skysight-inc/HackerNews huggingface dataset:
Vector dbs are quickly becoming a commodity. This was not true when pinecone was founded and received its first few rounds of funding.

At this point, Postgres has clearly caught up and the VCs are going to do everything it takes to hold on.
Hey — this is really cool — though looks like it’s being hugged to death right now.

Assuming the data is being updated less often than hourly it should be relatively straight forward to generate a pmtiles tileset of the accident points, using either tippecanoe or planetiler — stick on something like s3, and have it basically scale infinitely.

Happy to help if needed!
> If you have minions, ask yourself if you are asking them to work on the right things.

What’s wrong with stealing the moon?
I had started to think I was the only one saying this.
Private equity people need to start getting multiple life sentences for fucking around with shit like this. It's unironically a national security issue.
> It doesn't read to me as trying to dodge anything.

It absolutely reads like this. They are getting blasted online for shipping kernel mode driver updates without proper QA and release engineering. Which just from face value just seems like some insano style engineering. They are saying "it's not actually a kernel mode value" to deflect blame.

I mean, I really don't understand why they would make this statement otherwise. If they are innocently just trying to say "this is just a channel file", there are other ways to say this, and it really isn't relevant enough to underline and emphasize.
Some projects funded by NLnet, https://nlnet.nl/project/

ActivityPub <> Discourse, WordPress
bcachefs
CryptPad
F-Droid
Jabber/XMPP
Jitsi
LibreOffice
Matrix
Mastodon
NextCloud
PulseAudio
QubesOS
SourceHut
But yikes, some of us decided not to have kids because we don't like kids a lot. Having that as a requirement is a self-fulfilling comfort bubble though, I can see the reasoning.
I can't be the only one here who would love to hear more about this.
It's not understandable imo. At the very least they should have tests for the loader component that shows it can handle corrupted input. Amateur hour.
> but it's not going to be slower than using a machine with 128 bit vector registers!

It very well could; for example, RVV hardware with VLEN=512, one 512-bit vector ALU, and three scalar ALUs (float or integer), would have 512 bits/cycle with vector and 192 bits/cycle for scalar (i.e. vector at VLMAX is beneficial!), but using only 128 bits of the vectors would end up with just 128b/cycle. And this is just regular ALU instructions, vrgather can get significantly worse, and it is extremely important for most fixed-width stuff.

This of course wouldn't ever happen with actually-128-bit hardware as it wouldn't ever make sense to have such vector vs scalar distribution for its guaranteed-128-bit workloads. And, though perhaps my previous example is a tad extreme, with higher VLEN it gets more and more reasonable to have a larger gap between scalar and vector ALU/port counts, and maintaining 'vector_alu_count*2 ≥ scalar_alu_count' gets less and less reasonable.

K230 is irrelevant here - it has VLEN=128, which is the optimal thing for being used as a fixed-width system / imitating NEON. And, more generally, looking at just one RVV implementation cannot give any insight on how well the "scalable" part of RVV works, as that only applies when running the same code across multiple different implementations with different VLEN.

Could high-VLEN hardware still be made such that 128-bit usage is never strictly worse than scalar? Perhaps. But there exist incentives under which it might not make sense to have such, which have no possible equivalent on NEON/x86, and apply specifically when the "scalable" part of RVV is actually used for its intended purpose in hardware.
The Boring Co. could have a new consumer market on its hands helping people excavate underground as they seek cooler temperatures.
Remember that CNC is programming environment. Now how do actually see what program is loaded? Or where is the execution at the moment? For anything beyond few lines of text on dotmatrix screen actual OS starts to be come desirable.

And all things considered, Windows is not that bad option. Anything else would also have issues. And really what is your other option some outdated, unmaintained Android? Does your hardware vendor offer long term support for Linux?

Windows actually offers extremely good long term support quite often.
$6.1 trillion 2023 seems 500b per month?
>Looks like where I live, deaths are more closely associated with big, wide, fast roads.

This is sort of like saying “most child p*rn is transported by undersea fiber optic cables!”
It can decrease the solar exposure of the earth and potentially decrease temperature, doesn’t address fossil fuel pollution but it does mitigate the impacts of fossil fuel CO2.
I'm more surprised at the fact that they didn't appear to have tested it on themselves first.

FWIW, at least Microsoft still "dogfoods" (and it's what coined that term), and even if the results of that aren't great, I'm sure they would've caught something of this severity... but then again, maybe not[1].

[1] https://news.ycombinator.com/item?id=18189139
You mentioned that you’re exhausted after your day job. Do you have energy to tend to your relationship and meet your partners needs usually?
AGPL https://git.deuxfleurs.fr/Deuxfleurs/garage
My understanding is they basically deployed a configuration file. It seems like these files might be akin to virus signatures or other frequently updated run-time configuration.

I actually don't think it's outrageous that these files are rolled out globally, simultaneously. I'm guessing they're updated frequently and _should_ be largely benign.

What stands out to me is the fact that a bad config file can crash the system. No rollback mechanism. No safety checks. No safe, failure mode. Just BSOD.

Given the fix is simply deleting the broken file, it's astounding to me that the system's behavior is BSOD. To me, that's more damning that a bad "software update". These files seem to change often and frequently. Given they're critical path, they shouldn't have the ability to completely crash the system.
While initially everyone blamed Microsoft and then quickly pointed the finger at CrowdStrike, I'd like to call out Microsoft especially their Azure division for making the recovery process unnecessarily difficult.

1) A key recovery step requires a snapshot to be take of the disk. The Portal GUI is basically locking up, so scripting is the only way to do this for thousands of VMs. This command is undocumented and has random combinations of strings as inputs that should be enums. Tab-complete doesn't work! See: https://learn.microsoft.com/en-us/powershell/module/az.compu...

E.g.: What are the accepted values for the -CreateOption parameter? Who knows! Good luck using this in a hurry. No stress, just apply it to a production database server at 1 am in the morning.

2) There has been a long-standing bug where VMs can't have their OS disk swapped out unless the replacement disk matches its properties exactly. For comparison, VMware vSphere has no such restrictions.

3) It's basically impossible to get to the recovery consoles of VMs, especially VMs stuck in reboot loops. The serial console output is buggy, often filled with gibberish, and doesn't scroll back far enough to be useful. Boot diagnostics is an optional feature for "reasons". Etc..

4) It's absurdly difficult to get a flat list of all "down" VMs across many subscriptions or resource groups. Again, compare with VMware vSphere where this is trivial. Instead of a simple portal dashboard / view, you have to write this monstrous Resource Graph query:

Resources
| where type =~ 'microsoft.compute/virtualmachines'
| project subscriptionId, resourceGroup, Id = tolower(id), PowerState = tostring( properties.extended.instanceView.powerState.code)
| join kind=leftouter (
HealthResources
| where type =~ 'microsoft.resourcehealth/availabilitystatuses'
| where tostring(properties.targetResourceType) =~ 'microsoft.compute/virtualmachines'
| project targetResourceId = tolower(tostring(properties.targetResourceId)), AvailabilityState = tostring(properties.availabilityState))
on $left.Id == $right.targetResourceId
| project-away targetResourceId
| where PowerState != 'PowerState/deallocated'
| where AvailabilityState != 'Available'
While also getting billed infinitely
This isn't another way to look at it, this is the only way to look at it.
No we don’t. That idiotic “word” was coined by a fanatical YouTuber, not anyone that should be taken seriously.

I dare you to say “stroad” outside of your online echo chamber.
they mean scihub i believe, probably because they have strong positive feelings about intellectual property and scihub doesn't
How does the deep fake have the same eye shape, same cropping and same skin blemishes as the real image? Did they inpaint eyes and call it deepfake for training?
So do automated canarying! Deploy to 1000 machines, wait 60 seconds, deploy to 10,000, etc. All done in under 5 minutes while automatically rolling back or at least halting if any metrics look bad.

Canarying is by now not a very new practice. This is like doctors not washing their hands.
Government owning the utility would be the answer. But politicians like to have a 3rd party to blame for price hikes and poor service .
With an open country might be. With china, this assertion from lancet just discredited it. Does it actually have access to chinese lab and market freely and without any cover up effort. Truth is it is not sure because it is china. I am not saying it is a or b. I just saw a cover up and close to real scientific investigation issue. It is not that they have not leaked Sar-1. If push I still think the evolution line lab funded by USA but tested in wuhan is most likely possibility, on top of cave bat testing actually bought the virus accidentally.
Most people pushing alternative explanations claimed that COVID was genetically engineered or made much more powerful by gain-of-function research. The idea of it being a natural sample leaked in a lab accident has always been recognized as possible, but most of the self-styled freethinkers never really picked it up because it didn’t shift the blame for a poor response away from the President they backed, and the lack of supporting evidence means most of the people for whom it isn’t a political issue are no longer talking about it because there isn’t much to talk about unless new evidence emerges.
The kernel driver is an interpreter that executed an HCF instruction from the channel file.
Well, the highly-appointed, over-paid grunt-worker can rest easy without fear of any legal backlash simply because they hide behind the flawed form of "presumptive justice" that pervades Wales & England courts.
I mean, you are free to do whatever you want, I was giving a suggestion in case people were not aware.
It's usually challenging to keep being friends with a person who doesn't want to be with your kids once you have them.

It's similar to the situation when you don't like someone's partner, there isn't much you can do.
If they have been found not guilty (given) when exactly is this newly found evidence going to convict? That’s the point of double jeopardy.
This is why nutrition research is extremely confusing and contradictory often. I worked in a nutrition department and the amount of post menopausal obese women in our knee studies that said they just ate a half cup of green beans that day is astounding.

Now try to use data that flawed to make assumptions over a lifespan about human health. About the only studies I truly believe are the ones where people are at a facility and all food is provided to them and tracked.
At least the name is way more cool.

https://en.wikipedia.org/wiki/SPQR
If you must trust the software not to do rogue updates then I have to swing back into the camp of blaming the operating system. Is Linux better at this?

I've noticed phones have better permissions controls than Windows, seemingly. You can control things like hardware access and file access at the operating system level, it's very visible to the user, and the default is to deny permissions.

But I've also noticed that phone apps can update outside of the official channel, if they choose. Is there any good way to police this without compromising the capabilities of all apps?
Which implies that any malware capable of replacing these channel files can crash their kernel driver. I wonder if there's a non-crashing way to exploit this & get kernel-space code execution.
That’s the danger of running in kernel mode. I’ve seen some people claim this is because the bad file starts a chain of events which concludes in trying to page an unpageable file, which is an application crash in user space but brings down the whole system if it happens in the kernel.
could have to do with weight gain, lack of exercise, sitting a lot, and even covid.
> Who prevents the publication of nonsense, pseudo-science, cherry-picked findings, etc.

no one, all of that gets published constantly
Let me add a note for for you - the onus is on you find if someone can learn the task. That is what is a great interviewer does.

As masterj pointed out, a really large portion of jobs ( more than three forth) out there won't be nearly anywhere near the complexity of the task you mentioned.
people who think 3.6% doesn't matter don't have any imagination. ballpark whatever you imagine is FB's compute cost vis-a-vis pytorch and take 3.6% of that and ask yourself whether you'd be happy passing up that kind of bonus/pay-bump/....lottery winnings. and of course for many pytorch workloads (smallish kernels in a highly multithreaded environment) i'm sure that number can be higher than 3.6%.
this doesn't work on mobile for me. tried in chrome and Firefox, but I just get the splash page.
Actually it was Nigerian princess for decades.
OK holy jeez I think I got the server back up. We now have 8X the ram and I'm not sure how, but we broke postgres....
or

> Maybe they have a DEI engineer that did this

Can confirm that as an upper-middle class heterosexual cisgender white man I have never dereferenced memory through an invalid pointer. That's just part of my "PRIVLIDGED".
> ** Planned Outage: A planned maintenance is scheduled this Friday July 19th 11:00 pm EST thru Saturday July 20th 11:00pm EST. During this time, the reporting engine may be down. Sorry for the inconvenience. **
Any idea what spicifly might be the possible causes for data errors? Like is every state using the exact same form? Are are people who filled them out trained how to do so correctly?
Imo, it depends on the nature of the app you're trying to build. It can be a good early-stage approach to build a simple prototype or MVP using no-code builders (combo of Glide and Make is great for CRUD apps with low-complexity workflows).

Spend as little as two weeks to build the prototype or MVP, and start showing it to potential users/customers. If it solves a real problem for them, they use it daily and commit to pay for it, then you can think about enhancing the no-code app or moving to a hybrid or all-code approach.

Test the idea first with least time and effort, which is surely possible using no-code builders.
Sort of click-baity...

> Synopsis: A global Microsoft outage ...
Yes. And I was told by multiple nurses at St. Thomas Midtown that the hospital did not have manual procedures already in place. In their press release they refer to their hospitals as "ministries" [0], so apparently they practice faith-based cyber security (as in "we believe that we don't need backups") since it took over 3 weeks to recover.

[0] https://about.ascension.org/cybersecurity-event
> Making up your own hypothetical bad guy

Is not morally any worse than making you your own hypothetical saint.

But I didn't make it up. I read voraciously, and when this started happening 6 or 7 years ago and it was making the news, the real story came out. None of those shoplifting baby formula or laundry detergent were doing it to feed their babies, or put the babies through the gentle cycle in their ghetto laundrymat's washing machine. It was merely a decent commodity for fencing, and it was sold mostly on ebay though sometimes it'd end up sold out of storage units and trunks of cars or landed at a flea market. Go google it, I'll wait.

This is lifted wholesale from one of the folk tales of the honorable thief stealing only enough to feed his family, by the way. How many of these shoplifters steal actual loaves of bread?
He Tried to Bilk Google and Facebook Out of $100M with Fake Invoices (2019)
If they have heavy lawyers there. Which they do, no doubts.
https://archive.ph/SDsBC
The open-source core functionality is a nice touch, allowing the community to contribute and improve the platform over time.
My friend, Josh, died the day before he should have started 9th grade. His brother got into partying and eventually hard drugs, I suspect at least partly because of Josh's death. He died of a heroin overdose in 2018. I've known several other people who've died on the roads around my hometown but I don't see them on the map.

https://roadway.report/accidents/2003380044/
Sounds like an eighth amendment violation.
My town had a budget vote not to long ago.

I actually read the budget proposals and look at the year over year breakdown for certain categories.

The amount my town is paying for microsoft365 and GIS software is substantial. While not an eyewatering amount, and I can understand that certain things need to be licensed....its hard to understand why my local town isn't using a FOSS GIS and just setting up a basic proxmox cluster with HA failover to host the darn thing.
That seems like programming 101 for these systems.

In the past, I've worked around this by validating the configuration of a file before attempting to run it. You bail out in a safe way during validation, but still allow a hard error during run time.

Doesn't prevent all misconfigured files, but prevents the stuff like.
Don’t they have canary deployments? Such huge updates happen al at once?
But you're saying the speed limit (being too high or low) makes the road dangerous. Aren't the people driving their cars too fast making the road dangerous?
It takes a certain type of a criminal a55hole to attack hospitals and blackmail them. I would easily support life or death penalty for anyone attempting this cr@p.
I am not expert in biology but it would seem that an organization dedicated to the public safety when it comes to fighting viruses actually caused the largest global outages of all time. CrowdStrike did not of course intend to do this but it nonetheless happened and we should try to understand why it happened.
More people live in China and India. Their government is doing a better job at keeping emissions down, per person. Pollution doesn't care where you live.
The Cheap 10GbE Switch Buyers Guide
Could you expand on this? I feel like I get the gist of what you’re saying — that your conditional probability of observing the same effect in non “Finnish twin women” is quite high — but what’s the exact connection to frequentist statistics? Couldn’t find a classical “frequentist fallacy” in a cursory search
Music "Love of Humanity" watch and listen
>The configuration update triggered a logic error that resulted in an operating system crash.

> We understand how this issue occurred and we are doing a thorough root cause analysis to determine how this logic flaw occurred.

There's always going to be flaws in the logic of the code, the trick is to not have single errors be so catastrophic.
Well, no, you're not actually stating how the legal system works, you're just stating which of two words it uses to mean the exact same thing -- it works the same way regardless.
Vectors seem like kinda the easiest thing to store in a lot of ways
I'm not familiar with their software, but I interpreted their wording to mean their bug can leave your system in one of two possible states:

(1) Entire system is crashed.

(2) System is running AND protected from security threats by Falcon Sensor.

And to mean that this is not a possible state:

(3) System is running but isn't protected by Falcon Sensor.

In other words, I interpreted it to mean that they're trying to reassure people they don't need to worry about crashes and hacks, just crashes.
>When selling coke gets you a box simply because a plurality of nitwit voters think

I would legalize cocaine tomorrow were I in charge. I'd regulate the pharmaceutical companies such that profits were capped at about 2% over cost, they couldn't market it, and it would be sold in a plain retail box out of liquor stores in marked, known dosages and potency. I'd do the same for heroin and meth. But every time I mention something like this, the leftist I'm arguing with backpedals instantly "oh noes, we can't do that, drugs are bad mmmkay!".

To me, this means you're clearly talking about or to someone else. Your criticisms fall from me like raindrops off a freshly waxed car.

You would do better to use rationality more than empathy, but I'm content to let you learn that lesson painfully.
'The DOJ's Assault on Apple Will Harm Consumers'
I understand that these "NGAV" must be in ring 0 (device driver) because they want to inspect more things directly. And be more protected there, avoiding being attacked. I'm not sure they can achieve this.
Halting problem is undecidable.

On the scale of "no one bothered to put error handling or validation in" to "a subtle problem exists for this given input"; you and I lack the information to make a judgement.
Deep Learning to Eavesdrop on HDMI from Unintended Electromagnetic Emanations
There is a NIST paper on it. It's requirement for government systems after they suffered major breaches.

https://www.nist.gov/publications/zero-trust-architecture
At some point it's just cheaper to send a new better one. As we know the failing point we can add tons of gyros.
> Imagine if you simply don't have cash on you and your cards ain't working

I’m sure they’d bill the same card that you used to buy the ticket
> Pyxis cabinet

Why would a Pyxis cabinet run Windows? I realize Windows isn't even necessarily at fault here, but why on earth would such a device run Windows? Is the 90s form of mass incompetence in the industry still a thing where lots of stuff is written for Windows for no reason?
Still tiny compared to heart disease!
The trouble is why the "stroads" came to be to begin with.

Motorists will generally prefer whatever route gets them to their destination faster, but shops want to be where the traffic is, because they want motorists to stop and patronize them. So the shops want to set up right next to the high volume traffic path. But then pedestrians patronizing the same shops will be adjacent to that high speed high volume vehicle traffic.

In theory there are designs that can address this, i.e. you interleave roads so that each block is bounded by a high speed road for vehicle traffic on one side and a low speed road for pedestrians and cyclists on the other, keeping them separate but still allowing businesses to be accessible to both. But now you run into politics: The motorists may now have to walk up to a city block to get where they're going and the anti-car people are going to object to there being high speed roads and parking lots in the city whatsoever. Meanwhile making the change requires a budget allocation to do the work, so in the absence of consensus the status quo prevails.
And though I don't know, I'm guessing it's not a certainty to say they don't contain "code." It would seem to me that they would have to, otherwise novel attacks that weren't caught by one of their existing algorithms could never be detected.

I'm guessing they contain some combination of pattern/regexp type stuff, and interpreted code/scripting with trigger criteria, etc. that all gets loaded into the "engine" that actually runs the threat detection.
Check out https://code.gov/agencies, there are many more