skysight-inc/HackerNews huggingface dataset:
| Sometimes by falling back to low-tech solutions

My first thought in all this was wondering if there's a business opportunity for a consulting firm or startup that designs and manages offline paper backup systems that can quickly and seamlessly integrate back with digital systems once they come back online.
Dunno, I guess I naively thought the quality of Linux drivers is higher but on the other hand, if the same confused randos are writing them then you're right that it would not make a difference.
Nope, that is completely unnecessary to me nowadays. No need for extra storage, m headphones are wireless and the possibility of AI will make me so much more productive. You need to update yourself sir.
Having a curious look is alright but it's the "beg bounty" attitude that these researchers need to rein in. It's like the sponge-and-bucket guy washing your grimy windscreen without you asking while you wait at the lights, then demanding cash for it. Thanks but no thanks.
Walkmans made music possible, if you had the spare batteries.

Batteries were the limitation.
unfortunate, but true.

At this point, having a child that's escaped scott-free from a hit-n-run is part of billionaire-bingo.
Absolutely not normal for flight activity to stop throughout the us. Previous times this has happened:

- 9/11
- COVID
Sussing things out, they uploaded a "config" file that had a .sys extension that caused all the trouble.

.sys files are supposed to be protected system files and require specual privileges to touch. I imagine Crowdstrike requires some special type of Windows "root access" to operate effectively (like many antivirus packages) in order to detect and block low level attacks.

So where things likely went pear-shaped was Crowdstrike's QA process for config updates is possibly less stringent than core code updates. But because they were using .sys files it was actually given elevated privileges and gets installed during boot.

As for the actual bug, I expect it was either something like the sys file referencing itself or some sort of stack overflow somewhere, both of which I would pin on Microsoft for not being able to detect and recover from during boot up.

All of this is straight guesswork based solely on experience as a longtime Windows user.
> The problem I think is that it would just take the form of regulatory capture. A few companies would be blessed, and the rest of us locked out. And we'd still have screwups like yesterday, but this time with Government Approval.

Yeah agreed. It would require no corruption... which is the true fantasy trope of our times.
It's not harsh. The tide went out and it turns out a lot of people were swimming naked.
Oh damn. That's what I get for browsing HN without caffeine.
Crowdstrike didn't have the right processes in place.

What can we do?

Require them to have documented processes, and require periodic (like every 6 months) third-party auditing that they have the right processes, and they are complying with their own processes.

More info: https://en.wikipedia.org/wiki/System_and_Organization_Contro...
Show HN: AI Game and Storytelling that blends images, video, and sound
I made an interactive storytelling function using AI that blends images, video, and sound.

https://www.giz.ai

https://www.giz.ai/a-journey-to-the-exoplanet-kepler-186f/

https://www.giz.ai/game-age-of-discovery/

https://giz.ai/assistant?mode=media

https://giz.ai/assistant?mode=game

Let's hear your funniest and most brutal feedback.
Hmm... maybe??? If you have a central audit log, what is the probability that whatever gets implemented in all the open (and closed) source projects will be compatible?
I didn't know that. So that makes this two strikes?
Microsoft licensing corruption scandal in Romania
Nothing content-addressed in RADOS. It's just a key-value store with more powerful operations that get/put, and more in the strong consensus camp than the parents' request for coordination free things.

(Disclaimer: ex-Ceph employee.)
The first language I got good at was QuickBASIC. It's always been sad to me that BASIC has become a hobbyist only language. Even Visual BASIC has essentially been deprecated by Microsoft
The ones next to vending machines are for recycling of beverage containers, not for general garbage.
How Olympic Sports Doping Works [video]
I was a research subject for a TMS study a few years ago (I made myself eligible by way of a bicycle accident). Having your thumb twitch because the researcher “shot” magnetic fields at my brain was an amusing experience; she said some people completely freak out at it.
It has Dedicated Win 3.11, so it would be the perfect platform for the current CrowdStrike craze.
Because it's easier to edit markup by reading markup???

I don't want to edit a rendered document. I already have MS Word if I wanted to do that.
I would like something liek this with a gripper or something to pick up garbage. I m sure somebody is working on it
The simple graphics and cursor movements is unmatched.

However “gosub” and lack of arguments is a major shortcoming.

I had a hard time understanding the classic Microsoft demos and book/magazine games as a child.

Looking at them again, they are still hard to follow — the code is a royal mess!!!
>it's the best feeling ever to hear about positive impact it's having on people's lives.

you guys deserve it! its a great product. admittedly its a bit spartan/plain in terms of ui but I respect that you guys focus on substance over useless shit that emphasizes edutainment over actual actionable knowledge cough brilliant cough
Using technology to effectively solve market externalities is a good thing.
> Or take the craze around drugs like semaglutide (Ozempic) in the West. Technologists constantly come up with solutions that directly or indirectly support immoral behavior and unsustainable lifestyles.

Why the dig at obesity?

If there's anything we are learning from GLP-1 medications, it is that, for many, weight control is not a moral failing. Many of these people will have spent thousands on coaching, gyms, nutrition plans, counselling, and any other option to try to lose weight the 'hard' way. Literal blood sweat and tears. Statistically, those interventions don't work well in the long term. Plenty of the morally unimpeachable suffer from weight issues. Clearly there is a physiological component as well. This medication treats it.

Is it also a moral failing to take a Tylenol to treat a hangover headache instead of suffering through the pain until it goes away? Maybe surgery patients should just tough it out, without anesthesia like they used to in the 1800s instead of taking the easy way out?

People are treated for 'self-inflicted' physical issues constantly. Why are you picking on overweight ones?
I assume you know that tex predates the web by many years?
I signed up for mathacademy and I'm extremely overwhelmed by the courses. I'm not exactly sure what course I am supposed to start with. I went with Linear Algebra and I'm going through the diagnostics but I'm struggling with all the questions so far.
Especially when teaching children, limiting abstractions is helpful.

A 5 year old can tell you what:

10 PRINT “HELLO”
20 GOTO 10

Does. You can basically look at each line In isolation and figure out what is going on. There is no nesting or scopes.

In addition other than the quotes there are minimal additional symbols. Even parentheses in a function call can be confusing.
Or lathe, or cranes, or alarms, or hvac... what the actual fuck.

Next move should be some artisanal as mechanical-as-possible quality products, or at least Linux(TM) certified product or similar (or Windows-free (TM)). The opportunity is here, everybody noticed this clusterfuck, and smart folks don't like ignoring threats that are in your face.

But I suppose in 2 weeks some other bombastic news will roll over this and most will forget. But there is always some hope
Thanks for the reply. Back in the day when i was more into actually making videos, i dreamed of a red or blackmagic.

But i was kind of hoping you were using a much cheaper cam & that the cheap cameras just became much better. Even the nikon is out of my price range for this project. Just wanted something ok, fiddle with the lighting & have it mounted on the ceiling to film a few hours during a few days. In case you got another tip for me other than a gopro.

But thank you. Also thanks for telling me about topaz labs. Looks interesting & haven't heard about them at all before.
Investing in Rust
Out of interest, that mentions "Dedicated Win 3.11", so silly question, I assume you would be able to install DOS on a dedicated server, but might it be possible to run DOS/Win 3.11 on EC2 (I couldn't find a publicly accessible list of AMIs)
I recently learned about mathematical maturity: https://en.wikipedia.org/wiki/Mathematical_maturity

Previously, I thought certain math topics were "hard" (e.g. category theory) while others were supposed to be "easy" (e.g. Calc I). I beat myself up for struggling with the "easy" topics and believe this precluded me from ever tackling "hard" topics.

I was thirty-something years old when I finally realized math has a well-documented maturity model, just like emotional maturity or financial maturity. This realization inspired me to go back and take a few math classes that I had previously labeled as "too hard," with the mindset that I was progressing my math maturity.

My point is that choosing an "age-appropriate" (in terms of math maturity, not actual calendar age) textbook is important. I also find it extremely helpful to chat with people who are more mathematically mature than I am, in the same way it's helpful to seek advice from an older sibling.
I used Final Scratch about 20 years ago. These days I use Recordbox DVS as all my kit is Pioneer.

The infinite music catalogue in digital format with the analogue feel of mixing vinyl is the perfect match for me. It’s been fun introducing friends to DJing by loading up anything they want into Rekordbox and seeing the delight on their faces after a first successful blend of their favourite music.
I'm guessing no, and even if their was they could make the litigation costs very high.

The sad thing here is what has to happen is the data needs sold off to blackhats to the point that entire countries get pissed and start putting near draconian level regulations and fines against companies like this to get them to stop this insecure bullshit.
> Was there ever such a time? If so then tell me when it was.

It was a goal for a long time, and I'd say we use to be more resilient pre-cloud SaaS auto-update everything. When every software solution installation is on private networks, with fundamentally different architectures (both machine and topology), along with a wide selection of even very poor quality software, was a lot more resilient than what we have today.

Today a single outage in a single service (say AWS) can grind a large number of companies to a halt. A bad update like this one immediately impacts everyone all at once and has a domino effect. That didn't use to happen.

We've been concentrating our collective architecture into a few best practice tools but that all become single points of failure for not only digital attacks, but misconfigurations, mismanagement, company failures, exhausted underpaid engineers, optimizations, etc.

> Hardening systems against vulnerabilities means making them less convenient/easy to use and people instantly balk against that.

This isn't necessarily true, and I'd argue quite the opposite direction has been happening in the security industry over the past decade or so. People realized that hard security would only cause users to find simple predictable bypasses that would overall _weaken_ the security posture. You just have to look at the evolution of NIST recommendations around passwords to see this happening.

Must change a password every 90 days that can't be the same as your last 10 passwords and complex password requirements? Well users are going to use the minimum size in predictable patterns and just increment a number at the end. Those old password hashes you have to keep around to check if the user is reusing the password? Those are a liability that, when broken, tell the attacker which pattern each user is using. Not the case anymore and there is a lot more usable security rolled that is entirely transparent to end users or almost entirely transparent.

Think about how prevalent and bad captchas used to be on the website and how easy they were to circumvent. Cloudflare's and Google's captcha solution are pretty transparent and has much greater efficacy than the old ones.

Did Microsoft's general and on-going laxness contribute to bad security practices? Absolutely, but that is one ecosystem that had weird other by the nature of how inherently unstable that environment was and is not and hasn't except for maybe a brief peak ever been a core foundation of the internet infrastructure, just enterprise infrastructure unfortunately. They definitely never got the memo about usable or transparent security. I hope they're at least trying behind the scenes now.
externalizing a threat, from a national news source.. Thought experiment -- a healthy society has plural viewpoints, and plural economic strengths. What if a core and entitled group of groups imposed their "security" on a plural society, for their own profit at the expense of the majority? What if their security is monoculture and internally inconsistent, without the ability to admit error ? What if there is a reflex to blame external groups specifically to divert attention from an internal and unbalanced chain of actions, controls and monetary flows?

What is the response of a Free Press to news stories exercising reflexive blame-game from allied core groups with major monetary interests in the outcomes?
An energy mismatch helps mice that eat less live longer
> Voting against pay toilets makes you a good person.

Voting against pay toilets makes you a foolish and counterproductive person that thinks you're a good person.
He’s like the Forrest Gump of failure
Memory-safe lanuages (for goodness' sake, even the crap I write in Python qualifies!) are the very minimum that is needed; not to use them for anything critical is simply crazy. Yes, do all the other things, but at least put out the blazing fire in your basement while you are implementing your fire-safety strategy.
> Setting speed limits to speed people choose is a terrible idea.

The point of the Solomon curve is specifically that that isn't true.
Technical Details: Falcon Content Update for Windows Hosts
Any info on whether this Crowdstrike Falcon crap is used here?
Even more bookkeeping will be saved with lost business opportunities.
Because it’s very easy to put a bomb in a trash can and maim a lot of people.
Not all perfect examples (e.g., some aren't metal, but they all have their own edge to them)... Kittie, Lamb of God, Dream Theater, Green Jelly, Heart, Ministry.
Offense is also easy in that there is a ton of software out there, and you just need to find one vulnerability. There is a "win" condition" Defense is impossible as there is a ton of software and you need to protect all of it every time, there is only a "lose" condition.
That’s not it. 911 itself was down.
(Well, as you probably know "nirvana" is not exactly a perspective that many ordinary people welcome, and it is in fact very far from some concepts of "heaven"; "Nirvana" for the eponymous band meant "induced bliss"; the band was far from fixated as e.g. Cobain found documented inspiration in the Damned ("Come as You Are" is apparently a citation of "Life Goes On") and the latter just lightly enjoyed the eerie spirit uncommittedly - a spinoff was Captain Sensible solo projects with "Wot"...

Now back to the topic.)
I don't believe that Google has anything at all to do with musl libc.

Applications should not be assuming a hard-coded stack size, that's a bug. They should be checking the value of PTHREAD_STACK_MIN. That is what it's there for.
The Maxims of Ptahhotep 2375–2350 BC
You’re repeating someone else’s campaign.
“Oh just do like Brasil”. The only thing Brasil and Arg have in common is the border and the Mercosur. You can’t compare the production momentum that Brazil carries with that of Argentina. What does Argentina produce anymore? Soy and gearboxes for VW? Seriously. The country could not spend anything else because it didn’t have anything else to spend.
What was your solution? Keep devaluating forever? We were already #1 in inflation in the world. Where was Brasil? Was that their main concern?

You can have the luxuries you talk about when the state is somewhat stable, not when it’s homeless shooting cocaine every night and spending it all to invite friends to dinners.
Evil is apparently when people who don't know what it costs to provide a service think they should get it for free.
>.sys files are supposed to be protected system files and require specual privileges to touch. I imagine Crowdstrike requires some special type of Windows "root access" to operate effectively (like many antivirus packages) in order to detect and block low level attacks.

Any file in C:\windows\ is protected by default and requires administrative privileges to modify. There isn't any extra protections for .sys files specifically.

>As for the actual bug, I expect it was either something like the sys file referencing itself or some sort of stack overflow somewhere, both of which I would pin on Microsoft for not being able to detect and recover from during boot up.

Since when is it the operating system's responsibility to recover from badly written kernel mode code?
It just sounds like building a system that's going to be used to coerce and blackmail the public in the future. Why on Earth would you trust that your embarrassing habits will not be monitored and used against you?
Who is pissing their pants instead of just pissing outside someplace?
After CrowdStrike, Programmers Deserve Consequences
And if you’re driving, you can always stop at any gas station.

Top off your tank if it makes you feel better, but realistically no one there is getting paid enough to cross reference gas buyers with poopers.
> In one way I'm amazed at how laxadasical the US and others are towards these threats and that they have not done more to harden the vulnerabilities. On the other hand, it's obvious: cost is one factor but I reckon another bigger one is 'convenience'. Hardening systems against vulnerabilities means making them less convenient/easy to use and people instantly balk against that.

"Show me the incentives, and I'll show you the outcomes." - Charlie Munger.

We do not incentivize companies to operate secure, redundant, reliable computer systems. We incentivize companies to make the number at the bottom of the spreadsheet beat the expectations some analyst in Lower Manhattan set 90 days prior. And since companies handle the majority of societal work in the United States, that's how most critical systems are designed.

Now, there's a chance that this will play out in court, and that Crowdstrike will have to be bought out to make up for the damages their customers suffered starting on July 19th. However, that will take years, and the outcome could very well be that the plaintiffs will receive symbolic or even no damages. By then, the market will have hedged, captured regulatory authorities, cut its losses, and just altogether moved on. The assets will be purchased in a firesale by people who see this as "creative destruction" and won't care that peoples' lives were put at risk because of this.

And the cycle will continue.
Yes, the answer must be additional processes and procedures. That way, you’ll never make a mistake! /s

Also bizarre to frame this as “unacceptable behavior”, as if whoever is involved was in some way aware of their mistake and/or would say “this is acceptable behavior!” when confronted with it or something.
You are ignoring that I am in fact including both macro and micro nutrient profile (if you exceed any individual parameter, you have consumed too much nutrition) and that I am using the widest possible definition of food taste that would include any type of pleasurable food experience - merely implying that complexity alone itself is not tastiness. Complex taste profiles can be tasty, but sometimes they are merely interesting.

The focus on too much is important. No food has everything you need (other than engineered Soylent-like foods), and we rely on composing a healthy diet by using foods whose profiles augment each other. The weaker the nutrition of a food item, the more room you have to augment your diet to obtain the needed balance. If you are already close to any limit, your options for augmentation to cover the remaining needs without reaching an excess is heavily reduced. If a single food item already exceeds any limit, there is no way to construct a healthy diet with it.

If your way of dealing with disagreement is to call opposing views childish, then it is safe to say that you are not mature enough to hold a discussion on the matter.
Microsoft DOES make sense though - tiny software...

I dont know if gibson took it or coined it in neuromancer but it at least makes sense as a name for a thing. This isn't the same as "random noun" for a company name.
I once worked on some software that generated PDFs of lab reports for drug companies monitoring clinical trials. These reports had been tested, but not exhaustively.

We got a new requirement to give doctors access to print them on demand. Before this, doctors only read dot matrix-printed reports that had been vetted for decades. With our XSL-FO PDF generator, it was possible that a column could be pushed outside the print boundary, leading a doctor to see 0.9 as 0. I assume in a worst worst case scenario, this could lead to an misdiagnosis, intervention, and even a patient's death.

I was the only one in the company who cared about doing a ton more testing before we opened the reports to doctors. I had to fight hard for it, then I had to do all the work to come up with every possible lab report scenario and test it. I just couldn't stand the idea that someone might die or be seriously hurt by my software.

Imagine how many times one developer doesn't stand up in that scenario.
With your rig I’d fear it every time
This is interesting! However, I suspect general TeX support in Typst is probably impossible unless you re-implement the entirety of TeX within Typst somehow. The TeX language has some really terrible properties. For example, the tokenization rules can be dynamically changed at runtime based on the output that has already been produced. E.g. you can write a TeX file that says "typeset this paragraph, and if the result is an odd number of lines, change the meaning of A from letter to open brace". Thus, fully supporting TeX within Typst would seem to require making all of the internals of Typst available to the TeX runtime.
Winning By a Hair: For cyclists, it's a drag when you don't shave your legs
This is very close to my heart because I learned to program in BASIC in the early 90s by reading a BASIC book from 1978. We didn’t have the internet yet, so that book was all I had, but it was simple enough for 8 year old me to figure out on my own from reading it.

I still remember the moment I ran into my parents bedroom to tell them I could print a line of text to the screen. That thrill hasn’t left me in over 30 years.
That you’re aware of.
FBI Used New Cellebrite Software to Access Trump Shooter's Phone
I asked you previously why you keep making new accounts for every single thread but you never responded to me :(

How many accounts do you have anyway?
I have done this for my purposes, but it's slow and unnecessary bloat I wish I didn't have to have.
What news?
I'm not talking about LLM. I'm talking about the challenge of cross language and code generation
> Why aren't we putting serious resources into geoengineering, adaptation and mitigation?

Are you running for president of the US? What do you think would happen to either candidate if they made this central their platform in today's political environment?

Spoiler: rich old people will not suffer, if anything, they'll just stop moving to Florida and Arizona.