skysight-inc/HackerNews huggingface dataset:
Thank you! I do see the use for these, though a few things are a little off target for what the app hopes to solve. Component preview and mock props is actually something I have planned for the future with a subtype of snippet for templates, so when you intend to have custom inputs there is a way to test with different data. First though I'd have to build a different system for live previews and a dynamic environment that can adapt to which component it might be hosting.

Storing in the cloud to grab them with something like a cli tool is super cool. I have a feature on the mvp+ list to download a list as a library or to fork to github as a lib, just converting it into a folder. But I'm trying not to let scope creep distract me from just making it as easy as possible to grab a quick tool without downloading a whole library, not trying to compete with npm or any other package/version manager.

At present the only AI features I can think could benefit the app are search tools and framework detection, but these can also be improved traditionally without the need for linear algebra or paying for use of any ai api I think.

Basic version control could be cool too! like storing previous versions if a tool was useful to you in different forms

I do overall though feel the goal of this is a little different from the Bit platform, but some lessons could be learned about what people want based on the product's popularity :)
I was going to buy some put options against CRWD with spare pocket money, but it turns out that the service I have my investment money is in broken right now. I wonder if that's because of Crowdstrike.
You’re conflating risk and frequency
Go is basically Limbo, with a bit of Oberon-2 sprinkled on top.

They got more lucky with Go than with either Limbo or Oberon-2, thanks to Google moat, Docker pivoting from Python to Go, Kubernetes pivoting from Java to Go, both projects hiting gold with devops community.

Google itself keeps being a Java and C++ shop for most purposes outside Kubernetes.
It provides the electrolytes Windows craves.
Flights have been delayed/canceled. Not as critical as the OP hospital, but not good.

Effecting airlines/brodcasters and banks.

https://www.nytimes.com/live/2024/07/19/business/global-tech...
A small aquatic plant, duckweed, could revolutionize the food of tomorrow
This website doesn't even touch on the worst dark patterns.
Ryanair will e-mail you and complain that you booked using a travel agent (like trip.com). Well yes, Ryanair itself put their flights on Amadeus! If you only want people to book directly using your site, then make a business decision to lose the outside business and don't complain to your customer like a toddler.

They then charge you to use an app to scan your ID, some ridiculously low amount like 60 cents. The transactions costs and the software maintenance on this integration must dwarf the actual revenue generated. But you need to do this for reasons, one of which apparently is that not doing it will add an even higher fee. This is nickel and diming by instinct rather than out of any rational thinking.

One side effect of all of these tacked-on fees and dark patterns is that the supposed perks lose any meaning. Everyone ends up paying for 'speedy boarding', so that the 'speedy boarding' actually takes longer than the people who board last. And even the 'speedy boarding' passengers won't be able to fit their bags on board.

I actively avoid (and told my SO to never book) Ryanair. None of the other low cost airlines are this bad. Literally Easyjet are easier to deal with. Easyjet also have dark patterns (literally, always look for the grey text..) but they don't go out of their way to make you suffer.

Also, how degrading is it for flight attendents to have to go around selling scratch cards? I'm sure Ryanair would have them go around selling fentanyl if it were up to corporate.
Weird, considering there are entire countries that stopped giving them out.
ZScaler and similar software also has some hidden costs: Performance and all the other fun that comes with a proxy between you and the server you connect to.
I once bought the "fast track" option mentioned in the article for a Ryanair flight. The airport did not have fast track. When I asked for a refund, customer service told me that "it is the customer's responsibility to ensure that fast track is available at the airport they are flying from before purchasing".
It's Crashstrike [1] Friday

[1] - https://crashstrike.com/
Sadly, I (not American) have to agree.

I am a pacifist at heart, and I truly wish it wasn’t so, but it is impossible for any nation that believes in its continued existence [0] not to arm itself and maintain alliances with other like minded nations (including, regrettably, nuclear arms).

I agree with the sentiment around demilitarisation, too. If everyone started getting rid of weapons there would, in many ways and for much of the time be less war and suffering. It feels right, compassionate, and empathetic. It’s what I would want. But it’s wrong.

It only takes one national collapse, one coup, one crackpot dictator, one rogue leader to upend that and walk all over everyone. And we have far more than one, both nascent and incipient, at this point.

This used to be somewhat untested in modern times, making it easier for loud anti-defence voices to be heard and acted on. But Ukraine is living that reality every day and Russia is far from the only would be aggressor.

So yes, we need to build capable militaries and strong alliances, and we need work to promote a more stable world outside those alliances.

At the same time we need to try, as hard as possible, to use our democratic power to prevent our nations and their allies overreaching with their military power, given that they must not surrender it.

But the idea that any subset of nations can choose peace by not having weapons in anything like the world we inhabit is, unfortunately, dangerous wishful thinking.

[0] Every nation believes this, regardless of its truth. We can (and should) evaluate the legitimacy and stability of a nation, alongside its governance when forming alliance, but all will rationalise their own existence (however poorly) and therefore their defence.
There's a 3 part podcast series on good bread from the great UK-based regen farming podcast Farmerama https://farmerama.co/arable/good-bread-part-1-what-is-good-b... Dips into this and talks to people involved in the good bread movement.

Here in the northern Scottish highlands it's hard to find good bread. Which led us to learn to bake our own sourdough. But there are some good things popping up, like a local baker who is now doing a People's Loaf pay as you can https://www.northern-times.co.uk/news/sutherland-artisan-bak...
Most mission critical medical systems have a backup generator.
The Constitution is a legal document and the foundation of all American law. It turns out a specific definition of "arms" would actually be very useful to the modern legal doctrines of the post-industrial society in which we actually live, as opposed to the pre-industrial agrarian society for which the British re-establishing their colonies, slave revolts and uprisings from Native Americans were problems worth worrying about.
That was supposed to be "no causal", but I only caught the typo after it was too late to edit it.
I like Debian but it's not like they need random upstream repositories when they can make random patches themselves e.g. the OpenSSL Purify issue.
This is every other ATM in Prague (euronet is the name I think), they helpfully convert it for you with like 30% markup. These people (and the lawmarkers that permit this) should be publicly flogged.
Definitely. This is a crazy outage. We have seen a spike in purchases of our remote browser isolation product BrowserBox and inquiries about using it on these kind of secure terminals, which is entirely possible, in the wake of this.
Zscaler is truly amazing. It can't do HTTP/2. Our product is HTTP/2-only. So we can't use our own product at work.
We have limited visibility into this in the emergency department. You stabilize the patient and admit them to the hospital, then they become internal medicine or ICU's patient. Thankfully most of the work was done and consults were called prior to the outage, but they were in critical condition.
I'm not really sure cloud has much blame here either.

Imagine it's 1998 and Norton push a new definition file that makes NAV think kernel32 is a virus. The only real difference today is that always-on means we all get the update together, instead of waiting for mum to get off the phone this evening.

We got an email this morning telling us none of our usual airlines could take bookings right now. That wouldn't have been much different in 1998, airline bookings have been centralised for my entire lifetime.
I'm pretty sure Apple does gradual rollouts of upgrades, so default smartphone settings are better than that.
The differences involved make money if you are talking about the whole population but for an individual payment it's a relatively small difference. I'm not sure what would motivate someone handing you a card reader to try to cheat you - they can't possibly be making any money out of it.
The ones whose KPIs depend on making it happen.
Found this article in the excellent Numlock News newsletter, which had the following précis:

Duckweed is an aquatic plant that's seen as a promising source of protein for humans and animals alike. Duckweed grows in freshwater, and under optimal conditions is 45 percent protein, with a hectare of duckweed producing 10 to 18 tonnes of protein per year. By comparison, the same area of soybeans would produce 0.6 to 1.2 tonnes of protein. Duckweed grows fast — the quantity can double in less than 48 hours — and now the challenge is finding out ways to extract rubisco, the main enzyme present in the leaves and the single most abundant protein on Earth.

https://www.numlock.com/p/numlock-news-july-19-2024-viper-gu...
any plans to add pdf support?
Is this not illegal in Australia?
Isn’t that like a third of gun deaths in the USA? Personally for me this idea of trust that it’s undetectable and therefore non jtransmissible is not a risk I would recommend anyone to take, but at the same time we have to put things into relation no?
Or maybe they usually do an awful job, except this time this is our field, so we know for certain that they do.
At $80, the price is low enough that I bet a lot of people would buy it just out of curiosity.
I can't tell if you're serious or sarcastic, but there is such a thing as criminal negligence.

CrowdStrike knows that their software runs on computers that are in fricken hospitals and airports, they know that a mistake can potentially cause a human death. They also know how to properly test software, and they know how to do staggered releases.

Given what we know now, it seems pretty likely that to any reasonable person, the amount of risk they took when deploying changes to clients was in no way reasonable. People absolutely should go to jail for this.
"A specific and limited subset of computers on a single globe"
The dynamic between compliance and operational integrity
The Probabilistic Bisection Algorithm by Horstein, original paper is "Sequential transmission using noiseless feedback," IEEE Trans. Inform. Theory, 9(3):136–143. https://ieeexplore.ieee.org/document/1057832

Here's a nice presentation on an analysis of the method, references start on slide 47

https://people.orie.cornell.edu/pfrazier/Presentations/2014....

Paraphrasing the theorem from Jedynak, Frazier, Sznitman (2011):

Suppose [flake probability] is constant, known, and bounded away from 1/2, and we use the entropy loss function. ... The policy that chooses [next test point] at the median of [current posterior distribution] is optimal.

And some python code that implements a version of the analysis

https://github.com/choderalab/thresholds/blob/master/thresho...
Security engineers are the ones who first came up with these crap in the first place. Sales people are not to blame, they'll sell anything.
I use Librera FD from f-droid[0], I think it works great though I don't typically read books on my phone (instead opting to use an e-ink kindle).

[0] https://f-droid.org/packages/com.foobnix.pro.pdf.reader/
I suspect it will be a hit in Utah.
In both case it's costly.

But cost of maintenance aside it wouldn't be that bad to deploy each half the fleet with two distincts EDR.

This is actually implicitly in place for big companies that support BYOD. If half your fleet is on Windows another 40% on MacOs and 10% on Linux you need distinct EDR solutions and a single issue can't affect all your fleet at once.
Nice, when playing around one weekend trying to see if I could use ipfs as a transport layer for streaming video I got hung up because most video formats I tried behaved very poorly with inconsistent streams where you may not have the beginning. I ended up on mpeg-ts as the best behaving of the bunch. It felt a little weird, as I was sort of expecting something more modern to have better performance, but seeing as my goal was not to evaluate video formats but just ship them around I just accepted it and moved on.

Thinking back on it now, I just did a little trial and error until I found something that worked, but what would I search for if I was trying to find data on how... ?streamable? an encoding is?

If curious, I got my proof of concept working but it was unpleasantly slow. I blindly chunked the incoming stream into megabyte sized chunks registered the chunks on ipfs then used ipfs pubsub to announce the chunk to any watchers. The watcher would watch the pubsub channel for announcements download the chunk and try to reassemble it in order and play it. one neat side effect that I found was when the stream was done if I had stored all the ipfs address I could then generate a whole ipfs file structure you could use to download the stream at a later date.
Ah, welcome to the wonderful world of 14.300
"that all inputs are absolutely trusted"

This is something funny to say when the inputs contain malware signatures, which are essentially determined by the malware itself.

I mean, how hard would it be to craft a malware that has the same signature as an important system file? Preferably one that doesn't cause immediate havoc when quarantined, just a BSOD after reboot, so it slips through QA.

Even if the signature is not completely predictable, the bad guys can try as often as they want and there would not even be way to detect these attempts.
I think this is a cultural issue with the Windows world. Look at Projects like ssh and git, who exist for both, but on Windows, they get shipped without documentation. Not even for the Windows-specific things. Want to know where to put your GlobalKnownHosts on Windows? F** you.
On another note, I know nothing about cybersec, is there a reason for which antivirus on windows run at ring 0 while I read that on Linux and Mac they don't have kernel level access?
The death penalty could be an option? Dissolve the company, seize their assets, bar anyone involved from ever running or owning a company again.
Depends which news you're talking about. MS guy who discovered it found it March 29th, published to oss. It was in infosec news same day as redhat, others pushed out critical advisories. Patch didn't come til a day or two later.
Watching Doug Polk discuss hands on YouTube really opened my eyes as to how professional pokers think about hands.
Presumably Crowdstrikes driver also has the ELAM flag which guarantees it will be loaded before any other third party drivers, so even if a malicious driver is already installed they have the opportunity to preempt it at boot.

https://learn.microsoft.com/en-us/windows-hardware/drivers/i...
An update to the internal database. It still did not sunk to developers that data has equivalent risk as code. A400 crashed because of an XML file update. I have witnessed my share of critical bugs caused by "innocent? updates to "data" which were treated less seriously because of this. Management and devs alike should change their conception about this.
Non-lethal defence does not seem possible at our current technology level.

Keeping it about defence only rather than offense is a political problem, with the decision about what sort of weapons you acquire being influenced by the politics, not driving it.
If it's large enough. Nobody loses their job when office 365 goes down, even if that happens once a year.

However if you decided to choose a small company which goes down once every 5 years, you're screwed.
It's certainly not real sourdough, but where it has been given time to rise more naturally it will often say so, and that implies it is not a product of the chorleywood process. Could be wrong though!

But yes, I'm not surprised the supermarkets skirt as close as they can to the law and mislabel with wanton abandon.

Best stick to independent bakers where possible.
You are right. I got the two mixed up.
These risks must be carefully managed that's it I think
Or for me, a tax for ADHD.
I'm not a Windows programmer so the exact meaning of PAGE_FAULT_IN_NONPAGED_AREA is not clear to me. I am familiar with UNIX style terminology here.

Is this just a regular "dereferencing a bad pointer", what would be a "segmentation violation" (SEGV) on UNIX, a pointer that falls outside the mapped virtual address space?

As this is in ring 0 and potentially has direct access to raw, non-virtual physical addressing, is there a distinction between "paged memory" (virtual address space) and "nonpaged memory" (physical address) with this error?

Is it possible to have a page fault failure in a paged area (PAGE_FAULT_IN_PAGED_AREA?), or would that be non-fatal and would be like "minor page fault" (writing to a shared page, COW) or "major page fault" (having to hit disk/swap to bring the page into physical memory)?

Are there other PAGE_FAULT_ errors on Windows?

Searching for this is difficult, as all the results are for random spammy user-centric tech sites with "how do I solve PAGE_FAULT_IN_PAGED_AREA blue screen?" content, not for a programmer audience.
They say it was caused by a faulty channel file. I don't know what a channel file is, and they claim to not rely on virus signatures, but typically anti virus product need the latest signatures all the time and poll them probably once an hour or so. So I'm not surprised that an anti virus product wants to stay hyper updated and updates are rolled out immediately to everyone globally.
Indeed a wise strategy
How long before companies start consciously de-risking by replacing general-purpose systems like Windows with newer systems with smaller attack surfaces? Why does an airline need to use Windows at all for operations? From what I’ve seen, their backend systems are still running on mainframes. The terminals are accessed on PCs running Windows, but those could trivially be replaced with iPadOS devices that are more locked down than Windows and generally more secure by design.
LOL, those are cheat kits for homebrewers, and pretty poor ones at that. It's not how a competent homebrewer makes beer, let alone a commercial brewery.

Someone has sold you a fairytale about IPA production because they don't like the style.

(edit - you'll notice at those shops they are selling all sorts of styles as concentrates, including "Polish hopped beer" - https://browin.com/shop/beer-brewing/coopers-concentrates )
It's called iteration
AI Tooling for Software Engineers in 2024: Reality Check (Part 1)
When dealing with Ryanair you just have to consider them hostile and duplicitous and set your expectations accordingly in advance.
I suggest switching to macOS. They don't allow third-party kernel drivers which is already a big advantage over Windows or Linux.
Not at all. "Industry", think: manufacturing is still big on desktop applications.
I've already seen a few posts mentioning people running into worst-case issues like that. I wonder how many organizations are going to not be able to recover some or all of their existing systems.
There's a reasonable number of circumstances where there are cybersecurity standards that get imposed on organisations: insurance, from a customer, or from the government (especially if they are a customer). These standards are usually fairly reasonably written, but they are also necessarily vague and say stuff like "have a risk assessment", and "take industry-standard precautions". This vagueness can create a kind of escalation ratchet: when people tasked with (or responsible for) compliance are risk-averse and/or lazy, they will essentially just try to find as many precautions as they can find and throw them all in blanket-style, because it's the easiest and safest way to say that you're in compliance. This is especiallly true when you can more or less just buy one or two products which promise to basically tick every possible box. And if something else pops up as a suggestion, they'll throw that in too. Which then becomes the new 'industry standard', and it becomes harder to justify not doing it, and so on.
I see one main challenge - it can increase the incidence of false positives.
> I'm not sure what would motivate someone handing you a card reader to try to cheat you

Immense pressure from their boss?

The first few times I let it go, wanting to believe an honest mistake, but when it started happening so frequently, I realised _someone_ in the chain is trying to scam me.
So apparently "The issue has been identified, isolated and a fix has been deployed" https://x.com/George_Kurtz/status/1814235001745027317

Yet the chaos seems to continue. Could it be that this fix can't be rolled out automatically to affected machines because they crash during boot - before the Crowdstrike Updater runs?
This makes my list for top of the year, nice work.
Because you should always have a backup.
When you book the ticket they make it quite clear that normal sized trolley bags are not included in the cheapest fare. Most LCCs in Europe do something like this nowadays, even some legacies…

Closing online checkin 2 hours before departure and then charging lots for airport checkin is crazy though.
Wouldn't want to be the guy who pushed this particular commit. It's ironic that the company that is supposed to prevent this sort of thing causes the biggest worldwide outage ever. Crowdstrike is finished. Let's hope this will result in at least a small increase in desktop Linux market share.
The Linux version of CS sensor defaults to being installed as a kernel module as well.
They mean distributing Linux + the module together. Like e.g. shipping the Nvidia kernel module alone is fine, but shipping a Linux distro with that module preinstalled is not fine.
Yes, I can. BrewVo is already selling their concentrate process to the "craft beer" market, check out their partners https://brewvo.com/

More on the process here https://www.scientificamerican.com/article/concentrated-beer...
It would require The Phone Company.

https://www.youtube.com/watch?v=CHgUN_95UAw

https://www.youtube.com/watch?v=9jEiTxg21q8
Crowdstrike auto-updates. Please do not spread misinfo.
"no manager gets dinged for "internet-wide" outages"

Kind of like, nobody gets fired for hiring IBM, or using SAP. They are just so big, every manager can say, "look how many people are using them, how was I supposed to know they are crap".

But, seems like for uptime, someone should be identifiable. If your job is uptime, and there is a world wide outage, I'd think it would roll down hill onto someone.
Correct. Many just end up in an endless loop and never actually boot.

It's about as bad as it gets.
I loved this idea ! I decided to develop a cli that reproduces these commands here for those interested: https://github.com/sahbic/todo-cli
It can synchronize tasks on github, and I can use a telegram bot to list and add tasks to the list from my mobile phone.
Financial liability often doesn't equate to actual recovery of damages
Often, the cost of switching is too high or too complex to justify. On top of that, many applications commonly run in manufacturing etc., simply does not run on any other OS.