skysight-inc/HackerNews huggingface dataset:
it's important to not feed the corrupt market participants, because they crowd out the actually productive ones.

yes, laws against corruption and waste, enforcement of said laws are how it should start. then with better accountability, transparency, mandatory reporting, and related regulations (and databases) are in place the old rentseeking organizations can be eliminated.

without those instruments what remains is just a blunt tool.

the question is ... if the government withdraws from sectors is there even any chance for legitimate businesses to move in or the old guard will just put their hands on these new relatively lucrative areas too?

usually inviting foreign companies helps. how easy it is to do business in Argentina? (official dollarization would definitely help ... after all it already happened in the actual economy ... https://cpsi.media/p/why-and-how-to-dollarize-argentina )
To be honest, I’ve always really not liked the name “openSUSE.”

This might be because I got into computers young, or it might just be neurological differences, but I often got in the habit of (mis)pronouncing abbreviations with syllables.

So, maybe it’s just me, but for half a decade it was in my mind as “open-Suzy”. This combined with YaST being rhymed with “kick ass” in one of their videos once created an immature perception. Stupid, shallow, but perceptions matter.

And, for anyone who remembers, SUSE Studio could have been a killer feature. For those who needed it, it was awesome. The commercially driven and highly technical replacement is no substitute and the shutdown is still a shame.
HP RoboCop [video]
And you have to use kosher salt by weight too, because Morton's is twice as dense as Diamond. (see https://www.kingarthurbaking.com/learn/ingredient-weight-cha...)
It could be nice if the example in the screenshot had some entries or something in it. As is, the example makes it look like a text editor with farm themed tab names, which is probably not pitching the project as well as it deserves!
Because it would be completely implausible for the foreign actor to want to put half the country to a stand-still. They'd likely do their very best to use this zero-day to gain even further footing in backdooring as much machines as they can.
Right? From the name you'd assume it's either some sort of missile, or a famous OpenSSL vulnerability (heartbleed, specter, etc).

I'd feel weird picking a protective app called "crowdstrike".
I mean, the same is true for Emacs. But that hasn't stopped other editors (e.g. VSCode) from developing large vibrant communities of users and tooling.
See also https://old.reddit.com/r/DrosteEffect/
preach it, brother.
Yes: https://typst.app/universe/package/letter-pro/
Show HN: I Lauched a New Ecommerce Store
I lauched A New Ecommerce Store In Pakistan By Collaboratin with teh Brand of skin Care Must Check It out https://larocheposay.com.pk/
I apologize. What I meant was: by this point in time there's a constantly growing pile of evidence that LLMs are highly unreliable, highly opaque reasoners and one shouldn't count blindly on them for critical missions or even non-critical ones.
It's been largely a problem of the marketing team not knowing how to use the tools they had. Rather than figuring out how to extract the desired data from Google Analytics, they wanted to add more trackers just because those trackers promised to make some datum more easily accessible to these non-technical users.

So we dodged some of those bullets just by a combination of training the marketing folks on how to use their own tools, and by just taking the bull by the horns and extracting the data for them.
I like lower case tweets and texts but lower case in articles like this is just ridiculous (and trying too hard to be cool)
This doesn't seem to have any functionality.

How did it get onto the main HN page?
Email the author of the paper and ask for a copy. My success rate with that method is 100%.

“Greetings,

I am interested in reading your paper, “[title of paper],” but I have only been able to find paywalled versions. Would you please send me a copy?

Thank you,

trogdor”
eBPF exists on Windows, too: https://microsoft.github.io/ebpf-for-windows/

They’re just not using it. They could have not used it for Linux too. The presence of the feature is not enough to guarantee this would’ve never happened in a hypothetical.
Human parasites in the Roman World: health consequences of conquering an empire
See some of the comments from affected medical staff on the main outage story, but the tldr is, tightly coupled systems.
There’s no implementation yet, looks like just project boilerplate.
> They have a staging system which is supposed to give clients control over this but they pissed over everyone's staging and rules and just pushed this to production.
Nothing? They are not ignorant of the rest of the world existing.
> I think the good news, if it's incompetence, is that they can greatly reduce the risk of recurrence by improved processes and tooling.

Now let me give you the realistic news: every executive everywhere will just hand-wave this away with "it will not happen again anytime soon, or ever, right?" and be back to business as usual.

The extreme cost-cutting and allowing non-technical people to rule us is what is getting us into these messes every time. And humanity in its totality seems almost completely unable to learn.
In an industry which is based on ticking check boxes for auditors, relying on Crowd strike will auto untick the checkbox. The only hope for them is rebrand and starting from scratch.
Your laptop can serve 200k qps per core?
That's not what happened at all, and the article you link doesn't say that.
I get that, my point is, why is it absolutely necessary to use the computer system? Why don't they just knock on the door, go grab the medicine and tools, apply it, then fill it into the system later?

I understand they would just postpone whatever can be postponed to save the headache, I don't get the stories about life/health threatening situations.
Let's imagine your backpack is open.

It's polite to say thanks if someone informs you that you accidentally left your backpack open.

But in no way you are supposed to give them anything.

Even further, some people take precious things from your backpack (trying to exploit the issue)
and then come back to you asking for money; claiming they are nice people. This is non-sense.
I call this “fail normal” and it has been a foundational principle of all my smart home automation.
Sooo we’re building “SQLite for local-first development”, it’s here! Uses CRDTs, can be a partially replicated db, peer to peer networking and discovery.

Bruinen.co

Shoot me a note if you want an early build! Or if interested in building with us :)

tevon [at] bruinen.co
New images show uncontacted tribe dangerously close to logging concessions
Cool, small farmer here...

OP, how exactly are we supposed to use this?
It's pretty shocking how many commenters are blaming the individual for not "trying harder" to find contact information. It's pretty clear a16z didn't want to pay anything or appreciate the disclosure at all.

Finding random email addresses and sending them a notice would have gone no where other than spam folders. I get dozens of "disclosures" every week from mostly script kiddies that think my DKIM setting is somehow going to be the end of my business. My brain automatically ignores emails like it.
I used Btrieve a lot in several jobs in the UK in the late 80s and early 90s. It was fast and easy to work with, mostly

I used the stand alone version, not the later NLM on the server
Not to undermine the selflessness aspect, but there is some evidence that regular blood donation is actually healthy — especially I believe for men, who tend to have higher blood pressure and higher levels of iron, both of which are alleviated through whole blood or red cell donation.
That was my initial instinct on reading that sentence too - I don't think converting from one language to another is actually very common.

But in this particular case I think they justified doing so: "Our team had a prototype written in the language, R, and wanted to convert this to our standard production tech stack, Golang and ReactJS."

As a Python programmer I tend not to worry about this, because Python is a good language for both prototyping and production - but I can absolutely see the need for this if you're prototyping with tools that you wouldn't want to run in production.
South shore of Alamdea CA has this and it’s great. My kids called them the “secret paths.”
Having been through enough procurement cycles as both a buyer and seller there does not need to be a whit of malfeasance for a bad decision to occur. It's aggressive sales, price wars, poorly informed decision makers, gut instinct, favoritism, familiarity, incumbency, network effects.

You notice how this outage affected hospitals and airlines? There is a strong tendency in software sales for industries to align around one or two leaders. Oh, American chose Crowdstrike? Maybe we at Delta should just do what they did. Or literally Delta hires the VP from American to be their CISO and he just does what he did before.

Vendor selection is hard and buyer's remorse is frequently hard to deal with once you've sunk cost into a migration.
I have been wondering why they didn’t do canary deployments. Seems like quite an obvious thing to do.
Yeah, didn't the US just ban Kaspersky, over fears that Kaspersky could cause such an outage (among other fears)?

Turns out our homegrown CrowdStrike was just as bad as our fears over Kaspersky were. Perhaps worse.
> It’s only market manipulation if you have the intention of making the stock go down, right?

Sounds like a great swing trade to take a long position in CRWD for retail.
Or teach people that not having sex isn't the end of the world.
That’s env vars, but not actual variables - it’s really easy (if you are not actively context aware) to f.ex. pass a ”user” object from a server context into a client component and expose passwords etc to the client side.
Actually, they posted that a vulnerability existed, https://x.com/xyz3va/status/1807330215955177937:

> someone from @a16z get in touch, now. its bad. security related
I like that framing!

Alternately, they did not ever test the ability of their code to accept arbitrary configurations. That totally could have been done, allowing fast config pushes. But it wasn’t. So as a reliability engineer, I’d point at that change: configs were originally expected to be tested, so the parser was only tested to be sure it showed issues on pre-release testing. Later, they started shipping configs faster than their release cycle, but didn’t check to requalify the parser for this new requirement.

Behind that, I’d look at the engineering and product culture that had that happen. Is there a list of what’s been tested for what purpose? Was the expectation that configs get tested like software written down someplace, and do the roles who scheduled that config release read that place? Who is organizationally set up to notice this, and why is it a director-level IC straight out of xkcd 2347?
You're being weird...

I wrote nothing about controlling people. Only communicating with them, so they can make informed decisions about what level of contact they want.
Didn't Motorola give up on the 68k?

Every other vendor that made 68k based machines (Apple, Sun Microsystems, Atari, ...) either switched to another architecture or went out of business. Treading water might have been good enough to survive if a platform shift wasn't necessary but it was.

I remember the Macintosh 2 machines having a color GUI that was head and shoulders refined over competitors but they were crazy expensive. Amiga had much better game and multimedia capability but not as refined desktop at a much lower price.
I was in the ER with my wife for an asthma issue for about 90 minutes (no ambulance), and the bill after insurance was $1,750.
$4000 is also pretty expensive; at my 7% yearly interest that's $23 a month. at my number of 0.9¢ per kilowatt hour that's 2600 kilowatt hours per month, an average of 3600 watts. i will be very surprised if you are using 3600 watts round-the-clock average unless you have a machine shop in your garage

so i think you are dramatically overestimating the cost of rooftop solar
I think your cynicism may be misplaced in this particular situation.

CrowdStrike's ability to make sales is (I assume) very dependent on their appearance of trustworthiness.

Given the microscope they're under, and how serious some of their customers are, I think they'll need to make a convincing case that this kind of problem won't happen again.

Reminds me a little of Boeing, now that I think of it.
The types of law that you would normally expect to protect you as a US consumer against completely defective security software that does nothing right and harms customers do not work on software for a variety of complicated reasons. In a way that is completely distinct from other kinds of things that are sold, you will not be able to recover under a UCC warranty claim, a negligence claim, or a claim related to defectively designed or manufactured piece of software.

If Crowdstrike is litigated into non-existence, it will not be in America, because the law doesn't work like that. Worth noting that there are a lot of software companies in America. This is not a coincidence.
One of the most popular threads was about a diesel repair shop.[1] Probably a context window issue.

1: https://news.ycombinator.com/item?id=41008009
So you’d rather researchers reach out to black hats with this information instead? Because that’s what this line of thinking leads to.

It’s in everyone’s, especially the company’s, best interests to have a bug bounty and easily accessible security hotline. Expecting researchers to jump through hoops like contacting their offices’ front desks to get to security is absurd.
Names aren't really all that accurate in tech anyway.

You don't go to Amazon for rainforest information.

You don't go to Google for information about big numbers.

You don't go to Uber for an Aryan vibe.

You don't go to Apple for fruit.

You don't open Windows to let in a cool breeze.

You don't need a trap for your wireless mice.

Monster isn't going to eat you.

Jeeves isn't actually a person you can ask, and knows less about buttling than you'd expect.

FireEye is competition to crowdstrike, not an STD.

You get used to it after awhile.
I lament this too. Paris has nice public pay toilets and Germany has the custom of leaving a euro. Maybe a company will open a series of public-private toilets in major cities. The government could help by providing space, utilities etc. The company charges a low rate, keeps things stocked and cleaned, police patrol it and everyone benefits.

I understand the arguments of drugs and sex, but architecturally, socially, and civically we can mitigate that and should towards the common goal.
If you want to hear the history of [DEC/VMS] NT from the horses mouth:

https://www.youtube.com/watch?v=xi1Lq79mLeE
You can also get pretty close by salting the cabbages a lot, then rinsing them once they’ve gotten seasoned enough to be pleasantly salty.

Also it’s quite hard to oversalt kimchi in my experience. You’ll need to ferment it longer but eventually the sourness will balance out the salty
The Amiga was a terrible machine for hobby programmers. It was way too complicated.

Making programming easier would have also resulted in more commercial software for it.
omg.. that explains a lot.
If the point is to clean beaches and that's it, I think my points hold. Sure, there are stairs on some beaches, but it's not really any significant percentage of the space to be cleaned up, thus not really worth optimising for IMHO.

If the point is to _start_ with beaches and to then use the same platform to clean up all kinds of yet to be determined areas, a quadruped might indeed be one of the few viable options. Wheeled robots can climb stairs with the right platform, but I wouldn't argue they can traverse arbitrary terrain the way quadrupeds can.

Personally, when designing robots, I have very clear tasks and constraints in mind, making conscious tradeoffs. But I'm a software developer, that's how we do things. It's perhaps not how professional roboticists do things.
Oh it was a NULL pointer access... again.

I wonder if this is a preventable problem, hmmmm.

No sir, not at all! It was inevitable! Let's just leave this behind us! Those who think it's preventable are part of a certain "evangelism strike force", I tell you! They make zero good arguments, never listen to them!

Back to business as usual, boys! C/C++ are without a single flaw!
Why should it be an onus on the researcher to find this information? It should be plainly provided in the first place.

Someone shouldn’t have to jump through hoops to help the company secure its resources. That is not how this works.
Google's wrong answer to the threat of AI – stop indexing content
This is great. Thank you for building this.

Is there a way to change the behavior? I like to see tasks get completed thru the day. For me return would toggle “done” state for a task (strike through?) and keep the task visible but done. Then at day end I could “archive all done” tasks to clear out the clutter.

Thoughts?
I always thought keynes gets a bad wrap because he didnt understand or atleast didnt explain that for his ideas to work the politicians need to be reasonably sure they will be voted out if their deficit spending isnt atleast mostly positive roi stuff or very short duration negative roi stuff, which isnt true unless all voters have real losses when politicians run deficits or decades of negative roi stuff has left a majority of voters sure things cant get better or atleast keep them insulated from the bad down that path.
Do not use eleventy, their cli bugs out very frequently
Hugo is underpowered
Terrible analogy. This is more like someone returning your wallet full of cash, on live TV. You aren't legally obligated to give them anything, but it sure is a dick move not to and good luck getting your wallet back next time you drop it if you don't.
I'm not sure I buy the concept of induced demand. If you widen a road and it results in more traffic, that sounds like there was already more demand than supply.
> It's a negligible amount of money for the person using the toilet

Spoken with the voice of privilege.
It appears to be called Flush!

https://techcrunch.com/2024/01/05/this-app-lets-cafes-and-co....
I did the same thing with OP years ago, I tried to contact in every way possible the dev team of the largest telecom company in my country.

All channels were ignored, so I have to resort to contacting our government agencies. Luckily, one agency replied to me and had one of the devs contacted me. For this hassle I was only paid $50.

You have no idea the effort we go to report this things. So I quit bug hunting after that.

I mean, a16z should be very grateful this got reported by an honest hunter regardless of the means it was reported.
> Oh, they would also be used by those mentally retarded zoomers who really can use GNOME without cursing every five seconds and without feeling they have zero productivity. One should be born into macOS to like GNOME, and even then.

Stopped reading after this.
Why would you even want to start an entire new language with no tools, no debugging, no libraries, no ides and no optimizations just so you could make some data structures that could be made with C++ classes?
Yes, they are much worse than bon-fide actual single cores on most recently purchased laptops. But also, the HN hug of death mostly happens with tiny non-static sites that are sloppily hosted. If you're serving static assets it's hard to "hug of death" a Casio watch.
They absolutely do, long before Apple did: WHQL (pronounced “wickle”).

https://blogs.windows.com/windowsexperience/2018/12/19/drive...
A number that would surprise most of us in more-comfortable circumstances, I suspect.
I can imagine that for something like this procedure, which is an infusion of medication into the brain it sounds like?, that the "tools" to perform the procedure themselves are computer based or computer dependent. It might not be as simple as injecting a drug into an IV line.

Note that I am not a doctor and have absolutely no specific knowledge beyond what is in the original article, but I am guessing at potential explanations.

Additionally, the article states that there is some "wiffle [sic] room" around the timing of the infusions. So it may be that the delay is not quite as serious as the title makes it sound.
... Did they actually steal anything or take advantage, or just touch the bag to make sure it wasn't fake? Seems more of the latter, and your analogy falls flat when the bag carrier contains other people's pii.
To me the 90deg rotation along with the 9:1 scaling is what makes the recursion more compelling. In total it makes a full 360 rotation and 6561 scaling.

Also, then noticed that the sqrt(10) is almost exactly 256/81, the 4th root of 10 almost 16/9, and the 8th root almost 4/3.

Too bad the Vegas sphere is 21:9.
Why will giving someone a cash reward mean you have a better chance of getting your wallet back in the future?
Did Boeing actually suffer in any measurable way?

I can accept your POV of me being too cynical btw. But I think it's also important to give you one extra nuance: everybody feels awkward after "accidents" like these and everybody is very willing to accept half-arsed explanations (that usually have zero details or guarantees of future better practices) and they just want to move on and forget about it.

Historically it seems that this approach wins in 99% of the cases.
The Rapid Decline of the AI Data Commons
That's true but coincidentally I was just in a conversation with someone on Mastodon discussing community vs. commercial distros (in the context of RHEL/CentOS/Fedora) and they made the comment that a lot of people thought OpenSUSE was too closely aligned with the commercial product. Without any inside knowledge, it seems like this might be part of dealing with that.

FWIW, some of the SUSE leadership is ex-Red Hat so that might inform some thinking.

ADDED: I'd also add that this is a longstanding products vs. projects branding issue. There's a huge temptation to lean in on an existing brand--whether a product or project--which leads to pain and suffering as you need to draw lines between the two.
Wait, do hackers feel entitled to money for finding security holes, even if there was never any signal of such reward?
Using a closed-source DB is a hard sell.
It's because these computers are a means of corporate control. Policies and checks and procedures and whatever are all delivered through them.

It's preferable, from the corporate perspective, to have everything fail temporarily than to relinquish this level of workforce management.

If this is hard to imagine, just think of a Lyft driver from the perspective of Lyft Inc.
Tabs seem like they'd be great training material for LLMs and generative music. Does anyone know of projects attempting this?

Update: looks like some papers got into it last year:

Rock Guitar Tablature Generation via
Natural Language Processing: https://arxiv.org/pdf/2301.05295

GTR-CTRL: Instrument and Genre Conditioning for Guitar-Focused Music Generation with Transformers: https://arxiv.org/abs/2302.05393