skysight-inc/HackerNews huggingface dataset:
Assuming you’re talking about standard guitar with standard tuning system, no, there’s no notes that you can play in 6 different strings.

(But if you’re not talking about standard guitar, then don’t stop at 6, you can have more than that.)
To be fair, I work in software, so I too am familiar with the whoosh of a deadline as it passes by, unmet.

Although I don’t find it as hard as Douglas did with his writing, but then that level isn’t needed for most software projects.

I was about to say that software, unlike creative writing, can be changed after publishing. But Douglas did that for Hitch Hikers - the radio script, books, and TV show are fairly different stories!
Upvoted your comment. So many comments here are trying to psychoanalyze a smart guy (in my view). A lot of what he has written is sarcasm - which is total lost on the autistic nerd.
I mean, the whole world was impacted. All they had to do was test this change in a lab with several pcs. Clearly this wasn't a edge case nor a subtle problem. This was clearly a lack of testing.
Yeah “how this logic flaw occurred” is the wrong question.

How a common bug was rolled out globally with no controls, testing, or rollback strategy is the right question
Pinecone just put devops around facebooks FAISS library
But Google and Facebook intruding on me is non-billable?

Anti liberty and anti equity is fine for big tech.
I definitely do, I have never bought a phone without a headphone jack. I feel like that will end soon though, as the line of phones I'm using seems to be dying, and it's the last of its kind.
The problematic driver was dowloaded from Microsoft managed infrastructure, even though it was a third-party module. Microsoft needs to do a better job at running integration tests between windows kernel and driver updates for sure. They can’t publish security updates without running integration tests, this is basics of software engineering. Windows is their product not Crowdstrike. 100% Microsoft failure here.
My only agenda is that it's irritating to listen to non-scientific and pseudo-scientific nonsense bandied about by people who plainly should know better.

What do you propose? That if we can't rehabilitate, we don't bother to deter criminals, or to sequester them from society so they can do less harm, or even that we refuse to punish them thereby encouraging private vengeance? Is that why you irrationally hold onto the clearly mythical rehabilitation, because if we can't have that then we must also abandon the others but subconsciously you know what that shitshow would look like?

The world needs more thinking, not less, and it needs less feeling/empathy, not more.
That’s a terrible idea and would set Bangladesh back generations. Hasina is authoritarian, but Bangladeshis need someone like her to run such a disorderly population. She’s not Lee Kuan Yew, but she’s the best in that direction Bangladesh can hope for. And a third-rate copy of LKY is a hell of a lot better than whatever Islamic socialist would replace her.
> "People should just stop" is never the right answer. You might as well be commanding an engine to stop overheating.

1) I don't understand this argument. As if we don't absolutely do this all the time. Theft as a concept is impossible to completely prevent yet we still know it to be illegal. Same with Vandalism. The supreme court just made it legal to prosecute the homeless. Hell there are countries were suicide is illegal.

2) You say this as if a room temp superconductor is something that endless dollars aren't spent on trying to achieve.

> They shouldn't be set around "morality," they should be set around established civil liberties.

These are not whole distinct things. They are two overlapping circles. No one but the most unscrupulous of lawyers conceive of these a 2 wholly distinct entities.

Unethical or "uncivil" behavior is something that happens and to act like we have are hands are tied and shouldn't adapt to address this because our hands are tied because there are unintended consequences is asinine and impractical.
The usual pairing is research and _development_ isn't it.
Is it sort of a SpaceX model? Rebalance the relationship between iterations of theorizing and of practice? Unclear how many iterations of practice they'll be funded for.

Of course the payoff is high. In the picks-and-shovels end of the information economy, it's clear that power is a good business.
It rather looks like Crowdstrike marketed heavily to corporate executives using a horror story about the bad IT tech guy who would exfiltrate all their data if they didn't give Crowdstrike universal access at the kernel level to all their machines...? It seems more aimed at monitoring the employees of a corporation for insider threats than for defense against APT actors.
You could also put cloudflare in front of it and leverage their free plan until they don’t let you anymore (which is my experience for something like this is pretty much forever).

Or you could host it with a plain old web server on a hosting platform that gives you fixed bandwidth for a fixed price. And it probably still scale well enough to survive a front page hug.
Atril works the same way as well.
Agreed. We all know about a really interesting vector for infecting the kernel now. One that is poorly tested, poorly implemented, and poorly secured.
Maybe those old boomer IT people were on to something by using different Citrix clusters and firewalling off the ones that run essential software...
I think its beyond obvious that covid was created in the lab in Wuhan from experiments with bat viruses and leaked into the wet market via an incompetent employee. In other words, both the lab leak and the wet market are true. That's the Occam's Razor hypothesis but it can't be confirmed because the totalitarian dictatorship that runs China has likely erased the evidence.

After leaking from the lab, it was extremely deadly at first and this was made worse by the overuse of ventilators. It gradually mutated into basically another virus that causes the common cold over the course of 2 years.

It will likely remain an extremely controversial topic and I doubt there will be an objective history of the pandemic period within our lifetimes. It became a culture war issue and each side dug in on their respective positions, facts be damned.
> At least in this case, they didn't call it "open source", which it isn't.

There are no open source AI models, strictly speaking. Because they are not reproducible even will all the data and training setup. Randomness is embedded in training. It could be done without, but performance suffers. So, only for learning and some academic research.
> Back in the day nobody was taught to program

Do you mean the 1940s and 1950s? Because by the 1960s, Comp Sci was taught as a discipline and by the 1970s and 1980s anybody who wanted to work in the industry was expected to get a BS degree as a minimum (PhD if you were serious).

Sure, there were still people learning on their own, but they were either smart enough to improve significantly, or amateurs who would always produce spaghetti code which the pros (read: Comp Sci grads) ended up rewriting.
Great job! I would love to see a writeup of how you did this!
Mitsubishi financial group execs take pay cut to atone for data breach
I can guarantee you that you aren't the only one thinking this right now.
> you and I lack the information to make a judgement.

Think about this a little harder: what do you know about the number of customers affected? We do actually have enough information to make a judgement - bricking millions of critical systems, a very high percentage of their total Windows customer population, tells us that they don’t have progressive rollouts, don’t fail into a safe mode, and that if they do have tests those tests are catastrophically unlike anything their customers run – all they had to do was launch an EC2 instance and see if it kept running.
As it stands, it's hard to draw meaningful insights other than "lots/few people died here".

Things that makes this difficult:

- Roads change overtime. Added stoplights, more lanes, added roundabouts. Dramatically change the rate.

- Volume of traffic. Deaths per cars would be interesting.
*Sv Al's krugi approximate good defos,

"Purgatory is the other [eg self-styled elites] in the same equivalence class of hubris**/humility ratio"

**Offensiveness to higher minds
This seems very unsatisfying. Not sure if I was expecting too much, but that’s a lot of words for very little information.

I’d like more information on how these Channel Files are created, tested, and deployed. What’s the minimum number of people that can do it? How fast can the process go?
> it's not actually code, just some stuff on what the software should "look out for"

If it controls the behavior of a computer, then it's code.

> and it's kind of understandable that channel files might seem safe to update constantly without oversight

Yeah, no, it's not. They pushed an update that crashed the majority of their Windows installed base in a way that couldn't be fixed remotely. It doesn't matter what the update was to. It needed to be tested. There is no way that any deployment pipeline that could fail to catch something that blatant could possibly be "understandable".

... and that kernel mode code shouldn't have been parsing anything with any complexity to begin with. And should have been tested into oblivion, and possibly formally verified.

This is amateur-hour nonsense. Which is what you expect from most of these "Enterprise Cyber Security(TM)" vendors.

... AND the users shouldn't have just gone and shoved that kind of thing into every critical path they could think of.
“Technical” detail report reads more like a lawyer generated report. This company is awful.

If I ever get a sales pitch from these shit brains, they will get immediately shut down.

Also fuck MS and their awful operating system that then spawned this god awful product/company known as “CrowdStike Falcon”
I’m unconvinced that a change to new management, government-run or not, would automatically get technically competent people hired and give them the decision-making power to do things right. Sure, it might, but it’s hardly guaranteed.
You might be surprised...
Understood, and I appreciate. I've been ruminating on solutions to a very similar-sounding problem for a few summers, so your practical experience is helpful, thank you!
> We were discharged at midnight by the doctor, the nurse didn't come into our exam room to tell us until 4am. I can't imagine the mess this has caused.

That's an extra 4 hours of emergency room fees you ideally wouldn't have to pay for.
> Why do you assume there is a requirement to access nodes directly, and why would that be a typical requirement?

I haven't made a case for it to be a requirement, but rather for direct access to be 1) trivial to achieve 2) more convenient than all of the (Vanilla JS) alternatives that I know of (attributes-based solutions).

> JSX and React’s refs

From a quick glance, I'm not sure this brings anything more than keeping a handful of node pointers around. But it should, at least in some ways, be better that attribute-based solutions.
> Estimates vary but a 1 in 4 chance in the next 50 years of a cascadia event is not a ridiculous estimate.

I won't ridicule it. It's a good example. But I'd follow up immediately with a non-rhetorical question of whether or not this is a risk too low to act on, or one too expensive to act on. If things are as bad as you say, then the only action that might truly be reasonable to mitigate it would be to just move far away. But that's also one of the most expensive actions to take... not to mention the crazy sunk cost fallacy holding over the tops of everyone's heads that will only ever get worse. Certainly spending an extra $200,000 building a new house (on top of whatever the general cost of building new), so that if you happen to be home and not at the strip mall or work or anywhere else, you only have a slightly better chance of surviving uninjured seems a little absurd. Probably better off to just take the hit to your career and the kids' school performance and move to the midwest at that point.

The threshold for many of these people is just set to a different point than yours. They have some understanding of the risk, but think that they merely have to endure that risk and hope to remain lucky.
You highly overestimate the capabilities of the average IT person working for a hospital. I'm sure some could do it. But most who can work elsewhere.
Works where archive.ph is blocked:

https://cc.bingj.com/cache.aspx?d=464600016483&w=i7yXBm7Gwof...
It really isn't easier at a sufficient complexity threshold.

Truth and reality cluster.

So hyperdimensional data compression which is organized around truthful modeling versus a collection of approximations will, as complexity and dimensionality approach uncapped limits, be increasingly more efficient.

We've already seen toy models do world modeling far beyond what was being expected at the time.

This is a trend likely to continue as people underestimate modeling advantages.
This is why the O&G backed SCOTUS has defanged the regulatory agencies.
anyone who has completed high school is perfectly capable of learning how to farm without modern technology, we aren't going to all freaking immediately die when we lose our iphones
I need to look into something called NEMSIS, but no not to my knowledge. Most states have injury records though.
No idea why you’re getting downvoted. A configuration file for code that runs in kernel space is usually effectively kernel code (it certainly was in this case) - obviously there are formal methods to allow kernel code to be configured in a “safe” fashion, but it’s obvious that’s not going on here.
>Anyone have any insights into why this doesn't seem to come with a rise in unemployment rates in the US?

It may be true that unemployment may not be high as is officially defined, i.e someone with a just a job.

But if you look closely, many hardworking and capable people find it hard to make ends meet, with the jobs they have. Basically the middle class is being hollowed out.
There are more criticisms of rust and c++ but sure.
Thanks. Yes, I use this every day in different situations. Lately I've been scraping a lot of different sites (ex. https://github.com/dongKenny/artveeScraper/issues/4 ) and using `lb du $site.db -D$depth` to view folder sizes at different depths and choosing what to download.

I also use it to sort through videos quickly. For example, to watch four videos at once:

lb wt --loop --cmd130 exit_multiple_playback --cmd5 'lb process-audio' --cmd6 'mv {} /mnt/d/library/vr/' -u size desc -m 4
"ants visually recognize their environment and combine it with counting their steps in order to get safely back home"

Wait, what? I thought ants followed pheremone trails?
>why PayPal still exists in 2024

Because they have a ton of users. People who don’t have credit card numbers saved on autofill so PayPal is more convenient. People also think it’s safer because the website doesn’t see your card number
Some of them might have saner rollout strategy and/or better quality control.
Where on this chart do you see PG&E needing to cut maintenance costs before the wildfires? https://www.macrotrends.net/stocks/charts/PCG/pacific-gas-el...
Light on technical and light on details.

Putting the actual blast radius aside, this whole thing seems a bit amateurish for a "security company" that pulls the contracts they do.
This "channel file" is equivalent to an AV signature file. Crowdstrike is the company, the product here is "Falcon" which does behavioral monitoring of processes both on the device and using logs collected from the device in the cloud.

I can see your perspective, but you should consider this: They protect these many companies, industries and even countries at such a global scale and you haven't even heard of them in the last 15 years of their operation until this one outage.

You can't take days testing gradual roll outs for this type of content, because that's how long customers are left unprotected by that content. Although the root cause is on the channel files, I feel like the driver that processes them should have been able to handle the "logic bug" in question so we'll find out more over time I guess.

For example, with windows defender which runs on virtually all windows systems, the signature updates on billions of devices are pushed immediately (with exception to enterprise systems, but even then there is usually not much testing on signature files themselves, if at all). As far as the devops process Crowdstrike uses to test the channel files, I think it's best to leave commentary on that to actual insiders but these updates happen several times a day sometimes and get pushed to every Crowdstrike customer.
If Windows wasn't as popular, then this might've happened to Linux to macOS instead. Blame CrowdStrike's incompetence, not MS.
Yeah, it's a bit more compared to our average monthly salary, but I'm not sure how much you understand our work and sacrifices to save up this $1,799. We've been running our startup without paying ourselves a single penny for 13 months straight, using our own pocket money for traveling and covering expenses the entire time. We've earned extra funds by developing websites for local people, and every bit of money we get from this goes straight into our bank account. That's how we've managed to save this amount. We have our goals, and getting external funds is like finding a unicorn here, so we want to reinvest in ourselves.
>In Massachusetts, Lost and Unaccounted for Gas (LAUG) is estimated per mile of pipe, rather than evaluated by regulators or even industry. It is a simple multiplication problem with little bearing on reality

Isn't both ends of a pipe metered? Even if not every pope is metered, at the very least there should be metering at the point of bulk purchase (eg. from a LNG ship) to the end user (gas meter at a home). How hard is it to compare how much is put into the pipe vs how much comes out?
MPV for Android seems to meet all your criteria for audio playback: https://f-droid.org/en/packages/is.xyz.mpv/
I lived in one of those food study centers after college. Most people there were pretty diligent about sticking to the program, but there was a big scandal when one guy was kicked out after discovering extensive cheating and several papers had to be retracted.

We were allowed out - I had a full time job, but couldn't eat or drink any food not provided by the center (we took a radio-isotope tracer with food, and had to collect our poop). It was quite interesting :_)
This sounds a bit like someone just got ran over by a truck because the driver couldn’t see them so people ask why trucks are so big that they’re dangerous and the response is “you just don’t know how trucks work” rather than “yeah maybe drivers should be able to see pedestrians”.

If modern medicine is dangerous and fragile because of network connected equipment then that should be fixed even if the way it currently works doesn’t allow it.
It's not just that. A large portion of IT people who work in these industries find Windows much easier to administer. They're very resistant to switching out even if it was possible and everything the company needed was available elsewhere.

Even if they did switch, they'd then want to install all the equivalent monitoring crap. If such existed, it would likely be some custom kernel driver and it could bring a unix system to its knees when shit goes wrong too.
In my personal experience, automated speed cameras are way more effective than traffic calming.
So in that case you setup a NAS server that it can push the reports to, everything else is firewalled off.

Its just laziness, and to be honest, an outage like this has no impact on their management reputation as a lot of other poorly run companies and institutions were also impacted, so the focus is on crowdstrike and azure, not them.
What are the material requirements for this proposal?
>This guy is pretty smart, I wonder what he fails on in the interview process?

Smart interviewers hire who are as smart or smarter than them. Mediocre interviewers generally hire people who are worse off than them. The vast majority of interviewers out there are either mediocre or terrible.
US 287 between Fort Collins, CO and Laramie, WY is notoriously dangerous and your map certainly bears it out. Click on any random stretch and it is absolutely full of pins :( Crazy because it is a wide open rural highway for the most part where you can see for miles. But it's only one lane on either side which leads people to try to pass recklessly. Plus there are some sudden turns and changes in elevation. Connecting two college towns probably doesn't help, either.

Thanks for sharing (and good luck keeping the site up). It's the definition of morbidly interesting.
That doesn't sound very special though, sounds like something every animal does.
Wonder if this can be fixed with role playing, when user is just one person and his input is limited to what his character can do. like

There are two persons in the room: Assistant Bob and customer Tom. Bob is trying to help customer. Here is their dialog:

Bob: .. <waiting for model to fill, something like "Hello, how can I help you">

Tom: .. <waiting for user>

If user starts mumbling about instructions it's limited to only Tom. To make sure we can add some offset to his text, so that model can easily distinguish it.
Far and away the most entertaining of the possible root causes.
Traditional style and my own preference dictate that indentations separate paragraphs, so the first paragraph after a non-paragraph element (like a heading or a list) should not be indented. This is a common typographic convention, but to do it in CSS is impossible in the general case without dozens, maybe hundreds of selectors to handle every special case. In Typst, you just give paragraphs a first-line-indent, and they know when to use it.

p+p {text-indent:5em} seems pretty simple? I just did a quick test and it seemed to work when I broke up a few paragraphs with an h1, a ul, and a div. This isn't anything esoteric, it's CSS2 stuff that's been working for twenty years. Though "typst breaks lines 500% better than most browsers" is a compelling argument on its own.
But spent the time to comment on it in an external forum lol.
Could also have to do with increased rates of diagnosis stemming from better access to care through… D2C telehealth providers?
>China and India emit significantly less CO2 per capita

Which would be great if CO2's heat trapping properties depended on the per capita emissions of their nation of origin. Unfortunately CO2 molecules don't know where they came from and can't adjust their heat trapping properties accordingly, and instead it's about absolute amounts as ppm of the atmosphere.

But there's a silver lining for China and India - which is that even small reductions in their per capita emissions cash out as massive reductions in absolute terms.

So in terms of bang for the buck per-capita wise, they are the top candidates for emissions savings.
I read that curl recently added sigv4 for what that’s worth[0]

0: https://how.wtf/aws-sigv4-requests-with-curl.html
I think the editors are right that overconfident statements by people with no particular expertise are a problem. But the thing I’m wondering though is… well, have you seen the Internet? There’s no way to get them to stop.

Inevitably, due to world events, people are going to be suddenly become curious about things that only experts previously cared about. They’re going to need explainers that go beyond the basics, however deep they want to go.
Very cool. It would be awesome if you could lift some of the major contributors of the accident/death up to the top (wet conditions, driver was drinking, driving too fast, etc).
Also, there's no indication when a pin is 1 or multiple deaths
Also a lot of the passionate security people such as myself moved on to other fields as it has just become bullshit artists sucking on the vendors teat and filling out risk matrix sheets, but no accountability when their risk assessments invariably turn out to be wrong.