skysight-inc/HackerNews huggingface dataset:
> The Windows ecosystem typically deployed in corporate PCs or workstations is often insecure, slow, and poorly implemented

Yes, but that's not because of Windows itself (which is fast and secure out of the box) but because of an decades-old "security product" culture that insists on adding negative-value garbage like Crowdstrike and various anti-virus systems on the critical path, killing performance and harming real security.

It's a hard problem. No matter how good Windows itself gets and no matter how bad these "security products" become, Windows administrators are stuck in the same system of crappy incentives.

Decades of myth and superstition demand they perform rituals and make incantations they know harm system security, but they do them anyway, because fear and tradition.

It's no wonder that they see Linux and macOS as a way out. It's not that they're any better -- but they're different, and the difference gives IT people air cover for escaping from this suffocating "you must add security products" culture.
The posted link doesn't work for me, but this one does: https://jointakahe.org/
Not really though. Whether they should continue to exist into the future should depend on if the expected positive value of their services in that future exceeds the expected damage from having a big meltdown every once in a while. That some of their devs made a fuckup doesn't mean the entire product line is now without merit.

Killing the company because they made a mistake doesn't just throw away a ton of learned lessons (because the devs will probably be scattered around the industry where their newly acquired domain knowledge will be less valuable) but also forces a lot of companies to spend resources changing their antivirus scanners. For all we know, Crowdstrike might never fuck up again after this and forcing that change would burn hundreds of millions for basically no reason.
It is how they package their malware definitions. It's semantics.
I feel like this is the first time the author has booked a flight. These patterns are everywhere from car rental agencies to flights to hotel bookings.
> Kind of like, nobody gets fired for hiring IBM, or using SAP. They are just so big, every manager can say, "look how many people are using them, how was I supposed to know they are crap".

I wouldn't necessarily say IBM or SAP are "crap". It's much more likely that orgs buying into IBM or SAP don't the due diligence on what the true costs to properly set it up and keep it running, therefore cut tons of corners.

They basically want to own a Ferrari and when it comes to maintenance, they want run Regular gas and try to get their local mechanic to slap Ford parts on it because its too expensive to keep going back to the dealership.
Anecdotal evidence: I was close to suicide a couple of times in my life, and believe I would have done it if I had had a weapon just lying around or within easy access. Thankfully I did not. (Non-US, access to guns highly restricted.)
Two reasons:

1. Really good composers don't want to compose more old music. They want to do something else. Merely good composers can't compete with Bach.

2. It's not about the 'objective' value of the music that matters. Bach is a huge brand. The music itself is not enough. It must be composed by Bach, music like Bach is not enough.

I made the counterargument for 2 "Only the music matters, not who or how it is made. Anything else is just posturing." and just as I thought, almost everyone disagrees: https://news.ycombinator.com/item?id=40670072#40670172
>> It's easy to blame CrowdStrike but that seems too easy on both the orgs that do this but also the upstream forces that compel them to do it.

While orgs using auto update should reconsider, the fact that CrowdStrike don't test these updates on a small amount of live traffic (e.g. 1%) is a huge failure on their part. If they released to 1% of customers and waited even 24 hours before rolling out further this seems like it would have been caught and had minimal impact. You have to be pretty arrogant to just roll out updates to millions of customers devices in one fell swoop.
Racist plant names will change after historic vote by botanists
i mean not just dollars but lives also right? do we have a way to track that?
The child slave labour is what really gets the deal across the line
Because we already have Bach? It would be stupid to be just a copycat of someone, that's why every famous artist in history at one point got fed up from copying the past's masters and finally did their own thing achieving greatness.
Is this an example of something which could be affected by the (absence of) Chevron doctrine?
Crowdstrike Update: Windows Bluescreen and Boot Loops - https://news.ycombinator.com/item?id=41002195 - Jul 2024 (1128 comments)
I got endless streams of synthwave, vaporwave and similar on Youtube, regularly hearing new songs as well, people still keep creating great new music.

Why'd we have to compose music in a style of the past? We got different instruments and sound production methods at our disposal now.

Bach clearly was a geek of his time though, and I respect that.
Given that the overhead bins are usually highly congested, the capitalist playbook clearly says you should be able to solve this space allocation problem by introducing a cost for the space usage.
If I understand the thread correctly, CS bypassed the organization's staging system
Looks beautiful! While I mostly read on kindle, this makes me want to setup a new Ubuntu install. Haven't had that feeling in a while
> In which ways? Apart from the low cost part and making flying utterly miserable now. It's not like he invented a new type of airplane

I can only assume that you weren't around for the transition. Intra-EU flights cost multiples of the average industrial week's wages before Ryanair. Air travel was inaccessible or rarely accessible to the vast majority of people in the continent.

Ryanair single-handled brought the cost of European air fares down by two orders of magnitude and became the largest airline in the world by PAX to show for it. It absolutely revolutionised travel within Europe because it made point-to-point flights available to everyone, even the low-waged and students heading away for a city break with €20 return flights.

> A tight, business-savvy guy spent all his waking hours figuring out how to further screw passengers (and continues to do so)

And yet PAX love Ryanair, as evidenced by the ticket sales even though they love to complain. After all, for most people, the choice isn't between low-cost and full-service carriers. It's between low-cost carriers and not flying at all.

> Flag Carriers are all low-cost for short/mid haul now (and to an extent long-haul), as they've been dragged in to the gutter by Easyjet and Ryanair

Another perspective that's a lot closer to the truth is that Ryanair forced them to compete on price and actually serve the public which their flag purports to represent, but which the flag carriers completely ignored for most of their history.
That's... not reality even on desktop PCs, and never was. If your business is more complex than selling hot dogs or ice cream (or even that on big enough scale), IT of such company will become a small monstrosity over time, and complexity of such deployments on Unix vs Windows is nothing compared to overall picture.
Why even test the updates on a small amount of live customers first? Wouldn't this issue already have surfaced if they tested the update on a handful of their own machines?
Was there a way to not enable these channel updates? If so, would you still check all the mandatory security measures when being audited?
That's some very twisted logic. If I expect someone to clean the kitchen as part of restaurant closeup checklist, and they fuck it all up, would I blame the checklist, or the person doing the work?

You blame the person fucking it up. In this case, it's someone who only cares about checking a box. Or someone who pushes broken shit.
What Caused Such a Widespread Tech Meltdown
While i do agree the company is overvalued, the take from the post is potato quality
Trading has been halted on stock exchanges due to technical issues many times. But there's are also more than one stock exchange.
It can kill process based on memory scanning. Imagine systemd was getting killed at every boot?

An issue might not be as universal as on windows, because some distros do things differently like not using glibc, or systemd, or whatever. Yet there are some baselines common to the most popular ones.
Or https://www.theverge.com/2023/3/13/23637401/samsung-fake-moo...

And there is also software that fixes you eyes for selfies and video calls.
You might be surprised..
It is a dark pattern if unsubscribing is more inconvenient than subscribing. If I can get a subscription where you are able to verify my credit card information and my identity with a click of a button. Then I should be able to unsubscribe with the same 1 click. If you hamper me in any way from unsubscribing no matter if it is a speed bump or a road block both are dark patterns.
Wow what a poorly written headline. I thought it said that the FCC had voted to limit the speed of prison internet.
Oh, the foresight of the 1st episode of Connections.
https://www.youtube.com/watch?v=XetplHcM7aQ
https://www.britishgas.co.uk/help-and-support/bills-and-paym... says nothing of the sort.
It's not just a corporate phenomenon. Academic research has increasingly shifted towards a goal of regularly churning out papers for the sake of getting publications, rather than being driven by curiosity and a desire to share knowledge. There isn't a proper long view in academia either and I think their heuristic for the greedy algorithm is even worse than just maximizing near term profits.
Don't know what I was expecting but everything I read was enjoyable lol well done!
How fortunate the phone system is not vulnerable to CrowdStrike...
https://wiki.osdev.org/Exceptions#Page_Fault
No.
"The regulations adopted today mark the implementation of the Martha Wright-Reed Just and Reasonable Communications Act, which established the FCC’s authority to regulate in-state phone and video calls from correctional facilities, in addition to out-of-state phone calls that it had already regulated."

https://www.congress.gov/bill/117th-congress/senate-bill/154...
I don't know about Bach. However, one thing that strikes me is that the easiness of producing something of high quality probably means that it's just high enough to seem so for most people and not really as high as the things that were considered high.

Rick Beato had an interesting video on this phenomenon. I'm not very musically literate but I found the general idea quite insightful https://www.youtube.com/watch?v=1bZ0OSEViyo
It seems that even discussion about AI is getting really polarized like everything else these days.

Comments are always one of these two types:

1 -> AI is awesome and perfect, if it isn't, another AI will make it perfect
2 -> AI is just garbage and will always be garbage
At least on Linux it runs on eBPF sniffing so the chances of fudging something are lower. There are some supported Linux distributions where they also have a kernel module and there might a higher chance of that exploding.
> deepfakes can't

There is a big difference between can't and don't. Every next generation will do more than what the previous generation did.
On budget airlines you almost always only get a backpack included which goes under the seats. They usually bundle the small onboard suitcase option with "Priority boarding", usually because people with suitcases board slower and splitting up those with suitcases and those without speeds up boarding. And if you don't have Priority but come in with a suitcase you will 99% of the time be stopped and forced to pay a fee.

IMHO it isn't a terrible policy per se since it allows for savvy, usually younger, and usually poorer travellers to get even cheaper plane tickets and travel more but I do think there needs to be a cap on the price of "Priority" since during busy times the budget airlines, especially WizzAir in my experience, jack up prices substantially. I had to fly in my suit for a wedding once because the "Priority" charge for both ways was 130€.
> Maybe Crowdstrike employees also bought puts and hijacked their own system.

lol, this would be so funny, if it turned out to be true.
If this person simultaneously fucks up millions of kitchens around the world, you do not blame that person. You blame the checklist which encouraged giving a single person global interlocked control over millions of kitchens, without any compartmentalization.
And you will need your bitlocker recovery key to access your encrypted drive in safe mode. I luckily had mine available offline

There's going be a lot of handholding to get end users through this.
On the plus side if you are good at navigating the patterns Ryanair can be very cheap and the flights usually get you from A to B reasonably efficiently and on time.

I've used them loads of times and it's usually fine. Occasionally I get stung by something and extra charges like not checking in on time or misreading the baggage regs. Or changing my return date which is not really a dark pattern but often expensive. (sort of a dark pattern - the flights can be like £10 if you book ahead but if you need to delay your flight a day at the last minute you'll find they've gone to £200)
The concert hall environment used to be a practical approach to hearing the music, now is a traditional approach, but due to technology of the past 50-100 years is no longer needed.

I'm a super+++ fan of classical music from a little before Bach through Wagner and some since him.

E.g., the end of the Republican National Convention had a live performance of Nessum Dorma with none of the environment, e.g., the singer was not on the main stage.

I like classical music as art with the definition "communication, interpretation of human experience, emotion", and according to that definition to me that music has some astounding examples.

For Bach, okay, at one point I wanted to convert over from listening to the music to playing some of it, got a violin (easier to carry than a piano), some lessons (Indiana University, where I was a math grad student, with a terrific music school) and got through most of the famous E major Partita and, transposed up for violin, the famous cello piece. Both are very popular sometimes in surprising circumstances, e.g., the cello piece was used in an ad selling bathtubs!

Tough to put either piece into words, but a rough attempt is: They start with something simple, not very emotional, but suggesting someone beginning something challenging. Then the pieces move forward with some changes in different parts of the scale but with the rhythm slowly changing as if the person's experience was progressing, developing, but in a way that was close to clockwork, maybe driven, no big interruptions or distractions, even irresistible and inevitable. But in both cases the development leads to a climax of some success or, for the cello piece, some grand success. Well, from that a listener can conclude that they are not the only one progressing on some situation that has some irresistible challenge and ending with a victory.

The grand case of this, in words, roughly, moving ahead on a challenge, having a sweet, happy victory (2/3rds of the way through), having a catharsis after the victory, and then slowly reaching a deeply understood resolution is, of course, the Chaconne.

It was written for solo violin but is taken seriously in transcriptions for piano and full orchestra -- there is a good Stokowski performance; he seems to really understand the music and presents a good, expressive version.

So, I like the music for the effectiveness of the art.

Uh, in summary, to write music like, as good as, Bach's have to write not just in his style but with comparable effectiveness in his art. The tough part is the art, not just the style.
This was my immediate question. I'm also curious what in terms of services these vendors actually layer on top of any other phone system. There's clearly a payment processing layer where inmates can store credit to make calls, but are these systems otherwise that different from what would be offered by any other telecom vendor?
This smells of some inside trading. Someone internal at crowdstrike (or their relative/friend) got wind of this and is trying to save face if they get investigated.

Reading the post its obvious they don’t have a deep understanding of tech, while having that be core to their thesis.

It’s prohibitively hard to hack into a “cloud system” due to few possible entry points - as a reddit commenter said, open S3 buckets are tough to crack!
What I don't understand is why they don't have a canary update process. Server side deployments do this all the time. You would think Windows would offer that to their institutional customers, for all types of updates including (especially) 3rd party.
I've been curious about this use case, so cool to see, and more so, to know it worked!

This is essentially a realization of how graph RAG flavor systems work under the hood. Basically you create hierarchical summary indexes, such as topical cross-document ones, and tune the summaries to your domain. At retrieval time, one question will be able to leverage richer multi-hop concepts that span ideas that are individually distinct & lexically, but get used together. Smarter retrievers can choose to dynamically expand on this (agentic: 'follow links') or work more in bulk on the digests ('map/reduce over summaries') without having to run every chunk through the LLM.

Once you understand what is going on in core graph rag, you can even add non-vector relationships to the indexing and retrieval steps, such as from a static code analysis, which afaict is the idea here. For a given domain, likewise, you can do custom templates to tune what is in each summary, like different wiki page styles for different topics. (Note: despite the name & vendor advertising, no graph DB nor knowledge graph is needed for graph RAG, which makes its relationship to autowiki etc concepts less obvious.)

We are building out some tech here to deal with core production issues like to update/add items without reindexing everything and making larger ingests faster+cheaper. Eg, imagine monitoring a heavy feed or quickly changing repo. If of interest to any, please ping - we are putting together design partner cohorts for the RAG phase of louie.ai .
I’m glad that my attempts at removing USA politics from my content feeds have been so successful that this is the first time I hear about the Trump assassination attempt.
Now the Intel CPU instability issue has been spotted in laptops
I just checked it out. It seems it only solves one of the problems I listed. You can charge it with USB-C (not program it or anything else, just charge it).
An universal ontology cannot have any notion of an "ordinary" camera, not because of expressive limitations but because it's subjective.

Is a CAT machine a camera? Maybe only its sensor and the computers that reconstruct images? Maybe just the sensor? It mostly depends on your location in the supply chain.

Is a box with a projection plane and no means to capture images a camera? Before about 1830, definitely (and then making photographs became a simple upgrade for your "camera obscura").
Ripening fruit/veges give off ethylene oxide which causes further ripening.

If you trap that ethylene oxide by putting the fruit or veges in a closed plastic bag, they will ripen even faster.

Here in the tropics fruit ripens very quickly (chemical reactions proceed faster with increased temperature). I try to slow that down by keeping the stuff cold in the fridge. (But the fridge traps the EtO anyway!)
Okta still way down.
Consolidation / optimization of labor.

When Crowdstrike messes up and BSODs thousands of machines, they have a dedicated team of engineers working the problem and can deliver a solution.

When your company gets owned because you didn't check a compliance checkbox, it's on you to fix it (and you may not even currently have the talent to do so).

We see similar risk tradeoffs in cloud computing in general; yes, hosting your stuff on AWS leaves you vulnerable to AWS outages, but it's not like outages don't happen if you run your own iron. You're just going to have to dispatch someone a three hour drive away to the datacenter to fix it when they do.
I would hope they've done that and it passed internal QA. But maybe not a good idea to assume they're doing any sort of testing at all.
Oh my, I did almost exactly the same when I was 8, but mine was about dinosaurs :)
For a large enterprise, very hard.
It is possible Cloudflare did a timepointed release on this. Controlled roll-outs wouldn't work if all the daily chunked updates didn't activate the kernel driver until some point in the future.
They won't be able to test exhaustively every failure mode that could lead to such issues.

That's why canaries are easier and more "economical" to implement and gives better value per unit effort.
Those were my thoughts. I view the price cap as overwhelmingly positive, but start the countdown until the courts / SCOTUS invalidate this. Exploiting the downtrodden is the American way.
Perhaps we could edit the title to reflect that they're limiting the price and not the speed
> They then charge you to use an app to scan your ID, some ridiculously low amount like 60 cents

Huh? never had to scan my ID upon booking a flight. On rare occasions I had to submit my passport details. Usually for flights to the UK.

Within Schengen, I don't even have to show my ID to get into the transit area or to board the flight.

I never booked Ryan Air and I don't think I ever will. The whole experience sounds just too frustrating.
Most timed post ever?
Capture the market by not making customers pay full costs => low profits.

Grow revenues without substantially increasing costs (i.e running a loss)

Hope you can turn up the profit dial later.

Seems like the modern way?
Can you link the source code for CUDA please? Thanks.

Edit since I'm being downvoted: I did search for it and could not find it.
> regardless of economic fundamentals.

not regardless, but only if. The future is unknown, so their bet is also based on that unknown. Is it foolish? Who knows. Did nvidia seem foolish if somebody made that bet before their ai boom?
https://archive.ph/IUA7U
People not born in ex-USSR countries will not understand these statements, especially today.

There are many countries where Russian is spoken as a language and when people identify as "russian" it is mostly the traditions and history. It has nothing to do with geopolitics.

It is language, religion, family values, holidays, food, celebrations, traditions, etc.... This is what is meant by identifying as Russian.
NT was never a true microkernel. Most drivers are loaded into the kernel. Display drivers being a huge pain point, subsequently rolled back to user space in 2000, and printer drivers being the next pain point, but primarily with security -- hence moving to a Microsoft-supplied universal print driver, finally in Windows 11.
What a dream business.
> > The Windows ecosystem typically deployed in corporate PCs or workstations is often insecure, slow, and poorly implemented

> Yes, but that's not because of Windows itself

Come on. There’s a reason Windows users all want to install crappy security products: they’ve been routinely having their files encrypted and held for ransom for the last decade.
If i was North Korea, I would say that was me. That would be however a crazy story if Russia and China had done anything about it.
"Falcon Complete managed detection and response (MDR) delivers 403% ROI, zero breaches and zero hidden costs"
They won't apologize for legal reasons. Also, it will only make their stock fall further.
But it brings a densely featured library manager along with it. The OP seems to just want something to open books.
Hahaha, you mean all the CRITIC~1.INF ?
Even though I know how an engine works, this is a great way to think about it. Thanks!