skysight-inc/HackerNews huggingface dataset:
The BBC are starting to say that 'tech people are saying this is Crowdstrike', so I guess it's just a question of being certain? Perhaps we'd have similar concerns about rigour in journalism if it were to turn out that it's actually not Crowdstrike specifically, it's caused by the interplay of Crowdstrike and some other currently unknown thing, and actually it's not Crowdstrike that's behaving improperly, but this other currently unknown thing.

It's looking more and more like Crowdstrike screwed up, but I appreciate rigour and accuracy more than FRISTTT!!! type announcements.
Source for me was a reddit comment: https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/commen...
Whether you’re an aspiring entrepreneur, a software developer, or a project manager, "Building SaaS the Right Way" offers the knowledge and tools you need to build a thriving SaaS business. With this book, transform your vision into a robust, profitable platform, ready to meet the demands of a dynamic digital marketplace.
I have never seen malware take half the worlds IT systems offline, even in the days of code red and slammer
And when it’s more costly for customers to walk back the mistake of adopting your service.

Yeah, I get the impression a lot of SaaS companies operate on this model these days. We just signed with a relatively unknown CI platform, because they were available for support during our evaluation. I wonder how available they’ll be when we have a contract in place…
Was watching TV this morning in France (TF1, 8:00 CET), the weather forecast map system was out. The journalist just gave us the information as if he was on the radio, telling he was sorry for the system to be failing.
Airform – Quick and Easy Custom Form Builder for Free
Create unique surveys, polls, and quizzes effortlessly with our intuitive form builder. Whether you need to gather feedback, enhance engagement, or make informed decisions, Airform has got you covered. Our platform offers a seamless experience to design, customize, and share your forms—all for free. Get started today and unlock the power of easy, efficient data collection with Airform!
> The traditional way to do RAG is to find information relevant to a query - and then incorporate it into the LLM prompt together with the question we want it to answer.

Technically this is incorrect. The original RAG paper used a seq2seq generator (BART) and involved two methods: RAG sequence and RAG token.

RAG sequence used the same fixed documents and appended them to the input query (note, this is different from a decoder-only model). RAG token generates each token based on a different document.

I only nitpick this because if someone is going to invent new fancy-sounding variants of RAG they should at least get the basics right.
I know right? Sounds a bit crazy. But we are successful in hiring great PMs, so I can say it's working.

But it's super basic SQL. Select and joins, mostly.

Developers with several years of experience in their resume still fail it.
Testing + a careful incremental rollout in stages is the solution. Don't patch all systems world-wide at once, start with a few, add a few more, etc. Choose them randomly.
I assure you that Crowdstrike is being paid very well for their software.
It's always interesting to read how many of the silicon valley startups were founded by people who had IP they'd developed at existing companies where they were told "we're not going to sell this feel free to take it and start a company". I feel like large companies are more reflexive about holding onto IP these days.
> just landed at SeaTac an hour ago and the rideshare/app pickup was absolutely nutso. Like thousands of people standing around waiting for taxis and Ubers.

So a normal day at SeaTac?
There was a different Azure and other MS services (including Office 365) outage earlier which is separate from the crowdstrike thing that started a few hours later.
There is also an Azure outage going on, and it is unknown if they are related.
I'm about willing to bet they don't have a qa team.
Hmm, let's deploy this on friday, what could possibly go wrong?

I know it's a tired old meme, but it's still true. :)
> Or doesn't operate, as it currently stands.

The definition of "operate" has changed over the years.
Corporate ITs need to stop mandating security malware tools on their systems just because someone showed them some nice powerpoints.
I think the AI talk is just the fashion now amongst C-level execs. Their product - no matter what it does - suddenly needs some sort of AI integration.
Lots of people commenting drags down the position on the front page.
Sky News (UK) is back on air, but they seem to have no astons / chyrons / on screen graphics at all, and I don't think they're able to show prerecorded material either (it's just people in the studio from what I've seen), so presumably they're still having fun issues with their general production systems.
We don't know how to make general software safe, but we do know how to make any one piece of software safe. If you're software is going to be used as infrastructure then it should be held to the same standards. If you don't want it to be treated as infrastructure don't sell it to hospitals.
> I’m pretty sure that fun never really disappeared but rather than developers team are now full of non "computer people", like, people who never cared about computers from the start.

I think there is something simply due to aging. I grew up writing BASIC and machine code on a Commodore Vic20. Programming was inherently playing. Fast forward 4 decades, I do not write code for a living any more but I can see how senior coders I work with do not have that sense of joy. But it's not like the industry has became this or that way, it's that our lives have changed and we became old enough to understand that work is work, and playing is playing. As the lyric goes we have traded the maybe for the sure, we have filled our pockets with keys and responsibilities.

I still write code from time to time just to be slightly informed of trends, but my corollary would be: if your programming job makes you feel like you are playing, do not be afraid to enjoy it at all costs because that too shall pass.
I'm so old that I was like "Do that many people really play Crowdstrike?" then I realised that's Counter Strike, then I looked up Counter Strike and it came out 24 years ago.

yells at cloud
> I'm sorry but that OS is barely capable of outputting a stable HDMI signal, god help you if you are on a laptop with external monitor.

You may have had particularly bad luck with poorly supported hardware, but I don't think this is a normal experience.

I've been using Linux exclusively on desktops and laptops (with various VGA, DVI, DisplayPort, HDMI, and PD-powered DisplayPort-over-USB-C monitors and TVs since 2002 without any unstable behavior or incompatibility.
> Software controlling flight systems in planes is already held to very high standards, but is enormously expensive to write and modify.

Boeing disagrees.
i think i have a UV-something, but in general quansheng are far superior to baofeng vis a vis reliability, clarity and volume, and durability. When i'm in a machine room working on a repeater i want to be able to hear the radio, even if it falls 16'. on the antenna.

THe only radio i own that's built more like a tank than my oldest quansheng is a motorola from the late 90s (VHF, NFM)
At This Banana Farm, the Bunches Grow in 430 Shapes and Sizes - https://www.atlasobscura.com/articles/how-many-kinds-bananas...
Do you have offline backup processes at least? Nasty situation.
the small one you mention may be what is called karpooravalli in Tamil.

https://www.quora.com/What-is-the-English-name-for-the-Karpo...

commonly available in South India.

then there is the hill banana, also small like the one above. grows in the Palani Hills in Western Tamil Nadu, at least. maybe in other hilly places too. it may be the same as the above one. not sure.

one of the best banana varieties for flavour, not just sweetness, is the nendran or nendrapazham, grown in Kerala, and maybe in western Tamilnadu.

it's slightly larger than, and looks different from, the common banana. the outer surface is somewhat ridged, like a ridge gourd.

it can be eaten either raw or cooked. very different taste from the common banana.

considered a delicacy.

https://specialtyproduce.com/produce/Nendran_Bananas_23405.p...
Naive question, if it’s a blue screen of death with a boot loop, how are they going to restore things? Don’t tell me the answer is going to every system manually.
I have seen some pictures shared of vending machines with BSOD.. why would you have an EDR on a vending machine? To protect the valuable assets?!
heavy clouds this morning.

Maybe time to reconsider how solid a ground clouds are.
This may sound hyperbolic but I think the US is a failed state. Humanity is facing a mess because the hegemony is falling apart in the hands of extremely incompetent leadership. Generations of nepo-babies have led to incompetency. In very simple terms: today's rich are stupid.
Caveat to this: In the UK and many other countries, you cannot limit liabilities that cause death or personal injury arising from negligence.
>they would bankrupt before even a few percent of damages is recovered

Wouldn't that be the desirable outcome, though? Given the amount of damage they have caused, they should cease to exist.
zx sounds better
You are correct.

We do give the definition of Fibonacci, and we steer the candidate in the right direction if they make math errors.
also try https://en.wikipedia.org/wiki/Borovi%C4%8Dka

The difference between gin and borovicka is that gin is usually a neutral tasting alcohol that gets the juniper berries macerated in them, but borovicka is vapor infused during the distilling process.

One of my favourites is https://www.zufanek.cz/en/product/borovicka-juniper-spirit/
It injects itself into (at least) every executable startup and every executable write to disk. It's quite noticeable if you have it installed and run, say, an installer that unpacks a lot of DLL files, because each one gets checksummed and the checksum sent to a remote host. Every time.

I hated it before this incident and I will be bringing this incident up every time it is mentioned.
Financial losses? The comment you're replying to is mentioning heart attack treatment here. We're talking about deaths. Most of us won't like to hear this but for all of us who work at SaaS that is deployed on servers around the worlds, our bugs cause people to die. It's a given that at least a dozen people will die directly (medical flights, hospitals both being hit) due to this broken update, let alone indirectly.
This is where public executions of executives help.
Hi guys, what is the KB code of this update?
I’m guessing for chip reading? It’s one-time transaction key so I don’t think it works async.
> Meta says its decision also means that European companies will not be able to use the multimodal models even though they are being released under an open license.

seems like a dig at those French AI national champions
Crowdstrike is not just "Antivirus" capability.

Depending on the threats pertinent to the org they may require deep observability and the ability to perform threat hunting for new and emerging threats, or detect behaviour based signals, or move to block a new emerging threat. Not all threats require Administrator privileges!

Not installing AV might be fine for a small number of assets in a low risk industry, but is bad advice for a larger more complex environment.

If were unbiased here the apparent crowdstrike problem could occur on any OS and with any vendor where you have updates or configuration changes automatically deployed at scale.
Netflix uses FreeBSD for certain parts, but IIRC it's Linux outside of the streaming delivery.

(Some of the team members lurk around here, maybe we'll get lucky and one comments)
It seems to me the author just wants multiple dispatch.
> memory safe openssl

This is closer to done than not done. Rustls is a memory safe TLS library that is compatible with OpenSSL in API and has comparable or better performance [2]. It has also passed security audits [3]

But your point stands. Rustls wouldn’t have been possible without open source funding.

[1] - https://www.memorysafety.org/initiative/rustls/

[2] - https://www.memorysafety.org/blog/rustls-performance/

[3] - https://github.com/rustls/rustls/blob/main/audit/TLS-01-repo...
It’s telling that a company as privacy conscious (relatively speaking) and as deep pocketed as Apple can’t figure out how to comply with EU regulations: “ Apple similarly said last month that it won't release its Apple Intelligence features in Europe because of regulatory concerns.”
CrowdStrike achieved PMF - Product-Market Fiasco!
This is why I don't use Windows and refuse any SWE jobs that require Windows machines. Additionally, I believe kernel-level game anti-cheat software should be banned.
OK now the outage is getting real. How will Tarquin get his cinnamon and gooseberry yoghurt?
At least in the EU, these sorts of token fines are often a warning shot; if non-compliance continues things can get much worse.

As Facebook, recipient of a bunch of small GDPR penalties followed by a whopping great big one, would know well. It’s notable how much more careful they’ve gotten in Europe at least; they held back releasing Threads apparently for DSA/DMA compliance for instance (in particular, a read-without-logging-in option).
While I'm usually a proponent of update waves like that, I know some teams can get loose with the idea if they determine the update isn't worth that kind of carefulness.

Not saying CS doesn't care enough but what may be a minor update to the team that did this and not necessary for a slow rollout is actually something that really should be supervised in that way.
"unpredictable nature of European regulatory environment" reads as "8 years after GDPR, we still design our stuff mass surveillance style, and that may be problematic.
Glad to live in an unpredictable country if it protects me from crap products that spy on me.
> Linux has taught multiple times that drivers should be developed and included with the OS.

I've had Linux GPU drivers fail multiple times due to system updates, to the point were I needed to roll back. I've had RHEL updates break systems in a way were even Red Hat support couldn't help me (I had to fix them myself).

I don't see how Linux is any better in this regard than Windows to be honest.

Also:
> AV was never a necessity on UNIX

Sure, why write a virus when you can just deploy your malware via official supply chains?
10 hours ago someone posted a critical post about CrowdStrike on the "wallstreetbets" subreddit.

https://old.reddit.com/r/wallstreetbets/comments/1e6ms9z/cro...
No, this is not correct. Proton Scribe cannot read user emails, and relies on the open-source Mistral model.
> Their claimed reasons transparently do not justify their actions

This part I disagree with. They do. And that's the point - that bad actions, even if justifiable, do not suddenly become acceptable actions. You can have all the justifications in the world and, even if true, the second you start engaging in bad behavior - you are wrong. The entire point of studying history is see all of these people making justifications. And in many cases those justifications are compelling, logical, and reasonable - yet that does not then make the actions acceptable nonetheless.
In russia everything is vodka. Sometimes this overflow to english. In europe it is kore distinguished.
No, treating in person. But we can't function as a department without computers. You call cardiology (on another floor) and none of their computers are working to be able review the patients records. You could take the EKG printout and run it to them, but we're just telling them lab results from what we can remember before our machines all bluescreened. The lab's computers were down so we can't do blood tests. Nursing staff knows what to do next by looking at the board or their computer. Without that you're just a room full of people shouting things at each other, and definitely can't see the 3-4x patients an hour you're expected to. Doctors and midlevels rely on epic to place med orders too.
Oh, Crowdstrike is also a massive resource hog.
For anybody who doesn't want to go scratching around in the wiki git history, I dropped the markdown into a gist - https://gist.github.com/cpswan/2b65fa11c83c8d16dc464bb0f9a91...
Probably shoved off by the flamewar detector.
IF they're running windows, they'll be running it.
It is basically Scapy with 200 lines of code to make it easier to start. That means tshark is alot better as a cli/DSL. Interactiveness is not what Scapy is good at, it is marvelous when you need to e.g. send events to other services based on custom packet event.

EDIT: I wonder if there is some nice TUI debugger interface/IDE that one could reuse for this. Handling traces Live like this has always been a special skill so I guess specialized tools is a must.. But one would think that all the tooling around KUtrace/ebpf/tcpdump could be generalized in some way.
> This is a short term blip

No security engineer in the world is going to trust the words CrowdStrike after this.
been trying to use it on windows. Its a great app on linux.
it's like $12 and taking a 30 question test, administered by local hams. I don't really consider that "red tape"

usage is declining because radios are expensive because usage is declining. It's more fun to text and drive than talk on a walkie-talkie, smokey.
How can an antivirus update affect Azure's servers?
Then sue the shit out of them.
I've had large customers seriously see that as a big appeal, when we were selling them some IT. They loved being able to blame someone else!
I found it witty and somewhat educational, but man is it long. I read it on the kindle and when I thought that I must be getting close to the end, I had only read 30% of it. It takes some determination to get through.
Been trying to use it on windows. Best app for linux.
That's 85.99% too high.
> I'm glad for an AI to record everything of me and help me get better / substitute me.

Yes, and you can give affirmative consent to that. In some countries, however, companies cannot force it upon you.
Slivovitza and other fruit spirits go from 50 to 60 % usually. Depending how much you dilute it. Pure is higher, but it not nice to drink.
AV with shiny bits stuck on the side and a good marketing team.
> Hubble runs with only one gyroscope now, because the other ones either died or were slowly dying

IIRC there are six total gyros on Hubble. Some of them have failed. Earlier this year, one of the three remaining failed as well, so they're down to two. They've dropped to a one-gyro mode now so they won't wear out both at the same time. Once the one they're using fails, they'll switch to the last one.

The two remaining gyros are of a set of "better" gyros that were installed on a servicing mission 15 years ago or so.

They could repair it (as well as give the satellite a much-needed orbit re-boost), but for now they've passed on doing so, presumably for budgetary reasons.

Regardless, completely agree that it's incredible that these spacecraft often outlive their mission plan, sometimes drastically so. Hubble was projected to have 15 useful years (1990-2005), but it's still kicking (though not without the cost of past repair and upgrade missions), and should hopefully last well into the next decade. Longer, presumably, if it becomes compelling enough to spend the money to further service it.
And yes, they do! Counterstrike 2 is out now, to a mixed reception.
He-he, entire organisation depending on IE6. I have good news and bad news...
I know what you mean, but not strictly true. I cook everything from scratch - the most processed ingredient I use is probably a can of whole tomatoes or occasionally a pack of pasta. I’m a good cook, I think, and it’s easy for me to make our meals, but I do like things to taste good, and I no doubt add more butter, olive oil and cheese to things than is strictly healthy.
5) Well how much of those kernel-level drivers we rely upon ARE written in a memory unsafe language ??? Like 99% ?

And we are not crashing and dying every day?

Sure, Rust is the way to go. it just took Rust 18 years to mature to that level.

Also, quite frankly, if your unwrap() makes your program terminate because an array out of bounds isn't that exactly the same thing ? (program terminates)

But IMHO if we are hopping along a minefield at this moment every second of every day, well...
If this is the worst case scenario, yeah it's not that worse after all.
You don't think the bundling of windows with pcs has anything to do with their market share?
Yeah, they'll pay with "credits" for the downtime, if what is currently happening even technically qualifies as downtime.
> CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes.

> Workaround Steps:

> Boot Windows into Safe Mode or the Windows Recovery Environment

> Navigate to the C:\Windows\System32\drivers\CrowdStrike directory

> Locate the file matching “C-00000291*.sys”, and delete it.

> Boot the host normally.
The fact that a company selling the most unethical ideas ever: unmanned, automated killing machines, is "winning" is the scariest thing ever. There is nothing heroic in selling weapons.
A wonderful target for a supply chain attack.
For images involving faces, selecting the "Enhance Portrait" option will yield better results. You can toggle this option after generating the image. Your image will look much better with this option selected:
https://file.mejorarimagen.org/4kU68cBDKF-giphy-face-new.png
Big difference between can't and won't.
Apple is clearly in the "we're going to be as difficult as possible because we don't like it" category. Meta is not too far behind (already annoyed by all the things that don't let them just spy on everyone in order to super-boost their ads).
Looks similar to what we're doing in Pythagora with CodeMonkey agent (prompt: https://github.com/Pythagora-io/gpt-pilot/blob/main/core/pro..., code: https://github.com/Pythagora-io/gpt-pilot/blob/main/core/age...)

I think everyone who's seriously tackled the "code RAG" problem is aware a naive vector approach doesn't work, and some hybrid approach is needed (see also Paul's comments on Aider).

Intuitively, I expect a combo of lsp/treesitter directed by LLM + vector-RAG over "wiki" / metadata would be a viable approach.

Very exciting to see all the research into this!
The Canary Islands produce some good bananas, they're a bit smaller but sweeter
Their announcement (see Reddit for example) says it was a “content deployment” issue which could suggest it’s the AV definitions/whatever rather than the driver itself… so even if you had gradual rollout for drivers, it might not help!
We're really prepared for epic to go down and have an isolated cluster that we access in emergencies. I transitioned from software engineering so I've only been in the ED for a year, but from what I could see there didn't seem to be a plan for what to do if every computer in the department bluescreened at once.
I've said this elsewhere but the enabling of instant auto-updates on software relied on by a mission critical system is a much bigger problem than kernel drivers.

Just imagine that there's a proprietary firewall that everyone uses on their production servers. No kernel-level drivers necessary. A broken update causes the firewall to blindly reject any kind of incoming or outgoing request.

Easier to rollback because the system didn't break? Not really, you can't even get into the system anymore without physical access. The chaos would be just as bad.

A firewall is an easy example, but it can be any kind of application. A broken update can effectively bring the system down.
More like enterprise-level spyware