skysight-inc/HackerNews huggingface dataset:
I researched this a bit and it looks like the actual slur is "Kaffir", which is also spelled "Cafri" and comes from the Muslim term for "non-believer". And somehow this word was chosen to be used as a slur and is considered highly offensive in South Africa. As an American, I'll draw a similarity with the "N" word.

But is the plant name racist in the sense that when they named it, they were picking the slur purposefully? Or does the word simply _sound_ like the slur?

Even the latter can be enough if you consider what it would be like if name had the "N" word - or even something that had the same sound. You would literally be unable to use the plant name out loud. But it would be important for publications covering this to not call it a "racist plant name" as that really depends on how the name was given.

https://en.wikipedia.org/wiki/Kaffir_(racial_term)?useskin=v...
Yes because compliance requirements say “EDR must be installed on all machines”.
> Software controlling flight systems in planes is already held to very high standards, but is enormously expensive to write and modify.

Here's something I don't understand: those jobs pay chump change compared to places like FB and (afaik) social networks don't have the same life-or-death context
I can name two: Raymond Chen and Mark Russinovich ! I don't know if Mark is still up-to-date into the latest Windows internals now that he is the CTO of Azure but Mr Chen sure is.
I sent them your contact info, pretty sure they will be asleep for the next few hours
Amusing conspiracy theory:

1. Quietly compromise enterprise IT vendor X.

2. Sockpuppet post on /r/wallstreetbets, suggesting shorting X, for any reason (doesn't matter why).

3. Place big bet against X's stock.

4. Use your compromise of X to accelerate a big public failure by X.

5. Profit, and the WSB post by your sockpuppet is your plausible reason for shorting X, and you're only one of a crowd who did so.

6. Bonus: sockpuppet account becomes WSB folk hero, as others also profit from tip, which is political capital you can spend later.
We tend to want to make bad things harder and good things easier using the government, so yes.
The uncomfortable resemblance to slavery and other obviously problematic aspects (https://en.wikipedia.org/wiki/Kids_for_cash_scandal) of it probably has a lot to do with it getting such disproportionate attention. (The vast majority of prisons are still public.) That and it offers an easy, feel-good solution that unfortunately doesn't address systematic problems: just ban private prisons.
> WHY...are these things connected to the internet

Because the manufacturer makes sure they don't start up if they're not. Otherwise how else would they be able to spy on you?
This might be a good time for folks to go back and watch the first episode of James Burke's Connections: The Trigger Effect

https://www.youtube.com/watch?v=NcOb3Dilzjc

Interconnected systems can fail spectacularly in unforeseen ways. Strange that something so obvious is so often dismissed or overlooked.
Government services don't necessarily need to pay for themselves but they do need to be justified and paid for. "I want that" is not adequate justification and "any cost is acceptable, just take it from the rich or the businesses" is not an adequate payment scheme.
I would guess that I less safe for work domains, putting something (phallic) up is usually followed by a name for an orifice.
Can you explain what went wrong?
https://www.cbsnews.com/news/nsa-microsoft-vulnerabilities-m...
Yes, obviously, but timing is everything.
Sort of "Poke with a stick". Some contractors are filing leans against SpaceX assets in hopes of getting money owed.
The guy that was upset younger people were reading books instead of memorizing things, and believed that would make people dumb, and literally ruin the next generation of the world?

Yeah maybe he wasn't infinitely wise on all things.
CrowdStrike is so invasive that it needs firewall exceptions. It does a lot of the actual antivirus work in the cloud. It's a security nightmare.
I doubt it was shipped from the factory with CrowdStrike, and if they had enough access to install it, they have enough access to fix it.
Looks pretty good, logo needs some work though. My parents love Linux mint so please keep up the good work!
It is Teams, not Zoom. I'm in the conference with the federal judge and the government lawyers right now. Currently they are maintaining their stance that they are unwilling to fix constitutional violations. They'd rather go to trial and lose and pay my lawyer the 7 figure sum in fees he's owed, than agree to fix the conditions.

This is the sort of people that run our jails and prisons -- and spend your tax dollars.
Swear. Gonna retire to the English countryside one day and just dump everything and open a pub:

"The Nipple & Clit"
A tiny bit of thought about your situation IMO should lead anyone to conclude that you just first-hand experienced the fallout of today's nightmare, and then took a step back and realized you were likely one of millions if not billions of other people experiencing the same, and relayed that thought in terms of immediately understandable loss. Someone else might see "wrong" but I saw empathy.
Doesn’t rebooting into safe mode with network fix the problem? (Crowdstrike is not running but updater can run and get the fix)
The answer is political, not as much technical. Anyone worth their salt in ITsec should push back hard on "checkbox compliance" and lobby accordingly in a standards body or regulator responsible for their vertical.
I've had NVidia drivers bluescreen Windows 10 and 11 machines within the past six months.
Neither of these names are ironic. The name Palantir was chosen to remind the company of surveillance's potential for abuse. Anduril was meant to reference th idea of shaking up American defense, disrupting an industry that's become dominated by a few big players on cost-plus contracts that routinely overrun. Because Anduril is the new sword reforged from Narsil.

That Tolkien was a world war veteran doesn't make it any more ironic. The way you o avoid wars is to deter them: countries aren't selfless magnanimous institutions, they need to know that they'll lose in war in order to keep them from trying to wage it.
Because Microsoft is giving away licenses to unis, esp in developing countries. IT jobs are seen there as a way to earn a good living and you get hordes of people who know nothing but Windows. That's how you get into the situation where most of the toolchains for embedded systems run on Windows, software for embedded systems is written on and for Windows, and so on. And then, one botched update fucks up everything.
And charge you
It is a british phrase. I think the most commmon usage is 'put a rocket up their arse, or 'put a rocket under them; It's similar to 'light a fire under'. It means to suggest getting somebody who has been previously sluggish in acting, to act quicker.
it's the kerosene on the bonfire equivalent of "step on the gas"

i.e. "seriously get SpaceX moving (hopefully at speed) on the issue of unpaid bills"
Comprehensive Guide on Golang Self-Upgrading Binary and Mac Package
As a tester, I'm frustrated by how little support testing gets in this industry. You can't blame bad testing if it's impossible to get reasonable time and cooperation to do more than a perfunctory job.
> Qubes is great but no desktop GPU supports virtualization.

Intel 12th-gen and newer iGPUs do, and AFAIK it can be unlocked on certain Arc cards as well but details are fuzzy.
You seem to know some inside info... Source?
No it doesn't. "Wrongful conviction" is a term of art with a very specific meaning here. Likewise "fees".
Looking at the contents of c:\windows\system32\drivers\crowdstrike suggests it does all sorts of weird shit right down to injecting itself into UEFI and futzing with firmware. It's literally in everything.

Unfortunately "security" folk these days are box ticking fuckwits and this product brief ticked all the boxes. They do not understand any more traditional methodologies other than "install these magic beans and action the reports".

Invest in better software and network architecture and DR strategy instead.
> We’re going to see more of this

If history is any guide, no legitimate lessons will be learned, but mitigation strategies will be put in place that actually make everything worse and ensure that the next catastrophe will be even more catastrophic.
If you are interested PEP703 describes the scenarios pretty well:
https://peps.python.org/pep-0703/#motivation
Well, citations don't really matter when the topic in question is regarding Florida law and you're citing Colorado law.
Yes! That should be one of the roles of a governments.
Not trust Microsoft to be the operating system of the modern life?
Great tool for bypassing paywalled articles. https://routinehub.co/shortcut/19150/
Even if you've trusted too many people, and been burned, we should design our systems such that you can revoke that trust after the fact and become un-burned.

Having to boot into safe mode and remove the file is a pretty clumsy remediation. Better would be to boot into some kind of trust-management interface and distrust cloudstrike updates dated after July 17, then rebuild your system accordingly (this wouldn't be difficult to implement with nix).

Of course you can only benefit from that approach if you trust the end user a bit more than we typically do. Physical access should always be enough to access the trust management interface, anything else is just another vector for spooky action at a distance.
Emmer Wheat is so much better than regular wheat.. but a lot more expensive. I hope it becomes far more common
Warfare is an inherently competitive endeavor. Which is going to win: an army armed with stun batons and pepper spray pitted against an army with machine guns, tanks, and artillery?
> because of Windows’s silly pessimistic file locking

To be honest I prefer that over the #nix way of doing things. In Windows, you have exactly one file any given path can refer to - in Linux or Mac, it may depend on which directory's inode is seen as the root node by your process (e.g. chroot or container), or whether mounts are at play, or a file/directory got deleted and replaced by something else.

Particularly the last scenario keeps tripping me every once in a while.
Not the OP, but my library management is 90% tagging, format conversion, metadata fetch and editing, and format tune-up (font subsetting or stripping fonts, fixing covers, etc.). Virtual libraries keep me organized based on tags.
it does. several crowdstrike alerts popped when i was remediating systems of the broken driver.
> not the person that pressed the button's fault

You know that, and I know that. The people who will ruin his life starting today do not know (or care).
GP referred to "processed," which could mean a few things. I interpreted it to mean that the images were not recording correctly locally prior to any upload, and they needed assistance with that machine or the software on it.
... well, yes, yes of course. And if I try to be serious on a late Friday night (it's almost 20:00 here), the obvious solutions is to have something like eBPF in/for the Linux kernel (which has a verifier[0]).

And security vendors should follow "secure by design" principles. Yes, I know a try-fucking-catch might be too advanced, and uh oh kernel code is hard because unwinding is costly. But guess what else is also not cheap. (Okay, I seriousness failed.) But still. This is fair and square in the "this should never happen" scenario. It's an automatically downloaded plugin or whatever. (CS can call it "content update", but von Neumann is already calling FedEx to send them a pallet of industrial grade bitchslap.) And if the plugin loader cannot gracefully fail plugin loading, then it should obviously come with the appropriate audiovisual cues[1] so sysadmins know what to expect.

[0] https://docs.kernel.org/bpf/verifier.html

[1] https://www.youtube.com/watch?v=Dv-2dzD9F10
Owner of https://parture.org here; we should work together. Nice work!
Yes, monocultures are disasters in the making.
CrowdStrike today has shown why it's absolutely crucial to test code before deployment, say no to YOLO deployments with LLM powered software testing https://github.com/codeintegrity-ai/mutahunter
I guess my view of consciousness is different -- all living beings having consciousness, but perhaps not specifically in the form of the human mind or intellect.

These are ancient ideas. Maybe this century will validate some of those.
Why forking is bad (2020)
I don't think you're going to see as many lawsuits are you think. Most of these contracts probably state that they had to follow reasonable precautions for business continuity and data recovery. Having Crowdstrike in the path seems to have been a reasonable and potentially best practice before today's outage.

I don't think that companies are going to be held liable at all.
They would release the update in a testing/sandbox environment first before rolling out kernel-level changes to every computer on their network.

They're the same team who mandate you use a 3-year-old browser version and 5-year-old OS, because you can't be trusted to manage your own updates, so they do know the idea.
Leave your reddit nonsense over there.

More discussion here: https://news.ycombinator.com/item?id=41002195
No, but its a warning to the next guy/megacorp:

Don't do that, or you'll be dragged before the greatest obnoxious and self-aggrandizing body in the world for lengthy dressing down that probably affects the stock price.
I would not call Crowdstrike ”non-malicious”. It’s incredibly incompetently implemented kit that’s sold to organizations as snakeoil that ”protects them from cybercrime”. It’s purpose is to give incompetent IT managers to ”implement something plausible” against cyberincidents, and when an incident happens, it gives them the excuse that ”they followed best practices”.

It craps the users PC while at it too.

I hope the company burns to the ground and large organizations realize it’s not a really great idea to run a rootkit at every PC ”just because everyone else does it”.
Ah, the joys of trying to come up with creative ways to get feedback from your code when literally nothing is available. Can I make the beeper beep in morse code? Can I just put a variable delay in the code and time it with a stopwatch to know which value was returned from that function? Ughh.
I wanna preface by saying I'm a huge linux fan, but a couple things:

1. I'm not sure what kernel optimizations for CERN's x86 machine have to do with ARM Apple Silicon. I get that in abstract improvements "could" trickle down from that but once again without any performance benchmarks that is the definition of speculation.

Yeah, improvements and bug fixes get upstreamed but not every algorithm is going to optimized for the architecture of Apple Silicon.
They didn’t force anyone to use their software in critical infrastructure. The customers deploying the software as part of critical infrastructure should take the necessary precautions or insist on a contractual agreement that makes the vendor liable for any causally related failures of the critical infrastructure. The mistake is that so much software is being put into use without any substantial liability. Doing so would also make software much, much more expensive.
I'm drawn to the warning at the top about it being a long post that clients may struggle with.

Realistically, it is not a long post. There is not a lot of text there. Sure it's long for a tweet, but it should be a cakewalk for a modern computer rendering text.

Yet for my 2021 flagship smartphone, rendering these 142 lines of text is a nigh impossible task. The page lags all over the place and my phone is now hot. What on earth is going on with this webpage? What colossal task is Mastodon doing in the background that isn't related to rendering this text?
I love this app! I recently went shopping for Linux readers and came right back to Foliate for its common sense and feature-richness beneath a clean UX.
ThinRoot: Buildroot Kiosk Systems as Linux Thin Clients on NUC and RPi
Looking for a simple email designer which will give us compatibility in all email clients. Surely will test this in this weekend.
That's true, and for the record I'm not against EVs, I'd love to see cheap EVs take off in the US. I have a Chevy Bolt EUV myself.

Also, I apparently need to correct what I said about Trump being more bearish on Chinese EVs. From Bloomberg today: "Trump Welcomes China to Build Cars in US in Departure From Biden."

https://www.bloomberg.com/news/articles/2024-07-19/trump-wel...
i meant how did you prepare the dataset for training
RP2040 is just a microcontroller vs the "full computer" of a normal pi board. This is the distinction people are usually making when they say RP2040 isn't a pi.

This board is a full intel computer plus a rp2040 driving the pi-style GPIO pins. It should basically be able to do whatever a pi can do.
I suppose we wouldn't know whether an audience for those ideas exists today because they would be blacklisted, deplatformed, or deamplified by consolidated authorities.

There was a quote last year during the "Twitter files" hearing, something like, "it is axiomatic that the government cannot do indirectly what it is prohibited from doing directly".

Perhaps ironically, I had a difficult time using Google to find the exact wording of the quote or its source. The only verbatim result was from a NYPost article about the hearing.
"Network connected" or "conveniently programmable" !== "Internet connected"

It was a rhetorical question. I'm sure the GP knows what the machines are and why they might need some kind of convenient data supply.

Both manufacturers and on-site IT teams have simply gotten cavalier about internet connectivity, network isolation, automatic updates, etc -- convincing themselves that the catastrophic risks that come along with these processes will either not happen to them or will only happen when someone else can be blamed.
s/defaults/segfaults/ # stupid autocorrect
what many people of not taking is that why we are here:

one simple reason:
all eggs in one Microsoft PC basket

why in one Microsoft PC basket?

- most corporate desktop apps are developed for Windows ONLY

Why most corporate desktop apps are developed for Windows ONLY?

- it is cheaper to develop and distribute since, 90% of corporations use Windows PCs ( Chicken and Egg problem)

- alternate Mac Laptops are 3x more expensive, so corporations can't afford

- there are no robust industrial grade Linux laptops from PC vendors (lack of support, fear of Microsoft may penalize for promoting Linux laptops etc.)

1/ Most large corporations (Airlines, Hospitals etc..) can AFFORD & DEMAND their Software vendors to provide their ' business desktop applications' both in Windows and Linux versions and install mix of both Operating systems.

2/ majority of corporate desktop applications can be Web applications (Browser based) removing the single vendor Microsoft Windows PC/Laptops

-
> And gradual rollout of config files quite often seems like overkill.

Indeed, but it is still mandated at large companies (e.g. Google) because of exactly this scenario.
In the UK, a housing minister was bribed with £12,000 in return for a £45m tax break.

3750:1 return on investment, you don't get many investments that lucrative!
> I would say the government is at fault here for prohibiting competition, not the companies.

We should be naming and shaming the companies that choose the immoral path. That does happen sometimes, but over the last 40 years the US seems to have shifted to "if you can get away with it, that's fine", especially for corporations.

That attitude has waxed and waned over the history of the country, but the progressive era (from the late 19th century) was notably one where doing the right thing (or "doing well by doing good") was considered proper.
The difference between these two is there’s an implied probability of guilt, which is a dangerous view because it allows you to treat people who haven’t been directly proven guilty worse on the basis that you’re mistreating a population more likely to contain guilty people. The presumption of innocence isn’t objective, it’s an important psychological tactic to help avoid such behavior. That’s why we should use that language.

Edit: in practice the legal system doesn’t behave this way, but I’m still wary of using different terminology because it seems like it concedes ground.
Capitalism works really great when there's competition.

When there's a government-sanctioned monopoly like this, you get all of the efficiency and speed of a for-profit corporation, but it all goes in the wrong direction.

I once read a game-theory study somewhere that showed you need four or five operators minimum to avoid monopolistic cooperation.
We are using OpenOffice as firewall

https://www.numerama.com/politique/12508-albanel-le-minister...
I’m not an IT professional, but I don’t use antivirus software on my personal macs and linux machines- I do regular rotated physical backups, and only install software digitally signed by trusted sources and well reviewed Pirate Bay accounts (that's a joke :-).

My only windows machine is what I would classify as a mission critical hardware connected/control device, an old Windows 8 tablet I use for car diagnostics- I do not connect it to the internet, and never perform updates on it.

I am an academic and use a lot of old multi-million dollar scientific instruments which have old versions of windows controlling them. They work forever if you don't network them, but the first time you do, someone opens up a browser to check their social media, and the entire system will fail quickly.
The position doesn't have to be "in the money" to be profitable. At present, the underlying (that is $CRWD, not the puts themselves) is trading around $305 per share, so these puts with the strike price all the way down to $185 are still far, far off from being ITM. But, options are largely a bet on volatility. While the extreme price drop between when this user opened the trade and this morning has already made this trade quite profitable, it could still lose money if the trader holds on to it; IANAFA, but selling and taking profits on this rare event would most likely be in their interests, even if they continue to believe the underlying security will go all the way down to $185 by November.
Very Uncle Owen on Tattoine vibe, I love it. Moisture farmers.
Even if this is entirely due to Crowdstrike I see it as Microsofts failure to properly police their market.

There is the correctness by testing vs correctness by construction dynamic and in my view given the scale of interactions between an OS and the kernel modules trying to achieve correctness by testing is negligent. Even at the market scale Microsoft has there are not enough Windows computers to preview test every combination. Especially when taking into account the people on the preview ring have different behaviors to those on the mainline so many combinations simply won't appear in the preview.

I see it as Microsoft owning the Windows kernel module space and has allowed sloppiness by third parties and themselves, I don't know the specifics but I could easily believe that this is a due to a bug from Microsoft. The problem with allowing such sloppiness is that the slopy operators out compete the responsible operators, the bad pushes out the good until only the bad remains. A sloppy developer can push more code and gets promoted while the careful developer gets fired.
Vote for politicians who want to do something about climate change and convince others to do the same.
i'd think you'd want some sort of controls/detection on infrastructure level machines.

above comment is very naive.
How does it provide 32gb of offline storage? I can’t figure it out.
You'd think the salt levels would be much higher.