skysight-inc/HackerNews huggingface dataset:
> In which case why did they fail to prevent this?

"Oh, crowdstrike? Yeah, yeah, here's that Winodws kernel code signing key you paid for."
Yes, absolutely. The AI hype can't die soon enough.
The CrowdStrike file that broke everything was full of null characters?
When I run mistral-chat on Ubuntu 22.04 after cleaning up some smaller processes from the GPU (like gnome-remote-desktop-daemon) I am able to start Mistral-Nemo 2407 and get a Prompt on RTX 4090, but after entering the prompt it still fails with OOM, so, as someone noted, it narrowly fits 4090.
Do you build a syntax tree of the code, then loop the tree to auto-write an article for each node (or the larger or more material nodes) and then also reference the tree to pull in related nodes/pieces/modules/whatnot of the codebase when auto-writing a documentation article for each node?

This is fascinating thank you
One thing I haven't seen anyone mention yet is that Nash equilibria do not actually exist when you move beyond heads-up into multi-way play. There's strong empirical evidence that solving abstracted games using MCCFR and using real-time depth-limited tree search dominates humans and outperforms all other AI strategies, but these results aren't theoretically sound, unlike in heads-up play.

I've actually been working slowly on https://github.com/krukah/robopoker, an open-source Rust implementation of Pluribus, the SOTA poker AI. What I've found interesting is the difference in how I approach actually playing poker versus how I approach building a solver. Playing the game naturally consists of reasoning about narratives and incorporating information like hand history, play style, live tells. Whereas solving the game is about evaluating tradeoffs between the guarantees of imperfect-information game theory and the constraints of Texas Hold'em, finding a balance between abstract and concrete reasoning.
The criminal crews have a reputation to uphold. You don't deliver on payment, the word gets around and soon enough nobody is going to pay them.

These security software vendors have found a wonderful tacit moat: they have managed to infect various questionnaire templates by being present in a short list of "pre-vetted and known" choices in a dropdown/radiobutton menu. If you select the sane option ("other"), you get to explain to technically inept bean counters why you did so.

Repeat that for every single regulator, client auditing team, insurance company, etc. ... and soon enough someone will decide it's easier and cheaper to pick an option that gets you through the blind-leading-the-blind question karaoke with less headaches.

Remember: vast majority of so-called security products are sold to people high up in the management chain, but they are inflicted upon their victims. The incentives are perverse, and the outcomes accordingly predictable.
Show HN: Create Email Templates in Seconds Not Hours (v0.dev for Emails)
I am building a tool to simplify email template creation. In the demo below, I threw it a screenshot of a sample email from Notion and it re-created it almost perfectly using @react-email/components. The entire process took 70 seconds.

If you're already a react-email user, great! You know how much time it'd save for your workflow to draft react-email jsx. Otherwise, check out https://react.eamil which is an awesome library for crafting cross-platform email templates programmatically using React. It even supports TailwindCSS.

If you're interested in being a beta tester, sign up at https://gpt.email/?ref=hn

Thanks!

Demo:

https://www.loom.com/share/66de17b66ff64e32a01da12ec530fff0
Had it already been 12 years?

The last time that I looked at a map of Curiosity's location it was somewhere around Darwin and I suppose Cooperstown hadn't been named yet. And the map was certainly not interactive.
Well you can use stupid broken software with any OS, not just Windows. Isn't CrowdStrike Falcon available on Linux, is there any reason why couldn't they have introduced a similar bug and similar consequences there?
The article shows a related model with a passive heatsink bolted onto it. The heatsink roughly doubles the volume of the thing, but passive seems possible. If nothing else, the spec sheet says it can go up to 60C.
Why would you design a system where a piece of malware can "install itself" at a mega-priviledged position?

My argument was that this is the flaw, and everything else is just trying to put lipstick on a pig.

If you have a nightclub and you have problem controlling which people get in, the first idea would be to not have a thousand unguarded doors and to then recruit people that search the inside of your nightclub for people they think didn't pay.

You probably would think about reducing the numbers of doors and adding effective mechanisms to them that help you with your goals.

I am not saying we don't need software that checks files at the door, I say we need to reduce the number of doors leading directly to the nightclubs cash reserve.
Its the right question to ask: speculation breeds innovation and nothing else has motivated humans to bother

the merely curious get nowhere, the financially incentivized risk takers with asymmetric upside have a selective evolution of failures and successes towards a couple that find an edge
How do so many super critical things rely on… windows? I wouldn’t trust windows to run a laptop reliably but here it is running prettty ucy everything. I guess that’s why they need crowdstrike.
yes, staggered software update is the way to go. there was reply in this thread why Crowdstrike did not do it -- don't want extra cost of Engineering for that

having 1/3 of Airlines computers Windows, RHEL, Ubuntu .. all unlikely to hit same problems at same time.
Eh. I think you're underestimating how overmatched these IT depts are when it comes to cybersecurity.

Either sign a contract with a best-in-class (even if in name only) vendor who says that they'll do all of this for us or we need to become "experts" in cybersecurity and potentially still use them.

The CIO is overmatched here so they're making the decision that protects them and their clients in _almost all_ cases.
also noticed that on some websites being typed in and hit enter afterwards (no matter if they're functionable at all or not), your interface goes plain blank for some reason (i suppose for the sites that are up but run through "HTTP" instead of "HTTPS" or vice versa, it might just happen when you type the mismatching protocol name into the search field, though it barely sheds any light on possible ways of troubleshooting the issue itself).
> I’m all for successful businesses operating within the parameters of the law, but is it not also correct to expect some adherence to a minimum ethical standard?

A corporation doesn't have morality and can't exhibit ethics: the individual people who embody it do, can, and should, of course... but, in my experience trying to point that out--such as how software engineers and designers should be held in moral contempt by their friends, family, or even merely coworkers for working on "dark patterns" at big tech companies--you get strong push back with either the excuse of "just doing one's job" or the insistence that "someone else would do it anyway", as if the act of profiting off of your directly-bad actions is so trivially justified; and, worse, once you connect this with the realization that your employer is, by its construction, amoral, you've created a scenario where we are intrinsically absolved of all sin.
The problem is, making noise incurs risk.

The higher up in large organizations you go, in politics or employment or w/e, the more what matters is not facts, but avoiding being visibly seen to have made a mistake, so you become risk-averse, and just ride the status quo unless it's an existential threat to you or something you can capitalize on for someone else's misjudgment.

So if you can't directly gain from pointing out the emperor's missing clothes, there's no incentive to call it out, there's active risk to calling it out if other people won't agree, and moreover, this provides an active incentive for those with political capital in the organization to suppress the embarrassment of anyone pointing out they did not admit the problem everyone knew was there.

(This is basically how you get the "actively suppress any exceptions to people collectively treating something as a missing stair" behaviors.)
Simply search "crowdstrike" or "crwd" in the subreddit for evidence of regular posts about this stock, both positive and negative. Just a coincidence, and not really that special of one. HN should be smarter than this
Companies are evil when they lobby to change laws in their favor, not when they take advantage, to the maximum extent possible, of the law. Just taking advantage of the law is rational, it is changing it that makes them evil. In this case the companies are pure evil and should be dissolved.
(May 13, not necessarily related to the recent relocation news)
[https://news.ycombinator.com/item?id=40357237]
Just wait until we're stepping on it. That's when the real discoveries that will be recorded in the textbooks will begin.
Why? Both things seem pretty tangential. Poorly written software exists or can exist on any platform, just like the IT infrastructure wouldn't somehow automagically become robust if they just switched to Linux.
It's pretty neat. However, not including 'https' results in a 500 server error, and a blank page. Perhaps on submission, a little `if(!link.startsWith('https'))` check would be nice :)
It's not like hackers haven't killed people in hospitals with e.g. ransomware. Our local dinky hospital system was hit by ransomware twice, which at the very least delayed some important surgeries.
> Many good/great composers

I think you are using great differently here, I assume he meant "one per generation" great or similar, you wont have many such people.
I edited my post to include the link, I guess if people see these posts I'm not completely banned and maybe there isn't anything nefarious going on, they have a situation where the comments to a single comment are already off the first page so there could be a software bug. But it does appear that there is some sort of reputation management going on.
> Let me tell you it's a B2B SaaS tool for enterprises.

Do you have any security compliance certifications? If you're not at least SOC2-certified, you're not going to get "enterprise" market penetration in the first place.
There will be lawsuits, there will be negotiations for better contracts, and likely there will be processes put in place to make it look like something was done at a deeper level. And yet this will happen again next year or the year after, at another company. I would be surprised if there was a risk assessment for the software that is supposed to be the answer to the risk assessment in the first place. Will be interesting to see what happens once the dust settles.
They came out and said they are making them worse, its not an illusion.
You do realize that knowledge of CS fundamentals is extremely unlikely to have prevented this?
Wow, why the fuck is that support article behind a login page.
The United States is on the list as having no enforced conscription. I assure you that we do have it. The definition they used for this chart is highly suspect.

Edit: also trying to quantify this using "Count of Nations" rather than "Sum of Populations" is wildly misguided. Saying that Vatican City doesn't have a defense force adds nothing to the conversation.
If you are a Crowdstrike customer you can’t run anything today.
If they weren't burning cash on AI, they'd be burning it on something equally useless. Smartphones have been more or less feature-complete for years now.
USDA programs generally (always?) operate by giving money to states, which each have their own eligibility and application requirements. This is the (physical) application form for Alabama:

https://mydhr.alabama.gov/content/forms/application-english....

(There is an online form, but it requires an account.)

Note the last page, particularly "You have the right to have your application acted on within thirty days without regard to race, sex, religion, national origin, age, disability or political belief. You have the right to know why your application is denied, or your benefits reduced or terminated. You have the right to request a conference or fair hearing either orally or in writing if you are not satisfied with any decision of the county department. You have the right to be represented by any person you choose. You have the right to examine your food assistance case file in relation to any hearing you may have."

Expedited services are available: "You may get food assistance benefits within 7 calendar days if your food assistance household has less than $150 in monthly gross income and liquid resources (cash, checking or savings accounts) of $100 or less; or your rent/mortgage and utilities are more than your household’s combined monthly income and liquid resources; or a member of your household is a migrant or seasonal farm worker."

It is a little known fact that few infants, for example, can survive 30 or even 7 calendar days without food.
Dude. SO MUCH STUFF runs on Windows.
I was looking forward to spending the day talking to people about cyber security but if my comments are going to disappear like that then maybe hacker news is not the site for me. A shame really.

Edit; I don't know for sure but this is possibly the last straw for me on hacker news. It really has gone downhill. If good faith discussions from experts are being secretly deleted for what I can only now assume are for nefarious reasons then I can't trust what I find here is in anyway representative. It's unfortunate in that there really isn't anywhere else to go. Now my best discussions are in small WhatsApp groups / Discords with friends. It's ok for me where I have had a career to get to know people personally and have such groups but if public forums are tainted in this way then younger people in this field will end up only talking to each other.
I could have been more careful with my language: it's the ones at the top, the ones positioning themselves to take lead positions and/or being positioned as useful puppets, manufacturing and weaponizing an ideological mob that doesn't care about or follow critical thinking to actually find out what the truth is, and how urgent or not urgent climate change is or how severe and how easily mitigable human impact on climate is.

Are you familiar with the concepts of manufacturing consent, fear mongering, regulatory capture, turnkey authoritarianism, tyranny, etc?
https://access.redhat.com/solutions/7068083

Just last month there were issues between RHEL's kernel update and Crowdstrike.
Yeah let me look that up that lawyer's number on my phone that I have to pay $120 in unpaid device payment fees plus $50 in reactivation fees before t-mobile reactivates my data plan.

No worries, let me just use the McDonalds wifi, I'll drive there in my car that was repossessed while I was incarcerated since no one was paying my car payment.

Actually, I'll use my laptop at home. Oh nevermind, it was thrown out on the side of the street a month after I was incarcerated because I got evicted for nonpayment of rent and someone driving by grabbed it.

Things that are simple for you and I are 1,000% more difficult for someone who was just out of prison or is currently homeless.
That's assuming in this alternate universe we'd also be using kernel antivirus software to counter malware. It's far from obvious.
All the crazy people banging the drum for war with Russia and/or China.

Imagine what our IT systems would look like with someone _intentionally_ messing with them.
Compliance.

To work with various private data, you need to be accredited and that means an audit to prove you are in compliance with whatever standard you are aspiring to. CS is part of that compliance process.
> They do compose new baroque and romantic era style classical music all the time.

But it isn't that good, what people want is that level of quality not just that style.

I think to compose great music the entire culture need to support it, you wont get to the same heights when most of society don't care about what you do.
>5) if you really need a kernel-level driver, do not write it in a memory unsafe language

I C what you're doing... >_>
See the recent waves of ransomware encrypting drives and similar attacks. They cause real cost as well and this outage can be blamed on crowdstrike without losing face. If you are in the news for phished data or have an outage since all data is encrypted blaming somebody else is hard
People who are wrongly convicted are in the in-group. Also, pay-to-stay exists in 49 states; why are only 2 of 49 as cruel as you expect? I don't recognize the monsters you imagine; people just collectively aren't too careful about who gets hurt balancing the budget on the backs of groups who can't vote.
The problem here would be that there's not enough people who can provide the level of protection a third-party vendor claims to provide, and a person (or persons) with comparable level of expertise would be much more expensive likely. So companies who do their own IT would be routinely outcompeted by ones that outsource, only for the latter to get into trouble when the black swan swoops in. The problem is all other kinds of companies are mostly extinct by then unless their investors had some super-human foresight and discipline to invest for years into something that year after year looks like losing money.
I'm sure this won't leak into the public and have randos with Raspberry Pi using them for terror attacks /s
My point exactly. Antivirus is a cheap on top measure thst makes people feel they have done something, the actual safety of a system comes from preventing people and software from doing things they shouldn't do.
yeah ! you know the best way to learn more is to join us, we're hiring: https://www.workatastartup.com/companies/mutable-ai
How do you automatically roll back if you’re in a boot loop?
there are way too many horrific things in the world to learn about... and then realizing you can't do something about every of those things. But at least you can tackle one of them! (In my case, antibiotic resistance)
Netherlands is the worst at this. More and more “PIN ONLY”. Also more and more tight rules about how much you're allowed to have.

Luckily I can just give someone a paper wallet containing crypto. No transactions, no traceability, no rules.
A game dev's guide to gaming laptops
The biggest advantage of guitar tabs is you don't need to be able to read music. You just need to know how to count. The timing is a non issue as most people will try and learn the song with a tab and a recording of the song.
Agreed on all points. Her family is a big part of that casual interaction since they're young enough to be super active and curious. They seem to get on especially well with older subjects

I only just discovered her during the pandemic and since then a lot of copy cat projects've popped up and moved on to bigger streaming platforms. I'd buy a DVD/Blu-Ray collection of her YouTubes
My guess is it probably was a content update that tickled some lesser trodden path in the parser/loader code, or created a race condition in the code which lead to the BSOD.

Even if it’s ‘just’ a content update, it probably should follow the rules of a code update (canaries, pre-release channels, staged rollouts, etc).
Not Yet. Its an MVP right now. Even to get a demo call with enterprise, do I need that certification?
The SolarWinds story wasn't forgotten. Late last year the SEC launched a complaint against SolarWinds and its CISO. It was only yesterday that many of the SEC's claims against the CISO were dismissed.
What happened to BERT and T5?
Does anyone know of the open source project Mermaid? Well, Mermaid Chart (A company built off of the open source project and founded by the founder of Mermaid) is about to change the way you create diagrams with Mermaid AI! I've used it a couple of times and you would be shocked at how fast efficient and simple the tool is! The best part, you can use it for free right now! Check it out on Product Hunt as it launches next week!
Why not? They chose to be named as the most popular independent variable of all time.
It would be super ironic if we change how we refer to things because of their preferences for calling themselves.
B a bullshitter like https://astronomy.fas.harvard.edu/people/avi-loeb
Because Windows is accessible and Linux requires uncommon expertise and short term cost that is just not practical for lots of places.

Goodluck teaching administrators an entirely new ecosystem, goodluck finding software off the shelf for Linux.

Bespoke is expensive, expertise is rare, Linux is sadly niche.
You just explained something that I've been noticing more and more lately. A decade ago, the early adopters and nerds would have the flagship phones, and everybody else would have the cheap phone. Today the power users are using the absolute cheapest phones and the general public has the flagships.
I don’t think this is universally true. At least not here in the Netherlands, but even in visiting the US it does not feel like that everywhere.

I think it is very sad the moral standards are so low. I find that even harder when mixed with “why does the government get involved in everything?” attitude.

I also don’t lead my company of 27 people that way.
It's not as straightforward of a choice as it may seem. In theory Linux would be a better choice but there simply isn't the infrastructure or IT staffing in place to manage millions and millions of Linux desktops. I'm not saying it can't be done but for various reasons it hasn't been done and that's a major practical roadblock. Just from a staffing perspective alone if you hand millions of Linux desktops to life long Microsoftsies you're begging for disaster.
> was designed as a multi-user system from the start, so access controls and permissions were there from the start.

Right and Windows NT wasn't? Obviously it supported all of those things from the very beginning (possibly even in a superior way to Unix in some cases considering it's a significantly more modern OS)...

The fact that MS developed another OS called Windows (3.1 -> 95 -> 98) prior to that which was to some extent binary compatible with NT seems somewhat tangential. Otherwise the same arguments would surely apply to MacOS as well?

> These ideas had already expanded to networks before Microsoft ever heard the word Netscape.

Does not seem like a good thing on its own to me. Just solidifies the fact the it's an inherently less modern OS than Windows(NT) (which still might have various design flaws obviously, that might be worth discussing, it just has nothing to do whatsoever with what you're claiming here...)
I can be proud of my country and the good things it has done while also recognizing its failures - both past and present. Pride can be a good thing, so long as it is not from ignorance. Pride can create expectations which drive improvement.

IMO one of the US's greatest issues right now is how much its own citizens either hate it or have given up on it. It's so much easier to white about The Other Side and how they're supposedly ruining the country than it is to enact meaningful change that we can be proud of.
Just yesterday listened to a lecture by Moshe Vardi which covers adjacent topics:

https://simons.berkeley.edu/events/lessons-texas-covid-19-73...
Was this problem caused by Microsoft? No.

This really should be a hell no. Perhaps Microsoft's greatest claim to fame is their enduring ability to quickly and decisively react to security breaches with updates. Their process is extremely public and hasn't significantly changed in decades.

If your company can't work with Microsoft's process, your company is the problem. Every other software company in the last forty years has figured it out.
I'm struggling to connect your response to what I actually said in my comment.
But the effects on society were far less because “online” wasn’t synonymous to “internet”