skysight-inc/HackerNews huggingface dataset:
Figured out that I had an account there so I went to the site to see if I can log in (I also noticed that my local spare mail box has catch all incoming notifications from photobucket as spam...). I had to change password but once I did, a modal regarding this biometric policy showed up with two options. Either you agree on terms and proceed with login process or you refuse. Which in return gives you at least 3 pages (including an tempting offer for 1TB their cloud storage) where you have to really convince them that you do want to delete your account, which takes up to 30 days anyway...
I ended up skimming this as it's very verbose. I was surprised in the discussion of confounding variables to see no discussion of whether the participants are just accurately describing reality.

If you asked Elon Musk to tell you his life story he'd tell you about what he's done. If you ask a warehouse worker their life story they might tell you about things people told them to do. But that's a lagging and pretty boring indicator.
that's great. now put more power into that, and less into empty rhetoric. it's not useful. it doesn't bring forth this "goodness" you speak of.
I am a British immigrant in Germany and I can vouch for how impossible it is to integrate into these northern European societies, if the rest are anything like Germany. I tick all the boxes of what German boomers would want in a "Good Immigrant" (white, educated, from western Europe, speaks German, good job), but it doesn't help.

I think overall Germans, deep down, don't really want us here. We are here to pay for the pension bill—that's literally it. But since we are here, they want us to completely assimilate and give up everything about yourself that came from our homelands. There is no respect nor appreciation for any external culture, so your "differences" have negative value, because you have to Be German.

I dated a third generation Turkish German for 2 years whilst I lived here and she faced fairly casual racism from white Germans with a regularity that would be unthinkable in the UK. She was often getting complimented on how good her German (it's her mother tongue) was or asked about what country she came from (she was born and raised in Germany). It's a racist country. Don't believe the PR about how liberal Germany is—it's liberal if you're white and German.

And I say all this as a white Western European. It's going to be so much harder for the average Syrian or Afghan.
This reminds me of how the head of Riot Vanguard basically just amounts to snitching in Discord servers/forums of paid cheats for info rather than actual technical mitigation.

[1] info about Vanguard: https://news.ycombinator.com/item?id=40242692
I believe Apollo had a proprietary OS with limited Unix compatibility. So maybe the grandparent poster is right about the Model 16 being the only other non-Sun desktop Unix for a while, as long as you define Unix tightly enough.
I've been maintaining my own script that does something like this. A few things I've found to be useful: It can also pull in context from git history (prioritize based on which files have been most recently worked on, include recent git commit messages which can help the LLM know more about what's going on), and optionally it can go do multiple stages... for long files, first summarizing them, then including the summary in the final prompt.
> I've never seen malware that infected millions of devices in seconds and made them unusable for days and maybe weeks to come.

Yes, well, that's because we have built much more resilient systems, of which anti-virus is a substantial part of. You could start with the Morris worm, but a more recent example would be the Stuxnet cleanup efforts (largely done with AV).

AV is (thankfully) becoming less and less relevant, but it's still a valid layer of defense for many platforms.
Story points are used to plan a sprint. They are a honest estimate of how much work and how difficult a task is going to be. If they are used by management, then it turns into a tool to excerpt undue pressure on the team.

> The team isn't judged externally by the story points they burn

Are you really sure about that? Never got a question from the customer why the team couldn't finish as many story points as in the last sprint? Or why during sprint planning the team hasn't committed to a given amount of story points?

There is indeed a learning process. Once the above questions get asked, it is not difficult to see why a team would start to inflate story points.

> The team itself should be the sole consumers of their own story points, so inflating them accomplishes nothing from their perspective.

As indicated by the comment I was replying to, this is not the world we live in.
> LaTeX' modularity is its greatest power and its Achilles heel

I'd say not quite, it's more the way that the entire system is built on shaky grounds, namely an insane operational model, an insane syntax, the lack of separation of concerns and the lack of namespaces. TeX could have been built on top of a predictable syntax, a transparent operational model, with a separation of styling and content and giving modules segregated namespaces, but none of that happened. When Leslie Lamport wrote LaTeX he tried to inch closer to these and other desiderata; when I built a system on top of XeLaTeX that started with a Markdown-ish/HTML-ish input syntax and compiled a XeLaTeX source text I certainly hoped I could achieve some kind of operational sanity and shield me from many of the dirty details, but in the end I gave up.

Edit Ah and to address your point I believe it's not modularity per se it's just that TeX is at its very heart an environment that is actively hostile to being clean and modular, it acts like it wants very much to be a wibbly-wobbly ball of stuff.
> Maybe the biggest hurdle for everyone except Starlink (with their standardized design) is spacecraft design and engineering, not cost to orbit?

Maybe the biggest hurdle is that having stuff in orbit has quite limited applications. Starlink is the first semi-reasonable idea that can utilize this much mass in orbit.
Explain exactly how any AV prevents a user from checking e-mails and opening word?

The years I spent doing IT at that level, every time, every single time I got a request for admin privileges to be granted to a user or for software to be installed on an endpoint we already had a solution in place for exactly what the user wanted, installed and tested on their workstation that was taught in onboarding and they simply "forgot".

Just like the users I had to reset their passwords for every monday because they forgot their passwords. It's an irritation but that doesn't mean they didn't do their job well. They met all performance expectations, they just needed to be handheld with technology .

The real world isn't black and white and this isn't Reddit.
More a reformulation of Clark's third law:

https://en.wikipedia.org/wiki/Clarke%27s_three_laws
too lazy to read photos of hand written notes. my loss, I know.
>I think Sweden does a decent job integrating those migrants who arrive with sufficient skills for the job market. It's the rest that are problematic, and they would probably do better in the US with its lack of welfare state.

Tbh I doubt it. If it's anything like German society, which is incredibly insular, just being non-German is enough to make you unwelcome.
Xiaomi SU7 Ultra Prototype: Born for the track and fight for speed [video]
We can see clearly now that this is a stupid approach. Viruses don't move that fast.

This situation is akin to the immune system overreacting and melting the patient in response to a papercut. This sometimes happens, but it's considered a serious medical condition, and I believe the treatment is to nuke someone's immune system entirely with hard radiation, and reinstall a less aggressive copy. Take from that analogy what you want.
> I've been called "cold" in professional settings.

Talking a lot and saying nothing will make you insufferable. Better cold than insufferable.

You could learn to say some simple “grease the wheel” type of expressions. But that is going to cone across as feigned.

People prefer genuine, so perhaps you could just try and be polite and turn the cold into warm.
I dunno. I usually read HN comments before the article, so I know what to look out for when reading it. But that's not the tone I'm getting here.

>So I called his mom and said, ‘Listen, I wanted to tell you some things that Andrew is doing on the computer.’ She says, ‘So you’re saying he hacked your game.’ And I hear in the background: ‘I didn’t hack anything!’ I start describing it more technically. She says, ‘Is this a problem?’ I say, ‘Hacking software, that’s a federal crime, but I don’t want that to be the conversation. Why don’t we make it a conversation about the good and bad things he can do with a computer?’

>The kid was live-tweeting it. The tweets were this:

>1.Pokémon just called my house.
>2.What the hell is a general counsel?
>3.I now know what I did was wrong, and I’ll never do it again.

>Which was fantastic. Absolutely baked my legend in at Pokémon for like five years.

Yeah, the DMCA is bullshittery, but it's a legal weapon that the GC is expect to wield for his company.

He did his job, in a way that had no legal consequences for the kid, and still got the result his company needed.

That seems like the correct way of handling it. Is it ideal from a societal perspective? No, the DMCA should be gutted. But from a practical perspective, this was a win all around.

And the kid was hopefully pushed away from trouble, at least until they were old enough to cover their tracks better.
Really cool. I always used the Chrome OS one [1] so far. I think yours could use manpage/documentation links from the syscall table too.

[1]: https://www.chromium.org/chromium-os/developer-library/refer...
Should Have Used Ada (SHUA) #1 – Goto Fail
Agreed. But, QBASIC is even better.
No need for numbered lines, no need for a book, the basic help documentation covers all you need to know to learn as a 8 yo kid.
> The customer should decide when to update, they own the fleet not the vendor!

The CS customer has decided to update whenever 24/7 CS says. The alternative is to arrive on Monday morning to an infected fleet.
How much are you getting charged each month for Amplify?
Show HN: Aurora – Problem solving focused statistical and ML software toolkit
> Either of these failures is inexcusable in a professional product

Don’t we have those kind of failures in almost every professional product? I’ve been working in the industry for over a decade and in every single company we had those bugs. The only difference was that none of those companies were developing kernel modules or whatever. Simple saas. And no, none of the bugs were outsourced (the companies I worked for hired only locals and people in the range of +- 2h time zone)
What are they in on? The fact that bad actors are constantly targeting government infrastructure and that this kind of antimalware is a key part of the tools for defending against it?
I think we're saying very much the same thing. Welfare to immigrants in Europe has become a tool to compensate for other elements which make finding work or gaining advancement difficult; so it is a subsidy meant to protect "native" jobs by isolating the foreign labor force. It serves a double purpose to prevent the integration of new arrivals. Worst of all, it attracts people who think they don't need to work. All of these things can be true at the same time.
Is the exportable UI kit contain design or code?

Can I take landing page site design for my product?
“Enactivism” really? I wonder if these complaints will continue as LLMs see wider adoption, the old first they ignore you, then they ridicule you, then they fight you… trope that is halfways accurate. Any field that focuses on building theories on top of theories is in for a bad time.

https://en.m.wikipedia.org/wiki/Enactivism
> You do not deploy anything, ever on your entire production fleet at the same time

And if an attacker does??
China and Russia could hobble the internet
There are indeed many cases where errors need to be recovered from and the subject of one angle in secure rust code training was quite literally "don't just panic, don't blindly unwrap or leave errors unhandled because that'll kill your thread/process on failure, you should still code for failure cases". If you do, you are coding denial of service bugs.

But, in the incident in question, the code is fundamentally not correct. Spatial memory safety violations, or in plain English "trying to call functions or use data that isn't at addresses your code or data lives at" fundamentally is an error. There's a missing part of the state machine to detect and stop before just exploding. In userspace this is a segfault and your process dies. In kernel, you get a bugcheck and the whole system reboots.

There are scary alternatives. The first, in kernel, is that you suppress all invalid writes and allow the errant code to keep writing, until it hits some other data. The system stays up, but you have out of control data writes so who knows what that's doing.

The second is that the execution flow of the process can be hijacked, i.e. Sergey Bratus' weird machines, or in plainer language, owning kernels in critical infrastructure. This is usually undesirable.
> Agree but if I have to bet on one or the other I'm not putting my money on the Twitter user.

Twitter has millions of users. Some of them are actually trustworthy sources, moreso than conflicted profit-seeking media outlets. In particular, a lot of them are subject matter experts in a particular field, instead of generalists trying to summarize something they don't really understand or put a partisan spin on it.

There are also more than enough less trustworthy sources. But you shouldn't feel inclined to follow the nincompoops.
There is absolutely no excuse for the communication strategy of crowdstrike.

The only information they give out is "we were not hacked, we know what the priblem is but we won't tell you"
Why not tell us the current state of the investigation?
They obviously didn't have a good ci/cd process for deploying changes to channel files and they should at the very least describe the release process, as far as they know how it, for channel updates are tested before release (if at all).
It's not the case in Germany, to get into a management role you generally need to be German. Also, the housing market is completely broken with all the good stock in the hands of white German boomers on old rental contracts paying a 1/3 what immigrants pay.

Germany is not a land of opportunity, it is a land of relative comfort, with laws and regulations in place to protect the lives of German boomers. Immigrants will never go far in Germany, but they will be relatively comfortable.
The stock market only had a day to react and they were also heavily affected by the issue. Let's see where the stock price goes in the following week.
But why does a signature database update have to mess with the kernel in any kind of way? Shouldn't such a database stay in the user land?
x64 clobbers rcx and r11, I don't see that mentioned in the calling convention. I'm not confident whether the other architectures have additional clobbers.
In that the knowledge is locked up in secret societies?
It just occurred to me that a crab would be much easier to keep upright (due to six legs, no need for fancy leg AI) and also much more on theme.

They had the dog already working, though.
Maybe there isn't a switch that says "content version",but from end user perspective it is a new version. Whether it was a content change, or just a fix for typo in documentation (say) the change being pushed is different than what currently exists.And for the end user the configuration implies that they have a chance to decide whether to accept any new change being pushed or not.
It's worth experimenting with. Some things won't work at all, others will break in Fun And Interesting Ways. Some things will get much slicker though because they suddenly don't have network I/O anywhere near the UI, or because ads aren't sucking CPU any more. It's worth at least understanding where your common workflows are on that spectrum.
Many of those dialers were programs that offered access to porn. Had a friend that used one extensively for a month, until his parents received a fat invoice from the phone company!
Thank you very much :). I am using static analysis of kernel images (vmlinux ELF) that are built with debug information. Each table you see was extracted from a kernel built by my tool, Systrack, that can configure and build kernels that have all the syscalls available. The code is heavily commented and available on GitHub if you are interested: https://github.com/mebeim/systrack

I realized soon in the process that simply looking at kernel sources was not enough to extract everything accurately, specially definition locations. I also wanted this to be a tool to extract syscalls actually implemented from a given kernel image, so that's what it does.

Your approach should be fine, that is what any other language does basically: rely on uapi headers provided by the kernel (just beware that some may be generated at build time inside e.g. include/asm/generated/xxx). You should rely on the headers that are exported when you do `make headers_install`. Also, make sure to have a generic syscall() function that takes an arbitrary syscall number and an arbitrary amount of args to make raw syscalls for the weird ones you don't easily find in uapi headers and you should be good. After all, even in the C library headers some of the "weird" syscalls aren't present sometimes.
Excellent! I think your "faster%" is calculated in a way that understates the speedup. In the last row, the document is processed in a bit less than half the time, so the speedup should be a bit more than 100%.
And some pedestrians are maniacs, but most of the time only are a danger to themselves. OTOH I have crashed into a lamppost from a pedestrian suddenly stepping into a bike lane from behind a utilities box.

I think we should assume that stupidity is evenly distributed and mode of transport doesn't affect it much, just the results.
Interestingly various European nations turn out to be a poor comparison group for the United States. No one has conclusively determined why yet, but we know there's a strong correlation between a country having English as the primary language and immigrants integrating well.

This is especially true for second-generation immigrants. First generation immigrants are general less likely to commit crimes, but in countries like Germany and France the rate rises significantly with the second generation. That doesn't happen in the US or Canada, for example.

The children of immigrants in English speaking countries tend to do better financially than their parents whereas in many non-english speaking European countries the children of immigrants slide into poverty.

Edit: Here's a related article with some charts illustrating the correlation https://www.ft.com/content/c6bb7307-484c-4076-a0f3-fc2aeb0b6...
Malice and bad programming are interchangeable in most contexts, one day our industry will learn this but not until a few more CrowdStrikes and a few less Js frameworks, runtimes and crapwares.
Would love to hear more about that. Do you have an article?
It just occurred to me that he doesn't think what he did was wrong, it sounds even like he received professional praise for it.. and thats probably because they all viewed it as a light touch. This was probably seen as easier (maybe even kinder) than the legal threats they would have otherwise started with or moved to.
Again, Microsoft doesn't control modules people choose to use and can't assume anything about how they work, much less disable them without operator approval.

Imagine if malware could somehow crash this module - would you be happy about the OS automatically rolling bank introduction of said module, opening your system to vulnerabilities?
FlatGeobuf – every census block in the USA
Realised FlatGeobuf [0] (no connection except a tiny PR once) has never been posted as a link before. FlatGeobuf is perfect for things like the car crash map that was posted a few days ago [1].

[0] https://github.com/flatgeobuf/flatgeobuf

[1] https://news.ycombinator.com/item?id=41012443
Why stop at the country level? We could just as easily have ethnic and cultural homogeneity on a global level. We'd have much lower crime and higher employment if all culture world-wide were homogenous. No ghettoized countries and such. /s
The Ethics of Avasarala (2021)
I come across them every so often! Usually stuff that just hasn’t been replaced yet because “it works fine” like most other legacy kit :)
founder here who used to feel like this, i would say as few words as possible as a defense against being misunderstood. And i still do that as a founder because when it comes to dealing with investors or customers or employees, high bandwidth communication is a superpower. we’re all distracted, nobody is paying attention! so the message has to be super clear to be effective.

here, i suspect the actual issue “coldness” is lack of soft skills and empathy which is orthogonal to efficiency and effectiveness. Politicians and managers understand their audience very well as well as their psychology. There are hundreds of self help books about communication, try walking into an irl book store and browsing the self help section. Fastest path from zero to one might be a therapist (they do zoom now).
I know, I was being slightly sarcastic. But on a serious note there’s nothing about the registration info for x.com that indicates that it is owned by twitter.
I didn’t want to Google it for you because it always makes me sad but things like spina bifida and moebius syndrome exist. Not everyone gets to begin life healthy.
I have a different take on this.

I feel having the solution open sourced isn't bad from a code security standpoint, but rathee that it is simply not economically viable. To my knowledge most of the major open source technologies are currently funded by FAANG and purely because it's needed by them to conduct business and the moment it becomes inconvenient for them to support it they fork it or develop their own, see Terraform/Redis...

I also cannot get behind a government funding model purely because it will simply become a design by committee nightmare because this isn't flashy tech. Just see how many private companies have beaten NASA to market in a pretty well funded and very flashy industry. The very government you want to fund these solutions are currently running on private companies infrastructure for all their IT needs.

Yes opensouring is definitely amazing and if executed well will be better, just like communism.
Yeah, this logic is absolutely deranged and 100% stems from a hate of forced AV on work machines or something.

Pretty much every common modern-day security defensive is reactive, in that you can point to a point in time where we didn’t have it, and can pretty easily see the consequences of that.
Did you do something extreme, like discussing Donald Trump rather than hero worshipping him?
so we don't need to worry about microsoft and their shitty products anymore?