the cheapest form of "infrastructure" after paint.
I wonder if the root cause of this is the notion that one can tack "security" onto a system or inject it into a system, instead of it being a holistic perspective, with appropriate use of sub-components and rules.
I’d also maybe add another one on the Windows end:

6) some form of sandboxing/error handling/api changes to make it possible to write safer kernel modules (not sure if it already exists and was just not used). It seems like the design could be better if a bad kernel module can cause a boot loop in the OS…
There are many finite problems that absolutely do not admit finite solutions. Full stop.

I think the deeper point of the paper is that you simply cannot generate an intelligent entity by just looking at recorded language. You can create a dictionary, and a map - but one must not mistake this map for the territory.
How up to date is this? It seems to be missing a bunch of newer calls, at least for x64.
> Viruses don't move that fast

Yes they do? And it’s more akin to a shared immune system than a single organism.

In this case, it’s not like viruses move fast relative to the total population of machines, but within the population of machines being targeted they do move fast.
__
√–I
Why would you want to mold yourself into corporate environment that praises management-style over efficiency? Talking lot and saying nothing is often used for keeping certain facade or expectation of work or efficiency in corporate world.

But if you are interested in becoming a leader to inspire people through talks, I suggest reading other people's speeches and letter like what Albert Camus or Einstein wrote to convey information to audiences, not their books but letters and speeches to understand how they effectively conveyed information.

In the corporate world, the tendency to "talk a lot and say little" is used to maintain appearances and complicate matters. You should not mold yourself to that. But if you want to become an inspiring talker,

1. find something you genuinely care about.
2. study speeches by people who are passionate about their subjects.
3. refine and iterate on your speeches.
4. practice delivering your speech to others, observe their responses, and refine it until they also start to care about what you care about.

My personal opinion is don't read self help books, those are always static, often never matches one individual's true experience since it is taken from someone else's.
Not to mention the fact that if one of those companies get infiltrated the attacker will have kernel level access to millions of computers. There is also the fact that some of these anti cheat software are bundled with popular games produced in China.
> But EVs can charge from renewable sources and then they don't have any fuel-related emissions.

That was my point. Maybe the paragraph order was confusing.

> Roads are used for going from where people live to where they want to go.

They (or stroads, or highways) shouldn't be used in place of streets. A city should have the minimal set of roads to get the job done, everything else should be traffic calmed streets.
Don't forget the river IJ, sounds like "eye"
RAG for a Codebase with 10k Repos
> that’s long been the case, which is why she had to get creative when she was starting out nearly 20 years ago

Many years ago there weren't planes or even electricity. Why don't do we go back to the stone age? Start by doing marketing on stone tablets...

The world improves. Technology advances. Some people don't. It's sad that a lot of them are in a position of power.
If only we could train the humans like the crows.

Also - https://www.npr.org/2008/03/04/87878028/inventor-trains-crow...
Dupe? https://news.ycombinator.com/item?id=41013000
A lot of them are feasible, or have Americans suddenly become the "we can't do that" people?
Is the UK that particularly better than all the countries on the continent? And comparing US/Australia/NZ with Europe in the regard isn't exactly fair (they are much better at controlling and picking who can or can't come).

US specifically already has extremely high crimes rates (compared to most developed countries) which might overshadow any effect immigrants might have.
China is the West's corporate R&D lab. Can it remain so?
'Being ignorant is not so much a shame, as being unwilling to learn.'

Back in the day, you could install windows XP and be infested in minutes https://en.wikipedia.org/wiki/Blaster_%28computer_worm%29
Because kernel needs to parse the data in some way and that parser apparently was broken enough. Whether it could be done in a more resilient manner, I don't know, you need to remember that antivirus works in hostile environment and can't necessarily trust userspace, so probably they need to verify signatures and parse payload in the kernel space.
I'm pretty sure I was taught the letter y (I-grec) as part of the alfabet and not the ij (I'm Dutch as well). The other day I was surprised to see that an alfabet song that my kid was watching used the ij instead of the y. And I thought you were talking about IJsselstein, but saw there's indeed also Ysselsteyn, and they're not the same town (though pronounced the same). Interestingly we've then 3 ways to write the same sound (though y can also be pronounced as 'ee', e.g. Yvonne); y, ij, ei, oh, and I suppose 'ey' should be counted as well though that's not used in modern spelling. Cool
I'm pretty conservative but i f I found my teenage son browsing the buttplug.io library on github I wouldn't be very upset. It's funny and midly erotic with no visual cues, something that is not a problem for teens.
Cassette tapes doubled as music storage and data storage for machines like ZX Spectrum and C64. You could just copy software like you would copy a music cassette. Code via radio would be as easy as playing a song. Another time long gone computer magazines would print code that you could enter yourself! Before that Sussman is reported to meditate on code, and acolytes where supposed to create machines that could run that code.
Classic Mac Kaleidoscope Scheme Spotlight (2004)
AMD beating apple still won't solve vendor hell of drivers on other laptops. Just like it won't be able to fix sleep mode in Windows.
Study highlights large,unequal life expectancy declines in India during Covid-19
Do you have evidence for that claim?
Or disregard silicon entirely and use vacuum tubes combined with relays.

Not particularly micro, but a processor nonetheless.
It's not so much that I want that, more that it's a basic and requirement for fixed-width usages, and is easily attained by aarch64 & x86. Whereas RVV's potential of tradeoffs clearly interferes with that.

And if hardware making bad tradeoffs for fixed-width usages ever makes it to general-purpose usage to any significance, RVV as a whole would end up being required to be considered as not fit for fixed-width stuff (outside of extremely important & well-funded things where people can afford to add manual tuning for each separate funky CPU, but it's a pretty safe bet that most developers won't have every single piece of RISC-V hardware.. especially that which they would hate).

Without reasonable performance guarantees, "RVV can imitate NEON" is as useful of a statement as "base RV64G without any extensions at all can imitate NEON". It's just stating that it's a turing-complete system.
Warning to Mac users: you'll need at least ruby 2.7 to run this because it uses a feature called 'argument forwarding'. Looks like the latest ruby installed on macOS 15 is 2.6.

I eventually got it working with a combination of techniques from [this stackoverflow post](https://stackoverflow.com/questions/8730676/how-can-i-switch...) but it's not left my system in the cleanest of states.
There's a few of these floating around that are generally missing something - recent syscalls, types, etc. Thank you for such a complete one!
1. I do know, higher speeds, higher particulate production from road and break wear.

2. Yes, it is changing, LOL. And this is not about breaks. I was talking about power consumption. EV power consumption, unlike ICEs, is linear. So EV are obviously more power efficient at lower speeds. Besides the particulate generation aspect outlined before.
Is it "eye" or "ey"? I remember "destijl" pronounced "de steyl" and not "de style".
I think some of the information here is misleading and a bit unfair.

> being too intrusive and affecting their workflow

Kolide is a reporting tool, it doesn't for example remove files or put them in quarantine. You also cannot execute commands remotely like in Crowdstrike. As you mentioned, it's based on osquery which makes it possible to query machine information using SQL. Usually, Kolide is configured to send a Slack message or email if there is a finding, which I guess can be seen as intrusive but IMO not very.

> reading and reporting all files

It does not read and report all files as far as I know, but I think it's possible to make SQL queries to read specific files. But all files or file names aren't stored in Kolide or anything like that. And that live query feature is audited (ens users can see all queries run against their machines) and can be disabled by administrators.

> web browsing history

This is not directly possible as far as I know, but maybe via a file read query but it's not something built-in out of the box/default. And again, custom queries are transparent to users and can be disabled.

> Kolide's whole spiel about "honest security"[1] reeks of PR mumbo jumbo whose only purpose is to distance themselves from other "bad" solutions in the same space

While it's definitely a PR thing, they might still believe in it and practice what they preach. To me it sounds like a good thing to differentiate oneself from bad actors.

Kolide gives users full transparency of what data is collected via their Privacy Center, and they allow end users to make decisions about what to do about findings (if anything) rather than enforcing them.

> It's built by Facebook alumni, after all, and relies on FB software (osquery).

For example React and Semgrep is also built by Facebook/Facebook alumni, but I don't really see the relevance other than some ad-hominem.

Full disclosure: No association with Kolide, just a happy user.
> Except for owner consent

There isn't any. None that is meaningful. Sure, you can trick someone
into 'signing' something, out of desperation and confusion. But the
average person has no capacity. It's not that people are stupid, they
are simply not informed nor are they ever entreated to anything that
even looks like an actual contract. This is the colossal elephant in
the room of digital tech.
Given the fact that the software itself allows basically unfettered remote access to the "endpoint" machines it's installed on, one would think they'd get more than just an ACK when one boots up. But yeah, that would be a reasonably low bar to check on a few dozen devices before bricking everything in the world.
Giving someone else [edit: remote] root access to your computer is a bad idea. For Windows users it is bad enough with Microsoft. Adding another one is just adding to the risk.

Centralizing power is asking for abuse.
> This is why the fake reviews are primarily located on apps that are popular and cheap

Popular and cheap are relative terms. The Mac App Store is vastly less popular than the iOS Store. And even the cheapest upfront paid apps are significantly less popular than the infinitely cheaper free to download apps.
Depends what you consider malware, apparently.
This is cynical thinking that causes corruption and incompetence to thrive. People have a say in their government but often refuse to use it for good. That's how bad leaders get into power.

Many countries continually elect smart and competent leaders and become prosperous, but some people have somehow convinced themselves that they have no say in politics, meaning they don't care when their system rots with horrible leadership.

This cynical thinking is what has ruined many third-world countries, and I hate to see it propagated.
The answer to both those questions is you can't. So you you either
need to make other provisions at different levels of the stack or
design your architecture to make them irrelevant to your security
model.
Yeah same for me. Actually the time I really wanted it was on Mac and unfortunately it only works on Linux.

There is Undodb which works on Mac and maybe with multithreading (not sure about that), but unfortunately it costs about $50k.
my impression is, they don't test content updates the same way they do code updates or at least not in the same scale and test cases.
I mean, you are right but it still feels wrong to see a lawyer bragging on the internet about shutting down a kid that basically just peeked in a toy his parents brought him.
This actually sounds like a workable idea, but the implementation would be extremely thorny (impact on covenants, governance, voting rights, non-listed companies, etc) and take forever to get done. It would also punish everyone equally, even though they clearly do not share equal blame.

You probably want, in addition to your proposal, executive stock-based compensation to be awarded in a different share class, used to finance penalties in such cases where the impact is deemed to be the result of gross negligence at the management level.
We’re talking about kernel drivers here.

I think they warrant some extra attention by Microsoft.
Crowdstrike isn’t installed by the average person. It’s selected and installed by an organization’s IT and/or Infosec teams. Just like everything other enterprise security software.

Those teams 100% have the capacity to make an informed decision.
AMD RDNA 4 GPUs to Feature Enhanced Ray Tracing Architecture
Setting aside the possibility of deploying an EDR like Crowdstrike just being a box ticking exercise for compliance or insurance purposes, can something like an EDR be used not because of a lack of trust but a desire to protect the environment?

A user doesn’t have to do anything wrong for the computer to become compromised, or even if they do, being able to limit the blast radius and lock down the computer or at least after the fact have collected the data to be able to identify what went wrong seems important.

How would you secure a network of computers without an agent that can do anti-virus, detect anomalies, and remediate them? That is to say, how would you manage to secure it without doing something that has monitoring and lockdown capabilities? In your words, signaling that you do not trust the users?
Ask HN: How to reliably auto assign categories on posts?
I have website that has thousands of posts and I want to auto assign categories to each of them so I can implement a category filter. What are some good ways to easily and quickly do this?
I go the other way, it's absolutely their fault. Their historical business model of monopolizing the enterprise while outsourcing security is at the root of all this. The same thing could happen with Crowdstrike on other platforms, but it's only on Windows where these suites are considered essential.