MurphyA/hacker-news huggingface dataset:
by some_furry | 2025-07-09 20:38:44+00:00
> What's dangerous is the framing; many E2EE messengers give the server a LOT more power than "just stores the ciphertext". https://news.ycombinator.com/item?id=33259937 is discussion of a relevant example that's gotten a lot of attention, with Matrix giving the server control over "who is in a group", which can be the whole ball game for end-to-end security.

I'm a vocal critic of Matrix, and I would not consider it a private messenger like Signal.

https://soatok.blog/2024/08/14/security-issues-in-matrixs-ol...

When Matrix pretends to be a Signal alternative, the fact that the server had control over group membership makes their claim patently stupid.

> And that's not even getting into the power of side channel information available to the server. Timing and other side channel attacks can be powerful.

A lot of my blog discusses timing attacks and side-channel cryptanalysis. :)

> If the people who develop the software are different from those who host the server, that's almost certainly software you can self-host. Why not mention self-hosting in the article?

Because all of the self-hosting solutions (i.e., Matrix) have, historically, had worse cryptography than the siloed solutions (i.e., Signal, WhatsApp) to the point that I wholesale discount Matrix, OMEMO, etc. as secure messaging solutions.

> If you're shopping for a third party to host a self-hostable E2EE messenger for you. The framing of the server as just "storing ciphertext" would suggest trustyworthyness of that hosting provider isn't relevant. I can't agree with that claim.

It's more of an architecture question.

Is a self-hosted Matrix server that accepts and stores plaintext, but is hosted in Switzerland, a better way to chat privately than Signal? What if your threat model is "the US government"? My answer is a resounding, "No. You should fucking use Signal."
by ryandrake | 2025-07-09 20:39:08+00:00
It really is crazy in the USA how much of an overreaction a single, loud, entitled, nosey, complaining neighbor can get with local government: whether it's complaining about kids making noise, complaining about kids playing alone, complaining about traffic, complaining about suspicious black people in their neighborhood, complaining about the length of their neighbor's grass or a car parked in front of their house. You read all these stories about how one complaint resulted in the police being deployed, fines being assessed, innocent people getting in trouble, roads getting speed bumps and 5 all-way stop signs, and other crazy shit happening because some one person couldn't manage to mind their own business.
by klank | 2025-07-09 20:39:46+00:00
Certainly, which is why the social interaction OP described makes sense.

But OP was specific in the loud things they mentioned, and that list very much does not directly imply carpentry. So to then make it about OP's lack of tact by explicitly calling out the OP for focusing on their profession? It strains credulity as a good faith reading of OP's story.
by ashdev | 2025-07-09 20:39:48+00:00
If I were to do it all over again, I’d simplify things even further. I’d start by testing the idea with just the offline version. For syncing, I’d focus on syncing the data itself, just the database records and not the user actions. Instead of replaying every action, I’d track which records were modified and sync only those. No need to capture what changed, just that record got changed. Hopefully that makes sense.

The business is doing alright, but what really keeps me going is that the app is something I genuinely wanted for myself. I use it all the time, it's always open in the background, so that keeps me motivated.
by vishakh82 | 2025-07-09 20:39:57+00:00
We address this point in the article. On the default path with existing rules and regulations some degree of trust in labs will always be required.

At-home sequencing could be a game changer.

The other reply also mentions molecular cryptography which could provide really strong anonymity and privacy guarantees. We hope to do a PoC accordingly some time in the neat future.
by tetha | 2025-07-09 20:40:38+00:00
Hm. I think I am encountering cultural differences here, again. Personally, I have a point from my grandma in my head: "If your ears are ringing from happy, playing children, that's future in your ears. That's good". For sure, within reason, but a huge ruckus in the shared backyard or playground between 08:00 or 20:00 due to kids?

That's what kids to.

I rather get worried if they abruptly stop, or start yelling differently. I don't even have kids, but I'll still take a look wether a kid of a neighbour mananged to add a temporary third joint to their arm, is bleeding a worrying amount or something like that.
by klank | 2025-07-09 20:40:42+00:00
Sure, and if OP had said that, perhaps we'd be having a different conversation. Or none at all?

EDIT: Ah, maybe you're responding to my remark of it having "nothing to do"? If so, yeah, that's hyperbole. There are similarities if you want to look for them. But I don't think they're meaningful connections for the point of the story and OP's reaction, in my opinion.
by wredcoll | 2025-07-09 20:41:41+00:00
> Ground News shows you a story that's being covered exclusively by right or left wing sources, that's their signal that the story could be either a) bullshit,

Except this isn't what this guy found. What he found was that right-wing-only stories were invariably lies.

You'd have a point if there was also the same tendency to lying on "the left" (whoever that is supposed to be). Just because you can come up with two sides to an issue doesn't make them equally valid.

There is a truly massive amount of people attempting to prevent criticism of right wing people by constantly deflecting everything with "oh the left wing is just as bad!" and there's an annoying type of person who sees that and believes it.

Like, lies and propaganda are bad for us and our society but we can't get anywhere talking about if everyone has to constantly pretend there are two sides to it.
by saurik | 2025-07-09 20:41:57+00:00
The process of developing software involves this kind of non-linear code editing. When you learn to do something (and the same should go for code, even if sometimes people don't get this critical level of instruction), you don't just look at the final result: you watch people construct the result. The process of constructing code involves a temporarily linear sequence of operations on a text file, but your cursor is bouncing around as you put in commands that move your cursor through the file. We don't have the same kind of copious training data for it, but thereby what we really need to do is to train models not on code, but on all of the input that goes into a text editor. (If we concentrate on software developers that are used to do doing work entirely in a terminal this can be a bit easier, as we can then just essentially train the model on all of the keystrokes they press.)
by alfalfasprout | 2025-07-09 20:42:20+00:00
TBH a lot of it is also a cultural shift toward being selfish. You notice it here in the comments as well.

Combined with "karen" culture, people are more empowered than ever to complain about things. They forget that when they were kids, they'd be loud, play in their neighborhood, and get up to no good :)

It's a real shame, this mentality is what's moved us away from a feeling of community.
by Jeaye | 2025-07-09 20:42:31+00:00
I agree with you, but perhaps in my own way. Jumping into an arbitrary Clojure program can be tough, since the data shapes may not be defined anywhere. Hopefully the program uses spec or malli, but even then, unless they annotate every function with the shape it expects, you may be left needing to REPL in and poke around. However, REPLing in to check just a function or two may not be easy if the program requires some setup and doesn't use integrant or similar.

Once Clojure parity is achieved, I'm interested in static typing, pattern matching, value-based errors, and some other opt-in improvements that I think will greatly improve both readability and toolability (i.e. how well tooling can work with the code, based on what it knows of the code). Stay tuned. :)
by didibus | 2025-07-09 20:43:26+00:00
I don't understand, they did an estimate and found it below 100$ million. That seems to have followed the process. An estimate can always be challenged and is just a best effort prediction. Now it seems this create a pretty flaky ground for precedence that the FTC simply can never estimate less than 100$ million as it could always be challenged in court, what if it was more? And they now have to always follow the more effortful process of assuming it is more than 100$ million.

It really seems like a weird line in the sand that the court will just randomly decide on a case by case now, with the FTC having no way to know if the court will agree with their estimate or not.
by foxglacier | 2025-07-09 20:43:53+00:00
> displays of talent and respectable deeds,

Without the external metric of how much money you make, these will be unquantifiable and subject to political manipulation. Even the definitions of what's talent and respectable can be altered to favor the politically more powerful people. Groups without a clear measure of status find arbitrary ways to define it. Look at how school kids or prisoners do it, for instance. It's nothing like what you'd love to see.
by dolmen | 2025-07-09 20:44:04+00:00
The post says:

> Side note: for those wondering, Tailscale is Canadian and can't see the content of connections (although if you're worried about this it's also possible to self-host using Headscale).

However this is no longer the case. From Tailscale's Terms of service "Schedule A", "New customer accounts on or after September 3, 2024" are bound to "Tailscale US Inc., a Delaware corporation"
by dylan604 | 2025-07-09 20:45:41+00:00
No. Why do you think people are put on non-compete? They don't want competitors to be able to start doing what they are doing at the company. Sales is an easy example with the concern of clients being poached. There's no disclosures necessary there. If a sales person is put on ice for 12 months, that could destroy their relationship with the client. For techy people, there are ways of moving to a new company where they start up a way to directly compete with the first company without using any IP or breaking of a non-disclosure. Obviously, you can't recreate the formula for Coke at Pepsi, but you could create an RC Cola or a create a Dr. Pibb after leaving Dr. Pepper.
by gr4vityWall | 2025-07-09 20:47:00+00:00
I have played with it a bit on side-projects. TL;DR: would not recommend it unless you're building a game or is in unique circumstances. Pick something with a faster feedback loop for development GUIs.

While HaxeUI is usable, you'll be on your own a lot: * Documentation is scarce * You'll likely run into bugs the moment you try to go beyond hello world examples * No promises of regular releases or API stability whatsoever. You're expected to run versions directly from GitHub * wxWidgets backend sometimes segfaults with the examples from its HaxeUI's website * tooling is subpar for GUI apps in Haxe; forget having anything as good as any modern frontend framework with Vite. Hot-reload somewhat works on HashLink, but there's almost no documentation on how to use it.

It's maintained by a very nice dude, who does a good job considering the coverage of his libraries, the fact that he does that by himself, and the fact that the OpenFL-based backends work well. HaxeUI is used in production by a few people who work with the HaxeUI developer.

FeathersUI is another option, with much, much better documentation (probably one of the best for Haxe libraries), but smaller component coverage than HaxeUI. I ran into less bugs with it in general, and the dev seems more focused on consistent, well-tested releases. Also a really nice guy from my experience, just like the HaxeUI dev.

But overall, iteration times of GUI applications is just not good with Haxe. You'll suffer if you are used to modern frontend tooling. The accessibility story is nonexistent. And I'm not sure the performance would even be better than just opening a WebView. Definitely not on mobile.

I would only recommend using those two libraries in three circumstances: * You are building a one-off GUI tool that has a simple interface. Think something like LunarIPS. In that case, you can get something usable pretty quickly which will look good if you don't care about following the native toolkit (don't go the hxWidgets path, it's guaranteed suffering). * You are building some interface which will be used inside a game made with Haxe. Say, a login form inside your multiplayer game. In that case, it makes perfect sense to use one of those two libraries. * Your application, for whatever reason (personal taste included), will have a more game-y UI, and it makes more sense to code it in a game engine than the DOM or Qt or whatever.

A fourth reason that is valid for anything is if you're in a Haxe shop, and want to maintain a single language for all projects. Those places do exist (like Shiro Games).

I think that if I __had__ to build a GUI program in Haxe these days, I'd build a prototype with vanilla JS or React first, iterate on it, and only start a HaxeUI/FeathersUI version later.
by kjellsbells | 2025-07-09 20:47:04+00:00
I've been thinking about this a lot lately too. There are biological systems that exist in vast quantity, like, say, ants or blades of grass (or, simply cells). I think there is a way to make them computing machines (there was a paper from Adleman, of RSA crypto fame, years ago about it, for example). The challenge is getting the problem broken down across billions of individual compute elements, and of getting the data in and out quickly.
by philipkglass | 2025-07-09 20:47:15+00:00
These materials are pretty expensive. Tellurium is currently about $86/kg, tantalum $430/kg, and iridium $140,000/kg:

https://www.dailymetalprice.com/metalpricecharts.php?c=ir&u=...

https://www.metal.com/en/markets/20

But it's a "2d material" so it only takes a tiny atomically thin quantity of these elements to build a detector:

https://news.columbia.edu/news/what-are-2d-materials-and-why...
by unsignedint | 2025-07-09 20:47:18+00:00
Perhaps it’s most useful as a way to avoid getting trapped in a filter bubble. If you prefer to stay within the comfort zone of your favorite news outlet, there’s nothing stopping you—and in that case, you probably won’t get much value from services like Ground News.

Personally, I find it helpful to see what people outside my usual information sphere are being exposed to—not just to understand why others may think the way they do, but also to better recognize how that contrast influences the coverage I choose to consume.
by catfacts | 2025-07-09 20:47:26+00:00
I remember Clapp a Common Lisp in C++ using LLVM. Clapp was promising but progress has been very slow. Since Clojure is similar to CL, one wonder if Jank will experiment similar problems. Might I ask the author of Jank whether he knows about Clapp and if so, how will this project try to avoid getting stagnated?

Edited: Here is a post in HN from 2014 about Clapp. https://news.ycombinator.com/item?id=8367404

In that post and comments we read that Clapp was 100x slower that sbcl, and the author of Clapp claimed: "LLVM is a great library for implementing C and C++ but more work needs to be done to support Lisp features like closures and first-class functions. We are working on that now".

I hope Clapp's author work in the last 11 years could help today efforts. Surely, the LLVM of today is not that of 11 years ago. Anyway, IMHO, sharing some knowledge could be productive for any project that is about C++, Lisp or Clojure using LLVM.

If I recall correctly, compiling Clapp takes a full day, that gives not a good vibe.

On the happy path, I think that Julia transpile to LLVM, but Julia is the result of many men working years at it. Honestly, I don't think that one single programmer to be able to create such a big project as a performant clojure in C++ will the ability to compile code quickly. Getting sbcl speed and compilation speed would be an extraordinary feat!

In Go there were great sacrifices to get fast compilation, and the problems to include generics, trying to avoid blows up compilation because some type checking is NP-complete.

Also perhaps ECL, a lisp in C, can gives us some hints about how to get better performance and compilation speed.

Perhaps I am just too old to be open to new dreams, anyway I hope the best to this project and I thank to Clojurists Together for supporting this project. It must be very intellectual rewarding to work in a project whose aim is to extend and improve your favorite computer language. But the journey will be no an easy one, that's for sure.
by lahcenassm | 2025-07-09 20:47:34+00:00
Hi everyone,

We built urldn – a free URL shortener designed for bulk link management, real-time analytics, and custom branded short URLs, with no signup required.

Most URL shorteners restrict you to one link at a time or paywall advanced features. We wanted to make something that just works for marketers, founders, and anyone managing lots of links:

Bulk shortening via CSV upload or API Custom branded short links Real-time analytics on clicks, geolocation, devices No login required to start Team collaboration features

We built this because we kept hitting limits and paywalls when managing campaigns with hundreds of URLs. urldn is meant to make it easy and accessible for everyone.

Try it out for free here: https://urldn.com

We also have free tools here: https://urldn.com/tools

We’d love your feedback. What features would make it even better? AMA!
by martin-t | 2025-07-09 20:47:59+00:00
You'd think that but AFAIK, there have only been 2 serious attempts to kill Trump and 0 to kill Musk[0] (I don't follow US politics much so idk which one of them you're referring to). Compare that to the number of mass shootings[1] and car rammings for the same period.

It seems most killing is done by crazy people who are content to blame and attack society at large for their problems. Conversely, sane/intelligent/competent people who are able to identify the root causes of injustice rarely use violence.

As a result, you're probably fine as long as other unhinged people see you as an ally even if a lot of sane people see you as an enemy.

[0]: Apparently he claims 2 so I qualified it with "serious" because narcissists are known to inflate their claims and I can't be bothered to check his claims.

[1]: Apparently what counts as a mass shooting is very inclusive (e.g. https://www.youtube.com/watch?v=Vx3aI67iWpA ) so count only those intended to kill random strangers, not targeted attacks.
by hinkley | 2025-07-09 20:48:33+00:00
The problem, which I've only gotten enough of a taste of to see how untenable they would be at that scale, is that with enough feature toggles, and enough partitions to rolling them out (%, region, or AZ cutoffs), you eventually spend most of your time shepherding rollouts, or coordinating with other people not to impinge on theirs, instead of writing code for rollouts.

Rollout fatigue should be respected, even feared. It will insidiously tempt people to skip steps. And failing that, it will blur together in your mind the last twenty times you did this procedure, and you will forget if you ran step 5 before you were interrupted by someone. You will remember having done step 5, but you won't remember if that was ten minutes ago, or yesterday.

It's the reason I keep writing tools to force a checklist, or a prompted sequence. If I didn't check off step 5 I still need to do it. And I'm not even in operations.
by Der_Einzige | 2025-07-09 20:48:43+00:00
Very based. All the people who try to claim that this is bad social skills apparently just take it from folks in the often scummy trades (i.e. mechanics, dentists, etc when I say scummy) who treat us like shit and make snide comments and backhanded compliments with impunity about us lazy computer users. This is triply true in the post AI era. They hate us cus they aint us.

You hit a nerve here too.
by LegionMammal978 | 2025-07-09 20:50:19+00:00
> and that API must use hypertext

I'd say that my web browser is not using hypertext. It is merely transforming it so that I can use the resulting hypermedia, and thereby interface with the remote host. That is, my browser isn't the one that decides how to interface with the remote host; I am. The browser implements the hypertext protocol and presents me a user interface to the remote host.

Fielding might have a peculiar idea of what an "API" is, so that a "human + browser" is a programmatic application, but if that's what he says, then I think his ideas are just dumb and I shouldn't bother listening to him.

> Whether or not the API is being consumed by a script client or a browser client doesn't change the RESTful-ness of it

There's no way for a "script client" to use hypertext without implementing a fixed protocol on top of it, which is allegedly not-RESTful. Unless you count a search engine crawler as such a client, I guess, but that's secondary to the purpose of hypertext.
by Jach | 2025-07-09 20:50:34+00:00
Not even just clients, but servers too would block anything not GET/POST/HEAD. And I believe PHP still to this day only has $_GET and $_POST as out of the box superglobals to conveniently get data params. I recall some "REST" APIs would let you use POST for PUT/DELETE requests if you added a special var or header specifying.
by wizardforhire | 2025-07-09 20:51:03+00:00
From wikipedia:

In July 1940, pursuant to the Agricultural Adjustment Act (AAA) of 1938, Filburn's 1941 allotment was established at 11.1 acres (4.5 ha) and a normal yield of 20.1 bushels of wheat per acre (1.4 metric tons per hectare). Filburn was given notice of the allotment in July 1940, before the fall planting of his 1941 crop of wheat, and again in July 1941, before it was harvested. Despite the notices, Filburn planted 23 acres (9.3 ha) and harvested 239 more bushels (6,500 kg) than was allowed from his 11.9 acres (4.8 ha) of excess area.

I don’t agree with the ruling or implications of this case, that said it was a clear ruling of technicalities.
by OkayPhysicist | 2025-07-09 20:51:15+00:00
SB 699 (passed in 2024) made noncompetes illegal to enforce against against California workers, regardless of where the noncompete was signed. It's very unambiguous on the topic. However, as you correctly pointed out, that involves getting your case in front of a California judge, which you best bet the company suing you for violation of your noncompete is going to do their damndest to avoid.

However, under the wording of SB 699, even if you get sued for violating your noncompete in, say, Michigan, and lose, you can then sue that company, in California courts, and as long as California has jurisdiction (which they probably do, given most businesses don't completely avoid doing business in the largest economy in the country), you can successfully sue them for suing you over the noncompete.
by mrlongroots | 2025-07-09 20:52:11+00:00
Exactly.

To present a potential usecase: there's a ridiculous and massive backlog in the Indian judicial system. LLMs can be let loose on the entire workflow: triage cases (simple, complicated, intractable, grouped by legal principles or parties), pull up related caselaw, provide recommendations, throw more LLMs and more reasoning at unclear problems. Now you can't do this with just a desktop and chatgpt, you need a systemic pipeline of LLM-driven workflows, but doing that unlocks potentially billions of dollars of value that is otherwise elusive.
by pavel_lishin | 2025-07-09 20:53:18+00:00
Our local ice cream truck plays a very annoying jingle, coupled with a woman's voice saying "Hello?" in an obnoxious way. I haven't complained, because I'm not that kind of asshole, but something about that voice clip feels like stubbing my toe over and over again.

If it were a regular jingle, I'd have no problem. Perhaps one that could be turned down so you don't hear it from halfway across town.