ctxc

I believe there are heinous crimes that do. Both fitting the crime and as a deterrent.

Tangential: I love it when UIs say "1 object" and "2 objects". Shows attention to detail.

As opposed to "1 objects" or "1 object(s)". A UI filled with "(s)", ughh

Agree with you.

What happens when translation files get too big and you want to split and send only relevant parts? Like send only auth keys when user is unauthenticated?

`return translations[auth][login]` is no longer possible.

Or just imagine you want to iterate through `auth` keys. _shudders_

Forgot to add the link - https://en.m.wikipedia.org/wiki/Unsane

Highly recommended movie watch:

Unsane.

Not to mention the disabled copy pasting.

If I may dare - that would be a novelty while this is something many would pay for.

If it's just a straightforward conversion, then sure...

Exactly! On skipping mechanism breaking - I mean, anything could break. Boils down to design and testing like all things.

One change - this approval and telemetry doesn't happen during the boot loading process. It's just logged and skipped.

Once bootup is done, the EDR app auto starts, checks logs for anomalies and sends telemetry over whenever network is available (it usually is, because they update malware signatures etc frequently). Someone at the company gets paged, they fix and the process continues.

I know right? Doesn't feel HN worthy. I used to use these apps back when I played Pokémon Go and it would behave differently based on my location.

The application (Crowdstrike) was part of Windows' booting process.

Windows cannot simply "skip" failed drivers. Say Crowdstrike driver failed as a one time thing, Windows skipped it instead of retrying which led to the endpoint being vulnerable and a ransomware happens. We'd be saying the opposite now.

This is a high-impact ability Windows offers to applications - and applications should take responsibility and treat it as such.

I spoke to another EDR lead I know - they said they had provisions in place to read the dump if boot crashed, check if it was due to their driver and skip it if it was (and then send telemetry after startup so that it can be fixed, probably). Crowdstrike should have done the same.

One more thing to note is that we cannot say Windows shouldn't provide this ability - that becomes an anti-trust monopoly, because MS themselves are a competitor in this space.

"Adobe" and ___

"Intuit Turbo Tax" and ___

The brain automatically fills these up for me, Cloudflare isn't close (yet?)

Any interesting links you can share for starters?

Well said.

"If we're going to roll this out let's limit it to reduce the numbers of people affected." Ime this is something senior developers would themselves do - and not only for changes they deem "high risk", but also by default.

I say this because this case a data file was changed. Probably done thousands of times without an issue.

QA would have never said "we need a staged rollout for this". Developers and those who set the process should do it.

It's not "fair" that a product can brick your appliances if they have previously protected against it.

In my mind, that is because the protection is what they're paid bags of cash to do.

If Crowdstrike was a charity I might find myself agreeable on your description of fair in favor of Crowdstrike.

I now realize how far I am from amateur knowledge, I don't understand any of this.

But always interesting to discover an avenue I haven't explored before :)

Could you add a more to that? What other complex parts are built by FF?

Makes sense, thank you! :D

They were early to the scene, made the decisions that made sense at each point in time. Initially I (like many other engineers with no AI exposure) didn't know enough to want to play around with the knobs too much. Now I do.

So the playing field has and is changing, langChain are adapting.

Isn't that a bit too extreme? Goodwill burnt up? When the field changes, there will be new abstractions - of course I'll have to understand them to decide for myself if they're optimal or not.

React has an abstraction. Svelte has something different. AlpineJS, another. Vanilla JS has none. Does that mean only one is right and the remaining are wrong?

I'd just understand them and pick what seems right for my usecase.

What exactly is "safe" in this context, can someone give me an eli5?

If it's "taking over the world" safe, does it not mean that this is a part of AGI?

Too snarky...anyway, "crack" means "exceptional" in some contexts. I've seen footballers using it a lot over the years (Neymar, Messi etc) fwiw.

Just realized - we even say "it's not all its cracked up to be" as a negative statement which would imply "cracked up" is positive.

Google knows too much about us, and now MS is out to understand you better than yourself. I thought it couldn't get scarier with "AI" spearhead initiatives, but I was wrong

https://www.windowslatest.com/2024/05/20/microsoft-confirms-...

I think the ego and cult-like atmosphere will lead to more growth (maybe not in the "right" direction but in the technical prowess direction) which offsets all criticism.

And then the lines will cross over the break even point and be absorbed into Microsoft who proceeds to enjoy the lunch for the foreseeable future.

You know what you're doing, so you can ignore those errors. Seems like a much better alternative to endorsement of apk downloads directly from websites for non tech-literate users.

But concepts are easily transferable, so a line or two could help a lot :)

On an unrelated note - my HN client UI breaks since the domain name is long xD

Hi! My work is similar and I'd love to have someone to bounce ideas off of if you don't mind.

Your profile doesn't have contact info though. Mine does, please send me a message. :)

They start with "I think..." and it isn't very negative, just an opinion. Why the defensive tone? :)

Jeez. In any product, this should be a showstopper.

Claiming to provide authentication and putting it in the client while ignoring issues that point it out is MUCH worse that just stating they don't provide authentication.

The illusion of security is often more dangerous than no security, because even security-conscious users can be fooled.

If you don't want to code at all: go with wix or squarespace. But it isn't free.

If you're okay with basic coding and setup, these are some opinionated steps:

1. Shopping

Go to Hugo (which is a website generator, kinda) and pick a theme you like. You now have a readymade website with random data. Eg: https://themes.gohugo.io/themes/minimal_marketing/

2. Get a copy of your site

Create a new repository in Github, setup the hugo site. Remember to replace the Ananke theme with the theme you like. You now have your own copy of the website you liked. https://gohugo.io/getting-started/quick-start/#create-a-site

3. Make your site accessible on the internet

Vercel is a hosting service. Log in, connect your Github account, choose the hugo repo. You can now access your website using a random URL from Vercel. https://vercel.com/new Also for your reference: https://vercel.com/guides/deploying-hugo-with-vercel#vercel-...

4. Give your site a fancy domain name

Buy a domain name on Dynadot (or namecheap etc). Then go to the domains setting on Vercel and follow the steps shown in the UI. You can now access your website using your domain name. Congrats! Link to the setting: https://vercel.com/docs/projects/domains/add-a-domain#naviga...

Now just edit whatever data etc you want on the Github repo, push it. Changes will be updated automatically.

-----

I use hugo for my blog: https://blog.dvsj.in

But my website is built from scratch (mostly because I just wanted to learn to do it): https://dvsj.in

If you're stuck at any point, happy to help. Contact is in my profile :)