skysight-inc/HackerNews huggingface dataset:
Alcohol reduces functions, caffeine clearly enhances functions. If caffeine was involved in nearly all violent crime like alcohol is, we would think differently of it.
You have metrics from the server which tell you that you're running 100% CPU for a period of time. If the crypto miner wasn't something very dumb, it would not be detected. And I can scan a network using nmap with an XML or grepable output format options.

CrowdStrike doesn't remove threats. It would stop the process and quarantine the file. It requires knowledge on how to actually remove the threat beyond the quarantined file.
It'd be interesting to see what would happen to 35 and up if you excluded everyone born before, idk, 1980, and then again if you excluded everyone born before 1965.
The true reason is a regulatory environment where snake-oil peddling corporations lobby for governments to mandate the use of their crapware in the name of security and reliability.

This causes senior management to push for the installation of this crapware/malware on their systems, overriding the objection of their system administrators who know better.

Senior management want to cover their asses, and the administrators shrug their shoulders and respond "if you say so".

In sum it is mostly a regulatory racket that is profitable for the peddlers of this crapware and for management who can claim that they did what they were required to do to stop shit from happening. Everybody wins except shareholders, customers and IT staff who have to fix this mess without getting the righteously justified overtime and bonuses.

Why do you think insurance companies have backing out of the business of insuring against these kind of disasters? They've clearly learned better.

Why do you think I stopped using Norton, MacAfee, etc, etc, and etc and opted for just decent backups and Windows own built-in stuff?
Yeah, https://www.commandlinefu.com/commands/browse/sort-by-votes is a treasure trove.
You could just get a wildcard certificate with lets encrypt, via a dns challenge.

E.g. lego supports many different dns providers

https://go-acme.github.io/lego/

And then internally inside of tailscale you could have your own dns server, which serves subdomains of your domain, and for all subdomains you can use the same wildcard certificate.

This also does not 'expose' your subdomains on Certificate Transparency logs
Ultimately this would have been almost a non-issue if there had been better deployment strategies in place for also the data file updates.

If by changing the system you mean adding some kind of in-kernel isolation to it, then I don't think it would be worth the effort to make that kind of major change to the way operating systems work just to give arguably a minor risk reduction to systems—in particular if CrowdStrike and other vendors take some learnings from this event.

Microsoft might improve their system rollback mechanism to also include files that are not strictly integrated to the system, merely used by the parts that are (the channel files loaded by the driver).

Actually I think we can just be happy that the incident was a mistake, not an attack. Had this kind of "first ever" situation been an attack, it could be extremely difficult to recover from it. I wonder how well EDRs deal with "attacks from within"..

CrowdStrike pulled off the update within 1.5 hours. I wonder if they actually use Falcon themselves? But then somehow missed the problem? Doesn't seem like they eat their own dog food :). (Or at least their own channel files.)
What are you doing with Markdown? My own requirements for a format are:

* 30 year viability.
* simple but explicit formatting: I need to specify font size, underline, and red text.
* clarity in writing is almost as important as clarity in reading, so I am not fond of formatting directives mixed in with text.

That led me to RTF, since Markdown fails on the second and third point, and LaTeX fails on the last. But you have to determine your own requirements from your use case.
I dont think thats what they mean at all. Jellyfin was forked and released in 2018. Its not a young project and certainly not still 'riding high' on the excitement of a new fork.
So straight up I have to admit that this isn't my wheelhouse - I support a bunch of developers who seem to enjoy breaking things. Safety-critical or life-critical just isn't my thing. If breaking stuff is half the fun, you probably shouldn't be in medicine ;)

Say you have one server that houses all your patient data, and 1000 workstations that access it. I think it's safe to assume you'd treat that one server as your "crown jewels". You want it to be triple-redundant, you want it to be on battery, generator, a very conservative lifecycle management, replicas in different fire zones, immutable backups, etc etc.

Your thousand desktops .. meh. This is where you want your endpoint protection, this is where you're worried about data egress, etc. They still need to be controlled because they have access to the patient data. But you're not so worried about resilience. If a workstation goes bang, you just go out and image it.

I'd consider this a fairly typical way to evaluate risk and threat.

"I felt a great disturbance in the Force, as if millions of voices suddenly cried out in terror and were suddenly silenced. I fear something terrible has happened."

So on Friday, those thousand workstations simultaneously turned blue. Our hypothetical threat model so far has treated workstations as disposable, replaceable, but didn't consider workstations in their entirety. And once we lose the entirety, all our "crown jewels" are safe on our triple-redundant servers, but there's no way to access them. And the resulting "stop work" is a risk to any patient who really needed that work done today.

Now as I said, this isn't my area at all, I'm spit-balling here, but this is how I understand the fallout from this. An analogy is that we put more effort into protecting the president than the man on the street - but if you wake up one morning and the general population has disappeared, the impact is bigger than losing the president.
3D-printed active fabric for healthcare and robotics
I just use mc and ctrl-O, to switch between shell and listing.
Wikipedia says they did it at some point, but stopped.

>GoToGate was used for a time as the flight provider for Booking.com for various European countries.[7]
The headline, as always, is disingenuous. They were asked why they couldn't lock third parties out of this level of unprotected system access, and said that the 2009 ruling prevented them from doing so. Which is simply factually correct.
They're equivalent, but only up to whatever computational substrate one is actually using. You can build functions out of small-step operational semantics of, say, a simplistic imperative register machine with a stack. In this case, a function of 0 arguments and a function of 1 trivial unit argument are visibly different even though their total effect on the state is the same. After all, we're talking about theory of computation and so it better be able to handle computations as they are actually performed at the low level, too.

It's yet another example of "in theory, the theory and the practice are the same; in practice, they're different": I have written a toy functional language that compiles down to C, and unit-removal (e.g. transforming int*()*int into int*int, lowering "fun f() -> whatever = ..." into a "whatever f(void) {...}" etc.) is a genuine optimization. The same, I imagine, would apply to generating raw assembly: you want to special-case handling of unit so that passing it as an argument would not touch %rdi, and assigning a unit to a value should not write any registers, and "case unit_producing_function(...) of -> ... end" actually has no data dependency on the unit_producing_function etc.
They have made it clear they dont want to decide which clients get what proportion of money, and are asking their users to do that for them by directly donating to the clients they most use or prefer.

I really good way of doing it if you ask me.
> The homeownership rate is about 66%.

And declining.

Homeowner vs. renter statistics reflect a decline in homeownership

https://ipropertymanagement.com/research/renters-vs-homeowne...
> Where is a service where I can just enter from/to which city/airport I want to fly (or in Europe also rail)

Try momondo.com. You can add # of luggage (checked in & cabin) and play with some other parameters. They won't, or very rarely will, show train connections. They sometimes show bus connections, though.

For train travel I find trainline.com quite good. It gives you an overview over what's available an with which carriers. They are UK focused but offer tickets throughout Europe.

The Man in Seat 61 is (https://www.seat61.com/) is an invaluable resource to inform yourself about train travel. Mostly focused on Europe but covering the world.

Hope this helps.

Edited to add : I use Momondo as an information resource about available carriers and pricing for specific routes. I would never book via an OTA, but strcitly with the airline executing the flight. No matter if it's a few franks more.

If there's any problem with your flight you're up shit creek if you have to deal via a third party.
We had some hiccups over the weekend with Ubuntu Server / Hetzner.

- apache2 crashed on VM (had not happened in 8 months--our entire tenure at Hetzner

- another VM become entirely unresponsive--would only respond to ping. could not even access via control panel provided console. had to do a reboot. after that, the box seems to be ok.

- we are still waiting on a response to our ticket from Hetzner.
What’s ironic[1] about these comments is they set up these ignorant-sheep narrative about how the villagers are bickering among themselves. Which begets more finger-pointing among the villagers instead of looking at the real source of their problems.

[1] Not ironic if you don’t think you’re one of the villagers.
Yeah, i understand Ukraine has much stricter rules. Of course out of necessity, and things could change also here in case of such an emergency.

But after all, the main point of a conscriptions (or any military) is not to kill Russians. It is to make sure they don't get the idea to come here in the first place.

I am sorry this did not help Ukraine.
China–US research collaborations are in decline – this is bad news for everyone
> No closing body or html tags.

Well those are officially optional now so it's just well optmized HTML.
Born too late to enjoy exponential asset growth. Born too soon to see the true environmental impact of the asset growth.

Lost generation, can I just get some drugs to cope please, my computer job is making me lose my humanity ;(

Just kidding it’s all good :)
> Instead of asking to stop, they should do just what they suggest, without further ado - distribute the income to the ecosystem devs the way they see fit

Probably not. The amount of money they are taking in is very small, and if they start to ramp up revenue, then they actually need to start paying people for non-core work, like lawyers and accountants. Assuming that the money is received in Canada, by an Ontario registered non-profit, then it is really easy to do the accounting work for small dollar amounts (I ran several Manitoba and BC based non-profits previously for conferences and community work). If you start paying people who can't invoice you, then you need to sort out cross-jurisdictional payroll, and if you are making alot of purchases through other services.

Comments like this are unhelpful because it assumes that the developer of the project has a desire to run a business (and non-profits are businesses) rather than building and shipping an open source tool that scratches an itch. It's cool to speculate on what could be, but if you think that is the right approach, fork it, run the business transparently, and allocate a portion of revenue to be held in reserve the moment the core team for the project you forked asks for it.
Although I don't agree with all of the points I have to say the amount of times a year I'm told with a straight face the following for lists with under 200 items in them is getting ridiculous.

> The truth is that it’s simply unacceptable that in 2024 people are still trying to convince us that something as simple as a list could be slow in any reasonable scenario
The nonguix channel is very popular among people who use Guix, despite people being unable to discuss it on official Guix forums and chats. I haven't had to rely on it for things like Nvidia drivers, but I use it for Steam and the mainline Linux kernel. It has worked well for me for about 2 years now.
Value growth isn't tied to physical resources anymore, it's increasingly ascribed to intangible things, such as intellectual property. I'm not saying that growth is guaranteed to continue, just that economies have already been growing based on more abstract values; it's not all about food and fuel anymore.
Sure, but people like you weren't sufficient to change the fact that Corbyn still got more votes.

The libdems of 2024 have a very different situation in that despite the Tory implosion they are weaker than ever. I'd put my money on them either still making the deal or getting buried if Labour had even more votes.
> Some of the jobs he can get don’t pay enough to give him the self-respect he feels he needs, and others require him to get along with unpleasant customers and coworkers, and to maintain a submissive attitude toward the boss.

Same as it always was.

Or perhaps moving a factory workforce into the service industry has been degrading? (Since of course we shipped the factories overseas.)
Show HN: I made the ugliest todo list you'll ever see but you can level up in it
Perhaps gp already did but they are so good at it that even the website itself is offline.
A JPEG doesn't include a single pixel of the original image.
Suggest any subtitle generator for short videos
I am interested in starting content creation with shorts video and need a subtitle generator tool. Recommend the best AI-powered subtitle generators, both free and paid?
Goes to show that there is always someone in the market that wants to pay for anything, even if it's a grift.
Location: Buenos Aires, Argentina
Remote: Yes
Willing to relocate: Yes
Technologies: dbt cloud, github, airflow, airbyte, SQL, Python, GCP, BigQuery, AWS S3, AWS Athena, GTM, GA4, Amplitude, RedShift, Jira, Trello, Monday, QuickSight, Looker, Tableau, PowerBI.
Résumé/CV: https://www.linkedin.com/in/karlosrivero/
Email: carloso.rivero@gmail.com
If the DNC no longer has use for a public nomination process, they should get rid of it. It wastes a significant amount of taxpayer resources with estimates in the hundreds of millions of public dollars required to run a primary. It looks like the party has regressed to 1968.
Show HN: I made an app to easily manage finances
Hi!

I searched for a long time for an app to help me manage my finances, and finally, I decided to develop my own. All accounts and transactions in one place.

Matej
Yeah, it's more or less same mess in Europe too. Young people are supposed to take 20-30 year mortgages that require a stable career to pay back, while corporations do their best to make everyone unemployed via advances in AI and robotics. Hell, my country also shares more than 1000km of with Russia, and who says we won't have WW3 in 20-30 years?

At this point the main economic improvement in my life will probably come when I inherit my paren't house. Career, work, that is all uncertain to build a life upon, so I will just rent and downshift.
Caffeine, up to a certain daily dose, is associated with long-term cognitive benefits and a reduced risk of dementia.

This study hints that it specifically doesn't benefit gray matter volume during periods of sleep restriction, at least in the short term.

I wonder if substances like Ashwagandha extract or Magnesium L-threonate could mitigate gray matter loss during short term sleep restriction among caffeine drinkers.
There's no such thing as a "valid" value. Values can only be valid in some context. The empty string is valid only in contexts where… it has meaning. (Quite hard to say this without being obviously circular!) Golang has chosen the point of view that "in most contexts, the zero value is valid"; it is wrong about this. There are certainly some contexts where for some particular type the zero value is valid, but it is rarely true in general.

Booleans are harmful for other reasons, sometimes related to "parse, don't validate". Write a discriminated union that makes the true/false distinction meaningful, if you really do have a two-valued data type ("--dry-run" is `| Dry | Wet`, not a bool; this mistake is called "boolean blindness"). Write a type that actually contains the data you want, if the boolean is supposed to indicate the validity of some other data (`option<string>`, not `string * bool` where `something, false` implicitly means the `something` is meaningless).
Hello, I am Matej.

I'd like to share my new app with you.

It's a finance management app that I launched recently after several months of coding. The app will be regularly updated based on user feedback to ensure the best possible experience.

In short, you can add your transactions, goals, investments, and subscriptions. I plan to expand the app in the future. I'd appreciate it if you could share your thoughts on its design and functionality.
They're the FOSS entrant in the category dominated by Plex, which has a history of monetization strategies that upset the community. Jellyfin probably wants to stay completely clear of even the appearance of being a paid project because the main reason someone would choose them over Plex is to get away from the influence of monetary incentives.
i greatly appreciate your respone; thank you for taking the time.
Oh, I know. I was being somewhat disingenuous with my question. But thank you for the extremely informed response.
> Most people can afford a home here.

Correction, most people have been able to afford a home in the past in the US.

Homes used to be affordable, now they aren’t.
From the article:

> If the verifier finds any unsafe code, the program is rejected and not executed. The verifier is rigorous -- the Linux implementation has over 20,000 lines of code [0] -- with contributions from industry (e.g., Meta, Isovalent, Google) and academia (e.g., Rutgers University, University of Washington).

[0] links to https://github.com/torvalds/linux/blob/master/kernel/bpf/ver... which has this interesting comment at the top:

/* bpf_check() is a static code analyzer that walks eBPF program
* instruction by instruction and updates register/stack state.
* All paths of conditional branches are analyzed until 'bpf_exit' insn.
*
* The first pass is depth-first-search to check that the program is a DAG.
* It rejects the following programs:
* - larger than BPF_MAXINSNS insns
* - if loop is present (detected via back-edge)
...

I haven't inspected the code, but I thought that checking for infinite loops would imply solving the halting problem. Where's the catch?
People, yes. Corporations, no. It's literally their raison d'être.
My daughter was prescribed an audio therapy that worked wonders.

An app plays something akin to channel surfing on steroids, at a high initial switching frequency. Patient is to watch their favorite Youtube vids, play a video game - for 30 min while this cacophony slams their ears. Then gradually, day after day, the frequency is lowered to "humane" levels.

Totally worked, no meds involved.

I think it simply flooded her CNS and trained it to focus, without conscious effort. Might only work in 8 year olds, I don't know.

A lot of sound therapy we saw initially tried the opposite, calm stuff like classical music - feels clear why this can't work on a ADHD brain that runs in circles.
It seems a bit SpaceX. They are trying for net electricity out in the current iteration. If they get that it'd be a huge deal and funding no problem. Big if though.
What Every Developer Should Know About Time
> 2. Consumers, not producers should decide what their assumptions are. Producers should decide what their guarantees are.

Issue with schema definition languages is that only one set classes is generated. Forcing consumers to create large amounts of mapping logic to transform input to objects with required assumptions.

I like the idea of an array of required fields on the schema of an object. Using arrays of required fields, could be used to generate different set of classes. That would make writing near-duplicate classes of input objects and mapping logic unnecessary.
You may have looked at the page, but you did not read it, or read it completely, or understand it, or you are lying, one of those, you pick, because it does not say that they attacked anyone for no reason.

Merely such a message could be cut out of it because those words do exist amid others.
I think people should be able to instantiate super hot anthropomorphic girlfriends of their choice into and out of real life at will. (Me first; I thought it up.)
An Overview of Hawaii's Consumer Data Protection Act – Senate Bill 3018
The article on privacy laws in Hawaii from Securiti provides a comprehensive overview of the state's regulations on data protection. It outlines key aspects of Hawaii's privacy laws, including requirements for data breach notifications and specific rules for handling personal information. The article emphasizes the importance of compliance for businesses operating in Hawaii and offers guidance on navigating the state's legal landscape. This resource is valuable for organizations seeking to understand and adhere to Hawaii’s privacy standards.
It would make an interesting film(book/documentary/comic?) where the protagonist is laid off because the factory in Anytown, Georgia closes down and by some magical plot contrivance he is able to move to Shenzhen and get his job back.

You could go a lot of different ways, or several at once, with this set up.
In case you weren't aware:

> The name "homeownership rate" can be misleading. As defined by the US Census Bureau, it is the percentage of homes that are occupied by the owner. It is not the percentage of adults that own their own home. This latter percentage will be significantly lower than the homeownership rate.

https://en.m.wikipedia.org/wiki/Homeownership_in_the_United_...
Nope, we have the same in Germany (and in the EU), called "digital health applications" (DiGA in German). These are smartphone apps with some medical claims, certified as medical devices and prescribed by doctors. They make about €120-€500 for 90 days.

In some cases, these apps might be useful. But I think there are quite a few cash grabs in there, too.
>Also: Nobody in a village should take up 2 houses for themself.

>But some can, and can even take up 100 houses...

How much % of the housing supply is actually taken up by people with 100 houses?
Gen Z is becoming homeowners at a record pace:

https://www.forbes.com/sites/katherinehamilton/2023/04/21/ge...
Thanks :)

Any feedback let me know!
That's becoming a registry not a registrar

It's significantly more complicated and expensive.

https://newgtldprogram.icann.org/en
Hi, we will not be competing on price but on the value we offer. Our app will not solely focus on budgeting. The only thing we will have in common with YNAB is that we use the Zero-Based Budgeting principle for our budgeting feature. Our app will evolve to cater to leverage signaling, tax savings signaling, and projections for the FIRE community.
Stop being a turkey voting for Christmas. Lose the puritanical outlook on life and start considering the myriad ways a few hundred billionaires could be stopped by the general population at large.
> emphasis on community building

Probably the first time ever I hear about a community built on a freaking directory listing tool.
There is no rationality. It is a justification for “I’ll get the most I can now and push the externalities on some future fool”.

It is no different from traders hunting buffalo to extinction. They got their money, consequences be damned.