skysight-inc/HackerNews huggingface dataset:
If you run RATs like these on your machines then I'm sorry, this is just a case of fucking around and finding out.

Just don't do it. Windows Defender is a thing, it does just fine. For everything else there is least-privilege and group policy.
Under OPs proposal, the IT version of Boeing would be putting out safer planes/saferSoftware because the quality engineers would loose their certification by doing knowingly bad work or illegally bad that might cause harm. There more than a few whistleblowers willing to speak up. There's lots of red tape to get there.
that is what i'm saying ;-)
While this is true, it misses most usecases, since you need cooperation from the Intel chip and you cannot start it up again after it shut down
Users are my main motivation drivers. Can you get any? Even if that's you!

If not: why?
....Store keeps track of proof of id, probably don't randomize the cards going out. Associate the two identifiers... Instant tracking association.

Once the capability to do so is acailable, it will be used. No exceptions.
Vibes of https://xkcd.com/356/
Sheet music often gives fingering suggestions which make it clear which string to play it on. With fingerings though, there's no correct answer, and often you want to bias towards the best sound (to your taste) vs. the easiest finger execution.
When we have a social revolution and workers control the production of goods and services, then we will set the rules. Unfortunately, for now, we are forced to bear the rules imposed on us. Like having malware like CrowdStrike software installed on our computers, making them slower and sometimes dysfunctional.

But now that you mention it... if software companies were more densely unionized in more of the developed world, especially in the US; and if those would be independent and membership-controlled unions, more like the IWW and less like UAW, SEIU and such - then maybe that would have been more realistically possible and not in some far away future.
Given the prevalence of this sort of thing in authoritarian countries, it's disappointing that mesh networking apps like Briar and Firechat are not more well-resourced/ developed/ promoted. Popular messaging platforms like Signal, WeChat, and Telegram offer a blend of convenience and security (different apps having different priorities, eg Telegram prioritizes the former over the latter), but they're all vulnerable to internet shutdowns, which instantly dissolves any online community trying to coordinate.

Mesh networks are generally slower and less reliable for large-scale data transfer as well as less secure by virtue of their distributed nature, but are more resilient in the event that natural/ social disasters take down communications infrastructure. Even janky analog radios work better.
Plenty of rich people celebrating rapes and children being bombed in Gaza, so I doubt it's poverty.
Industry-led content regulation has been very effective at staving off legal regulation in the United States. The MPA rating system and ESRB are very imperfect but nonetheless are success stories.
yeah, you don't want day to day security (a) changing daily (b) at the kennel level
Hobby projects, like any other projects, never finish. "Finishing a project" is an illusion created by marketing and project managers. The world changes too fast for any software service or project to ever be even remotely finished.
They might demand whatever they want, but it translates into "I want to control what you can do on your system". Which is basically another DRM-like idea. This should not be viewed as an acceptable approach. Because there is no end to it once they get to tell you what you can or can't do with your own system.
Academics shocked after T&F sells access to their research to Microsoft AI
Embed LLMs in your app easily–each model tackles agentic tasks it finetuned for
Use LlamaEdge for building a translation agent that supports fast and fully portable #LLM inference

Easy steps of integrating open source LLMs like Llama3, Gemma2 with LlamaEdge using simple commands to run the translation agent by Andrew Ng
Huh, the reviews I read seemed to say that the camera was a huge step up. (But maybe they were mostly comparing to the A53, which seemed uniformly to be regarded as a regression.) If not, then I feel quite stupid for paying the extra to "upgrade" to an A54, instead of an A52, from my A50.

(Also, though it's easy for me to believe this random search result is dodgy, and with the understanding that benchmarks don't mean much, Googling around for a chip comparison turned up https://gadgetversus.com/processor/qualcomm-sm7125-snapdrago... , which seems to suggest that the Exynos 1380 in the A54 wins over the Snapdragon 720G in the A52 in many benchmarks.)
I mean this question is the most honest way; I am not trying to be snarky or superior.

What are the hard problems? I can think of a few, but I'm probably wrong.
In a lot of cases you find tangential dependencies on Windows in ways you don't expect. For example a deployment pipeline entirely linux-based deploying to linux-based systems that relies on Active Directory for authentication.
> You've failed to demonstrate that

I see that now. I should have been more careful while searching for and sharing links. I have shot myself in the foot. And I'm not going to waste my time or others digging for and sharing what I think I remembered reading. I've done enough damage today. Thank you for your thorough reply.
Modern medicine requires computers. You literally cannot provide medical care in a critical care setting with the sophistication and speed required for modern critical care without electronic medical records. Fall back to paper? Ok, but you fall back to 1960s medicine, too.
I'm mystified it's not much lower. Perhaps the market hasn't really priced in the damage yet.
My device has a headphone jack and a microSD slot and I've never used either of them.

In regards of AI I find transcription, summarization, translation and predictive text to be very useful.
The primary skills you use locked up are how to be sneaky, how to hide shit, how to detect camera zones.

You couldn't get cheese at one institution unless you had a court date; they would give you a cheese sandwich at court. I would smuggle coffee out of the jail (through a full naked visual body cavity search) to trade for cheese sandwiches in the court holding pens, and then smuggle the cheese slices back in (through another full naked visual body cavity search).

Those are excellent life skills. Thanks jail!
By "decentralized" I think you mean "doesn't auto-update with new definitions"?

I have worked at places which controlled the roll-out of new security updates (and windows updates) for this very reason. If you invest enough in IT is possible. But you have to have a lot of money to invest in IT to have people good enough to manage it. If you can get SwiftOnSecurity to manage your network, you can have that. But can every hospital, doctor's office, pharmacy, scan center, etc. get top tier talent like SwiftOnSecurity?
Then push it down to customer, better yet provide integration points with other patch management software (no idea if you can integrate with WSUS without doing insane crap, but it's not the only system to handle that, etc.)
Most "humans" don't understand physics to a Platonic level and act in much the same way as a model, finding best fits among a set of parameters that produce a result that fits some correctness check.
…after using "this one weird trick"
To be compatible and be able to use all the Pi Hats would be nice but my point is that I am not sure a RP2040 can replace the Pi and be called "compatible". You can do a lot with an MC on the board that is true.
Good point. I was thinking the N100 had more pcie lanes than it actually does.

It only has 9. shrug
You don't happen to have used some means to install win 11 on an unsupported device have you? People bypassing the windows install requirements and then vanguard making false assumptions have been a source of issues.
That anecdote doesn't justify installing gaping security holes into the kernel with those tools. Actual security requires knowledge, good practice, and good engineering. Antiviruses can never be a substitute.
Choice #3 structure the update code so that verifying the integrity of the update (in kernel mode!) is upstream of installing the update / removing the previous definitions package, such that a failed update (for whatever reason) results in the definitions remaining in their existing pre-update state.

(This is exactly how CPU microcode updates work — the CPU “takes receipt” of the new microcode package, and integrity-verifies it internally, before starting to do anything involving updating.)
> But that's government regulation for you.

You misspelled “private sector”. Use of endpoint monitoring software is coming out of private auditing companies driven by things like PCI or insurers’ requirements – almost nobody wants to pay for highly-skilled security people so they’re outsourcing it to the big auditing companies and checklists so that if they get sued they can say they were following industry practices and the audit firms okayed it.
If you look at the classical [transformer architecture picture](https://en.wikipedia.org/wiki/Transformer_(deep_learning_arc...) there is an "encoder" tower on the left and a "decoder" tower on the right.

- Bert is encoder only.

- GPT is decoder only.

- T5 uses both the encoder and the decoder.
Both sides of the political spectrum are authoritarian. Each dominant party will do whatever in their power to hold onto it.

That said, law and order is needed to sustain the population. The pop density of BD is incredible - imagine half the population of US crammed into the state of New York. Systems and processes were what BD out of being considered a “basket case “ as Henry Kissinger (?) once famously called it. A lot of it were built by NGOs and private parties.

Now you have these students who are protesting something valid. But they are also not mature enough to realize that if they start burning away the optical fibers and data centers, they’re destroying the systems they are using to self-organize.

And what happens once they topple the govt? Who runs their nuclear reactor and power stations? Who runs their comms?

Let’s not throw away the baby with the bathwater and try and find a more reasonable way.
Ok but it’s a LIFT. How is Windows even involved? Is it part of the controls?
Something like Android Lollipop from 2014 supports all the latest techniques. It's likely there's no security issues left on Lollipop by now.

A lot of the new forced updates on Android is to prevent people some apps from being used to spy on other apps, stealing passwords, notification backdoor etc, but you don't need that if it's just a car radio.
From a comment elsewhere, a CS update took out Linux machines earlier this year.
Why didn't Rome have an industrial revolution?
Why would a lift have network access?
OMB discount rate determines grandchildren value
Headline: The one number that determines how today’s policies will affect our grandchildren.

Byline: The White House’s consequential decision to set a lower “discount rate,” explained.
by Kelsey Piper
Apr 12, 2023 at 7:22 AM PDT
> The decision will prevent European companies from using the multimodal model, despite it being released under an open license.

I like that Meta's models are available for general use under a fairly permissive license, but they've really butchered the word "open".
I remember fearing every OSX update because until they switched to just shipping read-only partition images you had considerable chance of hitting a bug in Installer.app that resulted in infinite loop... (the bug existed since ~10.6 until they switched to image-based updates...)
I wonder how unknown (yet) malware will be wiped out or enabled before this is over.
That may apply to things that need to be online, but... a lathe?
I’m sure that lifts have been electronically controlled for decades. But why is Windows (the operating system) involved?
The USB-C charging is listed as 'for emergencies only'. I believe the battery is dual-cell and the USB-C port only charges one side which can damage the cell iirc.

It is a really fun, very cheap radio. Use egzumer's firmware and play around with it if you want. Just don't transmit out of the band it's spec'd for from factory. It will spray all over the place.
It is absolutely better to catch some errors than none.

In this case it gives me vibes of something going wrong after the CI pipeline, during the rollout. Maybe they needed advice a bit more specific than "just use a staging environment bro", like "use checksums to verify a release was correctly applied before cutting over to the new definitions" and "do staged rollouts, and ideally release to some internal canary servers first".
This is a bug, appears 'randomly', being tracked here: https://kagifeedback.org/d/3387-no-search-results-found/

Happens about 200 times a day (0.04% of queries), very painful for the user we know, still trying to find root cause (we have limited debugging capabilities as not storing much information). it is on top of our minds.
Expanding Time to Compress Time (2006)
That team was probably laid off because they weren't shipping product fast enough.
In Linux it could be implemented as an eBPF thing while most of the app runs in userspace.

And, for specialised uses, such as airline or ER systems, a cut-down specialised kernel with a minimal userland would not require the kind of protection Crowdstrike provides.

I’m sure the NSA wasn’t affected by this.
In every state, it's illegal to sell or supply alcohol to minors, and it's illegal to drive without a license, which can't be accessed by teenagers younger than 16. It seems analogous to require age verification for porn.
There's also the possibility that they did do QA, had issues in QA and were pressured to rush the release anyways.
Absolutely it's a failure of process. But sometimes people just don't pay attention. Hiring inobservant or reckless people is a risk multiplier.
Rehabilitation is also for the benefit of society, a rehabilitated prisoner is less likely to commit more crime after they get out.

I would say that deterrence (preventing non-prisoners from committing crimes) and rehabilitation (preventing prisoners from committing crimes when they get out) should be the primary objectives of the system.
We as a society need to start punishing incompetence the same way we punish malice.

Of course, we also need to first start punishing individuals for intentionally causing harm through their decisions even if the harm was caused indirectly through other people. Power allows people to distance themselves from the act. Distance should not affect the punishment.
The standard for this is "could be attributable", so it goes well beyond counting and includes estimates of hypothetical ways they could have been killed because of the war.
> You better be spending billions on bulletproof deployment automation

There is no such thing.
It must be security tags on the lift which restrict entry to authorised staff.
wouldn't the lathe need to be online to get the OTA update from Crowdstrike?
My choices are Xiaomi, Tecno, and Ulefone

:(
Thank you for your comment. I agree that software developers won't be smart.

> And, to echo sentiments voiced by other replies, the anti-government hyperbole is more kooky than persuasive.

I am serious about it, not hyberbolic, but I will plan to leave it out of future stuff about this.
It's a file that was downloaded from Crowdstrike's servers, which have presumably been whitelisted in the firewall, and used to configure the software. Of course it's a software update, regardless of whether the file says .exe or .dll or .sys or .txt, and regardless of whether there was a prompt.

Again, the same team in most enterprises wouldn't dream of letting you have an auto- updating Firefox Nightly, they know how to configure software so it doesn't phone home for updates or is blocked from phoning home.
Actually I would go into that thing once I demo it to enterprises and they want the software. If I am able to lock one deal, I would get into this certification thingy as it is costly and time consuming. Do you have an enterprise software or did you go through the same path as I am right now? If yes, I would really want to know how you landed your first customer as it would be super helpful for me. Appreciate your insights.
I mean, only the threaded version, which is expected. For tons of cases Python without the GIL is not just slower, but significantly slower; "somewhere from 30-50%" according to one of the people working on this: https://news.ycombinator.com/item?id=40949628

All of this is why the GIL wasn't removed 20 years ago. There are real trade-offs here.
I prefer x509 client GUID certs, and AMQP+SSL with null delineated bson messaging.

Gets rid of 99.999% of problem traffic on APIs.

It is the most boring thing I ever integrated, and RabbitMQ has required about 3 hours of my time in 5 years. I like that kind of boring... ;)
Debuggers allow to "look around" the running code. This is really helpful in large systems, where you don't necessarily even know all the components.

It's fine when you're working in a nice segregated part of the system, where everything is well-defined. But it's not always the case.

Also, single-stepping is a nice mental tool, kinda like rubber-ducking. You single-step and explain to yourself what is going on.
Whitelist the persistent store?
This clusterfuck is a dress rehearsal if you ask my honest opinion.
What happens when your mechanism for checksumming doesn't work? What happens when your mechanism for installing after the checksum is validated doesn't work?

It's just too early to tell what happened here.

The likelihood is that it _was_ negligence. But we need a proper post-mortem to be able to determine one way or another.
They need a job because they are fleeing a war they didn't ask for and are trying to get back on their feet. I don't blame them for doing it. I just don't like it.
Nobody has given me a good reason to use it or proof that what it does is more than recombining what it hoovers up, so... I'm in the second camp.
Calm down mate, don't be so worked up over a random article posted in HN.

The OP is talking about taking pre-emptive maths course and accelerated learning not particularly taking a full course degree in math.

Personally, I think engineering students will benefitted more if learning engineering maths in their pre-universities courses namely matriculation, A-Level or Baccalaureate, rather than spending few years learning the subjects during their main engineering degree. It helps the student focus and minimize the pre-requisites.
Survived this long without such convenience. anything worth protecting lives behind a firewall anyway
The question is whether other OSs would require it to have kernel mode privileges. People run complicated stuff in kernel mode for performance, because the switch to/from userspace is expensive.

Guess what’s also expensive? A global outage is expensive. Much more than taking the performance hit a better, more isolated, design would avoid.
Don't worry, the passkey defenders have a perfectly good explanation for this. They'll tell you all about it just as soon as you email them privately to set up a phone call.
yeah but it's $900, used, on Ebay

I absolutely do not have that kind of money
This is awesome, I love it.
I disagree. In the current day the stakes are too highly to naively attribute software flaws to incompetence. We should assume malice until it is ruled out, otherwise it will become a vector for software implants. These are matters of national security at this point.
What are the tasks in question?
That’s a good point but I think the original intention was clearly “run sway until it’s done, then logout.”
Fixing it isn't hard and it could probably be automated with WinPE, but the real problem is BitLocker. This makes the process tedious since you can't automate it totally and you also need the key which might require a login on microsoft's site and then writing it by hand or finding the stick that had the key. I was reading that sysadmins on reddit were complaining that they lost the passwords to the microsoft accounts so they are doomed.
Do you think it comes from a fundamental misconception of how these roles should be structured? My take is that you just can't fundamentally assess technical elements from the outside unless they have been designed that way in the first place (for assessability). For example I educate my team that they have structure their git commits in a way that demonstrates their safety for audit / compliance purposes (never ever combine a high risk change with a low risk one, for example). That should go all the way up the chain. Failure to produce an auditable output is failure to produce an output that can be deployed.
>A friend of mine who works in a startup in Bangladesh tells me that critical infrastructure is being set on fire indiscriminately. Buildings such as data centers. He shared videos of many such burning buildings.

Targeting critical infrastructure doesn't sound like purely "anarchistic" rioting to me. It sounds like something a foreign hostile power would want to happen.

It reminds me of what is happening in Ukraine at the moment, where critical infrastructure is being targeted to hurt the civilian population. But here, instead of rockets, we have goons who are paid to burn things down?
This happened with intelij a while back didn't it? A spy pushed a code that caused a suplly chain outage somewhere, I can't remember the details.

Anyway, I believe this is what happened here in this case.
No but I as a parent have the responsibility to monitor and decide what my children see and don't not the state. freedom of expression is a guaranteed right and onerous laws like this are just a end-run around anti-censorship laws just as much as the think of the children claim is a end-run around rational thought.
> tests all of the possible target images that they claim to support.

Or even at the very least the most popular OS that they support. I'm genuinely imagining right now that for this component, the entirety of the company does not have a single Windows machine they run tests on.
90% of everything is crap.

Itch.io has almost no crap filters so all you find is crap. Steam lets anyone publish but you rarely come across any crap. Many PC game devs know that the income overwhelmingly comes from Steam vs every other site put together.

Unfortunately, this just gives more power to the walled gardens.
Scans of driver's license or passport with a selfie liveness check. That's the best that can be done right now.
The satire is good, but beneath it, in the reality of modern history and today, you do realize just how genuinely, barbarically cruel the Japanese Empire was? To put it another way, if you truly, genuinely had to start living under it as of tomorrow, would you genuinely prefer that the dominating hegemony be enforced by a country like the old Japanese Empire, or say modern Russia, or China, or the Modern Middle East, vs one dominated by the United States?

Many people who snidely show disgust at U.S cultural, social and economic/political domination of the world, or at least major parts of it, do so while voluntarily living in countries influenced by that same domination and not countries under the control of a rival power structure.
Yup, its also a requirement to be compliant for security standards like NIST.
for everything our logic is, it's not our main way of creating value. it's the one way we survive, hand in hand with a lot of ignorance. this planet has far more patience for us than we have for ourselves.