skysight-inc/HackerNews huggingface dataset:
I thought it was just me but 2 mathematicians I look up to.

The guy behind Stat Quest & Harry Crane.

Both have explicitly said that there is simply no good book for their maths fields (statistics & probability).

This really needs to be fixed.

Since I alot of people think they are "not gifted" at maths when the real problem is that there is simply very bad study material.
DARPA program aims to sift through quantum computing hype
For the non-tech folks, this probably felt like one step away from an attack from an adversary.

I have a different take. This was still far from being an adversarial attack. There was no security breach. The failed configuration came from an SDLC that remained secure and fully in control of CrowdStrike. It was a terrible bug, but it was not an attack
Alligators were already found as far north as Virginia in the pre-industrial era.
Especially because they used shared reusable sponges to wipe instead of bidet
They will investigate for sure, once systems are back up and running. The invalid format of the file caused null pointer reference, which is thought as the cause of the issue
https://medium.com/@confusedcyberwarrior/when-security-becom...
> It's interesting that (apart from the first WTC bombing) American terrorists have stuck strictly to guns and not attempted car bombs.

That is not true. Oklahoma City bombing is the first which comes to mind where the explosives was planted on a truck. But there are many others, there is a whole wikipedia list about them: https://en.m.wikipedia.org/wiki/Category:Car_and_truck_bombi...
The post pushes the view that CrowdStrike's engineers should be held responsible. That's one way of looking at it.

But there is an entire chain of responsibility here. The hospital IT department that chose to use a computer instead of dumber technologies. The IT department that chose to run Windows. The security team that chose to purchase CrowdStrike's software, possibly without vetting them.

If a software's license has clear terms stating that there is no warranty, and the buyer buys it anyway, why shouldn't this be a caveat emptor situation? If they didn't like it, they could negotiate indemnity clauses, go to a competitor, or not use the software at all.

Don't get me wrong, I absolutely think that CrowdStrike did a shitty thing. But maybe they already disclosed that in their license agreement, and the purchasers decided to overlook that to their own peril. After all, running kernel-mode software is equivalent to handing over the keys to your computers. Maybe negotiating/selling software with liability clauses should be more normalized?
Like if only there were some word for the process of using language to reshape the discourse, by redefining words to include the aspects you want and exclude the ones you don’t. One might argue that without the words to express it, people’s thought processes themselves might be affected.

There should be a word that conveys the problems that induces in a discourse! It’s literally… something!

;)

Again: I consider a phone deleting its firmware when it thinks I’m unlocking the bootloader to be pretty damn user-hostile too! I think if you’re saying that’s the diametric opposite of user-hostile the only reasonable explanation is you’ve got something seriously wrong with either your language or your sense of reason is being drastically affected by your parasocial attachment to the issue. Because that’s literally so far from reason that we are talking terms like “Orwellian”, yeah.

It’s a shame the word is so loaded that it has lost its ability to be (correctly) used in less-loaded situations but there it is.

Maybe that’s more than you meant to imply by objecting to my point about android’s user-hostility, saying that I had it “backwards” and that apple is the “pinnacle” of user hostility instead but yeah, absolutely imploding the firmware to keep the user from unlocking the bootloader is extremely user hostile, there is very little reason to disagree with that statement except some kind of abject processing error or malicious ploy in the discussion.

Of course in this scenario it’s probably people echoing carefully focus-grouped strategies from google. “Right to repair” cleverly avoids talking about other e-waste issues like phones with self-destructing bootloaders and pathetic OS support lifecycles etc. Google focus-grouped that every bit as much as their RCS and so on (which they care so deeply about that they still haven’t implemented it themselves in google voice even 15 year on!). They know what resonates with you guys, and there is a kernel of truth to it - right to repair is an admirable goal, and who could oppose reducing e-waste? Which is why it’s selected as a marketing strategy!

But that doesn’t make it not Orwellian either. At this stage of the game, if you disagree that self-destructing firmware isn’t user-hostile and that it’s actually the opposite and apple is really the pinnacle of user-hostility… it’s working, it’s successfully reshaped your language processing, and your thought processes have followed. They successfully redefined user hostile to mean “only apple” for you.
Exactly, the problem with for profit media is it requires the attention of it's audience.

Everyone bitches about regulation and taxes, for reasons real and imagined, but applying laws and rules to businesses before something happens is the point of them.
Jailing the guard at the gate for not stopping an attack, eh? How about “corporate criminal liability extends to every employee at director and higher pay grades (management and otherwise)”?
I get so angry when I ready the reports, and they mostly talk about the victim. "The pedestrian was wearing dark clothing", "the bicyclist wasn't wearing a helmet" (like that would've avoided the accident?), etc.

Of course, the victim is most likely being transported away in an ambulance or even dead, so they got little say. And the offender can paint the story with their picture: "the sun was low and blinding", "the cyclist came in at high speed" (probably a third of the car..), etc.

So that's what the report will say.
> What news?

https://news.ycombinator.com/item?id=40475578

One such news entry, LLM's being unreliable is not a controversial opinion. It is well known and easy to find many instances of similar issues.

> code generation

What exactly do you think is generating the code? The article here is about generating code with an LLM.
Given this: https://www.theregister.com/2024/07/19/crowdstrike_update_nh... someone has certainly been selling Crowdstrike software to be used on life-critical systems.
Unless the discussion turns into a tire fire, there is no reason to flag this.
I would not call it a bug. I would call it a severe process or systemic failure. Their SDLC clearly did not include any sort of phased rollout or canary deployments. Bugs are inevitable, what matters is being able to catch them before you push them to every end user on the planet.
Twig has what it calls 'Live Components', which extend its HTML templating engine to update elements live over automatically linked AJAX calls. Basically turning its static templates into more of a react type system.

I think this sounds more like what the author means.

https://symfony.com/bundles/ux-live-component/current/index....
Yeah, we realize the UI is a bit spartan. No disagreement there; it's a valid critique. As you say, we're focusing on functionality and content first since that's what really moves the needle on people's learning -- but yes, we're also going to be adding some bells and whistles in the future.
I could be wrong on this one, but I vaguely remember Waze adding an alert like this recently.
Yes, I was at a company that moved an application from Cobol to Java for exactly that purpose - having a mission critical application written in cobol is way harder to maintain than having that exact same application in Java.
Good article, but that does not cover or solve B2B email compromise/scams. It’s impossible to take the human out of the box here.
> It's a handful of elite 70 year olds who have been running a country where the median age is 25 and are ruining it due to their own personal drama from the 70s and 80s.

Really? Are you going to totally ignore that it is those very 25+ years old that gave the current premiere of Bangladesh her massive majority? (See also https://politics.stackexchange.com/questions/88356/why-are-m... ).

> That said, I agree with you that Hasina's authoritarianism needs to end. ...

Beware of what you wish for! It's all nice and easy to harp at "undemocratic" and "authoritarianism". But understand the political context and history of Bangladesh before passing such blanket judgement. The reality of Bangladesh politics is:

1. Political violence is a fact there - Mrs. Hasina's father, a hugely popular leader, was assassinated and 18 members of her family, including her 10-year-old brother, and relatives were massacred. She had to seek refuge abroad to survive.

2. Bangladesh has also seen many military coups.

3. Some opposition parties of Bangladesh are backed by the military.

4. Some of the opposition lean towards religious fundamentalism and, as you pointed out, also associate with extremist groups.

5. Foreign powers - USA (and other western countries acting in cohort with the US), China and India - often interfere in Bangladesh's internal affairs.

(Source: https://politics.stackexchange.com/a/80654/ )

Being a young democracy, amidst such a political environment necessarily requires an authoritarian streak in a politician to survive and to nurture a secular democracy. As an indian, I genuinely admire her commitment to create a democracy in an Islamic republic that is easily prone to religious fundamentalism and sectarianism - sometimes she reminds me of Mustafa Kemal Atatürk, who did the same with Turkiye. (Remember that Bangladesh is one of the few islamic Republics that has actually committed to democratic political values).

-----

All that said, it is very clear that the current protests were very poorly handled and will be politically damaging to her, and could be a turning point in Bangladesh politics. Whether it will be good for Bangladesh totally depends on how her government handles these protest. Even if the matter is sub-judice, and being examined by the Bangladesh Supreme Court, the government should have engaged more deeply with the protestors and anticipated the political violence.
Yeah. This says more about OP than anything else. This isn't a remotely controversial post, and yet they couldn't attach their main account to it and had to post it from an alt? I've posted some seriously dumb stuff in hindsight and I guess I'm never running for public office because of it, but that level of fear is unwarranted.
That makes sense, I'll try out Mathematical Foundations I and go from there.
Yes, but by default the only repo enabled for it is $(cat /etc/os-release)-security.
"Leave the world behind"
A new way to control the magnetic properties of rare earth elements
SKOB!
Yes, I'm wondering if mangroves will start appearing in the Mediterranean any time soon.

I'm assuming the seeds would need to come in through the Gibraltar straight, which is not exactly wide... Also the Med is saltier than the Atlantic, not sure if that would be a problem for mangroves.
That's what you get for outsourcing to some generic shop with no domain expertise who implements to a spec for the lowest dollar.
You're better off trying to figure out what features you like about articles that are less ambiguous as signal. You would then be able to finetune models to classify whether those features are present. Whether it's classificaton of chunks/sentences/tokens. For these, a bert model could be fine tuned to efficiently detect it.
A Loophole for Poor Mr. Paulson
>Ping reply from 127.0.0.1

The threat is inside the building!
People with skills and knowledge how to earn and spend money want to have high paying job, how dare they!
It should taste sour, salty, spicy, and a tinge sweet. I've had good and bad kimchi, the difference can be substantial. The best has far and away been what I made myself.
It'd be great, but I think that we are not ready for this yet. Think on how long we needed to make the idea of having good tooling, cross-compiling support, testing or debugging support a requirement.

A library or even built-in language support for distributed data structures will take a decade or two to get to the point of proving a set of features to be truly helpful and good/necessary to have as a library or maybe even as a built-in feature.

BTW, we don't even have quickcheck yet, since the generation and proof reduction quality isn't great across implementations :/
DORA is coincidental, but worth watching as a potential source of authority under some partisan disinformation initiatives. security in general is governance, where previously it had a high bar for competence to practice, and you can see it getting stacked in institutions of people without practitioner competence who can be relied on to defer to narrative.

as soon as security can come fully uncoupled from physical competence and the factual constraints of engineering, it will get subsumed into the managerialist hivemind as a rhetorical lever on narrative actuated cogs, and become as meaningless as everything else they do in service to administrative power for its own sake. I have a real problem with these people. :)
How is that more efficient than Typst exactly?
Ask HN: Share your FFmpeg settings for video hosting
I am working on a website that has video hosting capability. Users can upload video files and i will generate multiple versions with different qualities or just audio, thumbnails and things like that.

I have chosen the mp4 container because of how widely supported it is. To prevent users having to fetch whole files, i use the fast start option, where the container's metadata is written at the beginning of the file, instead of at the end.

Next, I have picked h264 codec because of how widely supported it is. VP8/VP9/AV1/x265/x266 are certainly better but the h264 software encoding is often beating hardware encoding due to highly optimized and time-proven code and supported hardware. And the uploaded videos are already compressed, users won't be uploading some 8k raw videos where most advanced codes would be useful for preserving "quality".

For audio, i have picked opus codec. Seems like good value over others. Not much else to add.

I run the ffmpeg to convert video with command like this:

ffmpeg -hide_banner -loglevel error -i input.mp4 -g 52 -c:v h264 -maxrate:v vbr -bufsize vbr -s HxW -c:a libopus -af aformat=channel_layouts=7.1|5.1|stereo -maxrate:a abr -ar 48000 -ac 2 -f mp4 -movflags faststart -map 0:v:0 -map 0:a:0 output.mp4

where vbr is video bitrate like 1024k(1mbps), abr is audio bitrate like 190k and HxW is video dimensions in case of resizing.

I wonder how are folks that handle video encoding process and generate their videos?

How did you pick your settings, what issues have you encountered and any tips you can share are certainly appreciated.

Quite a niche segment when it comes to operations and not being merely consumer/customer.
Well let’s look on the bright side, did they have less auto-immune diseases?

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1618732/
We need more whistle blower protections.

Not only protections, but financial incentives. As a society and civilization, but can't depend on accidental heroes to be the ones that safeguard and correct the course of the entire group. Especially when we idolize money and power, and have a workforce that is manipulated across so many dimensions (healthcare, non-competes, historical admissions, union/anti-union, gig-economy, salary/hourly).
I'd avoid using BASIC for anything serious these days, but I'm part of the "BASIC was my first language when I was 5" club, so I have to respect it as a teaching language (although I'd go for Python nowadays).

I wonder how much of the spaghettiness BASIC is infamous for is due to the language, and how much is about the programmer's mental models -- my recent raytracer for the ZX Spectrum [0] is a pretty straightforward transliteration of my JS ones.

[0] https://gabrielgambetta.com/zx-raytracer.html
That's one take. However, in this case, the problem is even more basic - and ridiculous. By all accounts, every system that received this update, died to the BSOD. How is that possible?

It means that the update was not tested, not even once. It certainly was not tested in multiple environments, with multiple configurations, as must be standard for kernel-level software.

This isn't due to "leet code". This is a fundamental process failure. It should not be possible to push out an untested update.

How was it possible? Will have the guts to ever explain? Probably not...
I'm generally sympathetic to what you're saying, but I also detest a16z and Horowitz personally for being the epitome of "software guy decides he's expert at everything now" and his role in the crypto bubble.

Should the hacker have tried more? Sure, maybe. Do I really care? Definitely not
> suicide is the largest killer of firefighters by a large margin

While it seems obvious, is this not similar to the ratio for all people in the age group that are firefighters (roughly 20-50 ish)?

Most people 40 years of age do not suddenly drop dead, so they’re much more likely to die by suicide.
Can any of these do 10Gb on all ports simultaneously?
IPFS like "coordination free" local S3 replacement! Yes. That is badly needed.
Crowdstrike is malware and spyware. Trusting one malware to control another is your problem right there. It will always blow up in your face.
They're being trained on video, 3d patches are being fed into the ViT (3rd dimension is time) instead of just 2d patches. So they should learn about motion. But they can't interact with the world so maybe can't have an intuitive understanding of weight yet. Until embodiment at least.
So not really. Space mining is a very attractive idea but just not really feasible at the moment. I wrote a paper on attempting to capture the asteroid 433 Eros (a very attractive asteroid due to it's composition of rare metals [Data from the Near Earth Asteroid Rendezvous spacecraft collected on Eros in December 1998 suggests that it could contain 20 billion tonnes of aluminum and similar amounts of metals that are rare on Earth, such as gold and platinum.]) and found that in order to knock it into an orbit around the moon we'd need something on the order of 1 THOUSAND or 10 THOUSAND (I could be off by even another magnitude, the numbers are fuzzy after all this time) tsar bomba grade weapons to effectively knock it out of the current orbit and back into one around the moon. Why the moon? Because throwing a planet killer sized object at the Earth just didn't seem reasonable.

I situ mining might make this more feasible, but that has all of its own complications. None of which I would feel confident in saying are feasible.

https://en.m.wikipedia.org/wiki/433_Eros
https://en.m.wikipedia.org/wiki/Tsar_Bomba
To perform any action on the DOM, you need access to the nodes: registering handlers, manually triggering events, setting/getting values, rebuilding them, etc.

I'd encourage you to toy with a concrete example, in case you (or I) are missing a subtle point; the previous piece of code is the "view" for a modal "component" which hosts an external HTMLElement (r). See how you'd implement it with both approaches.

With both, the "view" and the logic are still separated. The view is merely encoded differently.
Doing free work for A16Z or any of the awful companies ruining our world is not helping make anything better.
> Readers wouldn't have cared nearly as much.

This bears repeating.

If you complain about a risk before a disaster structs, you're fearmongerng.

If you complain about a risk after disaster structs, you're flogging a dead horse.
Around 2006/2007, I was playing around with NetWare 6.5 at work. We had heaps of it but lots of talk about replacing NetWare/eDir/GroupWise with Windows/AD/Exchange (which I think finally did happen after I left the place). My recollection was it was quite unstable - because, having come from Linux, I was playing with bash and SSH. bash would crash a lot (something that very rarely happens on Linux) but it wouldn’t bring down the whole server (which was a dev/test NetWare server anyway). I don’t remember what exactly I was trying to do: I had some work-related justification, which I forget now - something something identity management - but my real reason was just to explore the system. The instability of it convinced me to not take any ideas I had any further.
You don't even have to stand next to them. They could smoke on their balconies several stories down and it'll drift through your bedroom window.
Can you serve 200GB of an average 1mb large HTML page per second too, per core?
Apache iText, for example.
I think I'd be looking for at least a refund on that pen test. I've never come across one that was anymore than a box ticking exercise.
Probably raw Svelte can be used as a frontend template to your backend
Stylistic note, you can use `random.choice()`. If you aren't generating an encryption key, you probably don't need `SystemRandom`.
Article: "Optical control of 4f orbital state in rare-earth metals" (2024) https://www.science.org/doi/10.1126/sciadv.adk9522 :

> [Terbium, and] generally for the excitation of localized electronic states in correlated materials
Thank You for sharing this. Appreciate it.
I think contextually it depends.

If you compare rural living to urban living, then maybe you could say latrines and baths contributed to increase in parasites.

However that's a bad comparison.

What would be better is compare similar levels of urbanization (population density) with and without latrines & baths. I imagine the latter may be more sanitary.
Maybe I missed an alternative mode that's already present, but this feels like it would benefit enormously from a heatmap view, so that one could see where fatality hotspots are at a higher level before zooming in to examine specific locations.
These fields are compared to programmers:

Anesthesiologist, Structural Engineer

This is the example of programmer-caused harm:

Yesterday a friend of mine was stuck in the Hospital all day. Their computer system went down and that led to a delay of care. Delays in care kill people.

It seems like the author isn't considering the reality of the professionals they are comparing.

Coders of a CrowdStrike-sized company have layers of people-exercising-company-authority above them. Coders are employees who operate within the confines they are given.

Those confines get shaped by what filters down from shareholders/investors and executives.

Conversely, anesthesiologists and structural engineers are commonly directed by people they interact with. Their expertise carries real weight. In many cases they have a degree of ownership in the biz getting paid.

source: 30y supporting the latter
I think I agree with you.
On the other hand, I can also imagine that if autoupdates weren't the case, then 90% of installations would be a terribly outdated and probably vulnerable version. It's hard to imagine a common sense middle ground.
The problem is that if you aren't regularly training employees on those manual fallback systems, when you have to suddenly activate them, nobody will know what to do. Even if they have been trained on what to do, the processes will not be second nature. In real use, they will hit situations that the paper forms or training didn't cover, and will have to make up something on the spot, which they will each do differently.

Fully comprehensive, regularly trained manual operations are very expensive to develop and test. Only the most safety-critical organizations will be able to justify and have the resources to effectively implement them. Air-traffic control, hospitals, nuclear plants, etc. And, they already have done it.
And lets remember the best feature of NetWare: ncsnipes.
What security software runs in user space? Even on the Linux side I struggle to name any except snort or any of the open source root kit scanners. How would you enforce security policies in user space?