skysight-inc/HackerNews huggingface dataset:
it is not a one-off. this is commonly done in India. in fact people even put a branch of bananas into a steel storage drum full of raw rice to help them to ripen. I don't know the science behind it.
It depends on your definition of safe. You won't be robbed. You may be assaulted on the street at night even in downtown Minsk. But the biggest risk is the state.

If someone in the security apparatus decides that you should be taken hostage, tortured and beaten to death to show off to your government, they will do it and there will be no way for your consulate to help you.

It's tougher for locals. Over 300,000 people out of around 9 mln left the country since 2020, escaping from prosecution, prison or simply as they lost their jobs because of a smiley, comment on social media or just because they were subscribed to an opposition Telegram channel.

You have to understand that street crime and organized crime are virtually non-existent because thugs rule the country.
What you're describing is a system where the degree of acceptable failure is determined after the software becomes a product because it is being determined by how important the buyer is. That is backwards and unworkable.
Sounds just like your average antivirus then.
Sorry, no - I was hoping by posting this that someone might be able to provide more info.

Here's what I got from a Reddit post:

CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes.

Workaround Steps:

Boot Windows into Safe Mode or the Windows Recovery Environment

Navigate to the C:\Windows\System32\drivers\CrowdStrike directory

Locate the file matching “C-00000291*.sys”, and delete it.

Boot the host normally.
That's crazy, imagine you have thousands of office PCs that all have to be fixed by hand.
Reframe Technical Debt as Software Debt. Treat It Like a AAA-Rated CDO. (2022)
Prompted by this absolutely wild Crowdstrike-induced global outage, reposting a blog post I wrote...

> Software debt is networked.

> I'm writing this in the wake of the aftermath of the disclosure of the log4j zero-day vulnerability. But this is only a recent example of just one kind of networked risk.

> With managed services we effectively add one more level to the Inception world of our software organisation. We outsource nice big chunks of supply chain risk management, but we in-source a different risk of depending critically on entities that we do not control and cannot fix if they fail.

> Not to mention the fact that change ripples through the parallel yet deeply enmeshed dimensions of cyberspace and meatspace. Code running on hardware is inexorably tied to concepts running in wetware. Of course, at this level of abstraction, the notion applies to any field of human endeavour. Yet, it is so much more true of software. Because software is essentially the thoughts of people being played on repeat.
In this week's episode of DevNtell, we're joined by Daniel Porteous, a software engineer from Aptos Labs, who'll give us an overview of Aptos Move: A Web3 Programming Language and Runtime.

We will learn about Aptos Move, how it differs from other smart contract languages, and how it makes for a delightful development experience.
Well done to your daughter! She is clearly a smart one. I wish her the very best for her future career (possibly) in computers. :)
As the article already points out, there's a new, more relevant bogeyman in town: AI Act (https://en.wikipedia.org/wiki/Artificial_Intelligence_Act).
We must demand both financial and criminal liabilities against the perpetrators! Get the torches and pitchforks out! We need to teach them a lesson!
I stumbled over it but didn’t installed it because the website doesn’t mention the ebook functionality.

“Sioyek is a PDF viewer with a focus on technical books and research papers”
Be aware that enterprise firms actively choose and "asses" who their AV suppliers are on-premis and in the cloud not imposed by msft. Googling it does seem that CrowdStrike, does have a history of Kernel Panics. Perhaps such interesting things as Kernel panic should be part of compliance checklist.

Googling it seems crowdstrike has a history of causing kernel panics.

https://www.google.com/search?q=crowdstrike+kernel+panic
Hmm? It was released for two plus months? 5.6.0 and 5.6.1

I'd also say this wasn't a good example of 'linux handling it better': usually when a mess like this occurs on windows all the corps get a quiet tap on the shoulder that they need to immediately patch when MS releases it, then a few days later it hits the news. In XZ's case, the backdoor was published before the team knew about it, huge mess.
I'm assuming Linux implementation is different and the bug is not present there.
Using your own product is a superpower
This is why I sometimes think on prem hosting is better.
Perhaps the organisations have a similar security posture. And that creates a market that will eventually result in a few large providers who have the resources to service larger corporations. You see something similar in VPN software where Fortinet and Palo become the linchpin of security. The deeper question is to wonder at the soundness of the security posture itself.
If the vending machine handles credit cards, wouldn't Visa / Mastercard / etc. basically require it as part of their security requirements? Or it's just general CYA from someone that's backfired badly.
Thank you for your professional reminder. Currently, I am using a third-party API directly and haven't paid attention to specific licensing details. Your reminder has brought this to my attention, and I will make sure to address it. Thank you for the heads-up.
The problem is seemingly specifically in the Windows driver, you're unlikely to see an issue if you're not running Windows.
> give clients control over this but they pissed over everyone's staging and rules and just pushed this to production.

Interesting..

> We have to literally take each node down, attach the disk to a working node..

Probably the easiest solution for you is to go back in time to a previous scheduled snapshot, if you have that setup already.
USA can no longer be trusted to supply import technology for the world.
Hopefully all of them.
And like most AV systems it seems to be a bigger threat than what it supposedly protects against. Seriously how is it acceptable to have one corporation push a live update and take down tons of critical services all over the world. Just imagine what a malicious actor could accomplish with such a delivery vector.
It's not just Crowdstrike, it's all up and down the software and hardware supply chain.

It's that so many people are on Azure - which is a defacto monopoly for people using Microsoft stack - which is a defacto monopoly for people using .Net

And if they're doing that, the clients are on Windows as well, and probably also running Crowdstrike. The AD servers that you need to get around Bitlocker to automatically restore a machine are on Azure, running Windows, running Crowdstrike. The VM image storage? Same. This is basically a "rebuild the world from scratch" exercise to some greater or lesser degree. I hope some of the admins have non-windows machines.
That, and the 20-page grad-level dissertation on some esoteric subject randomly in the middle of the book.

This made me smile because while I enjoyed Seveneves there was an entire interlude discussing swarms of spacecraft cooperating to avoid debris.
> When I first read about Darwin Machines, I looked up "evolutionary algorithms in AI", thought to myself "Oh hell ya, these CS folks are on it" and then was shocked to learn that "evolutionary algorithms" seemed to be based on an old school conception of evolution.

I think a lot of the genetic algorithms people do implement recombination-like things. Most of the things operated on aren't really structured like genomes so it makes less sense there.

> But intelligence like you or I's operates in an unconstrained problem space. I don't think you can apply gradient descent because, how the heck could you possibly score a behavior?

> This is where evolution excels as an algorithm. It can take an infinite problem space and consistently come up with "valid" solutions to it.

Evolutionary search also relies on scoring. Genetic algorithms on computers hardcode a "fitness function" to determine what solutions are good and should be propagated and biological evolutionary processes are implicitly selecting on "inclusive genetic fitness" or something. You can't apply gradient-based optimizers directly to all of these, though, because they are not (guaranteed to be) differentiable. There are lots of ways to optimize against nondifferentiable functions in smarter ways than evolutionary search, and these come under "reinforcement learning", which does work but is generally more annoying than (self-)supervised algorithms.

> I think Darwin Machines might be able to explain "animal intelligence". But human intelligence is a whole other deal. There's some incredible research on it that is (as far as I can tell) largely undiscovered by AI engineers that I can share if you're interested.

As far as I know human brains are more or less a straight scaleup of smaller primate brains.
Hence, Windows should blue/green kernel modules and revert to a past known good version if things break
Yeah, if I had a spare million, I can imagine buying that dip.
Haha, yes, I originally planned to create a Spanish-language website.
Yeah, airlines prefer mid-week chaos & grounding.
This was particularly interesting (from the reddit thread posted above):

> A colleague is dealing with a particularly nasty case. The server storing the BitLocker recovery keys (for thousands of users) is itself BitLocker protected and running CrowdStrike (he says mandates state that all servers must have "encryption at rest").

> His team believes that the recovery key for that server is stored somewhere else, and they may be able to get it back up and running, but they can't access any of the documentation to do so, because everything is down.
Show HN: Easycomment.ai – Instagram Comment Exporter and AI Review Summary
Yes it’s rebranded antivirus for enterprise with new fancy name - “endpoint security”. Also has remote fleet management and firewall features
Unless attacks take down infrastructure regularly, we won't go back to decentralized model. The internet itself was created decentralized to withstand a a war .
My choice is https://github.com/AnySoftKeyboard/AnySoftKeyboard/

It does have glide typing, even.though I don't use it.

It rather uses long-tap to access multiple symbols, and can be split or pushed to a corner on devices with a big screen.
> These small 'downages' basically never cause serious issue.

Hospitals, airlines, 911, grocery stores, electric companies, gas companies, all offline. There will be more than a few people dead as an indirect result of this outage, depending on how long it lasts.
I'm a fan of the levels of Poker thinking: https://www.blackrain79.com/2020/01/outsmart-your-opponents-...

Basically, play one level - exactly one level - beyond where you peg your opponents at.

Poker is not about playing cards. It's about playing people. Cards is just how we keep it civil and not too personal.
> I have found that audiences genuinely appreciate when you speak powerfully and simply

Unfortunately, that only works if the speaker has interesting ideas to share. Often, obtuse language hides the lack of interesting ideas. Sometimes, there are no ideas at all.

Saying "most of our ideas were pretty bad" only works if an interesting idea comes afterwards. But such every interesting idea requires a lot of work; work that many speakers have not performed.
Still counts as FaceID.
Good. That's the HN way.
I don't know if this is more obvious to you than you let on but in case it's not, your software at first glance seems potentially harmful to children and is very clearly biased towards a conservative viewpoint.

It shouldn't be a suprise to end up with the user base you did when you are intentionally (or possibly unintentionally) biasing your filter the way you do.

With all due respect, the filter list reads like a list of things a drunk uncle would complain about at the family BBQ. I mean really chatGPT girlfriends???

To give some constructive criticism, I think you need to take a step back and decide if you are building a politically motivated tool or not. I want to be clear that what you have here is not representative of the moral status quo in the United States. It can be easily to think it is depending on the circles you frequent but it's statistically just not.

Consulting with someone to help eliminate politically bias in the filtering could go a long way to improve your potential customer base. Most parents I know would take one look at this and run.

In a very general sense I think your site feels too technical. Are people who can't control their children's computer usage really reading patch notes and switching website themes from a drop down?

Sorry if this sounds harsh. I originally intended to just write about the last point but after looking more into the site it became clear that there are bigger problems here.

Edit: As has been pointed out it's not so much about what you included as it is what you left out. You could potentially eliminate the bias just by balancing this list considerably. At what point do you just make an allow-list though lol?
Most enhancements involve noise reduction, which can indeed lead to some texture loss.
Nah. Colleges are collapsing. Not enough kids. Go check out Ohio state university’s situation. In about 4 years they won’t have enough kids to cover operating expenses. That’s straight from the Department of Higher Ed. They built and built and sucked up all the money they could and now millennials have aged out and most the next gen doesn’t want to go to school because of costs and even if they did, whoops! There’s not enough of them.

Boy, you’d think some of those college educated people would have, I don’t know, modeled some of this and analyzed it before they sold their parking for a billion bucks that they promptly and entirely spend on extra dorms they now can’t fill.

So no, you are using outdated data. The fact is demand around the country is plummeting for schools. This is straight from the department of higher ed in Ohio.

As for global demand, it’s not the eductions it’s the chance to get citizenship. Someone with analysis skills like you must have a degree.
Oh dear, how will they live without the ability to make low budget smoothed over pictures of an anthropomorphic pickle dunking a basketball from a voice prompt. Truly, those dreadful europeans will suffer. /s
Businesses would be crazy to continue with Crowdstrike after this. It's going to cause billions in losses to a huge number of companies. If I was a risk assessment officer at a large company I'd be speed dialling every alternative right now.
It might have been a long-present bug in the driver, yes, but today's failure was apparently caused by content/data update.
Responsibility can be shared.
I dunno, I have been around and I never seen an on-prem infra being more reliable than your average cloud.

The only difference is that when on-prem goes down you can shout to your infra engineers, when cloud goes down you shout at your enterprise cloud representative. The first is more effective, but even with that it still doesn't achieve the same reliability and disaster-recovery of your average cloud provider.
> The details (the particular companies / systems etc) of this global incident don't really matter.

It definitively matters. The main issue he is that Crowdstrike was able to push and update on all server around the world where all their agent is installed ... it looks like an enormous botnet ...

We need a detailed post-mortem on what happened here.
That is if the terminal is not dead itself
>snake oil

So much software - especially in the 'operating system' sphere of things - really is just snake oil.

Its just, very functional oil, in many cases - and highly toxic and slippery in many, many other cases.

>cyber "security" industry

Yes, I agree this is a market of smoke and mirrors, lies and propaganda.

The reason is, operating systems are broken. Pretty much all of them. Only, some of them work well enough to get a lot of work done, most of the time. Of the 99.9995% of the time it works, its great.

But, here's a thing I feel needs broader attention and discussion - It is my firm opinion that "Operating Systems Vendors" are a very poor, ragged class of professionals these days.

The decisions made at Microsoft - and other OS vendor corporations - have really lost the plot.

I can prove this by asking the golden question among the general public, and categorically get a standard response: "does this feature benefit the user, or does it benefit an advertiser?"

"No, this all seems to be some sort of setup. Windows doesn't feel like its for us, any more."

I mean, how many 3rd-party vendors do I need, secretly installing crippling 'updates' in my production systems, before I realize that there is no security, so write better software that doesn't need all this utter junk.

I mean this sincerely, operating systems vendors are treasonous to the user if 3rd parties are of more relevance to production runtime, than the thing the user very definitely needs to be operating.

The cloud is for backups, encrypted. It is made of snake oil.

Always run your own machines.
Pro tip: your stock can't go down if you crash the stock exchange
Yet another good example why liability in software should already be a common thing.
Yes, from experience, I can say that CS does offer real protection.
true, but incentives should be in place to encourage a more diverse array of products, at the moment with many solutions (especially security) it is a choice between that one popular known product (Okta, CrowdStrike, et al, $$$) and bespoke ($$$$$$$$$$).

If only because we can then move away from one-size-fits-all, while mitigating the short-term impact of events like the above.
Can you please elaborate on the increases in attack surface? I know it's a kernel driver so maybe that's what meant?
In my experience people have a tendency to not react to _just_ the written words.

If B is "and is a feminist" it wouldn't surprise me if people implicitly understand A as "and is not a feminist" despite it not being worded that way.
I've never seen a program running in kernel mode other than AV software. Pretty sure all stuff you listed doesn't. Asking admin permissions doesn't mean it's kernel mode software.
It also has the property of being less correlated with other failures, which may or may not be an advantage.
I have a feeling most commenters (not just here) don't really know what Falcon is and does, if EDR (and more?) keeps getting compared to a plain antivirus.
Until corporate decides to install new MDM software on the usually-blazingly-fast apple silicon chips :(

I can't even open files larger than 500 lines without my whole system slowing to a crawl because of the insanely aggressive and slow "antivirus" bloatware the MDM forces on me.
If you write a batch file on a Windows PC with Carbon Black on it, you will not be able to run it. Of course there is customisation available to tweak what is/isn't allowed.
> realtime protection of windows systems

and mac, and linux
Most people don't seem to realise that you can put line breaks and leading spaces for indentation into formulae. Also while by default the edit line at the top of the window only shows one line, you can drag the divider down to show multiple lines.
[dupe]

Some more discussion: https://news.ycombinator.com/item?id=41002195

https://news.ycombinator.com/item?id=41002677
Presumably at some point they'll be back to a state where they can boot to a network image, but that's going to be well down the pyramid of recovery. This is basically a "rebuild the world from scratch" exercise. I imagine even the out of band management services at e.g. Azure are running Windows and thus Crowdstrike.
This company has post-apocalyptic style photos to make you panic-buy their solution.

https://ibb.co/Bc6n527

"62 minutes could bring your business down"

I guess they could bring all the businesses down much quicker.

edit: link https://www.crowdstrike.com/en-us/#teaser-79minutes-adversar...
We're running something similar ( not CS ) where I work.

It seems to me that these tools create lots of problems ( slows down the machine significantly in particular, gets things wrong and quarantines processes/machines when it shouldn't, injects itself into processes so changes behaviour, etc ).

The main question I have is : does anyone have an actual instance of such tools detecting something useful ? No one in the office was able to show one.
Thanks - Weathergraph author here. The tightened update budgets are just a part of a puzzle, another bad parts are:

- no background updates (for non-Apple apps, of course) once the low power mode is enabled

- a buch of long unfixed bugs, like this one https://openradar.appspot.com/radar?id=5568946145067008 - a WidgetKit cache of rendered widgets gets randomly corrupted (race issue when rendering maybe? seems to happen more often with a complex widgets), and once it happens, the specific widget stops updating until device restart (and app has no way of finding out that this happens)
https://x.com/brody_n77/status/1814185935476863321 [0]

The driver can't gracefully handle invalid content - so you're kinda both right.

[0] brody_n77 is:

Director of OverWatch,
CrowdStrike Inc.
> Well how much of those kernel-level drivers we rely upon ARE written in a memory unsafe language ??? Like 99% ? And we are not crashing and dying every day?

we shouldn't discount the consequences of memory safety vulnerabilities just because flights haven't physically been grounded.

> Also, quite frankly, if your unwrap() makes your program terminate because an array out of bounds isn't that exactly the same thing ? (program terminates)

this is a strawman, if you were writing a kernel-level driver in rust you'd configure the linter to deny code which can cause panics.

here's a subset:

- https://rust-lang.github.io/rust-clippy/master/index.html#/u...

- https://rust-lang.github.io/rust-clippy/master/index.html#in...
As at 4am NY time CRWD has lost $10Bn (~13%) in marketcap. Of course they've tested, but just not enough for this issue (as is often the case).

This is probably several seemingly non consequential issues coming together.

I'm not sure why though, when the system is this important that even successfully tested updates aren't rolled out piecemeal though (or perhaps it has and we're only seeing the result of partial failures around the world)
Pro tip, learn to use a profiler.
[dupe]

https://news.ycombinator.com/item?id=41002195
It's easy to underestimate the enormous magnitude of the worldwide problem of monocropping, but the banana helps illustrate the scale.
And landed a Ryanair plane, sending an interceptor for it. For that it became a no-fly zone well before the invasion of Ukraine from Belarus soil.
The real scam is the audit.

Many moons ago, I failed a "security audit" because `/sbin/iptables --append INPUT --in-interface lo --jump ACCEPT`

"This leaves the interface completely unfiltered"

Since then, I've not trusted any security expert until I've personally witnessed their competence.
So is this mainly for a virtual highscore? Gamification of real life, tick all the boxes on your mission list, to feel accomplishment?

I doubt one can see the real gems this way. I travelled a lot, but the highlights were never the famous tourist spots and I would not have felt them as highlight by just stopping by and making a picture. But each to his own I guess.
Note: It is not NLnet Labs, but NLnet [0] to which is delegated. They are not the same.

[0] https://nlnet.nl
Hi Charles, I can't read your devex article about interfacing with local governments unfortunately due to some sort of login wall.

What if, instead of struggling to acknowledge local pariah governments, aid organizations ONLY recognized local governments?