skysight-inc/HackerNews huggingface dataset:
Correct, I did not read carefully which is why I wrote that they usually get you once and then you learn.

But this whole thread is about dark patterns, and this is just an example of another one.

And to be honest, the only way to not pay for your luggage is if you fly VERY light which is only applicable for certain flight scenarios.
Well, if you’re not happy about it, as a paying customer, you should let them know. I did.
Yeah that makes sense I guess. Though that hasn't happened to me yet (couple of hundred flights in total I'd guess). I would probably have been nervous about this kind of stuff before my days as a relatively frequent flyer.
TLDR; People don't trust airline and airport with their carry on.

It's all about being sure your carry on luggage will be in the plane with you and not have to be checked in.

People don't want to pay for that and don't trust the airport to get the luggage to their destination.

Also if you do multi flight with different airlines that don't have code share you'd have to go take your luggage and checked in it again, do security etc ... (Depends on the airport).
> Crowdstrike Falcon

“Cybersecurity’s AI-native platform for the XDR era”.

I hope there’s a blockchain somewhere in it.
Only for very narrow and strictly defined use cases.
Crowdstrike in their official statement said "Linux and MacOS not affected". Are there any reports stating otherwise?
In the case of an emergency (which low fuel most definitely is) the captain has the ultimate authority and can tell ATC "I'm landing anyway".
Regulation or auditors rarely require specific solutions. It's the companies themselves that choose to achieve the goals by applying security like tinctures: "security solutions". The issue is that the tinctures are an approved remedy.
Not using this crap security software would mitigate this issue.
Uh, that's scary! I had this happen on one flight, they asked someone to take the next flight for some kind of bonus and someone volunteered.

Pretty insane that this can happen in the first place, but I guess with something like Ryanair I can see how people might want to play it safe then!
FCC votes to limit prison telecom charges
> I would love a language that has this gradual evolutional abstracting as a core concern. That makes it easy. Where you can start from simplest imperative code and easily abstract it as the need for this arises.

This is about how I write Clojure.

I start out with some code that does the thing I want. Either effectfull code that "does the thing" or functions from data to data.

After a while, I feel like I'm missing a domain operation or two. At that point I've got an idea about what kind of abstraction I'm missing.

Rafael Dittwald describes the process of looking for domain operations and domain entities nicely here:

https://youtu.be/vK1DazRK_a0
Who would trust that?
Sounds like an airline problem, not a customer problem. The airline should ensure enough storage space instead of having customers compete for storage space. Ryan Air looks like a bad experience to me based on people saying you have to board early to get storage space.
AI Disclosures Project
This thread is about their dark patterns, and this is another example of dark pattern.

You can blame me as much as you want for not reading thoroughly but still, it's an frustrating experience
Most people installed CrowdStrike because an audit said they needed it. I find it exceedingly unlikely that the same audit did not say they have to enable Bitlocker and backup its keys.
I have to say having used Ryanair a couple of times in the last year - it’s not all that bad. In fact I’d say the booking experience and UX of the site is a lot better than many of their competitors.

As long as you pay attention and read the information given to you - and check in via the app - then it’s smooth sailing. The flights (on my route) are so cheap, that upgrading everything (best seats, priority boarding, fast track etc) is still about a third of the price sometimes of flying with other operators without any hand luggage.
NOT SMOOTH SCROLLING!
Bills not paid in time is definitely an issue. Having access to charge you when needed reduces the proportion of upaid bills, so you get more money in time.
Isn't a Windows BSOD the equivalent of a kernel panic? I don't understand how this is CrowdStrike's fault. Vanilla userspace operations shouldn't cause a kernel panic--that's a bug in the OS, not a bug in some user software. If anything, we should be blaming Windows here?
Is Amazon bad? I bought a headphone from Amazon, which has just arrived in Sweden. Before that, I used almost every service for delivery here and they were ALWAYS terrible. They said 3 to 5 business days for delivery, and it took 6 business days. Every time. When they had the 1 to 2 days option (which was rare, and when they did it was expensive), it would never come within that timeframe either. I checked some Terms and Conditions and apparently they were within the law because they're allowed a few extra days due to unforeseen circumstances.

That's why I tried Amazon this time. For a small fee, they had "next day delivery". I tried it. God damn it worked! The very next morning my item was ready for pick up at the nearby grocer.

Signing up was extremely easy and to my amusement, they had the lowest price as well. I don't know, but so far I am thinking Amazon is very much the best in the business. I am extremely surprised they managed to be so efficient even in Sweden, despite every workplace regulation making efficiency a very difficult, if not impossible, goal to achieve.
The second amendment was a reaction to having lived under the oppression of British rule, not concerns over slave revolts or native uprisings.

That aside, the concept of amendments exist for a reason. It's totally reasonable for Congress today to amend the Constitution if a definition of "arms" is now needed. It wouldn't be the first time a new amendment modified or entirely voided an earlier amendment.

What we don't need is court rulings, executive actions, or even new legislation short of an amendment trying to modify or redefine an existing amendment. If an amendment needs to be changed or clarified that needs to happen at the level of another amendment, anything less is short cutting the system and, in my opinion, not democratic.
Ugh.

Though I can image there's a Azure market for "Citrix server" kinda thing in the cloud

(or maybe it's SaaS - Solitaire as a Service)
Fines are not enough because a large enough fine will kill a company, destroying lots of jobs and supply chains.

Why not dilute the shareholder pool by a serious amount? There's no need for a statization to formally happen, the government can sell the shares back over time without actually exercising control.

Also fire execs and ban them from holding office on publicly traded companies for the foreseeable future.

Seizing shares doesn't impact the cash flow of the company directly, thus shouldn't cause job losses, but shareholders (who should put pressure on executives and the board to act with prudence to avoid these kinds of disasters) are adequately punished.
I would like to see more of this kind of content on the main page.
Chance has more positive connotations than it has negative connotations IMO.

Probability is a more neutral word, and fits better.
> They must also avoid the letters Y, H, K, J, and W, which aren’t used in all languages that use the Roman alphabet.

Yet the article names Wegovy. Ketoprofen. Xeljanz.

I always thought they just outsourced the naming to AliExpress sellers, they're similarly imaginative :)
There are session IPAs and pale ales, which are both lower in ABV probably 5ish or less ABV-wise, re. headaches and just as flavourful hop-wise.
Legacy apps are quite common. I have recently been doing IT for State Farm Insurance.

Every State Farm insurance office in the country is still using a DOS App from the 1980's to run their office.
Lessons learned from this:

- CS: Have a staging (production-like) environment for proper validation. It looks like CS has one of these bu they have just skipped it
- IT Admins: Have controlled roll-outs, instead of doing everything in a single swoop.
- CS: Fuzz test your configuration

Anything I have missed?
A marginal tax rate that discourages profit hoarding.

Any other answer is just wrong.
If I were liquid, I'd be buying. The share dips from leaks and outages never last.
Fascinating Aida, "No Such Thing as Flights for 50p" https://youtu.be/ZAg0lUYHHFc?si=KG2Y0r36d6X9bFBE
You also forgot the part that it is a tool to spy on everything the employees do if it is installed on their computers.
Which is exactly the parent's point about "bureaucratic game that rewards successful completion with a cheap airline ticket"
I worked in orgs where customers put a certain security standard in the contract. So if you fail that you are kind of in breach of contract
Yes, in many contexts that may well be the correct conclusion. Your comment presumes that regulation here has proven itself useful and not resulted in a single point of failure which potentially reduces overall safety. It’s of course the correct comment from a regulator’s perspective.
To walk, you only need fins (and maybe a sense of adventure)
CrowdStrike is not a vanilla userspace program, it hooks deeply into the operating system.
> I like Apple Music because it has high-resolution music

What a shiteater.
> they should be able to operate without these IT systems.

Is that even possible any more? (That said, "operate" isn't a boolean, it's a continuum between perfect service and none, with various levels of degraded service between, even if you mean "operate" in the sense of "perform a surgical operation" rather than "any treatment or care of any kind").

All medical notes being printed in hard-copy could be done, that's the relatively easy part. But there's a lot of stuff which is inherently IT these days, gene sequencing, CT scans, etc., there's a lot that computers add which humans can't do ourselves — even video consultation (let alone remote surgery) with experts from a different hospital, which does involve a human, that human can't be everywhere at once: https://en.wikipedia.org/wiki/Telehealth

> Nothing critical / life-or-death / personal injury should rely on Windows / IT systems.

If you think that's bad, you may want to ensure you're seated before reading this about the UK nuclear deterrent: https://en.wikipedia.org/wiki/Submarine_Command_System
> It wasn't a software update, it was a content update, a 'channel file'

Because I know nothing about Crowdstrike... what is a "channel file"? Some kind of config file?
I feel the <3. Thanks for sharing!
But...surely you're also missing another point of consideration:

Single point of failure fails, taking down all your systems for an indeterminate length of time:

1. Risk: moderate (an auto-updating piece of software without adequate checks? yeah, that's gonna fail sooner or later)

2. Impact to business: high

3. Impact to manager: varies (depending on just how easy it is to spin the decision to go with a single point of failure rather than a more robust solution to the compliance mandate)
While software is often warranted, contracts won't often accept liability in terms of business damages etc, and that's not usually a requirement for compliance.

If it was, it would also make it impractical for a small business to contract with a large one because of risk.
It's not really meant as a concern, more a supporting argument: If every subpixel is identical, you can use simpler wiring patterns.
There are actually web versions of the office suite now.
> The 'not printing a boarding ticket' before you travel and being charged for it at the airport has been around since 2009

That does not mean it is acceptable.

Treating passengers in a respectable civilised manner should be a given. Quite why we have sunk to thinking such shenanigans are acceptable will continue to puzzle me. If any other business tried this, you would tell them to swivel.
I hope the narrative of , install crowd strike and pass the audit or else changes after this .

but being in the industry for so long , I don't expect any changes whatsoever, it's either CS or some other tool
I'm always kind of surprised when things don't just work.

Like having customers seamlessly interact with a computer is one of the cheapest ways of getting money.
Except when they do, that is.
Oh my, Sensational headline but very poor benchmark.

MySQL is known to have default configuration optimized for using minimal resources, rather than utilizing full server resources as such it has little value to benchmark in this configuration.

But even more benchmark show some "results" without showing how they are delivered. What is the data size ? How about concurrency? It is great to see Lua scripts are shared but what is about actual sysbench commands ?
your employer's IT department
Employees would rather care for their employment and keeping boss happy rather than going against their orders.
Interestingly SolarWinds is headquartered in Austin and CrowdStrike recently moved there too.
My company had a mandatory req of installing it. If you look into it - it logs and spies on everything you do, every dns req, every website, every application etc.

Now my m3-ultra MacBook work computer that they gave is a 4000 USD teams/email machine since I prefer to work on computers without spyware.
And this guy spotted it just in time:

https://old.reddit.com/r/wallstreetbets/comments/1e6ms9z/cro...
> Vanilla userspace operations shouldn't cause a kernel panic...

The component Crowdstrike says you need to remove to restore functionality is a ".sys" file. That's a kernel-mode driver. The fault is happening on the kernel side.
Because they limit it to 100 people. Because it's actually about guaranteed on board baggage in the lockers (in as much as Ryanair guarantee anything)
With only three comments, that doesn't count as "significant discussion", which means that today's re-posting is not a dupe by HN standards:

See "Are reposts ok?": <https://news.ycombinator.com/newsfaq.html>

Recent-ish dang comment clarifying further: <https://news.ycombinator.com/item?id=37484775>
I don't think Ryanair does this.
Does crowdstrike work similarly on MacOS? I have to imagine the "walled garden" doesn't allow for 3rd parties to insert themselves into the OS kernel but I could be wrong.
> her bag fit "correctly" but the wheels did not

This is just ridiculously mean...
> The bucket features 80 entrees and sides, 30 breakfast servings and 40 drink servings that just need water to prepare, for a total of 25,280 calories.

That’s only 10 days at 2,500/day for an adult male.

I suppose you could buy a bucket every year and retire them once they run out, then you’ve always got 250 days on hand.
What Apple sells as "retina" still doesn't match common print densities, there's definitely room for improvement.
> you had to pay extra to use the overhead bins

I'm not sure if I'm shocked to hear this because it breaks my expectations, or because it's just silly.
> Does anyone know any good FOSS projects that were actually funded by this?

SourceHut[1] comes to mind.

[1]: https://sourcehut.org/
Well, nice find, but now all the fakes have to do is add a new layer of AI that knows how to fix the eyes.
Meh, CrowdStrike is like FaceBook.

Nobody is really go away in the short term. If they didn't die from the last hack they're not going to die from this.
it's deleting all matching files
That update is so tone-deaf and half-assed. There's no apology.

If you go to the website, there's nothing on their front-page. The post on their blog (https://www.crowdstrike.com/blog/statement-on-windows-sensor...) doesn't even link to the solution. There's no link to "Support Portal" anywhere to be seen on their front-page. So, you have to go digging to find the update.

And the "Fix" that they've "Deployed" requires someone to go to Every. Single. Machine. Companies with fleets of 50k machines are on this HN thread - how are they supposed to visit every machine?!?!
It is really good! And thanks for the context, such an interesting read
I'm mandated to use one of those.

The security tradeoffs don't make sense at all once you understand how it works.

Ssh or winrm are significantly more secure than whatever some security vendor thinks will tick an audit box.

10ft pole is an excellent approach.
The Windows ecosystem typically deployed in corporate PCs or workstations is often insecure, slow, and poorly implemented, resulting in ongoing issues visible to everyone. Examples include problems with malware, ransomware, and Windows botnets.

In corporate environments, IT staff struggle to contain these issues using antivirus software, firewalls, and proxies. These security measures often slow down PCs significantly, even on recent multi-core systems that should be responsive.

Microsoft is responsible for providing an operating system that is inherently insecure and vulnerable. They have prioritized user lock-in, dark patterns, and ease of use over security.

Apple has done a much better job with macOS in terms of security and performance.

The corporate world is now divided into two categories:
1. Software-savvy companies that run on Linux or BSD variants, occasionally providing macOS to their employees. These include companies like Google, Amazon, Netflix, and many others.
2. Companies that are not software-focused, as it's not their primary business. These organizations are left with Microsoft's offerings, paying for licenses and dealing with slow and insecure software.

The main advantage of Microsoft's products is the Office suite: Excel, Word and Powerpoint but even Word is actually mediocre.

EDIT: improve expression and fix errors:
In centuries past, armored knights considered crossbows and early firearms unethical and unsporting. That didn't stop the armies of the time from employing them -- and warfare adapted, as it always does.

Today, all major powers are experimenting with, or already utilizing, "unmanned, automated killing machines" -- in addition to AI for C4I and other purposes. A responsible Department of Defense has literally no choice but to keep pace, and it would be the height of irresponsibility not to attempt to outrun its competitors. They don't have the luxury of closing their eyes and pretending that the world is at peace and that swords must now become ploughshares -- they have to take the world as it really is, not as they might hope it is.

The bottom line is simply this: The desire of peace-loving people to spare the world from militarism and war must include a commitment to maintain a strong and capable defense.

Besides, military procurement in the USA is slow as molasses, captured by lobbyists and a clique of prime contractors, and red-tape laden to a degree that people working in the tech sector can hardly comprehend. Anduril, in its way, is working to fix that extremely serious problem.
I am a research mathematician, a professor at a US university.

Anyone can do research. It is much harder to do research that other researchers will read and take an interest in.

"The strict formats, all the requirements before you can publish, the references you have to use, the nitty-gritty of writing essays, and the conditions that seem to be part of the status quo and hidden secrets between universities": If you want to write a paper which others will read, then you have to learn what topics others are interested in reading about, what other work has been done in the field, and how to write up your results so others will find them interesting. You would learn all of this (and much more!) in a good PhD program.

But if you don't care about recognition? Then all doors are open to you. Just do it! I'm quite serious. Never mind what others have done; maybe you're duplicating something that someone else did seventy years ago, but if you're not gunning for an academic job do you really care? You'll need to accept that no one might ever take a serious interest in what you've done, but the joy of discovery and problem-solving is available to you, as it is to everyone.
Can anyone explain how CrowdStrike could possibly fix this now? If affected machines are stuck in an endless BSOD cycle, is it even possible to remotely roll out a fix? My understanding is that the machines will never come to the point where a CS update would be automatically installed. Is the only feasible option the official workaround of manually deleting system files after booting into the recovery environment? How could this possibly be done on scale in organizations with tens of thousands of machines?
I know I have the benefit of hindsight in this regard, but how isn't there redundant checks and tests that would prevent a mishap of this magnitude?

I mean, there should be extensive automated testing using many different platforms and hardware combinations as a prerequisite for any rollout.

I guess this is what we get when everything is opaque, not only the product and the code, but also the processes involved in maintaining and evolving the solution. They would think twice about not investing heavily in testing their deployment pipelines if everyone could inspect their processes.

It might also be the case that they indeed have a thorough production and testing process deployed to support the maintenance of crowdstrike solutions, but we are only left to wonder and to trust whatever their PR will eventually throw at us, since they are a closed company.
via Reddit, don't know where so can't credit:

Kernel panic observed after booting 5.14.0-427.13.1.el9_4.x86_64 by falcon-sensor process -- https://access.redhat.com/solutions/7068083 -- 1 month ago
Well, Microsoft tried to lock down its kernel with Windows Vista and then antivirus vendors cried that they won't be able to protect Windows, anticompetetive etc.

https://www.computerworld.com/article/1642872/q-a-microsoft-...

https://betanews.com/2006/10/18/mcafee-ms-failing-to-provide...
I wouldn't be shocked if phone cameras accidentally produced weird effects like this. Case in point: https://www.theverge.com/2023/12/2/23985299/iphone-bridal-ph...
I been on flights where they just go to the people in the back of the line and says "sorry, your bag must be checked in because we dont have enough room in the overheads". Kind of sucks when you just got carry on (because now they will throw your luggage among the checked in bags and they might damage it and you have to wait in the airport for your bag)
I mean, you can always disable SIP and install your own extensions.
I wish there was more formalism around the idea of "dark patterns" it strikes me as a term for mechanistic configurations that encourage or elicit specific behaviours yet in practice it's more like intentionally hostile design/ux.
Takahē: An efficient multi-domain ActivityPub server
The question is, how did they manage to not crash everything for so long without a staged/rolling update deployment strategy?
WizzAir is even worse than Ryanair with dark patterns in my experience. Super annoying.
They might just be encrypted with a customer-specific key. That wouldn't surprise me.
I've never actually flown Ryan Air, but I'm pretty sure this is a perennial issue on Delta. They wind up checking people's luggage for free when it doesn't fit.
Don't. Deploy. On. Fridays.
The overtime alone would be a nightmare!
I bought a Kindle for this (programming books and PDFs) but was quickly disappointed

The device itself is pleasant enough

But I should have guessed, the experience for managing any content bought/downloaded from outside Amazon is almost unusable
> I'm sure Ryanair would have them go around selling fentanyl if it were up to corporate.

Ryanair boss said that he'd buy all the 737 MAX he could get because for the right price people are still gonna fly. So yes, I'm sure they would sell fentanyl if they thought they could get away with it.
It's highly studied and highly optimised

Any appearance of complication just means the airline cares more about revenue

So, we're back to the age old debate and wonders of greed and capitalism