skysight-inc/HackerNews huggingface dataset:
We've tried to change attitude around obesity, exercise, eating habits, etc. We should keep trying, but let's not pretend it's a new, unchallenged issue. Changing the culture of a country is hard.
Their changes to the equation seem to only push it even further into "chance that there exists another Earth with humans on it" territory.
It sure does read my mind.

I was just exploring the options, it's great otherwise.
As a pedestrian in a large city, I have been nearly run over by cyclists a few times, but I don't generalize from that though.
It says it's a C frontend for `zig translate-c` which translates C code to Zig code. `zig translate-c` is not required for most Zig projects or even for most Zig projects that interop with C.
The Zope application server uses something like that, ZPT (Zope Page Templates) and TAL (Tenplate Access Language), IIRC. Plone, a CMS built on Zope uses them extensively.
Don't follow trend. JS and Web is bad may be bad. But building interface is not.
One other fun type are the user operated gates. Normal farm gates on both sides of the railway, with a red/green aspect light telling you if it is safe to open the gate. Once you've driven through you have to stop and then close the gates. Last time I used one of them, by the time I walked back to close the first gate the signal had gone red so I waited.

We also still have some full barrier crossings operated by a signalman near me. There's something pleasing about that.
I've always wondered about the feasibility of using GMO mangroves or similar highly propagating or migrating species as a carbon sink
While beginning calculus students often pick up derivatives and integrals (and the associated formulas) easily, the delta-epsilon definitions of limits and continuity are a well known stumbling block for many. I've been told that the difficulty stems from that being the first place math beginners really see nested quantifiers: (forall epsilon)(exists delta)(...). In logic though, nested quantifiers are fundamental. I don't know what happens if someone tries to study logic without first having studied calculus. Maybe it's a good idea, but few people do it that way.
>Was there ever such a time? If so then tell me when it was.

The 90s and into the early 2000s at least. You would get laughed out the room and then fucking fired if you hooked anything critical up to the internet.
The difference is internal subsidies are legal and export subsidies are not.

That is the legal difference.
There should be some sort of side-project tinder for starter engineers and finisher engineers.
I’m afraid the profitability calculation shifted it in favor of off-the-shelf OS a long time ago. I agree with you, though, that a general purpose OS has way too much crap that isn’t needed in a situation like this.
Decent guesses. I won't be surprised if someday (maybe in court testimony) we find out that you are very close to correct.
No. Nobody can understand how to use code mods. I could not. But I'm not sure about others.

My view is that those engineers in fb are no longer there to promote and support that project. Or they would have migrated to learning ai ml
Umm, they (adversaries) already knew? Been in cybersecurity for 18 yrs. We told customers about issues like this all the time
I noticed something related in my borough (not Manhattan), over the past decade there are far fewer trash cans. In front of places like Dunkin, Starbucks etc.

These are the small things that add up to make people irritated. Having to shlep a block to throw out a few dirty napkins sitting in my car.
This website is indeed hosted by Cloudflare.
>and hospitals can't exchange patient information or send images from MRIs and X-rays to radiologists

My dentist literally took a photo of my x-ray with his phone and sent it to to my orthodontist via Whatsapp and everything went quick and smooth, much faster than the official channels. Solutions to get a job done quickly and efficiently in case of emergency always exist, they're just not "by the book".
I'm sorry but even Linux requires frequent security updates due it's large ecosystem of dependencies. It's more or less required by every cyber security standard to update them just like windows.
As I understand it, customers do have control, but in this instance CrowdStrike overrode the settings of the customers.
Isn’t this just the builder pattern without Build()?
Airport staff don't maintain infrastructure, at best they maintain front ends to it
up since 2016!

https://nouptime.com/admin.php
I assume you're not in Sec industry?

This sounds like someone who said "dropbox ain't hard to implement"
I think the evidence is that, on the whole (since we’re broadly referring to “people” and obviously there is tremendous diversity contained within), people do not hate each other, they hate the “other” team (whatever that may be). We’re wired for in/out group think to such a high degree that it’s incredibly easy to dial in division and purpose it to some end.

Two individuals in a room are more likely to find common ground than hate until you bring up the right sport they happen to be on opposing teams for.
Strange how TFA fails to mention The Salmon of Doubt. Published posthumous, it's the earnest testimony of the late Adams and his thoughts on, quite literally, life, the universe and all.
ChromeOS is just Linux, isn't it? It's going to suffer from the same problem as NT re: a buggy kernel mode driver tanking the entire OS.

Google gets a pass because their Customers are okay with devices with limited general purpose ability. Google is big enough that the market molds product offerings to the ChromeOS limitations. I think MSFT suffers from trying to please everybody whereas Google is okay with gaining market share by usurping the market norms over a period of years.
Articulation is much more complex. You go from "vacuum thing I found that looks like trash" to "create a 3D model of this scene, route the robotic appendage thru it, find the ideal grasping point at center of mass, make first attempt, compensate for shift due to wind/previous attempt..." etc.

Then there is the mechanics. Aside from mobility, consider a grasping arm's many servos and wiring harness vs. electric motor goes brr for the vacuum.
The issue with UNIX on PCs was the $1000 or whatever licensing cost.

Just as some trivia, Novell bought UNIX System V R4 from AT&T and planned to merge it with Netware to create "SuperNOS", which would have been a direct competitor to NT. But they never got it out the door and spun-off UNIX to (old) SCO.
Major name truck stops are also mostly good in my experience, as are bigger gas stations that are right off the interstate (more variable).

Yeah fast food places are hit and miss, and post-COVID most are not open past 10pm or so.
Ask HN: Has anyone else been having issues with Cloudflare captchas this week?
I seem to be getting blocked over 95% of the time on my laptop (10yr old 4-core gaming laptop), on all browsers, including Chrome and Firefox.

It seems that Cloudflare increased some kind of proof of work level in their captchas around the start of this week, since every time one shows up it drains all of my CPU for 20 seconds before giving up and looping, or occasionally, after 10 minutes of refreshing and redoing the captcha, letting me through.

It doesn't even have the decency to ask for an interactive challenge after clicking the checkbox, it just wastes CPU cycles... I'm sure the real bots love that.
The public T&C is for small businesses. Any large business is going to be negotiating very different terms which are not public.
https://images.amcnetworks.com/ifccenter.com/wp-content/uplo...
Induced demand should really be called "insurmountable demand." If there's a million more people who would take a traffic-clogged freeway if it were moving at 6mph, then it will always be clogged with traffic.
They mean running it on typescript post conversion.
I don't know, Curiosity, Perseverance, Sojourner, Spirit, and Opportunity are all pretty cool. Perseverance even had a helicopter robot buddy.

No legs. Just wheels. You might need to tweak your "cool" setting. You might be too aggressively filtering out some cool things
Because we live deep into the internet of shit era.
Is it possible to do what Zig does and cross compile to any OS/arch, from any OS/arch?

Last I tried, I found some compiler options and commands to do it, but they were badly explained, I tried for hours and it just didn't work at all, so I gave up.
Yeah it’s sad. Some companies are better than others, and it’s personally my favorite part of software engineering, but a lot of large companies cut it at the first opportunity.
It’s also the proliferation of not-really-technical people calling the shots and even developing at technical programs.

15 years ago most people in the industry actually wanted to be there except for perhaps a few exceptions.

Now it’s just like any other job with the majority of developers not giving a shit about what comes out which turns out to be shit.

I haven’t ran in to a senior or lower developer that actually bothered to test their junk in at least a few years.
> I bet Crowdstrike's hiring process focuses on Leet Code problems and ignores practical considerations like, real world engineering considerations that matter when building an agent.

You are 100% right. What has happened is that tech companies have become filled with people managers instead of engineering managers. People managers don't understand what makes for good tech. They rely on proxies for everything.

Leetcode is a proxy, so is # of commits, or hours in office, story points etc.

A real engineering management is fundamentally involved closely with engineering and processes. They already have a large toolbox of good practices to lean on. If the CEO pushes something, they use this toolbox to demonstrate how it could affect the business.

People managers need to be called out and removed from the industry. It is literally a matter of shareholder value at this point.
AV definition needs to be roll out quickly for 0day.

Developers aren't used to security lifecycle so quite a few commenters in this thread equates SDLC and Security
Yes. There should be a robot that tazes people that throw cigarette butts on the ground.
> externalizing a threat

Yes, it's illustrative of the USA. Due to monopolies, lack of local control of infrastructure etc., a feature is rolled out that grinds hospitals, airports etc. to a halt. Surely due to forces we're surely familiar with - a rush to get profit-making features out, a neglect of correctness and stability, cost cutting etc.

Then we have the New York Times, considered the sober voice of the establishment. What is discussed? Reflection on how entirely US-internal corporate processes led to this? No. A thought experiment about what if some external actor, perhaps one tired of US imperialism or something, had performed this.

I read this after seeing Hulk Hogan rip his shirt off at the RNC in an Idiocracy prophecy manifested, while the other presidential candidate immersed in the dementia of the gerentocracy clings to power amidst his cohorts pleading he step aside.

As I watch the US arming the Ukraine to fight Russia, I think back to 1986 and Gore Vidal's plea for an alliance with Russia lest Americans become either farmers or just entertainment for the more efficient Asians. Another prophecy which seems due to come to pass.
A lot of comments here blaming management and executives, but bear in mind: who was the person who wrote the buggy code? Who was the person who pushed the release button? Sure, broken process, poor release engineering practices, whatever. And who, ultimately, implemented those release engineering processes?

The engineer who caused all this has surely already been fired, but that's just scratching the surface--I hope this is brought to court as criminal negligence.
Why not work with a tutor? Also I found the fast.ai videos good for explaining stuff like gradient descent.

I don't see spaced repetition being useful for theoretical math though maybe it is ok for calculation. Main thing as you say is grind out problem sets, and that's more a question of logistics and motivation than finding the right textbook.

I've always been skeptical of sites like mathacademy but I'll take a look at it.
You might consider that things have changed in the past 20 years. Also that medicine operates differently than forest logging.
Crowdstrike has really redefined malicious compliance
I almost had to defer a procedure for one of my cats because my vet’s systems were all down. This meant they couldn’t process payments, schedule appointments, use their X-ray machine, or dispense prescriptions. (Thankfully, they had the ingenuity to get their diagnostic equipment online through other means, and our prescriptions had already been dispensed so we didn’t have to reschedule.)

I would imagine it’s the same story at human hospitals too that ran afoul of this. I wouldn’t expect life-critical systems to go offline, but there’s many other more mundane systems that also need to function.
In apostrophecms you can easily create setting and content types with custom defined fields. There are quite a few good ideas in there.

Those are mostly used on the node side of things, but often for convenience also shared to the front end.
Servers cost money though. And generally, they cost proportionately more the more users you have.

This means that the standard information wants to be free/free software arguments ultimately have costs to cover (like, you used to need to pay for GNU tools to cover the cost of postage and storage).

Any approach that ignores this economics is just gonna fail (and that would be sad).
> ( ... ) experienced significant disruptions as a result of CrowdStrike updates, raising serious concerns about the company's software update and testing procedures

To me the issue isn't CrowdStrike's testing procedures. To me the issue is why does Debian depend on CrowdStrike? Does anyone understand this?
I don't think Romans invented sewage systems or plumbing. That existed all over the Mediterranean for hundreds of years prior we just don't know much about them (no written sources, less archaeological research/evidence etc.).
- pushing patches is objectively a good idea, rapid response to threats and all.

- Whats bad is instant global 0->1 rollout, instead of more gradual, blue/green/canary however you call it. With gradual rollout policy this whole thing could have been caught at their first couple guinea pig customers, and not the whole world
I made a web framework a long time ago that did this. https://twisted.org/documents/8.2.0/web/howto/woven.html
I used to work in this space, and I always had the nagging question of "is any of this stuff actually useful?"

It seems a hard question to answer, but are there any third party studies of the effectiveness of Crowdstrike et al. or are we all making our lives worse for some security theater?
People stop caring when they see their friends getting laid off while the CEO and head of HR get big bonuses. That what happens at most big companies with subpar executives these days.
Adding to the injury, it would appear other bad actors are impersonating CrowdStrike to further nefarious ends ...
Yeah you can define extra global settings extending the existing fields, so we used that for our multi tenancy solution. And is available on the node side of things as well as on the frontend.
Great, eliminating half of transistors is a lot.
> "We're deeply sorry for the impact that we've caused to customers, to travelers, to anyone affected by this, including our company

“We’re sorry for you, but think of us, we should all be sorry for poor us, too!”

He did ok at first but couldn’t help including themselves in the victims list.

And unless they are sending workers to reboot customers’ machines, they are not really helping as much as they imply.
What gets me is that much of the OSS/Linux ecosystem consists of thousandas of lashed together piles of code written by independent and only very loosely coordinated groups, much of it code and lashed together by amateurs for free, and it is still more robust than software created by multi-billion dollar corporations.

Perhaps one reason is that OSS system programmers are washing their dirty linen in public; not a matter of "many eyes make bugs shallow", but that "any eyes make bad code embarassing".

Just for example, I'm planning to make one of my commercial projects open source, and I am going to have to do a lot of fixing up before I'm willing to show the source code in public. It's not terrible code, and it works perfectly well, but it's not the sort of code I'd be willing to show to the world in general. Better documentation, TODO and FIXME fixing, checking comments still reflect the code, etc. etc.

But for all my sense of shame for this (perfectly good and working) software, I've seen the insides of several closed-source commercial code bases and seen far, far worse. I would imagine most "enterprise" software is written to a similar standard.
Robert C. Martin has been talking about this same topic for years.

He believes that just like in the medical field, the software industry must self-organise before government start imposing draconian measures about how software should be developed.
"... I couldn’t find a general non-fiction book with the information I needed, so I found and ordered the best textbook I could find on the subject."

Which textbook did you get?
Oh look, only took 7 comments to find someone that is making the assertion that bad UX is a partisan issue.
This is almost Ukraine's levels.
I have four questions for Kurtz:

1. In 2010 you were CTO of McAfee when they shipped DAT file version 5958 which caused thousands of computers to crash.
In 2024 you’re CEO of CrowdStrike which has caused millions of computers to crash. Why haven’t you learned from your mistake the first time and how many do you aim to crash in 2038?

2. McAfee was forced to sell itself to Intel as a result. Who do you think will buy CrowdStrike once this debacle is over?

3. You left McAfee because you saw a laptop on a plane take 15 minutes to upgrade McAfee’s software. What do you have to say to everyone who was on a plane that was grounded for hours because of the CrowdStrike upgrade?

4. You were paid 46 million USD for the previous year. How much do you think you personally owe in compensation for your latest blunder?
Holy crap what kind of laptop are you running?
I don't think an EULA absolves you of any possible liability. Courts can more or less decide to ignore it if they see sufficient reasons to.
Media that does badly will try new things.

But there also many like ESPN who stick to their topic decade after decade.
Launch of the New Kagi Community Server and Search Builder
In vim mode, it's just LEADER-[ and LEADER-].
Irish and scots-irish aren't the same thing https://en.m.wikipedia.org/wiki/Scotch-Irish_Americans
Oh, great. I guess that counts as phone infrastructure.
This is not about product quality.

This is marketoid head-shitting influencers selling garbage to people who have no idea what the fuck they are doing other that compliance box ticking to cover their paranoid vendor induced psychosis. They have no idea about threat modelling, no idea about how an operating system even works. Using the CIA triad, they traded off AVAILABILITY entirely, CONFIDENTIALITY partially by sending every fart a system makes to some cloud company for some false sense of INTEGRITY that the vendor does not even guarantee. In fact I've found fuck all evidence that the product actually does anything at all in a correctly layered security architecture.

This is the diametric opposite of a security proposition. A house of cards built on lies and incompetence. Literally this product is the definition of malware. It egresses data you have no control over. It has built in remote command and control that can take you out. And it runs completely arbitrary code in ring 0 (clearly written by a blind monkey)

I called this ENTIRE thing in March 2023 as a critical business risk and the above people steamrolled it. Literally I have the objections recorded and I'm going to use it at this point to steamroll them the fuck back.

It doesn't matter if it's made of shit if people buy it. It happens to be made of shit though.

I am done with this now. I am so fucking done.
But are you familiar with Arth & Andersen? https://en.m.wikipedia.org/wiki/Arthur_Andersen
EDR stands for Endpoint Detection and Response.

People don't realize there's that last bit: Response, what do you do when something is Detected.

That's your Admin setup.
Right now on the frontpage: 'CrowdStrike broke Debian and Rocky Linux months ago, but no one noticed'

[1] https://news.ycombinator.com/item?id=41018029
On the other hand OpenBSD doesn't require very frequent patching assuming a default install which comes with batteries included. For a web server there's just one relevant patch since April for 7.5: https://www.openbsd.org/errata75.html
I’m not even sure it’s more profitable to do things wrong it’s just easier and more advantageous for individual managers
Almost all the customer names in that excel file are taken from "huilende rappers - waddepjedangedaan", on a joke rap album by drum and bass legends noisia. It's all in Dutch... but the made up names are so incredibly funny that i use them for dummy data everywhere.

https://m.youtube.com/watch?v=o4uLvqM7Clc
I found the text and workbooks for my mathematics courses at the Open University in the Netherlands absolutely fantastic. They are created / supervised by a famous (educational) mathematician in NL named Jan van de Craats.

The method was designed for self study, and the absolute best I had ever worked through. Perhaps material from other similar institutes are of similar quality?

https://nl.m.wikipedia.org/wiki/Jan_van_de_Craats
Posixutils 0.2.0 released – get a grep, people:)
> but I don’t believe running this thing all day long on a public beach is the primary goal.

So it will create more waste than it will ever dispose of.

> not a commercial product which should be picked apart as flawed.

This is hacker news. It does not matter if your product is "commercial" or not. If it has flaws, they will be discussed here, we are not obligated to be cheerleaders for ideological solutioneering.
i dont think it matters, if you have any exception in the critical boot part, you will end up with this.
Rust cannot fix this. Microkernels might.
Can we deploy these in Puerto Rico? Some beaches are worse than others.

Source: Born and raised. :)
Programmers have little to no power in development and release processes. Management has the power.

Also, it's the customers fault for clustering blindly into Crowdstrike. There needs to be diversity and choice.

Moreover, if uBlock Origin can be an open source success, then an open alternative to Crowdstrike can in theory too.
Both not very appealing. Don't want to direct people towards a google site and I don't want to keep re-making an image every time I add an entry to the table.
JO is giant in the industry; a longtime working professional with fantastic pedagogical chops. In my opinion, if he's talking, I'm listening.
Microsoft needs to apologize too... they recommended CrowdStrike to customers. See for example: https://learn.microsoft.com/en-us/mem/intune/protect/crowdst...

Apparently there was no vetting of this company before allowing them to mess with the Windows kernel. Apple has more vetting before they will let even a TODO list app into their app store.

What should Microsoft have done? Require CrowdStrike to have documented processes, and require periodic (like every 6 months) third-party auditing that they have the right processes, and they are complying with their own processes.

SOC 2 requires this, see https://en.wikipedia.org/wiki/System_and_Organization_Contro...
I was thinking of Integer Linear Programming when I saw the title. Just another example of why acronyms are bad.