edmund-nelson
Filthy Anime Memester
No bio...
User ID: 842
edmund-nelson
Filthy Anime Memester
2mo ago
yeah, I guess liking stuff like Attack on Titan or Death Note instead of House of Cards and Game of thrones does let you get through. (ok the anime I watched recently like Gate thus the JSDF fought there and The saga of tanya the evil are extremely niche shows for a narrow Audience aka me)
I remember that in the TCG sphere we have the "big 3" which is Magic the gathering, pokemon and Yu-gi-oh. MTG is american but at least the other 2 are Japanese. Pokemon is huge in the videogames sphere and even though the mainline games have been a letdown from a main storyline perspective, the side-parts have gotten a lot better.
I just await the time when high school dxd hits the mainstream and everyone freaks out about japan poisoning our youth.
edmund-nelson
Filthy Anime Memester
2mo ago
Race and gender is simply not salient at all.
Relative to the time period this was extremely progressive.
There's a reason Martin luther king jr. famously publicly fanboyed over star trek.
I think the main difference is you're used to post 2010 ish idea's of DEI, and those are definitely much different from the 1960s progressivism in star trek
edmund-nelson
Filthy Anime Memester
2mo ago
These days all the good stuff is coming from other countries.
There are like 5 major countries that make interesting new IPs, The USA, Great Britain (which is so heavily tied with the US they may as well be one "block"), Japan South Korea and China. https://en.wikipedia.org/wiki/List_of_highest-grossing_media_franchises Though really it's mostly Japan and The USA with South korea and china playing second fiddle.
Japan is being hard carried by video games anyway, if we limit ourselves to just television https://www.imdb.com/chart/toptv/?ref_=nv_tvv_250&sort=num_votes%2Cdesc it's almost 90% american/british made stuff. There are a few japanese cartoons in there and a small handful of korean dramas but it's predominantly american made stuff.
edmund-nelson
Filthy Anime Memester
2mo ago
I bike for 1 hour a day to work, the car ride would be 30 minutes. (Lights really eat up time)
during the 1 hour bike ride I get roughly 45 minutes of good cardio exercise. This lets me go to work, Lift 3x a week and still get all the exercise I need in a week in a relatively cheap package.
What exactly am I gaining by switching to driving? Cars are expensive my bike is roughly 500/year in upkeep costs from tire changes ect. What are you doing while driving other than paying attention to the road making sure you don't crash (which is also ~ 100% of my focus when riding a bike it's just that when riding a bike I'm also exercising at the same time)
edmund-nelson
Filthy Anime Memester
3mo ago
.Arrays do (in compile-time, so if you have the type sizeof will return the actual size), it's just that they decay to pointers if you do anything with them like pass it to a function.
I but a humble C++ programmer who hasn't used arrays except in a Class for so long that I forget that it only decay's to a ptr in certain cases.
Accessing data outside of an array is undefined behaviour and often won't crash if it's just 1 access outside of the end, it'll just fetch garbage instead. You'd have to build the program with an "undefined behavior sanitizer" that detects stuff like that, but I don't know if that's compatible with running in the windows kernel.
The UB would have resulted in NULLPTR except every time though I figured. Yes an UB sanitizer is probably unworkable in a kernel program I don't write kernel code.
edmund-nelson
Filthy Anime Memester
3mo ago
Yeah, obviously people make mistakes, and I'm somewhat in jest about how stupid these mistakes are (but seriously no bounds checking, no integration testing) the obvious one though is the lack of staged rollouts, or a single integration test called "send the patch to a local machine and see what happens". I like to call that "stage 0 rollouts".
It's also just funny that the nature of the bug is something that once you see a crash report you spot the bug instantly. it's also a pretty easy bug that many 3rd year programming students would have been able to avoid IMO.
edmund-nelson
Filthy Anime Memester
3mo ago
The crowdstrike incident report is up
As far as documents go it shows that Crowdstrikes competence is... horrific.
Finding 1.
This means that when the sensor wanted to make a detection decision based on the IPC Template Type, the sensor code would supply 20 different input sources to the Content Interpreter. However, the definition of the IPC Template Type in the Template Type Definitions file stated that it expected 21 input fields. This definition resulted in Template Instances in Channel File 291 that expected to operate on 21 inputs. This mismatch was not detected during development of the IPC Template Type. The test cases and Rapid Response Content used to test the IPC Template Type did not trigger a fault during feature development or during testing of the sensor 7.11 release
What this says is that they did not test supplying IPC template type to the sensor at all or how many parameters the IPC template type produces? what kind of nonsense is thais.
\2. A runtime array bounds check was missing for Content Interpreter input fields on Channel File 291 Findings: The Rapid Response Content for Channel File 291 instructed the Content Interpreter to read the 21st entry of the input pointer array. However, the IPC Template Type only generates 20 inputs. As a result, once Rapid Response Content was delivered that used a non-wildcard matching criterion for the 21st input, the Content Interpreter performed an out-of-bounds read of the input array. This is not an arbitrary memory write issue and has been independently reviewed.
(hey can you prevent autoformatting for quotes it's really annoying that I can't exactly quote the doc)
So they didn't do the 1 liner test of checking array's inputs? I know in C you can't do this because array's do not contain their own length as a variable, but a c++ vector would have found this error (I guess in the kernel it's C or bust?). Congrats on using the root of all evil the regex So the regex created some interesting behavior on the (invalid) 21st input because of an OUT OF BOUNDS ARRAY access, oh boy.
- Template Type testing should cover a wider variety of matching criteria Findings: Both manual and automated testing were performed during the development of the IPC Template Type. This testing was focused on functional validation of the Template Type including the correct flow of security-relevant data through it, and evaluation of that data to generate appropriate detection alerts based on criteria created in development test cases. Automated testing leveraged internal and external tooling to create the required security- relevant data needed to exercise the IPC Template Type under all supported Windows versions within a broad subset of the expected operational use cases. For automated testing, a static set of 12 test cases was selected to be representative of broader operational expectations and to validate the creation of telemetry and detection alerts. Part of this testing included defining a channel file for use within the test cases. The selection of data in the channel file was done manually and included a regex wildcard matching criterion in the 21st field for all Template Instances, meaning that execution of these tests during development and release builds did not expose the latent out-of-bounds read in the Content Interpreter when provided with 20 rather than 21 inputs.
Automated testing somehow doesnt' include having 21 valid inputs in your 21 parameter funciton? Man now that's some brainpower ChatGPT can write tests better than that.
12 test cases which didn't seem to include any invalid inputs? where's your input validation? Where's the array bounds checking?
- The Content Validator contained a logic error Findings: The Content Validator evaluated the new Template Instances. However, it based its assessment on the expectation that the IPC Template Type would be provided with 21 inputs. This resulted in the problematic Template Instance being sent to the Content Interpreter
as expected NO INPUT VALIDATION
CLOWNSTRIKE indeed.
- Template Instance validation should expand to include testing within the Content Interpreter Findings: Newly released Template Types are stress tested across many aspects, such as resource utilization, system performance impact and detection volume. For many Template Types, including the IPC Template Type, a specific Template Instance is used to stress test the Template Type by matching against any possible value of the associated data fields to identify adverse system interactions. A stress test of the IPC Template Type with a test Template Instance was executed in our test environment, which consists of a variety of operating systems and workloads. The IPC Template Type passed the stress test and was validated for use, and a Template Instance was released to production as part of a Rapid Response Content update. However, the Content Validator-tested Template Instance did not observe that the mismatched number of inputs would cause a system crash when provided to the Content Interpreter by the IPC Template Type
Basically they didn't do integration testing.
Somethign like
IPCtemplatetype a= IPCtemplatetype.new(1,2,3,4,5,6,7) contentInterpreter b = Functionthatbreaks(IPCtemplatetype)
literally would have instant crashed.
They tested by having each thing be intependently tested by making a fake template type for the content interpreter but not using a real generated one.
Ok I know integration testing is hard, and get's exponentially complicated quickly but you can do basic tests by generating a single instance and then checking.
Or here's a billion dollar idea, just turn on a goddamn windows machine locally with your patch before sending it out. This patch broke ~100% of windows machines it came across, so you just needed to have done 1 manual patch of 1 fucking machine locally to have discovered this bug.
- Template Instances should have staged deployment Findings: Each Template Instance should be deployed in a staged rollout.
Basic procedure for every large org, and it wasn't followed at something this big? CLOWNSTRIKE continues
I understand when you have 100 customers, a delayed rollout literally does nothing, but at around 1000 customers it does and at the scale crowdstrike was operating at delayed rollouts are basically mandatory
ok the rest of the doc is mostly corporate jargon and meaningless, but boy this wasn't your normal fuckup this was a fuckup of epicly stupid programming oversight. Multiple errors that an absolute novice should have figured out which the most basic of tests would have found.
what the fuck is wrong with clownstrike
edmund-nelson
Filthy Anime Memester
3mo ago
I like that line, I know it's corny that she says it all the time but you really have to understand that every politician probably repeats the same epithets, it's just that in the age of Television and the internet it's a lot easier to clown on people like this.
edmund-nelson
Filthy Anime Memester
4mo ago
Ok so there's an update on what happened.
The exact crash is caused by dereferencing a null pointer the offending assembly is readable by anyone, and it is as follows mov r9d.dword ptr [r8], the key is that the value of r8 is 0000 0000 0000 009c 9c is an offset of some sort set earlier, so it's derefrencing a null pointer. The pointer is NULL because the value in the file C-00000291.sys was published to be all 0s causing r9d to get loaded as all 0s
So the offending assembly probably looks like
read r8 C-00000291.sys (some offset)
add r8 9c
mov r9d.dword ptr [r8]
causing the bug.
edmund-nelson
Filthy Anime Memester
4mo ago
Ehh I'm going to press X to doubt on the Secret service.
John F. Kennedy got Killed (I'll admit Trump would have been killed by Lee Harvey Oswald too)
Gerald Ford had 2 assasination attempts on him both of which he got lucky and survived but both were even crazier than Trumps
and just looking through wikipedia the list is just so long and full of examples that it beggars the question if Trump was even remotely unusual.
Boeing I'll grant you though, I think a part of it is that every corporation has its ups and downs and we have 1 down for Boeing right now, but remember the ford pinto? Boeing's issues are nowhere near as bad.
edmund-nelson
Filthy Anime Memester
5mo ago
Ahhh I see you're like "the few examples of actually good uses of military action are incredible and I want more of it."
Sadly I just agree, The Saga of Tanya the evil was the best war show of all time in spite of it involving fucking magical girls. The levels of thinking in those books/shows was just off the charts. I get a lot of the same vibes as when I hear Skullagrim review mary the virgin witch somehow by having higher variance the animated shows can have some of the best depictions of conflict.
I really liked the Saga of Tanya the evil and am looking forward to season 2, Season 1 was so good and while the books are ok, the animated version really sells you on the "this is what war is like" doctrine (except for mary sue fuck mary sue)
edmund-nelson
Filthy Anime Memester
5mo ago
Oh War and Peace is great but was a terrible movie precisely because so much of the book does not translate to the big screen.
I watched some drone footage of Russians fighting drones and it's a really depressing scene, lots of footage of drones flying not seeing anything then transmission ends via shotgun blast. (you often see the shotgun shells just before impact).
I can imagine at some point a video game where you are using drones shotguns and artillery to fight your opponent with drones shotguns and artillery in a trench, maybe even some Rifles and machine guns placed in for more trench warfare. Clearly you being the player would have to control drones, but small drones dropping mortar round after mortar round would be a fun game maybe idk.
edmund-nelson
Filthy Anime Memester
5mo ago
I can imagine certain types of shows working with those sorts of premises, but the key there is there would be no dialog between our pro/antagonists except before and after action sequences. So our cyberpunk drone operator sequence would be cool but it would have to be a thing where all the talking happens by characters that aren't our drone operators, maybe observers in a meeting room or something.Can't have them communicate via comms since that would cause them to get caught by the other operator.
The only other example I know of is The fan animation astartes which you know isn't even a real show. Reading /r/combatfootage sort of shows just how hard it is to even come close to making modern weapons interesting storytelling, you walk around in a trench and then boom an artillery round killed you. No drama between you and the antagonist, just nothing nothing nothing dead.
As for the saga of Tanya the Evil, it's a decently popular show, but definitely not some major franchise like the MCU or something. The author of the novels is clearly some guy who played a lot of Hearts of Iron 4 and also clearly read a lot of World war history novels before making the original books. Unlike live action, the animation actually can make explosions ect that "look" real because in spite of the cartoons not being real this means the stupid cartoon can have the bullet actually go through the persons head. According to imdb it's probably about in the top 15% of shows ratings wise. Now I will admit the show really does use rational tactics for the mages, having them provide cover fire, spot for artillery and engage in aerial bombardments, even though it's a show about magical girls. (heck one of the main villains is called Mary Sue :D) But it's a major exception, and one I'm a big fan of.
edmund-nelson
Filthy Anime Memester
5mo ago
However, I 100% agree that Marvel movies are stupidly written and don't make sense. The superheroes are weak in relative terms. A couple of Stryker brigades could demolish Thanos's army. Iron Man is worth maybe five to ten jet fighters. None of them could handle tactical nukes. All superhero movies seem to adore Bronze age tactics: mass charges and 1v1 duels.
Good luck making a show about tactics like the survability onion the thing is that modern tactics make terrible movies. You can't talk to the villan when all your weapons move at mach 2 and a lot of defensive tactics are based around stealth, evasion and recon. The staple trope of superhero movies of the villan/hero discussing the villan's plan doesn't work at all when the entire conflict strategy is to not be seen heard or detected and the fighters can't even see each other.
Unless you're one of the weird nerds who wants their shows to seem "real" it's typically accepted to do completely irrational actions so that the movie can actually be good. (Otherwise you get the Saga of Tanya the Evil where the magical characters actually do use rational tactics but the show has little character)
I run into this issue with plot holes, where I can see them if the show/movie is "thinky" or is trying to make you think, but when the show is just trying to be fun you can easily ignore the plot holes because the show isn't trying to do this. Books are typically the domain where you can have stories that have thinking and work well. Stuff like to Kill a mockingbird works because it's in book form. The television show Attack on Titan was like this, the first few seasons were a pure spectacle, there was no real deep plot going on and no need for one, but once they started having a major plot in the last 26 episodes+2 1.25 hour long television specials, the holes in the story started to show.
I don't know what to call this it isn't "suspension of disbelief" it's more like "suspension of thinking rationally about the plot". Like the issue is that these stories have 1 writer only and you have to write both a plot and the characters. Most people actually care more about #2 than the plot and most plots kinda blow. The spectacle of most shows is more important than the actual story for good reasons, (Books typically are a much better medium for pure storytelling, but a lot of the best books tend to fall in the "books you read in high school" category, which if you really pay attention the grand narrative of them is mostly trash). The only exception was this tiny weird niche space opera called Legend of the Galatic heroes which I swear is like if star wars was written by a Neoreactionary. Breaking bad is also good but it is more of a "character driven narrative". I should watch house of cards someday
edmund-nelson
Filthy Anime Memester
5mo ago
I remember this when looking at my reading speed for various things
Fiction I typically read at 600 words per minute it's really easy to read and you don't need to remember every single sentence.
Textbooks though I'm reading at 100-200 words per minute. Typically every word matters and the information density is often high enough that reading 1 page creates a lot of noteworthy information.
I watch youtube video's with my hands on the J K and L keys and mash J/L to rewatch/skip various bits, and I almost always do 2x speed
edmund-nelson
Filthy Anime Memester
5mo ago
The nice part about it is now I can make placeholder music for my games without feeling bad. Maybe even some mediocre music for a youtube video background or whatever.
I don't need actually good music, just mid enough that it won't be super awful.
edmund-nelson
Filthy Anime Memester
5mo ago
All the sparring I did with Makachev's disciples has made me not want to do real MMA ever again. How do you even win fights when the other guy puts you in reverse lockdown and punches you. It's a suffocating style that removes all the fun BJj ground game stuff I'm used to. I have to play the "JUST STAND THE FUCK UP" game against them to even feel like I stand a chance >.>
edmund-nelson
Filthy Anime Memester
5mo ago
I play co-ed hobbyist sports but nothing professional. A women who lifts takes creatine and can do Frontflips can be more athletic than 20% of men aged >40. Obviously this doesn't describe many women but this maybe describes the top 1% of women which corrisponds to roughly 100% of women on the real front lines.
I suspect that this is where the 5,000 number comes from. But if women are being used on the "frontline" to save men for the actual frontline then "frontline" is a pretty meaningless term.
There's a big issue that's hard to mention which is that "frontline" can mean "any combat role where getting shot at is a real concern" (which is why I suspect it's 2% of the UKR army) and "guy in the trenches". What of these roles that I could find on /r/combatfootage would you describe as "the front lines"
- artillery gunner who is firing at russians 30km away
- driving a tank 1 kilometer away from the enemy?
- manning a pillbox shooting a shotgun at incoming drones?
- Somebody controlling drones dropping granades?
- Manning a helicopter firing rockets?
I suspect the 5k would call all 5 "front line". I would probably exclude 4.
edmund-nelson
Filthy Anime Memester
5mo ago
The UKR army is like 800k strong which translates to roughly 225k troops on the front.
Given ukraines manpower problems having 2% of your frontliners be women might be reasonable. After all while a 23 year old man is probably better than almost any 23 year old women a 23 year old women might outperform a 45 year old man.
2% is fairly low. Frontline troops can mean Artillery gunners, FPV drone user ect, there are so many different combat roles in the military that they can find the least bad role for women to save more men for the infantrymen.
edmund-nelson
Filthy Anime Memester
5mo ago
Yeah I'll agree that both are flawed in the same direction, it's just that every other source is even more flawed aside from the austrian army.
The us naval war college doesn't post reports anywhere for example. I sometimes read Russia today but while I get info from them I find it more dubious than ISW stuff (though it's useful corroboration).
The austrian army is the best source but they are so infrequent when I need updates roughly once a week/month for forecasting reasons. I have to rely on the ISW and Wikipedia mainly. do you have any suggestions other than the ones mentioned above?
The ukraine war and godawful sources a problem
Samo Burja (sadly can't find the tweet) once said that we rely on defense ministries of the individual nations for information but at the same time lying about the state of affairs is considered respectable propaganda in a time of war.
Onto the sources
The Bad
Ukranian ministry of defense: These guy's obviously can't be trusted, they would totally lie about things if it means more american aid, lying about success in offensive operations, lying about goals and motives, or lying about defensive strategy, especially due to operational security concerns.
Russian ministry of defense: Exactly as untrustworhy as the UKR MoD but we hear less from them. What the UKR MoD and RU MoD agree on is likely "true".
Basically propaganda
The new york times: Something I wasn't expecting was how god awful the NYT's actual coverage of the ukraine war actually has been. reading their reports has been surprisingly low value. very little description of what is happening at any reasonable level. Maybe this shouldn't surprise me, the actual events of the war don't really improve how something looks narratively so you end up with little information about the facts on the ground
(this applies to most of the western print press and I won't mention any further, though Matthew chance of CNN was pretty good)
Better than most
Wikipedia: Wikipedia continues to keep winning. While it both does a good job explaining the history (talking about the invasion and conflict really starting in 2014) it also has some great parts that go unnoticed. Casualties? Reports vary widely what a great line to just throw out. Wikipedia's reporting is way above average and has better timelines than any reporting I've seen in the mainstream western press. They still have issues but sadly little actually can beat them. (I definitely find their UKR coverage worse because it's less contentious on english language groups than say their isreal gaza coverage but thankfully i'm not forecasting isreal gaza so i don't have to worry about it)
The institute for the study of war This is probably the most accurate source that you can call "respectable". Unlike other sources they do a good job of citing their sources and their citations stem from far more credible sources than the UKR MoD. The main problem with them is Bias, General David Petreus is a pretty solid general overall and while I tend to like the reports, I find the reports are slightly more anti-russian than the facts on the ground typically indicate. But unlike other reporters they actually accurately report the facts on the ground to a degree that nobody else except 1 group does. I may dislike sentences like "We do not report in detail on Russian war crimes because these activities are well-covered in Western media and do not directly affect the military operations we are assessing and forecasting." because they really should have just deleted the word Russian in that sentence. overall I like these guys and think they are the best reporting I can get regularly
The best (but so infrequent)
The AUSTRIAN ARMY Youtube channel The austrian army's reporting on the battlefield situation is top notch, I think that since they only post updates every 6 months or so their reporting tends to be a lot better at not missing the larger scale operations. Of course it's harder to cite the austrian army youtube channel and call it "respectable" but many probably would accept it.
Analysis and speculation
William spaniel While mostly a channel about strategic implications he actually does a pretty good job talking about how leaders can actually think. The Naval war college regularly cites him so I consider him much more credible than average. (though the naval war college also plays Polis to discuss the Peloponnesian war so they're definitely more willing to be a little less hinged than you'd expect)
Perun IDK how this guy got so big but /r/credibledefense loves him and I like his powerpoints.
So onto the actual conflict.
Right now the big story is that the russian army is making a move from the north while Ukraine is slowly losing territory on the southeast, not much to be sure, if this were mar 2022 you'd call the approach a massive slowdown. However the long slow push of russia into ukr territory is happening after a failed UKR 2023 counteroffensive. The war continues with what I would call world war 1 tactics with 2024 weapons. Trenches, Artillery, and spotters dominate the war, while in WW1 it was biplanes, in the Ukraine russian war it's the drone. The drone is creating this weird war where visibility is at an all time high, if you look at the survivability onion you'll notice that stealth comprimises most of the survival tactics Evasive manuvers are almost a last resort. This means it's much harder to conduct certain operations without getting troops killed. I wonder how much the conflict will change in the coming months, the 1 prediction which tends to hold true is that almost nothing happens because this is the second coming of world war 1
edmund-nelson
Filthy Anime Memester
6mo ago
I was going to make one on the Ukraine war, but most of my post would be whining about how hard it is to get good sources and how much I have to rely on either aggregators of semi-unreliable sources (ISW ,War mapper, Task and Purpose youtube) extremely unreliable sources (NYT, Huffpo, ect.) or the primary sources themselves (when you're citing the Russian catgirls telegram you know you're in bad shape)
I could describe how bad my sources are in the post and describe what is probably true from what may or may not be true but that would be a pretty bad post
edmund-nelson
Filthy Anime Memester
6mo ago
The best one available is GTOwizard.com though note that it's a monthly subscription, after a bit of using it you can graduate to using Piosolver https://piosolver.com/ yourself
It's number of users who gave the show a rating.
Yeah anime's quality is pretty low overall, there's a reason there's a saying "this anime is trash and so am I". Look there aren't many what I'd consider "high class" anime. It's mostly wish fulfillment nonsense with little depth. At the same time you can find your wish fulfillment nonsense. Like me with the saga of tanya the evil and GATE thus the JSDF fought there.
More options
Context Copy link