badrabbit

No, the userspace program will replace it with a good version.

Their stock price will suffer but they can waive license fees for a year or so for every endpoint affected (~$50).

They better pin this on a rogue employee, but even then, force pushing updates shouldn't be in their capability at all! They must guarantee removal of that capability.

Lawsuits should be interesting. They offer(ed?) $1 mil breach insurance to their customers, so if they were to pay only that much per customer this might be compensation north of $10B. But to be honest, wouldn't surprise me if they can pay up without going bankrupt.

The sad situation is, as twitter people were pointing out, IT teams will use this to push back against more agents for a long time to come. But in reality, these agents are very important.

Crowdstrike Falcon alone is probably the single biggest security improvement any company can make and there is hardly any competition. This could have been any security vendor, the impact is so widespread because of how widely used they are, but there is a reason why they are so widely used to begin with.

Oh and just fyi, the mitigation won't leave you unprotected, when you boot normal, the userspace exe's will replace it with a fixed version.

Yes, it offers very real protection. Crowdstrike in particular is the best in the market, speaking from experience and having worked with their competitor's products as well and responded to real world compromises.

So long as those people are adults who are functional (can care for themselves), it isn't society's business to protect them from self-harm. Your sensible checks are violations of liberty. A person's right and authority over themselves being infringed is a loss of liberty. Society gets involved when their actions affect non-consenting members of society.

More cores and memory channels+bandwidth would have been nice.

If we aren't regulated then anti-drug laws shouldn't exist. A government made up of it's people cannot regulate it's people by virtue of having a superior self control or wisdom. How can there be liberty without this?

Those are private properties or privileged activities. Eating poison, in your private home being regulated means your home is not truly yours and you have no liberty.

So we are properties regulated by the state, even though the state is made up of laypersons?

Try this with visual studio and x64. Microsoft!!

Ok, why not?

Some free society we live in. The feds are just looking out for their real employers: the oligarchs and their companies.

If they stuck to binary libraries that would have been nice but since you have to build deps locally and match up the right versions, go and rust programs have been a constant headache for me similar to python. The version from debian repos never seems to be good enough, I have to install it from upstream and maintain it.

While I still do run into 2.7 code, even for 3 dependencies are the problem. You always use a library of some kind and that library could use a new python feature. You could pin it but then other scripts that need the new version break. And that is if you could even easily find the module and version. Just this week I helped someone troubleshoot a bug they've been trying to fix for weeks/months and it was just a matter of the library code being too new for 3.6. It's an ever growing planned mess.

Not if you use any libraries. The whole venv/pyenv/pipx stuff of python needs to implemented for other languages too. Every program needing it's own virtual environment and tooling for every build.

C is enjoyable to write with although if others rely on your code, safety should have a higher priority.

The one thing I could never enjoy in C after getting used to languages like php and python is string handling. It isn't just dangerous but very tedious, complex and lacking elegance. Lack of a native string type and string operators really sucks.

I like being able to do "hello "+"world".

Another pro the author didn't mention is how my crapy code from 10yrs ago still works today. Can't say that about rust, go, python or most modern languages. It really sucks how "planned obsolecence" has crept it's way into programming languages.

There doesn't have to be anything new. You don't have to participate or gatekeep anyone from participating on a continued discussion.

People look at this and think "dumb politicians" but that's not the right conclusion. The security teams responsible for protecting them are to blame, yes, even for poor password choices and drarkweb leaks.

Let's discuss it again?

It's a paid product. Who wants to pay to read AI content? If you're monetizing on ads this would make sense but if I pay for WaPo it is because of the reputation it has thanks to human investigative journalists.

It still doesn't measure up to xp's rolling hills or just about any macos default wallpaper. Nature is really pretty and hard to compete against. Small things like this say a lot about the overall product design philosophy in my opinion.

The python project itself lets you download embeddable python, you don't need to get it from random sources. It works great, you can install all your pip packages, zip it backup and it just works.

Is a real dumb phone even possible? Not having apps and a touch screen doesn't make it dumb. Look at kai os for example or even symbian had apps just not nice appstores and nicer features. You still have arm cpus and running an os and apps.

A phone that only makes 4g calls with a 4g baseband os that is only capable of doing calls, now that would be a dumb phone but the cost would not be low.

For one, less people know rust. Also, having to port your c modules.

If all you have is a Rusty hammer, everything is a nail.

Third party module dev is harder now for yara-x. And I wonder how the python module will turn out.

Neither 3rd party/go clients nor the official virustotal C client could meet my requirements, I had to write a scanner in python on at least two different times and having to do it again soon. The main issues are resource usage, result shuffling and supporting very large proprietary ruled that depend on specific yara modules.

Crowsresponse by crowdstrike is better too but it still has limits. Python is the best way to yara.

Why isn't content addressable inodes a thing? Address them by hash instead of id and avoid creating duplicate inodes. So for example, two 1TB files containing all zeroes will take up one inode worth of disk space but the fs table records 1TB worth of inodes. You tune the fs inode sllocation table disk usage a lot, what other downsides are there?

Also, how is linux support for apfs these days?

Good one!

I ask the opposite, why are people accepting credit as a normal way of life? Debt means you are a slave to the creditor. How can you walk around owing money and that's normal to you?

Surely you get that the rewards and protections are not there because creditors are generous right? At best you contribute to the social disease of perpetual credit card debt. At some point, creditors need to make profit.

I prefer debit because I am spending my money. For in person transactions, I prefer cash.

Counterpoint: very tiree and exhausted are two different levels of weariness. Exhausted means you've reached capacity. Very tired means you are tired much but not yet exhausted. You reduced specificity for the sake of conformity.

"Few word" is quantity, this is a quality question.

If you are writing to sound eloquent and for the joy of writing then you are not who I am talking about. For most people, especially in a work setting, communication is the goal, to make sure you are understood well.

There is a famous story of a british platoon in ww2 I think calling for US navy support and saying something like "we are in a bit of trouble" or something like that, the US navy commander thought that meant they need help but not urgently so they were deprioritized and died. If both sides used simple and well understood language it would have been avoided. Your eloquence or someone else's use of jargon, jive, localized english,etc... is a miscommunication liability.

Bad analogy, herbs and spice also should be used sparingly not in abundance. Less is more. Use them where it makes sense not as a default.

My comment was for english speakers as a whole not just learners.