skysight-inc/HackerNews huggingface dataset:
I see. So to summarize:

1. The initial post made a strong claim about high levels of fraud.
2. I asked for evidence to support this. The evidence given was arguably very sparse.

The quote you shared is from my response to point (2). Arguably in a world of infinite pedantry it could have been phrased differently. For example: “given how relatively rate cases of fraud supported by actual evidence are” might have been clearer. However given the context I assumed that claims of scientific fraud would involve evidence.

This seemed a good place to end the conversation. Yet:

3. You came in and “judo flipped” the conversation to “aha; but what about the fraud that could theoretically exist but that somehow had produced no evidence of its existence. Perhaps these levels are very high!”
4. I said that evidence of absence would be enormously difficult to prove, given that it would require resources beyond those we currently spend on science to identify this.
5. And moreover I pointed out that we have never had the means to detect this evidence-non-producing fraud and yet science has managed to produce massive and visible benefits that we experience on a daily basis.

And thus this leaves us at an impasse. All science may be full of fraud and bad results that we cannot detect. Perhaps it always had been! And yet this has not prevented science from producing results that are enormously valuable. I am left with some questions:

1. What strategy would you pursue to answer your extremely difficult question, given that real-world resources are extremely finite. Please do not say “well, we just need to replicate every result” becayse this simply misunderstands the point about resources.
2. If we cannot devise a feasible policy to test your “perhaps science is full of fraud” question, what should we do instead? Is there an actionable policy you’d pursue?

My view is that strong answers to both questions are not so much interesting to me, but interesting in terms of whether your world-view has value. Surprise me!
Well, computer hardware was stagnating without a forcing function. Running LLM’s locally is a strong incentive to get hardware more powerful and run your own local models without any ADs.
I think its because at this point there is nothing else interesting to say. We've all seen AI generated images that look impressively real. We've also all seen artifacts proving they aren't perfect. None of this is really new at this point.
I clicked hoping to see Smoke on the Water mentioned, and there it was right at the start.
looking at https://outage.ant.isi.edu/ it seems Europe is having a bad day too
Both. Some stuff its thought to be an evolved dispersal strategy.
Has there been any indication from NetBlocks how they think the government is blocking internet access? I can still see subnets being announced from Bangledesh associated providers.

AS 17494
AS 38592
AS 136246
AS 152304
AS 24323
This has been possible for well over a year, just not with OpenAI’s API specifically.
These days it makes sense to life-cycle entire container images rather than maintain applications with their dependencies.

The current BSOD epidemic demonstrated the folly of mass concurrent versioning.

*nix admins are used to playing upgrade Chicken with their uptime scores. lol =)
And there are no deadlines or other targets to meet either. "Don't work on it for a year because I don't feel like it" is perfectly reasonable and valid.
I think a lot about software that is fundamentally flawed but gets propelled up in value due to great sales and marketing. It makes me question the industry.

It's interesting that this is being referred to as a black swan event in the markets. If you look at the SolarWinds fiasco from a few years ago, there are some differences, but it boils down to problems with shitty software having too many privileges being deployed all over the place. It's a weak mono culture and eventually a plague will cause devastation. I think a screw up for these sorts of software models shouldn't really be thought of as a black swan event, but instead an inevitability.
Literally everyone that sends marketing emails uses HTML (from political campaigns to video games, to movies, to shopping). You'd be putting yourself at a serious competitive disadvantage if you started sending plaintext (not to mention that it would look spammy, if anything).
When is HW much more complex than the SW? I work in a company that designs (far from trivial) hardware, and develops embedded software, and in my experience software is always more complex than hardware, due to the many layers of abstraction (unless you are writing only, IDK, boot loaders in assembler? and even then it is about the same level of complexity)
Why did they update everything all at once?
Again, this is something the sysadmin can configure. Reread my comment.
If people didn't notice, this was built by a 13 year old. This is a fun space to be building stuff in. Neat little project and I hope you keep it up!
Think the parent meant the client companies probably won't generally be held liable. CrowdStrike is certainly going to be in all sorts of trouble.
30 years ago (oh dear, that's got to be too long?) I wanted to print out a bunch of guitar tab from OLGA (the online guitar archive, probably kicked off the net many times since?), but that ascii format meant that when you shrank it to try to fit more on a page, you just ended up with empty space.

So I wrote this https://ctan.math.utah.edu/pub/ctan/tex-archive/support/psta... (linking to the manual not the code - the manual is itself a program using the code I wrote to do the formatting) - a thing for formatting guitar tab that _ran on our Apple LaserWriter_, because we had pretty much nothing else that could do graphics. I learned postscript to write this, and because I needed to do some diagrams for my PhD, and wrote it in a week... so it's rough. But after the first couple of days I realised, that not only could I get it to format tab typed in the format I could type quickest, but I could get it to parse the ascii tab and reformat it to fit on a page, with nicely drawn lines not minus signs.

It also does stuff like printing verses with chords annotated, chord tables, and suchlike.

I recall going back to this 10 or 15 years later and the output in ghostscript was fugly, but at the time, I got a message from someone who'd used it to publish a book of banjo music in New Zealand - because it was the only thing that handled variable numbers of strings that he'd found!

Of _purely historical_ interest, I wouldn't recommend plumbing the code for any insights, since like I say I was very new to the language, and the stuff I wrote in the manual with my opinions about code are fairly embarrassing. But hey, the past is past.
No no no, it’s “never update anything and don’t expose your machine to the internet”. Winning strategy right there.
I'm not sure your conclusion is a fair take. In the app I work on, GIL acquisition would easily take 2-3x longer than the postgres queries which would subsequently be issued.
It's probably best to follow the HN guidelines (https://news.ycombinator.com/newsguidelines.html) and use the original title. I've done that now. (The submitted title, for those who like to keep track, was "Deutsche Telekom issued invalid certificates, hasn't revoked them since 6 months".)

It's certainly fine to share what you think is important about an article, but the best way to do that is by adding a comment to the thread.
That's what these researchers are doing. There's vanishingly little possibility of life on Venus; they're fishing for research funds in leu of proposing kinetic mechanisms for the phosphine.
The CTO with a shitty track record, not the line employees. He deserves zero reprieve
In 2014 I stopped at a Subway in Utah, in the 'burbs.

Some guy was oh-so-excited to show me the back of his truck, and how he had set it up to live there if he needed to. He had a whole solar setup.

(And, even though I'm not a prepper, I bought one of these buckets, and iodine pills, when war broke out in Ukraine.)
> Why would Windows systems be anywhere near critical infra ?

This is just a guess, but maybe the client machines are windows. So maybe there are servers connected to phone lines or medical equipment, but the doctors and EMS are looking at the data on windows machines.
I am more guilty of this than anyone and I don't have any solid advice that has worked in the long-term so I'll be following this thread.

That being said... in the short-term.... I'd suggest taking a break from the project for at least a few days. Go for a long boring walk around your neighborhood if you are able to. Get your senses stimulated. Try not to think about the project during this time but you will find when your brain invariably goes back it doesn't feel quite the same. Possibly new connections are made or decisions to let things go are made. Or not. At least you got away for a bit.
Edit: As pointed out by doakes [1], the project is built by a 13 year old. With that context, I want to preface my original comment by congratulating TheGoodDuck on this project. What follows is criticism, but also do not take it too harshly. These are things I'd expect a developer with experience to know, but not a junior. As you might gather, the issues are even common among seasoned developers. So take the comments as a learning opportunity and remember that criticism of a work is not a criticism of you. These are also soft skills which are often not explicitly taught, but critical to growing as an engineer/developer. If you're doing this at this age and you keep up the work and dedication, you will be a force to reckon with in no time. I am not editing my original comment as this is how I would talk peer to peer and you're a peer ;) But I also wanted to give this context and preface because the style of language is a bit strong. Also note that these issues are very solvable and solving them will make your project even better.

The comments are there to help you improve, not to put you down.

---------------------------------------

You're not alone. Even worse when it is a product page. Just how often I see some product or project and are unable to actually determine what the thing does or why I would want to use it or even HOW to use it.

I can give GitHub projects a pass when someone else links them, but the poster is the author so no pass. This is "Show HN". Please __show__. I do like to try out new projects and tools, but where's the hook?

Also, do not underestimate the importance of documentation. Hell, I document predominantly for myself. I know I'm not alone in forgetting how things work if I haven't touched a project in awhile (which can even be going to lunch on bad days). This is also critical for any users. Encourage them to add docs, make it easy, and when addressing issues recognize that just because it is in the docs does not mean it's interpretable from user context.

If you want to demonstrate a CLI or TUI tool, a common helper is asciinema[0]. You can record your terminal and they'll host the output for you. You'll frequently see these on GitHub and even a 10 second video that is clunky/slow with key presses (or way too fast) is better than nothing. UIs matter and aren't as simple/obvious as many think.

Also, drop a license file in there. Not just a line in your README. Come on, GitHub even hands these files to you so it is the same work to write in your README as it is to drop that file in (though you should always mod those licenses headers to be about you and your project). Without the license file, your license is ambiguous and may not actually protect your project as intended. The full text needs to exist.

[0] https://asciinema.org/

[1] https://news.ycombinator.com/item?id=41010519
That's an inflection point, all right. OpenAI's customers can now at least break even.

Of course, it means a flood of crap content.
TL;DR: Cut scope and call it done?

These sound like you're trying to build something with professional polish when you wanted to have fun:

> Part of it feels like I've tried to do too much at once instead of building piece by piece

> writing the tests for these and going back and forth on different decisions has killed all productivity and drive within me.

Why not build something awful and silly? Alternatively: add an awful plugin system and say it's left up to the user.
And you do not have the right glass, get Nitro

https://nitrosurge.guinness.com/en-gb/
> Earth is already supporting more people than is sustainable.

By what metric? If it's a matter of available land, there's plenty to go around: open Google Maps, turn on satellite imagery, center the map on Arizona, USA and zoom in. Absolutely nothing but interstate roads and bushes. No buildings, no people, no nothing.

"There are over 11 million blocks in the U.S., and 47 percent of them are uninhabited."

https://www.fastcompany.com/3029826/mapping-all-the-places-i...

Our large, metropolitan cities may be more crowded than sustainable, but Earth != NYC.
Exactly, and this is why I've heard the take that the companies who integrate this software need to be held responsible by not having proper redundancy, and while its a fine take, we need to keep absolutely assailing blame at Crowdstrike and even Microsoft. They're the companies that drum the beat of war every chance they get, scaring otherwise reasonable people into thinking that the Cyberworld is ending and only their software can save them, who push stupid compliance and security frameworks, and straight-up lie to their prospects about the capabilities and stability of their product. Microsoft sets the absolutely dog water standard of "you get updates, you cant turn them off, you can't stagger them, you can't delay them, you get no control, fuck you".
sometimes challenging, very challenging... but SO valuable.
A follow up question is why is the one OS chosen the one historically worst at security.
Unfortunately, it's usually the case that the last 10/20/30% of a side project takes 90% of the work.
I do not think windows is the problem here. The problem is that equipment that is critical infrastructure being connected to the internet, imo. There is little reason for a lot of computers in some settings to be connected to the internet, except for convenience or negligence. If data transfer needs to be done, it can happen through another computer. Some systems should exist on a (more or less) isolated network at best. Too often we do not really understand the risk of a device being connected to the internet, until something like this happens.
Ransomware that affects only individual computers died not get payouts outside of hitting extremely incompetent orgs.

If you want actually good payout, your crypto locker has to either encrypt network filesystems, or infect crucial core systems (domain controllers, database servers, the filers directly, etc).

Ransomware getting smarter about sideways movement, and proper data exfiltration etc attacks, are part of what led to proliferation of requirements for EDRs like Crowdstrike, btw
Show HN: Yet another JavaScript framework but for Discord bots
Been building this node.js framework for the past 2 years, with multiple versions & iterations and fine tuning.
i'm going to expand the discord.js ecosystem with a new, fresh framework for node.js/bun.

The framework is based off traditional 'command handlers' that the discord.js community has crafted to organize their code. I try to keep this familiar structure in sern & build upon it.
recently, I released version 4 which I am very proud of and hoping you guys could check it out! Always willing to help others get started.

Visit our website. We have easy-to-understand guides and documentation.
If you ever need help, don’t hesitate to join our discord: https://sern.dev/discord, and we'll be there :)
Exactly! Even with local LLM running on the browser/client side.
One thing I learned from that post back then is that you can instruct Grub to ignore some part of your physical memory. Really nice trick, not sure this is doable on Windows / Mac?
The question is, why do lifts require Crowdstrike?
Ohh… didn’t realize that. Will email CISA to tell them to withdraw their monthly “switch to memory safe languages” bulletin.
I was at the supermarket here last night about the time it kicked off. It seemed payWave was down, there were a few people walking out empty handed as they only had Apple Pay, etc on them. But the vast majority of people seemed fine, my chipped credit card worked without issue.
> all of the things your company should be doing and didn't

Processes need to match the potential risk.

If your company is doing some inconsequential social app or whatever, then sure, go ahead and move fast and break things if that's how you roll.

If you are a company, let's call them Crowdstrike, that has access to push root privileged code to a significant percentage of all machine on the internet, the minimum quality bar is vastly higher.

For this type of code, I would expect a comprehensive test suite that covers everything and a fleet of QA machines representing every possible combination of supported hardware and software (yes, possibly thousands of machines). A build has to pass that and then get rolled into dogfooding usage internally for a while. And then very slowly gets pushed to customers, with monitoring that nothing seems to be regressing.

Anything short of that is highly irresponsible given the access and risk the Crowdstrike code represents.
Generative AI would have mandated QA as best practice and to limit corporate liability.
Blaming crowdstikes QA might feel good but the problem is that no company in the history of the world have been good enough at QA for it not to be reckless to allow day one patching of critical systems, or for that matter to allow single vendor, single design, critical systems in the first place. and yet the cyber security guidelines required to allow the pretense that windows can be used securely all but demand that companies take that risk.

It's also fundamentally a problem of Danial, everyone knows there will not be an good solution to any issue around security and stability that does not require that the assets tied up inside fragile monopoly operated ecosystems to be eventually either extracted or written off but nobody want to blaze new trails.

Claiming powerlessness is just lazy yes it might take an decade to get out from under the yokel of an abusive vendor, we saw this with IBM, but as IBM is now an footnote in the history of computing it's pretty clear that it can be done once people start realizing there is an systematic problem and not just a serious of one-off mistakes.

And we know how to design reliable systems, it's just that doing so is completely incompatible with allowing any of America's Big IT Vendors to remain big and profitable, and thats scary to every institution involved in the current market.
> For example, putting in 50k page views a month, with a Finance category, gives a potential yearly earnings of $2,000.

> I'm going to take the median across all categories, which is an estimated annual revenue of $1,550 for 50,000 monthly page views.

> This is approximately ~$0.00022 earned per page view.

The problem is... this doesn't take into account a million AI generated sites suddenly all competing for the same amount of eyes as before, driving revenue to zero very quickly. It'll be worth something for a bit and then everyone will catch up.
This is everything I hate about the internet in one story. Using ads to target people, using AI to clone someones' voice and identity, dogs. The person who said they were excited, confused, scared but curious sums up how I feel about this although I'm not curious because I know where it leads.
Twitch will be reinstating Donald Trump's account today
But most managers get to their positions by passing the buck and not being present when inevitability happens or being able to blame the other guy.
Generating content on the fly is already happening, has been for a while. Word spinners used with a script that grabs the content of the first 5 Google results, Wikipedia, etc, has been around a long time and Google indexed the incomprehensible garbage it created.

Lot cost models just lowered the bar of entry.
Mistakes are perfectly fine, that's why multiple layers of testing exist
"In my eyes it could be pretty nice to have a framework version that's supported for 10-20 years and is so stable that it can be used with little to no changes for the entire expected lifetime of a system."

This is what applications used to be like, before the web and internet hit and regular or even push updating became easy.

It was simply so difficult and expensive to provide updates once the software was in the customer's hands that it was done intentionally and infrequently. For the most part, you bought software, installed it, and used it. That was it. It never changed, unless you bought it again in a newer version
Internet is quasi centralized already. An outage or intentional disruption by a couple of companies under US Jurisdiction can disrupt global internet. Yes you would still have some clustered connections here or there but most of internet infrastructure is almost centralized already.
Record breaking heatwaves is not scientific or something anyone can feel? It's news to me that humans are incapable of feeling heat, weird considering I'm using 2 fans and am still sweating, when I didn't before. or british folk are having heatwaves that their infrastructure can't handle because they're used to colder weather... or that humans can't feel wind considering "Beryl was the earliest Category 5 Atlantic hurricane on record." [0].

Look, you wanna plug your ears then do so, I do so as well, but claiming that the weather wont be that much different is provably false and irrelevant when we're undergoing a massive extinction event that is urgent, just because we have time limits. doesn't diminish from the situation or undermine from its continued urgency.

https://www.ncei.noaa.gov/news/global-climate-202406
So, what did you find?
We’ve got three operating systems, three giant cloud providers, and a near monoculture of browser engines. It’s not great, even if it could be worse.
That's what I usually do, except when they ask you to take out all your devices and put them in bins individually.
Is this how an Ai take over or state sponsored cyber attack would look like?
Moscow, Idaho.

St Petersburg, Florida.

Angola, New York.

Melbourne, Arkansas.

There’s an entire Wikipedia page for US cities and towns named after non-US places.

https://en.m.wikipedia.org/wiki/List_of_U.S._places_named_af...
Psychological Affordances Can Provide a Missing Explanatory Layer for Why Inter
Not my experience, I just Teams messaged myself to verify and it came right through.
Is this just practice for September?