skysight-inc/HackerNews huggingface dataset:
>I just learned that blatant racists are not a rarity in our corner of the world.

That's what you get if you browse Twitter. Stay off mainstream Twitter for your own sanity.

> Fortunately I haven't seen this on HN so far :)

Here people just blame offshore workers for this bug or other such critical bugs, as if US workers don't make mistakes. Peoples' egos are just unbelievable. If it's not DEI developers, then it must be those filthy foreign programmers from developing nations responsible for poor quality software and I've even seen here mentioned that Windows worldwide dominance also be blamed on SW devs from developing nations for being too poor to own Macs. I despise this "holier than thou" mentality of some privileged tech workers.
I've seen a decent amount of people that blacklist keywords like rust, blazingly, etc.
I almost use rr every day, along with a gdb frontend: cgdb.

rr record /tmp/Debug/bin/llvm-mc a.s && rr replay -d cgdb

I've have success story with some bugs only reproducible with LTO. Without rr it would be a significant challenge.

It would be nice if Linux kernel could be debugged with rr. Does anyone have success with kernel under rr+qemu ? :)
Ahh, hoisted by a bizarre editorial practice of including unrelated (or at best extremely tangentially related) padding photos. Thanks for that, edited.
Kind of inefficient. Also it's less ergonomic since every struct is it's own type, so you need to have the signature on both sides.
Compliance is one thing but a cybersecurity incident response team is very blind without an EDR not to mention you would have less protection from insider threat.
Can some one ELI5 why logging with loki is better than using a database like sqlite or postgresql.
Calligraphy can be fun. For me it takes a high degree of focus, because it doesn't come naturally.
What a ridiculous take. I'd love to see any one of the 70 Fortune 100 companies that are Crowdstrike customers turn off Crowdstrike for an extended period of time and see how long it'll take for someone to brick their entire infrastrucure with ransomware.

We live in an immensely networked world built on top of swiss cheese infrastructure (even the latest Windows is riddled with points of attack surface), unless you plan rehaul the underlying infrastructure it's simply not an option to run large scale infra without a protective layer on top.
How we systematically analyze user feedback with LLMs
Imma pronounce it biff, it's a time handling library after all.
There is nothing of value in this article
Also, food in general wasn't poisonous. And if those royals actually lived even a modestly healthy life (not drinking too much, not using lead based makeup, or their doctors poisoning them with mercury etc), then they could easily live a lot longer.
I am less surprised that it is a text prediction loop than I am surprised at how effective a text prediction loop is. This effectiveness has changed how I think about language on a fundamental level. Yes, the process by which it occurs is relatively simple, but the fact it works is ground breaking.
Even most algorithms would allow too many inputs. Even a simple algorithm computing the addition between two 64 bit numbers allow 2^128 possible input combinations, which would take billions of years to exhaustively check in the best case.
But at the same time, auditing every update to an assurance level beyond ‘it didn’t bsod in test’ is incredibly hard.

I don’t disagree with anything you’ve said, but I’d be very interested in solving the problem of actually auditing constant updates from vendors.
Placebo effect for parents who pay money for this, I assume.
They differ in the sense that it's easy to imagine how you can reclaim the energy in the stone -- let it roll back down the hill.

It's harder to imagine how you can reclaim the energy of the computation. Overwriting a bit requires a little energy even in principle, and then you can't get it back. Maybe this is what the commenter I was replying to meant by "all energy generated ends up as heat." Even still, I'm tempted to make the distinction between the energy that is needed to perform the computation and the energy that is lost e.g. to Joule heating.
The regulation doesn't mandate these systems.

The regulation requires controls, there are usually lots of ways of implementing those controls.

However more often than not the people buying these piles of goop are more interested in the cheapest/fastest/neatest way of satisfying those controls, actual security be damned.

So when vendor comes a long and says "our product meets those controls! all you need to do is tell the auditor you use product $X and you are done!" well that is an awfully compelling argument when those are your priorities.

Of course every security minded person dies a little inside but that is just how the world works for now, no-one has been sufficiently punished for these bad decisions yet but it will happen. Not a question of if, just when.

The lobbying does matter though as they lobby for increasingly useless controls that are harder and harder to satisfy with actual security (read least privilege design, capabilities, sandboxing, etc) and audit logging and become increasingly about "how big is your ruleset in your SIEM or equivalent and does it contain a specific rule that we can show auditor for control $Y" (yay Splunk/SumoLogic lobbyists) etc.

Not to mention stuff like pushing for TLS MITM boxes (self-compromising all your outgoing encrypted sessions is beyond insane) etc. The modern "security" industry is an embarrassment sigh.
He’s talking to his audience.
I thought the question was limited to a "solid state"[0] computer processor.

There is no "useful work" moving large things on a computer processor. In this context, 100% of the energy consumed by a computer processor is heat, right? At least I think that is the working assumption when we build CPU cooling. If a processor consumes 15W of electrically power, we better have some way to move this 15W of heat away from the processor, right?

I have another question, for a light bulb, is this still the case? I guess for a candle or an incandescent light bulb, the question is moot but as we have more and more efficient lights like the "cool" LED lights, if the light source consumes 15W of electricity, do we need 15W of cooling?

[0] not a technical term
There is a word for stuff like this when it happens in companies. It's on the tip of my tongue.
SpaceX (private) and Tesla (#40) dropped CrowdStrike.
> maybe his goal was to defang Le Pen's party by letting the French people see what they'd do with power before the election in 2027

That's what he said in private at some point, but that wasn't his initial plan. We have another reported conversation that explain his plan was to benefit from the divided left to reconquer an absolute majority for himself.

It's only after the left managed to make a coalition that he started floating this idea of letting the far right ridicule itself.

But even if that's a stupid plan, he haven't achieved that either, the far right gained over 50 seats, and their electorate are now even more angry because they consider they got robbed of the election.

So no idea what commentary you were reading, but I'd recommend not to trust that source ever again on that topic at least.
If crowdstrikes internal competency failed to detect a consistent bsod, I doubt they’d notice North Korea dropping malware into their product solarwinds style.
> consent

I mean the entire industry is based on doing stuff without seeking consent.

All the major players seem to have used at some point at least the books dataset so def no regard for consent or copyright.

Bigger issue is mechanical limits like Twitter and Reddit - walled gardens of info. That could entrench existing players, whether via money (pay me for data), ethics (oh now suddenly consent matters) or just timing (more stuff mechanically restricted)
About damn time!

Of course most people have no idea how brutal these systems are simply because they have nobody in the system.

That was me, until someone ended up using this stuff.

Frankly, I was shocked!

I have a major league problem with for profit prison. Big conflict of interest.

And this extortion on top of it.

Good to see reform.
Do we have available statistics as to how many actual attacks are thwarted by Crowdstrike or similar products (and not by other mitigation strategies -- i.e. all mitigations failed, CS succeeded)?
How many lives were saved by not becoming a ransomware victim over the last decade?
Log data is often massive so you don’t want to be paying for a gigantic Postgres instance for storage. Logs also do not get updated, so the transactionality of Postgres is wasted.
Again, here is the important part of the statement:

> The building indicated is not, nor has it ever been a diesel plant.

This statement does not contain the word property. This statement tells you all you need to know. You do not need to know who owns this building, who owns the Tesla charging infrastructure or who owns the land that the charging station is on or anything else.

People spreading misinformation were saying this building was a diesel plant. That statement tells you it isn’t. You now have all the information needed.
Don't get me wrong, the grammar is definitely easy to understand, but IMHO that's just another point for the 'learn early in life, or struggle' opinion. Adults have a much easier time with more complicated grammatical rules (hi, German!) or even rules with lots of exceptions (hello, Russian!). But having to remember how to spell and pronounce every other word is akin to hell for an adult. (I'm already struggling with it while learning Russian.)

Still doesn't hold a candle to Mandarin or Japanese, of course. These guys are just on a level of their own. :)
You are only as good as your weakest link:

> A Microsoft spokesman said it cannot legally wall off its operating system in the same way Apple does because of an understanding it reached with the European Commission following a complaint. In 2009, Microsoft agreed it would give makers of security software the same level of access to Windows that Microsoft gets.

https://www.wsj.com/tech/cybersecurity/microsoft-tech-outage...
I've been running a setup that uses Hugo[0] + GitLab CI + S3 for years and it's worked really well for my blog[1]. Very low hassle.

- [0] https://gohugo.io/

- [1] https://liza.io
What "ADHD scores" are we talking about?

There's no such thing as the "ADHD score".
The database names are standardized: https://www.iana.org/time-zones

The database itself may not be available but there are various implementations including Windows https://data.iana.org/time-zones/tz-link.html#software
it used to be so that in order for a product to be called "dondurma" (ice cream) it had to have salep in it. all other regular ice cream had to be sold under the name "buz" (ice).

i wonder if this is still the case.
Handshake is one unaffiliated with any existing chain. There’s also ENS on the ethereum chain.
That's a good, but separate question. My point is an at cost registrar probably saves people 10% on a .org, which doesn't meaningfully increase access... If you can't afford $10/year, $9/year isn't really affordable either.

To your question though, I think PIR actually contracts out the operation of the registry to Affilias. I don't know what the current rate is, but before they renegotiated, they were paying about $3/domain to Affilias [1] based on a reported payment of $33M on just under 11 million domains.

I don't really know where the rest of the money goes. There were a lot of questions when PIR tried to sell .ORG to private equity in 2020, but I don't know if there was much follow up after the deal got quashed.

[1] https://domainnamewire.com/2016/11/14/org-sticks-afilias-bac...
Forgive my ignorance, but to your last point about Rust aborting an invalid state… Isn’t Rust considered more memory safe because it catches many mistakes at compile time and not runtime?
According to Justine herself[1], POSIX specifically changed their rules to allow this type of functionality[2].

The paragraph you linked to was part of it, but also this paragraph under RATIONALE[3]:

> Earlier versions of this standard required that input files to the shell be text files except that line lengths were unlimited. However, that was overly restrictive in relation to the fact that shells can parse a script without a trailing newline, and in relation to a common practice of concatenating a shell script ending with an exit or exec $command with a binary data payload to form a single-file self-extracting archive.

So Cosmopolitan indeed seems to be POSIX-approved as far as this behavior goes.

[1]: https://justine.lol/cosmo3/

[2]: https://austingroupbugs.net/view.php?id=1250

[3]: https://pubs.opengroup.org/onlinepubs/9799919799/utilities/s...
And yet the Congressional leaders who were in the room with Biden say that he was unable to communicate effectively and obviously senile. It's hard to believe that he had anything personally to do with getting legislation through.

https://www.wsj.com/politics/elections/joe-biden-age-conditi...
You nailed it. It is a sweet green check mark but it also works well. The main reason CISO's get it so that if they ever do get compromised they can say they purchased the best security product out there. but there are still a certain portion of their customers that get targeted by APT's, think defense contractors, government orgs like the NRO, oil and gas, finance, power companies that have a large budget and that checkbox is the least of their worries.
Non-American here. Do you think will there ever be serious room for more parties in America?
> It sounds a little bit like 4-D chess now that I type it out, I'm not sure I believe it myself.

The thing is with Macron, he managed to make the journalist class believe he's a genius (he's not dumb, but still miles away from being as brilliant as presented). So whenever he trips on a stone, you get an army of journalist explaining to you how he planned for it all along.
is it true that the owner of crowdstrike is an ex-employee of McAfee and the same company that got sold because they had massive downtime for basically the same reason
If you're going to make this claim, here's what else you should specify before your comment has any meaning at all:

- how do you measure the size of a bureaucracy

- what is the size of EU's bureaucracy

- what make it qualify as enormous, or compared to what

Failing that, stop parroting right wing memes.
That stuff is absolutely on HN.
>Would it be possible that ANY video game has a positive effect on ADHD?

Some have very detrimental effects. Games are inherently interesting. Usually much more interesting than homework and/or housework. So, you start playing video games and all of a sudden you can't switch your attention back to the homework or housework when you need to. This causes lots of friction between you and the other people in your life that expect things of you.

It's a fundamental difficulty of regulating attention, not staying focused. That means either keeping it on something when you need to OR switching it away from something when you need to.

In my experience an enormous class of problems stems from being unable to switch your attention away from something that has just absolutely grabbed a hold of you and that causing you to be scolded by those around you day in day out for not meeting expectations.
I immensely doubt that actually happened (saw the Musk tweet) - from working with some companies of similar size, EDR rehauls are multi-month projects. Yes they mightve dumped them as a vendor but I'm 100% certain they're not going without an EDR throughout this time.

If they are it'll be a fantastic litmus test of my claim.
This changed my view of software, on a foundational level. Refactoring to Immutability - Kevlin Henney, NDC Conferences

https://www.youtube.com/watch?v=APUCMSPiNh4
> Kids are challenged to multitask and ignore distractions by navigating courses, collecting targets, and avoiding obstacles.

You could pick something like path of exile for free.
They probably bought another similar solution like S1 or Defender. I don’t think they are running without a security solution which was this thread’s discussion point.
> You keep misrepresenting repressions against anti-communists as colonization.

No, you, as the Soviet authorities did, keep misrepresenting colonial policies of forced labour, mass deportation, forced internment, forced language policies, and many others, specifically devised to pursue, establish and maintain control and exploitation of people and of resources, the very definition of colonialism, as "repressions against anti-communists".

That's what you've been doing for this whole thread: claiming that these things did not happen, and when it was pointed out that they did, in fact, happen, backpedalled to insist they can't have been colonial policies because Soviet authorities called them by some other names. Western colonial powers called them by other names, too, that doesn't stop us from labeling them as colonial policies.

I'm going to stop this poor-taste "debate" here. I understand your need to defend your political views and I take no issue with that, it happens at both ends of the spectrum. Western liberalism has considerable difficulty reconciling its current human rights policy with its past human rights record, too.

But we'll keep going in circles here: you're going to ask me for another instance of colonial policy from the Soviet Union, I'm going to point one out, you're going to say oh, but that wasn't a colonial policy of the government in Moscow, that was mass repression against anti-communists (as if there isn't a whole history of mass repression against anti-government and/or pro-independence groups in Western colonies), or part of the five-year plan to improve agricultural output (as if there isn't a whole history of, at the very least, deliberate withholding of resources against colonial population, if not outright use of hunger as an instrument of repression), or part of the Soviet educational policy or some other buzzword that Soviet press used.

Sure, Soviet practices were not identical to Western practices, they came from a completely different political tradition and were thoroughly informed by the Russian Empire's politically disastrous and much harsher colonial tradition. Colonialism, like all government policies, changed with time and varied with the government that pursued it. Nothing new here.

But all colonial governments developed their own euphemisms for their practices, and I'm all too familiar with the Soviet array, studying it was literally part of my work at one point. I really don't need a refresher on it.
This stuff knocked me on my ass when I took it. I literally had to lie down on numerous occasions. I'm just an anecdotal case, but it unfortunately did not work for me at all.
No one real believes it's Russian expansion anymore.

Russia recently mentioned it themselves they they had no problems with Finland and Sweden joining it.

Regarding Russian imperialism. It's quite the coincidence Russia is more interested in the resource rich area of Ukraine and they started "the little green men" invasion a year after Ukraine setup gas exploration on Crimea ( with shell)

Oh wait. It's no coincidence
My point is more that the people of the past weren't stupid; they didn't believe that a horizontal line couldn't be easily extended by a forger to hang over newly added digits. Rather, our explanation today is lacking; there must have been some other reason for the practice. Or no reason other than that someone stated it and it become something that is always done that way.
I am very interested in alternative ways of implementing controls to satisfy regulations; especially in ways that reduce, rather than increase, attack surface. I'd love if you could elaborate here, but links to documentation/technical articles are also welcome!
For the record, crowdstrike isn't the type of company that does DEI hiring. For technical roles, they let technical people from the team you're interviewing for grill you and it is their opinion that decides the outcome of first round interviews.
Because those "«people»" choose it for everybody else

I.e., your statement is translated to "that large masses of possibly unqualified people choose wrongly qualified people as having power over other people, with important regard to people in their right mind". It is not a value; it is a concern tackled in systemic planning.
Sometimes I'm a little embarrassed about just how readily Danish politicians and news media have adopted the large tech companies. I know it's related to users, but it's also sort of an egg and the hen situation / bad spiral where it would be nice if they actually put ideology/democracy first.

At least the EU is doing a lot of good work.

https://www.edps.europa.eu/system/files/2022-07/22-07-26_tec...
I'd say the benefits are told about everywhere. It's the execution where we fail on an individual level.
Well, I just don't spend enough time on HN then :)

I'm curious about what you mean though, if you have any sample threads.
Did they measure it in "how much you get yelled at"? That's my yardstick for how bad my symptoms are in any given week.
I don't disagree that the prevailing ambient authority model is less than ideal, but I'm left scratching my head at how capability security would solve the more acute problem we're facing.

Of particular note, the kinds of ransomware compromise that lead to organizations asking underwriters to sell them cybersecurity insurance policies wouldn't immediately be thwarted by moving to capabilities. If a principal has valid requisite pointers to the resources they need to do their job, they have valid requisite pointers to the resources that a cryptolocker needs to cause disaster. It's those cybersecurity insurance policies (or regulatory frameworks, where those exist) that ultimately drive the decisions to implement EDRs.
the laws aren't for the benefit of the citizens, they're there for benefits of the rich. does it make more sense now? that way you can have both spying being okay and sharing books being evil.
> A Mashco Piro man told one Yine villager

Not really uncontacted then.
Even a rudimentary “delay autoupdate by two weeks” would have saved lives here. Let everyone else update first.
Obama generally doesn't endorse early to avoid the optics of him putting his thumb on the scales. The DNC will likely go through the motions of a primary, so he'll wait for the right time.
But first check that you don't have prostate cancer.
A bit of an off-topic question: I would like to programmatically generate S3 credentials that allow only read access or r/w access to only a certain set of prefixes.
Imagine something like "Dropbox": You have a set of users, each user has his own prefix, but also users want to be able to share certain prefixes with other users.
(Users are managed externally in a Postgres DB - MinIO does currently not know about them).

I found this really difficult to achieve with MinIO, since this appears to require an AssumeRole request, which is almost not documented in any way and I did not find a Typescript example. Additionally, there's a weird set of restrictions in place for MinIO (and also AWS) that makes this really difficult to do, e.g. the size of policies is limited, which effectively limits the number of prefixes a user can share. I found this really difficult to work around.

Can anyone suggest a way to do this? Can garage do this? Am I just approaching this from the wrong side?

Thanks
Yes, that could've been lended almost as-is from OCaml, in particular as Rust doesn't have partial application so optional arguments would work out-of-the-box as well.