skysight-inc/HackerNews huggingface dataset:
The article talks about a German MEP who was most likely targeted by Hungarian intelligence [0] due to his very vocal anti-Orban stance and how he was recently pushing against Hungary and Orban after his recent visits to Russia.

The perpetrator was most likely Hungarian intelligence who used a product they bought from an Israeli company.

Imo, the bigger question is why Hungary, Poland, Spain, Greece, and Cyprus (all countries part of the recent EU Spyware Scandal) [1] continue to allow their Interior Ministries to attack the phones of both domestic and foreign opponents.

[0] - https://www.politico.eu/newsletter/brussels-playbook/orban-c...

[1] - https://www.politico.eu/article/parliament-defense-subcommit...
The biggest con is IMO the most obvious one. What if a third party non-open source product does something that FOSS can’t do or is dramatically behind on?

And are companies going really source local maintainers for FOSS versus the standard maintainer? Eg, is Switzerland really not going to use Canonical for supporting Ubuntu because it is British?
At my store they are free to choose their unit and they strive for unit heterogeneity within a specific product you might want to compare
Copyright and intellectual property are directly at odds with these types of efforts, and has been losing to linux, gnu, github, wikipedia, mit open courseware, youtube, LLMs and their datasets. But copyright did slay Napster, PirateBay, anna’s archive etc…
I think it has to. If SciHub and Anna's Archive have taught us anything it's that it just takes one person to offer an invaluable service to millions.

We're living in an age of unprecedented control by corporate powers, but we're also living in an age where it's very difficult to stop a signal from leaking from somewhere.

Corporations are currently building walled gardens and closing the doors behind them fast, but the scent of roses always wafts through the gates, and it really doesn't take much for a crafty fox to dig a tunnel.
Why is number of startups a metric we care about?

Are we just asking rhetorical questions that pick out one data point that we think supports our presupposed notions?
Never knew that additive changes could also be breaking. Nice one. Thanks for sharing!
[dupe] https://news.ycombinator.com/item?id=41058261
Nope, it just shows you're aware. :)
Yes, "mass anecdata" + blind collection is usually called "data".
A New Artificial Heart Might Save Millions
I agree. I would guess it might not be that difficult for Canadian people as they are all to some degree exposed and as such familiar with both languages' sounds. But I remember the first couple times I was in China a good decade ago, it was much easier for me take the older subway lines than the newer ones in Beijing.

On the old lines, they had what sounded like a native English speaker do the announcements of the upcoming station, including the station name. On the newer ones it sounds like they just recorded the "we're arriving at" bit once and then spliced in the read-by-a-Chinese station name, which is much harder to understand as a foreigner. So on the new lines I was constantly staring at the displays.
You are making normative arguments, but the question is wholly empirical -- the metrics being applied here are the ones that actually measure the success and viability of firms, not metrics selected to fit the observer's emotional attachments.

Firms that are optimized for turning market demand into revenue streams will naturally outcompete firms that are optimized for other goals, regardless of what ideals or preferences anyone bears. This isn't something that anyone can decide upon, so a call to action based on one's own "ought" preferences isn't really meaningful.
> Employee owned is pretty rare.

A partnership is basically an employee-owned company, and it's a fairly common structure among law/financial firms.

It works reasonably well. The catch is that your business should not require lots of capital to run.
In several European countries, those parts of a license that put the customer in a worse position than what the law stipulates are simply invalid.
14 days - 1 year of repairs if you didn't break it

https://europa.eu/youreurope/citizens/consumers/shopping/gua...
If they are liable they maybe go out of business globally.
Many companies are actually not us companies.

In the end probably only the us companies will be left empty-handed.
You can see how it worked it Munich: https://www.zdnet.com/article/linux-not-windows-why-munich-i...

Spoiler alert: it didn’t work well. The world is not perfect and decision makers are greedy.

Edit: I see I am being downvoted. Is there an objective reason for moving back to Microsoft? Is there any objective reason to ditch implemented and working open source software project? As Wikipedia tells most of city computers were successfully migrated. And users were giving positive feedback.
Southwest Airlines Is Ditching Open Seating on Flights
It appears to be an increasingly clear risk to LLM model vendors that EU cares about where personal data came from, how it is stored, where it is stored, how accurate it is and whether there is a mechanism for it to be removed
https://x.com/justsaysinmice used to "in mice" to sensational health headlines where this is the case. They stopped in 2019, maybe they got overwhelmed.
The job being easy to do and the job being easy to get are two completely different things.
Postgres usage grows from 33% to 49% in 6 years (StackOverflow Survey)
Doesn't that come down to the same thing effectively? Debt and taxation are details of a system of trusted authorities built around the economic system of human work.

And if we consider a CBDC to still count as cryptocurrency, in my opinion we've just shifted the goal posts from a decentralised, anonymous, revolutionary, grass-roots form of digital currency to the technical underpinnings of the digitisation process of the global banking system.
Somehow related, expressions like "next summer", "starting this spring" and such on public global announcements make absolutely nonsense if you are in the southern hemisphere (like a big percentage of the global population)
Well, I believe you could use the streaming algorithms to pick the likely median, so help choose the pivot for the real quickselect. quickselect can be done inplace too which is O(1) memory if you can afford to rearrange the data.
My take as an outsider: Google has absolutely no interest in this, especially with their recent cost-cutting measures. Google cares about things that make the "web" better for the end users so that they can sell more ads, not developer tools. TypeScript or JavaScript doesn't matter that much to Google, and actually Google probably doesn't want to see TypeScript files distributed over network (which doesn't make much sense in the first place). In all honesty, Microsoft understands development experience much better than Google and most other companies. They literally own Visual Studio, Visual Studio Code and GitHub and sell products/services for money.
NoSQL will bring it's own set of issues right? Too flexible of a system with no built in Validations would mean that they need to be handled somewhere else. If we take the example in the post, refund should not precede awaiting payment, If a new status gets added, it becomes easy to know where the migrations have to be run and in NoSQL, either we write something custom or handle it each time the document is called.
I'm not a lawyer, and I'm definitely not a French lawyer, but I don't think the OVH comparison is valid.

In the OVH case, their backup system (as a whole) failed. Many customers were left with 0 data, and per the article "the court ruled the OVH backup service was not operated to a reasonable standard and failed at its purpose".

Meanwhile CrowdStrike "just" crashed their customer's kernels, for a duration of about 1 hour (during which they were 100% safe from cyber attacks!). Any remaining delays getting systems back online were (in my view) due to customers not having good enough disaster recovery plans. There's certainly grounds to argue that CrowdStrike's software was "not to a reasonable standard", but the first-order impacts (a software crash) are of a very different magnitude to permanently losing all data in a literal ball of fire (as in the OVH case).

Software crashes all the time. For better or for worse, we treat software bugs as an inevitability in most industries (there are exceptions, of course). While software bugs are the "fault" of the software vendor, the job of mitigating the impacts thereof lies with the people deploying it. The only thing that makes the CrowdStrike case newsworthy, compared to all the other software crashes that happen on a daily basis, is that CrowdStrike's many customers had inserted their software into many critical pathways.

CrowdStrike sells a playing card, and customers collectively built a house with them.

(P.S. Don't treat this as a defense of CrowdStrike. I think their software sucks and was developed sloppily. I think they should face consequences for their sloppiness, I just don't think they will, under current legal frameworks. At best, maybe people will vote with their wallets, going forwards.)
Some more discussion: https://news.ycombinator.com/item?id=41053148
Says the reason we have laws to enable companies to even exist. Society want them and it wants them because of the value they provide to everyone else.

> in proportion to their wealth. That's the problem - ownership is distributed unevenly, and the inequality causes social problems.

Maybe we should work on helping people to manage their tendency towards jealousy. One way is to have a culture of personal responsibility so that if you're poor, you believe (rightly or wrongly) that it's your own fault so you're not filled with hate for people who have more money than you.
First approach (by Swiss Post) was rejected by swiss citizens.

https://sarahjamielewis.com/evoting/
You were specifically criticising "younger diabetes nurses and doctors". Bear in mind also - part of the reason trainees and nurses have such poor pay (and far more importantly, awful suicide inducing hours and conditions cross nationally), is a rigidly hierarchical system where consultants who were themselves overworked and underpaid themselves see this as a right of passage.
That's the right approach, hopefully more governments will follow. Stuff built with public money should belong to the public.
One of the first things they've stated is that this isn't an RCA (deep dive analysis) like cloudflare and fly.io's, that's not what this is. This is to brief customers and the public of their immediate post-mortem understanding of what happened. The standard for that is different than an RCA.
Sure but multiplying by ten to get the price per kilo shouldn't be the most complicated thing for even those folks that aren't math savy. It means to move the decimal point (or comma) one place to the right IIRC.

If you had to convert from arms to legs or feet like in certain areas of the world, that might be much harder, of course.
Unfortunately, as far as I know, not. Only published articles and technical reports :(
Yes, IMHO the German law was earlier.
Well, now we're getting somewhere. If my company distrusts me so much that it needs to put a black box in place to prevent me from fucking it over, it shouldn't hire me as an admin for tons and tons of infrastructure. Distrust goes both ways. Increase the pressure, and maybe, maybe, your employee will just leave for another company that doesn't behave that way (yet). The timing is great, because some employees still remember how they were treated during 2020/21.
> It's a B2B tool, which means it's quite likely the contract/license states that all disputes are to be settled in a court appointed by them.

Many businesses will simply refuse to buy your product if the contract says the dispute has to be settled under foreign law or by a foreign court. The customer's lawyers will flag such a term as an unacceptable legal risk. And if your competitor isn't demanding that term, you are giving them a big reason to choose the competitor instead.

Random example: Oracle's standard contracts with their Australian customers says disputes will be settled under Australian law (New South Wales state law) in an Australian court (in Sydney). [0] And Oracle's standard agreements for France nominate French law and the courts of Paris. [1]

If Oracle can't get away with forcing foreign law/courts on their customers, I'd be surprised if CrowdStrike can.

Might be a different story for smaller countries, but most businesses in major economies are used to vendors offering contracts under their own national law.

[0] for example https://www.oracle.com/us/corporate/contracts/cloud-csa-v012... – see clause 14 on page 7

[1] for example https://www.oracle.com/assets/cloud-csa-v012418-fr-eng-44198... – see clause 14 on page 6
Tbh I'm not surprised. Or rather I'm surprised why that wasn't crystal clear to them before the acquisition.
Then, how could one separate section 3 material (highly structured data => less interesting) from sections 1 and 2 (high entropy, unstructured => more interesting data) ?
Will they relay through Apple servers and probably only with available traffic or could the feature get free traffic and direct line to the police?

I guess going through Apple servers makes more sense and one will need an available internet connection. But this type of security features are able even to active the internet on the phone if it’s not activated.
Even more basic, it's free speech. The data itself is public domain so your free speech is not restricted and you don't need fair use excemptions for those restrictions. On the the access through the official system is restricted.
An endless loop of dump trucking and forward loading
> Knowledge of this isn't widespread however, even security experts I have spoken to that don't have deep kernel development background aren't really aware of how widespread Netlink is in generic non-network related subsystems.

Depends on the scene. This is why my portfolio companies as well as my previous employer when I was a PM and SWE began moving engineering (and even PM) hiring to Israel, CEE, and India.

I've noticed a severe degradation in OS, Systems, and Networking knowledge in the US market over the past 15 years.

Everyone went gungho into "fullstack" or "backend" and significantly deskilled.

> Netlink is pretty awesome

It really is. Most security products will use a mix of Netlink and eBPF to gain observability and enforcement capabilities on Linux workloads.

> if you have to say run a daemon that manages network device state that now becomes attack surface for other juicy things you can do with Netlink (because once you have CAP_NET_ADMIN everything is up for grabs)

Big reason most companies I know of would prevent third party software from being granted CAP_NET_ADMIN
I don't think this is about money. My guess is that this is about politics.
Let's not punish normal people because others scam. Punish the scammers
That's what laws and regulations are for: ensuring that entities that are trying to do the right thing and make life better for actual humans aren't "outcompeted" by entities that are trying to make things better for themselves at everyone else's expense.
Deploying untested changes isn't "near the end of the chain", and it voids any buttload of testing of something else.
Third Party Cookies Must Be Removed from the Web Platform
Show HN: Generating Venn Diagrams
Hello HN!

I am a (relatively) new user and I've been wanting to do a Show HN for quite sometime, but all along had the bug of perfection biting me.

So I decided to go with a not-so-good-looking UI; but working demo of generation of Venn Diagrams. I implemented the Venn diagram itself as a custom tag, via a WebComponent using Lit and the demo itself is powered by AlpineJS.

Read the story behind the implementation at https://oldweaver.co.in/n/blog/drawing-venn-diagrams/

Please be warned that the UI leaves a lot to desire - up for fine-tuning immediately.

TL/DR: Used isPointInPath, bitwise operations and getImageData to identify the paths which we need to highlight. The implementation might be a bit non-optimal now, but I liked the idea how this turned out and hence sharing this for quick comments.

If this looks promising, there is scope for implementing a parser for the set notation aka `B∩C` and then generalizing for any set expression. But that's for another day!
You don't need to load trillions of numbers into memory, you just need to count how many of each number there are. This requires 2^32 words of memory, not trillions of words. After doing that just scan down the array of counts, summing, until you find the midpoint.
>they also started switching to Linux for their infrastructure after the war,

After the war? To which do you refer?
Sounds too much like socialism to go anyhere.
It appears that's their thesis.

Even if they were right, they commit a huge fallacy. They think that a surge would automatically lead to significant results on the battlefield. But what if it doesn't? What if it's a repeat of the Summer of 2023? Then you embolden Russia, and you get the opposite effect of what you aim for.
> A minifier can't guarantee that such expressions won't be used, so it cannot optimize property accesses.

Given TypeScript’s type system is unsound, neither could it even if it tried, right? I guess Flow could, but well, here we are.
A Journey with the Photographic Mind
I think the general idea is that gross negligence is a breach of contract. Every contract implicitly assumes that both parties are making a good faith effort to honor the terms of the contract. If you are not doing that, you may be in breach of contract, and the liability limitations may no longer apply.
> At which point I stop reading and I'm thinking "finally, I see why he's emailing us".

I never like to discourage 'too much' information because frankly 'end users' don't know what they need to tell us in support (that is kind of what our job is right?). I'd much prefer the above than just 'it won't let me log in' - where there maybe context that I'd want.

I spend more time asking follow up questions (without being able to provide even a modicum of solution) in many cases, I try to couch my 'questions answering questions' reply with why I am asking (more typing and explaining) when users don't give me chapter and verse, even if it is mostly 'puff'.

> I now work as a software developer for a startup and often have to interact directly with clients, and when I communicate with them, I always make sure have my desired "call to action" (even if only summarised) within the first sentence.

But that is after they have emailed you right? You cannot summarize anything until you actually have them tell you what is wrong, no matter how long takes them. So yes summarize in the first sentence is always useful and if you don't kow the solution (yet) it never hurts to admit that and say something like, 'but we can try X or see what Y is doing as that will help me understand the issue in more detail' etc.

Customer Support is hard work sometimes, now try doing it with someone who doesn't speak your language very well ;)
My favorite result from that search: https://comicsanscriminal.com/
The iCloud web apps work just fine in Firefox, I use them all the time on Linux. They'll get there.
*after the [Russo-Ukrainian] war started
That's why more and more exchanges are moving to DMs and closed communities. Because we don't plan on stuff we intend for participants in the discussion to be harvested but it more and more is. If reddit breaks that trend I only welcome it.
Not a real-world case, but for React apps, we have at least tried to clarify the most common errors we know of in a performance guide: https://tiptap.dev/docs/guides/performance
Is a joke.

Her most successful series is about an introvert "murderbot" and his closest friend who is a spaceship AI.

(Highly recommended)
Self imposing restrictions and telegraphing them to the enemy is a recipe for losing, because now the enemy knows what it can and can't do.

No, the west needs to leave the possibility of escalation open. Or what do you suggest? That we tell Russia "no matter what you do, we won't escalate and so the consequences for you won't be too bad". That's not rational.

It's like you're playing chess, and part of your strategy is telling your opponent "if you go there I'll take your queen" so your opponent knows what to do.

Stop this tHiS wIlL eScAlAtE nonsense please.
There is another word for it but "rare" is certainly not appropriate.
Add to that that ordering stuff without explicitly stating the total, final price to the customer is illegal in the EU, that was never even going to work everywhere at all...
I acquainted with a guy at a conference in US and he was genuinely surprised I had no idea, how long US mile is. I explained him, we use metric system and his response was “but don’t you learn *the standard* system in ache school?” I did not know, how to respond.
Why does article say "On 19th July 2019, CrowdStrike pushed an update" ?
Is it another incident in the past, same as OVH, or a typo? I'm kind of lost in context
If they have 350 employees, then they double the company's profit, I suppose they just generated 350x times the value of an average employee. If they have more employees, they only need to increase it a smaller proportion to be generating 350x as much value.
> To take over the market companies need to attract customers - i.e. make their lives better. Usually there are more consumers than employees - so I think that measure works quite well with optimising for humans. Profit is a side effect of taking over the market.

Quantity of people benefitted isn't the only measure: magnitude of benefit is also relevant. The customer at a 7Eleven benefits in that they get to... what, buy snacks conveniently? Versus the worker who receives their entire livelihood and benefits, it becomes obvious that workers are the primary beneficiaries of a company.

> But actually to have any employees companies need to optimize for workers lives anyway.

This is quite obviously false. All companies have to do is present a united front on keeping pay low and benefits nonexistent to prevent workers from having better options. I.e. USA 2024.

> And it seems that cooperatives are not any better in this area - otherwise everybody would work for cooperatives.

Why is that exactly?
I'm actually surprised the damage value I'm hearing about is not even $10B , I guess most of the downtime was on the weekend, but such a large scale 1-3 business day outage I'd think would a lot more. or perhaps it is because most small and medium businesses don't have crowdstrike because it is too expensive and they were not affected. Or another reason might be, indirect losses like the impact of delayed flights on individuals is not being considered.

I think if the total liability for Crowdstrike is less than a few years worth of revenue, they'll come out unscathed because as I understand, they are still not profitable, their valuation is purely on speculation on future revenue. Their biggest paying customers still care a lot about getting compromised, it isn't just a box checking exercise like many have suggested.
This company receives so many candidates that the interviewer would have just ended the call and moved on to the next candidate.

I get the notion of making the point out of principle, but it’s sort of like arguing on the phone with someone at a call center—it’s better to just cut your losses quickly and move on to the next option in the current market.
> what if the fine was giving up some shares to the government?

What is the advantage over just fining? We keep trying to reïnvent the fine, which is great for those who would otherwise be fined.
Switzerland is so brilliant.

I wish they spoke english, id consider moving there.
Yes. It's like every now and then STEM-folks discover that workplace democracy is actually a good thing and maybe the goddamn soviets were unto something lmao.
You might have noticed that my comment is a reply to another comment.