skysight-inc/HackerNews huggingface dataset:
>[NSO Group] claims to sell its spyware only to law enforcement agencies to track terrorists, criminals and drug lords

>An NSO spokesman reiterated those restrictions in a statement Thursday, and said the company had no knowledge of the tracking of health researchers and advocates inside Mexico

>NSO executives point to technical safeguards that prevent clients from sharing its spy tools.

Of the above only two can be true. My bet is they sell to anyone who can pay.
"Freedom is slavery" Very Orwellian.
> And the best part about AI is that we have no ethical issues simulating millions of evolutionary iterations of "bloodshed" until we arrive at an AI that is acceptable to our ethics.

Are we sure this is the case? Once we start attempting to create an AI that follows our modern ethics, we have to start asking questions about AI personhood.
And I for one feel there are deep ethical questions regarding forced iteration/simulation, let alone the violent kind.
I think I have learned most from those unaware that they were teaching.
> There are big places where its market share exceeds that of SMS

The "market share" of SMS is the entire world. SMS works with anything from a $15 Shenzen dumb-phone to a $1k iPhone 7+. Not to mention that unlike WhatsApp, which is forbidden to do business with countries like Iran (due to US export regulations), SMSing works with any country in the world except North Korea.
I doubt that burn-out will be that serious an issue. I used to get depressed a lot, until I learned how to hack the mechanism. With deep hooks into brain function, I see no reason why people would be depressed, unless they wanted to be.

Some will argue that heavily augmented people are no longer human. Back in the day, I'm sure that some considered the use of stone tools in the same way. But they apparently didn't have many descendants ;)
How Will You Measure Your Life? By Clayton M. Christensen (2010)
"Show a directory tree on the left"

if you use Chrome, try out Octotree
Why not run an operating system that does let you use accessibility software at the login screen?
It's not specifically new technology that's being deliniated by "Moloch". The article is long but explains clearly the (not entirely new) association: Moloch represents the sacrifice of human values on the altar of competitiveness, and is best staved off through coordination.
Harder to prevent access to, harder to wire-tap. As other people pointed out WhatsApp has been blocked in countries before. Not to mention that with WhatsApp having a central location all messages are routed through we really don't have any guarantee that there isn't a compromised actor in there intercepting everything. Even if WhatsApp's crytpo is as flawless in implementation as we'd like FB still has access to all that metadata.
This is, in my view of reality, already a foregone conclusion which happened way before anything any of us can conceive. I see little reason to entangle the data that makes me me with a bunch of insecure processing power.
I like your idea, but it seems like then the government (or somebody) would have to have a guaranteed way to detect whether or not you're drinking soda, smoking, etc. Seems invasive.
> Better to move sensitive conversations to things like Signal, WhatsApp, or Wire

Will corporations adopt these platforms? You cannot share files easily, create threaded conversations, etc. More-over, one must register a phone number, and rely on the centralization of the provider of the service.

For some uses, emails serve as a record of communication, and to establish a public history of conversation (e.g., open-source development mailing lists). However, for these cases, encryption isn't used.
So this is a question for those of you in the comments.

I'm finishing up a Ph.D. in engineering (heavy into climate change research, so tons of programming + mathematical + statistical knowledge in addition to combing through TBs of data with R and other languages).

What kinds of problems are frequently present in the data science industry that differs from academic research?
Maybe. But mostly, they'll just hack neurotransmitters.
I don't disagree, but this is basically the MO of almost every "free" social network, messaging service, or image or content host since forever.
Krishnamurti's teachings are based on scriptures such as Upanishads and Gita. He was averse to the notion of having a Guru (or teacher) because the teachers he had seen in his time were very steeped in orthodoxy, despite their learning. He was also against quoting verses from scriptures because he wanted to break away from the traditional teacher-student model.

His teachings are appealing to many people who do not have a sufficient background in the study of Vedanta (the culmination or final word of vedas). There are many contemporary teachers whose teaching is similar to that of JK. Eckhart Tolle, Mooji, Robert Adams, Nisargadatta Maharaj, Ramana Maharshi etc.

To appreciate the teachings of any of the above spiritual giants, one needs to have an intense/burning desire to seek the Self. Once it is realized, it puts an immediate end to all suffering and seeking. The glory of the Self has been described in great detail in Upanishads and Gita. There are supplementary texts that also discuss the approaches to attain it.
>This is because all of the articles are presented in exactly the same way with the exact same layout features.

But what about communities like Hacker Noon? If I publish a medium article in such a community, at least the header differs from the regular medium's one

> People who are prepared to wade through all of the above on the off chance that they'll strike it lucky and their article will end up with a few thousand shares have worked out how to game Medium

From my personal observations, sharing a link to an interesting medium article in Reddit and HN can generate quite a traffic. I've got 13.5K reads for one of my stories by using this way, that's hardly any kind of "game" can be found there.
I don't think the real problem with OpenPGP is the UI issues. OpenKeychain and K9-Mail together provide a not terrible UI for OpenPGP, and if someone wanted to more tightly integrate them with each other,the UI could probably be improved further.

But PGP-over-SMTP would still leak important metadata, and you would still have problems with forward secrecy and key revocation.

Matrix looks like a much better decentralized solution to build a new email infrastructure on. But there are still metadata leakage issues with federation, and there need to be some standards and an example implementation for email-over-matrix.
Sound like you have the right mindset ;-) The most boring part of the project was routing of all the bus lines in KiCad, but I knew that if a kept on working, the reward would be big :-)

I was actually planning to do a ROM emulator with a PIC MCU at first, but ended up using a regular EPROM, SIO/UART and a bootloader to load programs via RS232. When I had a stable program, I burned it to the ROM and continued. This is because when I got started with the "test circuit" I didn't want to go back to the PIC :-D

I'm currently developing my ROM monitor so that I can get CP/M running :-)
Signal making choices for ease of evangelizing it doesn't condemn the entire idea any more than poor implementations of secure email means we should totally give up on it
I think Medium raised the $132M with the promise of "we will disrupt how news are produced and consumed". A monthly subscription of a digital magazine does not seem a so disruptive concept. The only disruption is to have people to write article for free while you charge for its reading.
Speakers can not encode a whole film in a few words -- they can compress it to a few words, but this is most definitely a very lossy process.
Technically, this could/should have been already solved with voice authentication. Nuance and other companies have been claiming/pushing it for a few years now: http://www.nuance.com/for-business/customer-service-solution.... I'd actually expect Apple to be the first big player to incorporate that, as they've been a leader in accessibility. Maybe somebody should sue them for discrimination to accelerate the process.
You're probably missing some library or other. I know I had to install something in debian unstable, but I don't remember what it was. U2F definitely works on Linux, though.
Well, there's plenty of applications that may not be "daily life" but rather "you're likely to encounter this at some point". Take the relation between speed and distance traveled, or the difference between marginal cost and per-unit cost.
That's nothing. I can write a chess engine using nothing more than the Latin alphabet, Arabic numerals, and a couple punctuation characters. All you have to do is compose these building blocks in the right way, and gcc will take care of the rest.
Posting your own (or your employer's, or friends') stuff is ok, but accounts that only do that eventually lose submission privileges, especially if they overdo it and/or if they're corporate identities rather than personal ones. Corporate identities don't fit with the community thing.
For personal use email is rarely self-hosted, but corporations, governments, and organisations often run their own email infrastructure. That effectively makes email a decentralized federated system.

You might argue how a lot of email is either send to or send from Google, Apple, or Microsoft services, and that is thus somewhat centralized, but isn't that stretching the definition?
Not sure why this was downvoted. The click-baity "Yes, JSON" is really annoying and should be removed.

More generally, the title should be corrected to the actual title, which is almost fine:

"How to build cross-platform mobile apps using nothing more than a JSON markup"

Maybe remove the click-baity "nothing more than" part, but other than that, the original title is much better than the submission title.
One of the big premises of GTD is to organize tasks by contexts. A key feature of that is to keep a list of important but easy / low energy tasks in advance so when you're in this state you know exactly what you can do to be productive without having to think about it.
The Mozilla Foundation's Coral Project has a full-time team building an open source comments system with no ads. Follow the repo, forum, and/or slack for updates. https://github.com/coralproject/talk
https://coralproject.net/
Apparently Ladino was used as a trade language throughout the Mediterranean/Adriatic, and Wikipedia lists it as being "native" to Italy [1]. There also are regional Judeo-Italian dialects, including two from Corfu [2].

My internal map of Italy isn't very good, but given the 'size' of the populations that must speak or have spoken these dialects, I'd guess there was a dialect specific to Sicily.

[1] https://en.wikipedia.org/wiki/Judaeo-Spanish
[2] https://en.wikipedia.org/wiki/Judeo-Italian_languages#Dialec...
A true Malthusian is a dangerous thing, in my opinion, insofar as they fully claim that the only way that we can all be rich is by limiting population.

It's possible, at any rate, to accept most of the correlations in this article and to reach a very different conclusion: that the earth is capable of more and more population while still redistributing its proceeds. This argument was made by Henry George more than 130 years ago, and still is worth reading[0].

[0] http://www.econlib.org/library/YPDBooks/George/grgPP10.html
I have only been addressing your comments on safety. I have not addressed any of your comments on performance.
> I don't see having to install and configure an MUA any more of a barrier to contributing than it is to install a web browser to use Github to contribute to other projects that expect pull requests.

Almost everyone has a web browser installed. Not everyone has a MUA installed.

> 5. Use git format-patch to generate a new patch series for re-roll with a command line parameter that refers to the file containing the cover letter for the original patch series.

This was the step I missed, thanks. This could work. You now need to keep your patches around, but it could work.

> The sha1 of the commit should be unique enough.

I meant stable across local changes to the commit. I didn't realize you were serializing this commit hash to some file and fetching it from the file later.

> I disagree. It's not fundamentally harder to use a MUA, news reader, or IRC client than it is to use a web browser.

I believe more people have a web browser set up than they do a MUA. You cannot browse the web effectively without a web browser (I mean, you can use lynx, but the modern web is not well suited for that), and this is pretty necessary these days. You can use email effectively without a local email client, however.

It's not just that the MUA is harder to set up, it's that you're asking people to effectively change their entire workflow for interacting with email just so that they can contribute.

And yes, MUAs are harder to set up. Refer to aforementioned points about blocked ports, confusing IMAP/POP3 deletion semantics (I don't want to accidentally delete all my email!), proxies, etc.
This also raises the question: With a walled garden like Signal/Wire/etc, how do you get+trust the other's key?

Their convenience comes at a cost.
> The popular https://riot.im is built on top.

Thanks, so it's basically a opensource and federated slack?

How does this solve the email encryption use case? (longer form text not requiring presence)
>That is, unless we can somehow lose our humanity in the process. But then, we're no longer being augmented. We're being replaced.

Right, which is a great thing that should be celebrated! Creating a successor is arguably what our core "programming" (DNA) is all about. The biological imperative as it were.

What about the idea that we can create the successor to humanity? Why wouldn't we celebrate creating something better than ourselves?
The last cafe I was at, last week, I had an engaging conversation with the cashier, shared a smile with a mother about her ungainly, teetering toddler's excitable wanderings and commented with a guy at the neighbouring table about how nice it was to hear kids playing outside in the courtyard. When not chatting to people around me, I read a book and ate the delicious chocolate cake. The merger has already happened for some people.
I've been working on Keygen[0] for the past 9 months or so, a product/app licensing API with a focus on small- to medium-sized companies. I'll try not to get too sales-y, so Keygen lets you manage licenses for your products via a RESTful API, everything from your users to the machines they're allowed to use.

I'm currently working on adding an administrative dashboard so you can monitor metrics for each product to know what license types your users like, as well as other metrics like license churn, overdue license check-ins and more.

It's currently in closed beta, but I'd be happy to shoot you an invite if you're interested. I'll be offering affordable pricing for small- to medium-sized companies, with plans based on # of products, users and licenses.

I'd love to hear what you'd be willing to pay per month/year for a product like Keygen.

[0]: https://keygen.sh
It is also ISO11783. So any mechanic who can work on large diesels (semi trucks) will have the tools. Some of the $150 OBD-II readers at an auto parts store can do it (only some though - most do not have the adapters: it is a different connector and different data on the wires).

If you are reading this you can probable figure out how to wire up an arduino as well. The electronics are easy, though you probably have to buy the standard from ISO to write the code.

Note, the above covers current tractors. Some of the older tractors used an older protocol, God help you if that is your tractor.
I know a guy who did a website related project for NASA. Was all smooth sailing till he was just about done and needed a server to put it on. The massive bureaucracy kicked in and everything grinded to a halt. It ended up being hosted on some random server it wasn't really supposed to be on because that was the only thing that could work in a timely fashion.

Tumblr seems less frictionless.
Judeo-Italian is a group of Italian dialects. [1]

[1] http://www.jochnowitz.net/Essays/Judeo-Italian.html
IBM integrates Watson into its security operations platform
If you care about the physical identity of someone: web of trust.

At some point, you'll have to ideally meet at least one person in the flesh to exchange keys and verify their identity. After that point, it's possible that others you are trying to communicate with might be within your web of trust. If not, you'll have to go through your keysigning procedure again.

https://www.gnupg.org/gph/en/manual/x334.html

Some organizations facilitate keysigning:

https://wiki.debian.org/Keysigning/Coordination

But that might not be necessary for you. For example, I don't necessarily care about the physical identity for some of the people I communicate with online. If I see in e-mail archives that person is using the same key to sign their mail for the past N years, I'll use that key to encrypt to them. Similarly with commit signing and such. In that case, I just care that my message is reaching the intended recipient.

I communicate with a number of GNU hackers. Package maintainers upload their signing keys to Savannah, and sign each of their releases with that key. If I simply want to know that my message is reaching that maintainer, I can get the key that way.

But if I want to know that I'm actually speaking to the person that the maintainer _claims_ to be, I'd want to use the web of trust. They could very well be an imposter!
Web Development Is Moving to Jelastic Private Cloud: Use Case
A big problem with me learning to code is my terrible memory. I get the concepts and logic of code, but it's frustrating having to re-learn everything over and over again because I can't remember the function name, format, etc.

My biggest nightmare is trying to learn another language, I took 7 years of Spanish in school and I literally can't speak a sentence of Spanish.
Probably because you are offering too low compensation?
No kidding. It's just a new version of TCP, implemented on top of HTTP, which is implemented on top of TCP.
I mean, I want to consider myself a hacker, but I have no interest in OS programming, and everything I am interested in is on Github.
This is a good article. Better still, a good article that was never discussed on HN before. So that account hasn't done anything abusive here—on the contrary.

If abuse occurs, we'll deal with it. If you think abuse might be occurring, please let us know at hn@ycombinator.com. We're can't read all the posts here but we do see all the emails.
I feel conflicted right now. On the one hand, I'm really happy to know there are plugins that I wasn't aware of to disable comments. On the other hand, I learned about it from a comment...
Streamlining (G)ADTs in Dotty (Scala)
Kmail is the only GPG experience I have ever found that just worked. It has a selection of keyservers by default, and if you email someone with a key on one of them it just magically uses it like its supposed to.

Combine that with the KDE GPG manager which is also painless to generate and upload your own key, and its the only time I have ever been able to get "muggles" using GPG successfully.
I've seen so many projects like this over the years that claim that they're the one that will allow for true cross platform app development, and they've developed a simple abstraction for doing so.

I've never seen any succeed at anything more than the most basic apps.

I put more stock in projects like Xamarin or MOE (and even they aren't perfect).
The Atmel chips do not claim that they have implemented counter-measures for power analysis, etc. Power analysis on a key operation is a dangerous attack if proper counter-measures are not taken. You can literally read off the 0/1 of each bit of the key as the key operation is underway if you monitor the power/timing.

The NXP chips inside the yubikey claim to be hardened against several such attacks (although I have not confirmed).

NXP is a cagey company. For example, I am a researcher, and I wanted to get the yubi-key's unlocked to write and test new u2f protocols on their hardware. They wouldnt sell me development keys, and claimed that the restriction was placed on them by NXP. I wrote half-a-dozen requests to the NXP people, and they never replied.
> Unless the author implements an optimized version of Monocypher, of course.

We may be able to compete with ref10 without too much code. I haven't found a way yet (very frustrating). In the mean time, you have the Donna implementation, which can be used with any hash (it's a compilation option).
Indeed, the code that was initially published apparently didn't even output any results, and that can be optimized to "do nothing, return"?
> anguage that computers cannot mimic or understand the way humans do

Yet.
Absolutely legit. This is an extremely easy and inexpensive way to own gold. Your gold can be kept vaulted in a Brinks vault of your choosing (fully audited and insured) for free. You can also redeem the gold (have it sent to your house) if you want. You also get a free prepaid mastercard which allows you transactability; you can spend your gold also. I know many people that use Goldmoney and love it.
So why JSON of all things? When I reached the "write a full declarative program in JSON" section I was internally screaming "but s-expressions!"
I'm not sure how this would work. You mean if Facebook started requiring people to login via webcam/facial recognition?
Ask HN: What percentage of your company's revenue is based on its APIs?
I'm currently working on a concept for a new type of revenue model based around hybrid SaaS services. Consider the MSP model evolving into SaaS models back in the day for a comparative concept. These new hybrid services are run operationally similar to SaaS services, but on-prem for security and privacy based use-cases.

My question to HN is this: "What percentage of your company's total revenue is made by customers using API calls to your infrastructure and are those calls hosted primarily in private or public cloud?"

Thank you for your time. Happy to answer any questions about this concept.
Thanks! I've read the docs and blog posts, but it was interesting to see a real live antipattern.
I feel sad when I see Disqus enabled on some of the honest and serious platforms, where conversation can be civil (and is generally civil) and manageable (you get a sense of authentic participation and dialog). I most often do not bother to login to participate because of these creepy issues with privacy (tracking) and Ads. I understand they have to provide value and make money, but ...
This is very much analogous to the device security problem for smartphones. If you want to grant superuser access to any piece of software other than what was shipped on the phone, that's a big risk factor in the eyes of the manufacturer. They don't want you bringing down their brand and infecting yourself or others with malware as a result of getting superuser access.

Their solution to this problem is to have a fuse that's opened after you, the owner, makes the decision to accept changes to the bootloader signature verification. You accept the liability and risk involved with this change.

Unfortunately the difference between this example and yours is that the risk of the root-my-smartphone decision impacting the public is quite a bit lower. For that matter, a better comparison might be the FCC's ruling change regarding routers which don't use any bootloader verification method [1]. Their concern is to the impact on the public spectrum. Though it's pretty interesting that they didn't care about it when it was just the ISM band, they only got involved when it started to threaten FAA doppler radar [2].

Linksys and other vendors seem to comply by partitioning the functionality for the radio from the other router features.

[1] https://ecfsapi.fcc.gov/file/7521096518.pdf

[2] https://www.its.bldrdoc.gov/publications/2677.aspx