skysight-inc/HackerNews huggingface dataset:
It’s watching the system for events like “file was opened” and “process started”, and looking for patterns resembling hackers/malware.

It’s different from AV in that it mostly looks at runtime behavior and not signatures.
Not really? I've only really seen people not taking cash at trendy street food stalls and bougie coffee shops, pretty much everywhere else does.
South India has a pretty diverse collection of banana species, even from my limited experience. You have red bananas; plantains; and these very small (some are about the length of a finger) and delicate yellow bananas known locally as Yelakki, among others.
My view on FP is that one of its main benefits in terms of avoiding bugs is that it forces you to turn all your 'movable state' into raw messages. The fact that it also abolishes 'unmovable state' is just a quirk of it, not necessarily a benefit.

My main point in support of OOP is that OOP doesn't prevent you from making all your 'movable state' into raw messages too. Properly encapsulated instance state is not dangerous. What I like about OOP is that it offers some additional benefits in terms of high cohesion and loose coupling because co-locating logic with related state helps to write high cohesion, loosely coupled modules. It reduces the amount and complexity of state that needs to be transferred between modules. It allows my messages and function/method signatures to be even leaner than FP allows.

If you want to catch a taxi to the airport, FP still requires that you bring a jerrycan of fuel and steering wheel to give to your taxi driver, the only restriction is that he cannot alter them (no mutations). The benefit of this is that you can fully trust that the integrity of your jerrycan and steering wheel has been maintained after the trip and you can then confidently re-use them for your airplane as well... Anyway, as elegant as that seems in theory, it's not quite how the world works.
We do not use uploaded images for training, nor do we share them with any third parties. We also regularly delete uploaded images, so you can rest assured your data is safe.
Unless you run half your devices on one security vendor and half on another surely there is no way round it? Companies install this stuff over "Windows Defender" so they can point fingers at the security vendor when they get hacked, this is the other side of the coin.

It has happened before where security software has unwanted effects, can't say i remember anyone else managing to blue screen Windows and require a safe mode boot to fix the endpoints though.
Except it hasn't got much to do with Windows... its a faulty kernel software package from a commercial vendor unrelated to the OS.

Philosophically it's always good to have diversity, precisely to avoid such disruptions. But the real issue here is:
A) Apparently half the world runs CloudStrike... So everything is disrupted.
B) Apparently CloudStrike didn't test their update properly.

I'm very curious what will happen to CloudStrike. This seems like a huge liability?
Yep. We can't migrate our workstations to Ubuntu 24.04 because Crowdstrikes falcon kernel modules don't support the kernel version yet. Presumably they wanted to move to EBPF but I'm guessing that hasn't happened yet. Also: I can't find the source code of those kernel modules - they likely use GPL-only symbols, wouldn't that be a GPL violation?
Good question. Weaponized/compromised update? Disgruntled employee Logic bomb?
In my comment I was referring to mission critical systems, which most definitely you don't put on cheap commodity hardware you buy in a brick and mortar store.

Linux is used EVERYWHERE for a reason. Most car HUD now run on some form of Linux embedded, like basically all embedded and low power devices. The problem here is that people still put embedded mission critical systems on a desktop OS and slap desktop software on it, which is _a bad choice_.
Right now the workaround is doing brain surgery on the system in safe mode, so probably no ota fix.
CrowdStrike Falcon is not an AV, Windows can be decently hardened and Microsoft did not "cut off most of its QA"
I'm also using it for projections. But to be honest we have a fairly large Quarkus app and only use projections in a few places. For immutable classes with a large number of fields where instances have to be created manually I usually use the builder pattern. But the analogy to typescript interfaces is interesting.
"We're only backdooring your machines for your own good! We are the good guy experts, we promise."
1. uninstall Teams

2. install Slack or something else that doesn't have "Teams" in the name

Teams has reputation of being the worst team in the world. Don't rely on the worst team in the world.
I'm working for a company that has no Windows boxes at all, anywhere. Sure, some Windows software has no alternatives. We're running all of those programs in VMs.

Does this make financial sense? Probably not in the short run, which is an issue for most companies nowadays. But in the long run? I think it's the right choice.
Great. now I'll do this 10,000 times.
Azure issue and CS issues are separate incidents. They are not related.
There is a bigger lexical distance between UA and RU than between UA and PL: https://bigthink.com/strange-maps/a-map-of-lexical-distances...
I would love this too. Calibre is amazingly useful and powerful, there’s nothing else like it, but my goodness the UI is ugly.

I’ve come to appreciate it as some sort of outsider art anti-design, defiantly refusing to follow any notion of design consistency and aesthetics. But still, a nicely designed version would be amazing.
I've picked the perfect day to return from vacation. Being greeted by thousands of users being mad at you and people asking for your head on a plate makes me reconsider my career choice. Here's to 12 hours of task force meetings...
Finally! And here I thought it would never come.
That usually makes it a port of entry for attacks. Antivirus are really malwares waiting to be exploited.
If the keys aren’t backed up, you will be locked out of the system, and as soon as you try to boot into the safe mode to perform that workaround, you will be asked to enter it manually (or if you have it back it up on a USB drive), if you don’t have, or don’t know the key, you will have an encrypted drive with all of your data locked there.
Hypothetically even if they were liable they would bankrupt before even a few percent of damages is recovered. You cannot pluck a bald chicken.
Crowdstrike agent is theoretically able to detect that what you just pipe-installed is now connecting to a known command and control server and can act accordingly.
Workaround fixed it for me, thankfully I had access to the bitlocker recovery keys. This will be a bad day for IT people worldwide.
I always thought crowdstrike type software was a scary piece of software.

It would make the perfect target for an attack. High privleged and used everywhere.
We’re just the only ones awake to feel it
That's not something I can confirm. I'm getting around in Europe and if anything, German management tends to be very technical, lots of engineers. Maybe not programmers, true, but bona fide engineers.
MSFT will be fine. They are riding the AI waves, this is not meaningful, especially since they are not at fault.
BBC reports: “ The cause is not known - but Microsoft says it's taking mitigation action”.

Most of the media I found say it’s because “cloud infrastructure”. I am yet to see any major source actually factually report this is caused by a bad patch in Crowdstrike software installed on top of Windows.

Gets to show how little competency there is in journalism nowadays. And begs a question how often they misinterpret and misreport things in other fields?
0) don't load a new driver into your working kernel.
Agreed, The workflow could also include a person checking it before submitting, just skimming through for errors.
I also had Windows Update fucking up my VMs and physical installs multiple times - this stuff just happens _with desktop machines, on desktop OSes_. The point is, lots of companies are using random cheap x86 computers with Windows desktop for mission critical appliances and systems, which is nonsensical. The rule of thumb has always been, do not put Windows (client) on anything you can't format on a short notice at any time. Guess people just never learn
Title could be misleading but only if the reader jumps to conclusions; it does say anything about intent. It only says data was shared. That's 100% accurate.

USPS customers have no recourse so arguably intent is irrelevent anyway.
The domain-specific Prolog code bases you're going to create still can become large and represent a significant development effort. Prolog being an ISO standard with many conformant (or at least mostly conformant) implementations available and relatively strong mindshare and ecosystem compared to extremely niche "CP solver packages and OR-tools" (which one exactly?) significantly reduces project risks such as not being able to find experts, the system not meeting functional or performance requirements, or becoming obsolete down the road. The same cannot be said for some mythical "CP solver packages and OR-tools"; you've nowhere to go if your "CP solver packages and OR-tools" project fails. Optimization and scheduling/planning projects, by their nature, are somewhat experimental and need exploration. It would thus be very difficult to pick "CP solver packages and OR-tools" upfront.
Not saying the microsoft QA is stellar but I also remember heartbleed.
Ironically SolarWinds court case happened yesterday. SEC won. SolarWindows was fraudulent to say their software way “secure”. They should rename a side channel attack a “Tom and Jerry”, because its getting like a game of Cat and Mouse
I have worked in Finance for 25 years, and the amount of pressure I had to stand from Auditing on "Why do we have a 20-day-window on applying most updates as we get them from suppliers? We are not best practice!" is gruelling.

These people report to the Board Chairman, don't understand any real implication of their work, and believe the world is a simplistic Red - Amber - Green grid.

I understand most CIOs / CTOs / CISOs in Corporate would buckle.
Interesting, how does Aider decide what’s relevant to the chat?
Too many black swans the same day, I'd guess Azure is running Crowdstrike software.
“ American Airlines, United and Delta have asked the FAA for global ground stop on all flights, according to an alert from the FAA on Friday morning.

The FAA is telling air traffic controllers to tell airborne pilots that airlines are currently experiencing communication issues.”
I've been flat out blocking google tags manager for years and never noticed any breakage because of this.
The company will perish, there is no doubt in that.
I believe Intel did just that in May with a bunch of bios updates for various vendors.

Asus for example:

https://www.asus.com/us/support/faq/1053456/
I wonder if the move to hybrid estates (virtual + on prem + issued laptops etc) is the cause. Having worked in only on prem highly secure businesses no patches would be rolled out intra week without a testing cycle on a variety of hardware.

I consider it genuinely insane to allow direct updated from vendors like this on large estates. If you are behind a corporate firewall there is also a limit to the impact of discovered security flaws and thus reduced urgency in their dissemination anyway.
Expectations: Russia, China or North Korea will take the Western tech infrastructure down.

Reality: the infrastructure took down itself.
Anecdotal evidence: the global mega corp I unfortunately work for is definitely feeling this globally
I wish this worked on Windows too. In general, I'd love to see all those lovely GTK4 apps on Windows, they look so nice.
You'll see this software more in highly regulated areas. Think Government, finance, travel. It exists mainly to check a compliance box.

The Windows claim is a little misleading. We used Linux where I last encountered this. I expect Windows is where problems are manifesting this time; BSOD and kernel panics with this aren't new!

CrowdStrike seemingly came out of nowhere but has existed for a while... I think it's suspicious.

Have we not learned from SolarWinds and company? The vendors become part of your posture. Consolidating far too much
You should grab the folks who've done it and start authoring a book. You've got a 100x audience increase today!
It not neccesarily is. If the gate agent uses a windows laptop, the core infrastructure (servers) might not be windows, but if the laptop doesnt work its still "down" even if the servers are fine.
Which makes me think--are we sure this isn't malicious?
I rate Linux DE higher than I do windows and Mac desktop tbh. Better ergonomics, better user experience and less bloat.
Then you clearly didn't read the comment i replied to
It looks like the whole world is the canary, but they will have the release ready and in top shape for the Mars deployment.
Steam does not have any kernel-mode components.
This not Internet failure but software functuality failure from a cyber security update , thios is why i never use real cloud security but rather use home cloud security on my Serverpc/NAS/SAN , when it crashes okay so be it i dont get acces to my cloud , but i allways use a online backupcloud that does not need instalation for most important stuff , u should never rely on 1 softweare to do all allways have backups
I don't understand this sort of blindness? Linux fails all the time, with rather terrible nobody to root vulns because some idiot failed to use the right bounds check. Ye gods, XZ utils was barely a few months ago!
HF is ~300baud (it matters that it's baud, because "what's a symbol, really") The faster you send information, the more bandwidth it takes, even if it's morse code. A slow, 6-10 word per minute transmission may be 1-3hz wide, but a skilled operator, even with a clean transmitter will take 30+hz to do 60+WPM. i don't remember the exact number but basically any reference will explain it.

so 1024kbps with the sort of technology that exists in the space right now is basically larger than the spectrum available to us in any band in HF. 128kbit transmitted is probably larger than the spectrum available (you can't transmit past the band edges per license, even if it's "splatter") on all of the HF bands, too.
It's not all of Europe. The airports in Norway are operating as normal. One of the airlines reported booking issues on their website, but I haven't read about any other issues.

Some international flights have been delayed or canceled of course, depending on the route.
As a person who enjoys poker recreationally, whenever I visit these submissions I soon realize that this is a very different game from the one I’m playing.
Thank you very much for your suggestion. Currently, I don't display the website language based on location; I simply set Spanish as the default language. In the future, I will recommend the language based on the user's browser settings, as mentioned in the article you provided. Thanks again for your suggestion.
> If you’ve used CoPilot in VSCode, you understand the satisfaction of feeling like an LLM is thinking one step ahead of you.

I’m not sure it’s so much ‘satisfaction’; it felt more like I was having a stroke until I turned it off. Its suggestions were, like, plausibly code, but completely contextually nonsensical in general; frankly IntelliJ’s old autocomplete-with-guessing functionality was better, as it at least _knows_ a certain amount about the codebase. Now, this was on a very large old codebase; no doubt it’s better if writing trivial new things.
> You mean don't install Steam nor the Epic Store, nor many of the games.

...would you install Steam on a POS machine? Is your gaming PC a "mission critical system"?
MediSecure reveals 12.9M Australians had personal data stolen
Rock me Amadeus.

At least the central flight booking system is up I guess. Google brought it years ago and it's a mainframe.

Hence why google flights is so tapped in :)
cornify.com
Basically all AV either runs as root or uses a kernel driver. I guess the former is preferable
The delicate art of treating ADHD
That's not my experience at all. I very seldom need to correct anything Copilot outputs.
All these endpoint protection solutions do complex things in the lowest levels of the OS and inside the kernel. Their MO is to inspect, intercept, block and/or modify calls made by other software on the system.

We used to have a name for software like that in the 1990's. We called them rootkits.
> Stop putting mission critical systems on Windows, it's not the reliable OS it once was since MS has cut off most of its QA

Dream on, that ship sailed long, long, long ago.

It’s always funny to me reading comments on this site from users like this who have no idea how the real world operates
Crowdstrike has a linux version. It is mandatory in our linux servers in my company so that is not the solution.

I would say issue 1 is management/compliance forcing admins to install malwares like crowdstrike. But issue 1 is because of issue 2 which is about admins / app devs / users aren't smart enough to not have their machines compromised on a regular basis in the first place. And issue 2 is because issue 3 of the software industry not focusing on quality and making bug free software.

All in all this should be mitigated by more diversity in OS, software and "said security solution". Standardization and monopolies works well until they don't and you get this kind of shit.
> The rule of thumb has always been, do not put Windows (client) on anything you can't format on a short notice at any time.

This is reasonable and sound.

> This stuff just happens _with desktop machines, on desktop OSes_

I wouldn't call Debian a desktop OS per se, though (albeit installing XFCE just in case does introduce a bit more risk of breakage).

Critique of consumer hardware is valid, but it's quite upsetting that bad software is the status quo.
If your malicious script starts doing things like running well known payloads or trying to move laterally or access things it really shouldn't be trying to access AV will flag/block it.
Pretty good time to buy MSFT I would imagine, given that this isn't really their fault.
> rapidly evaporating Moore's Law

Algorithm (no, I don't mean Mamba etc, you can still use decoder-only transformers with some special attention layers) and engineering side there's still at least 10x improvement possible. Compared to what TensorRT-LLM is able to achieve now.

My concern is, this is only possible because of scale, so local LLMs are going to be dead in the water.
I'd expect crowdstrike to take a big hit. Between this and the russian hack [edit: actually not, sorry, confused with SolarWinds], I am not sure they are not causing more problems than they solve.
ptraces all processes and feeds the resulting logs through some regex looking for suspicious patterns.
That’s what the license agreement says. Wait till every man and his dog sues them.
You probably weren't good enough to take down half the world's Windows systems.
Cybersecurity company secures computers worldwide by not allowing them to be turned on. - not the onion
A Kindle is a physical device and a tab is a tablet (I initially thought it was browser tab)? My family sat/stepped on two Kindles (crushing the screens to oblivion) growing up and nobody has dared buy another one since; I don't know if it's time to reconsider.
Yeah, they definitely would mandate it.

My work laptop is running Ubuntu, and corporate IT requires Symantec Antivirus to be running on it
On BBC news a few minutes ago, an expert did describe the problem as affecting Microsoft Azure cloud systems as well as Windows systems running Crowdstrike due to an "update gone wrong".
Every company I’ve ever worked at has wound up having to install antivirus software to pass audits. The software only ever caused problems and never caught anything. But hey, we passed the audit so we’re good right?
What do card houses do for a living?
"In a statement released late Thursday afternoon, MediSecure gave details about the kinds of data stolen, including full names, phone numbers, dates of birth, home addresses, Medicare numbers, and Medicare card expiry dates.

The 6.5 terabytes of data also included some sensitive health information, such as which medications people were prescribed, the name of the drug, dosage, the reason for their prescription, and instructions for taking the medication."
District heating is common in many northern European cities, even Italy (e.g 55% of households in Turino). The USA has 2500 (as of 2013) such heating and cooling networks https://en.wikipedia.org/wiki/District_heating
district cooling https://en.wikipedia.org/wiki/District_cooling
This lack of sovereignty is alarming in a lot of domains.
Google tells me "Pre-market 295.00 −48.05 (14.01%)"
Crowdstrike is a perfect name for a company that could cause a worldwide outage.
As a Pole I have a similar reaction to Czech and Slovak. Except it feels less like a strange accent (because we don’t have these as much) and more like baby talk. We get the words, just how they’re used feels unusual, and often funny.

From the other side, my Czech friends told me that Polish sounded to them like something from deep antiquity. Like reading an ancient manuscript where again you get the words but no sane person these days would use them like this.
The people installing crowdstrike have an option: Don't install it.
I once moved to a home in Hamburg, and coming from Southern Germany, I didn't even know that it could be possible, but then in the mail came a letter, warning that we have been drinking water with 16x the amount of allowed lead, because the home was from before the 50s and had all lead pipes. We lived there just for a few months, but my daughter drank the water (me, too, but I am not that worried).
> Microsoft did not "cut off most of its QA"

Windows RTMs used to be shipped in a usable state (albeit buggy) for more than a decade. You installed it from a CD and it worked fine, you installed patches every once in a while from a random Service Pack CD you got from somewhere.

Modern Windows has had the habit of being so buggy after release in such horrendous ways that I can't imagine being able to use the same install CD for years. This is definitely putting less attention to detail in my view.
EDR vendors are generally lying unless they tell you anything but "install us if you want to pass certification".
Carbon Black will block any executables it pulls down though. And I think it may also block scripts as well. Executables have to be whitelisted before they can run.

Its an extremely strict approach, but it does address the situation you're talking about.
The Template pack index is going to make
meta-template variadics much easier.
Usually this is prone to cludges like converting
parameters to structs or filtering them with functions holding the pack.
Breaking patches is? …how did this get through QA with a big enough issue that it breaks many many windows machines
While you're at it probably delete the rest of the software. Then cancel your contract.
Alas in the world of B2B, contracts from larger companies nearly always come with lists of specific requirements for security controls that must be implemented, which nearly always include requiring anti-virus.

It just not as simple as commenters on this thread wish!
Yeah, for me it feels, as a proposition, and having used it briefly before turning it off, like “what if you could pair program with an ultra-confident, yet dangerously incompetent, intern, forever”?
Why is this type of a comment upvoted to the top?

It's a knee jerk reaction to the midwit zeitgeist. No real understanding of how the real world operates. No maturity or thoughtfulness.

Totally misleading prognosis. Misleading advice.