skysight-inc/HackerNews huggingface dataset:
I've been thinking about this a lot recently. So in Aider, it looks like "importance" is based on just the number of references to a particular file, is that right?

It seems like in a large repo, you'd want to have a summary of, say, each module, and what its main functions are, and allow the LLM to request repo maps of parts of the repo based on those summaries. e.g. in my website project, I have a documentation module, a client side module, a server side module, and a deployment module. It seems like it would be good for the AI to be able to determine that a particular request requires changes to the client and server parts, and just request those.
There are a lot of types of bread. For a whole bunch of those this process is irrelevant. Pita for example. So a specialist "foreign foods" place will have lots of options. But also if you have either an actual bakery or a large supermarket they will have options to make "traditional" English bread by the conventional more expensive process and charge you for that.

If you want to pay 40p for a loaf of bread, Chorleywood is the way that happens. If you don't mind paying £2.50 for an artisan loaf that you can't figure out how to slice that's cool too.

Dippy soldiers probably don't benefit from using the slow expensive process. A ham sandwich probably does.
Maybe one day we will stop giving RCE to so many vendors via auto update.
This is why I subscribe to /r/sysadmin despite not being one ... like a canary in the coalmine for stuff like this
A reminder why switching off auto-update is a thing.
There appears to be a workaround but my question is how are they going to get all of these endpoints out of a BSOD loop?
The antivirus did its job, now you can't get viruses. Jokes aside, I've checked their website and it was full of AI buzzwords so I guess that happens when you focus on nonsense instead of what your customers actually need (I know that all antiviruses have a machine learning component, but usually you don't advertise it as some sort of AI to get better stocks).
It's morning here in Europe, departure peak time. We're still flying, but...

The problems mean the takeoff and weight & balance data is missing. It needs to be done manual by each crew. Baggage handling is also manual, so that means counting bags and the cabin crew counting people. Then manually calculating performance data before you can take off.

Big delays everywhere.
Maybe it's time that critical systems switch to Linux. The major public clouds are already primarily running Linux. Emergency services, booking, and traditional point-of-sale have no strong reason to run Windows. In the past 10 years, the technological capability differences between Windows and Linux have widened considerably, with Linux being the most advanced operating system in the world without question.

Concerns about usability between Windows and Linux in the modern day are disingenuous at best and malicious at worst. There is no UX concern when everything runs off a webapp these days.

Just use Linux. You will save money and time, and your system will be supported for many years, you won't be charged per E-Core, you won't suffer BSoDs in 2024. Red Hat is a trustworthy American company based out of Raleigh, NC, in case you have concerns of provenance.

Really there's no downside. If you were building your own company you would base your tech stack on Linux and not Windows.

Critical systems cannot go down; therefore they cannot run Windows. If they do, they are being mismanaged and run negligently. Management should have no issue finding Linux engineers, they are everywhere. I could make a killing right now as a consultant going from company to company and just swapping out Windows backends for Linux. And quite frankly I might just do that, literally starting right now.
So, maybe that is the difference to the German language? Here in the news you can hear "die Ukraine" (the Ukraine) all the time. And usually any "rules" in the rough vicinity of political correctness, anti-discrimination or simple politeness are meticulously adhered to in German news. Which I am personally fine with.
The people who use patriotism for every reason except actually caring for their fellow citizens.
they have kernel modules for macos and linux too afaik, so i wouldn't be counting those chickens too fast
Example of abstraction vs indirection:

If I said 'User', we both know exactly what that means. It's so semantically simple that laypeople know what it means. But our implementations could vary wildly. Someone who's just taken Java 101 will be thinking of a class with getName() and setName(). But someone who's just taken SQL 101 will think of a User as an INT or UUID, where features are added by referencing that user's id from different tables. User is abstract because it's understandable and not locked into any particular implementation.

I love Kafka. But it's a PITA to program against, at least in Java. I cannot code directly against it and always need to make my own wrapper classes to construct and poll it. I'll make ResumingKafkaReader and RewindingKafkaConsumerFactory, etc. These are not abstract, because they are very specific about what and how they do things. They are concrete behaviours wrapped with 1-2 levels of concrete indirection.

However, I might inject one of my Kafka indirections into a business logic class, interfaced as a Supplier<User>, which makes it abstract. I can then unit test my class, safe in the knowledge that my class cannot know if a User came from Kafka or just a test stub.

So I push back on the thesis of the article, and double-down on doing things abstractly first and foremost. This is closely related to the dependency inversion principle. Write (and test) your business classes around Users and other abstract things. Once you've done it wrong a few times and eventually gotten it right, then you can start writing the indirections (e.g. AbstractKafkaFactory) which the article rightly claims slow you down in the beginning.
Sounds like it's more of a problem caused by Crowdstrike. I'm sure azure fell over when millions of servers all freaked out simultaneously.
i work liquor distribution in the united states and our entire company is out across 44 states, allegedly due to this “crowd strike outage”
Calibre's built in ebook viewer is very ugly.
Why? If you're the kind of guy who thinks his code is "fast enough" (pro tip, it actually isn't) you're already coding in Javascript, not C++.
> The whole point of my comment is that with REST

Hence your comparison is invalid

> you don't have any guarantees about the API and thus it's a much harder target to support.

You won't find a developer worth hiring who thinks OpenAPIs are more difficult to work with than GraphQL.

Every REST API can be an OpenAPI

Practically every popular general purpose language has an OpenAPI client gen implementation.

And supporting a GraphQL API is not easier than supporting a REST API. All I have to do for my stopwatch API is handle one route.

> You're limiting it to json:api which is nice

Certain constraints do come with valid comparisons, comparing like things is a requirement of a valid pros/cons comparison, not a niceity.

It makes no sense to explain the pros of using one thing over an other when no one is thinking about using one thing as a replacement for another.

It's like talking about the pros/cons of using your proprietary web based chat platform vs. using UDP. Not using UDP for the chat or anything. Just comparing the chat with UDP itself, the whole protocol. No one considering your chat is going to step back and go "wait why am I using a web chat when I can just use UDP?"

> I have never even seen a company use that

My point isn't that a company does/doesn't use it. I mentioned JSON:API because it's a valid basis of comparison, no other reason.

> What happens in reality is that I get 20 apis from 20 teams, each of them completely different principle - and am supposed to build an universal auth layer for that. That's much more painful than in the companies that decided to go for GraphQL only.

But you have by your own admission never seen another company use JSON:API.. therefore you don't actually know that it is more painful than it would be for all REST APIs.

For all I know you could, again, be talking about my Stopwatch REST API... hence your comparison is invalid. By the way, auth is easier for my stopwatch API than it is for GraphQL. :)
But that means it has reduced refresh rate.
The original Windows NT had microkernel architecture, where a driver/server could not crash the OS. So no, Crowdstrike didn't have an option really, but Microsoft did.

As PC got faster, Microsoft could have returned to the microkernel architecture, or at least focused on isolating drivers better.
Wendell from level1techs made a detailed video about this recently.

Tldr: it's the high-end chips from 13th and 14th Gen specifically. Also the bit at the end about support costs increasing 10x for those platforms really shows how bad this seems to be.

https://www.youtube.com/watch?v=QzHcrbT5D_Y
It's not Microsoft's fault someone installed third-party spyware/malware on their systems.
These seem like isolated freak events in a big country, a bit like saying USA is dangerous because of school shoitings
This gem from the ABC news coverage has my mind 100% boggled:

"711 has been affected by the outage … went in to buy a sandwich and a coffee and they couldn’t even open the till. People who had filled up their cars were getting stuck in the shop because they couldn’t pay."

Can't even take CASH payment without the computer, what a world!
I don't think the Balkans are comparable.

Sure, they were a war zone recently, too, but the EU integration there is much faster, probably because tourism is a major source of income for them. Just look at Croatia - they even have Euro as their currency now!
Take a look at their stock right now.
I doubt most of the clients who use CS know what BitLocker is, let alone how to back it up, assuming it wasn’t backed up automatically by Windows.
The world just became a slightly better place.
I dont know how CS is considered snake oil. Or what IBM has to offer. CS and S1 are really just the best out there.
You'd still be unable to produce different brightness pixels. You'd get white but no grayscale.

I guess you could cheat it by moving the wavelength outside the visible spectrum?
On the wireless they are reporting a bad Crowdstrike update and a major Azure failover in central USA as separate events, are they they the same or different?
Click the link and watch the video in the github read me.

It IS slamming the lid...
Ask HN: What is the best marketing strategy for solopreneur?
10,000 people a year die of AIDS in the US. Not even remotely close to "winning."

I suspect a large portion of those deaths are due to poor sexual education thanks to christofascists, and people who don't get tested regularly because of poor access to family planning and reproductive health, again thanks to christofascists. All because Magical Sky God Said Abortion Bad.

That and people who lose their healthcare and can't afford the meds because this country is the only developed nation in the world which does not treat healthcare like a universal human right, because corporations want to keep using health coverage to keep workers from switching jobs more freely, because they don't want a free labor market.
Can someone explain what Crowdstrike actually is? Reading Wikipedia it seems to be some sort of anti-virus software?
He means the runtime bisection that this article is about, not `git bisect`.
Temp workaround

Can confirm the below stops the BSOD Loop

Go into CMD from recovery options

change to C:\Windows\System32\Drivers

Rename Crowdstrike to Crowdstrike_Fucked

Start windows

Its not great but at least that means we can get some windows back..
A side issue, but since we’re on the subject of global tech being generally fscked: I’m currently on holiday in Italy and just discovered the entire archive.ph domain is blocked by the government, apparently due to kiddie porn. Shrug emoji…
Buying 10 computers with different configurations is not hard either. They are just lazy
Renaming it .old or whatever would be what a sane person does.

They recommended deleting the thing: https://news.ycombinator.com/item?id=41002199
but nginx or caddy can't run CGIs, they want scalability to the billions.

Disclaimer: I build a personal social web server https://seppo.social like that on top of shared (apache) hosting requiring no root privileges to install and run.

Or with a few lines of sh you can turn many cli tools to web services like https://qr.mro.name/
I was just at Coles, one of Australia's big 2 supermarkets.

50% of the self-serve terminals were down. Presumably the others aren't far behind.

Total chaos.
as a counterpoint, my 5950x has been rock solid. I ran VMs under proxmox for a while until i moved those offsite and now the 5950x is my primary computer. I did get a water cooler for the CPU and was very careful about application of thermal paste and such. as best i can remember this machine has never crashed, even under severe loads while in a drywalled shed with a window unit keeping the shed ostensibly at 75F. Think CPU cryptomining, or compiling the linux kernel with --jobs=33 24/7.
As someone who worked for a company, who's a Crowdstrike partner, I assure you that Crowdstrike does not sell to administrators. It is very much a product sold to management and company auditors.

Where you're correct is that it's on the administrators to rollout the updates, but I'm not sure that's how Crowdstrike works. It's a managed solution and updates are done for you, maybe that can be disabled, but I honestly don't know.
All good points but Windows didnt win because it had the best tech or user interface. Merely the most developer support thus user numbers. Legacy momentum is an incredibly difficult thing to sway. It has taken Apple decades an potentially hundreds of billions of dollars of marketing and good will to carve out its share of the market. Linux doesn't have that despites its clear technical advantages.

It is an incredibly frustrated battle akin to Sisyphus.
POS down? Payment processor down?

Lotta different grocery stores and processors in USA. WHO?
Wild, laptop would be broken so fast!

Kinda reminds me of the signal language typing, used computer vision for that.

A head hanging Morse code version would be interesting as well. Or perhaps a mobile phone accelerometer Morse code would be fun too.
Is this just a massive mistake or is it deliberate and cover for something else
Industry should move to Linux on desktop - we should not rely on single vendor
I think my company has more than 300k+ machines down right now :)

SLAs will be breached anyway
https://www.dailymail.co.uk/news/article-13650411/Microsoft-...
Required for crowdstrike to do what crowdstrike does. Which is mostly useless security theatre.
Thanks for the link! However, I will not touch the Google programming language.
my reply to that, were asked of me, "no such thing"
The biggest mistake is not ringfencing this update in a test environment before sign-off for general deployment.
Software doesn't have uptime guarantees. They might have time-to-fix on critical issues, though.

I assume this is gross negligence, which would leave them open to claims made through courts, though.
Costco starts to sell 'apocalypse bucket' with food that lasts 25 years
It is one of the best systems available for realtime protection of windows systems against various threat actors. Prior to today you could probably have said 'no one gets fired for recommending Crowdstrike as the security tool for the company.' It is everywhere and in particular if you are a large org with a lot of Windows seats you are likely a Crowdstrike customer.
> And since we're all obsessed about money

Would ads on a service like this even pay the $5/mo VPS bill? Serious question.
Y2K came 24+ years late!
This is good and bad. This showcases the importance of CrowdStrike. This is a short term blip but in the long run they will learn from this and prevent this type of an issue in the future. On the flip side, they have a huge target on their back for the U.S. government to try and control them. They are also a huge target for malicious actors since they can clearly see that CS is part of critical US and western infra. Taking them down can cripple essential services.

On a related note, this also demonstrates the danger of centralized cloud services. I wish there were more players in this space and the governments would try their very best to prevent consolidation in this space. Alternatively, I really wish the CS did not have this centralized architecture that allows for such failure modes. Software industry should learn from great & age old engineering design principles. For example, a large ships have watertight doors that prevent compartments from flooding in case of a breach. It appears that CS didn't think the current scenario was not possible therefore didn't invest in anything meaningful to prevent this nightmare scenario.
I'm not particularly experienced, but I did have good experiences with picovoice's services. It's a business specialised in programmatically available audio, tts, vad services etc.

They have a VAD that is trained on a 10 second clip of -your- voice, and it is then only activated by -your- voice. It works quite well in my experience, although it does add a little bit of additional latency before it starts detecting your voice (which is reasonably easy to overcome by keeping a 1s buffer of voice ready at all times. If the vad is active, just add the past 100-200ms of the buffer to the recorded audio. Works perfectly fine. It's just that the UI showing "voice detected" or "voice not detected" might lag behind 100-200ms)

Source: I worked on a VAD + whisper + LLM demo project this year and ran into some VAD issues myself too.
Global Microsoft system failure impacts flights from Amsterdam
High time to stop using Microsoft Windows/Azure which is full of security tech debt, that you need all these tools which themselves brick the computer
Sounds like a good time to buy Red Hat stock
Funny how I got rejected today from crowdstrike because I couldn’t code a hard leetcode problem under 40mins. I guess leetcode isn’t true software engineering after all.
Major IT outage across Australia brings down businesses
When will people learn?

1. Stop putting mission critical systems on Windows, it's not the reliable OS it once was since MS has cut off most of its QA

2. AV solutions are unnecessary if you properly harden your system, AV was needed pre-Vista because Windows was literally running everything as Administrator. AV was never a necessity on UNIX, whatever MS bundles in is usually enough

3. Do not install third party software that runs in kernel mode. This is just a recipe for disaster, no matter how much auditing is done beforehand by the OEM. Linux has taught multiple times that drivers should be developed and included with the OS. Shipping random binaries that rely on a stable ABI may work for printers, not for mission critical software.
Not so much in disguise.

CS has official RCE root/admin access on all the clients. Which skips any normal auth of the OS. Yes, on all windows, mac and linux.
Can anyone share which version is impacted crowdstrike?
Surely i'ts not normal practice to allow patches to be rolled out without a staging/testing area on an estate of that size?
And 12 years before the Unix epoch!
Took down our entire emergency department as we were treating a heart attack. 911 down for our state too. Nowhere for people to be diverted to because the other nearby hospitals are down. Hard to imagine how many millions of not billions of dollars this one bad update caused.
I’m really confused about the line of questioning here. Do you think it’s more likely that the submitter has purposely put a random number at the start, or that they’re telling the truth and there’s something that you’re not seeing?
use windows recovery to boot into safe mode and update latest crowdstrike. That is the only option at this time.
Major US carriers ground flights citing communication issues
> Some kind of things are just not the things that HTTPS is meant to do and therefore does not do very well.

I'm not sure I see what those are anymore. With http2 we got multiplexing with different priorities on streams, with http3/quic we got connection migration. I don't see many usecases where SSH has clear win anymore.

> although I think some older versions of TLS do not have virtual hosting

Virtual hosts came to TLS with SNI, added in 2003. It took a while for it to be reliable though, mainly since IE6 was slow to die.

Virtual hosting with SSH would be very useful for me since I want to run both a git SSH server (in my case gitea) and my normal SSH server as two different services, isolated from each other.
I'm afraid I will love Hawaii itself too much if I go there to visit. :)
Can you give examples for what you changed?
Related live HN discussion Windows Bluescreen and Boot Loops (update: caused by a Crowdstrike update) (372 points, 2 hours ago) https://news.ycombinator.com/item?id=41002195
Might be dwarf Cavendish which is what they grow on the Canary Islands in Spain. It's abut 1/2 the size of the full Cavendish and to me taste slightly better.
I just skimmed through the news. A lot of airports, hospitals, and even governments are down! It's ironic how people are putting their eggs in one basket, trying to avoid downtime caused by malware by relying on a company that put their system down. A lot of lessons will be learned after this for sure.
Maybe because Windows Defender Advanced Threat Protection is an enormous resource hog that scans every byte of memory and storage accessed by the Hypervisor and performs a quadratic time computation on the data? I am just guessing because my “fastest” Windows laptop CPU money could buy feels like a hot smelting furnace and a sloth at the same time when I use VMWare Workstation. What the &$@* is it scanning the VMWare guests for?
Doesn't that get backed up automatically to the Microsoft account?
I don’t know Windows systems. I’ve read it’s causing Blue Screen of Death.

I take that to mean that systems can’t even boot. Right?

Can this be fixed over the air?
> Unripe bananas contain mostly starch, which makes up 70–80% of their dry weight. Much of that starch is resistant starch, which is not digested in the small intestine. For that reason, it's often classified as dietary fiber. However, bananas lose their starch as they ripen.

https://www.healthline.com/nutrition/green-bananas-good-or-b...
I’m Amazed at that. I had no idea the US had caught up and had electronic payments.
None of this advice is useful for massive organizations like banks and hospitals who got hit by this. They cannot switch off of windows for a number of reasons.
lol am i glad that i never have such a system as that on my pc directely .

i dont use cloudstrike i know how stupid bluescreen caused by security systems are .

i use a firewall in a different and security in a different way nowadays due to blue screen problems of older firewalls/virus programs .

if in ur home u have more then one pc/tablet/laptop etc , use a small pc(for pro,s just use a server pc) as ur main Firewall carrier , and let urself or someone else with the knowledge instal that pc and make sure its connected to only ur own devices it can scan ur pcs internet traffic via ur own local network , on ur own laptoptablet , usea simpler virus scanner just in case ur not at home to scan when on vacation etc(just free one) then its better , cause if the pc carrying the firewall crashes non pc in the network is actually affected by it , only security is down , and btw Windows software is not really good in seeying such a firewall system
Go's first class support for typed return tuples and Interfaces is a lovely replacement for inheritance (E.G. an Interface of type blah supports this signature). They function as an API contract, if a given class implements the requirements of the Interface, it can be cast to and used as that anywhere which accepts that interface.
At least they'd take cash if the computer wasn't broken. That's getting quite rare in the UK.