skysight-inc/HackerNews huggingface dataset:
I hope you'll take the time to teach your children to think independently, and when you do you'll discover that as they grow a bit older they'll have different values and draw different conclusions on issues you care about. I think it's fine to be a contrarian and opinionated parent but if you demand that your children share all (or even the majority) of your contrarian beliefs you're doing them a great disservice and you set them up for failure down the line.
Yes, I believe a better approach is to recommend the language based on the browser settings, allowing users to switch manually if they prefer. This is my plan, and I will release this feature once it's developed.
Presumably they do test their updates, they're just maybe not good enough tests.

The ideal would be to do canary rollouts (1%, then 5%, 10% etc.) to minimise blast radius, but I guess that's incompatible with antiviruses protecting you from 0-day exploits.
Can you cite this, please? What infrastructure do you mean?
Well, in BBC’s live coverage, just minutes ago, their technology editor said:

“ There have been reports suggesting that a cybersecurity company called Crowdstrike, which produces antivirus software, issued a software update that has gone horribly wrong and is bricking Windows devices - prompting the so-called "blue screen of death" on PCs.
Now, whether these two issues are the same thing, or whether it's a perfect storm of two big things happening simultaneously - I don't yet know. It certainly sounds like it's going to be causing a lot of havoc.”

What two issues? Two major independent outages? This is seriously bad and purely speculative.
IMO, having a mix of servers would help in mitigating issues like that.

Like run stuff on Linux, windows and freebsd servers, so that you have OS redundancy should an issue affect one in particular (kernel or app).

Just like you want more than a single server handling your traffic, you’d want 2 different base for those servers to avoid impacting them both with an update.
I think the core of the question here is - do those funds bring any kind of return or are they one of thefriends of friends get handouts from government type projects that ultimately don't generate anything outside corruption and paperwork.
I meant critical software a short-hand for something like: quality of software should be proportional to the amount of disruption caused by downtime.

Point of sale in a records store, less important. Point of sale in a pharmacy, could be problematic. Web shop customer call center, less important. Emergency services call center, could be problematic.
How correlated? I spent 2 minutes trying and failing to get chatGPT to generate code that downloads an image dataset and runs diehard on the LSBs. I'd expect the LSBs to pass the randomness test.
This looks great! The example in the linked post directly addresses the obvious follow-up of "well, what about for functions that use traits that are currently divided into two or more flavors?". I hope it progresses to an RFC and code sometime!
The AI said it was ok to deploy
True, however on the other hand something truly basic like “not spending time re-compressing and re-uploading a cache after a cache hit”, “use zstd with caches”, or even “add fucking timestamps to CI logs” doesn’t even have any equivalent in Gitlab CI.

Some might even say dynamically generating child pipelines, while cool, is a niche bandaid for some of the legacy tempting baggage they are unable to escape from that dramatically increases pipeline complexity whilst common use cases are still broken and still underserved.

It’s a janky pile of unnamespaced, hard to debug and fragile YAML-template-meta-programming hacks. Light years my ass.
Transferring the risk of malicious actors, but creating a resilience risk they are not owning.
I'm curious why this post is still not the 1st (but 2nd after an ebook reader announcement), despite all the upvotes.
Not a Ukrainian but I know a good few. The language is taught at schools so you if you’re not educated in the Soviet Union you will know it. Whether you choose to use it is a different matter. And data would suggest that the usage is on the rise.
I wrote a review of a book which describes to me the best strategy for recreating Bell Labs like phenomena [0]

[0]: https://asindu.xyz/posts/the-nature-of-technology-book-revie...
Haha, yes, that's how it is for now. In the future, I will recommend the language based on the browser settings.
> The EU doesn’t take decisions directly about which projects to fund, but instead delegates it to more knowledgeable organizations.

They very much do. They invite volunteers to review applications and serve on juries for EIC and ERC, but the entire process, including definition of the funding criteria, is run by the EU.
> in my experience

Well, that's all that counts then I guess, never mind the stated opinion of medical researchers in the field with broader experience.

Christian Scientists and Jehovah’s Witnesses oppose blood transfusions and small town groups (which can be quite large in specific towns and non existant in others) can oppose blood samples also.

Various indiginous groups within Australia and elsewhere can be opposed to medical tests .. for fear of being guinea pigs in experiments again. Some people just don't like giving samples.
SAP isn't linux?
All five payment terminals in Germany are down. "Unfortunately, all online governmental services are affected. All two of them" says the chancellor.
Of course, this tells you a lot about the sad state of "realtime protection" software.
Not all. Only some. And many are already lifted.
The comment explains who lobbied for what.
It works in GNOME Terminal on Linux too. I had no idea of that shortcut. Thanks.

Why have everybody kept using Ctrl-Shift-C and Ctrl-Shift-V since forever included myself?
We don't know that yet
== kernel panic if that clears it up
I’m trying to refresh to get the latest update …
You should explain how they do it.

If for instance they're remoting into a restricted VM all day, that's a different set of tradeoffs many might not be happy with.
Thundering herd? Idk
I think this will require more than politeness. Just thinking about the phone calls I would get from parents if they switched to linux cause me to sweat. I am pretty happy with them sticking to OSX, means my sister gets all the calls.
> Enjoy features such as auto-hyphenation

Is this a feature of the app? Can I bundle an ebook with my own hyphenations and ensure that only those hyphenations will appear when Foliate displays the ebook?

Kindles have incredibly awful hyphenation. It seems to originate from somebody confusing the algorithm for hyphenation -- which is "there's a big list of hyphenation points for every word in existence, and when you want to hyphenate a word, you look it up in the list and choose the best available hyphenation point" -- with the algorithm for compressing the master hyphenation list, which involves representing the list as a priority-ordered set of rules for where a hyphen should appear based on a few surrounding letters.

But the result is that Kindles are constantly trying to hyphenate words based on a compressed list of words that doesn't include the word that needs to be hyphenated, with results like "Q-ingjiao".

This could be easily solved by checking every ebook for words that don't appear in the master list, and bundling a custom list of just those words with every book, falling back to the master list in the common case where a word that needs to be hyphenated isn't present in the custom list. But I guess nobody cares.
Steam asks for admin to be installed and asks for it again to install more features related to screen sharing.

To me, any app that asks for admin is suspect.
> Presumably, Crowdstrike runs on macOS without a kernel extension?

That's correct: CrowdStrike now only installs an "Endpoint Security" system extension and a "Network" system extension on macOS, but no kernel extension anymore.
This is a manifestation of almost everything wrong about software development and marketing practices.

I work in hardware development and such a failure is almost impossible to imagine. It has to work, always. It puzzles me why this isn't the casebfor software. My SWE colleagues often get mad at us HW guys because we want to see their test coverage for the firmware/drivers etc.. The focus is having something which compiles and pushing the code to production as fast as possible and then regressing in production. Most of HW problems are a result of this. I found it's often better to go over the firmware myself and read line by line to understand what the code does. It saves so much time from endless debugging sessions later. It pisses of firmware guys, but hey, you have to break some eggs to make an omelette.
I’m trying to refresh to get latest update… let’s keep posting
Don’t be fooled, it’s Skynet, head to the bunkers!
Extremely unlikely. This isn't the first blowup Crowdstrike has had; though it's the worst (IIRC), Crowdstrike is "too big to fail" with tons of enterprise customers who have insane switching costs, even after this nonsense.

Unfortunately for all of us, Crowdstrike will be around for awhile.
> Microsoft did not "cut off most of its QA"

Yes they did. Hear about it first hand from an ex windows software tester:

https://www.youtube.com/watch?v=S9kn8_oztsA

https://www.youtube.com/watch?v=lRV6PXB6QLk
nobody is forcing these companies to depend on MS products and services
https://www.sqlite.org/isolation.html

"In WAL mode, SQLite exhibits "snapshot isolation".

When a read transaction starts, that reader continues to see an unchanging "snapshot" of the database file as it existed at the moment in time when the read transaction started.

Any write transactions that commit while the read transaction is active are still invisible to the read transaction, ..."
Indeed this is different , This is world wide and it does not even only affect Windows pcs but with some friends of mine Linux and Macs are in trouble 2 , this is not ur Windows Vista BS problem etc
The details (the particular companies / systems etc) of this global incident don't really matter.

When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster.

It is risk management 101, never put all your digital eggs in one (or even a few) baskets.

The love affair with oligopoly, cornered markets and power concentration (which creates abnormal returns for a select few) is priming the rest of us for major disasters.

As a rule of thumb there should be at least ten alternatives in any diversified set of critical infrastructure service providers, all of them instantly replaceable / forced to provide interoperability...

Some truths will hit you in the face again and again until you acknowledge the nature of reality.
I believe that today they struck the entire crowd… (or should that be cloud)
> Surely none of the medical devices needed to treat a heart attack are Windows PCs connected to the internet?

Wouldn't that be nice
I guess Microsoft can now offer some similar to a Crowstrike solution for Azure users.
So maybe they should swap out the Leetcode for a testing and deployment test during their interview!
You missed the most important one:

Have some kind of soaking/testing environment for production critical systems, especially if you're a big business. If you're hip, something like a proper blue/green setup (please chime in with best practices!). If you're legacy, do it all by hand if you must.

Blindly enabling immediate internet-delivered auto-update on production systems will always allow a bad update to cause chaos. It doesn't matter how well you permission things off on your favourite Linux flavor. If an update is to be meaningful, the update can break the software. And clearly you're relying on the software, otherwise you wouldn't be using it.
fun doing that on thousands of machines
Finding a random seed that solves a LeetCode problem
Row pattern recognition feature for PostgreSQL
Another large parallel discussion thread:

https://news.ycombinator.com/item?id=41002677
Same, I’ve been in an org that got PCI-DSS level 1 without antivirus beyond Windows Defender or any invasive systems to restrict application installation.

It did involve a lot of documentation of inter-machine security controls, network access restriction and a penetration test by an offensive security company starting with a machine inside the network, but it can be done! Also in my opinion it gives you a more genuinely secure environment.
APRS also works on 30 meter band, which means HF, which means "hemisphere without trying very hard" distances. Obviously the radios are not $30, but really if one cares about the hobby one should not splatter so much.

It will also work if there's a (nearly?) statewide internet/cellphone/landline outage due to natural disasters. The $30 radio would too (if you can get in to an APRS repeater, or the space station, or whatever), but i'd rather have HF in an emergency of that scale, and VHF/UHF for day-to-day use. I forget the (VHF) APRS frequency offhand but you can find out if there's a digipeater or even a regular store and evenutally forward repeater in your area by tuning to that frequency and see if you hear the same station replying whenever any other station sends a message - it's usually pretty obvious.

also https://aprs.fi/ if anyone wants to see what else it can do. I built a slack bot after map reducing all of the weather nodes aprs.fi knows about to "least distance from zip and/or city/state", then hitting the public web and beautiful souping the weather information from aprs.fi for that particular weather station.
I use it for everything but actual reading.
So its not all bad then!
> There is absolutely nothing going on in the world to suggest that happen in the foreseeable future though.

Let's check back in 30 years, and see if we have to reply in Mandarin, Arabic, Russian, or Malbolge.
Oh jesus this author also has the Tolstoy virus.
Meh, without proper MAC with process namespaces, I guess nothing.

SELinux and whatever Apple is doing looks right IMHO
All `g_bindata_k*.c` files are essentially blobs with no source provided:

https://github.com/NVIDIA/open-gpu-kernel-modules/tree/main/...
Without access to Epic we can't place med orders, look up patient records, discharge patients from the hospital, enter them into our system, really much of anything. Every provider in the emergency department is on their computer placing orders and doing work when not interacting with a patient. Like most hospitals in this country, our entire workflow depends on Epic. We couldn't even run blood tests because the lab was down too.

The STEMI was stabilized, it's more that it was scary to lose every machine in the department at once while intubating a crashing patient. You're flying blind in a lot of ways.
Or doesn't operate, as it currently stands.
Oddly, this is partly by design.

EU SME funding programs have "non bankability" as a criterion (or variations on that, it changes every few years).

What that means is that if you have alternative sources of funding, even just potentially, you are disqualified.

What they're trying to do is 1) avoid competing with private funding and 2) fill in the gap where private funding is too risk averse but the project has huge potential.

In practice the result is as you say, this is basically a criterion to bias the selection to bad projects.
DIY Lockitron Smart Lock with Twilio, Arduino, and Node.js (2014)
Does it require to physically go to each machine to fix it? Given the huge number of machines affected, it seems to me that if this is the case, this outage could last for days.
I don't think the day matter anymore really.

The issue is update rollout process, lack of diversity of these kind of tools in the industry, and the absolute failure of the software industry to make decent software without bug and security holes.
Purcari and Gitana are two staple names in the EU market.

I bought them for 10+ years from a friendly reseller. IMO they are still the best value proposition.
Rakiya is closer, no? https://en.m.wikipedia.org/wiki/Rakia
The title is click baity, here is the paragraph answering the question:

> This is precisely what happened in the early to mid-20th century. Panama disease, a wilt-causing fungus, evolved to attack one Gros Michel banana tree. It was then able to infect all the Gros Michel banana trees which were planted in close quarters with one another on these massive banana plantations. Only by switching the crop to a new banana that American consumers would like [-Cavendish] —one that was similar to the Gros Michel in color and shape, but was genetically distinct from it—could the banana industry save itself from collapsing. In the process, though, we lost the better banana.
How would that change anything about Windows market share?
Throwaway account...

CrowdStrike in this context is a NT kernel loadable module (a .sys file) which does syscall level interception and logs then to a separate process on the machine. It can also STOP syscalls from working if they are trying to connect out to other nodes and accessing files they shouldn't be (using some drunk ass heuristics).

What happened here was they pushed a new kernel driver out to every client without authorization to fix an issue with slowness and latency that was in the previous Falcon sensor product. They have a staging system which is supposed to give clients control over this but they pissed over everyone's staging and rules and just pushed this to production.

This has taken us out and we have 30 people currently doing recovery and DR. Most of our nodes are boot looping with blue screens which in the cloud is not something you can just hit F8 and remove the driver. We have to literally take each node down, attach the disk to a working node, delete the .sys file and bring it up. Either that or bring up a new node entirely from a snapshot.

This is fine but EC2 is rammed with people doing this now so it's taking forever. Storage latency is through the roof.

I fought for months to keep this shit out of production because of this reason. I am now busy but vindicated.

Edit: to all the people moaning about windows, we've had no problems with Windows. This is not a windows issue. This is a third party security vendor shitting in the kernel.
> FYI I wouldn't know how to do fibonacci sequence because I don't know its definition

OP here. As I said, "I give the solution away".

I basically tell the definition/formula at the beginning, and give examples and test cases for you to check your results against.

I also help people along, like I would in pair programming.

A lot of people still fail. Some with allegedly 25 years of experience. Luckily this is at the beginning, so I don't have to spend the whole interview with them.
Agreed, there is no such thing as perfect software.

In physical world, you can specify a tolerance of 0.0005 in but the part is going to cost $25k a piece. It is trivially easy to specify tolerance, very hard to engineer a whole system that doesn't blow the cost and impossible to fund.

Great software architectures are the ones that operate cheaply, but are bulletproof when software fails. https://en.wikipedia.org/wiki/Chaos_engineering
What makes you think windows is the only alternative? Have you never heard about Gnu Hurd?

More seriously I am not saying you should run some critical services on menuetos or riscos but the BSDs are still alive and kicking as well as illumos and its derivatives. And yes I think a bit of diversity allows some additional resilience. It may necessitate more workforce but imho it is worth the downsides.
foliate is pretty good for epub. I have been using it for several months, and definitely prefer it to fbreader, calibre, etc. It is much faster than those. It has a good TTS interface as well.
Obligatory XKCD : dependency [0]

[0] https://xkcd.com/2347/
BBC are doing a rare awful job. I've got BBC News on here in the UK and they just keep saying a "Microsoft IT outage".
I'm guessing they were being treated over the phone as the systems went down. I've been through a similar situation, the person on the phone will give step by step instructions while waiting for an ambulance to arrive.

Sounds like with the systems being down the call would have been cut off which sounds horrible.
Evidently you dodge bullets well, you should consider running for office.
Yeah, my work requires me to run an antivirus kernel module on my Ubuntu laptop.

Corporate IT is always going to lean towards the "safe" compliance option.
Scripts are not executables
I don’t know why they said that. But I guess it’s the difference between a low certainty and a high certainty bet.

In 2024 it’s a safe assumption that a lot of the digital infra we use in 10 years will be based on Rust, so it may make sense to fund that.

On the other hand, something speculative like “semantic web” is less likely to be as important. It could be important, we just don’t know in $current_year.

I think it’s alright to split money between low certainty and high certainty bets, but reasonable people can disagree.
You mean 'xz utils'
additionally, VHF repeaters generally are horizon + 10% sort of range, and there is a committee to help with frequency allocations to avoid interference between systems that are close together. So really, the "slice of the band" is regional, the same way (broadcast) FM stations are.
Sitting in our work slack feeling pretty smug that I forced the migration to only Linux servers and Linux or macOS work computers now.
I agree S.O. is good at this since it has comments and you can add new answers as well as edit old ones. But, the rest of the internet is covered in outdated articles that never get updated. Also Reddit which auto-closes its threads.
The slice of Microsoft stuff I worked at certainly did not have dedicated QA at the time I was there and used to have a QA team before, so there is some degree of truth to the statement. I can't speak for other Microsoft teams and offices. It was very disappointing for me, because I have had the opportunity to work with great QA staff before and in my current job and there is no way a developer dedicating 25 % of their time (which is what was suggested as a replacement for having dedicated QA) can do a job anywhere near as good.
It is not the hardware designed for windows but the driver code, which is most probably written in basic C, which most probably can be cross-compiled for usage outside Windows – so instead of millions of dollars in new hardware it is really thousands in porting the drivers and GUIs to the new platform. What works on windows in 90% cases is an easy porting job for the manufacturer, they just won't be doing it unless someone stops paying for windows version and be willing to pay for alternative platform port.

Anyway, i totally agree with you. The convincing part here is short of clear and obvious for administration types. Until MS finally bricks it's OS and renders it totally unusable they can continue to do whatever shit they want and keep mocking their loyal customers forever.
Martensite is less corrosion-resistant. But note that slight working like bending it a bit will only turn a small portion of it into martensite, most of it will remain austenitic.
“Cloud” is so great huh
What happens when the malicious script tries a not-very-well-known payload? Hint: nothing good.
At least Linux servers, this situation is crazy.
> Windows, it's not the reliable OS it once was

And when exactly was Windows a reliable OS ?

When it was turned off ? /s
Workaround steps: https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/commen...
https://www.abc.net.au/news/2024-07-19/what-is-crowdstrike-o...
So you're an occupier?