HNHacker News
TopNewBestAskShowJobs

nullindividual

2,175 karma · joined May 16, 2023

submissionscomments
nullindividual··on [dead]
The conspiracy theories in this person's thread really detract from his message.
nullindividual··on [dead]
https://threadreaderapp.com/thread/1815316367958290828.html
nullindividual··on Reversal of autism symptoms among dizygotic twins: A case report
I wouldn't characterize masking as a reduction of symptoms.

Masking is putting on a face to _hide_ symptoms from others to appear more 'normal'. It's f-ing exhausting. The symptoms never go away.

nullindividual··on Ask HN: What's the best YouTube lecture you've seen recently?
MIT 22.01 Introduction to Nuclear Engineering and Ionizing Radiation

https://www.youtube.com/playlist?list=PLUl4u3cNGP61FVzAxBP09...

Should keep you occupied for a few hours. Mostly approachable.

nullindividual··on Microsoft points finger at the EU for not being able to lock down Windows
WHQL has had some pretty awful drivers pushed through it. Granted, this was quite some time ago, early 2000s-ish, but they've lead to BSODs etc with nVidia drivers.
nullindividual··on Microsoft points finger at the EU for not being able to lock down Windows
Yes, of course. Plenty of storage and chipset drivers have caused no-boot scenarios.
nullindividual··on The Poor You Will Have with You Always, Even with UBI
UBI has been demonstrated to work.

https://www.washingtonpost.com/magazine/2022/10/24/universal...

nullindividual··on Gen Z job seekers should be willing to work for free, long hours
Alternative title:

Squarespace’s CMO asks Gen-Z to violate the Federal Labor Standards Act

> Under the FLSA, employees may not volunteer services to for-profit private sector employers.

https://webapps.dol.gov/elaws/whd/flsa/docs/volunteers.asp

nullindividual··on Ask HN: Who Are the HN Censors?
They're posts that don't follow the HN guidelines. You know, The Rules.
nullindividual··on Initial details about why CrowdStrike's CSAgent.sys crashed
> You are off by several orders of magnitude

Can you cite something? This is HN, not reddit.

> Also keep in mind 8.5 million is likely the count of machines fully impacted and are not counting the machines impacted but were able to be automatically recovered.

Do you have evidence of this? Please bring sources with you.

nullindividual··on Initial details about why CrowdStrike's CSAgent.sys crashed
https://www.caida.org/catalog/papers/2003_sapphire/

[SQL] Slammer spread incredibly quickly, even though the vulnerability was patched in the prior year.

> As it began spreading throughout the Internet, it doubled in size every 8.5 seconds. It infected more than 90 percent of vulnerable hosts within 10 minutes.

Worms are not technically viruses, but they can have similar impacts/perform similar tasks on an infected host.

nullindividual··on Ask HN: Who Are the HN Censors?
This isn't censorship.

That's the poor assumption being made.

nullindividual··on [dead]
(2014)

Does the same hold true of today? Or have we simply learned to live with systemd? Slackware is one of the last "major" (or maybe just "oldest") distros to leverage SysVinit, as far as I'm aware.

nullindividual··on Ask HN: Who Are the HN Censors?
Censorship assumes you have the constitutional right to free speech on this platform.

You don't.

nullindividual··on Siblings miss crucial life-extending treatment because of CrowdStrike outage
Modern operations doesn't go around reinstalling things on machines like that.

And due to CFR 21 Part 11, what you ask would be a non-starter.

nullindividual··on CrowdStrike Update: Windows Bluescreen and Boot Loops
Here's a direct link:

https://youtu.be/xi1Lq79mLeE?t=4314

"New Technology", if you want to search the transcript. Per Dave, marketing did not want to use "NT" for "New Technology" because they thought no one would buy new technology.

nullindividual··on Siblings miss crucial life-extending treatment because of CrowdStrike outage
Very few companies, for-profit or otherwise, keep gobs of machinery on hand "just in case". It's expensive, not only the machinery, but the space to store it, maintain it while not in use, replace it when it ages out, and so on. It's also exceedingly rare to need it.

Hospitals also have limited resources in terms of IT staff. It's not a Azure army of operations staff that can rush out to every endpoint and click buttons.

When I was in helpdesk eons ago, I was "responsible" for roughly 300 - 400 endpoints, plus a handful of servers. As were all of the other helldesk techs. If something like this happened, there's simply not enough hands to go around as fast as everyone would like.

nullindividual··on CrowdStrike debacle provides road map of American vulnerabilities to adversaries
The statement "Security is a process, not a product" refers to no _product_ can be a security strategy. _Processes_ are part of security. The security landscape keeps evolving and what was appropriate even 5 years ago may not be appropriate today. You have to evolve your strategy and countermeasures over time as part of your _processes_.
nullindividual··on Siblings miss crucial life-extending treatment because of CrowdStrike outage
You have a naive view of how modern operations work, I must say. This shows when you suggest endpoints have backups. We're back to the mainframe/terminal times where all software is running on a web server or other centralized application server, which is also in a boot loop, somewhere else.

Failed hardware is different, but hospitals likely have very few computers just 'lying around'. Especially the highly regulated machines, such as those which are attached to MRIs and the like.

CFR 21 Part 11 was the bane of my existence. Software that can be installed and configured in a matter of minutes? That's a six month project, at least. Sure, backups are great, but then you've got a significant process to get it back up and running.

These aren't early-2000 logging operations.

I see you'll never be convinced, but this is how modern operations work. Being a hospital (or other industry with heavy government regulations) make operations that much worse.

nullindividual··on Siblings miss crucial life-extending treatment because of CrowdStrike outage
Coulda woulda shoulda, of course. Money. That's why.
nullindividual··on Siblings miss crucial life-extending treatment because of CrowdStrike outage
From what I've seen when I've had CTs (I am not a medical professional and have no direct ties to their industry), the machine sends the images in real time to a technician in another room. Those images are then sent to an offsite service for review by a radiologist, then returned to the doctor to give you the results and they're uploaded to Epic where I can review them online at my leisure.

It's all on a network for a reason. If it's on a network, it has to comply with all regulations that govern the service.

nullindividual··on CrowdStrike debacle provides road map of American vulnerabilities to adversaries
Absolutely (sigh)! But with a deployment of devices like that, the operator has a solid central management system from which they could push software as-needed.
nullindividual··on CrowdStrike debacle provides road map of American vulnerabilities to adversaries
> why aren't those built on Linux or even OpenBSD

The vendor who makes the software has always written for Windows (or in reality, wrote for either DOS or OS/2 then transitioned to NT4). History, momentum, familiarity, cost, and ease of support all are factors (among others, I'm sure).

Security is a process, not a product.

And yes, distros require frequent updates, though more to your point, you can limit the scope of installed software. I'm sure airport displays don't need MPEG2, VP1 and so on codecs, for instance.

It's also important to remember that there is a lot of 'garageware' out there with these specialized systems. Want SAML/OIDC support? We only support LDAP over cleartext, or Active Directory at best. Want the latest and greatest version of Apache Tomcat? Sorry, the vendor doesn't know how to troubleshoot either, so they only "support" a three year old vulnerable version.

Ran into that more than a few times.

Given the hypothesis of what caused the BSOD with Crowdstrike (NUL pointer), using a safe language would have been appropriate -- it's fairly easy in this case to lay the blame with CS.

Microsoft supplies the shotgun. It's the vendors responsibility to point it away from themselves.

nullindividual··on Siblings miss crucial life-extending treatment because of CrowdStrike outage
NT 4 EULA had a similar note, but it was limited in scope to JAVA.

> 8. NOTE ON JAVA SUPPORT. THE SOFTWARE PRODUCT CONTAINS SUPPORT FOR PROGRAMS WRITTEN IN JAVA. JAVA TECHNOLOGY IS NOT FAULT TOLERANT AND IS NOT DESIGNED, MANUFACTURED, OR INTENDED FOR USE OR RESALE AS ON-LINE CONTROL EQUIPMENT IN HAZARDOUS ENVIRONMENTS REQUIRING FAIL-SAFE PERFORMANCE, SUCH AS IN THE OPERATION OF NUCLEAR FACILITIES, AIRCRAFT NAVIGATION OR COMMUNICATION SYSTEMS, AIR TRAFFIC CONTROL, DIRECT LIFE SUPPORT MACHINES, OR WEAPONS SYSTEMS, IN WHICH THE FAILURE OF JAVA TECHNOLOGY COULD LEAD DIRECTLY TO DEATH, PERSONAL INJURY, OR SEVERE PHYSICAL OR ENVIRONMENTAL DAMAGE.

nullindividual··on Siblings miss crucial life-extending treatment because of CrowdStrike outage
From having seen the infusion process myself, I take it that it requires precision measurements over an extended period of time. This would seem unreasonable requirement for staff to perform.

Again, from what I've seen, infusions are not just "throw it in an IV bag and wait".

nullindividual··on CrowdStrike Update: Windows Bluescreen and Boot Loops
If you want to hear the history of [DEC/VMS] NT from the horses mouth:

https://www.youtube.com/watch?v=xi1Lq79mLeE

nullindividual··on Ask HN: Are there any decent CrowdStrike alternatives?
A few.

https://www.gartner.com/reviews/market/endpoint-detection-an...

nullindividual··on Siblings miss crucial life-extending treatment because of CrowdStrike outage
Full title:

Siblings miss crucial life-extending treatment at Seattle Children’s because of CrowdStrike outage

nullindividual··on 100-year-olds say working beyond retirement age is what keeps them going
If the article could only provide a balanced view of that. Instead, the article is hammering home a specific viewpoint designed to manipulate it's audience into believing working is required for a long life, which for those who live that long, is generally not the case.
nullindividual··on 100-year-olds say working beyond retirement age is what keeps them going
An article, from a business-focused media group, which identifies for a specific biased point, ignoring those who are >=100 and not working.

Is this a propaganda piece to tell the rubes why Social Security won't be necessary?

← PreviousPage 9 of 34Next →