skysight-inc/HackerNews huggingface dataset:
It's not only Kagi AI but Kagi Search itself has been failing me a lot lately. I don't know what they are trying to do but the amount of queries that find zero results is impressive. I've submitted many search improvement reports in their feedback website.

Usually doing `g $query` right after gives me at least some useful results (even when using double quotes, which aren't guaranteed to work always).
Hmm, I post-process autonomous vehicle logs probably daily.

Why is this stupid? It’s pretty useful to see a graph of coolant temp vs ambient temp vs motor speed vs roll/pitch.

I must be especially stupid I suppose. Nuts.
No, there are mathematical reasons LLMs are better. They are trained with multiobjective loss (coding skills, translation skills, etc) so they understand the world much better than MLM. Original post discuss that but with more words and points than necessary.
Facebook can simply not pay it? Nigeria cannot do anything I imagine.
My Zenfone 9 has a headphone jack. No SD card slot though, which I don't need.

So yeah, I voted for this position with my dollars, and will continue to do so.

Any phone with mandatory AI crap is Hard Pass.
I don't think anyone was arguing that you should be punished for wanting something.
The saudis had an ipo for aramco. Maybe China will ipo the MSS for you.
Venus definitely needs more attention but regarding outer solar system, my money is on Enceladus being the most interesting one
I mean, seriously: You can cause a worldwide outage of gargantuan proportions, affecting actual human lives and untold points off GDP in several countries ...

... and the market gives you the equivalent of a wrist slap? No lawsuits?

What is it down to? Anonymous hit markets? Where is justice going to be served here?

PS. Most outlets are reporting "a fix has been issued" - as in "Whoopsy. No biggie" ...

... I mean, who's going to make affected (still alive!) people whole?
Fuzz testing would've saved the day here.
Slight quibble - the student paramilitary IS part of Hasina's party (BAP).

It's the student wing.

In South Asia, all party student wings are basically paramilitaries and gangs.
Remember people: Jury Nullification. Do not admit to knowing about it. Do not explain why you are not voting guilty, just that you have doubts. If 1 in 10 jurors on average were conscientious about the terrible treatment of the convicted, it would grind the apparatus to a halt in weeks!

Why do you think they keep felons from voting and serving on juries? I think it's to keep the state's poor customer service reviews under wraps.
I work in this space with hundreds of clients and tens of thousands of email templates and literally zero use plaintext as the primary templating option for marketing emails. None of them.
Every major outage when I worked at Google caused stock price to increase for this exact reason.

IT is always considered a cost until execs realize its critical to the company's existence. Keeping the lights on always seems to be undervalued. :(
Doesn't the second paragraph seem more involved, and like a lot more things could go wrong with it (at the worst possible time), compared to the first paragraph?
Alternate hypothesis that's not necessarily mutually exclusive: security software tends to need significant and widespread access. That means that fuckups and compromises tend to be more impactful.
Yes, surveillance is a classic element of dystopia. I don't consume pornography, nor do I drink or do many other things that I realize the government shouldn't have a say in, because I am capable of reasoning.

Do you have anything other than accusations to contribute to the conversation?
The Austin tech culture is…interesting. I stopped trying to find a job here and went remote Bay Area, and talking to tech workers in the area gave me the impression it’s a mix of slacker culture and hype chasing. After moving back here, tech talent seems like a game of telephone, and we’re several jumps past the original.

When I heard CrowdStrike was here, it just kinda made sense
That's 7.5e10 USD in SI.
I don't know if people on Microsoft ecosystems even know what CI pipelines are.

Linux and Unix ecosystems in general work by people thoroughly testing and taking responsibility for their work.

Windows ecosystems work by blame passing. Blame Ron, the IT guy. Blame Windows Update. Blame Microsoft. That's how stuff works.

It has always worked this way.

But also, all the good devs got offered 3X the salary at Google, Meta, and Apple. Have you ever applied for a job at CrowdStrike? No? That's why they suck.

* A disproportionately large number of Windows IT guys are named Ron, in my experience.
Astonishing in this day and age - to pretend there's some moral imperative to indulge only in government-approved stimulants is something out of the last century.
Not to be that guy but Romania isn't "first world" (yet).

It's still very much developing imo.
If you read the Black Swan by Taleb, it stops being weird. He points this out and dubs it Extremistan, where small advantages accrue to oversized returns.

We will need humane solutions to this, because the non humane ones are starting to become visible (armed drone swarms driven by AI).
> it could certainly be the case that there was a "real" file that worked and the bug was in the "upload verified artifact to CDN code" or something

I.e. only one link in the chain wasn't tested.

Sorry, but that will not do.

> We don't have the answers, but I'm not in a rush to assume that they don't test anything they put out at all on Windows.

The parent post did not suggest they don't test anything. It suggested they did not test the whole chain.
Writing backends in Go I do get that warm fuzzy feeling knowing that it will compile and work in ten years. The syntax is easy to read, if I'm not lazy to add extensive tests I can simply read these as documentation to re-familiarise myself later. It's now my go to tool for everything server side.
I was listening to a podcast/article being read in the authors' voice and it took me an embarrassingly long time to realize it was being read by an AI. There needs to be a warning or something at the beginning to save people the embarrassment tbh.
The solution is to start a new side project.
>Risk: low (so few companies get hacked)

Come on.
Websim
No one claimed it is.
Hey, if you're interested in pairing on the project together, I'm interested and available (especially if it's open-source). I'm a "full stack" web app developer, and "coach" other developers (a common situation is a senior developer who got promoted into a team lead / architecture role, and haven't coded for awhile, got laid off, and - oh shoot - code skills are dusty & rusty), and get code skills and project back on track.

For the past couple months, I've been pair-jamming with friends & colleagues on side projects. We'll often order in pizza, build a backlog of features we can ship in the next week or two, and work on it together (alternating who's coding using pomodoro timers). It's a lot of fun.

For what it's worth - I get the same feeling about my own projects, and frankly - helping someone else with their project can often unblock your own. Team work makes the dream work.

If that's something you're interested in, my contact details are in my HN profile. I do it for fun (& pizza!).
For people like me who gave up trying to follow Arxiv ML papers 3+ years ago, articles like these are gold. I would love a Youtube channel or blog which does retrospectives on "big" papers of the last decade (those that everyone paid attention to at the time) and look at where the ideas are today.
Disagree. Industry porn isn’t perfect but real abuse comes from content that is sexual but not porn with a 2257 and consent/a “no list”
There are plenty of solutions for that already in place. Child sex abuse sites get blocked, for example. Even forums like Kiwi Farms have carriers blackholing them.

No reason why this can't be similarly enforced for porn sites that skirt the age verification rules.
Accountability would drive this. Engineering liability codes are a thing, trade liability codes are a thing. If you do work that isn't up to code, and harm results, you're liable. Nobody is holding us software developers accountable, so it's no wonder these things continue to happen.
Has anyone managed to reverse engineer how "blessing" works yet?
The 1 VI yes, but there's also a cheaper 10 VI. Seems like it is supposed to get 4 years of security updates [1] too, but I suppose only time will tell how that actually plays out.

[1]: https://www.gsmarena.com/sony_xperia_10_vi-review-2701p4.php
There isn't, and never was, a benevolent dictator choosing the OS for computers in medical settings.

Instead, it's a bunch of independent-ish, for-profit software & hardware companies. Each one trying to make it cheap & easy to develop their own product, and to maximize sales. Given the dominance of MS-DOS and Windows on cheap-ish & ubiquitous PC's, starting in the early-ish 1980's, the current situation was pretty much inevitable.
hope you enjoy it ! https://wiki.mutable.ai/simonw/datasette
Windows and macOS are both total shit.
https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

> You absolutely should be preventing users from being able to copy a private key!

Huh? This is dumb. Users should be able to do whatever they want with their private keys. Looks like the post in on point about the push to take away control from the user. This is an anti-feature that should not be sneakily accepted as a security feature.

When DRM-like stuff is shoved on the user in the name of security, it turns into the means to control the users by whoever makes those decisions for them. This should always be opposed.

Having requirements like "users should not be allowed to do X" stinks to extreme.
My wife is a hospital pharmacist. (1) When she gets a new prescription in, she needs to see the patients charts on the electronic medical records, and then if she approves the medication a drawer in the Pyxis cabinet (2) will open up when a nurse scans the patients barcode, allowing them to remove the medication, and then the nurse will scan the patient's barcode and the medication barcode in the patients room to record that it was delivered at a certain time. Computers are everywhere in healthcare, because they need records and computers are great at record-keeping. All of those need networks to connect them, mostly on wifi (so the nurses scanners can read things).

In theory you could build an air-gapped network within a hospital, but then how do you transmit updates to the EMR's across different campuses of your hospital? How do you issue electronic prescriptions for patients to pick up at their home pharmacy? How do you handle off-site data backup?

Quite honestly, outside of defense applications I'm not aware of people building large air-gapped networks (and from experience, most defense networks aren't truly air-gapped any more, though I won't go into detail). Hospitals, power plants, dams, etc. all of them rely heavily on computers these days, and connect those over the regular internet.

1: My wife was the only pharmacist in her department last night whose computer was unaffected by Crowdstrike (for unknown reasons). She couldn't record her work in the normal ways, because the servers were Crowdstrike'd as well. So she spun up a document of her decisions and approvals, for later entry into the systems. It was over 70 pages long when she went off shift this morning. She's asleep right now.

2: https://www.bd.com/en-uk/products-and-solutions/products/pro...
Encoder: Text tokens -> Fixed representation vector

Decoder: Fixed representation vector + N decoded text tokens -> N+1th text token

Encoder/Decoder architecture: You take some tokenized text, run an encoder on it to get a fixed representation vector, and then recursively apply the decoder to your fixed representation vector and the 0...N tokens you've already produced to produce the N+1th token.

Decoder-only architecture: You take some tokenized text, and recursively apply a decoder to the 0...N tokens you've already produced to produce the N+1th token (without ever using an encoded representation vector).

Basically, an encoder produces this intermediate output which a decoder knows how to combine with some existing output to create more output (imagine, e.g., encoding a sentence in French, and then feeding a decoder the vector representation of that sentence plus the three words you've translated so far, so that it can figure out the next word in the translation). A decoder can be made to require an intermediate context vector, or (this is how it's done in decoder-only architectures) it can be made to require only the text produced so far.
But the US dollar has always been weaponized
Voting patters. Americans, like any human, loooove righteous violence, both witnessing and enacting it. The System in America is Americans' collective expression of this impulse.
What is the gold standard for age verification online? Is there one?

I could take my ID to the library / police station, have it verified, and then get given a USB stick with 16GB’s worth of signed government tokens from a big bucket of unmarked hardware. I guess a bad site could still narrow down who I am to my nearest library / police station though.

Proof-of-age tokens that aren’t tied to my ID have the downside that they are transferable. Kind of like a case of beer is transferable from an adult to a child.

Is there a better way of keeping are-you-old-enough separate from who-are-you?
Can the New Mathstral LLM Accurately Compare 9.11 and 9.9?
AI can not handle basic math like deciding which is greater between 9.11 and 9.9? A popular meme sparks debates about LLM's grasp of elementary math.
Introducing mathstral, Mistral AI's latest opensource model, fine-tuned specifically for mathematical reasoning and scientific discovery. I just ran a series of tests to determine if mathstral can truly discern the larger of two decimal numbers in a way that makes sense to us humans.
Using LlamaEdge's Rust + Wasm tech stack, I set up mathstral on my local machine—no complex installations needed! The results? Absolutely fascinating and promising for the future of AI in education and beyond.
Want to see how it performed and possibly set it up yourself? Check out this detailed easy-to-follow walkthrough
So the server must render the 3d world from each players perspective to do these tests? Sounds ridiculously expensive.
No. The problem isn’t expertise — it’s CIOs that started their career in the 1990s and haven’t kept up with the times. I had to explain why we wanted PostgreSQL instead of MS SQL server. I shouldn’t have to have that conversation with an executive that should theoretically be a highly experienced expert. We also have CIOs that have MBAs but not actual background in software. (I happen to have an MBA but I also have 15+ years of development experience.) My point is CIOs generally know “business” and they know how to listen to pitches from “Enterprise” software companies — but they don’t actually have real-world experience using the stuff they’re forcing upon the org.

I recently did a project with a company that wanted to move their app to Azure from AWS — not for any good technical reason but just because “we already use Microsoft everywhere else.”

Completely stupid. S3 and Azure Blob don’t work the same way. MCS and AWS SES also don’t work the same way — but we made the switch not even for reasons of money, but because some Microsoft salesman convinced the CIO that their solution was better. Similar to why many Jira orgs force Bitbucket on developers — they listen to vendors rather than the people that have to use this stuff.
I was advocating for a paper fall back. That means that WHILE the computers are running, you must create a paper record, eg “medication x administered at time y”, etc., hence the receipt printers, which are cheap and low-dependency.

The grandparent indicated that the problem was that when all tow computers went down, they couldn’t look up what had already been done for the patient. I suggested a simple solution for that - receipt printers.

After the computers fail you tape the receipt to the wall and fall pack to pen and paper until the computers come back up.

I completely understand the scale of the outage today. I am saying that it was a stupid decision and possibly criminally negligent to make a life critical process dependent on the availability of a distributed IT application not specifically designed for life critical availability. I strongly stand by that POV.
I believe the question of whether there's life that's entirely confined to clouds is open.
"Yours sincerely,

Crowdstrike

---

PS - If you get hit by some massive crash, we refer you to our company's name. What were you expecting?"
Does anyone have the BSoD dump file when it crashed? our a C-00000291-00000000-00000032.sys output de-identified ?
There will be demand for search, ads and social media that can get you real humans. If it is technologically feasible, someone will do it.

Most likely we will see an arms race where some companies try to filter out AI content while others try to imitate humans as best they could.
Exactly this what I was missing in the story. Like why not to have a limited set of users have it before going live for the whole user base at a mission critical product like this is beyond comprehension of everyone ever came across software bugs (so billions of people). And then we already overcame the part of not testing internally well, or at all? Something clusteruck must have happened there which is still better than imagining that this is the normal way the organization operates. Which is a very scary vision. Serious rethinking of trusting this organization is due everywhere!
I don’t think the “before 1830” case is really an issue. That’s just an example of the meaning of words changing.

I didn’t mean that “ordinary camera” should be a term in the formal ontology. I meant something more like “If you want to formalize the notion of ‘a camera’, it should include the CAT machine and telescope. If you want to address only the types of cameras that you think of as ordinary cameras, you should add extra qualifiers to get at what you mean.” .

(Where, “what you mean” might not get the term “ordinary camera”, but something more clear and descriptive.)
To be sure. But the fact is the release broke.

I'm not sure: is having test servers that it passed any better than none at all?
The protest WAS peaceful until one protester was killed by the Police for no reason.

Not sure how you are blaming the massive countrywide internet outage on the protesters. It was literally announced by the government that they were shutting everything down to control the movement.
Find a friend to work on it that is less technically good, but more motivated.
You will each bring something to each other.
Enceladus is the new Europa!
This is for critical infrastructure though. You AT LEAST test it out first on some machines
I wonder if those same insurance policies are going to pay out due to the losses from this event?
Nothing like sourcemodded server! Good old days!
Isn't part of the reason we stopped using bunker fuel with such high sulfur levels because it caused acidification? That also greatly damages oxygen available to organisms, I think?

I forget exactly how hypoxia and acidification are related but they're often mentioned together. For example, https://www.eea.europa.eu/en/newsroom/news/warming-acidifica...

This paper seems to be saying that low Dissolved Oxygen can quickly turn into or make acidification issues worse, https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4892234/
It works just fine for me what that wasn't the case.
why the fuck is our critical infrastructure running on WINDOWS. Fuck the sad state of IT. CIOs and CTOs across the board need to be fired and held accountable for their shitty decisions in these industries.

yes CRWD is a shitty company but seems they are a "necessity" by some stupid audit/regulatory board that oversees these industries. But at the end of the day, these CIOs/CTOs are completely fucking clueless as to the exact functions this software does on a regular basis. A few minions might raise an issue but they stupidly ignore them because "rEgUlAtOrY aUdIt rEqUiReS iT!1!"
Yup. I had quite a battle with some sort of system bug (never fully traced) where I wrote valid data but what ended up on disk was all zero. It appeared to involve corrupted packets being accepted as valid.

It doesn't matter how much you test if something down the line zeroes out your stuff.
Did their hitbox clip through the wall? Yes? Banned. You could do it with telemetry.
They've always been around, and I think the trend is still towards more democracy and freedom cross the world.

That doesn't make the news though.
Author has it exactly backwards. Crowdstrike is installed on a huge number of corporate machines because of rules that have been imposed from above. Probably the #1 reason IT departments install the stuff is because it automates compliance for various cookie-cutter security standards.

So now, instead of having to think through your threat posture and be smart, you can deploy your magical unicorn AI software and have safe harbor ("I followed the industry best-practices!"). Just ignore the fact that said software is exporting a big juicy attack vector, wherein a third-party randomly dumps kernel-level updates on you, without your oversight, testing or permission.

What could go wrong?
What they really value is bandwidth. More VRAM is just more bandwidth.
I think GP was repsonding to this:

> I find the notion of supporting this level of harm to others to be no more moral if you vote for it than if you commit a violent crime.

I likewise find it pretty ridiculous to equate voting for retributive punishment for murder and actual murder.
IIRC, a couple of years ago it passed into the developed nations club.
To whatever extent the sound is intended to only give a general direction, I'd say quantize the angle and volume of the sound before it's sent such that cheaters also only get that same vague direction. Obviously don't send inaudible/essentially-inaudible sounds to the client at all.
"Cheating on bandwidth" is the name of the game right now.
Remember those good old fashioned windows that you could roll down manually after driving into a lake?

Yeah, can’t do it now: it’s all electronic.
That's really my point.
> It quells vigilantism.

Someone with a personality to commit violence with a sense of righteousness is bound to unlawfully hurt people sooner or later.

The sooner we can rehabilitate violent criminals like that, the better.
Well obviously violence against random civilians is not justified, the target should be the state, especially leaders and security forces.
Crowdstrike was originally founded and headquartered in Irvine, CA (Southern California). In those days, most of its engineering organization was either remote/WFH or in Irvine, CA.

As they got larger, they added a Sunnyvale office, and later moved the official headquarters to Austin, TX.

They've also been expanding their engineering operations overseas which likely includes offshoring in the last few years.
Those are the features everyone is using, though.
The problem is that you are only focusing on making the computers work and not the system.

"we don't know yet" is a valid response and gives the rest something to work, and it shouldn't annoy you that it's being asked, first of all because if they are asking is because you are already late.

you have to to tell the rest of the team what you know and you don't know, and update them accordingly.

until your team says something the rest don't know if it's a 30 minute thing or the end of the world or if we need to start dusting off the faxes.
I'm sure the news media will frighten everyone into having the governments seize more power.
A person who says "Us as an industry" and refers to Crowdstrike is not talking to _us_, he's talking to high-flying corporate operators and stock owners.