skysight-inc/HackerNews huggingface dataset:
Show HN: I built a platform to your improve efficiency and response times
I am excited to finally be launching PromptlyReply!

I built PromptlyReply due to a pain point that I personally experienced. As a former customer service agent, I constantly faced the challenge of managing repetitive responses. As my list of pre-set messages grew, my efficiency and response times began taking a hit. I realized there had to be a better way, and that's how PromptlyReply was born!

Key features:

Categorise your messages

Simply click the required message to copy the text to your clipboard

Search through categories and messages to quickly find the correct message

Copy history with filters to analyse trends

Teams with shared categories and messages to maintain consistency across all employees

Chrome extension for more convenient access

Shoutout to Shipfast - This allowed me to quickly began working on the most important aspects of PromptlyReply.

I would love to hear any feedback you have!

https://promptlyreply.com/
1+ Astro.

I actually built a low-code blog template using Astro for my partner and friends [1].

I set it up so you can publish a github pages site from your browser (using a dev container), or you can just drop in markdown files into vscode. It's not quite no-code, but I think if I could add a simple UI it in theory could be.

[1] https://github.com/easy-astro-blog-creator/easy-astro-blog-c...
But CrowdStrike is security as well?
Any tldr for “deep modules”?
Let me introduce you to Ernest young. Still in business

https://en.m.wikipedia.org/wiki/Ernst_%26_Young
given it's a kernel module (AFAIK), how could that be if it were different OS's?
Did any large company clean their datacenters after they stopped using Solar Winds?
Are they trying to help any cause other than their own? Also - don't generalize based on nationality, please. These behave like this, others behave differently. This changes nothing about the war in Ukraine or Ukrainians.
CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft

https://www.theverge.com/2024/7/20/24202527/crowdstrike-micr...
> Many users point out that some critical systems, like elevators, could be controlled with simpler and more reliable solutions.

All too true. But between the "we can sell far more stuff if we convince people to replace things that still work fine" of Modern Capitalism, and the "I can brag about all our Shiny New Stuff, and it ain't my money" of Modern Executives...
I find this topic of fermented foods in different cultures pretty interesting. Surely they enabled people to survive a rough winter with food shortages. From an evolutionary perspective, it could be said that those peoples who didn't learn to produce fermented foods might've perished from starvation. It is an art that shouldn't be lost.
I'm more confused because I have never, ever encountered a lift that wasn't just some buttons or joysticks on a controller attached to the lift. There is zero need of more computing power than a 8-bit microcontroller from the 1980s. I don't know where I would even buy such a lift with a windows PC.
I once engineered a highly secure system that used (shielded) audio cables and amodem as the sole pathway to bridge the airgap. Obscure enough for ya?

Transmitted data was hashed on either side, and manually compared. Except for very rare binary updates, the data in/out mostly consisted of text chunks that were small enough to sanity-check by hand inside the gapped environment.
The statement is worded to imply CrowdStrike is working to get everyone’s systems back up. In reality it’s local IT that has to remediate the problem.
Why prefer unit testing through layer entrypoints?
I've found this topic to be quite contentious on my team - solitary vs sociable. Created this article to express my personal preference for a particular kind of sociable unit tests (effectively imposing an upper bound on just-how-sociable they should be).
It would only need to be pulsed when a cigarette is located.
Yes, in India, the law mandates that ECNs (electronic contract notes) need to be digitally signed with a valid certifying authority. While it's true that XML/docx/xls files could also support digital signatures, but I think PDFs are prevalent and also allow clients to verify this on their end, quite easily.
He's a billionaire and was a CXO at McAffee during another breach/hack. Go after him. We'll find out how many people died in a few weeks/months.
Golang, for one. If you have a diamond dependency problem where two libraries want to use a common ancestors that's incompatible, you're screwed, but otherwise you've got a nice merkle tree of dependency versions built into the tooling.
I know it isn't just antivirus. I was merely drawing a simpler analogy.
Exactly. I wonder/think that reports from medieval and early modern age London were much worse.
Too much javascript for everything (front & back) seems easy but for new developers it kind of blurs the lines between what should be on the server vs the client.
There's doesn't appear to a whole lot of comments or documentation in the code. Is this normal for Zig projects? Does it have an equivalent of Sphinx to build docs from code?
If CrowdStrike's system wasn't able to prevent a kernel driver thats all zeros from getting by, you can be sure a malicious payload would have breezed right through.

There was no validation, phased roll-outs, almost certain no multi-person verification. I'd bet dollars to donuts this was pushed out by a low/mid-level functionary that could be carried out by dozens if not hundreds of employees. There may have not been a security breach, but it was still one minor security breach, distracted open laptop in a cafe, or disgruntled/paid-off inside actor away from absolute armageddon.

It wasn't an attack, but it was a raccoon who came in through an unlocked screen door in the back of Fort Knox.

If someone had used this to deliver a ransomeware package, they'd be buying a mega-yacht right now.
Relevant comment from yesterday's Crowdstrike mega-thread:

"Crowdstrike did this to our production linux fleet back on April 19th, and I've been dying to rant about it." [1]

Continues with a multi-para rant.

[1] https://news.ycombinator.com/item?id=41005936
And CrowdStrike accurately point all the facts.

Seems like they're pretty good at what they do. Maybe that's why there are so many critical infrastructure depends on them.
> 3) set legal speed limit at 1/6th the top speed of most vehicles

> 4) enforce strict financial penalties for operating one’s obligatory high-powered vehicle at more than 1/6th its maximum speed.

Most consumer cars are going to have a hard time at 120mph, if their tires are even rated for it.

So then you're claiming that most speed limits are 20mph.

Which they're not.

And then, I'm not sure? Should it be legal to drive suburban streets at triple digit speeds?

I am not sure what you're trying to get at, beyond "we should be able to use our cars to the limit of their capability, even if it exceeds our own as a driver".
Yeah, the problem is that these mitigations require the developer to be context aware, ”server-only” only saves you in the positive case where you correctly tagged your sensitive code as such. The default case is to expose anything without asking. I have also seen developers simply marking everything as ”use client” because then things ”just work” and the compiler stops complaining about useState in a server context etc.
Product quality is on freefall: from aircraft to software. Lack of QA is the norm nowadays as everyone just care about the extra penny.
Highway reststop restrooms have been some of the cleaner restrooms I've been in. Gambling between them and a random fast food bathroom, I'd pick the reststop.
What part do you think is highly rational in theory? The concentration of wealth into fewer and fewer hands? The destruction of the renewable natural abundance?

And what's "best possible" supposed to mean? That we have reached the absolute highest form of social organisation? Even if we lived in something much closer to a utopia this would be hard to defend scientifically.
+1 One of the only books on design which actually is backed up by data.

I had been misled by the Ruby ecosystem earlier in my career to do clean code + refactoring + tdd and this book + actually looking at complex systems such as games made me realize that coding is not about abstractions but it is about data and what the computer needs to do.
Need a “crowdstrike.sucks” or maybe a general “it.sucks/{company}” to gather all of these company misgivings.

Avoid this company at all costs. Move to competitors which offer the same “audit passing” requirements
Then what would all of those people working off their community service hours do?
> why aren't those built on Linux or even OpenBSD?

Or even ChromeOS which has insane security.

> but it still doesn't work.

It works momentarily but there will always be 0-days the people who make the exploits intimately know the windows API internals.
And it was random people on Reddit providing strangers with support to quickly recover.
Let's tamper down with the American imperialism. We see how well that's been going in Ukraine and the Baltics.
That might be okay. Sand can be sifted and gravel and cigarette butts separate by density with shaking the container. Sand and pebbles can then be returned to beach. (Sand depletion is a concern in many areas.). Robo-dog could return to a dock which automates part of that separation process. Then return the sand to the same spot. Cleaning might be a concern (spreading spores of invasive species) if used in different areas.
They are a SASE provider, I am assume they offer a beyond Corp style offering allowing companies to move their apps off a private VPN and allow access on the public internet. Probably have a white paper on how they satisfy zero trust architecture.
The answer is somewhere in-between:

A researcher would have a hard time getting an IRB to let them build a study at a jail where the jail treats a random half of the inmates in a different way. And judicial oversight might not allow that, either. Further, it's hard to control adequately.

We're going to be stuck with time series and case control studies of changes made haphazardly. It doesn't mean we can't get better, but it's a tougher hill to climb.
One could, but in the old days when vulnerabilities happened, they didn't hit everyone at once.

And if it hit your system, the vendor's first response would be "are you on the latest update? that's been fixed."

(Unless the latest update IS the problem. In that case, being lazy was a good defense.)
I'd suggest github pages or substack
The economic consequences for doing things wrong are less than the profit made.

Until that changes, nothing else will.
I miss the Kimchi quesadillas and tacos of Koreatown...

It's largely ultra gentrified into just being another over priced neighborhood, but back in 2010 it was something special...
Zig has a documentation generator that uses specially formatted comments, similar to godoc or JSDoc.
Not sure if you're unaware or don't care, but sea salt contains microplastics. You can get untreated alpine salt (Alpensalz) pretty cheap (presuming you live in or around Germany)
> Quite a few other developed countries than ours are able to successfully rehabilitate prisoners, and have a very low rate of recidivism.

I think we can learn quite a bit from those places, and do better. I don't think the cruelty of the system helps at all.

But I don't think that the problems that the US faces with criminality and criminal behavior are exactly the same as what other developed nations face. Just looking at different outcomes isn't super compelling evidence.
By the time my IT guy got to me, I knew what the solution was, I just needed a decryption key.
There's something missing here... You know nothing about Crowdstrike (as per your own statement) and critical infrastructure depends on them.

That two things tell us something about your knowledge;)
> ...weeks later had a root cause analysis that didn't cover our scenario (Debian stable running version n-1, I think, which is a supported configuration) in their test matrix. In our own post mortem there was no real ability to prevent the same thing from happening again -- "we push software to your machines any time we want, whether or not it's urgent, without testing it"
Mini-JVM: Educational Implementation of a Simplified Java Virtual Machine (JVM)
Deep module - simple interface, complex functionality

Shallow module - interface is relatively complex to the small functionality it provides. Shallow modules don't hide as much complexity.

https://github.com/zakirullin/cognitive-load?#too-many-small...

But I highly recommend picking up the book :) It is an enjoyable read.
“No one noticed” which is a cute way to say that Crowdstrike suppressed the media noticing. The day of the bug, the HN post had comments about how people tried reporting the issue months ago.

Even the article is written as people noticing. So who didn’t notice? Or were the issues not popular enough to be not ignored?
WordPress tbh.
Penalty 1: stock buybacks forbidden

Penalty 2: separate the company into two, separating financialization procedures from manufacturing ones.

Penalty 3: greenlight a union by default.
I suspect the project has broader goals, but presenting it as solving a problem familiar to most (i.e. litter) is mostly for the exposure that would bring.
Interesting to see how this was caused. Was it moving a person from the sales org to CTO? Aggressive cost cutting like laying off QA or moving from the valley to Austin?

Company is done like Solarwinds.
I did those 100 exercises to learn rust.
How is that a problem of media?

Isn’t it more of a problem of the population at large?
Incapacitation lasts just for a short time. If you don't rehabilitate prisoners, you're just going to have the same problem again a few years from now. And we don't have the capacity to lock up everyone forever.
ive said this before but we have min-maxed our economy to optimize for profit. We may be entering the reaping phase of that now.

its the same reason we cant make enough artillery shells for ukraine or onshore chipmaking or build ships.
Ukraine depends a lot on American services. Russia is not at war with the US.
And cheap both short and long term. Microsoft has 10 year lifecycles you don't need to pay extra for. Linux you need IT staff to upgrade it every 3 years. Not to mention hiring engineers to recompile software every 3 years with the distro upgrade.
Agreed, especially for a local first app.

Making the app work without an internet connection is step one. Making it reparable without an internet connection is step two.

Step two is blocked if you can't keep the code for all of the app's dependencies near enough at hand such that its still accessible after the network partitions.
What does China do with drug addicts? Do they just not have any because they so effectively prevent drug trafficking?
I'm not a Rust expert but wouldn't you pick some ("null-safe") type that can't be null in Rust? A reference?
This is all a consequence of firms being able to contract out of consequential liability.

Perhaps we should render such clauses unenforceable, as we do with contracting out of consequential loss of life.

Or at least limit them.
FYI regarding S1:

https://www.crn.com/news/security/crowdstrike-poaches-two-ex...
As cool as this is, I can't help but think how pointless the goal itself is.

XDNA 2 will have 12 TFLOPs, roughly matching the 96 core Threadripper Pro 7995WX at a much lower price point.
I'm not all that familiar with the Zig tool chain.

Am I understanding correctly that this is a regular C compiler used as a component of the Zig compiler chain allowing compilation of C files alongside Zig? Or does Zig generate C and therefore need a C compiler under the hood?

Looking at the documentation suggests it is the former, not the latter.
>Good e-governance is incredibly difficult

And yet Estonia, a former impoverished communist country significantly less wealthy than Germany did it, and did it well. But no, Germans always have a laundry list bingo of FUD excuses as to why it can't possibly work. The bingo usually starts with "but m'uh privacy!" even though BAMF, Schufa and every law firm and government agency remotely interested in you can find out everything about you if they want to fine you for something.
I never liked tcl but the implementation was definitely small, which mattered more back then than it does now. Does anyone still care about it?

These days what we really need is an easily embeddable Python. Guile is very nice if you want a somewhat fancy Scheme system, but it got out of control if all you wanted was something light and embeddable.
Does it benefit from having four legs, other than to make it look unnervingly doglike? It seems like a robot spider might be more efficient, if not also more terrifying.
Re: Compensation, as per MarketWatch:

"Kurtz’s total compensation was 237 times that of the median compensation of CrowdStrike’s employees and was more than that of five of the CEOs of the group of tech companies known as the Magnificent Seven.

The only more highly compensated CEOs among that group last year were Apple Inc.’s AAPL, +0.06% Tim Cook at $63.2 million and Microsoft Corp.’s MSFT, -0.74% Satya Nadella at $48.5 million.

Jensen Huang, CEO of Nvidia Corp. NVDA, -2.61% — which saw its stock soar 214.9% in the fiscal year through January — received $34.2 million in total compensation last year."
I see no wiggle room in what was said. They are talking specifically about the building that was said to be a diesel plant and are saying it isn’t one.

There is no diesel plant there regardless of how much people want there to be. It’s up to you to prove that there is a diesel plant. It’s just so weird that people want there to be one there, as some sort of climate change denying “gotcha” or something.
Windows NT Server pretty much stomped Netware, so you seem very confused. Are you thinking of OS/2 LAN Manager?

NetWare was stable running vanilla file/print services (just don't load the AppleTalk module!), not so good with database services and so on.
Predictive Processing Solved My Wrist Pain
Throughout this war, 62k Russians are certainly KIA because we know their names and faces [~], and estimates of total Russian KIAs vary from 120k from a Russian outlet [^] to 565k by Ukrainian Armed Forces [_].

In comparison, total KIA losses of Soviets in the Afghanistan war were 14k-26k, and Americans in the Vietnam war lost 58k KIA + 150k WIA throughout 10 years.

In short, this is the biggest war in Europe since WW2. But hey, it's not war enough because not enough Ukrainians are dead or something, idk.

[~] https://t.me/pechalbeda200

[^] https://meduza.io/en/feature/2024/07/05/a-new-estimate-from-...

[_] https://t.me/GeneralStaffZSU/16238
https://zig.guide/build-system/generating-documentation/
I've been doing something similar, and it looks like you've managed to solve a problem I've been unable to: how did you get theorem and section numbering to work right?
One of the things this spends some time on that was already obsolete in 2011 is using a pool of locks. In 1994 locks are a limited OS resource, Python can't afford to sprinkle millions of them in the codebase. But long before 2011 Linux had the futex, so locks only need to be aligned 32-bit integers. In 2012 Windows gets a similar feature but it can do bytes instead of 32-bit integers if you want.

If a Linux process wants a million locks that's fine, that's just 4MB of RAM now.
JackC mentioned in the parent comment that they work for a civic tech lab, and their profile suggests they’re affiliated with a high-profile academic institution. It’s not my place to link directly, but a quick Google suggests they do some very cool, very pro-social work, the kind of largely thankless work that people don’t get into for the money.

Perhaps such organizations attract civic-minded people who, after struggling to figure out how to make the product work in their own ecosystem, generously offer high-level advice to their peers who might be similarly struggling.

It feels a little mean-spirited to characterize that well-meaning act of offering advice as “insane.”
> (5-10x slower last I checked)

This was a thing around 2 years ago. Nowadays speeds is the same or in favor of Rust, depending on the benchmark in question.
You (unintentionally) drop your house key in front of your door. Now we can all freely enter your house! It can't be trespassing with the key sitting right there, can it?
That sounds ominous. So sorry.-
I'm not arguing that Linux or Mac need no protection.

There are serious threats to any Linux machine. And if you include Android, there are probably far more Linux machines out there. Hell, including their navigation, router, NAS, TV, and car, my 70+ yo mom runs at least 5 Linux machines at her home. It's a significant target. And Mac is quite obviously a neat target, if only because the demographic usually has higher income (hardly any Bangladeshi sweatshop worker will put down the cash to buy a MacBook or iphone. But might just own an Android or windows laptop)

I'm arguing that viruses aren't a threat, generally. Partly due to the architecture, partly due to their useage.
One is just embarrasing, the other might get you on a sex offender registry.
(What was that saying again "privatize the profits and socialize the burdens"?)
I guess Lua remains the chief goto for light embedded scripting environment, doesn't it?
The dlang D compiler includes a full C compiler, so you can mix and match C and D code. You can import C code from D, and D code from C.

dmd hello.c
./hello
hello world

This helps enormously in binding to existing C libraries.
I am very happy with Zola. Every SSG has its own shortcomings, for Zola I was initially bothered by lack of 'proper' footnotes and the insistence on having to have frontmatter, but I've yet to feel that I cannot do something really. The docs can be a touch confusing imo, but they're written with care.
There needs to be more resources for self-learning. Solutions need to be provided for problems, with clear explanations. It's a different mindset from a formal academic setting, where there's a strong focus on cheating prevention.
They are refugees. They are not entitled to the same quality of life as they enjoyed in their own country. Nobody says they can't have it, but trying to maintain it by using digital footprints of 299 deceased people and stalking living persons while spending a lot of cash on toys is not going to help them last long in the UK. They need to accept what is obvious--they are refugees and may have to adjust their own expectations for a while. It helps to have friends when you are a refugee, but so far they upset people and have a permanent record on the internet linking their name with this idiotic stunt.
Yes, also the node bindings https://github.com/tursodatabase/libsql-js
Funnily enough crowdstrike.sucks is already registered through CSC, the same fancy corporate registrar which handles crowdstrike.com.

The people behind .sucks have a great racket going, every big brand has to pay $300/year for their name dot sucks just so nobody else can get it.
I was going to ask for more examples, but I found https://ilus.ai/illustration/hand-shaking

They are nice, but they don't show the "consistent" feature. Can you add a few examples that show the same persons in different places?
I believe lua is often used in this role these days. I've gotten the impression that it is light and easy to integrate, but I haven't tried it myself.
It doesn't seem inconsistent to say "you can't put a price on a human life" and also believe that it's possible to calculate the economic impact of a human death.

For example, saying that a particular individual's life is worthless is very different from saying they have no dependents.
*strikes
They are higher, actually, especially in this case and otherwise by definition. The problem is that most of the cost ends up externalized.
One second to compute the largest Fibonacci number I can [video]