skysight-inc/HackerNews huggingface dataset:
> We as a society need to start punishing incompetence the same way we punish malice.

Yes

But competence is marketed

The trade names like "Crowdstrike" and "Microsoft "
how many lifts, and how many floors, with how many people are you imagining? Yes, there's a dumb simple case where there's no need for a computer with an OS, but after the umpteenth car with umpteen floors, when would you put in a computer?

and then there's authentication. how do you want key cards which say who's allowed to use the lift to work without some sort of database which implies some sort of computer with an operating system?
> The Fifty Shades trilogy was developed from a Twilight fan fiction series originally titled Master of the Universe and published by James episodically on fan fiction websites under the pen name "Snowqueen Icedragon". Source : https://en.wikipedia.org/wiki/Fifty_Shades_of_Grey

The AI is already tainted with human output.... If you think its spitting out garbage it's because that's what we fed it.

There is the old Carlin bit about "for there to be an average intelligence, half of the people need to be below it".

Maybe we should not call it AI rather AM, Artificial Mediocrity, it would be reflection of its source material.
Li Mega's CATL Qilin 102 kWh battery charges 10-80% in 10 minutes 36 secs
The release didn’t break. A data file containing nulls was downloaded by a buggy kernel module that crashed when reading the file.

For all we know there is a test case that failed and they decided to push the module anyway (“it’s not like anyone is gonna upload a file of all nulls”).

Btw: where are these files sourced from? Could a malicious Crowdstrike customer trick the system into generating this data file, by e.g. reporting it saw malware with these (null) signatures?
It seems government IT systems in general faired pretty well the last 12 hrs, but loads of large private companies were effectively taken offline, so there's that.
> Incapacitation is the easiest to make the case for societal benefit.

In which case we would not be locking up people for victimless crimes
You can (and should) want to identify the root cause, without assuming malice.
Ok now you have a park of 200 of those devices to handle. And now you move a patient across a service or to another hospital and then....

Reality is complex.
Boeing has been losing market share to AirBus for decades. That is what happens when you cannot fix your problems, sell a safe product, keep costs in line, etc.
If such a warranty exists, the real question will be how Crowdstrike tries to spin this as a non-security incident.
Especially since everyone else is doing exactly the same. The entire point of social media is that it's not a secret.
How can one gets through? I'm sure the knowledge costs gold though.
Fair Core License
See also:

acoup - Why No Roman Industrial Revolution?

https://acoup.blog/2022/08/26/collections-why-no-roman-indus...
> Why would Windows systems be anywhere near critical infra ?

maybe Heartbleed or the xzUtils debacles convinced them to switch.
The post was probably written by a mere human (they do sometimes hallucinate quite badly).
>It actually reminds me of a Dutch policy (which may be apocryphal, please correct me) wherein prisoners in the Netherlands do not face further penalties for escape attempts because they are simply engaging in the only natural behavior we can expect from a person in a cage.

This is my philosophy as well, which is why I as a juror would be soft on "crimes against law enforcement" because being a cop is part hunter, and do you expect all your game to not attempt evasion?
It sounds like you're describing the advantages of diversity, with a little game theory thrown in to sweeten the deal. Still not sure how that can be described as lazy, or did I completely mis-read the original phrasing?
Also in Brazil: https://en.wikipedia.org/wiki/Nova_Iorque
Not really, even for security updates are not needed by the minute. Do you think Microsoft rollout world wide updates to everyone?
I'd go a step farther and say software engineering as a field is not respected at the same levels as such certified/credentialed engineers, because of these lacks of standards and liabilities. Leading to common occurrences of systemic destructive failures such as this, due to organization level direction being very lax in dealing with software failure potential.
We need to eliminate the rent seeking behavior of academic publishers. They do not fund the research, do not fund the peer review of the research, but pocket huge profit margins by charging others[1] for access to it.

Edit: [1] By others, I mean our university libraries and any poor soul who does not have membership in one. Today, universities pay to access their own research.
Probably extend that to structuring societies around legal frameworks and institutions as well. Things like labor contracts, stable interchangable currencies, standardized education, etc. Lots of parts undergirding the industrial revolution.
I'll take that to mean that you see software, but okay, let's agree that appearances are not always what they seem.

What ultimately sets humans apart from the monkeys, to make the difference between human intent and non-human intent significant, is identity. Indeed, a human in a costume that is unrecognizable from an actual monkey, thus having no identity, would not conjure rudeness feelings when giving the middle finger any more than an actual monkey would. It is fair to say that identity is not necessarily one's outer appearance. Signing one's name is another way humans confer identity, for example.

Do you recognize a human identity here? If so, describe it for us.
He. I've been running always everything one or two versions behind latest (for my personal laptop, not servers). That means mainly OS (e.g., macOS), but as long as I can avoid automatic updates, I do so.

I believe the chances of having a bricked laptop because of a bad update are higher than the chances of getting malware because running one or two versions behind the latest one.
Coolest controllers ever? Icy gamepads melt in users' hands
A lot of the software industry focuses on strong types, testing of all kinds, linting, and plenty of other sideshows that make programmers feel like they're in control, but these things only account for the problems you can test for and the systems you control. So what if a function gets a null instead of a float? It shouldn't crash half the tech-connected world. Software resilience is kind of lacking in favor of trusting that strong types and tests will catch most bugs, and that's good enough?
> Not caring about the actual product will eventually kill a company.

Eventually

By then the principles are all very rich, and no longer care.

Do you think Bill Gates sleeps well?
Tax write-off.
But it is breaking news. The rover drove over a rock and cracked it. Using the drill would have been boring.
It reminds me a lot of the Red Guards - the greatest disaster could come from the party losing control of these groups.
Cheaper? Well, perhaps when you require your OS to have some sort of support contract. And your support vendor charges you unhealthy sums.

And then you get to see the value of the millions of dollars you've paid for support contracts that don't protect your systems at all. But those contracts do protect specific employees. When the sky falls down, the big money execs don't have a solution. But it's not their fault because the support experts they pay huge sums don't have solutions either. Somehow paying millions of dollars to support contractors that can't save you is not seen as a fireable offense. Instead it is a career-saving scapegoat.

Within companies that have been bitten this time, the team that wasn't affected because they made better process decisions will not be promoted as smarter. Their voice will continue to be marginalized by the people whose decisions led to this disaster. Because, hey, look, everyone got bit right? Nobody looks around to notice the people who were not bitten and recognize their better choices. And "I told you so" is a pretty bad look right now.
Dart shifts to standard calling convention
Yeah, pretty much. When you have 2b files you need to troll through good luck using anything but a vector database. Once you do a level or two of pruning of the results then you can feed it into an LLM for final classification.
No. It's routine. They're not promulgating some fabulous new invention. They're digital hall monitors, chasing bad actors.

They're just bad at it.
I don’t mind writing original content like the old web.

And there’s obviously other people who do this too https://github.com/kagisearch/smallweb/blob/main/smallweb.tx...

I don’t get much traffic but I don’t mind. The thing that really made it for me is sites like this http://www.math.sci.hiroshima-u.ac.jp/m-mat/AKECHI/index.htm...

They just give you such an insight into another human being in this raw fashion you don’t get through a persona built website.

My own blog is very similar. Haphazard and unprofessional and perhaps one day slurped into an LLM or successor (I have no problem with this).

Perhaps one day some other guy will read my blog like I read Makoto Matsumoto’s. If they feel that connection across time then that will suffice! And if they don’t, then the pleasure of writing will do.

And if that works for me, it’ll work for other people too. Previously finding them was hard because there was no one on the Internet. Now it’s hard because everyone’s on it. But it’s still a search problem.
You could just... try it. It's very impressive what it can do. It's not some catch-all solution to everything but it saves me hours of time every week. Some of the things it can do are really quite amazing; my real-life example:

I took a picture of my son's grade 9 math homework worksheet and asked ChatGPT to tell me which questions he got wrong. It did that perfectly.

But I use for the more mundane stuff like "From this long class definition, can you create a list of assignments for each property that look this: object1.propertyName = object2.propertyName" and poof.
T5 is not Bert, translation is not embedding.
What exactly do you do to protect Apache from slow loris? Its my main reason for not using Apache.
Obviously because they had no Scotsmen.

Proving that people who build walls to keep immigrants out do not fare well.
One of the first things I do with a fresh install of an OS is to enable window titles on taskbar icons & disable any grouping feature. Icons-only cause a cognitive hiccup as I try to work out what it means, and extra clicks from grouping is inefficient.
Why is the icon dock so popular with designers?
I don't understand why you were downvoted. I'm interested in what you said. When you mentioned offsec evasion class, is this what you mean? It seems pretty advanced.

https://www.offsec.com/courses/pen-300/

What kind of code should I read? Actually, let me ask this, what kind of code should I write first before diving into this kind of evasion technique? I feel I need to write some small Windows system software like duplicating Process Explorer, to get familiar with Win32 programming and Windows system programming, but I could be wrong?

I think I do have a study path, but it's full of gap. I work as a data engineer -- the kind that I wouldn't even bother to call myself engineer /s
BPF-based CrowdStrike is relatively recent, partially because, from the Enterprise Linux perspective, kernel support is relatively recent.

For example, BPF-based CrowdStrike works on Enterprise Linux 9 and Debian 12. I don't know if the necessary support was in EL 8 or Debian 11.
When views are low the math doesn't make sense but it is very possible to get a lot of views through AI generated + human reviewed content.

We're trying to do that with PulsePost (https://pulsepost.io) and the biggest challenge is unique content. Given a keyword or a niche topic, AI models tend to generate similar content within similar subjects. Changing the temperature helps to a degree but the biggest difference comes from adding internet access. Even with same prompt, if the model can access the internet, it can find unique ideas within the same topic and with human review it becomes a high value article.
who's allowed to use the lift? where do those keycards authenticate to?
We need to eliminate the publishers period. Publishing on the Internet is free.
Good website except for the fact I get 2 scrollbars, one of which non-functional.
Country probably entirely underwater in the next 50 years anyways....
This will go on for multiple days, but hundreds of billions would be >$36 trillion annualized if it was that much damage for one day. World annual GDP is $100 trillion.
The GDB feature set has been largely unchanged since the 80s and even then mostly just parroted the design of other CLI debuggers from the 70s. Of course it is limited, you are talking about technology that was not even cutting edge nearly half a century ago.

To be fair, the core components of a low level debug agent are still largely the same, so it is not like the technology is bad per se. It is just that it only constitutes table stakes, a bare minimum foundation, these days. Even looking at 20 year old technology like time travel debugging that allows you to time travel execution back and forth gives a far better idea of what people are missing by using primitive tools.
Windows XP. High profile zero day cases and Windows Update during 2000s created a "security updates are like dietary supplements" mindset.
Thank you for pointing this out. Whenever I read articles about security, or reliability failures, it seems like the majority of the commenters assume that the person or organization which made the mistake is a bunch of bozos.

The fact is mistakes happen (even huge ones), and the best thing to do is learn from the mistakes. The other thing people seem to forget is they are probably doing a lot of the same things which got CrowdStrike into trouble.

If I had to guess, one problem may be that CrowdStrike's Windows code did not validate the data it received from the update process. Unfortunately, this is very common. The lesson is to validate any data received from the network, from an update process, received as user input, etc. If the data is not valid, reject it.

Note I bet at least 50% of the software engineers commenting in this thread do not regularly validate untrusted data.
ClownStrike left kernel panics unfixed for a year until macOS deprecated kernel extensions altogether. It was scary because crash logs indicated that memory was corrupted while processing network packets. It might've been exploitable.
So where do justice systems come from?
I'm not versed enough into windows loading dll / driver, but isn't the caller able to handle that situation? Or windows itself? Does loading an empty file driver can be handled in a way that it does not make the OS crash?
If anything, this just shows how short-term our memory is. I imagine crowdstrike stock will be back to where it was by the end of next week.

I bet they don't even lose a meaningful amount of customers. Switching costs are too high.

A real shame, and a good reminder that we don't own the things we think we own.
You said

> It is so incorrect, it is boderline idiotic urban legend. post-Soviet cities have hot water year around.

Probably every city in Russia most certainly don't have water "all year around", and never have going back into USSR times.

How the plants work exactly I have nothing to say, but if there is an urban legend perpetuated here then I'll tell it which it is: it's how good soviet and Russian infrastructure is.
What if instead of that we use intel from insiders and buy stocks using that!

Oh wait, that's illegal when you're not a billionaire.
This story is about to break into the top 15 of upvoted stories on HN, but it already seems safely within the top 10 by number of comments.
This convo reminds me of .. “my contention is that prior to the Revolutionary War, the economic modalities—especially in the southern colonies—could most aptly be characterized as agrarian pre-capital —"

https://genius.com/Good-will-hunting-good-will-hunting-bar-s...

lol
OS / driver development needs to be done on bare metal sometimes.
Agreed - The worst part is most of the people making these unhelpful comments are probably doing the same sorts of things which caused this outage.
The only thing I'm 'shocked' by is the idea that anyone needs to pay to access my academic writing for model training. I would hope that using my academic writing to train models would be considered fair use.
> Btw: is that bug in the kernel module even fixed? Or did they just delete the data file filled with nulls?

Is that a real question? They definitely didn't do anything more than delete the file, perhaps just rename it.
> It's not cruelty there either, just revenue collection. Someone's gotta pay for it

Okay, let's extend this principle to the rest of society - if the government investigates a business for labour violations, then the business should pay for the cost of investigating them. if the government investigates you for not paying taxes, you should have to pay for that, even if you are 100% innocent.

Oh look, the more baseless accusations the governments creates, the money money they collect, how convenient!
video summary from fireship: https://www.youtube.com/watch?v=4yDm6xNeYas
https://waifu2x.booru.pics/outfiles/870a73558372ee00c23ad81d...
> Fascism is a far-right, authoritarian, ultranationalist political ideology and movement,characterized by a dictatorial leader, centralized autocracy, militarism, forcible suppression of opposition, belief in a natural social hierarchy, subordination of individual interests for the perceived good of the nation or race, and strong regimentation of society and the economy.

Source: Wikipedia

This sounds like the very definition of fascism to me.
Poor Clippy. Widely disavowed ...
I was studying how those mechanical calculators (like the one in "Hidden Figures") worked, and it struck me that Hero of Alexandria, or whoever made the Antikythra mechanism, could have easily made one. I thought long and hard about why Hero actually didn't make one of them.

The only answer I could come with was this: Nobody asked him to make one.

He had the tools, he had the skills, he had the workshop full of assistants. All he needed was a *purchase order* and we could have had mechanical calculators 2,000 years ago.

If you have minions, ask yourself if you are asking them to work on the right things. If you don't have minions, well ask yourself the same question.
I've seen a few videos from that channel.

downtoearth is another good one.
It's a diesel repair shop, not an office building. I'm interpreting "lift" as a device for lifting a vehicle off the ground, not an elevator for getting people to the 12th floor.
I used to work for a major retailer managing updates to over 6000 stores. We had no auto updates (all linux systems in stores) and every update went through our system.

When it came to audit time, the auditors were always impressed that our team had better timely updates than the corporate office side of things.

I never really thought we were doing anythin all that special (in fact, there were always many things I wanted to improve anout the process) but reading about this issue makes me think that maybe we really were just that much better than the average IT shop?
Multisatellite data depicts a record-breaking methane leak from a well blowout
Same. I "inherited" an app doing crazy slow sync IO from their "async" functions... Sure, there was often some async IO mixed in, too, but what's the point?
I am "saving" this comment :)

... and seconding all the best wishes for the mother involved. Do get well.-
I could not imagine so many critical systems run on Windows.
Yes I replied to the $1500 one but the thread specifies being found guilty and "sentenced to 5 years".

I find it completely acceptable to charge an inmate money for his stay, people are against prison labor cause it makes it profitable for a state to have prisoners, which is true, but somehow the state has to recoup money it poured into an individual eating free and using public services without paying taxes for multiple years. You decided to commit the crime.

Now, I am against you being charged pre-sentencing, unless you are found guilty, in which case you should be charged for that pre-time as well.
The article highlights that Rome lacked the shift to coal energy, which was crucial for industrialization.

So I wonder if it happened in Britain because it’s colder there.
I dare ask, what happens in September?
> We have fuses and circuit breakers, and all sorts of ways to limit the damage a short circuit can do, but no such analogs for limiting the scope of damage a chunk of code can do to the world. This is insane.

We have the exact thing for that. They're called virtual machines and containers where you have absolute control over the networking and disk access. You practically have to be a software developer to use them, but they exist. Most of us exchange convenience for security, however, so here we are.
The original Indian and Pakistani founders had Soviet education and influences. Moreover the Comintern was one of the only fora at the time that was openly in support of decolonization. The similarities aren't coincidental.
Yes, but if we already have regulations, governments may be lazy enough to simply put force of law behind our regulations.
It's clearly working because the models are only getting better, believing that the performance of these models would fall at some point in the future is just very delusional.
> OS X was using Unix back then

IIRC OS X, and MacOS, are and have been certified UNIX for 20ish years.
michael seibel will quote me on this one

release whatever you have already worked on. after that, the shame of not doing the remaining 30% will gnaw on your fucking soul like a madman. that's called the iteration process aka boring improvements.
Auto-updates are the only reason something like this gets so widespread so fast.
It says they killed a guy with a six foot long arrow. How does that work?
Don't forget you can do it when you're an elected representative too!
Oh yes. This would be a contingency measure, just to keep the record in a human readable form while requiring little manual labor. Printed codes could be scanned later into Epic and, if you need to transfer the patient, tear the paper and send it with them.
How about an e-ink display for each patient that gets drug and administration info displayed on it?
I'm having a hard time picturing a multi-story diesel repair shop. Maybe a few floors in a dense area but not so high that a lack of elevators would be show stopping. So I interpret "lift" as the machinery used to raise equipment off the ground for maintenance.
This is the No True People Who Build Walls To Keep Immigrants Out fallacy.
no concept of energy through combustion
Two things I do to help me ship. I write down the list of features required to complete the project and then ruthlessly pare it down to the absolute minimum. Nothing gets on that list unless it is absolutely required. For example, if I were shipping a car, I would not consider doors to be required.

The second thing I do is to bribe myself. I promise myself a treat but only on the condition that the project is complete. It is usually something small but I hold myself to not getting it unless the project is shipped.

Those usually help me get over the finish line.
Maybe. Have you tried? 30 year old games often did not implement delta timing, so they advance ridiculously fast on modern processors. Or the games required a memory mode not supported by modern Windows (see real mode, expanded memory, protected mode), requiring DOSBox or other emulator to run today.

DOSBox runs on Mac too, incidentally.