skysight-inc/HackerNews huggingface dataset:
I use ddg for their uncensored search, I have no reason to trust them with my privacy. But when I search for sci-hub or libgen then the first result is always the relevant webpage.
> I'm not sure about iOS as I don't currently have the means to verify the content of my App Store iOS installed version of telegram

I’ll save you the work: Telegram has updated more often that this repository[1] has been committed to, so the code is perpetually out of date, if it ever shipped at all (apparently it doesn’t compile?). The author has mentioned[2] that they will open source their new client once it has been released, but that promise has not been kept.

1: https://github.com/peter-iakovlev/Telegram-iOS

2: https://github.com/peter-iakovlev/TelegramCore/issues/11
Or just use SQLite backed by S3. Most latency is to the data center. No need for DynamoDB billing overhead. Cache 5mb or so of most frequent static data in the Lambda.
Twitter owns signal??
Can you please link some supoort!.
PVS-Studio and Bug Bounties on Free and Open Source Software
Everything isn't a "straw man". You specifically highlighted the, to you, negligible difference between the iPhone X and iPhone XS -- phones over a one year difference, yet still with a number of significant improvements -- and when I questioned that you claimed that I must therefore believe that the iPhone XS is the "pinnacle of a pocket computer".

Which is of course absurd. But you are jumping between "not enough change over a year" and "over an infinite timeline imagine what is possible". Try to rationalize your thoughts.
So no it’s no longer a flawed study but one that supports that nothing occurred? I see, you must have missed the non-cherry picked parts, here is the conclusion for your benefit:

>Results Of 24 individuals with suspected exposure identified by the US Department of State, 21 completed multidisciplinary evaluation an average of 203 days after exposure. Persistent symptoms (>3 months after exposure) were reported by these individuals including cognitive (n = 17, 81%), balance (n = 15, 71%), visual (n = 18, 86%), and auditory (n = 15, 68%) dysfunction, sleep impairment (n = 18, 86%), and headaches (n = 16, 76%). Objective findings included cognitive (n = 16, 76%), vestibular (n = 17, 81%), and oculomotor (n = 15, 71%) abnormalities. Moderate to severe sensorineural hearing loss was identified in 3 individuals. Pharmacologic intervention was required for persistent sleep dysfunction (n = 15, 71%) and headache (n = 12, 57%). Fourteen individuals (67%) were held from work at the time of multidisciplinary evaluation. Of those, 7 began graduated return to work with restrictions in place, home exercise programs, and higher-level work-focused cognitive rehabilitation.

Conclusions and Relevance In this preliminary report of a retrospective case series, persistent cognitive, vestibular, and oculomotor dysfunction, as well as sleep impairment and headaches, were observed among US government personnel in Havana, Cuba, associated with reports of directional audible and/or sensory phenomena of unclear origin. These individuals appeared to have sustained injury to widespread brain networks without an associated history of head trauma.
We been there before! Google’s “Don’t be Evil” made everyone trust google until it came up they are working for all sorts of LE. Now its Duck supposed to be secure.

Let me say again what I said multiple times: unless they are incorporated in some offshore or Switzerland, and none of their servers are on US soil (they are), then they either must work with the US government or US government using NSA already sees and read all your searches and can pinpoint them directly to you. They may even be forced by government to lie to their clients/users telling them we don’t spy or log your searches. Any other idea that in modern world american company working on american soil can build a web search engine that doesn’t give out / leak / cooperate with US government is very naive.
In telegram also you can see an image and text derived from the secret key for comparison. Get your facts right.
Qiqqa is a great program for managing a PDF library. It does OCR, full text search, shared libraries, cloud libraries, bibtex for citations, tagging, and doesn't choke on massive libraries.
> This is what Whatsapp does. Signal never did and has real multi-device support.

This is news to me. Curious then, why is it not possible to use Signal desktop without a phone?

https://support.signal.org/hc/en-us/articles/360008216551-In...

> Can I install Signal Desktop without a mobile device?

> Signal Desktop must link with either Signal Android or Signal iOS to be available for messaging.
You’ll share this apartment with a stranger – but don’t dare call it a dorm
I'd be very surprised if the actual academic performance were anywhere near the top of acceptance criteria.
Unless you're advocating for P2P chat, I don't see how it's any different for open source solutions. At some point you have to trust the people hosting the centralized servers, OSS or proprietary.
Show HN: Power Assertions for Clojure (as seen in Groovy)
Objectively you are correct. However, as the rest of my comment indicates there are important marketing and brand-value perception reasons to have a true high-end card: how many professional gamers (streamers, e-sports, extreme overclockers, etc.) who do buy this class of GPU are there playing with AMD cards vs Nvidia cards? How many (tens/hundreds of) millions of views do they collectively get playing games with Nvidia hardware? Nvidia has likely gotten millions of dollars in effectively free marketing just for having these cards.

AMD's GPU market share has been shrinking with the general gaming audience despite the fact that their mid-range cards have been very price-competitive with Nvidia's offerings during the same time period they've lacked serious competition at the high-end. While focusing on the mid-range where the highest volume of GPUs are sold is the rational market strategy it may not be a winning market strategy in the real world.
Can you please explain how we can access sqlite database hosted by s3 in lambda?

I googled it but it seems s3 is only for hosting static files and it will not be possible to directly query Sqlite DB on s3.
Twitter doesn't own Signal. Twitter bought Moxie Marlinspike's past security company Whisper Systems. Signal is developed by Open Whisper Systems, which Moxie created subsequently (but which I believe uses some freely licensed code created by Whisper Systems).

Open Whisper Systems is an independent project, receiving grants and donations through the fiscal sponsorship of the Freedom of the Press Foundation. Last year, the Signal Foundation was created and funded by the aforementioned large donation from Brian Acton, which will take over this role once the IRS approves its 501(c)(3) charitable status.
Careful, because Plaid also gives you access to your account's routing and account numbers [0]. I'm not sure if the way this library works gives access to those, but with a routing & account number a thief _can_ write checks, debit your account, etc.

[0] https://plaid.com/products/auth/
It's less about how it handles exceptions but rather how the BEAM makes sure that things that break don't crash the whole system.

The magic is in the supervisor pattern, explained here for erlang: http://erlang.org/documentation/doc-4.9.1/doc/design_princip...

It is hard to describe why this "feels different" in Elixir than it does in Express.js or a Tomcat running a Java application. It's all experiential for me, but maybe I can put the sentiment in words: I always KNOW that whatever part of my application may break, however much and for whatever duration, the scheduler and the supervisors will make sure that the rest of the system runs exactly as intended, and the broken part of the system will be back up eventually. I did not have this feeling (as strongly) prior to working with Elixir.

But I will admit this is a very subjective position. And I am not sure you'd experience it the same way were you in a similar situation.
> You can literally build your own client.

I mean, I could, but the Telegram developers being so opaque about this doesn’t make me feel like this is a good use of my time.

> There are many implementations already.

As far as I can tell, the only implementations for the platforms I care about are the “official” ones (in the sense that they are placed under some random person’s GitHub account and linked to by the Telegram website).

> You can also compile the official client yourself.

I have never been able to get this to work. Either way, what I compile from the “sources” they have put online and what they are shipping are two different things.
This. My free time at least in winter months is a slow collapse. A day off would give hobby time, home improvement time etc, and do so in a way that doesn’t affect the kids who are in school anyway.
There's a similar, though not quite as good, Chrome extension called Sidewise. Unfortunately Chrome itself is not as extensible as Firefox so there are issues in Sidewise, the most glaring being that the list of tabs appears in a separate window and Sidewise snaps its position and layout to match your Chrome window using some heuristics.

All that said, just use Firefox. It's a much better experience and after Quantum it's on par with Chrome in terms of UI performance.
I’m not calling out JS or elixir communities by any means here. I just want to mention that a big part of the “JavaScript Fatigue” is the amount of overlapping libraries that all do the same thing and it isn’t always straightforward to figure out which one is better - and this happens with so many packages it would be impossible to do it with all of them. Just look up “isArray” (which I wish where just not showing up in libs at this point. It’s a built in in both node and the browser now) and you get 102 packages that are very similar but will clearly vary in implementation and quality.

Where as something like the Python community or Rust community (where I have had more experience) I have always found that even if there are packages that do the same thing, there usually aren’t nearly as many duplicates and often times the community has done a better job communicating the value of many of the packages. There is just less confusion around the whole thing

I have also found there to be relatively little overlap between the big packages, in my experience
I love the idea of "Steve" or "Ariana" at Asana thinking "Oh, another email from whiddershins, better write that down for him into his account. Good on you, mr. whiddershins!":))
Do passwords get shared with Plaid?
Facebook's suicide algorithm: How it uses AI to predict your mental state
Writes are the only reason you need DynamoDB. Even then you can replicate to S3 so reads remain cheap.

Only issue is transactional writes, but those can wait for S3 write confirmation in the lock.

For example bank statement, ok to read from S3 SQLite file. Actual credit/debit you must use locking.
Ask HN: Which stack/language to use?
Currently developing a project that draws data from heterogenous resources (human & machine generated) that need to update a visible stream of data to users that said users can annotate and subscribe to, as well as opt out of. The options for stack seem myriad and I would appreciate some of the developers here input on this. Thanks in advance.
This is something of a myth. Maxwell actually uses both to ease the mathematical pain for his readers - he writes the equations out coordinate by coordinate, and he also compresses them using Hamilton's (quaternion) model of vectors. In fact Maxwell was the one who introduced the gradient, curl, and divergence (actually he used convergence) operators, and he addressed precisely your concern in his book by giving both formulations!
I find public transportation in the bay area to quite literally be an intractable problem. I've lived here for 31 years and there's been zero, and I mean zero real progress. BART received a warm springs extension and a couple (non-connected) airport trams. The highways are largely unchanged (excluding highway 237, maybe)

NIMBYs in Palo Alto, Atherton, Menlo Park, etc will block any true expansion or creation of public transit on the peninsula.

Reminder: we don't have electrified Caltrain because of Atherton.

Hence, I've made a decision - move elsewhere. Literally anywhere else has better public transportation. NYC/Chicago/Los Angeles/Portland/Seattle/Austin/Miami

I wish it would change, but your best bet is to simply move closer to work here, if that means leaving your single family home in Fremont to a townhome in Sunnyvale.

Another example: There's already rail infrastructure in place parallel to the Dumbarton bridge from Fremont to East Palo Alto / Palo Alto.

Plans were in place - see https://en.wikipedia.org/wiki/Dumbarton_Rail_Corridor

We can't seem to get anything done.
https://news.ycombinator.com/item?id=16745376 (29 comments)
> If it's not secure, then surely people would be cashing in on that sweet money.

Because that's not how cryptography works.

Remember that there is no mathematical proof that working cryptography even exists. Cryptography relies on "one-way trap-door functions," i.e., functions that cannot be inverted unless you have the secret key, and the existence of one-way trap-door functions implies P ≠ NP. Because we have no proof of P ≠ NP and it may well turn out to be the case that P = NP (surprising as it might be), we have no proof that cryptography is even possible.

So, what do cryptographers actually mean? In practice they mostly mean that something has been subject to attacks for years and the public mathematical / cryptanalytic community hasn't found any cracks in the armor. We expect RSA to be secure because people have been working on efficient factoring since at least when we named the P vs. NP problem and arguably for centuries and we haven't made any real progress. We expect block ciphers and hashing algorithms to be secure because they're subject to public scrutiny.

The last time we had a contest for a hash function https://en.wikipedia.org/wiki/NIST_hash_function_competition, there were multiple good finalists, none of which were cracked in their entirety. They each were refined as people found attacks against artificially weakened versions of the functions, on the grounds that attacks get stronger over time. And even so only one was endorsed, and even so consensus is, as far as I can tell, to use a newly strengthened version of one of the finalists (BLAKE2) instead of the actual winner (Keccak). And certainly nobody would recommend using any of the other finalists, simply because the attention of the public research community is no longer on them, even though they haven't been publicly broken.

It is very easy to make up an encryption algorithm or cryptosystem, run a contest for a few months, and not find a winner. That falls far short of the standards professional cryptographers have for solid cryptography. As with hash functions, it may be the case that nobody has found a specific weakness in Telegram's crypto, but using it when it's not the focus of research / not built on the best primitives the research community has to offer is unnecessary risk.

> Signal is endorsed by NSA

Please provide evidence of this. As far as I know, this is a lie.
Not sure what the policy is on plagiarism, but this post plagiarized my write up.

The structure is the same and the section headings are the same. It is blatant plagiarism.

https://link.medium.com/cWfUtKQjgT
Are they just fingerprinting screen geometry or doing canvas fingerprinting?

Because I can't find where they are doing canvas fingerprinting, that or canvas defender doesn't say anything on only DDG. If they are just getting screen geometry, which I suspect, that's not enough to de-anonymize you. As far as I know anyway.
It seems that this arguably new paradox has some issues: https://www.scottaaronson.com/blog/?p=3975
Mounting python objects as file system
I'm doing something similar to power an e-ink based display in my house. I see about 24 hours of delay on the transaction API using the free tier which is the only shortcoming of this approach. The Plaid API is very nice.

Does anyone know if the production (non-free) level reduces the delay?
Cut & cover is not the same as tunnelling. The name says it all: you dig a deep trench (cut), build structures, then replace the road as the roof (cover).

It's typically cheaper and faster, as it requires very little in the way of special equipment or personnel. The downside is that it requires cutting up the road. The "bitter pill" here is the several years of traffic disruption that would be required.
You are not wrong. The OP is also not wrong. I think that the examples might not have been ideal.

The fault tolerance that I love about Erlang/Elixir is the actor model. Everything is (or can be) an actor, which is like a living and breathing instance of a class. So they can live and do their own stuff, and then if they fail at that and need to be recreated, they get recreated by something that supervises them.

Contrast this to for instance a Django or Rails app... if a vital service in the system dies the entire Ruby or Python runtime will (potentially) die and then respawn. It's cheap and we don't care, right? It will get restarted. The net result is similar, you don't get woken up in the middle of the night and customers are happy. But in systems where you want or NEED an entire system to remain on 24x7x365 it changes the game.
> Parser combinators are generally slower than a hand-written or code-generated parser. That’s somewhat innate due to the overhead of “threading” (for lack of a better word) your control flow through many function calls

Using functions is an implementation detail. If you had something like MetaOCaml, or some other quasi-quotations, you can generate optimized code at runtime.
> This makes me wonder: if working 32 hours/week can make you more productive than working 40, why the hell do people often put in way more than that?

I work in a very competitive field, and there are times where I must put in 12- to 16-hour days to ship a project out on time. We get compensation days in lieu of ovetime pay, which has its pros and cons.
Science is not unimpeachable, no matter how many times you try to appeal to authority. I’ve personally read many papers from prestigious institutions where the conclusions seem flashy but the methodology is suspect.

It’s possible (even expected) for two researchers to come to differing peer-reviewed conclusions for the same circumstance. Some scientists wrote a paper in a journal, others wrote to the journal to disagree. It’s a normal day in academia and how science progresses, not ‘shooting from the hip’. Without being involved in this particular field, it’s nearly impossible for a layperson to draw conclusions either way.
SQLite is just a flat file database format. You can use stock Rust, Python, C++ SQLite client. Probably want to shard the SQLite files to prevent hot spots on write locks. Use a quadtree for geospatial sharding.
Or instead using spreadsheets just use a self-hosted free software that is dedicate to personal finance analytics https://github.com/firefly-iii/firefly-iii
But they don't hand over control to the relief crew in the middle of an ongoing emergency. That's the point.
All of the bullet points in the comment.

The 4th one about truth is perhaps an exception, unfortunately some people might agree to that. Although, it's a bit abstract for most useful discussions.
Those papers neither support nor reject the idea. At best it is "suggestive."

As I pointed out, with the prisoner/tobacco farmer case you must know the rate of smoking in both populations in order to make any sort of preliminary statement, because 4x vs. 1/4x gives you totally different interpretation, yes? But that information wasn't given. Therefore you cannot draw a conclusion either way from that study.

There may be other reasons for a difference between inhaled vs. ingested nicotine.

It may be that nicotine, when processed by stomach acid, results in a compound which causes the effects seen, and that inhalation does not produce the same results.

Or, since we are talking about parasites in the digestive system, it may be that the nicotine must reach the parasites directly. As you point out, the nicotine which goes through the lungs can enter the bloodstream directly. However, does that nicotine then get released to where the parasites are? The intestines usually work the other way.

I could probably come up with a few more differences if I thought about it. That's why those paper do not support the conjecture.

You wrote "The claim is that smoking cigarettes has benefits, not that smoking nicotine does". However, 1) this post is specifically about tobacco cigarette butts ("Those discarded filters usually contain synthetic fibers and hundreds of chemicals used to treat tobacco"), 2) this thread of the post seems specifically directed to tobacco smokers (woodruffw asked "smokers on HN" why so many smokers "flick their cigarettes into gutters and on streets" - observed events are much more due to tobacco smokers), and 3) you replied to lmilcin, who wrote "Smoking is addiction that is demonstrably bad for your health and has no benefits. ... I grew up in an environment where smoking was encouraged ... when I was teen virtually everybody smoked ...".

It is clear that lmilcin specifically means tobacco smoking. There are very few places/cultures in the "western world" (quoting lmilcim) where 'virtually everybody' smokes marijuana, clove cigarettes, or other herbal cigarettes. A quick check of lmilcin's history finds https://news.ycombinator.com/item?id=18440363 saying "I am Pole", so lmilcin is almost certainly talking about Poland. Therefore, it's definitely a comment about tobacco cigarette smoking.

If you really believed the thread was about any sort of smoking, then you could have simply pointed out that some herbal cigarettes are not addictive as your counter-example.
Which radical proposals would manage cost better?
I feel like the real problem at Apple is a lack of vision. Apple's current management is very adept at execution at scale and incremental product improvements. But I don't see anyone at Apple who can sell me a version of the future like Jobs could.
You literally made that up out of whole cloth without reading the study.
If you want more data that what you can probably get from Google Sheets easily, an alternative could be modifying this script to make it output a Beancount[0]-formatted ledger text file.
The format is pretty readable plain-text (and so you could store it on Git to track changes easily) and you can generate nice reports out of it with the Beancount CLIs and a web interface with Fava[1]. Also adds another additional level of self-hosted :)

Also Beancount has some nice support for implementing importer scripts inside it if need be, although I haven't played with those yet.

[0] http://furius.ca/beancount/
[1] https://beancount.github.io/fava/
Can't shake the feeling that future companies will organize as graph, not tree
No Code Approval Workflow Webinar Recording on YouTube
You must link a client with a mobile device, but after that apparently you can use e.g. the Desktop client without your mobile phone turned on.
Sidewise... I already tried it, and it is nothing more than a bad hack... I guess we'll never get that.

Firefox has worse performance than Chrome and I don't trust Mozilla, so unfortunately using Firefox is not an option for me.