skysight-inc/HackerNews huggingface dataset:
You can't have vote kicks/server admins/hosted servers with competitive ranked ladders. If your solution is "don't have competitive ranked ladders" then you are just telling the majority of people who even care about anti-cheat to just not play their preferred game mode.
No. If an EDR relies on userland mechanisms to monitor, these userland mechanisms can easily be removed by the malicious process too.
That sort of already exists - I believe a small number of games demand that you have Secure Boot enabled, meaning you should only have a Microsoft-approved kernel and drivers running. And then the anticheat is itself probably kernel level, so can see anything in userspace

It may still be possible to get round this by using your own machine owner key or using PreLoader/shim [1] to sign a hacked Windows kernel

[1] https://wiki.archlinux.org/title/Unified_Extensible_Firmware...
>This does not happen in developed countries

Yeah it does.

>and in situations where biased hiring is found, you have a slam dunk corruption case.

Except when you don't because that's what corruption does. Should I start listing every major German and Austrian corruption scandal where nobody got punished off the top of my head?

>From the Romanian government press release I linked - The total monthly average income) was, in nominal terms, 6634 lei per household and 2648 lei per person in quarter IV 2022.*

That's not at all what that document says. It explicitly and clearly says those numbers are for monthly wages with info gathered in a quarter. Are you using a LLM for this? Because you're wrong, I show you that you're wrong, yet keep doubling down on your mistakes. Check other sources too and you'll see.
I’m not blaming anyone for anything. I’m saying buildings were set on fire.

And yes we know that internet was shut by the government, but we had a day of burning overhead optical fiber that serves as the backbone for many peoples home internet connections.

My team of network engineers was brought in by some companies to try and reroute and stabilize the country’s infrastructure before the full shut down.

And when the internet is turned back on, there are the unlucky ones such as us who have to debug the remaining issues and asses the damage of a burnt central node that all ISPs connect through.
If you need visuals of the flatlining here it is: https://radar.cloudflare.com/traffic/bd
Russia Slams Google's 'Censorship' yet Deleting 5.6M VPN Links Is Just Fine
> Who wants to continue maintaining C++03 code bases without all the C++11/14/17/20 features? Who wants to continue using .NET Framework, when all the advances are made in .NET? Who wants to be stuck with libraries full of vulnerabilities and who accepts the risk?

With the exception that in this hypothetical world we'd get backported security updates (addressing that particular point), who'd want something like this would be the teams working on large codebases that:

- need to keep working in the future and still need to be maintained
- are too big or too time consuming to migrate to a newer tech stack (with breaking changes in the middle) with the available resources
- are complex in of themselves, where adding new features could be a detriment (e.g. different code styles, more things to think about etc.)

Realistically, that world probably doesn't exist and you'll be dragged kicking and screaming into the future, once your Spring version hits EOL (or worse yet, will work with unsupported old versions and watch the count of CVEs increase, hopefully very few will find themselves in this set of circumstances). Alternatively, you'll just go work somewhere else and it'll be someone else's problem, since there are plenty of places where you'll always try to keep things up to date as much as possible, so that the delta between any two versions of your dependencies will be manageable, as opposed to needing to do "the big rewrite" at some point.

That said, enterprises already often opt for long EOL Linux distros like RHEL and there is a lot of software out there that is stuck on JDK 8 (just a very visible example) with no clear path of what to do once it reaches EOL, so it's not like issues around updates don't exist. Then again, not a lot of people out there need to think about these things, because the total lifetime of any given product, project, their tenure in the org or even the company itself might not be long enough for those issues to become that apparent.
looks very promising! tried to setup real quick, had some problems. will try again soon. following!
Physicians were not smart. They had licensing and liability imposed on them after quacks killed too many people.

Civil engineers were not smart. They had licensing and liability imposed on them after bridges fell, dams burst, buildings collapsed, killing many people.

Software developers will not be smart either. They will cry about not wanting liability and make accusations of gatekeeping until something bad enough happens (Crowdstrike isn't it; not enough people died as a direct consequence) and licensing and liability is forced on developers.

And, to echo sentiments voiced by other replies, the anti-government hyperbole is more kooky than persuasive.
The intersection of ROI and human psychology!

1 lock: “looks safe, I buy”

2 locks: “wow really safe, I buy more”

50 locks: “I’m being lied to”
You’re sadly misinformed if you think training an LLM consists of dumping the unfiltered sewage straight from the web into a training run. Sure, it’s been done in early experiments but after you see the results you learn the value of data curation.
This is not even a valid executable.

Most likely is not loaded as a driver binary, but instead is some data file used by the CrowdStrike driver.
"Embrace the suck"

Learn to process the feeling of exhaustion as economically as possible. Meaning, re-frame exhaustion as a normal part of the journey. You really have to push through it, barring mental health concerns, to get stronger and more resilient. You will feel mental exhaustion many times in your life, and it's better to face it early, in less-consequential circumstances, than to try to learn to cope when life is actually bad.
Check out Mars Guy https://youtube.com/@marsguy?si=AFAci3mConZv1L5- Dr. Steve Ruff. Excellent videos from an expert, but one terrific thing is the use of common objects (like mars guy cutout) that gives you some better perspective on the images.
How do you keep an airline ticketing system offline? How would anybody book tickets without access to the databases?
What is CrowdStrike, and how did it cripple so many computers?
Can you provide a citation for this? Currently when I go looking for information on this your comment is the only result I can find that claims that this is possible for pre-trial jail terms.

I see lots of references to it for people who are cleared years later, which is awful, but I want to make sure we're not mixing horrible facts and horrible fictions.
Ideally protests should be peaceful.

When there's no consequences for bad authoritarian behavior, you get more of it. Your plea for law and order is (probably inadvertently) a plea for the ongoing dominance of the established order. If it's peaceful only because everyone is afraid or unable to resist, then what you have is a police state. And in authoritarian societies like that, peaceful protest doesn't make any postive difference whatsoever, while often making things noticeably worse for the protesters.

Even in places like the US/UK, nonviolent protests attract violent repression and call by some people for even more violent repression. Simply passively standing against the established order is treated by some as a license to commit violence upon the protesters.

You are right about Bangladesh having a lack of capital and the costs of rebuilding, but you're basically arguing that capital matters more than the people in society. I'm sure you would never advocate just killing off/stripping the rights of some % of the population to increase the average wealth, but that's exactly what authoritarian regimes do in practice. There's always a favored in-group (sometimes described as a 'selectorate', imbued with sufficient political power to prop up the incumbent regime in exchange for policy rewards) and a disfavored out-group (the wrong ethnicity, or the wrong idea-havers, or the wrong socioeconomic class) that gets saddled with the costs. The recipe for successful authoritarians is to strip wealth from the out-group(s) fast enough to keep the in-group happy but not so fast that the out-groups decide they have nothing to lose or that their loss rate is unacceptable, causing them to react violently against the authority structure and/or the in-group that benefits from it.

Capitalistic abundance through the satisfaction of demands by enterprise and markets is a nice idea, but it is in no way guaranteed. Very often the beneficial goods and services come with negative externalities (pollution, waste, second-order effects) that do not fall on the consumer beneficiaries. Capitalists and industrialists (who are often but not always the same) frequently avoid accounting for these; where they do acknowledge the problems, they promote changing consumer behavior to mitigate the problem, recycling being the most obvious example. Sometimes this is effective, often not. The problem is that you don't have to generate positive externalities to succeed in a capitalist system; you can have a zero- or even negative-sum strategy and still win in many situations, as long as you are good at divide-and-conquer and frustrating attempts by your detractors to coordinate against you politically/economically. This is why corporations spend so much money on lobbying lawmakers and regulators, and also why branding is such a huge industry, differentiating products as much as possible while downplaying the identity of producers to minimize the appearance of oligopoly.
No, again, the protocol between the site and the authenticator is unchanged.
It's much more like DRM that doesn't let 4K media play on systems that allow the user to do whatever they want, but in this case instead of the DRM preventing the user from copying someone else's copyrighted work, it's preventing the user from copying their own data.
The only significant, deleterious phenotype in il-11 KO mice is the inability to sustain pregnancy. So far it seems to have a very high safety profile.
Stopped by a gas station in rural Wisconsin leaving from MSP. Thank God we were on a full tank when we left, nothing was operational except the bathrooms (which is why we stopped).

I left thinking about how anti-anti-fragile our systems have become. Maybe we should force cash operations…
> They could have to be inconceivably large.

The opposite might also be true. Just having better, well curated data goes a long way. LAION worked for a long time because it's huge, but what if all the garbage images were filtered out and the annotations were better?

The early generations of image and video models used middling data because it was the only data. Since then, literally everyone with data has been working their butts off to get it cleaned up to make the next generation better.

Better data, more intricate models, and improvements to the underlying infrastructure could mean these sorts of "improvements" come mostly "for free".
pci-dss is not a government agency but it might as well be; it's a collusion between visa, mastercard, american express, discover, and jcb to prevent them from having different data security standards (and therefore being able to compete on security)
How do you feel about the GIL free option coming in Python 3.13?
This is not a chatbot and is in no way similar to what Google does.

It's opt-in, open source, runs on device, does not use your emails to train the model, and most important of all does not grant Proton access to your emails.

What part of that do you see as a privacy violation?
I am not an AI, but I am incredibly tempted to attempt this poem for giggles.
No, its just soooooo bad at security/stability that it gave birth to Crowdstrike. They very fact that Crowdstrike is so big and prevalent means is proof of the gapping hole in Windows security. Its given birth to a multibillion dollar industry!
java over golang lol. when golang has literally been version stable for over a decade now
The better analogy is a web server blocking a web client because, even though it's standards compliant, it does something with that data it receives that the server's owner doesn't like. For example, yt-dlp.
Valve does not have kernel level anticheat. Faceit does. Most high ranked players prefer to play on Faceit because of the amount of cheaters in normal CS2 matchmaking.
"We need to ship this by Friday. Just add a quick post-processing step, and we'll fix it next week properly" - how these things tend to happen.
Encoder in the T5 sense doesn't produce a fixed vector, it produces one encoded vector for every step of input and all of that is given to the decoder.

The only difference between encoder/decoder and decoder-only is masking:

In an encoder, none of the tokens are masked at any step, and are all visible in both directions to the encoder. Each output of the encoder can attend to any input of the encoder.

In the decoder, the tokens are masked causally - each N+1 token can only attend to the previous N tokens.
No the file is not a driver. It's a file loaded by a driver, some sort of threat/virus definition file I think?

And yes Windows drivers are signed. If it had been a driver it would just have failed to load. Nowadays they must be signed by Microsoft, see https://learn.microsoft.com/en-us/windows-hardware/drivers/d...
Watch the sparrow falling
Gives new meaning to it all
If not today nor yet tomorrow
Then some other day
That stopped being a solution when winning online started mattering. There are real money prizes for online game tournaments. Weekly events can have hundreds of dollars in their prize pools. Big events can have thousands.

Suddenly vote kicking had to go, because it was abused. Not in the tournaments themselves, but in open ranked play which serves as qualifiers. An active game can rack up thousands of hours of gameplay per day, far beyond the ability of competent admins to validate. Especially because cheating is often subtle. An expert can spend more than real time looking for subtle patterns that automated tools haven't been built to detect.

Games aren't between you and your 25 buddies for bragging rights anymore. They're between you and 50k other active players for cash prizes. The world has changed. Anti-cheat technology followed that change.
DDoS is probably not a great example to lead with because odds are your Python application will hang quicker than the hosts network stack.

But that aside, the addons idea is an interesting one.
The ClownStrike Falcon software that runs on both Linux and macOS was incredibly flaky and a constant source of kernel problems at my previous work place. We had to push back on it regardless of the security team's (strongly stated) wishes, just to keep some of the more critical servers functional.

Pretty sure "competence" wasn't part of the job description of the ClownStrike developers, at least for those pieces. :( :( :(
Related talk by Alan Kay:
https://youtu.be/D43PlUr1x_E
MRI read outs are 3d, so can't be printed for analysis. They are gigabytes in size, and the units are usually in a different part of the building. So you could sneakernet cds every time an MRI is done, then sneakernet the results back. Or you could batch it and then analysis is done slowly and all at once. OR you could connect it to a central server and results/analysis can be available instantly.

Smarter people than us have already thought through this and the cost-benefit analysis said "connect it to a server"
Agreed but have you been in the industry lately? Nobody hires assembly programmers anymore. Want money you must work at wobbly top of abstraction mountain.
Ah, there was no standard so they defined a new one. Classic https://xkcd.com/927/
I’ve seen the 38,000 figure reported for the last two months or so. Did they stop counting or did something else change?
Poppycock.

The credential is not only the user's data. The credential is an agreement for access between the user and the service provider.

The service provider has every right in the world to demand the user prove that they are securely storing the credential in a way that can't be extracted.
Fresno is in earthquake country, so they don't really build them here. However, it looks like this place has held up just fine over the years.
Yes, Crowdstrike specifically disabled Linux systems in the past: https://news.ycombinator.com/item?id=41005936
Steve Ballmer did not write the text for the blue screen of death (2014)
Almost everything that goes wrong in the world is avoidable one way or the other. Simply stating "it was avoidable" as an axiom is simplistic to the point of silliness.

Lots of very smart people have been hard at work to prevent airplanes from crashing for many decades now, and planes still crash for all sorts of reasons, usually considered "avoidable" in hindsight.

Nothing is "bulletproof"; this is a meaningless buzzword with no content. The world is too complex for this.
Yes but you can use an llm to label data and then train a bert model which then costs a small fraction of time and money to run than the original llm.
Call it Ring 0, 1, 2... for good measure
It's interesting to me that lay people are asking the right questions, but many in the industry, such as the parent here, seem to just accept the status quo. If you want to be part of the solution, you have to admit there is a problem.
https://youtu.be/ZXsQAXx_ao0?si=A5Ooe2JR6doo1mLp

"Just do it"
Protip: You can use GSMarena's Phone Finder to find phones with specific features. For example here are phones from 2024 with a headphone jack, SD card slot, FM radio, infrared port and 5G:

https://www.gsmarena.com/results.php3?nYearMin=2024&chk35mm=...

(you can click REFINE to change the options)
"Bangladesh imposes a near total internet shutdown to stifle coverage and online engagement with police killings at student protest"

Calling things what they are instead of tortuously passive and neutral descriptions should be standard. The headline sounds like it's describing two separate things that just coincidentally happen to be occurring at the same time.
Here's Alexander Graham Bell, 1885: https://www.youtube.com/watch?v=qTpWD28Vcq0
The most competent and trustworthy developers and admins I know have impressive home labs and portfolios of contributions to libre software.

The most incompetent and untrustworthy developers and admins have resumes full of certifications.

Any professional certification you create will be a target for "gaming" by people who view it as a ticket to a sweet gig.

Trust in "professionals" has almost totally collapsed in the U.S. anyway. Doctors and lawyers no longer have the trust of the public. I don't see how professional societies and ethics review boards have helped them be more trusted by the average citizen.
> How do they differentiate content written by a person v/s written by LLM

Honestly, not sure how to test it, but this is B2B contracts, so hopefully there's some quality control. It's part of the broad "training data labeling" business, so presumably the industry has some terms in contracts.

ScaleAI, Appen are big providers that have worked with OpenAI, Google, etc.

https://openai.com/index/openai-partners-with-scale-to-provi...
Are you suggesting that llms can predict the future in order to address the lack of current event data in their training set? Or is it just implicit in your answer that only the past matters?
Oh man. Want to know an LLM's limits? Try discussing a new language feature you want to build for an established language. Even more fun is trying to discuss a language feature that doesn't exist yet, even after you provide relevant documentation and examples. It cannot do it. It gets stuck in a rut because the "right" answer is no longer statistically significant. It will get stuck in a local min/max that it cannot easily escape from.
Never heard mainframe going down
Source: bro trust me
I've seen it at least ~10ish times in my pretty short career. I think you're maybe imagining someone building, like, "Linux from scratch". Novel solutions don't have to be that big; they just have to be novel.

Someone I worked with once went off on their own and implemented a test framework that solved a lot of the problems we've been having. They could have just written tests the normal way; they did it a different way; it was great. Someone else made a debugging tool that hooked into Python's introspection abilities and made flame graphs of the stack traces. Not exactly groundbreaking science but it was entirely "innovative" in the sense that no one expected or wanted that tool, yet it solved a real issue. Someone else made a JS library that abstracted out the problem of organizing these dynamic workflows on an internal-facing took. Small, but novel, and it organized the ideas in a way that made it possible to build on the abstractions later. For my part we had this chunk of business logic that was a pain to debug and I had the thought to factor it out into a standalone library that was completely testable at the interface. Not groundbreaking, but no one had thought to do it and it obsoleted the issues from before immediately. Etc.

If your job is anything more complicated than "feature implementation", there are chances for innovation left and right, and good engineers see and pursue them.
Agree with all that.

Prison removes people from society. That should be the only time it is needed -- when someone can't be reintegrated. And then in that case, we need to try to understand why we've made that decision. Is it a mental problem? If so, they're not to blame and should be housed at a non-punitive facility that can (maybe) make them well enough to be free.

Also agree that we need to rethink criminal records in a major way, although the Internet is the arbiter of your background now. It doesn't matter if we sealed something up legally when it is already out there. "It's like trying to take the piss out of a swimming pool."
> The OS doesn't matter, the question should be why is critical infrastructure online and allowed to receive OTA updates from third parties.

Not exactly. I think the question is why is critical infrastructure getting OTA updates from third parties automatically deployed directly to PROD without any testing.

These updates need to go to a staging environment first, get vetted, and only then go to PROD. Another upside of that it won't go to PROD everywhere all at once, resulting in such a worldwide shitshow.
> The service provider has every right in the world to demand the user prove that they are securely storing the credential in a way that can't be extracted.

Wait, really? Does this work both ways? Do I get to demand that the service provider store the data it collects about me in a way that can't be extracted? Oh, apparently not[1]...

[1] https://www.technologyreview.com/2023/07/17/1076365/how-tech...
Is it wrong to expect an apology?
(Trying not to be rhetoric, but instead know more expert opinions)
> why the fuck is our critical infrastructure running on WINDOWS

Because it’s cheaper.

I feel like many in this thread are obsessing over the choice of OS when the actual core question is why, given the insane money we spend on healthcare, are all healthcare systems shitty and underinvested?

A sensible, well constructed system would have fallbacks, no matter if the OS of choice is Windows or Linux.