skysight-inc/HackerNews huggingface dataset:
>Telegram regularly has contests to break its encryption with a reward of 300K USD https://telegram.org/blog/cryptocontest

>If it's not secure, then surely people would be cashing in on that sweet money. So, why is it that we constantly see articles talking about how insecure Telegram encryption is, but nobody is showing a proof of concept attack or collecting the prize?

regulary != 2 times with limited time. Also, E2EE is not only about decrypting a message. E.g. signing messages as someone else isn't awarded. Also, you might need a lot of computation power. SHA-1 used in MTProto 1.0 for example is practically pretty secure, but not against a well funded attack.

But that aside, Telegram's encryption is probably good enough. But we already have standards that are good enough. Why risk it?

For example, from On the CCA (in)Security of MTProto[0]:

>Telegram is a popular messaging app which supports end-to-end encrypted communication. In Spring 2015 we performed an audit of Telegram's Android source code. This short paper summarizes our findings. Our main discovery is that the symmetric encryption scheme used in Telegram -- known as MTProto -- is not IND-CCA secure, since it is possible to turn any ciphertext into a different ciphertext that decrypts to the same message.

>We stress that this is a theoretical attack on the definition of security and we do not see any way of turning the attack into a full plaintext-recovery attack. At the same time, we see no reason why one should use a less secure encryption scheme when more secure (and at least as efficient) solutions exist.

>The take-home message (once again) is that well-studied, provably secure encryption schemes that achieve strong definitions of security (e.g., authenticated-encryption) are to be preferred to home-brewed encryption schemes.

And that aside, E2EE is not default and neither E2E group chats or E2E video calls are supported. This is the biggest security problem.

[0] https://dl.acm.org/citation.cfm?id=2994468
What fan? What heat?
on the front page https://news.ycombinator.com/item?id=18838227
Hacking Vermintide 2
The one thing I don't like from extensions like this is that the inner window ends up in a non-standard width/height and I can't help but think how many sites could track me across domains just by checking for that.
Electric versions are scheduled for release in April 2019: https://newatlas.com/vespa-elettrica-electric-scooter/52117/
I don't know the exact specifics here but I know a lot of communities that rank high invest time contributing into the open source Tech Empower tests for their framework. This way they can tweak & make sure their stack runs at optimal speeds.

At the same time, Elixir (and Erlang) are not meant for raw speed. It is best used for real time communication, lots of users & handling errors. At least that is what I have read.
Index cards have been most effective for me too.

On those days when you are wondering what to do next I get them out and go through them. I add notes to some, throw some away. Some I break out into several cards.

There is something about the physical nature of the cards that makes them work better for me than any app I have yet tried
Cows eat grass and are able to amass hundreds of pounds of beef (and bones). The need for protein and calcium supplements is wildly overstated.
This is sort of what you get when you put folders in the Bookmarks Toolbar, but the links within them are just lists and not trees. This is how I manage my bookmarks.
Everybody should draw his own conclusions.

Some topics to consider, that those interestdd in such topics have to clear with themselves (source: all Wikipedia):

“The Open Technology Fund (OTF) is a U.S. Government funded program created in 2012 at Radio Free Asia.”

“Radio Free X” (for different X” have a very long history of effecively being made and maintained by CIA.

“Clinton's policy was "heavily influenced by the Internet activism that helped organize the green revolution in Iran in 2009 and other revolutions in the Arab world in 2010 and 2011".[3]”

“Notable projects that the OTF has supported include The Tor Project, Open Whisper Systems,..”

Such associations can at least (directly or indirectly) influence some design decisions.

The best proof against the points like mine would simply be to allow those who want and know how to do that to really use the service completely anonymously, that is, especially without providing some phone number.
Join a startup as a soon-to-be father, following your dreams, and have the thing explode in your face, then finally recover and get a job at a megacorp (a week before the baby is due)?

Utility for the win! Following your dreams is fun and all, but the risk/reward ratio is just way out there.
Government shutdown: Federal inmates feast as prison guards labor without pay
Indeed, my desktop has at most 5 icons. Yet everyone I see has a screenful of overlapping items. It seems like chaos.

If I have > 10 tabs open, I feel stressed because it means I'm not actually completing tasks. Anything more than this seems like ADD.
Can you elaborate on Signal being supported by the NSA? I’ve never come across anything suggesting this.

I’m not sure how Signal was supported financially between 2015 and 2018 — maybe out of Moxie’s own pocket from Whisper Systems acquisition by Twitter? — but right now its continued development is supported by a $50,000,000 donation[0] from Brian Acton of WhatsApp.

[0] https://signal.org/blog/signal-foundation/
> Which is a self-aggrandising way for Theils to say that he helped solve some problems that wouldn't have been solved otherwise.

Exactly, I started reading his book Zero to One and quickly dropped it into trash-bin after scanning randomly. I am not sure why it got rated so high. In my view entire advise boils down to create businesses in uncharted territories and create a monopolies around them.
The problem occurs when passion and expectations differ. An artist who expects a good, easy life, to be wealthy as a plumber etc.

Utility is fine. Packing shelves is fine. Do you have time to follow your passion out of work? Can you make your passion pay enough? Most people I've met who gave up on their passion seemed to want praise, fame and/or notoriety rather than the 'art' or whatever they were producing.
maybe it's just because it works well with my downloading "workflow", but I find it a reasonable default.

most of the files I download are installers that will soon be out of date or blank forms that I need to fill out and return once. the rare important file will be quickly moved to a permanent location. everything else gets deleted once every month or so, and it's convenient for these ephemeral files to all be in one place.
Glorious is the day when the top answer to such a thread is Antergos.

Fellow Antergosian
It's still not 32. 7 to 5 is 10 hours. Subtracting 1 is 9. Times 4 is 36.
> every piece of software feels free to ignore a system integrator

Yes, they do and they have very good reasons for it. Working with distros to ensure they ship the right libraries takes an infinite amount of effort so companies that what to ship a product to their users will work around it.

This also happens in the server space with the massive popularity of containers and language-specific package managers.

The traditional Linux Distro model is extremely flawed.
I used it for a while but didn't like that it was a separate window, and it also seemed to duplicate my tabs. Might be worth a try again because I do miss the tree style tabs in Chrome.
Using /tmp for my downloads folder became problematic for me when downloading big files.

1. You may want to pause the download and restart it after reboot.

2. It's quick to redownload small files but a pain to have to redownload large ones.

3. Arch puts /tmp on a tmpfs, so big files can eat all your memory!
It is an ergonomic language built on top of a stable, performant, proven runtime with a lot of features built-in.

It's a nice ecosystem with a good culture in a language that promotes pretty good programming practices.

The only major downsides (if they even are for you) are that it's dynamic--not good for number crunching, though you can connect to compiled binaries--and is not strongly typed--which can lead to runtime bugs.

That said, part of the philosophy is to enable fast failure without taking down the whole application. In communications, it's not considered the end of the world to drop or fail on one connection, so it works well for web services, chat, etc.
I have no specific experience with carbon but in almost (arguably) similar cases I've come across as a developer, I've found a better approach to look for a mechanism to allow for granular upgrades over time.

In this specific case I could imagine supporting both carbon and cocoa screens / logic at the same time, and begin conversion screen-by-screen or feature-by-feature.

In the end this might mean maintaining extra complexity to support both technologies, but protects you from the danger of having to implement a complet syst m to feature parity at once.
Telegram's crypto contest is questionable (see "A Crypto Challenge for the Telegram Developers" https://hackerfall.com/story/a-crypto-challenge-for-the-tele... and https://news.ycombinator.com/item?id=6936539 for previous discussion)

> Signal is endorsed by NSA

Uh, what? This isn't true.
I don’t think it matters much whether or not it’s actually true. What matters is that you believe it.

Also, there’s a ton of fairly specific problems that haven’t been solved yet, so chances of someone working on it are small.
Can you link to the discussion this is referencing? I can't imagine parking_lot outright replacing the mutex in std, rather than being added as an optional alternative... what would be the supported way of deliberately using the platform-native mutex?
AFAIK yes, and I'm not aware of any positive developments on that front lately, though I haven't been following that closely.
Apple privacy billboard for CES
Keybase is a great alternative for chats (no voice/video yet).

It is VC backed, doesn't require a phone number, everything is end-to-end encrypted and has apps for all major platforms (iOS, Android, Windows/Mac).
This isn't true for people who approach their undergraduate degree as a kind of classic liberal arts education or intellectual orientation. Many professional trainings are offered as graduate degrees, without the expectation that an applicant's undergrad training will necessarily get applied. One good example is the Harvard Graduate School of Design, where people with all kinds of backgrounds train to be architects at the graduate level.

Whether you think undergraduate degrees should be vocational (whether they currently are or not) or, in contrast, really just an intellectual taster for topics that students won't necessarily pursue, it would be a mistake to rule out significant "course corrections" at graduate level. Even at the level of PhD admissions, people change fields—especially strong people.

The idea that "genius" is always specialised in a particular academic category, and always knows in advance exactly where it can contribute, is old-fashioned. GH Hardy probably believed it about mathematics, and (for example) the Cambridge math degree probably endorses it implicitly by being so tough. But this kind of macho thinking excludes the possibility of transdisciplinary work, and discriminates against people whose talents aren't easily categorized. It also makes the disciplines which it effects markedly less diverse.
The ratio between goals and people is not 1:1.

With enough specialization, everybody can become the best in one specific topic. That's the game most phd students play.
Hedge funds can also be a good testbed for technologies, while “do good” companies can use it as an excuse to be bad on the inside. I am fascinated with the potential of large scale crowdsourcing in data science, and finance seems the most natural domain for this, which is why I’m now at Numerai.
Thanks for posting this, and I'm already ready and waiting for Part II.
I understand and agree with your ideas on controlling the device, but I should also point out that the network that you're on is a major vulnerability, and there's little you can do to control that data yourself.

Government regulation on telecom companies is the only way to ensure that there's even a line that they're required to toe.
Hi, author here. That's amazing! I totally love this approach, it so neat. Wow :) Would you mind if I include your solution in my repository and the article?

BTW you can always check validity of your code with Intel Software Developer Emulator (https://software.intel.com/en-us/articles/intel-software-dev...). I use this program constantly, as the AVX512 machines I have access to are remote ones (literally remote).
I would say it's about developer happiness while coding and that all the decisions made by Jose and the core team tend to have been the correct decision. So taking Phoenix as an example you look at the framework and every time they find a problem i.e. Presence instead of saying that's a difficult problem and moving on they fix said problem in a really scalable way [1].

The same could be said for things like data processing with Flow [2] or even things like Ecto (semi official database wrapper) or even third party libraries like say ex_money [3].

Then you start looking at the packages and language and see that there are rarely thousands of bugs or that the infrastructure (mix, hex, docs etc.) is really nice to use and that the language is really stable, yet still provides you with useful but clear abstractions. Or that you can spin off processes and tasks inline without too much worry, or that you can use 20+ years of Erlang libs transparently, or that it's immutable and has the best concurrency primitives of any system available, or that it allow you to supervise processes and let them crash if needed without bringing down your app, or that you can transparently get multi machine out of the box, or that message passing is build in as the default way to scale the system. Or pattern matching or |> or the amazing community.

[1] https://phoenixframework.org/blog/the-road-to-2-million-webs... and https://dockyard.com/blog/2016/03/25/what-makes-phoenix-pres...

[2] https://www.youtube.com/watch?v=XPlXNUXmcgE

[3] https://github.com/kipcole9/money
Anecdotally, most posts on HN refer to content created in the last ~ 2 weeks.

I would expect to start seeing people add (2018) once we hit February.
I have a locked twitter account for raw unfiltered idea. If you have an idea or a thought tweet it to your self!
Writer+ on android

For software related ideas on a project, a notes file in the project folder

For ideas I don't really intend to revisit, I write them in any piece of paper I can find and leave it around
It is. It's nothing but anti-Cuba propaganda. Business as usual for US & Cuba relations.
I have the notebook layer and the App layer. A box of Index cards sounds to be a solid staging layer to add to my system. Thank you.
The problem with OneNote is that its file format is proprietary (though documented). I have random notes that are 20 years old. Notes I take today need to be readable 20 years from now. Will OneNote be around 20 years from now? I prefer to store my notes in plain text because it is guaranteed to be readable decades from now.
That page was worth a visit just for the Rosario font.
One other factor: On 18.04, I have found it nearly impossible to use the NVidia driver. After installing, whatever I do, nouveau takes over. This was not the case on previous Ubuntu versions. Even putting nouveau on the blacklist does not solve the problem -- somehow even if I put it on modprobe's blacklist, also in the kernel arguments, it somehow manages to start up. No idea how or why. I solved it before, eventually, I can't quite remember, but since re-installing my operating system I haven't figured it out again. I think I eventually had to actually move/delete the nouveau ko files, which is a very destructive way to deal with a problem and interferes with apt, and even then they got re-built and re-installed by dkms and took over the display again! I did find a permanent solution which escapes me at the moment.

Anyways, it would be good if NVidia and Ubuntu got together and at least made it easier to make use of the official driver.
Not verified but i'd imagine the retrieval of the metadata (the cards/tags needed to show the image previews, etc.) is done by proxying via telegram servers, possible to prevent semi-doxxing someone (returning their real IP) just by sending them a message?
>Anyone know whats going on there?

Yup, many things.

It's worth reading this very long thread about exactly this, from 2016. Look for Sasa Juric and Chris McCord's comments in particular. [1]

tl;dr benchmarks are hard, not all benchmarks are implemented well, Elixir folks haven't heard back from Tech Empower re: details of errors rates etc. It's an unfair analysis, and not just for Elixir.

[1] https://elixirforum.com/t/techempower-benchmarks/171/44
The Weird World of Plotto
I love MHRD, as well as TIS-100 (write assembly to solve puzzles) and my absolute favorite Zachtronics game, EXAPUNKS. They're all great examples of gaming, besides also being incredibly educational. Somehow they are actively fun, unlike a lot of other "learn to code" games that are paced wrong and are actually just tutorials. Plus what other game makes you print out a PDF of instructions before you play :)

I recommend these games to all my programmer friends. I'm definitely a better programmer for having played them.

Also, if you're not already a programmer and want to learn, I really enjoyed Human Resource Machine. It's also an assembly game but it's much more appropriately paced for new programmers and doesn't require knowledge of things like recursion.

If you're interested in hardware programming also check out Shenzhen I/O. I haven't played it yet but I printed out the manual last night. Gotta beat EXAPUNKS first :)
What benefit might be expected from deliberately misidentifying the source of the sound, especially given the probability that it could be correctly identified at any time?
Please watch your tone here. The post you're referring to is calm and makes valid points, it is your post that is toxic.

Critical thought is not against HN rules.
I thought we were talking about outlawing low paying jobs?
Never thought about that, but availability is probably closer to what employers are looking for.

One thing my colleagues always value that I’m willing to respond at any time. It means most people come to me with their problems and my value to the business has increased (removing blockers from others).
'Every document belongs to a project':

https://github.com/galfarragem/hamster-system
Federal inmates know a thing or two about working without pay.
"Programmable semicolons."
Show HN: Lightweight immutable by default JavaScript Framework
Isn't Elixir the most efficient thing available?
Not trying to be obstinate, but I'm a Rails dev and probably won't do that

There is a Draftpack for elixir: https://github.com/technosophos/draft-elixir/tree/master/pac...

And here's an Alpine-based dockerfile: https://github.com/bitwalker/alpine-elixir-phoenix

What kind of problems would I expect to run into?
"backend" and "JavaScript" quite don't fit together in the same phrase.

I would never work on backend with JavaScript or any other interpreted language, due to error proness.
How to Add More to Git Bash on Windows
The problem I'd have with that is that I'd never be able to commit to a fixed set of areas or categories since the type of work I do is constantly evolving. Plus I've always had trouble creating mutually exclusive categories.

What works well for me is to keep all things I'll need soon in the top level of my documents folder and when I'm done with it I move it into an archive folder.

This way my documents folder has few files and folders in an easily accessible flat heirarchy. While old files can be easily searched for in the archive folder.
Do you recall which machines VPCOMPRESSB works on? I think it's next generation Icelake? Or is it there already on Cannonlake? And along the same lines, is there a good general way of looking this up?

Coincidentally, searching for this, I found Geoff Langdale's blog post where in addition to describing VPCOMPRESSB as 'dynamiting the trout stream', he also describes something very close to zwegner's PEXT approach: https://branchfree.org/2018/05/22/bits-to-indexes-in-bmi2-an...
To build on top of that, I'd want to see how much of that truly free time is in a "high energy state". What I mean by that is a free time where you're awake/energetic enough to do something meaningful – read a challenging book and take notes, write a thoughtful email to a friend, host a party, try to build a new friendship, etc.

On most workdays I find myself so spent that a) I don't want to see people, b) I don't have any mental energy left. I can only do such things on the weekends, but then I'm also fighting with all the chores that have accumulated over the week.

A 4-day work week sounds very appealing because of the challenges mentioned above. An extra day with free and high-energy time would be amazing.
BookChain is a work-in-progress platform for storing important books
I've been using Elixir to build applications for production use for 3 years now my summary is I and my whole team can (in contrast to languages I've used in the past):

- Ship faster

- Write simple, readable, reliable and fast code

- Scale easier and with less resources

- Onboard and train new hires into the code base quicker

I know I'm making it out to be a panacea which to be clear it isn't as the deployment story still has some final pieces for the core team to work through but I will say I'll continue to use it to build in the future
I think the real killer feature of Elixir is that it is a friendly, Ruby-like language that gives you access to the underlying power of Erlang/OTP on the Beam VM.

OTP (Open Telecom Platform) is a set of tools, libraries, and middleware that was built around Erlang. This has been in development since the 90s, and was originally developed by Ericsson for the telecom industry to handle massive numbers of concurrent connections without a single point of failure (I may be butchering this story, but this was the end result). OTP includes things like extremely lightweight processes, process supervision to quickly restart based on your desired behavior, multiple native real-time datastore options (both in-memory and/or persistent), hot deployments with no downtime, an extensive standard library, and other cool things that have stood the test of time. All of this just comes with the base Erlang/OTP installation.

Elixir essentially introduces a modern ecosystem around the Erlang/OTP system.
The real "killer feature" is the Erlang VM (the BEAM). Thanks to a combination of exceptionally lightweight "processes" (not true OS processes, a construct of the VM), which share nothing, can only interact through message passing, and which can be supervised by other processes, it's possible to build incredibly robust systems.

Elixir makes the Erlang VM much more pleasant to use in my opinion (plenty of Erlangers will disagree with this, ymmv). It provides a developer-friendly, modern ecosystem, with doc support, testing support, a great macro language for building DSLs, package management, etc, but underlying it all is a battle-tested VM, that has been under active development for 30 years.
I just gave it another try. Unfortunately, things haven't improved. `about:performance` shows a "medium" energy impact for TST. My 2015 Macbook's fans come on and stay on until I disable TST again, after which they reliably spool back down after a short delay. While TST is enabled, Firefox shoots up the list of CPU users in Activity Monitor.

Oh well, it was worth a shot, sidebar tabs are just so good when they're working well, but it's not worth the battery drain.

Your userChrome.css tweaks worked great!
Would be possible that Apple will focus on growing software and services, instead of pursuing iPhone sales?