skysight-inc/HackerNews huggingface dataset:
Siemens or GE or whomever built the MRI machine aren't really experts in operating systems, so they just use one that everyone knows how to work, MS Windiows. It's unfortunate that to do things necessary for modern medicine they need to be networked together with other computers (to feed the EMR's most importantly) but it is important in making things safer. And these machines are supposed to have 10-20 year lifespans (depending on the machine)! So now we have a computer sitting on the corporate network, attached to a 10 year old machine, and that is a major vulnerability if it isn't protected, patched, and updated. So is GE or Siemens going to send out a technician to every machine every month when the new Windows patch rolls out? If not, the computer sitting on the network is vulnerable for how long?

Healthcare IT is very important, because computers are good at record-keeping, retrieval and storage, and that's a huge part of healthcare.
> Windows should NEVER blue screen for third-party software.

Agreed, it's a Windows weakness. It should be improved. But if the system boots normally even if something like CrowdStrike fails, then you create other problems, which may be more serious than a BSOD.

I don't put the blame on Microsoft because enterprise customers should know how Windows works. Should we use Windows and some low level, 3rd party, remotely updated software (without a slow, controlled rollout) if you can't have BSODs? Yeah...

It's a big "cock up". I blame mostly CrowdStrike because they're the ones who messed up. Then we have those who decided to use Windows with CrowdStrike even on very sensitive systems. Microsoft is at fault for creating an OS with this weakness, but this is how Windows works... if it's not good enough for the task, don't use it.
> Windows should NEVER blue screen for third-party software. This is definitely as much Microsoft's fault as anyone's.

It's Microsoft's fault that someone wrote drivers for its OS?
No. The physician will be running a standard ER code protocol, following a memorized flow chart.
And Valorant, CS2, CoD dont run on macOS due to anti cheat :)
It's not fake reason; it's a very real solution to a very real problem.

Of course companies are going to abuse it for grotesque profit motive, but that doesn't make their necessity a lie.
On the bright side for those that have always wanted to travel to other worlds and terraform them, we'll now have an opportunity to have that experience without the travel.
> he lacked even the most basic technical competence in the fields where he was supposedly a world-class specialist

Pretty ironic Craig also suggests to put digital certificates on the blockchain instead of them issued by a computer or a cluster of computers, in one place, which makes them a target. A peer to peer network is much more resilient to attacks.

Was the problem, or a part of the problem, that the root certificate of all computers was replaced by CrowdStrike? I didn't follow that part closely. If it was, then certificates registered on the blockchain might be a solution.

I'm totally not an expert in cryptography, but that seems plausible.

As a side note, it is only when i heard Craig's Wright explanation of the blockchain that the bitcoin whitepaper started making a lot of sense. He may not be the greatest of coders, but are mathematicians useless in security?
Yeah you're right. Although, how bad would "S3 is deleted worldwide" be? Or "RDS is down for the foreseeable future"? So IDK... The other problem with them is how big they are, so you can't take proportional weights in them, which messes with risk a bit. I think this is a crap strategy but an interesting idea. As others said, the sentiment scanning probably has a better shot, and you pay the huge spread trading outside RTH.
The vast majority of animals are cattle/livestock for meat production.

If we want to be alright, we'll probably want to start reducing the cattle headcount.
No, I really just want the chord name: C, F#, G/B, etc.
It's a blowout. That means what it sounds like. An explosion and a fire. To fix it, you have to put out the fire. Once you put out the fire, you're still releasing methane.

Methane is flared instead of released under normal conditions if it's not being captured. A blowout is very much not normal conditions.
I think it's a text layout rather than a text rendering issue.
> If moar hardware is all you need, Nvidia would have the best models in every category right now.

Nvidia is making boatloads of money right now selling GPUs to companies that think they will be making boatloads of money in the future.

Nvidia has the better end of things at this very moment in time.
I don't understand why they deprecated <center>, <b>, <i>, <u>, I still use them...
I disagree. Not necessarily in principle, but because there is no good way for a passkey app to distinguish between a competent user and a malicious actor pretending to be a competent user. Passkeys are, in a sense, very very dangerous — with passwords, everyone knows that a password can be compromised, and any competent security system needs to tolerate passwords getting compromised. But passkeys (and TOTP secrets and such) are treated as long term secrets. If a website enrolls a passkey supposedly attached to an Apple keychain, then that website would like to be able to trust that a compromise of the Apple account that is subsequently recovered will not result in a persistent compromise of a passkey that predates the compromise and recovery.

If a passkey can have its private key exported, by anyone at all, then this property is lost. I do not want access even to my own passkey private keys!

I certainly don’t love having a few gatekeepers in charge, but the protocol (currently?) does not really support a good alternative. And doing better is hard!
For this conversation, I'm staying focused on Ukraine.

I suggest you do the same, otherwise there's a risk of diluting a very important topic.

The Kremlin has followed on from Nazi Germany in evolving and maturing its propaganda tactics. One of these tactics is to devalue and delegitimize other nations.

The addition of one simple word - "the" - is enough to shift the perception of a country (with its own culture, language, and history) into that of a mere region (an errant extension of Russia that needs to be brought back into the fold).

Russia has a long history of terrorism and genocide. It was one of the 'great' imperial powers, and its crimes over the last century were never punished, the way Germany was. Now, with invasion, further genocide, and threats of nuclear aggression, there's an urgent need for the world to step up and step forward to eradicate Russia altogether.

From the propagandist's mouth: "Russia is by far the largest country in the world, covering more than a ninth of the Earth’s land area. It extends across the whole of northern Asia and 40% of Europe... The Russian Federation includes 21 republics, 9 territories, 46 regions, 1 autonomous region, 4 autonomous districts, and 2 cities of federal subordination" (https://canada.mid.ru/en/o_rossii/russia_in_facts_and_number...)

Considering how many other nations were subsumed by Muscovy, your assertion of "noble white people" is inflammatory and irrelevant.

Furthermore - to pre-empt anyone who might be offended - I refer to uncountable acts of terror, genocide, violation of the 'rules of war', and violation of the UN Charter. Keep in mind, Russia has an illegitimate permanent seat on the UN Security Council.

Put simply: Russia has forfeited its right to exist.
There are Linux distributions that have been certified UNIX, it really doesn't mean anything anymore.
One of the great mysteries of human history is why that is.

The historical record of coffee begins in the 15th century. It's been claimed that it was cultivated much earlier in Yemen or Ethiopia, but both of those places were literate at the claimed times (6th and 9th centuries respectively), and there's no evidence at all that this is true. Once it showed up, it spread quite rapidly, for all the obvious reasons.

It's a berry, the fruit is edible, and the bean is large, potentially nutritious if you don't know what it is, and obviously, neither of these things is poisonous. It beggars belief that, at the very least, local pastoralists didn't know about it, and presumably make some use of it, but as a crop, it's very recent.

Romans imported so much silk from China that they passed laws against buying it, more than once, because of the amount of silver which was leaving the empire. They had spices from as far as Indonesia. But no coffee, and no tea.

Just one of those things.
Tons of critical infrastructure in the US is run on IBM zOS. It doesn't matter what operating system you use, what matters is updates aren't automatic and everything is as air gapped as possible.
Per capita is misleading. China has over 1 billion people more than the US, the majority of them in abject poverty. Same for India; so their per capita number is artificially skewed downward.
"I asked ChatGPT how to prevent this and here's what it said.
<generic bullet points about software testing>
AI would have prevented this."
Thanks for jogging my memory! I believe we did two rounds of QA, the first was unlimited but shallow and high latency, the final QA I believe was called Format QA and there was a quota, if you had more than 6 issues or something you were rejected and had to go back into the queue (for months).
Which is why I have never paid for an academic article from a publisher.

I have been e-mailing authors directly for access to the article and have been successful most of the time. Maybe once or twice, the e-mails go unanswered. In one case, the primary author had died (a subsequent search linked a news article showing a skiing accident). In another case, the author had simply moved to a different university thus the e-mail in the paper was outdated.
They likely won't pay as Meta does not pay any tax close to 200mm in Nigeria.
Why would one prefer a language with a GC?

Iced is a great library if you are willing to put in the effort to learn it (as it's new and documentation is still mostly limited to examples)
Bullshit. Absolute bullshit.

I've told my testers for years their efficacy at their jobs would be measured in unnecessary deaths prevented. Nothing less. Exactly this outcome was something I've made unequivocally clear was possible, and came bundled with a cost in lives. Yet the "Management and bean counter types" insist "Oh, nope. Only the greenbacks matter. It's the only measure."

Bull. Shit. If we weren't so obsessed with imaginary value attached to little green strips of paper, maybe we'd have the systems we need so things like this wouldn't happen. You may not be able to enumerate every, but you damn well can enumerate enough. Y'all just don't want to because then work starts looking like work.
Certainly living up to the name
> I suggested a simple solution for that - receipt printers.

Just so I understand what you are saying you are proposing that we drown our hospital rooms in paper receipt constantly. In the off chance the computers go down very rarely?

Do you see any possible drawbacks with your proposed solution?

> possibly criminally negligent to make a life critical process dependent on the availability of a distributed IT application

What process is not “life critical” in a hospital? Do you suggest that we don’t use IT at all?
Am I supposed to use some AI bot to summarize all this shit? Ain't no one got time to read 3000+ comments. Any good links?
This is from early March. An eternity in this space. What's the REAL current status?
It is extremely ironic that computers which operate by the logic of boolean arithmetic and algebra are now used to generate bullshit instead of adding rigor and checking existing written content for basic falsehoods and logical fallacies.
CrowdStrike does this trick where it replaces the file (being transferred over a network socket) with zeroes if it matches the malware signature. Assuming that these are the malware signature files themselves, a match wouldn't be surprising.
something like this already exists. they are called "data brokers"
A corporation cannot bear arms without a physical person/object (drone?) doing so, whereas speech can be done by the corporation as a purely legal entity. I guess the closest is a corporation can hire someone to do it, but that someone ultimately is a person/drone. Employment is not bearing arms.
They don’t even offset themselves, but SpaceX rockets would likely be a key part in deploying solar shades if necessary
Pay for what exactly though? Cybersecurity incidents result in material loss, and someone somewhere needs to provide dollars for the accrued costs. Reputation can't do that, particularly when legal liability (or, hell, culpability) is involved.

EDR deployment is an outcome-modifying measure, usually required as underwritten in a cybersecurity insurance policy for it to be in force. It isn't itself insurance.
The very recently written pocket guide available at https://docs.iced.rs/iced/ is both a great little crash course on the library and a bit of an admonition. The disclaimer should really help either make you salivate to dive in or stay away entirely, depending on what you're looking for.
I've also wondered why Prolog or at least Datalog isn't available/used more widely as a query layer, especially considering that the promise of SQLs natural-ish language really didn't lead to a level of adoption among non-tech workers even approaching the popularity of the spreadsheet, so the reason for that style of syntax didn't really pan out, and Prolog would appear to have some syntactic and capability advantages.
I dont understand how this isnt bigger news?

Local emergency services were basically nonfunctioning for better part of the day along with the heat wave and various events, seems like a number of deaths (locally at least, specific to what I know for my mid sized US city) will be indirectly attributable to this.
Who knows how to handle a billion refugees?
No I didn't realize that. Why does anyone do them, and what real care do they take when they are doing it for free?
Ya gotta keep checksumming until you find a fixed point.
Why is that misleading? That doesn't sound like "artificial skew" to me.
Random strangers running unknown, untrusted code on your computers is the worst. It's a good thing we patched that security flaw by letting the _right_ random strangers run unknown, untrusted code on our computers.

As something of a friendly reminder, it was Microsoft this time, but it's a matter of "when" not "if" till every other OS with that flavor of security theatre is similarly afflicted (and it happens much more frequently when you consider the normal consequences of a company owning the device you paid for -- kicked out of email forever, ads intruding into basic system functions, paid-in-full device eventually requires a subscription, ...). Be cautious with automatic updates.
How many attacks have they stopped that would have DoS’d a significant fraction of the world’s Windows machines roughly instantly?

The ends don’t justify the means.
I had a lot of fun with NovelAI. I believe at the time it was using GPT2, and I loaded in fine tuned models for the canon of choice I wanted to experience (trained on fanfic, and things of that sort).

How does spellbound work?
Better satellites and other aerial survey data has determined that oil and gas related methane emissions are far, far higher than industry reports. Everywhere independent researchers look along the production, transmission, distribution and end use pipeline they find more leakage than has been assumed because industry has provided the numbers the assumptions are based on for years.

Along some particularly leaky production paths methane emissions are so great that the impact is greater than coal over 100 year timescale. For example, some parts of NM Permian have a 9% (!) leakage rate. When combusted methane releases about half the amount of CO2 that coal does. The eGHG potential of methane is 20x CO2 over 100 year timescale, so you have to add 180% to the total GHG potential, making it 40% worse than coal w/o even considering other leakage along the pipeline.

https://sustainability.stanford.edu/news/methane-leaks-are-f...
Aristotle was a poor replacement for James Watt.
A common attack vector is phishing, where someone clicks on an email link and gets compromised or supplies credentials on a spoofed login page. External firewalls cannot help you much there.

Segmenting your internal network is a good defence against lots of attacks, to limit the blast radius, but it's hard and expensive to do a lot of it in corporate environments.
Nigeria will be the big loser if they ban Meta’s free and widely used services. No tech company could function if every banana republic levies hundreds of millions of fines when they don't even generate that much revenue in those markets.
i see what you mean. I couldn't imagine using fake tables for layout.

you use grid flex or even float (if you need L or Z shaped cells)
I've yet to hear a convincing argument that any other installation method is more "secure".
i had a similar experience. I was understanding the concepts i’ve learnt a year earlier and hardly ever would grasp anything immediately
Depends on what the policy (contract) says. But there's a good argument that your security vendor is inside the wall of trust at a business, and so not an external risk.
No worries, you're all good. Getting the experience to understand expected norms takes time. Just not that often you see such a young developer on the front page of HN, and especially without mention of age in the title.
Seems like this hot take is coming with a very specific use case in mind. I could see a company wanting fine grained control over how its employees access their privileged employee accounts. I'm not sure attestation needs to be in the spec for that, but I can see why some companies might want it in the spec for that. Ideally they would just have the right mix of policies, incentives, and culture to make sure none of the employees are grossly negligent about security.

Their customers' accounts, on the other hand, are a different story. They should have freedom to choose. Companies that try to restrict that freedom should be punished in the market, or, in cases of monopoly, by the FTC. I suppose that doesn't mean it definitely shouldn't be an option in the spec, though..
The article was written in 2019 before a number of extraordinarily significant events with major climate policy impacts:

- a noticeable and rapid dip in emissions has proven to be viable due to COVID lockdowns

- Russia’s invasion of Ukraine forced Europe and the US to accelerate plans to diversify energy generation away from natural gas

- China’s insanely rapid growth in green energy production domestically

It seems like 2022 CO2 levels are near 2019 CO2 levels[1], which is impressive.

[1] https://ourworldindata.org/co2-emissions
We have "downtime" systems in place, basically an isolated Epic cluster, to prevent situations like this. The problem is that this wasn't a software update that was downloaded by our computers, it was a configuration change by Crowdstrike that was immediately picked up by all computers running its agent. And, because hospitals are being heavily targeted by encryption attacks right now, it's installed on EVERY machine in the hospital, which brought down our Epic cluster and the disaster recovery cluster. A true single point of failure.
Hmm, I'm really not sure about that. There are events in the geological record in which the vast majority of animals were not fine, and I'm not convinced that humans would be among those that make it, adjustments or not.
I've heard it postulated that the industrial revolution was only possible because of fossil fuels (obviously), but also they if we use too much easily accessible fuel, whether that's coal or oil, and had some kind of dark age, we would be unable to restart civilization.
Good news, a prince needs some help getting his family inheritance out of the country. Meta can just provide its bank account and routing code numbers to receive the transfer, and will get to keep 25%. They're set.
How to Write for the Web – Tips for Humans
Or if you actually kept track of these things: pull out the bitlocker recovery key, even if it's on an old USB at the back of a drawer. Ask How I Know
I've long thought the answer is as simple as it is boring: their metallurgy just wasn't good enough.

Until the industrial revolution itself kicked in, metallurgy was a long and slow slog through incremental improvements in technique. There's no obvious way for a civilization to do a speed run on this process.

I don't think the printing press would have helped. The Chinese had movable type by the 11th century, and it didn't cause an industrial revolution.

The 'tech tree' argument that makes the most sense to me is that, specifically, demand for cannon, lead to enough improvement in metallurgy that steam boilers were something it was possible to construct. That being what really kicked things off. Hero's aeolipile didn't hold to a significant pressure, and if anyone had tried it, their vessel would have ruptured or shattered.
Rust's memory safety does not prevent category errors like using nonpaged memory for things supposed to be paged and vice versa
> I suspect we're going to see a shift in the type of operating system hospitals run. It might be Linux or a more hardened version of Windows.

Why? "Hardening" the OS is exactly what Crowdstrike sells and bricked the machines with.

Centralization is the root cause here. There should be no by design way for this to happen. That also rules out Microsoft's auto updates. Only the IT department should be able to brick the hospitals machines.
What's safe to eat? (pesticide risk level)
Server side hit detection is nowhere near as complex as occlusion, you need to make sure you account for latency or you get people popping into existence after they round the corner.

Here is one for CS:GO, server occlusion geometry must be made separately as auto generating from map is another hard problem.

Not "just some raycasts" otherwise everyone would be doing it:

https://github.com/87andrewh/CornerCullingSourceEngine
> a little concerning that this is what it takes to get noticed

It's not. Otherwise everyone would have to do it.
People keep coming up with footage of supposedly "uncontacted" amazon tribes and it almost inevitably turns out that at least some of them have occasional trading contact with nearby towns/villages, and then somebody taking a close look at the photos spots someone wearing a knock-off adidas hat or shoes or similar.
"This sentence no verb."

... is bollocks! Yet, I can see a shimmering phantasm of "has" ... post sentence.

If you are going to create a thing, it needs to be consistent within the framework it tries to describe itself.

A "sentence fragment", whatever that is, needs to be grammatically correct (for a given value of correct) but not simply be a spelling mistake or just plain old bollocks.

I can punch holes into a piece of A4 and call the result "a paper fragment". There is no need to define a term for "paper, useless for printing on".
There’s Crowdstrike for Linux and Mac
Irresponsibly growing your population doesn’t allow you more emissions, that’s crap!
Yes to India and the USA. China and Europe are roughly on par.
It's entirely possible (likely, even) that someone died from this, but it's hard to know with critically ill patients whether they would have survived without the added delays.
It's interesting to think about why many people believe tribes like this should remain "uncontacted". For better or worse, it's revealing of modern values.

Also, what is the long term fate of such tribes? Without genes flowing in, it's probably not good.

I wonder about a protocol that a high technology civilization could use to contact them. Priorities would be to avoid violence, disease, misunderstandings and so on but at the same time, to allow them enter into the modern world over some generations. Kind of like sci-fi where an alien species contacts humanity (e.g. Childhood's End).