skysight-inc/HackerNews huggingface dataset:
a better read is the discourse between D Hofstadler and Penrose as it addresses both sides of the argument with actual working theories...

And, yes it takes a while to digest...you have to invest some time in reading both authors series on the subject...but its well worth the read.
A baby custobot!
Time to invest in non-AI content
I suppose I was expecting something more authoritative here. They confirm that there was an attempted read-out-of-bounds, as CrowdStrike said, but that's not really new information at this point. I suppose we'll need to wait for more detailed analysis from CrowdStrike at some point.

This post explains why security software has historically run in kernel-mode, and really seems to be pushing new technology that Microsoft has that would push security vendors into user-mode (with APIs that attempt to assist with many of the reasons why they have historically used kernel-mode).

Crowdstrike already runs in user-mode on both Mac and Linux (from what I can tell), and it seems like running in user-mode on Windows would significantly lessen the risk of catastrophic failures like a blue-screen-of-death. I know the bulk of the failures here belong to CrowdStrike, but I can't help but think about the fact that Apple kicked security vendors out of kernel-mode a ways back, and that if Windows had done similarly, an issue like this probably wouldn't have been possible. By even offering kernel-mode options to external vendors, I believe Microsoft is creating risk for themselves.
Because the benchmarks don't measure what people do with computers.
I mean, this is basically what eBPF accomplishes in Linux.
That's actually the core of the issue. Windows gives users the capacity to run programs with Kernel access. The affected companies gave Crowdstrike kernel access. Crowdstrike crashed in Kernel, taking out the machines.

This kind of issue would not be possible in Linux/Macos unless the user configures them to allow the same kind of direct kernel access. At least for macos this is off by default. Not certain about linux but I think the default is more locked down than Windows.

Microsoft attempted to lock kernel access in 2009, the EU complained, so Microsoft kept it open in order to allow "competition in security vendors", and this is the result.
> where security and availability are non-negotiable.

Yep. You just have to pretend that everyone who deployed Windows had an actual competitive choice available to them.

> A second benefit of loading into kernel mode is tamper resistance.

I guess availability is negotiable after all.
Noip isn't free?

I have 3 domains there for years and I haven't paid them once.

Some time ago they started requiring that I mark the domains active each month. I wrote a script that intercepts that email and logs into their site to reup the domains. Recently that script broke and I haven't bothered to fix it because logging in once a month is a nothing burger.
https://www.theglobeandmail.com/report-on-business/careers/l...

"Apologizing easily and quickly is what millennials want"

Not gonna get it, though.
At least they're not blaming the European Union in this breakdown (as they did earlier).
I think hardware transcoding is a bit overrated since pretty much every device nowadays can decode most formats at a good resolution and frame rate.
> We plan to work with the anti-malware ecosystem to take advantage of these integrated features to modernize their approach, helping to support and even increase security along with reliability.

> Providing safe rollout guidance, best practices, and technologies to make it safer to perform updates to security products.

> Reducing the need for kernel drivers to access important security data.

They are being as diplomatic as they can, but it's definitely a slap to CS. Read as "they don't know how to roll things out, they need guidance on basic QA practices, we'll happily teach them...". Then, they list a set of facilities running in user-mode to avoid needing to run as many things in kernel mode.

I would be interested what the water cooler discussion about CS was like inside Microsoft. Especially in teams needed to respond to customers about "Your windows OS is broken, our hospital patients are suffering...".
Not sure about this. There have been multiple Congressional hearings that produced continuing nuggets of information, provoking yet more speculation.

And in the past 24 hours ABC had a rather shocking interview with the local police revealing that: "The local SWAT team assigned to help protect former President Donald Trump on July 13 had not had any contact with the Secret Service agents in charge of security before a would-be assassin opened fire, those officers told ABC News. . . . We were supposed to get a face-to-face briefing with the Secret Service members whenever they arrived, and that never happened," said Jason Woods, lead sharpshooter on the SWAT team in Beaver County, Pennsylvania."

This report seems sure to fuel further rounds of speculation concerning the abnormal security arrangements.

https://abcnews.go.com/Politics/failure-communication-local-...
Shameless question tangential related to the topic.

We are based in Europe and have the problem that some of us sometimes just forget we're on call or are afraid that we'll miss OpsGenie notifications.

We're desparately looking for a hardware solution. I'd like something similar to the pagers of the past but at least here in Germany they don't really seem to exist anymore. Ideally I'd have a Bluetooth dongle that alerts me on configurable notifications on my phone. Carrying this dongle for the week would be a physical reminder I'm on call.

Does anyone know anything?
Abstract interpretation can do constant folding and branch elision. It changes the program instance. Type checking is about invariants over a specific program, not changing the program itself.
But zero back to back winners since 2000.
Yeah Workflowy is still popular. Dynalist was created because Jesse Patel was taking years to add any basic feature to Workflowy at the time. They didn't even have hyperlinks (you had to paste links in the note field as URLs) Dynalist added hyperlinks and API access and CSS themes and all sorts of features. Workflowy has slowly been catching up, but isn't quite there. Still no API, so my scripts can't send notes straight to nodes via mac spotlight for example. And lots of little nuances that have grown on me. But Workflowy has added some unique features like mirror nodes that Dynalist never had. I like both. If I wasn't used to years of Dynalist at this point, I'd definitely be on Workflowy.
Making a more realistic "looking" simulation would not be more work or less simple.

For both, simply following the path of the first circle is both a simpler algorithm and closer to natural movement
Agreed, I definitely understand their reasoning. But I also found it a bit funny that the word "CrowdStrike" appears 27 times in a fairly short blog
I dont doubt it provides some nutrition I doubt that it provides fully complete nutrition.
That's what strange to me, I'm friends with a Sámi, family are herders of reindeer in the north, visited them a few times and never heard of birch water.
>Then ask it to convert the problem into each of those formal methods. Then use something like Mathematica on each formal method.

Draft, Sketch, and Prove from 2022 does something like this: https://arxiv.org/abs/2210.12283
All business are built on relationships, technical competency can but doesn't have to be a means to that end.
Why the United States Is Suing Apple [video]
Move semantics and rvalue references. It was clear that within C++11 there was a substructural type system struggling to get out.
I work on a team which runs hyper critical infra on all production machines at BigCo and have the same experience as you.

The problem are not the alerts — the alerts actually are catching real problems — the problem is the following:

1. The team is understaffed so sometimes spending a few days root causing an alert is not prioritized
2. When alerts are root caused sometimes the work to fix the root cause is not prioritized
3. A culture on the team which allows alerts to go untriaged due to desensitization.

Our headcount got reduced by ~40% and — surprise surprise — reliability and on-call got much worse. Senior leadership has made the decision that the cost cuts are worth the decreased reliability so nothing is going to change.

The job market is rough so people put up with this for now.
That's silly. You may as well bring a telegraph to show how bad the idea is the internet is.

There are better, more reasonable arguments against too much AI hype.
Or the classic we learned in CS ethics class, Feist Publications, Inc., v. Rural Telephone Service Co. https://en.wikipedia.org/wiki/Feist_Publications,_Inc.,_v._R....

> ... a landmark decision by the Supreme Court of the United States establishing that information alone without a minimum of original creativity cannot be protected by copyright.[1] In the case appealed, Feist had copied information from Rural's telephone listings to include in its own, after Rural had refused to license the information.

That's a US decision. The EU recognizes database rights, https://en.wikipedia.org/wiki/Database_right .
>Microsoft attempted to lock kernel access in 2009, the EU complained

And the EU complained only because the likes of McAfee complained. Microsoft here is "dammed if you do dammed if you don't" since so many of these security vendors make a living by being able to act like malware themselves in order to sell security. If Microsoft would lock them out of the kernel they'd all scream "anti-competitive" to the regulators.
RPis used to be cheap.
RF exposure on the ground from an aerial are likely non-harmful. Right next to the antenna can still give burns. There's also issues of arcing, lightning, and other electrical issues when dealing with high power radios.

Electricity is unforgiving and a lot of the safety rules in licenses above Technician try to instill that fact.
Even this is written after multiple reviews by corporate lawyers.
from what I understand, CrowdStrike has essentially put a Turing-complete interpreter for their scripting language into the kernel. I doubt you can do much when something is that general purpose.
It's the thing that makes sodium and potassium in water go bang!
It kind of feels like activists have been trying to erase the concept of vegetarianism/pescatarianism in recent years while pushing full-on veganism.

That's probably not a good move if we want to achieve a pragmatic reduction in meat consumption to help reduce related CO2 emissions. A smaller step is a much easier sell.
Aren't there only like four laws in psychology?
> The big open secret of the software industry is how barely everything works.

Maybe it's the pessimism of age, but it feels like that describes all biology, economies, politics, etc...
Intel’s hyperthreading is really a write pipe hack.

It’s not so much cache misses as allowing the core to run something else while the write completes.

This is why some code scales poorly and other code achieves near linear speed ups.
I believe this author must be trying to demonstrate his own advice.
> I can't help but think about the fact that Apple kicked security vendors out of kernel-mode a ways back, and that if Windows had done similarly, an issue like this probably wouldn't have been possible

Like others already said, Microsoft already tried to do that with PatchGuard in 2006 with the launch of Windows Vista and the likes of Symantec and McAfee complained to the EU about this would harm the sales of their products, so the EU told Microsoft to not do it in 2009[1].

Apple has the luxury of a small market share on the desktop PC space to not attract the attention of the regulators, plus a user base that's used to Apple constantly rewriting the OS, deprecating APIs, switching CPU architectures, etc. without giving a fuck about breaking backwards compatibility or cutting off developers access to OS features their products use and getting away with it, luxuries that Microsoft doesn't have.

IMHO, sticking with Window's default security and not using third party anit-malware has made Windows vastly more secure and rulabile than it was in the days when you'd be looking on installing the likes of Symantec or McAfee for your "protection" which ended up acting like malware after a while throwing dark patterns at you to milk more subsection fees, so as much as it hurts their sales, it's important for the regulators to understand that security is far more important than the regulations they put on Windows for Internet Explorer and Media Player and just like Apple's apps-store, it's sometimes better to let the original product maker handle security and not leave the product open at all points just so some of these bandits can make a living selling security for it. It's like foxes complaining to regulators how chicken wire is a threat to their existence.

[1] https://stratechery.com/2024/crashes-and-competition/
> TikTok and its Beijing-based parent company ByteDance used an internal web-suite system called Lark to enable TikTok employees to speak directly with ByteDance engineers in China.
> technical competency

In a more fair world (that also valued economic productivity/growth more) companies which completely ignore that wouldn't survive, though.
> It reduces alert fatigue by classifying alerts as actionable or noisy and providing contextual information for handling alerts.

grimace face

I might be missing context here, but this kind of problem speaks more to a company’s inability to create useful observability, or worse, their lack of conviction around solving noisy alerts (which upon investigation might not even be “just” noise)! Your product is welcome and we can certainly use more competition in this space, but this aspect of it is basically enabling bad cultural practices and I wouldn’t highlight it as a main selling point.
Reminder that Microsoft could have programmed Windows to notice if a driver has caused a blue screen three times in a row, and prompt if you want to disable the driver on boot. After all, Windows already collects how many times a driver causes a crash. This would have made recovery one click instead of heading into Safe Mode and needing BitLocker keys.

But they didn’t.

And Microsoft, I argue, also has blood on their hands for every hospital this hit. Giving users a prompt to disable the driver, after three successive failed boots, would have saved lives.
tolower() with AVX-512
That is correct, they are not. My former workplace had Pagerduty integrated with Slack, so I get it...
The bit that sticks out in the story is this:

Justin and Sebastián left the company with the transition to investment

Obviously a ton of context is missing but if you are planning to stake the future of your company on a product that had until now been developed by these two gentlemen why weren't they going to be part of that future?

One thing I have grown an appreciation for over the years is the power of very small teams, i.e groups of less than ~4 or so. When you have a very small number of very capable people you can paper over a lot of deficiencies.

Overall though a very realistic view into what it's like trying to scale up a startup. If it's any consolation most of them blow up just like this, don't feel bad if this is a pattern you recognise from your past - it's just how it is. The game is hard and failure is expected, scale ups are by far the most vulnerable time in a companies history and yet you need multiple of them to "make it" and each one is completely different from the last.
How would that have helped the server farms that were experiencing the issue?
Well, I can say I made more headway with this than with his book on the same topic that I saw at the library. In particular, this article seemed to justify the steps toward the "ruliad" a little better. Or maybe it's juuuust short enough that I didn't lose patience first.
What you've come up with looks helpful (and may have other applications as someone else noted), but you know what also makes on-call suck less? Getting paid for it, in $ and/or generous comp time. :-)

https://betterstack.com/community/guides/incident-management...

Also helpful is having management that is responsive to bad on-call situations and recognizes when capable, full-time around-the-clock staffing is really needed. It seems too few well-paid tech VPs understand what a 7-Eleven management trainee does, i.e., you shouldn't rely on 1st shift workers to handle all the problems that pop up on 2nd and 3rd shift!
Startups, hip small companies, tech product based companies. Most non tech product based or enterprise banks in NL are on Teams
Nate Parrott, Gamification Enthusiast
This is an oversimplification imho. Many of the greatest jazz musicians like Miles Davis and John Coltrane played instruments that could only play one note at a time, and they still manage to convey harmonic concepts.

I don’t have an answer for why most music teachers don’t teach theory (and improv) other than it’s more challenging and they might not know it themselves, and it’s easier to teach rote memorization.

There are plenty of people who learn piano (which obviously doesn’t suffer from the single-note “limitation”) and also learn almost no theory.
Despite all the negativity towards Wolfram, he’s one of the few out there whom I’m jealous about. He gets to work on his own products, gets time to develop his own theories about important stuff and using his own tools. That’s basically my dream. Who cares if at the end, his findings have “no substance”, he’s living the (nerd) dream.
Something like 80%+ of Mozilla’s revenue already comes from their partnership with Google. So I guess that just leaves the CIA…
Does anyone know weather this is actually being used in machining now. It seems that while lasers are being widely used in metal fabrication, they are the simpler heat ablation lasers.

If it is being used in practice what are the advantages/disadvantages vis a vis edm?
Lots of water in data centers these days. Works fine. I think the fear about that lost to the utility some years ago.
A Team Lead Uses Claude AI as His Virtual Senior Developer [video]
I was just coming here to question how the article doesn’t include a map.
Olympic Games Probability Rankings
> Volatile makes sure variables stay sane on the memory side

This doesn't get you from shared-mutable-hell to shared-mutable-safe, it gets you from shared-mutable-relaxedmemorymodel-hell to shared-mutable-hell. It's the kind of hell you don't come across until you start being too smart for synchronisation primitives and start taking a stab at lockfree/lockless wizardry.

> if you only write to a variable from one thread and read it from others, then it just sort of magically works

I'm not necessarily convinced by that - but either way that's a huge blow to 'shared' if you are only allowed one writer.

> Plus the executors to handle thread reuse for async tasks.

What does this solve with regard to the shared-mutable problem? This is like "Erlang has BEAM to handle the actors" or something - so what?
The EU requires MS to provide kernel-level access to security vendors due to their crazy anti-compete provisions
That is just partially true. Hilbert was essential but "just" one factor amongst others.

For example, there was also Felix Klein (who brought Hilbert to Göttingen) who was more on the teaching side. He even designed the house from the ground up in a way that he thought would be optimal for teaching and working together.

There is a really good article by Norbert Schappacher called

"Das Mathematische Institut der Universität Göttingen im Nationalsozialismus"

or

"The Mathematical Institute of the University of Göttingen under National Socialism"

https://irma.math.unistra.fr/~schappa/NSch/Publications_file...

You can DeepL it. Here is just the first paragraph:

Göttingen has been a name in the mathematical world since Carl Friedrich Gauss (1777–1855). However, from the end of the 19th century until the National Socialists seized power, it was for many the center of the mathematical world, and in this respect it outstripped the traditional centers of interest: Paris and Berlin was above all the joint work of David Hilbert (1862–1943) and Felix Klein (1849–1925), around whom an increasingly important mathematical institute was formed. Hilbert's role was on the side of creative mathematical research, which he pursued with complete openness to all possible new ideas and with a versatility not seen since Gauss. Felix Klein, on the other hand, was above all an exceptionally successful organizer and academic teacher in Göttingen – four years before his appointment to Göttingen, a health breakdown had ended the period of his most original mathematical research.

It goes into great detail from the pre-war to the post-war era.

In addition, mathematics and physics were very much intertwined in those days - one inspired the other. And Göttingen was essentially a village - everyone knew everyone.
They would meet up in a bar in the evening and speak about whats on their mind. That way, there was also a regular get-together with the local industry.

For example Robert Wichard Pohl, head of the 1st physics institute (called "a patriarch of physics" or "The good Lord"), Gustav Tammann, head of the institute for physical chemistry, and the heads of Ruhstrat (a local company specialized in developing and manufacturing high-temperature industrial furnaces, transformers, etc.) regularly met.
Pohl wanted to have a furnace for what was later called the Czochralski method (creating pure crystals) and Ruhstrat built the stuff.

Or in 1894, in collaboration with Nobel Prize winner Prof. Walter Nernst, Ruhstrat created the adjustable sliding resistor, the basis for adjusting and changing resistances as well as current and voltage. They supplied the first private homes and businesses in Göttingen with electricity using electrical block stations and developed the electricity meter.

Lots of aspects came together to thrive, not just Hilbert.

P.S. Fun fact: Ernst (or Adolf?) Ruhstrat had the first car in town and later sold it to Tammann.
they’re right though…
Some applicants don’t have projects they can show. I’d say half have GitHub profiles, but there’s still lots of good programmers at my org who have zero projects they can show to a potential employer. I’m not ready to write them all off, yet.

And my exercise isn’t leetcode, nor is it timed. I just designed it so it doesn’t take a lot of time because time isn’t important for this filter.
I will not do you a quick favour
It can also be about the past.

That's one problem with looking at charts that aren't indexed/real (inflation adjusted) and/or ratios.

On it's face, our debt looks scary.

https://fred.stlouisfed.org/series/GFDEBTN

Looking at it as a ratio, it's still not great, but we've been in similar places in the past.

Debt as a percentage of GDP.

https://fred.stlouisfed.org/series/GFDGDPA188S

Interest as a percentage of GDP.

https://fred.stlouisfed.org/series/FYOIGDA188S
Don't blindly prefer `emplace_back` to `push_back` (2021)
Yeah, thats fair feedback. The main aim was to reduce the alert fatigue for on-call engineers and provide a way to get insight into the alerts at the end of the on-call shift.

This way there is data to make a case that certain alerts are noisy (for various reasons) and we should strive to reduce the time spent dealing with these alerts. Fixing some of them might be as easy as deleting them but for others might need dedicated time working on them.
Oh I don’t know, the servers down, you go and look as a technician, and you simply see a screen saying:

“CSAgent.sys has caused a failure to boot three times in a row. Do you want to disable this driver? <Yes> <No>.”

You click “Yes.” Server reboots with CloudStrike driver disabled. The day is saved in 5 minutes instead of building a custom ISO image or going on a BitLocker key recovery spree.
Push the hyperthread count up higher and you have enough stuff to do while waiting on memory that branch prediction doesn't matter as much. Could call it a GPU.