skysight-inc/HackerNews huggingface dataset:
incentive can and does undermine the stated goal. what if the government decided to take control of everyone's investment portfolio to prevent the market doing bad things? or an airplane manufacturer gets takes control of its own safety certification process because obviously its in their best interest that their planes are safe? imposed curfew, everyone has to be inside their homes while its dark outside because most violent crimes occur at night?
So martians are into rock n roll huh? :o)
Better switch everything over to Autokey
This is a rotten thing to do by Taylor & Francis. Humans are treated as expendable pawns to serve the capital and the machine.

We need new publishing models with strict copyright protections that protect against theft. Academics should run their own publishing houses as a cooperative.
> That info includes that the faulty file consisted entirely of zeros.

Even that is not certain. Some people are reporting that this isn't the case and that the all-zeroed file may be a "quick hack" to send out a no-op.

So no, we have very little info.
debatable but shit thats a bad pr
That article itself might be part of the degradation. It mentions at least four times that the contract was canceled as if it's something new. I wonder if someone just dumped a bunch of facts and ran it through a spin cycle a few times with AI to get a long form article they didn't expect anyone to read.
> Do you need all this crazy level of kernel access, probably not

You absolutely do. Otherwise, you'll be unable to detect malware that IS putting itself into the kernel.
> because they aren't installing LoL on their line of business machines anyway

But if their business is incompatible with strict software whitelisting, their employees might...
Publishers do a lot more than print things out. I'm not saying that what they do is good, but "let's just put it on the internet" doesn't replace publishers any more than rideshares replace long-haul trucking.
Unify is a forward-thinking, independent branding and product design studio that thrives in the digital realm. Our passion lies in crafting holistic, user-centric digital experiences that effortlessly navigate any challenge. At the heart of Unify is a close-knit team of visionaries, innovators, and achievers who are dedicated to pushing boundaries and redefining norms.

We take pride in our commitment to exploring unconventional paths and continuously striving for improvement. Our approach is rooted in open dialogue and active listening, ensuring that we understand, adapt, and progress together with our clients.

Our goal is to develop solutions that not only address immediate needs but also pave the way for a brighter, more sustainable future. At Unify, we are more than a design studio; we are partners in your journey towards innovation and excellence.
### Ode to Tangerines

In orchards bathed in morning light,
Where verdant leaves and branches sway,
The tangerine, a gem so bright,
Awaits the dawn of a golden day.

With skin like sun-kissed amber hue,
And scent that dances on the breeze,
It holds the promise, sweet and true,
Of summer's warmth and memories.

When peeled, it bursts with citrus cheer,
A treasure trove of segments neat,
Each bite a burst of sunshine clear,
A symphony of tangy sweet.

Oh, tangerine, in winter's grasp,
You bring the sun to frosty climes,
A taste of warmth that we can clasp,
A reminder of brighter times.

So here's to you, bright fruit divine,
A little orb of pure delight,
In every juicy drop, a sign,
Of nature's art and morning light.

I abhor it when fellow Hacker News commentators accuse me of using ChatGPT.
There will also be a lot of human + AI content I imagine.
They weren't as disruptive as cell phones, or handheld gaming consoles.

Just nice to have. I mainly used mine to ride my road bicycle like crazy through the forest, to an endless loop of 'Lucifer' by Alan Parsons Project. Or other stuff while riding the subway. And if you were smart you didn't listen at max volume anyways, while the feeble on ear headpieces just rested lightly on your ears. So there was a muted awareness of what was going on around you.
and it just disclosed how much life and death situations rely on windows.

needs better safeguards.
Decent chance they were using something like this: https://en.wikipedia.org/wiki/Spear-thrower
In my first engineering job ever, I worked with this snarky boss who was mean to everyone and just said NO every time to everything. She also had a red line: NO RELEASES ON THE LAST DAY OF THE WEEK. I couldn't understand why. Now, 10 years later, I understand I just had the best boss ever. I miss you, Vik.
Something I could recommend would be working alongside others to get it done.

I’ve actually been running a little group[0] that gets together every week over the course of 6 weeks to push their products over the finish line. The weekly accountability really helps keep the motivation going. It’s actually a ton a fun! We’re just about to start our next 6 weeks and always welcome more people.

[0] https://lmt2.com
So, if CrowdStrike licenses didn't say "We're responsible for nothing" and if all affected users sued them, they'd be worth negative 90 trillion dollars or so right now. iow out of business.

I can understand the frustration their customers feel. But how could a software company ever bear liability for all the possible damage they can cause with their software? If they built CrowdStrike to space mission standards nobody could afford it.
Which printer did you try it with? I've never had issues with printing out of the box with windows or mac. At least not for the past 5 years.

Also, I'm glad Microsoft doesn't provide an easy way to get what is essentially complete control over a machine, and every single event/connection/process that it has.
Not talking about the applications - those could be ported and, ideally, financed by something like the UNDP so that the same tools are available everywhere to any interested part.

I'm talking about Crowdstrike's Falcon-like monitoring. It exists to intercept "suspicious" activity by userland applications and/or other kernel modules.
Your point was "post-Soviet cities have hot water year around", and your point was wrong.
Went through this same exercise this week and came to the same conclusion.

After trying multiple open models, reconfiguring GPT-4o and seeing the speed and quality of the output was illuminating.
It looks like it will be some time before free-threading can be safely used in production. I don't want to have to worry about whether the underlying C code supports no-GIL mode, or trade off single-threaded performance. [0]

Maybe someday this will make parallelism in Python at least as sane as other languages, but in the meantime, I still want to use a compiled language any time performance matters and wait for the kinks in no-GIL to be ironed out.

[0] https://docs.python.org/3.13/whatsnew/3.13.html#free-threade...
You’re right that Apple can get away with things Windows can’t. But in the case of kernel extensions, I think Apple has shown a valid path Microsoft should take.
> It is also worth to note that, generally speaking, an Encoder-Decoders of 2N parameters has the same compute cost as a decoder-only model of N parameters which gives it a different FLOP to parameter count ratio.

Can someone explain this to me? I'm not sure how the compute costs are the same between the 2N and N nets.
Aren't they also one of the academic publishers that's been criticized for charging for access to articles, and the authors don't get anything from the publication/distribution?
The OP for this very thread said as much.
This is the whole point of 1984. It's not some overbearing government entity that surveils their citizens; the citizens bring it on themselves.

They willingly relinquish their right to privacy in service of protection against a potential threat, or the appearance of one.
I’m kind of ok with this? I’ve written and had book chapters and research articles published. I never thought I was in any sort of position to restrict access. Publishing is about getting it out there. Attribution might be an issue, but that is a separate conversation and perhaps dealt with, if possible, by having LLM’s cite sources more accurately.

I have not kept up with the latest on LLM’s and licensing, but I’m curious: are scientific papers accessible to LLMs? Honestly, a bigger societal loss in my view is publishers like Elsevier restricting LLM access to research articles, rather than being too permissive. I could not care less if Elsevier makes a little bit of money in the process.
"Who was the best Canadian lyricist of all time?"

{doesn't answer "Gordon Lightfoot"}

"Sorry, here's a Youtube link you should watch..."
Yet it is how antivirus works on Mac now.
They almost certainly have such a process, but it got bypassed by accident, probably got put into a "minor updates" channel (you don't run your model checker every time you release a new signature file after all). Surprise, business processes have bugs too.

But naw, must be every random commentator on HN knows how to run the company better.
thats a lot of prod to test in.
Publicly funded science shouldn't be "published" by some corporation, it should go directly into the public domain.

Having a totally artificial middleman makes no sense when basically all publishing happens digitally. And the public deserves full access to the science they have funded.
> If they opted for an eBPF service but put that into early boot chain, the bootloop or getting stuck could still happen.

If the in-kernel part is simple and passes data to a trusted userland application the likelyhood of a major outage like the one we saw is much reduced.
Many people want to either tiptoe around or flat out ignore the far right leanings of fascism to avoid what it says about the US
Keyword is eventually. By then C-level would've been retired. Others in top management would've changed multiple jobs.

IMO point is not where are these past top companies now but where are top people in those companies now. I believe they end up being in very comfortable situation no matter which place.

Exceptions of course would be criminal prosecution, financial frauds etc.
"I heard on the grapevine from a friend who knows someone working for Crowdstrike" is perhaps not the most reliable source of information, due to the game of telephone effect if nothing else.

And post-processing can mean many things. Could be something relatively simple such as "testing passed, so lets mark the file with a version number and release it".
> I honestly though HN was slightly higher quality

HN reminds me of nothing so much as Slashdot in the early 2000's, for both good and ill. Fewer stupid memes about Beowulf Clusters and Natalie Portman tho.
I was working at a place that delivered onprem software. One customer asked us "We like features of version N but we're running N-1. Can you backport them so you don't have to upgrade?". I replied we'd already done that, it was called version N.
Yes, and as the comment before it asserts, most engineers would never take that kind of time. They'd bang out some workaround as quickly as possible and move on with life.

But my original comment at the top also praised the value of the 1x engineer; noting that the rest of us could learn a thing or two from them. There is no denying that 1x developers are the better developers.

The question remains outstanding: Where did you pick up the suggestion that the quick fix is a suitable replacement for the talented engineers who can fully understand a problem that prompted the rebuttal?
Nah, nope.

1/ linux is as vulnerable to kernel panics induced by such software. In fact, CS had a similar snafu mid April, affecting linux kernels. Luckily, there are far fewer moronic companies running CS on linux boxes at scale.

2/ it does offer protection - if you are running total shit architecture and you need to trust your endpoints not to be compromised, something like this is sadly a must.

Incidentally, google, which prides itself at running a zero-trust architecture, sent a lot of people home on Friday. Not so zero-trust after all, it seems.

Lots of armchair CIOs/CTOs in the comments today.
And the most important part: pay them an annual subscription fee.

Sincerely,

PreCheck Premium with Clear Plus Extra customer
As an academician I wholeheartedly support this. Some journals are now charging thousands of dollars to make our work open-access. This is an industry run by sociopaths.
Dude, the fact that it breaks directly.

You sound like the guy that a few years ago tried to argue (the company in question) tested os code that didn't include any drivers for their gear's local storage. Its obvious it wasn't to anyone competent.
I think the worst part of the incident is that state actors now have a clear blueprint for a large scale infrastructure attack.
This is pretty much a standard model in academic publishing
My understanding was that the North Sentinelese were the largest uncontacted tribe.
Group chats for everything. Channels are horrible.

If you are on Linux install chrome and install Teams as a WPA. On Firefox i think its purposely made bad.
My thoughts exactly. See my comment below. The whole purpose of being an academic is to publish and disseminate knowledge.
Reflection: Smalltalk's Most Enduring Idea? By Bryan Foote (2017)
Why lift a finger to do anything if you can just spend taxpayers' dollars on a settlement?
"These are matters of national security at this point."

Which nation exactly? Who on earth "wins" by crashing vast numbers of PCs worldwide?

Many of the potential foes you might be thinking of are unlikely to actually run CS locally but its bad for business if your prey can't even boot their PCs and infra so you can scam them.

I might allow for a bunch of old school nihilists getting off on this sort of rubbish but it won't last and now an entire class of security software, standards and procedures will be fixed up. This is no deliberate "killer blow".

Who knew that well meaning security software running in Ring 0 could fuck up big style if QA takes a long walk off a short plank? Oh, anyone who worked in IT during the '90s and '00s! I remember Sophos and McAfee (now Trellix) and probably others managing to do something similar, back in the day.

Mono-cultures are subject to pretty catastrophic failures, by definition. If you go all in with the same thing as everyone else then if they sneeze, you will catch the 'flu too.
> Child sex abuse sites get blocke

Because every society in the world agrees it is unacceptable and works with foreign police to shut down the operators. The same would not be true for normal porn sites that are ignoring a foreign age law. Russian police wont do shit to shut down adult porn sites.

So now youre talking about ISP level ip blocking, but that will just lead to widespread VPN and tor usage. Are we going to ban VPNs and tor too?
I don't use Copilot so not able to compare but ollama + llama3:instruct + open-webui on a Mac Pro M2 is helpful when coding.
"The plaintiff had not shown which Amazon ads she relied on to believe there was “free delivery” from Amazon-owned Whole Foods, the judge said. Lin also said the service fee for deliveries was shown on two webpages during the checkout process."

The plaintiff could have solicited the public for assistance, e.g., asked for screenshots showing the evidence. Because there's definitely evidence of this.
> It would be decent and transparent of them

This is Google we’re talking about. I think at this point they are institutionally committed to the notion that their users ought not trust them to keep services going and if they do, then shame on the user.
Why do you assume there is a requirement to access nodes directly, and why would that be a typical requirement?

(There are ways to achieve that more declaratively than by building the entire DOM imperatively, JSX and React’s refs is one approach, but I wonder why you assume direct access is always needed in the first place.)
Or the opposite: the enemy (or a third-party enemy who wasn't previously a combatant in the battle) hijacks your entire naval USV/UUV fleet & air force drone fleet using an advanced cyberattack, and suddenly your enemy's military force has almost doubled while yours is down to almost zero, and these hijacked machines are within your own lines.
Yeah it's the US's fault if a corporation misbehaves in Europe. It's so sad that Europe cannot legislate or do anything about it. PayPal is just inevitable I guess. Wait no, Europe is more than capable of doing that but they don't care about it either. Hence why they also don't do anything against Ryanair. Oops!
Engineering notation used for prefix convenience.
It's simple: the failure is not specific to the OS.

Crowdstrike runs on MacOS and Linux workstations too. And it's just as dangerous there; the big thread has stories of Crowdstrike breaking Linux systems in the past months.

Crowdstrike isn't needed by/for Windows, it's mandated by corporate and government bureaucracies, where it serves as a tool of employee control and a compliance checkbox to check.

That's why it makes no sense to blame Microsoft. If the world run on Linux, ceteris paribus, Crowdstrike would be on those machines too, and would fuck them up just as bad globally.
I have a question maybe you know, are boom and bust cycles good for the economy long term? Or is it too extreme to be useful,

Like my understanding of risk in financial markets is that (though of course a security could go bust) a high risk security is one that has bigger swings, but that those bigger swings lead to bigger long term gains.

I guess even if things go bust if you’re let’s call it morally flexible, boom cycles give you a better chance of making your millions.
I can think of a lot better things to put in a kernel-level driver installed on every critical computer ever than a bunch of 0s.
The primary answer to your question is because it's expensive to switch.
This goes way higher than the average corporation.

This is companies trying desperately to deliver value to their customer at a profit while also maintaining SOC 2, GDPR, PCI, HIPAA, etc. compliance.

If you're not a cybersecurity company, a company like CrowdStrike saying: 'hey, pay us a monthly fee and we'll ensure you're 100% compliant _and_ protected' sounds like a dream come true. Until today, it probably was! Hell, even after today, when the dust settles, still probably worth it.
I still have a 10-year old screenshot from a colleague breaking production on a Friday afternoon and posting "happy weekend everyone!" just as the errors from production started to flood in on the same chat. And he really did just fuck off leaving us to mop up the hurricane of piss he unleashed.

He was not my favourite colleague.
This would be challenging. Establishing crowdstrike’s duty to a hospital patient would be challenging if not impossible in some jurisdictions.
Real paper is probably as much about breaking from the "IT culture" as it's about the physical properties. E-ink display would probably help with power outage, but happily display BSOD in an incident like this.
We expect different things from the OS we use, I guess.

My main machine is a Macbook Pro and one thing that annoys me a lot is the way Apple handles apps that are not notarized. I don't use iPhones because of the system restrictions (file access, background running, etc) and because I can only install what Apple allows on their store. You can see why I don't want Microsoft to hold my hand when I use Windows... it's my machine, I paid for it, I should be able to install crapware and extend the system functionality if that's what I want especially when I pick an OS that allows me to do that.

In this case, enterprise customers decided to use an OS that allows them to also use CrowdStrike. Maybe Microsoft could handle this stuff better and not show a BSOD? I guess so, but I won't blame them for allowing these tools to exist.

Don't get me wrong, there's a place for very restrictive operating systems like iOS or ChromeOS, but they're not for everyone or enough for all tasks. Windows is a very capable OS, certainly not the best option for everyone, but the day Microsoft cripples Windows like that, it's the day I am forced to stop using it.
some critical software has DRM that only works in Windows
> also often serialises all network and disk on the machine through to one single thread

Do you have more info about this ? I am very interested.
Is it impacting SAN fc storage ?
The article mentions T5 and translation is something T5 is supposedly good at - just sharing I was less than impressed.
That's not what the discussion was about. If you don't think crowdstrike qualifies as one of the best, justify your opinion.
This isn't really true. LLMs are discriminating actual truth (though perhaps not perfectly). Other similar studies suggest that they can differentiate, say, between commonly held misconceptions and scientific facts, even when they're repeating the misconception in a context. This suggests models are at least sometimes aware when they're bullshitting or spreading a misconception, even if they're not communicating it.

This makes sense, since you would expect LLMs to perform better when they can differentiate falsehoods from truths, as it's necessary for some contextual prediction tasks (say, the task of predicting Snopes.com, or predicting what would a domain expert say about topic X).
Urgent updates can be necessary every once in a while but should be recognized as technical failures on the part of the developers. Failure can be forgiven, but only so many times. The comments saying "what about X update that had this feature I need?" are missing the point entirely. Instead ask yourself about all of the updates you've made without even looking at the patch notes, because there are just too many updates and not enough time. Instead of blaming the producers for creating a blackbox relationship with the consumers, we blame the consumer and blindly tell them to "just update." That's what needs to change. It's a bit similar to opaque ToS issues.
Hmm, the driver must be signed (by Microsoft I assume). So they sign a driver which in turn loads unsigned files. That does not seem to be good security.
If no one is going to learn from academic papers/data what’s the point in doing it? People care less and less about the impact more about how much money it’ll make them. If that’s all you want from it then be honest but don’t complain when someone makes more money from something than you.
I think the only real solution is for MSFT to stop allowing kernel level drivers, as Apple has already (sorf of, but nearly) done. Sure, lots and lots of crap runs on windows in kernelspace, but what happened today cost a sizable fraction of world's GDP. There won't be a better wake up call.
I rushed my post and skipped QA, went straight to production. (fixed, thanks)
I messed up the second reference, it should be https://arxiv.org/abs/2212.03827
There’s a decent amount of “good news overnight” because of time zones.

Samsung release earnings with higher than expected phone demand, Apple will drop. Apple releases higher device projections, TMC will rise. Nokia releases new projections, people say “oh yeah, Nokia is a thing”.
What he said at the start of the cnbc interview sounded like an apology to me. The first thing that came to mind was that's great but at the same time might be a problem for a lawsuit IANAL.