skysight-inc/HackerNews huggingface dataset:
I got so angry with Ryanair's website experience that I'm now routinely paying >100% premium with other airlines to avoid having to deal with it. Off the top of my head:

- They make it sound as if you _have_ to choose a seat (and pay for that choice), to avoid this you must find a tiny text link (not button) somewhere hidden on the page

- All the worst/most expensive options pre-selected for you

- Randomly changing the saliency of the options that give you choice between premium (additional fee) choices and free choices; so that you'll almost certainly accidentally include an add-on you didn't want

- Dynamic pricing that changes depending on whether you've seen the page before etc.

- Ridiculous baggage policies/completely opaque costs for additional luggage depending on where and when you decide to add it to your booking

- At the checkout page, the currency/payment UI is so broken that I regularly had to go into browser devtools and send requests by hand just so I could complete a booking. Also currency exchange scam.

- Clicking on "search" (or was it "book"?) automatically accepts their shitty terms and conditions for you even if you don't click on the checkbox, which is probably illegal

I'm sure there were much more.
You know that the parent commenter was joking right?
Or rather, go limp and demand to unionize!
The mobile ecosystem is what corporate IT should be. Centralized app store, siloed applications, immutable filesystem (other than the document part for each application), then VM and specials computers for activities like development. However locked iOS can be, most upgrades happen without an hitch, and no need for security software.
The cyber unit within IT is more likely, those ones are besotted with ticking compliance checkboxes, the delegation of responsibility and a game of musical chairs at any cost.

It is even more likely that IT was at loggerheads with cyber, but nowadays cyber seems to be able to trump everything and everyone.
Apple on the desktop/laptop, Google in the cloud for email, collaboration, file sharing, office suite. I ran a substantial sized company this way for a decade. Then we did a merger and had to migrate to Microsoft- massive step backwards, quintupling of IT problems and staff.
When using a struct, RustRover will offer to populate all the properties. VScode will auto complete them one at a time.

I've only used this a couple of times but if you paste a block of JSON into a file it will offer to create a new struct implementation from the JSON.

That's two things that come to mind
Put it this way.....

If they did implement such a charge, the aircraft would get very smelly.
Cinebench: AMD Ryzen AI 9 HX 370
Just hope there is no mutual recursion, i.e. recovery key A is stored on machine B, recovery key B is stored on machine A!
> Otherwise you'd be gouged on every route not served by Ryan Air, which is definitely not the case.

Are there many routes not served by one of Ryanair/Easyjet/Wizzair? (The other two are on the Ryanair model).

> But not by orders of magnitude.

Looks like in 1980 a flight from Dublin to London was about 150-200 Irish pounds. 150 pounds is 189 euro without inflation, but factoring in inflation, 150 Irish pounds in 1980 is 899 euro today (easy to forget how much inflation there was in the 80s). While the Crowdstrike thing is currently stopping me from checking prices, Ryanair to Gatwick is usually like 30-50 euro these days. So that's an order of magnitude, anyway.

And Dublin to London is probably close to a best-case; it's short, and it was always a relatively busy route served by multiple flag carriers. Many routes would have been single-carrier. If you wanted to fly, say, Dublin to Athens back then, well, you probably weren't doing it direct, for a start, and it'd cost you a small fortune.
Mosyle is doing their best to make Macs unusable.
This is an oversimplification. IF we are talking about compliance to ISO 27001 you are supposed to do your own risk assessment and implement necessary controls. The auditor will basically just check that you done the risk assessment, and that you have done the controls you said yourself you need to do.

I'd say this has nothing with regulatory compliance to do at all. The real truth is that modern organizations are way too attached to cloud solutions. And this runs across all parts of the organization with Saas and PaaS whether it's email (imagine Google Workspace having a major issue), AWS, Azure, Okta…

I've had the discussions so many times and the answer is always – the risks doesn't matter because the future is cloud and even talking about self hosting anything is naive and honestly we need to evaluate your competence for even suggesting it.

(Also the cloud would maybe not be this fragile if it wasn't for lock-in with different vendors. If you read the TOS it says basically on all cloud services that you are responsible for the backup – but getting your data out of the service is still pain in the ass – if possible at all)
For the same reasons there's antivirus software for Mac and Linux.

People coming from Microsoft systems just expect it to be required, so there's demand for it (demand != need). And in hybrid environments it may remove a weak link: e.g. a Linux mailserver that serves mail to Windows users best has virus detection for windows viruses.
This is a company whose entire business model is derived from hoarding vulnerabilities.

I'm guessing this was a brute force attack or side channel attack of some kind, in concert with a packaged zero-day.
> Because rich people are "net-productive" and poor people are "net-recipients"

Yes, in the context at hand this is obviously, objectively true. Poor folks earn little, "pay" negative income taxes, and are eligible for lavish (relative to their contributions) benefits, thus they pay less in taxes than they receive in benefits, making them net recipients from social programs. Some to the tune of tens of thousands of dollars per year. We used to call them leeches--we should probably start doing it again, frankly.

Meanwhile others pay large amounts of taxes without receiving any services beyond those which are forced on them by the state (which are generally a raw deal), making them massive net contributors.

It's not "wrong", it's the basic arithmetic that undergirds your beloved welfare state. Ignore it at your peril.
To be honest I didn't have a specific AI in mind, more the technique, but it sounds like these ones also use a variant of CFRM.
> Teams is a resource hog that serve no useful purpose. Skype was perfectly fine to send messages or have some video call.

I’m sorry, this is a very silly take. I’m no fan of Teams or Slack but I can’t deny the functionality they offer, which is far above and beyond what Skype does.

> I admit I don’t have experience as an IT administrator

Well, quite.
Many major companies have post-mortem reviews for this kind of thing. Most of the big failures we see is a mix of people being rushed, detection processes failing, a miscommunication/misunderstanding of the effects of a small change.

One analogy is rounding - one rounding makes no difference to a transaction, but multiple systems rounding the same direction can have a large scale impact. It's not always rounding money - it can be error handling. A stops at the error, B goes on, turns out they're not in sync.

Which guy is it? The person who pressed the button? The manager who gave that person more than one task that day? The people who didn't sufficiently test the detection process? The people who wrote the specs without sufficient understanding of the full impact? The person who decided to layoff the people who knew the impact three months ago?
Are alpine floatovoltaics the way Forward?
read again, then again, then wikipedia on "sarcasm", then read again

and reconsider
> Regular Linux distributions, macOS, and Windows make me very nervous because that is not the case.

I'm personally only really nervous when updating Linux distributions. Besides security updates it usually hardly matters or is noticeable on macOS/Windows (well besides the random UX changes..).
I am quite sure that they have had three precious timezone hours to detect a total failure of telemetry after their fateful midnight upgrade.

Like the most useful Canary Island in the Coal Mine.
This seems like the kernel module was faulty for some time. The update only changed the input data for the module.
What are Docker layers anyway?
Most corporations have no interest in paying the cost of running a multi-OS IT shop nor dealing with the challenges of fleet management with both Linux and Mac that make running those fleets more expensive and challenging.

That's before you factor in that almost everyone in IT is a born and bred in Windows and in almost every case people tend to choose what they know best.
I can confirm this. EDR checkbox for CrowdStrike, BitLocker enabled for local disk encryption checkbox. BitLocker backups to Entra because we know reality happens, no checkbox for that.
> Fines are not enough because a large enough fine will kill a company, destroying lots of jobs and supply chains.

That could be amazing: "Ooopsie, in punishing Crowdstrike they've ended up folding and now there's a second global outage."
Ask HN: Disability and Inconsistent Throughput Accommodations?
Hi everyone,

I'm on a team supporting multiple data-centric web apps. Requirements are not well documented and our test suite is basically to try creating the component and pass the test if it's truthy. This leads to a lot of ambiguity and encountering secondary existing issued when trying to fix the identified bug or implementing a new feature. Our dev/test environments also have many stability issues. Often I have multiple stories open in different code bases because I'm waiting on other teams to fix an issue with their API, or for the PO to provide clarity on a requirement like which data point we should be using. So there are tons of context switching and impediments. This affects others on the team too, but it seems to affect me more due to my disability.

I've been told that I'm on a trajectory for a negative rating and probably a PIP. Their main complaint is that my throughput is inconsistent - some sprints my stories might carry over due to facing multiple issues, but in others I can close 12-18 points of work when only minimally impeded. My average output for the year is equal to or greater than the other person on my team at the same level (and they said they're on track for a good rating). I'm also involved in more voluntary work than they are. Their secondary complaint is that I have "an inability to independently problem solve". There are larger issues that I need help with solving, especially when there is no documentation on that part of the system. But overall, I solve many more problems on my own that I need help with. It's just that there are a huge volume of problems and it seems the ones that slow down my work are the only ones they are counting. I'm only a midlevel dev, so I feel like the amount of help I require is reasonable for my level and disability and the structural/environmental issues on this team.

I've already requested accommodations like increased coaching and reduced context switching when possible or additional help dealing with the environmental issues when it's not. I'm not receiving either. They haven't denied them, but they haven't formally accepted them either. I'm keeping notes on all the feedback I'm getting, the stories I'm completing, what level of help I'm getting for each one, the issues I'm facing and overcoming, etc.

Has anyone been in a similar situation? Have you been able to request accommodations to help with complaints of inconsistent throughput? I'm not sure what to request because to me, if my average output for the year is average or higher, then I don't see how individual sprint performance should be grounds for firing, especially if I'm not getting the accommodations for my disability.
Agreed, but the tricks are still useful.

When there are no more tricks remaining, I think we must be pretty close to AGI.
Howard Goodall has a great analysis[0] of how classical music was dying in the 1950s and 1960s until The Beatles indirectly saved it. It had taken a shift to avant-garde and strongly experimental sounds until The Beatles' influence reminded composers that good composition following the fundamentals could produce great music. I'm not tuned in enough today to know if that still holds true, but it was an interesting analysis. He does a much better job of explaining it than I did.

[0]: https://www.youtube.com/watch?v=ZQS91wVdvYc
We did this at one place I used to work at. We had lots of Linux systems. We installed clamAV but kept the service disabled. The audit checkbox said “installed” and it fulfilled the checkbox…
It definitely does not run “just fine”. It’s passable at best.
Also, it does actually work on MacOS despite this. We’ve had it catch someone getting malware.
> and just as I thought, almost everyone disagrees

I'm glad to be on the other side of this, I agree with you and can totally relate with you.

I like to view artists as mediums that can channel and manifest art, but that art stands on its own. Bach just happened to be the one in our lifetime to do that with what he discovered. — The strongest evidence to me for this is that art can outlast the artist every single time.
[dupe] more discussion: https://news.ycombinator.com/item?id=41002195
Pretty sure there's an exception for drivers but requires at minimum notarisation from Apple, but more likely a review as well.
I’m convinced that one reason for this move by Apple was poor quality kernel extensions written by enterprise security companies. I had our enterprise virus/firewall program crash my Mac all the time. I eventually had to switch to a different computer (Linux) for that work.

It wasn’t Crowdstrike, but quality kernel level engineering isn’t was I think of when I think of security IT companies.

But, also credit Apple here. They’ve made it possible for these programs to still run and do their jobs without needing to run in kernel mode and be susceptible to crashes.
So the TLDR is that a beta version of Cellbrite unlocked the phone, and it can't yet unlock iOS 17.x or later.

But we don't know what version of Android his phone had, or what "newer Samsung model" means.

There's nothing surprising about state actors being able to quickly unlock the phone of a [failed] presidential assassin.
This is also my experience. And the worst was always being lectured by SW project managers about being agile and having to move quick and release early. I won't release anything without making sure everything works in every possible condition. This is why it takes years to build a complex chip (CPU, Fpga, any SoC really). Their firmware is often squeezed into months, and often the developers are handling like 10 different projects. So, no focus, no time to understand the details of the design. At the end it's common to have firmware issues in the first year after release. It's kind of expected even.
The Dynamical Origins of the Dark Comets and a Proposed Evolutionary Track
2024 years after 2k we have 2k.
>You cannot pluck a bald chicken.

Haven't heard that one before but I love everything about that!
Discussion: https://news.ycombinator.com/item?id=41002195
I have trouble accepting that as mere negligence (vs. gross negligence). Anyone hosting a website should be familiar with the trackers and other cruft that comes from third parties they utilize. This is why I'm incredibly choosy about what libraries I use and which third parties I allow to put content on my site (directly or indirectly). If you don't have good insight on this you have no business including their assets/snippets. I use open-source analytics tools that run entirely on my infrastructure, not the junk from Meta etc.

"Everyone else does it" is not a palatable excuse.

These companies are known for having user-hostile, privacy-invasive reputations, so as developers we should by default be wary of them.

E.g. Including a Facebook "Like" snippet on your page lets them siphon all sorts of data from your visitors, particularly if the user hasn't logged out of their Facebook account. It's not how users expect the web to work, and it's an insidious technique (they're deliberately taking advantage of thousands of unwitting webmasters who don't understand the baggage that snippet comes with).
More examples here: https://www.consumerreports.org/electronics-computers/privac...

Frankly, even if USPS was unaware, the data still ended up in those third party hands via their services so as far as I'm concerned, yes, they did facilitate the sharing of said data. At least they plugged the hole once it was pointed out to them.
IMHO, the downfall is singularly: ad revenue. Monetizing your website/app/product indirectly in this way has been the sole source of many (all?) negative emergent features of modern software and products. i.e. a focus on attention in lieu of quality directly incentivizes utilizing things like dark patterns, addictive features, etc.
> You can also just say things you don't understand are always created by fools.

Do you have a better hypothesis that would explain the extreme valuations of those stocks?

> But to say that each one of these has a high P/E because every shareholder is a fool is very reductionary.

That's not what "greater fool theory" means.
I think he was talking about grandparent due to baseless criticism of Microsoft and overly praise of Apple based on a flawed or lack of understanding.
Since when is Erdogan considered a dictator?
Good suggestion. I will consider adding it to the login options.
Outage announcement is almost unreadable, but look, a free trial offer!
If we are being pedantic then an ELAM driver can't be guaranteed to load before another ELAM driver of course, but only a small list of vetted vendors are able to sign ELAM drivers so it is very unlikely that malware would be able to gain that privilege. That's the whole point.
Whether you like macOS or not, they definitely are innovating in this space. They (afaik) are the only OS with more granular data access for permissions as well (no unfettered filesystem access by default, for instance)

It's also a shame CrowdStrike doesn't take kernel reliability seriously
Wait, when did the defaults for MySQL get more conservative than Postgres? I've heard the opposite for decades, but it's been like 9 years since I touched MySQL...

Agreed with this being a bad benchmark though.
> ”This is not a windows issue. This is a third party security vendor shitting in the kernel.“

Sure, but Windows shares some portion of the blame for allowing third-party security vendors to “shit in the kernel”.

Compare to macOS which has banned third-party kernel extensions on Apple Silicon. Things that once ran as kernel extensions, including CrowdStrike, now run in userspace as “system extensions”.
> There’s a reason Windows users

Yes, average Windows users are significantly less tech literate due to obvious reasons and there are way more of them. This create a very lucrative market.

How is desktop Linux somehow inherently particularly more secure than Windows?
Query Snowflake, Postgres, & S3 Within Obsidian Using GlareDB
Then, when the time comes...

https://news.ycombinator.com/item?id=41005904
> These companies still have IT departments

A lot actually don’t, in any meaningful sense. My partner’s company has a skeleton IT staff with all support requests being sent offshore. An issue with your laptop? A new one gets dispatched from ??? and mailed to you, you mail the old one back, presumably to get wiped and redispatched to the new person that has a problem.
CrowdStrike Windows Outage–What Happened and What to Do Next
> Your current [plan] allots 400GB monthly ... your usage is 3-5x

What I've never understood about Webflow is why do people host their site with Webflow (for exactly the reasons above)

You can create/update your site with Webflow, but "publish" it to your own server (which might be a cheap $10/mo hosting provider that given large or unlimited bandwidth)

The website will likely be even faster hosting it elsewhere as well, it's radically cheaper, and you have more control yet don't lose any of the benefits.

https://university.webflow.com/lesson/code-export?topics=hos...
[dupe]

Some more discussion: https://news.ycombinator.com/item?id=41002195

https://news.ycombinator.com/item?id=41001959
The benefits of GLP-1 drugs beyond obesity
We are far past that point. So many critical systems are running on autopilot, with people who built and understood them retiring, and a new batch of unaware, aloof, apathetic people at the helm.

There's no real need for some Bad Actor -- at some point, entropy will take care of it. Some trivial thing somewhere will fail, and create a cascade of failures that will be cataclysmic in its consequences.

It's not fear-mongering, it's kind of a logical conclusion to decades of outsourcing, chasing profit above and over anything else, and sheer ignorance borne of privilege. We forgot what it took to build the foundations that keep us alive.
It’s alllll fun and games until the SaaS you 100% rely on decides to become profitable
I read that they pushed a new configuration file, so possibly they don't consider that a "software update" and pushed it to everyone. Which is obviously insane. If I am publishing software, it doesn't matter if I've changed a .py file or a .yaml file. A change is a change and it's going to be tagged with a new version.
> We are in the Robinhood age where you can buy and sell a stock in seconds with no effort.

I read somewhere that retail investors are less that 10% of trades.
I guess we can call it a "black Thursday" for microsoft.
I used to read and write a lot of Scala and a bit of Haskell code which claims to be very similar to what I think you're mentioning here. There people also start with defining the domain in interfaces (algebras, eDSLs) and data types.

In the end it's still the same indirection and abstraction as in any other Java or Go codebase, and it prevents the developer from easily accessing the actual logic of the program.
That's a lot of words to say: "Yes, I will jump off a cliff if all my friends do it!"

Besides, no one is seriously considering auto failover for desktop machines. Not sure where that came from?
Maybe a silly question, but: why hasn't this affected Linux? I assume it uses a proprietary kernel module just like it does on Windows. I guess this will come out in a post-mortem if they publish one, but it's been on my mind.

edit: aha https://news.ycombinator.com/item?id=41005936

They did do this to Linux, but in the past. Maybe whatever they did to deal with it saved Linux this time around
This is all well deserved for executives who trust MS to run their businesses. If you have the resources, like a bank, it is crime to put your company in the hands of MS.
Related:

Mercedes-Benz high-power charging goes large at Starbucks

https://news.ycombinator.com/item?id=40991694
This is one of the comments ever.
So that work can't progress too fast?
I agree, but the contributions of these other projects have a barrier to entry being that it requires people to largely program.

Wikipedia, OpenStreetMap? Anyone can contribute, and the tools to do so have been made all the more accessible.
"There are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies, and the other way is to make it so complicated that there are no obvious deficiencies. The first method is far more difficult. It demands the same skill, devotion, insight, and even inspiration as the discovery of the simple physical laws which underlie the complex phenomena of nature."

"The most important property of a program is whether it accomplishes the intention of its user."

C.A.R. Hoare
:s/youtube/nsfwyoutube/
Azure status/support page is amazingly amazing.
Their current advice regarding virtual machines with the Crowdstrike problem? Keep rebooting!

https://azure.status.microsoft/en-us/status