skysight-inc/HackerNews huggingface dataset:
Some context: Students are protesting to reform the quota system. Which was abolished in 2018 after protest but recently brought back again. The Quota system basically reserves 56% of public sector jobs, i.e. 30% to relatives of war veteran.

The war happened in 1971. To get public job and avail the quota, it must be their 3rd or 4th generation now. Which is plain unfair.

But it’s not about that, the gov loyalists and their goons fake these veteran certificates to land these jobs. Bangladesh is one of the most corrupted countries in the world after all. So real veteran relatives are seldom the beneficiary.

These students just wanted to reform this system. But our fascist gov and their goons used force and killed 50+ unarmed students until yesterday (3 from my alma mater alone.) This was completely unprovoked and unnecessary. Basically any forms of dissent have been dealt with this way since 2009. No one can criticize or protest the big brother.

We have a dictatorship since 2009. People are angry - due to corruption, inflation, joblessness and tyranny. This is just some outburst of it.

When you see the videos how the police are killing teenagers and university students in the road - our future generation - no one can tolerate this.

Now the fascist gov has closed all internet and phone connection to outside world. I can't contact my family anymore. I don't know their well being.

There is of course more to it. But this is the summary.
Thank you again for the great suggestion! I’ve reflected on it and decided to work on integrating the Web Animations API. Users will be able to choose between using the Web Animations API or more direct DOM manipulation at runtime, selecting their preference in the target itself. Thanks again for the feedback.
This is about to get super normal.
Install `finger` and you've practically got a social media platform.
News from yesterday

Related article for some context: https://www.engadget.com/bangladesh-is-experiencing-a-near-t...

(https://news.ycombinator.com/item?id=41001370)
To them, they are thinking about it though. They installed this ultra secure thing called CrowdStrike that checked a regulatory box for cybersecurity
What the heck is it doing? My work laptop fan always seems to be blasting air whether it is 10pm or 3am. It's in a reboot loop now so I just shut it off.

All my Linux machines are all quiet when nothing is running. In contrast I go to the bathroom at 10pm or 3am and the work laptop fan is blasting. I've logged and see some other security stuff taking up CPU cycles but it happens at least a few times an hour. I wonder how much electricity the world is wasting with this crap.

When I first got the laptop when I started this job 5 years ago I thought it must be infected with malware because it was always running the fan so I put it in a separate VLAN so it can't attack my home Linux machines. IT told me it is security software. Who knew that the cyber attack would come from inside the security software.
You would think automated test would come before your teammates work stations / commit to head.
Windows Update has nothing to do with it.
To be fair, most corporations signed up for Crowdstrike as a way to address some issues. I'm sure it wasn't cheap and CS was probably better at security than an IT admin at a 50 person shop.
Nope, I just happen to live in a rural area with lots of trees and a few really strong storms a year. A tree going down on a power line or a car crashing into a pole is pretty inevitable, despite the company's best efforts to keep the lines clear, including regular cutting back growth.

I don't recall the last time I've had Windows itself crash on me... Two years maybe?
Not going to take off at scale in India (which the article is about).

Khapli/Emmer is not included in the MSP schedule - it's Wheat/"Gehoon" that is included [0].

Farmers only grow MSP crops at scale because heritage crops don't command the same prices.

But yea, most farmers will grow a mix of traditional crops for personal consumption and MSP crops for money.

My grandfather does the same with "Makka" (heritage corn) versus "Makhi" (mass corn)

[0] - https://desagri.gov.in/wp-content/uploads/2023/06/English-no...
dancing on the line between we "use" our mind, and we "are" our mind
The problem with cybersecurity is that there are hundreds of attack vectors; you can get pwned by supply chain attack or by some random zero-day exploit or by an insider....It is literally impossible to 100% prevent breaching of your computer network.
Notes about Eyeglasses
Remedee AI – Automated bug resolution with AI-generated pull requests
Hey HN! Would love your feedback on my new automated issue resolution platform. It:

1) Reduces escalations to engineers in support channels by triaging reported issues.
2) Speeds up defect resolution by analyzing logs, pinpointing code errors, and generating AI-powered pull requests.

We can't promise to find or fix all bugs, but our advanced memory and learning architecture, combined with sophisticated log filtering, excels at resolving simpler bugs (e.g., UI, core logic). No new interface to learn—just plug us in and streamline your bug fixing process. Looking forward to your thoughts!
https://archive.ph/rk8HH
Read through the whole communication and have to say the Deutsche Telekom really failed to communicate clearly here. Most people who have ever worked in IT will fuck up some cert during some point in their career — but you have to not do that when you are expecting to earn that level of trust. And when you do fuck up, it really matters how decidedly and clearly you deal with that.

So first they don't produce any explaination, then they are on summer vacation? Truly WTF? If anything Deutsche Telekom has demonstrated that they are not deserving of the trust given.
Why are so many mission critical hardware connected systems connected to the internet at all or getting automatic updates?

This is just basic IT common sense. You only do updates during a planned outage, after doing an easily reversible backup, or you have two redundant systems in rotation and update and test the spare first. Critical systems connected to things like medical equipment should have no internet connectivity, and need no security updates.

I follow all of this in my own home so a bad update doesn’t ruin my work day… how do big companies with professional IT not know this stuff?
Also found it interesting, but for it's technical merits, as I recently had to glue some code together to analyze/compare droplet size from still frames of a high speed video of a pressurized nozzle spraying a flammable fluid. (into a fire! neat! fire! FIRE!)

This approach might have been useful to try. I ended up finding a way to use ImageJ, an open source tool published by the NIH that biologists use to automatically count bacterial colony-forming units growing on petri dishes, but it was very slow and hacky. It was not perfect, but it gave an objective way to quantify information from a large body of existing test data with zero budget. https://en.wikipedia.org/wiki/ImageJ
Can you say with a straight face that if you were designing a system that had extremely high requirements of reliability that you would choose Windows over Linux? Like, all other things being equal? I'm sorry, but that would be an insane choice.
"It's a vending machine that sells back physical stolen credit cards." Input the dollars, receive stolen credit card. Put it next to an airport terminal for maximum impact.
What's insane medical malpractice is that radiology scans aren't displayed locally first.

You don't need 4 years of specialized training to see a bullet on a scan.
Or it could be made that Windows stops loading drivers that are crashing.

Third-party driver/module crashed more than 3 times in a row
-> Third-party driver/module is punished and has to be manually re-enabled.
When it comes to measuring the impact to society at scale, dollars is really the only useful common proxy. One can't enumerate every impact this is going to have on the world today -- there's too many.
Yeah, it's still like this at most places. I use this system every day to communicate with a lot of inmates in prison, trying to get them information from the Internet, mostly legal topics, but also MCU news :)
Incapacitation is the easiest to make the case for societal benefit. If a robber is locked up, he can't rob you. That's incapacitation. Nearly everybody agrees that incapacitation is necessary, even people obsessed with rehabilitation are generally willing to concede that until a dangerous criminal is successfully rehabilitated, he probably needs to be locked up.
I am pretty sure RP2040 is not compatible with the Raspberry pi boards, so it will not be enough to replace Raspberry PI.
Growing your own food should be more common. It is good to have some fresh food and know where it is coming from. Permaculture should be encouraged more, especially in suburban and rural areas. It might even be a way for some to make a little money (supplement, fun hobby, high school students). It would be an only solution if food was really long term short.

It will not solve all the worlds problems but maybe make use slightly more resilient in time of trouble.

A lot (most?) of people just do not have the space and resources. It is somewhat of a challenge to grow enough food for even one person. Planning and automaton can help but in the end it is work. Permaculture takes aa while to ramp up (so get started early.
New to IT, but this sure seems like a huge security risk. Even though the CEO and others have said otherwise. People who are more experienced, please let me know if I am wrong.
Can we end the whole “loading a kernel rootkit” thing? AFAIK Apple already shuns kernel extensions. What’s preventing Microsoft to do the same? As a bonus shit like anti cheat will go away too.
I know of an important company currently pushing to implement a redundant network data loss prevention solution, while they don't have persistent VPN enabled and multiple known misconfigurations of things that prevent web decryption working properly.

Because someone needs a checkbox.
CrowdStrike is a textbook example of a single point of failure:

https://en.wikipedia.org/wiki/Single_point_of_failure
Nonetheless it can be an interesting article, and if it's interesting enough people can navigate around paywalls (archive...).
Otherwise I wouldn't have heard of this article and that would be sad. It's a nice read.
Crowdstrike has caused kernel panics on Linux systems in the past too. I push FOSS hard and will hold that this is an example where using FOSS for all critical business software would have saved companies, but I don't particularly blame Microsoft directly for this outage. Incompetent IT managers buying software from their golf buddies is the real heart of the issue.
Unfortunately it seems like it is already sold out.
No, you wouldn't.
It's what crowdstrike call it. To run falcon sensor as ebpf, you need to set it up as "user mode" which, I agree with you, is poorly named.
It is legal because running on a platform of making life better for prisoners is a losing strategy. Voting to make the lives of prisoners better in any real way is writing an attack ad for your political opponent. Merica.
It's easy to make comments like this against automatic updates, but then you get popped because something that would have been automatically updated misses a patch because it was too critical to risk automatic updates.

In practice, failing closed (or crashing) is probably fine for most businesses, and lower cost than a breach, but the correct solution is automated testing across a broad spectrum of devices, staged and rolling updates to prevent entire fleets going down at once, and ensuring that there is an effective, tested rollback mechanism.

But that shit's expensive, so shrug :/
Does anyone use a solar-powered remote device like this? What is low enough to run off battery for a while?
They outlived their retirement savings and had to re-enter the workforce. It's just a rat race, isn't it.
The Later Years of Douglas Adams
Thank your daughter for this piece of insight into a child's mind! Quite inspiring!
Just like Greta Van Fleet, who are extremely talented, but they sound like a cheesy Led Zeppelin tribute band. I just can't listen to them.
Fla. Stat. § 939.06(1)

"A defendant in a criminal prosecution who is acquitted or discharged is not liable for any costs or fees of the court or any ministerial office, or for any charge of subsistence while detained in custody."

Edit: You can search scholar.google.com for "939.06" and find cases such as:

Starkes v. State, 292 So.3d 826 (2020) wherein the 1st DCA issued a writ of mandamus commanding the trial court to certify the defendant's costs (so that they may be reimbursed).
Regenerative ag is a ton of work, and at least in my anecdotal experience I didn't see any meaningful gains from it.

We rotated our cows once or twice a day, carefully tracking how much space they got each day based on the animals' weight and quality of forage. The animals got by okay, but honestly they seemed to act more like prisoners than cows. It shows even when you watch some of the biggest names in regenerative move their animals - the animals dive past the line into the space. Those animals are hungry and stressed by being so densely kept that they feel they need to eat before it's all gone.

Today we keep our cows in what anyone else would consider a much too low stocking density. We move them occasionally between 3 different pastures, on the order of weeks or months between each move. The animals seem less stressed, they're definitely happier, and they've created familial bonds and hierarchy that wasn't obvious when we kept them in closer quarters with frequent moves.
I would strongly oppose such restrictions. Of course I use Linux so I can install whatever kernel.modules I want to and no one can stop me :)
> Does CS actually offer any real protection? I always thought it was just feel-good software, that Windows had caught up to separating permissions since after XP or so. Either one is lying/scamming, but which one?

Our ZScaler rep (basically, they technically work for us) come out with massive impressive looking numbers of the thousands of threats they detect and eliminate every month

Oddly before we had zscaler we didn't seem to have any actual problems. Now we have it and while we have lots of zscaler caused problems around performance and location, we still don't have any actual problems.

Feels very much like a tiger repelling rock. But I'm sure the corporate hospitality is fun.
It's rapidly getting to the point where the cure is worse than the disease, when it comes to this kind of product.
I just wanted to mention that Microsoft has 3 tiers of Windows beta releases before changes are pushed to production. I can't comprehend how this wasn't noticed before.
They already do. After I left prison I was hired to tidy up the transcripts of the calls as the AI they used wasn't great on prison slang. All the calls were flagged by the prosecutor's office for illegal activity, but they were all the opposite when I listened to them. It was sad.

They already are cheap VOIP services too, you can hear the high level of digital compression on all the calls.

There is a high cost probably in maintaining all the handsets inside the facilities.
Step-by-Step Guide to Self-Publishing an Amazon Kindle Book
Holy crap! Someone else knows about memristors!

Oh man, coming neuroscience I had no idea why these weren't being more researched. Thanks for the info there.

Just as an FYI to y'all, a memristor is essentially how a synapse works. In that it's an electrical element that counts the change in charges across the leads over time (dCharge/dFlux or dq/dPhi). And all for very little power and it survives power cycles.

Like, we talk about AI these days, but memristor incorporating hardware would really get us there. You'd just, you know, need to invent the solid state memristor first, and then make it commercially viable, and then redesign all of computer architecture from the transistor on up. Easy-peasy.
I watched a presentation by someone representing "I Am The Cavalry" at B-Sides, Las Vegas, a few years ago. Very interesting stuff, gave me a whole new perspective on "cyber security".

https://iamthecavalry.org
https://www.pbs.org/newshour/health/how-some-families-are-ba...

Not to mention the actual difficulty of getting, maintaining and living off snap.
Data point: IIRC the Great Lakes were getting choked on algae until they banned phosphates in detergents. And of course there is always fertilizer runoff.
Why Do Kind Strangers Return Our Wallets?
Agreed, I think we are saying the same thing. I left out a word
May solar superstorm caused largest 'mass migration' of satellites in history
I don’t know the specifics of this case, but formal verification of machine code is an option. Sure it’s hard and doesn’t scale well but if it’s required then vendors will learn to make smaller kernel modules.

If something cannot be formally verified at the machine code level there should be a controls level verification where vendors demonstrate they have a process in place to achieving correctness by construction.

Driver devs can be quite sloppy and copy paste bad code from the internet, in the machine code Microsoft can detect specific instances of known copy and pasted code and knows how to patch it. I know they did this for at least one common error. But if I was in the business of delivering an OS I want people to rely on my OS this stuff formal verification at some level would be table stakes.
Gift link: https://www.nytimes.com/2024/07/19/world/asia/lost-and-found...
a leach field aproximates wetland, and with some revisioning, can be made to emulate wetland, and will often facilitate succession to actual wetland.
Yeah, it wasn't cheap.

It's still not enough.
Crowdstrike is a multiplatform malware that chronically damages computers on all major desktop OSes. This is a Crowd strike problem and an admin problem.
I love their forced updates, because if you know what you're doing you can disable them, and if you don't know what you're doing, well you shouldn't be disabling updates to begin with. I think people forget how virus infested and bug addled Windows used to be before they enforced updates. People wouldn't update for years and then bitch how bad Windows was, when obviously the issue wasn't Windows at that point.
Dan is the expert in creating software that never fails and can't be hacked
I download still-running fiction from the internet and read them locally, and periodically replace the files with versions with more chapters. It does not sound like the workflow would work for me.

(This also means hashing the contents wouldn't work.)
That’s the hilarious and sad state of affairs.
> Prisons are for society’s benefit, not for prisoners.

I wonder if creating a system that helps people build a better life after they have served their time might actually result in better outcomes for everyone...
>The first and easiest is simply to try to reboot affected machines over and over, which gives affected machines multiple chances to try to grab CrowdStrike's non-broken update before the bad driver can cause the BSOD.

I thought it was BSOD'ing on boot? I don't understand how this works. It auto-updates on boot? From the internet?
12-hour timelapse of US flights hit by CrowdStrike
I could be wrong on the interpretation, but I wonder if this will be one of the first cases challenged based on the Chevron ruling. I would think the challenge would be the law does not specify what the price should be so we can set it to whatever until congress passes a law specifying it.
What's the NASDAQ ticker for lives?
> We don’t really have any software engineering leaders these days. It would be nice if one stood up and said “stop being awful. Let’s be professionals and earn our money.”

I assume you realize that you don't get very far in many companies when you do that. I'm not humble-bragging, but I used to say just this over past 10-15 years even when in senior/leadership positions, and it ended up giving me a reputation of "oh, gedy is difficult", and you get sidelined by more "helpful" junior devs and managers who are willing to sling shit over the wall to please product. It's really not worth it.
> Is this just some virus scanning software?

Essentially, yes. It is fancy endpoint protection.
Correct. Also, the DNC breach was investigated by FireEye and Fidelis as well (who also attributed it to Russia).
This is a great, very fascinating YouTube channel.

Dirksen travels North America and Europe with her husband and 3 or 4 kids documenting home designs of all types. Lots of tiny homes in Los Angeles and California ( I believe one or two in Toronto ) as well as Western Europe. Her husband is from Catalunya so they've a bunch of clips from there. There's also one of a man who build a home sort of next to or inside a cave.

The coolest clips by far are ones of ancient abandoned villages and compounds (I think one castle-like structure) in Spain, Portugal and Italy that individuals took over and converted into homes.
The benefits include

1) Nice trips to golf courses before contract renewal

2) Nice meals at fancy restaurants before contract renewal

3) Someone for the CTO to blame when something goes wrong
They would send me the transcripts to tidy up, but a ridiculously cursory review would have shown there was no crime. They had already been through two levels of "review," apparently.
"Listen to the engineers?" The problem is that there are no engineers, in the proper sense of the term. What there are is tons and tons of software developers who are all too happy to be lax about security and safe designs for their own convenience and fight back hard against security analysts and QA when called out on it.
https://news.ycombinator.com/item?id=40998549
> Antivirus software always works as a driver in the kernel, no other way.

You're confidently wrong: https://developer.apple.com/support/kernel-extensions/
People at my workplace were affected but I dodged the bullet because I left my computer turned on overnight because I always want to be able to RDP in the next morning in case I decide to stay home.
There was a period of time where employees of companies like Amazon, Microsoft, and Google were protesting in order to prevent their companies from taking military contracts.

That seems to have mostly died down and all of those companies have contracts with the DoD.

Ultimately, I agree with your sentiment. Alibaba can't tell China no. And while US corporations have that freedom. It isn't one they should exercise because the US military's ability to remain competitive is in the vital interest of all that live in the US. Even if you don't always agree with the government's use of the military.
As I understand it was a definition update that caused a crash inside already installed driver.
See:

https://rfinder.shop/product/rfinder-m6-dual-band-dmr-4g-lte...
That’s not large models “understanding physics.” Better, giving output “statistically consistent” with real physical measurements. And no one, to my knowledge, has yet succeeded in a general AI app that reverts to a deterministic calculation in response to a prompt.
Please tell me you've ended the contract with CrowdStrike after this?
No other OS forces an auto-restart.
Well, with the proliferation of systemd and all the nightmares it's caused me over the past decade, I actually might. But thankfully BSD is an option.

But Linux isn't immune from this exact sort of issue, though - these overgrown antivirus solutions run as kernel drivers in linux as well, and I have seen them cause kernel panics.
Tell ya what, take two cans of coke. One, just open and pour into a glass. The second, pour into a glass and microwave it for a couple minutes. Take a sip of each and let us know how much gas is in each glass.

There's a reason that Starbucks isn't selling hot nitro brew.