skysight-inc/HackerNews huggingface dataset:
You guys must be using some different X11 than the rest of us.

Basically, with X11 and hidpi, all you can do is to set up the system to announce dpi with certain value and hope, that the clients will cope. Some can (I know of exactly two of them: Chrome and Firefox), others will up bump up the font size and hopefully are using a layout, so the window sizes will adjust to accommodate the textboxes, but all the non-text assets will stay low-res how they were, because they do not have any other. Apps for remote desktop access or vm console won't be able to display remote/vm correctly. And the rest will just ignore that and you get tiny stuff on the display.

And this is just the hidpi issue with single display. Won't go into the problems when running with multiple displays, with different dpi.

I also do not have a faintest idea of what "setting up Wayland" might mean. What did you set up? How? The only thing that needs to "set up" is to pick a wayland session in the display manager. There's no xorg.conf for wayland, setting up drivers, etc. What did you configure "for hours"?

I've been using 4K 27" for over a decade, and Wayland, since Fedora made it default. Since I have no 20-year old xdotool scripts, or others that inject events or try to grab pixmaps, I've had no problem.
And the Tootsie Pop Owl didn't bite
Its hard to imagine that they didn't know this would happen based on the USA recent past history with phone pricing.

There was a time (when I was young) where there was just one phone company in the USA. Prices were high for long distance (My mom is first generation so called out frequently). Then deregulation and competition (MCI/Sprint) lowered those prices dramatically.

In the late 90s I lived with roommates that didn't have long distance. We used phone cards we bought at the local convenience store. Those were actually pretty good price wise.
NASA's Curiosity rover discovers a surprise in a Martian rock
Many thanks! Trying to push an initiative for some time but decided that a concept speaks better than anything else. Hope Clem and team considers it
ALPR is the other big one. Your daily habits are in many databases and it’s easier than ever to sort out the outliers
I heard from a friend who knows someone in Crowdstrike that this bug had been sitting there in the kernel driver for years before being hit. Turns out that the flawed data was added in a post-processing step of the configuration update, which is after it's been tested internally but before it's copied to their update servers.

Their test setup was fine for the update data itself, it's just that they didn't catch it before it was sent out to production because they were testing the wrong thing. Oops.
France, Italy, Greece, Spain, Portugal are giving out the visas in Moscow at a higher rate than they used to in 2020. Some countries are extremely dependent on tourism.
Bank accounts are not an issue in the slightest
I can't really wrap my mind around the idea that [anything] in the prison system should be [so terribly broken]

It all makes sense when you accept that the American justice system is configured for maximum vengeance, not rehabilitation, and certainly not the best outcomes for society. WE MUST PUNISH THE SINNERS!
I see two different issues here, one is that allegedly Webflow added the traffic limits later. If they substantially change the rules, this is something I'd mostly blame the company for as you can only work around that by not using any SaaS products.

The other issue is that it looks like they have a bunch of nice, well-defined plans for the low end. They have all their limits and prices spelled out on the pricing page. And then they have an enterprise plan that seems to start quite early in terms of traffic, and you can't see those prices beforehand. And given the report here, those prices seem to jump enormously compared to the public plans. That is a very deceptive practice as they're not telling you the rules and prices beforehand.
There are some touchscreen input systems that will randomize the configuration of the numbers displayed to mitigate the "finger smudge" attack.
Three companies are mentioned--which one are you flying with?
The policies are written by folks who have no understanding of different operating environments. The requirement "All servers and workstations must have EDR software installed" leads to top-level execs doing a deal with Crowdstrike because they "support" Linux, Mac, and Windows. So then every host must have their malware installed to check the box. Doesn't matter if it's useful or not.
> However an artist friend of mine said generated images are easy to spot because every pixel is "perfect".

What does perfect mean? Does the pixels drawing 15 fingers count as "perfect"?

I think this heuristic is liable to fail in both directions. You will find images made by humans where "every pixel is perfect" (whatever that means) and you will also find AI which does mimic whatever imperfection you are looking for.
Unsubscription options can just be awful. I remember being subscription to hbr and to unsubscribe the experience was just so awful, I just never want to subscribe to another news paper ever again.

Similarly I was also giving monthly to the mozilla foundation, and when I wanted to leave they had a bunch of patterns in place to try to stop me, it was just awful.
Building the new hypermedia systems
> Also, do not enable the biometrics such as FaceID

I'd really like to see the ability to set a specific fingerprint to lock down the phone, requiring a different, more secure credential from the regular lockscreen to unlock. A long passphrase would probably be the right credential for most people.
> Spoke to our AWS account manager (we are a big big big org)

Is this how you got the inside scoop on the rollout fiasco?
To save everyone going to that abomination of a site:

vx-underground

@vxunderground

How to fix the Crowdstrike thing:

1. Boot Windows into safe mode

2. Go to C:\Windows\System32\drivers\CrowdStrike

3. Delete C-00000291*.sys

4. Repeat for every host in your enterprise network including remote workers

5. If you're using BitLocker jump off a bridge
Would the ATM thing actually work though? Afaik most European ATM banks issue 4 digit pin codes and will block and eat the card at 3 invalid tries. Not sure how many tries you have total, but I figure it's not that easy to guess it right.

Update: ChatGPT says 12 tries total to get it right, so that makes it ~10% success ratio?
Internal Russian passport "expires" three times during lifetime. For most of the adulthood it's not an issue
With my experience dating back to 286 machines, sometimes even kicking the box (literally) solves the problem
Is that like saying the Nazis are preferable over the Soviets because they are more consistently evil?

Fwiw, i disagree 100%.
Companies have staging and test process but CS bypassed it and deployed to prod.
I think OP used "..." because he has some sympathy. He could use better word than "smarter", but it is indeed a certain kind of smartness.

I am sure that when I will get old I will become less capable and I am worried about this. Because looking at birth rates and inverted population pyramids around me signify that I will be an old man in the sea of old people. A conman's dream I suppose. It is not that I don't have sympathy saying all this (just as I think OP thinks) for those other people, quite the opposite, because if I will live long enough I will be one of them.
1) No true scotsman fallacy at work.

There are situations where you will interact with the desktop, for debugging reasons not-withstanding. Saying anything else is hopelessly naive. For example: how do you know if your program didn't start due to missing DLL dependencies? There is no automated way: you must check the desktop because Windows itself only shows a popup.

2) What displays on the screen is absolutely material to the functioning of the operating system.

The windows shell (UI) is intertwined intrinsically with the NT kernel, there have been attempts to create headless systems with it (Windows Core etc;) however in those circumstances if there is a popup: that UI prompt can crash the process because it does not have dependencies to show the pop-up.

If you're in a situation where you're running windows core, and a program crashes if auto-updates are not enabled... well, you're more likely than not to enable updates to avoid the crash, after all, whats the harm.

Elsewise you will be aware that when a program has a UI (windows console) the execution speed of the process will be linked to the draw rate of the screen, so having a faster draw rate or fewer things on screen can actually affect performance.

Those that write Linux programs are aware that this is also true for linux (write to STDOUT is blocking), however you can't put I/O on another thread in the same way on Windows.

Anyway, all this to say: it's clear you've never worked in a serious windows environment. I've deployed many thousands of bare-metal windows machines across the world and of course it was automated, from PXE/BIOS to application serving on the internet, the whole 9 yards, but believing that the UI has no effect or no effectiveness of administration is just absurd.
Some users are flagging them as duplicates apparently, and that negatively affects ranking:

>Although submissions cannot be downvoted, flags act as a "super" downvote and enough flags will strongly reduce the rank of the submission, or kill it entirely (flagging is supposed to be used for submissions which break the site guidelines, but that isn't always the case in practice).

https://github.com/minimaxir/hacker-news-undocumented?tab=re...
I've watched multiple series on MasterClass, and the quality of both content and production is outstanding. The courses go deep into various subjects and often extend into other aspects of life as well.
My physical workstation (a Precision laptop) was affected and a single reboot fixed it. Most of my colleagues weren’t as lucky.
Well, don't use windows but if you can bypass Bitlocker to modify a kernel extension it seems like you could just bypass Bitlocker to install a keylogger / whatever?

With the utility of in a shared computer environment (say school library) you can get the administrative password with enough time.
> I really like their corporate IT products that are going to push MS out as you say. I particularly love iActive Directory, iExchange, iSQLserver, iDynamics ERP, iTeams.

You’re being sarcastic, but do you like those MS products, specifically Teams?

I genuinely believe that any business that doesn’t make Teams is doing the lords work.
Perhaps you mean the only way they could maintain their monopoly? Bell Labs was Bell's bargaining chip with the government to allow it maintain its market dominance. The government allowed, at least for a long time, the monopoly to persist so long as Bell Labs was acting as a public good. As part of that social contract, Bell was not allowed to capitalize on what Bell Labs produced. I expect Bell Labs is so notable because the public at large was able to take their discoveries and turn them into productive ventures, to which they did. That's not completely unheard of today – LLM-based businesses being a recent example that stem from Google opening up research to the public – but it is unusual for today's research labs to give away everything. Today, not even the research labs with that explicit intent (OpenAI) are willing to give away everything (or much of anything).
While this is rather off -topic, it would be more productive to look at the situation in the US when talking about that. For decades, the supreme court and politicians have taken away more and more rights in the name of security. But these "second-amendment-fetishists" have mostly been quiet about it, since the party doing most of the taking away of rights likes to court them by leaving their favourite right for last, like in the famous Niemöller quote.

So it seems that the usefulness of civilian gun ownership is rather limited when resisting a slow but constant slide into tyranny, like project 2025.
Who needs those pesky things like free and fair elections when you can just disenfranchise the competition!
GP told you how they don't work, but not how they do:

Current image generators work by training models to remove artificial noise added to the training set. Take an image, add some amount of noise, and feed it with it's description as inputs to your model. The closest the output is to the original image, the highest the reward function.

Using some tricks (a big one is training simultaneously on large and small amounts of noise), you ultimately get a model that can remove 99% noise based only on the description you feed it, and that means you can just swap out the description for what you want the model to generate and feed it pure noise, and it'll do a good job.
Because their OS allowed a third-party tool to crash it, worldwide, with no automated way of recovery?
Source of claim?
Ryanair is a great example of the ideology starting in the 1990s that individuals would want to spend every waking moment optimizing the most mundane purchases to save a fraction of a penny.

I hope we will soon get over this nonsense and enjoy a shared understanding that people are terrible at making decisions.

I'm not expecting the UX designers to lead the way here. Education perhaps? Better role models?
That’s like sarcastic sarcasm which cancel themselves.
Even if you pay, they may decide that your bag is not suitable for the overhead compartment. I once had a 40-liter backpack thrown on my lap by a flight attendant because it fits under the seat and she didn't have room for someone else's suitcase. Why they limit the underseat bag to a ridiculously small volume is a good question.
I'm guessing there's a lesson to be learned here.
> The real truth is that modern organizations are way too attached to cloud solutions.

I'm confused. This is a security product for your local machine. Not the cloud.

Unless you call software auto-update "the cloud", but that's not what people usually mean. The cloud isn't about downloading files, it's about running programs and storage remotely.

I mean, if CloudStrike were running entirely on the cloud, it seems like the problem would be vastly easier to catch immediately and fix. Cloud engineers can roll back software versions a lot easier than millions of end users can figure out how to safe boot and follow a bunch of instructions.
I really gotta learn how to use Pandas lol.

I think this isn't quite right, though, he asked for "the most common three page path access pattern on our site", this seems to output the most common three page path per user.

(for the future AI to mull over)
> Orgs are doing this because they are more scared of failing an audit than they are of the consequences failure of the underlying systems the audits are supposed to be protecting.

If a failed audit is the big scary monster in their closet, then it sounds like the senior leadership is not intimately familiar with the technology and software in general, and is unable to properly weigh the risks of their decisions.

More and more companies are becoming software companies whether they like it or not. The software is essential to the product. And just like you would never want a non-lawyer running your law firm, you don't want a non-software person running your software company.
It sounds like a race condition; you want the CrowdStrike updater to start and pull down the fix before the affected virus definition file is loaded and kills the box.

If you keep rebooting, you eventually may get those to load in the right order.
Entropy as disorder: History of a misconception (2019) [pdf]
2TB of bandwidth is $7/mo on AWS Lightsail. You can argue market segmentation but surely the bar for "enterprise" pricing should be something with enterprise costs. I as the sole user of my VPS can hit 2TB of bandwidth a month easily, it's just not that much.

When AWS, the company known for price gouging for bandwidth, sells for 1/1000 the cost the problem might you.
> Saturation can't be controlled on a per-pixel basis because, per the article, they're tuned to a specific wavelength at any given time.

Where does the article say this? I couldn't find it.
> I don’t see how Musk could do anything but support republicans for this one particular election.

He could choose to not support any party or candidate publicly and just sell cars. He could choose to not use Twitter to push his opinions and endorsements on Twitter users.

But it's true that his attention seeking narcissism won't allow him to do that.
Gen One: Innovations from the Paul G. Allen Collection
Maybe I'm not understanding, but wouldn't using the file hash to keep track of things make it really tricky if the file is modified in any way? E.g. when annotating a PDF it would lose all previous data associated because the hash would change
I can answer this. For the same reason I have run ClamAV on Linux development workstations. Because without it, we cannot attest that we have satisfied all requirements of the contract from the client's security organization.

Also if you are a small business and are required to have cybersecurity liability insurance, the underwriter will require such sensors to be in place or you will get no policy.
FBReader does this on MacOS
> Do you have a better hypothesis that would explain the extreme valuations of those stocks?

This isn't crypto, these are real, well run companies with good fundamentals.

The trade may be a bet that they are able to corner the market and extract more value. Maybe, it's wrong, but doesn't mean it's just empty hype.
*banned

Made it a lot harder for everyone involved, but still possible, as it’s a very useful technique.

PS: Since I'm being downvoted, here is the link showing that it is still possible using Reduced Security:

https://support.apple.com/en-gb/guide/mac-help/mchl768f7291/...

I doubt Apple will completely disable kext in the near future.
Making it hard enough to be impractical has most of the benefits already.
Sure, they keep water hot in select cities, and the rest is Mukhosransk territory that doesn't matter. You could be from Moscow with that logic!

Respectfully you have no idea, planned hot water downtime in summer is reality for most cities in Russia (including SPb with official maximum length of two weeks), don't try to paint it look better than the mess it is.

Other post-Soviet countries probably do better, especially in Europe, but I have no info
Investing in Rust: U.S. national security and programming languages
I'm not sure FaceID would have helped them as much in this instance going by pictures of the aftermath.
Microsoft should have a certification program for software that messes around with kernel modules that could cause a BSOD. I guess they already do this for hardware drivers.

Once software is effecting a certain number of endpoints the vendor has to prove they are testing sufficiently.
A common pain point for me is parallel data loading and processing for PyTorch or TensorFlow. Multiprocessing has a lot of bugs and pain points to deal with when doing ML. Examples: https://github.com/search?q=repo%3Apytorch%2Fpytorch+multipr.... Most of these issues do not exist in a multithreading world, because resource sharing is trivial in that case.

Since Python leads over any other languages in the ML community, and ML is a hot topic right now, it makes sense for Python developers to secure the lead by making the life of ML developers easier, which is by introducing GIL-less multi-threading.
I dunno this seems stupid to me. So 10 days worth of emergency food at $8 per meal?

Like olive oil is safe to eat for years, costs $5 / meal if it's all you eat and you get the fancy kind, and if the world doesn't end you can just use it and buy another backup bottle.
It really isn't. I am making a claim about a pervasive bias in scientific institutions I view to be course-correcting. I'll acknowledge plenty of scientific results I dislike as being true. Like I really dislike that every room-temperature superconductor thus far hasn't worked, and it really sucks that SARS-CoV-2 is airborne and damages the immune system

It's not completely possible to separate questions like "what is true about the world?" from questions like "how should we behave?", because the former must inform the latter, and the latter intrinsically informs what we choose to look at, whether we acknowledge it or not. Pretending you have no opinions is disingenuous and counterproductive to the endeavor of objectivity, because that's simply not true of anyone, and acknowledging one's biases is strictly necessary for mitigating them. Nonetheless, it is not "politicizing science" inherently to like or dislike certain results, or to think institutional biases exist
I’m genuinely shocked that there was bipartisan support on this. I can’t remember that happening on any FCC ruling since I started paying attention to the ones that made headlines and that’s since the first net neutrality era (which doesn’t mean it didn’t happen; just that I didn’t notice if it did).
Sure, but that's not what I said or you said, and my commentary was about relative measures of your salary to your budget.

If you can't make a mistake of your salary size in your budget then your budget is small or very tight, most corporations fuck up big multiples of their CTOs salary quarterly (but that turns out to be single digit percentage points of anything useful.)
Fresh, great!
You might want to put __pycache__ in your .gitignore, check here for example:
https://github.com/github/gitignore/blob/main/Python.gitigno...
> Where the engineers want things to be perfect and safe, because we need to fix the arising issues during nights and weekends. The business people are interested in getting features released, and don't always understand the risks by pushing arbitrary dates.

Isn't this issue a vindication of the engineering approach to management, where you try to _not_ brick thousands of computers because you wanted to meet some internal deadline faster?
Exactly, it's all about revenue. Not only for the airlines, but also for the airports. It's intentionally inconvenient so they can make a lot more money.
I probably read about this technique in Phrack or something similar .... so that kind of dates it.
Oh?

We were in need of an MDM to help staff (non-techs) with their Mac books. I haven't noticed any issues, nor have two of my staff who are trialling it. What's been your main gripe?

I'm a Dev but also manage the It team of one sys admin and haven't noticed any performance hits. Yet anyway, but it's only been two weeks.
Not really. These were kernel modules authorized and installed by the system admin. Of course kernel code runs the risk of crashing your system. The same is true on Linux, and according to another commenter it already has happened with Crowdstrike for Linux
Snap auto update pissed me off so much I started Nix-ifyng my entire workflow.

Declarative, immutable configurations for the win...
Am I the only one who has nothing important on my phone and also don't lock it at all.

Can't even get emails on my phone. I can however post comments on hacker news. FBI can have this comment for its data.
Just perhaps the idea of sticking everyone's retirement funds into massive passive vehicles was a bad one and has an unhealthy effect on the market, as you illustrate here. It is the way of things now so I see your point and it would be harmful to people, but getting in this situation has seemingly removed what could be a natural lever of consequence. We can't really hold companies accountable lest all the "regular folks" that can't actively supervise what they're investing in become collateral damage.
It seems that your insistence upon using incoherence is based upon a misunderstanding of the word. Coherence does not mean to be factual, but to be logically ordered. Also, the word "fabricated" is generally used colloquially to describe made up information without factual basis.
Couldn't agree more, here's one that is quite amazing.
- https://youtu.be/c46fr2EZOhQ (Adam Fulara)