skysight-inc/HackerNews huggingface dataset:
> As far as I can tell the discussion was the difference between domesticated cows and bison

The discussion was about how domesticated animals prefer to stick around humans even when they don't need to, negating the idea that all animals are of the opinion that "humans suck". It was established that the exact reason for why these animals behave that way is irrelevant to the topic, but then the comment about bison introduced the idea that it is relevant. After all, why would we see a post that is irrelevant? But there is no indication of where the relevance lies. Is selective breeding not an environment pressure like any other? What is noteworthy about it that justifies the violation?

> No need to be rude, it's not helping anything.

Intriguing. It would be interesting to hear the logic behind considering text spit out by a piece of software to be rude. Does rudeness not require human intent? Indeed, a human giving another human the middle finger might be considered rude (human intent) by a human observer, but a monkey giving the middle finger (non-human intent) is not traditionally considered so despite being an identical act. This seems to imply that you assign human-like qualities to software. But at the same time software is well understood to not be human-like. It operates using very different mechanisms. Which, then, seems like software should be treated more like the monkey than like the human, but clearly that is not the case.

Tell us more about your take! The other commenter does not seem to recall why he posted the comment about the bison, leaving that topic to be a dead-end, so let's entertain your tangent.
A few more years and maybe they will add this newfangled super-innovative thing, invented by those esoteric academics at U of Haskell ... this new thing -- umm, what was it called -- try-catch perhaps.
Machinery shipped to users usually do not allow for the users of the machinery to "boot into safemode". Thank John Deere and the anti-"Right to Repair" crowd for that.
I barely know any plant names, so I'll happily agree and forget about it ¯ \ _ ( ツ ) _ / ¯
This does not include those who were not wrongfully convicted, but who did not serve out the entirety of their sentences, or who had been released without the state admitting wrongdoing. This appears to be more limited in scope than the parent comment’s underlying point.
the question is - why lifts require windows?
I'll leave this here. AT&T Labs is still doing interesting things.

https://about.att.com/sites/labs
They might just have it, remember when the night of the Russian invasion of Ukraine satellite terminals in Europe started being bricked with faulty firmware updates?
[dupe]

Discussion: https://news.ycombinator.com/item?id=40987224
You have to also factor in competition. I think it's a big factor on why corporate IT is generally bad, Microsoft and their partners have no reason to improve on the status quo. If we had viable alternatives, in a market where no entity has more than 20% market share or something like that the standards would be much higher.
I believe the question was 'in which ways is windows vulnerable by default', and I answered that.

If customers wanted to configure them properly, they could, but they don't. EDR will let them keep all the garbage they seem to love so dearly. It doesn't just check a box, it takes care of many other boxes too.
So Ukraine's military and the app creator denied their artillery app was hacked by Russians, which might have caused them to lose some artillery pieces? Sounds like they aren't entirely unbiased. Ironically, DNC initially didn't believe they were hacked either.
Nah. That’s not the problem.

Kernel level code blindly loading arbitrary files?

Panicking when the file doesn’t parse because it’s not a memory safe language?

Not validating the files before loading them?

Not validating the files before SHIPPING them? No CI? No safety net?

No staged rollout in case of explosion?

There are far FAR bigger mistakes here than “sys admin didn’t have to press button”.
They absolutely have bugs up their sleeve, but if they tell the companies to allow them to fix them then they can't use the bugs for spying (or at least, not as effectively)
Nice biased article, I'm surprised they didn't mention Rust.
As much as I don't like these AI companies, unless you're an insider, you need a credible source for that claim.
Not familiar with the details, but page fault != segfault.
Depending on what kernel I'm running, CrowdStrike Falcon's eBPF will fail to compile and execute, then fail to fall back to their janky kernel driver, then inform IT that I'm out of compliance. Even LTS kernels in their support matrix sometimes do this to me. I'm thoroughly unimpressed with their code quality.
Embedded Windows has always seemed like an oxymoron to me.
In any sizable organization, you can't get around automatic updates.

But updates should be rolled out slowly and you need enough telemetry to detect problems as it's rolled out. Reboots, crashes, cpu/memory use, end user reports, etc should all be used to detect issues and pause the rollout.
> “Every now and then a trigger has to be pulled.”
> “Or not pulled. It’s hard to know which in your pajamas, Q.”

It’ll probably turn out that this update was pushed out against the strident, loud warnings of some small dev group within the company, and overruled by the all-knowing managerial class to keep up an OKR. They’ll have been warned six ways to Sunday but...

I’d definitely be not be the one pushing the big red button.
“Our findings suggest that when the atmosphere is bathed in sunlight the phosphine is destroyed,” Clements said. “All that we can say is that phosphine is there. We don’t know what’s producing it. It may be chemistry that we don’t understand. Or possibly life.”

Either way, the discovery of the source or mechanism should prove highly illuminating to the study of exobiology. Pretty exciting, imo.
Mupdf.
this is very solid advice - I completely agree with you
What this article is parodying, in case folk aren't familiar https://en.wikipedia.org/wiki/%27No_Way_to_Prevent_This,%27_...
This is mostly physical machines in person, kiosks and pos terminals, office desktops and things like that. Windows is a tiny portion of GCP and AWS and the web in general.

I'm 100% "cloud" with tens of thousands of linux containers running and haven't been affected at all.
I don't suppose there was a doctor or nurse named Alexa involved?
Oh, but it does matter https://thebarentsobserver.com/en/democracy-and-media/2024/0... Not in the EU, but when you have any property left in Russia.
C++ is the only language where this happens? Highly doubt. It's probably
because more applications are written in C++ than anything else, so it gets more visibility.
Tighter control of updates by system management teams, including but not limited to staged roll-outs with critical systems at the end of the queue. If the vendors did this, and the customers too, then you'd get better outcomes from the updates being distributed over time.
MS could've leaned more towards user-space kernel drivers though. Apple has been going in that direction for a while and I haven't seem much of that (if anything) coming from MS.

That would have prevented a bad driver from taking down a device.
It is. Apologies are not accepted.

Can you give me an example where an ethnicity was declared inferior in the USSR? I doubt you can.

In the Europe and in the US the theories of the superiority of white people were abound and used to justify slave trade and exploitation.

"By that standard, European colonization never happened, either."

What standard exactly? Ideology is important, but it wasn't the main point of my argument. Soviet republics got industrialized thanks to what you call 'Soviet colonization', their population got rid of illiteracy at the same time as Russians. You can't say that about real colonies of Europe.

"Oh really."

Please don't make major edits to your comments which make replies seem inadequate or incomplete.

Funny that you have no objection to collective punishment which is enough to make it a crime. And your examples are irrelevant because they describe relations between different states, not the unequal treatment of different ethnicites by the same government.

"later annexed parts of then-neutral Romania"

You mean the parts that were grabbed by Romania 20 years earlier? [0]

"The Soviet Union literally collaborated with Nazi Germany at the highest government level before their alliance broke down and ended up in war."

The USSR was supporting anti-fascist side in the Spanish civil war and was trying to arrange anti-Nazi treaty with the Britain and France, only after the infamous Munich agreement, when the West green-lighted dismemberment of Czechoslovakia by Germany, Poland and Hungary, the USSR signed the non-aggression pact with Germany.

[0] https://en.wikipedia.org/wiki/Bukovina#Kingdom_of_Romania
No, it takes a while to load that definition file. Before the loading it _might_ be able to pull the update that fixes it. If you keep trying the chance this update is pulled increases
Ok satire and i fell for it. Nice.
If you’ve got physical access to the machine it’s your machine. All you need is a USB port.

I’d expect that the manufacturer puts out their own fix which basically copies crowdstrikes suggestion. I’d even suspect it by the end of the day today.

The fix is really simple, and luckily also very simple to automate. It’s going to be a lot of running around for IT staff (if deputized helpers!) but this should all be over by the weekend.
C++ inherited this from C, so there's at least two languages where this regularly happens.
Where did you buy it? Most of the router boxes I've seen are closer to 150-200?
Presumably endpoint detection & response (EDR) agents need to do things like dynamically fetch new malware signatures at runtime, which is understandable. But you'd think that would be treated as new "content", something they're designed to handle in day-to-day operation, hence very low risk.

That's totally different to deploying new "code", i.e. new versions of the agent itself. You'd expect that to be treated as a software update like any other, so their customers can control the roll out as part of their own change management processes, with separate environments, extensive testing, staggered deployments, etc.

I wonder if such a content vs. code distinction exists? Or has EDR software gotten so complex (e.g. with malware sandboxing) that such a distinction can't easily be made any more?

In any case, vendors shouldn't be able to push out software updates that circumvent everyone's change management processes! Looking forward to the postmortem.
Those focusing on QA, staged rollouts, permission management etc are misguided. Yes of course a serious company should do it but CrowdStrike is a compliance checkbox ticker.

They exist solely to tick the box. That’s it. Nobody who pushes for them gives a shit about security or anything that isn’t “our clients / regulators are asking for this box to be ticked”.
The box is the problem. Especially when it’s affecting safety critical and national security systems. The box should not be tickable by such awful, high risk software. The fact that it is reflects poorly on the cybersecurity industry (no news to those on this forum of course, but news to the rest of the world).

I hope the company gets buried into the ground because of it. It’s time regulators take a long hard look at the dangers of these pretend turnkey solutions to compliance and we seriously evaluate whether they follow through on the intent of the specs. (Spoiler: they don’t)
It's also in line with arguments made by Ted Kaczynski (the Unabomber)

> Why must everything collapse? Because, [Kaczynski] says, natural-selection-like competition only works when competing entities have scales of transport and talk that are much less than the scale of the entire system within which they compete. That is, things can work fine when bacteria who each move and talk across only meters compete across an entire planet. The failure of one bacteria doesn’t then threaten the planet. But when competing systems become complex and coupled on global scales, then there are always only a few such systems that matter, and breakdowns often have global scopes.

https://www.overcomingbias.com/p/kaczynskis-collapse-theoryh...

https://en.wikipedia.org/wiki/Anti-Tech_Revolution
Funny thing is that for decades there were predictions about how there was a need for millions of more IT workers. It was assumed one needed local knowledge in companies. Instead what we got was more and more outsourced systems and centralized services. This today is one of the many downsides.
What Linux calls a segmentation fault is actually almost always a page fault.
Thanks to all the replies about the (very small) extra weight at the height of the ISS.

As for the centrifugal force from the Earth's rotation, Wikipedia puts it at about 0.3% (which, added to the effect of the Earth's bulge, means you feel a total of 0.5% less weight at the equator than at the poles).

https://en.m.wikipedia.org/wiki/Gravity_of_Earth#Latitude
I always half-jokingly think "should I buy a politician?"

I feel like a few friends could go in on it.
We are a Cisco Webex Teams company and apparently this software doesn't allow you to message yourself to do a personal pastebin. This would have been a gamechanger for me. This is a great idea though, thanks for that idea.
South Park nailed it. Once you open this door all is an endless road of somebody, somewhere, feeling outraged by something, and demanding to be changed.

In the end the goal seems to destroy one of the few things that we still agreed to do collectively as human species. Using an universal way to name the creatures that live in the planet.

The same species will have different Scientific names for suiting the preferences of Chinese, USA, Brazilians or Russians. After all, it isn't "racist" not being able to use the Chinese alphabet on scientific names?

Scientists will be automatically tagged as belonging to ideology or political party by the names that they will choose to enforce.

Countries with republics will try to wipe names honoring the kings of monarchies that patronage the scientific expeditions.

They don't even understand, or even worse don't care, about the precedent that they are setting.
Its like the name was predetermined for this scenario. Too on the nose really.
CrowdStrike is not worth 83B Dollars
Half of the hotels (Choice) computers were down. We never reboot the computer, unless it's not working or working slowly or Windows update.
this is a solution for "afterthought security" only.
I don't know, the example photos of deepfakes here seem... pretty good. If that's the worst they could find, then this doesn't seem useful at all.

Even in the real photos, you can see that the reflections are different in both position and shape, because the two eyeballs aren't perfectly aligned and reflections are going to be genuinely different.

And then when you look at the actual "reflections" their software is supposedly detecting (highlighted in green and blue) and you compare with the actual photo, their software is doing a terrible job detecting reflections in the first place -- missing some, and spuriously adding others that don't exist.

Maybe this is a valuable tool for spotting deepfakes, but this webpage is doing a terrible job at convincing me of that.

(Not to mention that reflections like these are often added in Photoshop for professional photography, which might have similar subtle positioning errors, and training on those photos reproduces them. So then this wouldn't tell you at all that it's an AI photo -- it might just be a real photo that someone photoshopped reflections into.)
there's a great meme out there that says something like: Everyone on my floor is coding! \n Software PMs: :-D \n Doctors: :-O
I kinda wondered my my Windows 11 based work laptop had rebooted... I guess I should go check if it's still working right.
On both macOS and Linux, there's an increasingly limited set of things you can do from root. (but yeah, malware with root is definitely bad, and the root->kernel attack surface is large)
Link in TFA goes to AliExpress. This is the actual vendor: https://radxa.com/products/x/x4/
I worked for a company which offered a bridge between CorrLinks (federal prison email system) and SMS. The inmate would get their own phone number they could receive messages from, and make outgoing texts as well.

My boss's friend operates https://phonedonkey.com, which provides a VOIP relay service such as what you set up.
Vendors are allowed to install drivers , even via Windows update. Many vendors like HP, install functionality like telemetry as drivers to make it more difficult for the users to remove the software.

So next time you think you are doing a "clean install", you are likely just re-installing the same software that came with the machine.
"There really isn't anything we can do to prevent memory safety vulnerabilities from happening if the programmer doesn't want to write their code in a robust manner" is funny because it's hard to do it right even if you care. The way you do things right consistently is make it easier to do it right than do it wrong.
Aldi, apparently. That's where Piers Corbyn couldn't buy strawberries with cash. https://www.mirror.co.uk/news/uk-news/piers-corbyn-splits-op...
Is It Worth Investing in CrowdStrike? (July 17)
Why would being anti-shareholder make someone pro-worker?
You do need to be in safe mode.
My last CNC job was just a 98 pc that dropped into dos to load programs, this must have been right around when win10 came out.
Sneakernet and floppies made it secure enough, but the main network where all the orders were handled was... terminal based.
It's still a valid question, just not directly related to the crashes.
Just be aware, that music player without file access won't be able to traverse/list directories, so playlists won't work. This is a limitation of any file-picker based file access (e.g. flatpak applications on linux, accessing files via portals have exactly the same limitations). As the sibling comment says, it is possible to run vlc this way, but be aware of the limitations.
What I find definitely depressing is the fact we used to roll out progressively even OS upgrades (I guess now that is done through intune?) and was one point in favor of windows (on Linux you had to do things yourself at the time AFAIK, I don't think the situation has improved much).

Nowadays we get mandated random software upgrading at once on the entire company fleet and no one bats an eye - I counted more than a dozen agents installed for "security" and "monitoring" purposes in my previous company servers, many of those with hooks in the kernel obviously, and many of those installed with random policies to tick yet another compliance box...
Perhaps they are not. What is really happening is the world is getting more complicated. And if people don't get smarter, or better informed, their capacity to create problems is going to increase.
Can anyone with good insight explain why AMD hasn't traversed the CUDA moat yet? Surely they have been investing in building a similar layer and getting it upstream into the ML frameworks and intermediary compilation systems?
??? So what do you wanna do, make it illegal to be immoral?
I work for a large medical device company and my team works on securing medical devices. At least at my company as a general rule, the more expensive the equipment (and thus the more critical the equipment, think surgical robots) the less likely it will ever be connected to a network, and that is exactly because of what you said, you remove so many security issues when you keep devices in a disconnected state.

Most of what I do is creating the tools to let the field reps go into hospitals and update capital equipment in a disconnected state (IE, the reps must be physically tethered to the device to interact with it). The fact that any critical equipment would get an auto-update, especially mid-surgery is incredibly bad practice.
> The new order more than halves the per-minute rate caps for all prison and jail phone calls across the country

Not good enough. Anyway shouldn't these fees as least go back to cover public court fees or something? Why are we allowing cartels to leach money from prisoners?
Hello, I'm a journalist looking to reach people impacted by the outage and wondering if you could kindly connect with your ER colleague. My email is sarah.needleman@wsj.com. Thanks!
I can't run a 10year old game on my Mac but i can run a 30 year old game on my windows 11 box. Microsoft prioritizes backwards compatibility for older software,
My n100 system idles at 10W from the wall. It has many more components to power (2x m.2, sata, 5x nics, etc.) than this SBC though.

Much higher than a raspberry pi, but still low in comparison to any desktop server
Takes me back to the days when I was 9 years old making websites on angelfire, geocities, etc.
The USG solution is just Google Analytics though, so…
and any critical weapons systems.

... at which point you will lose battles to enemies who have successfully networked their command and control operations. (For extra laughs, just wait until this is also true of AI.)

Ultimately there are just too darned many advantages to connecting, automating, and eventually 'autonomizing' everything in sight. It sucks when things don't go right, or when a single point of failure causes a black-swan event like this one, but in an environment where you're competing against either time or external adversaries, the alternatives are all worse.
Kurtz response is ridiculous blaming the customer on X. He will probably find another company to hire him as CEO tho. Just an upside down world in the C-suite world.
This is almost definitely on Crowdstrike.

There is a windows release preview channel that exists for finding issues like this ahead of time.

To be fair - it is possible the conflicting OS update did not make it to that channel. It is also possible it is due to an embarassing bug from MSFT (uknown as yet).

Until I hear that this is the case - I am pinning this on Crowdstrike. This should have been caught before prod.
Hey, cofounder at Mutable.ai here.

I want to encourage you all to ask the chat some tough questions. You can ask very complex and general questions. Some examples:
- Ask ollama (https://wiki.mutable.ai/ollama/ollama) how to add a new model
- Ask langchain (https://wiki.mutable.ai/langchain-ai/langchain) "How can I build a simple personal assistant using this repo?"
- Ask flash attention (https://wiki.mutable.ai/Dao-AILab/flash-attention) "What are the main benefits of using this code?"

It is also useful for search - for example, if you ask langchain "Where is the code that connects to vector databases?" it will surface all the relevant information.

Very curious to hear what you ask (and whether you find the response helpful)!
that's a chicken and egg problem. People change jobs frequently mostly due to two reasons:
1. higher pay
2. to get away from bad management or a bad work environment (same thing really)

If it's the kind of place that doesn't help train new skills, that falls under "bad management". Employees could collectively try to be the better person first in fixing this, but most modern history would show that most employers if given an inch will take a mile, and will generally pay the least amount possible, expect one-sided loyalty, and overall get away with everything they can until either regulation or market forces force them to change.
Shallow clickbait makes me less inclined to support the institution, not more.

At a minimum, there are tradeoffs involved.
It has PCIe 3.0 x4 on the M.2 port.

You can buy a cheap OCuLink adapter and and put it in that port.