skysight-inc/HackerNews huggingface dataset:
The US has very weak employment checks and it's trivial to illegally work ones life here without having to commit any other crimes.

We also have weaker regulations that allow you to start a business with basically $20 and a pressure washer, and you can legalize it with a foreign passport. The English speaking countries generally have lowest barriers to start a business which is a good release valve when you can produce value but racists won't hire you (customers will at low enough price).

I suspect illegals and foreigners in general don't cause so many problems here because its easier to survive helping us than hurting us.
It’s editorial, also a opinion piece of the editor himself.
It’s worth noting that the “natural origin” proponents could not bring the definite evidence, either.
> Explain exactly how any AV prevents a user from checking e-mails and opening word?

For example by doing continuous scans that consume so much CPU the machine stays thermally throttled at all times.

(Yes, really. I've seen a colleague raising a ticket about AV making it near-impossible to do dev work, to which IT replied the company will reimburse them for a cooling pad for the laptop, and closed the issue as solved.)

The problem is so bad that Microsoft, despite Defender being by far the lightest and least bullshit AV solution, created "dev drive", a designated drive that's excluded by design from Defender scanning, as a blatant workaround for corporate policies preventing users and admins from setting custom Defender exclusions. Before that, your only alternative was to run WSL2 or a regular VM, which are opaque to AVs, but that tends to be restricted by corporate too, because "sekhurity".

And yes, people in these situations invent workarounds, such as VMs, unauthorized third-party SaaS, or using personal devices, because at the end of the day, the work still needs to be done. So all those security measures do is reduce actual security.
"EDITORIAL"
You are incorrect. I offered a position:

I do not like the approach presented in the article and I am unhappy about it being rewarded in society.

<< Your original statement is ridiculous to any sane person.

Would you be willing to elaborate? What is insane about it exactly?
Windows Update can, but crowdstrike does its own thing.
Does it appear - before deletion?
How is that different from point 2?
> 100%

Not sure about that. Groups of professionals don't appear better at
navigating this space than individuals. I'm sure you've sat in such
agonising meetings too. Common experience: They're hellholes of
group-think, risk aversion, inertia, legacy constraints, resistance to
change, pressure to reach fast decisions, duress or undue influence
from salesmen and 'partners'.

Have you ever seen a company of any size actually sit down,
open-mindedly weigh up a real and serious evidence-based long term
security plan built around risk analysis, a full network and service
overview, with all real software options on the table and all
stakeholders present. Companies made up of well educated people with
impressive job titles are as vulnerable to pitfalls and shortcuts as
anyone else. They just operate, and fall victim to scams, on an
organisational scale. Crowdstrike and other protection rackets are a
way to make a problem go away, not to face its complexity head on.
In southern europe we call this "Brain drain". It's a global phenomenon it seems, freedom of movement leads to contentration of productive forces to a few global cities, while the rest of the planet is increasingly deserted
Intel is currently limping along on government handouts, hoping people don't notice their latest generations burn out if you leave them turned on. Taking their primary competition away would push up profit margins and push down the need to fix the engineering. If they aren't dead already, TSMC disappearing would do it.

I wonder how global foundaries is doing these days.
> Approximately 100% of CVEs, crashes, bugs, slowdowns, and pain points of computing have to do with various forms of deserialising binary data back into machine-readable data structures. All because a) human programmers forget to account for edge cases, and b) imperative programming languages allow us to do so.

I wouldn't blame imperative programming.

Eg Rust is imperative, and pretty good at telling you off when you forgot a case in your switch.

By contrast the variant of Scheme I used twenty years ago was functional, but didn't have checks for covering all cases. (And Haskell's ghc didn't have that checked turned on by default a few years ago. Not sure if they changed that.)
Some people on twitter and mastodon were saying that, but they also said the file's contents weren't identical across machines... chances are the zeroed-out files were preallocated and not written to because the system crashed.
Windows has “system restore points” to which you can roll back. Those can help in rolling back a driver update.

In this case, however, the .sys files aren’t drivers, just config files that have a .sys extension, so such a recovery mechanism would have to be part of CrowdStrike, not Windows.
I suspect that regardless of which country CrowdStrike is from, the question would still arise: "should we really outsource information security protection of our critical infrastructure to country X?"

Naturally, the question of malicious intent would most likely be more or less prevalent depending on whether country X is considered an adversary.
Firefox partitions (and soon blocks) 3rd party cookies by default. That means they can't be used for cross-site tracking. Also not across different top level sites belonging to Twitter / X. The entity configuration for ETP does not change anything here.

The bug we fixed was in ETP, an older mechanism in Firefox, which blocks cookie access for known trackers, based on a list. Only for that mechanism we consider a hand full of domains by Twitter / X to be the same party. This is so we e.g. don't block their CDN if you're on x.com. We still block them on sites not belonging to Twitter / X.
This is especially relevant for ETP strict which does not only block cookie and storage access, but also blocks 3rd party loads from known trackers altogether. If we block Twitter's CDN on x.com the site breaks.
It’s quite impressive really — crowdstrike were deploying a content update to all of their servers to warn them of the “nothing but nulls, anti-crowdstrike virus”

Their precognitive intelligence suggested that a world wide attack was only moments away. The same precognitive system showed that the virus was so totally incapacitating that the only safe response was to incapacitate the server.

Knowing that the virus was capable of taking down every crowdstrike server, they didn’t waste time trying it on a subset of servers.

When you know you know.
Sometimes we forget that cybersecurity is not just about protecting against hackers. There is a bunch of threats from the inside – and they don't have to be malicious. Failing hardware, bad software updates, human errors are also threats that needs to be considered.
It's because Christians and Muslims banned lending money with interest, cf usury.
Cars are big, and during rush hour have an average of roughly one person in them. Cities are confined spaces with lots of people living in them. As such, you are condemned to have traffic jams when cars are the main form of transport.

To make car infrastructure "sufficient" you are required to make roads wider, which reduces the quality of life of those living in the city, and perversely increases the demand for car transport eventually leading to more traffic jams. Bikes, even in high traffic situations, move faster than cars that are stationary.

And yes, cars are very safe — but only for those inside of them. As they get bigger, heavier and with taller bumpers they get more and more deadly for pedestrians and cyclists.
Web scraping through a proxy to hide your own address is a shady business, by definition. So the "doesn't harm other people" bit is an oxymoron, IMO.
If it's accessible to the Internet, Google can make a private index for you with Cloud Search and you don't need a physical appliance.

https://workspace.google.com/intl/en_au/products/cloud-searc...
The punchline says it all: “Many bug bounty reports never assign CVE-IDs, leading to a false perception of security and software quality.”
"If you look closely at the screenshots, it becomes obvious that the reviews are fake" has your answer. :)
As I heard it, he did say it or something very like it, but about all users of a particular version of msdos. Until the next version was expected to introduce highmem.

Still a ghastly misquote.
No, from their benchmark setup, it’s more like 3x as much. So yeah it’s just really not competitive.
Show HN: A fake SMTP server for software integration testing
This is a side project of mine.

Use this as your SMTP server in a test environment to guarantee that your users don't receive test emails.

Looking for feedback, especially on the security side.
Pretty sure that's just a derivation from everyday handwriting. The i-dots and t-crosses are two typical elements that can't be written without lifting the pen, so it's quite a frequent thing to put pen to paper, write out a word that includes i and t but leave them unfinished so you can continue the rest of the letters in one fluid motion, then go back and finish them off by dotting and crossing them.

Hence dotting is and crossing ts is going back to do final touches that you've neglected or may have missed while working quickly or casually.
My point was, why a display at a check in counter needs to run EDR software to begin with? Why can't it run a locked down, slimmed version of Windows in an isolated network that has very low potential to get malware on it?

I know why, because there is, probably, a regulation that says that if you run an airline company, you need to have malware protection on all machines. I bet, some IT guy even tried to question the need to run EDR on a non-mission-critical machine, but he was stopped by a wall of "it is what it is".
See also: Museum of Failure https://museumoffailure.com/
Txtai: Open-source vector search and RAG for minimalists
In people's mind. It is just talk of war. People are talked into it. And again i hear this heroic rhetoric about defending one's country. It is pure propaganda. And to defend what exactly?

Military, a year of conscription life wasted to make you a potential tool of someone's politics. Forcing civilians with weapons to your will, while looting and raping.
LAN Manager is a whole family of programs. Don't confused LanMan the family with the one implementation in NT -- LanMan is quite a bit older than WinNT.

LanMan is an opened-up version of 3Com's proprietary DOS-based server OS, 3+Share. I installed many 3+Share boxes in the late 1980s and early 1990s.

https://en.wikipedia.org/wiki/LAN_Manager

3+Share used NetBEUI but LanMan was protocol-neutral, which was rare and exceptional back then. E.g. AppleShare only ran over AppleTalk, Netware only ran over IPX/SPX, and Unix spoke unto Unix -- and nothing but Unix -- over TCP/IP. (Addons to run TCP/IP on other OSes existed but most of them cost money. Often more money than the OS itself, in the case of DOS. And many had proprietary APIs: so for example Quarterdeck DESQview/X used TCP/IP but it couldn't talk to the free TCP/IP stacks Microsoft and IBM eventually distributed. (Two different TCP/IP stacks, natch.)

LanMan ran on OS/2 1.x, on various proprietary Unixes, and on DEC VMS, which DEC marketed as part of its PATHWORKS suite: file/print serving via LanMan, plus Email, terminal emulation, X11 servers for DOS and Windows... all over the DecNet protocol.
You can do 4k t/s at large batch on last gen consumer gear. You’re right their 70B are more competitive but still very much off the mark. If these cards cost $500 instead of $1400 then maybe it would be more compelling.
How do you get PCI DSS compliant? That's more important in the real world than paranoia about the FBI.
If it’s just AI I’ll be extremely disappointed. I want aliens!
Of course there has been 'climate change' and 'global warming' before, caused by things like large volcanic eruptions (deccan traps) or meteorites. But they have pretty universally coincided with mass extinctions. And when we say glabal warming is anthropogenic, we mean this time humans are causing the warming by emitting a lot of co2 (and methane and no2 etc). It is fairly unequivocal at this point. This time its entirely within our power to prevent another mass extinction, because this this time we are causing it. Why wouldnt we try?
Maybe you could ask your other alt-accounts seeing as these are your very first comments in HN and this dull spruiking post got upvoted 18 times in 20 minutes.
I don't understand the "rewrite X/Y/Z in Rust" trend that has been going for a few years.

I'm not familiar with Rust, but I'm almost sure it has a good C interoperability. If a certain piece of software is working well, what is the benefit of rewriting it in Rust?
Performance, I assume. Right now it may look like the wrong tradeoff, but every day in between incidents like this we're instead complaining that software is slow.

Of course it doesn't have to be either/or; you can have fast + secure, but it costs a lot more to design, develop, maintain and validate. What you can't have is a "why don't they just" simple and obvious solution that makes it cheap without making it either less secure, less performant, or both.

Given all the other mishaps in this story, it is very well possible that the software is insecure (we know that), slow and also still very expensive. There's a limit to how high you can push the triangle, but there's not bottom to how bad it can get.
Yes, good idea. Maybe I'll add it as an additional method of application. The motivation here was not to find an efficient way to construct terms, but as a fun interpretation of infinite craft. A much simpler solution would obviously be to type the term directly :D
It's not about coal plants being built, it's about how many are being built and long term planning behind it. This interview with Hannah shows how difficult it is to make China look good (it looks like she tries hard though, for some reason) https://www.nytimes.com/2024/04/30/podcasts/transcript-ezra-....

They ban coal burning in houses and they move plants out of big cities where tourists go but they still build more and more plants. "oh but they'll use them less surely and burn less coal" would be great but sounds rosy

> using renewables in preference to other sources of energy, with a very clear and sustained growth rate.

Note that it's for electricity. How is it calculated? If it's used to power their pump based water energy storage then does it count? If it's used to heat then does it count? Does it rely on CCP provided metrics here while pollution, coal plants and fossil burning can be measured independently (just look at satellite based pollution map)
Fast and extensible equality saturation with egg and Rust
What makes it better than iA Writer?
Doesn’t brain drain imply the smarter people are moving? I’m not sure that’s what’s happening here. I think it’s anyone who can get out.

When I was in Havana our AirBnB was next to the Spanish embassy. There was a long line every morning of potential emigres waiting for their turn. (I have no idea how the process works when they get to the front of the line, I just was told they were trying to get out of the country legally. )

After spending a couple weeks in Cuba it’s not hard to see why.
cringe rightoid opinion. you don't live in Europe and Fox News is lying to you.
Adding a c is hardly more difficult than adding a 0.

Matching packaging sizes is not necessary - I have had prescriptions that do not match packaging sizes many times - they will cut up sheets or transfer to other containers as needed.
Bignum Arithmetic by AWS
> Netware ran entirely in Ring 0

Netware 3.x did.

Netware 4.x let you demote NLMs into ring 1/2/3 for slightly greater stability.

See:
http://dune.pol.lublin.pl/pub/pc/novell/NetWare/ch07/ch07.ht...

Look for the section "Using New NLMs in NetWare 4.x"
1. This was normal for the time.

2. See my earlier comment: it's only true for 3.x and not for >=4.x.
In the shareware days I made pretty good money for a college student with a graphical Netware login utility called "vgalogin" (great name I know). It put the graphics card in VGA mode and integrated a screensaver and quote of the day along with a login dialog. Its main use was simplifying login batch files since with it you didn't need to detect a bad login in the batch file.

In those days "marketing" meant uploading the executable to Simtel (https://en.wikipedia.org/wiki/Simtel) and they would "announce" it. Getting those random checks in the mail from some company or college I never heard of was pretty cool.
at least BetterSnapTool was never available for free and I believe I can see the spikes in sales when the fake reviewers did purchase (just before they reviewed). Not sure whether one can check the pricing history of an app, maybe there are some sites which collect that data?
Interestingly, Notion has just announced today the ability to publish from their tool: https://www.notion.so/help/public-pages-and-web-publishing
It’s just another GPT wrapper right?
And this bussing showed that Ney Work and Chicago democrats were all talk and zero substance.
Chaos mode is an option when invoking rr that can expose some concurrency issues. Basically it switches which thread is executing a bunch to try and simulate multiple cores executing. It has found some race conditions for me but it’s of course limited
PDFs are a digital recreation of paper documents, with all the drawbacks of that.

Targeting ePub is essentially the same as targeting the web, the distinction between having the file locally or retrieving it from a server seems entirely meaningless in this context.

>not because I believe it is a good format.

It is a pretty much perfect format within the constraints.
I am the opposite. I constantly add ambiguity even when I'm sure. I'm trying to learn to do less of it.
I've used it for years for vulnerability development (when you need to debug why a particular exploitation run went wrong etc.).

It is indeed marvelous for many situations; except for concurrency bugs ;)
Canada has a much higher middle Eastern population than Sweden. Canada does not have a middle Eastern crime problem nor a middle Eastern unemployment problem.

I imagine the biggest difference is that the core of this group has been in Canada for almost 50 years.
Same! Escape Velocity and its sequels were at a very important point of learning software development for me. I didn’t get in to game dev, but being on the ambrosia software IRC server taught me a lot of things.
> our "servers" were a collection of random desktop machines

Also normal for the 1980s and early 1990s.

Because PCs were not servers, and servers were not PCs, and almost nobody made or offered server-class hardware built around x86.

The first I ever saw was a Compaq SystemPro and those things cost as much as a decent new car.

Wikipedia says it was the first ever PC-compatible server!

https://en.wikipedia.org/wiki/Compaq_SystemPro
One of my previous jobs had this appliance back >10-15 years ago, and honestly I'm yet to come across anything which assists with internal content discovery quite as well. I really miss it! (Side note, Confluence search is awful)
> It will increase cost

And of of course that cost would be absolutely insignificant relative to the potential risk...
Mate, you should try going out and talking to real people instead of a computer screen and see how they react.
Mate, you should try going out and talking to real people instead of a computer screen and see how they react to you saying such things.
And fun extensions that would make clicky clacky sounds when you typed, a bell when you hit return.

No one was worried about key logging.
Agree strongly.

And now look at the broken mess of Google today...
New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints
The Barbizon
Yep. This is like arguing that the best way to prevent school shootings is to give teachers guns.

I don't think AI would have done a better job convincing CrowdStrike's leadership team that a staged rollout strategy is worth the cost.

These issues are caused by people, not technology, so more technology isn't going to fix it.
notion urls are so long
With all the money a16z funnelling into the Trump campaign as it is, yada yada, I’m too lazy to make the rest of the line.
It is untrusted data in the sense of files being read from disk that are not part of the signed kernel driver code.
Yet we don't apply total surveillance to people. The reason isn't just ethics and US constitution, but also that it's just not possible without destroying society. Same perhaps applies to computer systems.
But 0 in Central Park, apparently.
And you can make a traffic camera with a Raspberry Pi. It could be as cheap as a planter. It's the bureaucracy that makes it expensive.

PS plants are expensive, they need very regular maintenance.
I love Typst for text and equations, but I find that it is taking me time to adapt to their table syntax and be able to make tables similar to booktabs. I'm hoping that Estout or Modelsummary will be able to write Typst tables with complex formatting soon.
You're right, ChatGPT is a good fit for the market that demands bullshit at scale.
<< I’m of the opinion that if sufficiently motivated and with sufficient constraints removed, anyone can learn and do anything.

Anyone can do anything if they believe enough..

It is a nice sentiment and I cling to it myself more often than not, because there is something soothing about it. The unfortunate reality, however, is that being forced onto thing for which I have no predisposition, is, uhh, counterproductive at best.

In short, I disagree with pre-supposition that your position requires ( we are all amorphous blobs that can be molded into whatever with sufficient amount of force ). And that is before we get to the question of whether it is even worthwhile to teach a kid with down syndrome calculus? Not possible. Worthwhile.

<< Many people need to be reminded that everything is possible if they aren’t dissuaded by unhelpful ideas or people.

No. People need to understand themselves. They need to experience their limits and then cater to their strengths and weaknesses accordingly. It is unhelpful to think that billions people on this planet are interchangeable cogs. We are not.

I am extremely unlikely to ever be like Georgi Gerganov. I simply do not believe I have the brain capacity needed.

It is fine to aspire, but I am not changing the world tomorrow.
It looks cooler.
You reminded me of TMON, a much more user friendly debugger if I recall correctly.
We Butter the Bread with Butter
A No Code platform. Yeah, I know it is a crowded space. There aren't that many great options yet tho, enterprise NoCode platforms are all bad, they don't know how to make good software.

Patching together a bunch of random React, NextJS, Prisma code won't do it for much longer.
Thanks! This is great. If you ever need extra housing for this, I would be glad to provide it.
I use Zettlr somewhat often. Honestly my favorite features are just:

- inline markdown preview

- VIM Keybinds (with some issues, as many implementations have)

- mermaid and LaTeX math support built in

(Notice that 2/3 of these are easily done on many other editors via plugins/extensions)

It has some other nice things too but I find it to be kind of slow and clunky. Still I come back for the way markdown works there because it feels like WYSIWYG but without so much mouse clicking. I have minimally used the pandoc and other publishing features but wasn't blown away by them vs just using pandoc
>If a certain piece of software is working well, what is the benefit of rewriting it in Rust?

Presumablly the idea here is to support Rust replay debugging, not just rewrite a C/C++ targetting replay debugger in Rust