skysight-inc/HackerNews huggingface dataset:
So, the company that got bribed by a shitcoin promoter to backdoor the keybase app so it can abuse your secret keybase identity keys to place permanent, non-removable shitcoin ads on your profile[1] (and then immediately denied that it was a backdoor and also lied about implementing the ability for users to remove the ads keybase got paid to place[2]) is now joining up with the company that has shipped sketchy backdoored client software[3], consistently lied about having end to end encryption (and even doubled down on their lies when confronted about it!)[4] and delivers their encryption keys from generation servers in China[5].

I'm sure the result of this will be lots of good and secure trustworthy software that I'll be eager to install on my computer. It's totally legitimate and accurate that people are reporting today that this acquisition will bring real end to end encryption to Zoom as if buying a company causes software to spontaneously manifest out of the ether with zero delay. Don't worry, everyone: Zoom is secure now because they wrote a check!

What is it with cryptographic charlatans these days?

[1]: https://sneak.berlin/20190929/keybase-backdoor/

[2]: https://news.ycombinator.com/item?id=21109530

[3]: https://www.zdnet.com/article/zoom-defends-use-of-local-web-...

[4]: https://blog.zoom.us/wordpress/2020/04/01/facts-around-zoom-...

[5]: https://www.forbes.com/sites/thomasbrewster/2020/04/03/warni...
Open Source LAN Based Media Server with Go and FFmpeg
It's not really a catch-22.

Progress should be made. Having machines do jobs we don't need humans to do will always be better for everyone in the long run, and it is better if we do it sooner rather than later.

Luddism never helped anyone.
I was one of the early Keybase adopters/users, this is kind of a sad and happy day all at once. I am happy for the founders and team as this is a great exit, but am sad because I think Keybase, one of my favorite products, is going to go to the wayside :(
> while we're on thin and japan companies, youtube taught me about Disco, the wafer slicing disc company.

That sounds interesting! Could you point to any good video?
Likewise. My friends and I have been using it throughout the pandemic to chat, I've been using it for years, but we're all deleting our accounts this morning. All around unsettling news as far as keybase software goes. Congratulations keybase team, though.
The cascading failure of NYC’s electricity grid in 1965 was the background of episode 1 of Connections.
I don't think it will last that long. There are a multitude of countries who are yet to make significant contributions to software, they're going to write and rewrite tons of stuff, and countries who want some measure of independence fostering competitors like Yandex to Google. It's hard to imagine rising economies within Africa, Asia and Latin America will ignore the cost of proprietary/leased software they can write themselves. It didn't even take one century for competitors to emerge for Windows, MSSQL, Oracle, etc.
Dweeb:

"I know, so like, let's put a big chunk of lithium on the outside of the armor so it lights on fire when hit. Also if we integrate it into the armor it's harder to take off!"

Soldier:

"Yo FNG, take that out and put it in your ruck if you don't want to become Mr. Human torch the next time a kid throws a rock at you."
I looked at this yesterday. 90% of it is garbage files from a Chinese developer, or projects that have been open-sourced for 3-4 years.

That's not how "leaks" and "hacked" works the last time I checked.
He has to make such moral claims because it is in keeping with his world view that individuals are replaceable cogs. If it is shown that modernity requires advanced problem solving skills and that IQ is a reasonable, but not perfect measure of such skills, then the idea that you can take a below average person and use them in these advanced spaces is destroyed. If he loses that, he loses many of the policies being pushed from an immigration and population control perspective.
Hmm, that document seems to indicate they're disabled by default in synapse though?

>Note that over every server in the room, only the ones with support for message retention policies will actually remove expired events. This support is currently not enabled by default in Synapse.
It's ok to ask follow-up Why questions.
To elaborate, we've worked with many customers looking to get out of "slinging metal" and focus on what matters to their business most. Some have said that the revenue generated justifies the cost of <enter one of big 3 here> BUT others (and I think you'll see this more over the next decade) are looking at automated bare metal. You get the primitives of the cloud but on physical servers, and more importantly with economics closer to running your own gear. Especially if you consider TCO - power, network, ops people, etc
If every app using a Webview started using (and including!) GeckoView instead, the additional space wasted by dozens of GeckoView copies would still start adding up rather quickly.
First Aid Kit by Renegade It Is an M17 First Aid Kit
I think we all know what happened here: Nassim Taleb took an IQ test, it didn’t show him to be the great genius he knows himself to be, and so the entire concept of IQ must be invalid.
We used OVH for bare metal purchases in several of their data centres for over three years now. It is cost effective and was pretty good.
We did have issues with how quick it was to fix hardware issues when they arose. What doesn't help is that we were using custom instances and not their stock offering. We may switch to their "enterprise support".

We also host some machines we own in a small local datacenter from a local provider because it is connected to a dedicated connection to a private network.
Can you expand on this? So each worker gets its own REST endpoint to pull from?

Because if all workers pull from a single endpoint then that endpoint is a queue, no?
Have I got the channel for you! Technology Connections: https://www.youtube.com/channel/UCy0tKL1T7wFoYcxCe0xjN6Q . My introduction was his rice-cooker video: https://www.youtube.com/watch?v=RSTNhvDGbYI .
The counterargument is that a SAAS platform like Github's interests are in the ongoing viability of the service, while my interests are only about in my data in the service.

Those are only somewhat aligned, as anyone with a dispute about terms of service can tell you.

> which can be a bit much for one person who's self-hosting

If your repo serves one person, why do you need your repo to be hosted in public at all? `git init` and a backup are all you need.
The Linux usage is still marginal.
It looks like last web developers left Windows for Linux ;)
The most impressive thing is that Microsoft has more than 3k projects (with forks) on GitHub as public repo
So that number includes (and is almost certainly dominated by) the cost of their office space.
the difficulty here is of having to develop a new way to deal with this situation. it's the same problem some people face at retirement. they just have a hard time adjusting to the new situation.

those of us who work from home don't have that problem. neither those that are already practicing a range of activities that don't require going outside. like reading, practicing a music instrument, painting, knitting, contributing to FOSS, etc.

we just spend more time on those. everyone else needs to pick up a new hobby.

if your daily routine consists of going to work, and hang out with friends in your free time, then you'll have to completely relearn how to get through the day, pick up new hobbies and find other new meaningful activities.
Packet ^^
I think the only valid interpretation of the IQ test is that you are good at solving some riddles and spotting patterns.
In no way, it can be used as a generic metric of who is better or worse.

I took the MENSA test last year just for fun, I did not get in :)
The examiner before explained as well that the exam measures an only small part of what is considered an intelligence.

In short, it is a fun exam if you like riddles and no other value.
Are you familiar with the Orwellian word 'newspeak'? The way you use the word racist turns it into non - euphemistic newspeak. Can't attack the argument? Attack the message. Label the person as an outsider and signal to everyone to do the same. It's intellectually dishonest and lazy.
Sidewalk Labs no longer pursuing the Toronto Quayside project
I agree. The beginning of this crisis really did hold promise of 'we are in this together'. And yet it quickly morphed into 'the other guys are out to get us'. I watching all this with genuine worry that things can easily spiral out of control.
I remember thinking they were neat a few years ago, I made an account and tried out exchanging some keys. It’s slick but I don’t see how it was ever going to be a mainstream product for non technical users who mostly don’t even understand what encryption is. Haven’t heard anything about them since, I kinda already assumed they were dead.
@Keybase users: Check if you uploaded your private key. I hope it is rare but now is the time to make that non existent.
I dislike ads and ad platforms as much as the next person.

But this isn't good journalism.

"Is online advertising working? We simply don’t know"

In study 5 (e-commerce) the answer was clear, and yet ignored.

Is there a bubble? Yes. Are ads magic? No. Do they work? For the right products, yes. Extremely well.
> From the second the federal government put the "opening up" in the hands of each State

The federal government never put it there, it was always there because the closing down was always in the hands of each state, because that's where the lockdown orders originated. And that's arguably not the problem, anyway, as those policies are going to need to vary by state (and by smaller areas within states in many cases), anyway, the problem is more the federal withdrawal of support for testing, the failure of support for response needs (and the active redistribution of resources, including direct theft from states who acquired their own) driven by political affinity between the federal executive and state executive rather than public health needs, and the subtle and overt federal pressure (and direct federal mandates, in the case of meat packing) for premature, irresponsible reopening by the states (subtle including things like not providing robust financial supports so as to create bottom-up pressure for reopening.)
Might want to step off your high horse, because the person you're responding to was pretty clearly saying two step sequencers as in a quantity of two, not number of steps.

What a strange thing to get uppity about anyway.
The ratio of cranks to valuable outside contributions is probably 10^{-6} if not smaller. At our theoretical physics institute, they have a wall with the most amusing crank theories. It is also extreme arrogance that makes someone think they could contribute something without investing 5+ years of their life. The total time is probably more than 10+ years before you can perform adequately and independently.
In my humble opinion, you lose a lot when you go fully static. One particular case that becomes a pain in the ass is redirections. Nuxt has some redirect modules but they feel super half baked.

Also routing is a mess. Really no way to set up routing in a decent, understandable way.

So in my opinion just use Nuxt when you are sure your website is not going to need any complex functionality that is easily achievable with a server middleware. Pretty sure that there are other ways to achieve good SEO and in general Search Engine indexation without giving up so much.
microsoft too. people here still talk about "Embrace, extend, and extinguish" every time there's any good microsoft news.
Why should you decide which comment should be the tlc?
So I guess you don't believe in truly open source and free software. Where everyone, regardless of motive or position, has equal access to it.
You bought a branded article from their official store? That pretty much guaranteed paying the maximum price.
This is a fascinating case study on how a reasonable point—IQ is not a terribly useful psychometric in most cases—can be completely lost in the conversation due to your writing style.
They also have a competing service: Azure DevOps (formerly Team Foundation Server, Visual Studio Team System), which somehow has barely anything to do with Azure.

I believe that the stuff they're open sourcing go on GitHub, while the internal tools go on Azure DevOps. They also have their own VCS (Git alternative) called Team Foundation Version Control (TFVC), though I have no clue why they keep that thing around. They've also had Microsoft Visual SourceSafe, but even they themselves didn't really use that.

On a side note, they really suck at naming things.
I wonder if the only tangible value in advertisement isn't to increase your revenue by convincing consumers to buy your product, but to decrease your competitors' by convincing consumers they don't exist.
Exactly, the standard IQ tests measure a very narrow ability in abstract reasoning.

This is certainly something we call 'smart', but I don't think it's at all predictive of success, except perhaps in academia.
IQ is one of the few actually, and maybe THE most robust and measurable dimension in humans that psychology has come up with.

Some people are smarter than others and they are expected to rise higher in a (necessarily imperfectly) meritocratic system. The big question is whether the bottom end should starve. I think they should not starve and should have certain minimal living standards met, but they are going to be lower than the top end. You risk dividing the population trying to convince the smart to settle for less than they can get. They will simply band together and manipulate the system until they achieve it.
They probably had their own internal version control for their IP before they bought GitHub. Can't imagine they suddenly migrated all their stuff to GitHub.
Standard-Winged Nightjar
I bought Adidas...at Costco.
Does extendRoutes (https://nuxtjs.org/api/configuration-router#extendroutes) not work for y'all? I haven't had to use it (yet) but I was happy to see an escape hatch, though I could imagine it not scaling very well...
In general, when it's between fresh blood and old management, old management will win every time.

If Zoom is acquiring Keybase because the C-suite is pivoting culture around security, then it'll probably work. Otherwise, not much will change. So until I see more evidence that Zoom's upper management had a change of heart (creating a CISO council is a good start), I'm going to be skeptical that this will actually move the needle.
Are you saying that certain races are genetically inferior? Because that really seems like what you are saying. Which sort of proves his point. The people that loudly disagree with him are racists.
Sagada Cave Connection Experience
> So, yup, keybase is dead.

Well, shit.

Keybase had an amazing potential. I use it every day to ad-hoc securely share/store stuff. It will be sad to see it wither even more than it has. :(
You are right that enterprises are lagging 1-2 years behind current windows build, but in many of them WSL is seen as major improvement for developers. Fortunately I am allowed to run Linux, so I don't care :)
I love how you politically both sides this, when the science is clearly on the stay at home side.

Those damn democrats playing politics and listening to the doctors on health issues...
I agree with this statement; it would be an omission to discuss the misapplication of IQ tests and leave out the fact that they have been misapplied in a way that has given ammunition to eugenicists and the "field" of so-called "scientific racism."

However, the polemic style of writing the author uses does make not only hard to read, but hard to take seriously, even though I ultimately agree with what is said.
I love the built-in static analyzer -fanalyzer option in gcc-10.

[1] https://gcc.gnu.org/onlinedocs/gcc/Static-Analyzer-Options.h...
As soon as I open the page I'm blocked by a cookie consent wall with no easy option to opt out
Too bad they failed. I want one.
The problem is that the outcome of some campaigns doesn't reflect in dollars, and still you have a winning campaign.

In fact, probably the most expensive campaigns are used to consolidate market shares, brand positioning and notoriety.

People just seem to forget that advertising existed before the internet, and it worked without the bloat of metrics.
Imagine how much a company could make if the guy at the top was a hard cutter that didn't put up with unscientific money wasting! They could clean out all of the people who anti-did their jobs (managers who pollute the information stream for personal interest reasons, consultants who give you advice that was worse than what you would do otherwise), and then they would clean out any market.
I want to start by saying that that is my own analytics platform.

> personal data (IP & such)
I agree, Still storing IP is a bit strange. I am still working on the privacy policy and option to not store IP at all. All tracking is session-based (no cookie), and no personal information is stored (only the IP, which is currently only partially displayed, and which is AFAIK not considered personal information).

> track the users mouse movements
The site has no inputs, so it only tracks the mouse movements/scroll. Do you consider this to be a privacy concern, especially if the visit is anonymized (can not be linked to yourself as a person)? Seeing a replay of the visit is really useful for understanding what visitors do on the site and how to make their experience better.

> Kinda strange these days, isn't it?
I agree, but I still think it's a lot better than other platforms, it complies with GDPR regulations, no cookies involved, no data is sent to third parties, no personal information is being stored (only the previously mentioned IP). I am also continously improving it and adding more privacy-focused features.
Taleb is an expert in statistics. This is an analysis of the statistics of a metric and the statistical methodology of the field it is part of.
Microsoft had multiple Github Enterprise accounts before the acquisition, owned by multiple teams independently inside of Microsoft. They chose to use these instead of Microsoft's own internal repository (some VSS-based thing I think), which management ordered them to use.

More internal Microsoft code was being hosted by Github instead by Microsoft.

However, the Microsoft account on Github seems to only be public repositories, or repositories being prepped to be public. Actual internal stuff is hosted by one or more Github Enterprise accounts, the alleged hack does not claim they were hacked as well.
They spelled aquihire wrong.
Yep! On the todo list.
Thanks for the kind words. I recorded an audio-only version this morning:

http://www.flownet.com/ron/salt.mp3

Some day I'll try to get a visual version done.
What does "enabled for a few distros" mean?
That's what I hoped would happen when we started the quarantine. My food/etc supplies were based on expecting a 2w lockdown, so I kept a month of refrigerated food, or two months if we include all the rice/beans/etc, just in case we reach a breakdown scenario.

Instead, here we are. Almost at the two-month mark. And infection rates where I live (NOVA) are even higher than a month ago. FML.
That acquisition happened a blink of an eye ago, in the grand scheme of things. Things don’t change that fast, especially when you have the sheer amount and scope of DevOps and integrations that MS has. With the possible (but even then still unlikely) exception of greenfield projects, there’s basically no chance that anything but open source (or soon to be open source) MS projects were hosted on GitHub.
What do you love the most about the new analyzer pass? I haven't had a chance to try it out for myself yet but I'm looking forward to it.
By having my private keys?
The Baloney Detection Kit: Carl Sagan’s Rules for Critical Thinking
Holy crap, the Matrix/Riot teams have been busy! Congrats on the progress, it's very exciting to watch. Although I have a Matrix account I have had trouble getting friends/family to switch with me (mostly non-technical folks, and Signal was much stickier for them), it might be time to convince them to try again.

Thanks to you and the team for all the hard work!
From your Wikipedia link:

> Also, the 2004 leaked Windows source code was not seen as legal risk for ReactOS, as the trade secret was considered indefensible in court due to broad spread.

This sounds like Microsoft can't benefit from a public leak.
Wouldn't that mean any computer connected to the internet shares that risk?
That definitely mirrors my experiences with their shows.
No, I like competitive marketplaces, as they're one of the core engines of capitalism. I deeply dislike willful monopolies and oligopolies in general, because their goal is to break that engine in ways that harm consumers and often society. Microsoft themselves I can take or leave now that they've been mostly defanged.

I also really like having good developer tools. Many of them come out of community-driven open source. But some of them cost money. And for those, I very much want there to be a competitive marketplace, so there are strong incentives for all players to keep improving.
https://idlewords.com/2015/11/the_advertising_bubble.htm (2015)
I agree that there should be opportunity for individuals to learn from mistakes and improve. People can be stubborn and slow to change, but they should be given a chance. It seems reasonable that the same courtesy should be extended to organizations. However, organizations are an order of magnitude slower to change than individuals.

Ultimately, an organization's policies are a reflection of the policies of its leaders. The bigger the organization, the more leaders have to change before the organization itself can truly change. It's much more likely that those who change just move on to another organization instead.

Besides, the end-to-end encryption incident wasn't a "mistake". Zoom's response was to say that their definition of end-to-end was just different from everyone else's. They clearly knew exactly what they were doing.

Zoom can change, but given their size and past I want more than a corporate apology and pinky swear before I trust them. They are making plenty of money and aren't going anywhere. There's plenty of time for them to earn my trust. However, they haven't yet earned enough of my trust to make me comfortable with this acquisition.
There is a pause button, but we have to demand it. If the state stands down on enforcing those debts, they can't be collected. Simple.
Common errors in React Native apps using Expo
We can do a random search through the founders of various unicorns. My first hit was Brian Chesky [1], one of the Airbnb founders. His parents were social workers. Stripe was founded by two brothers who were born in Limerick, Ireland. Maybe they were middle class in Limerick, but most likely not rich by global standards. They are now worth $3BN each [2]. Instacart was founded by Apoorva Mehta, who was born in India, and whose parents immigrated to Canada in 2000. Apoorva doesn't have a wikipedia page, but again, very likely his family was not rich.

If you go through the wikipedia unicorn list [3], you'll find many founders that appear to be from middle or upper-middle class, but also many founders from lower-middle class as well.

[1] https://en.wikipedia.org/wiki/Brian_Chesky

[2] https://en.wikipedia.org/wiki/John_Collison

[3] https://en.wikipedia.org/wiki/List_of_unicorn_startup_compan...
That's not a balancing, that's an enumeration. You can't balance unless you have some idea of how big the sides are. I agree that there are a lot of people who enumerate and then think they have balanced, though.
“This time is different” is quite the siren song in several areas of human endeavors.