skysight-inc/HackerNews huggingface dataset:
The guidelines exhort us to:

> ... please use the original title, unless it is misleading or linkbait; don't editorialize.

https://news.ycombinator.com/newsguidelines.html

If you can still edit the title, you should change it to the original "Signal should warn users who are likely using insecure IME apps"
> So my take on this is that it probably died for a reason.

Yes, Microsoft killed it.

Up to the point when Microsoft killed it, it did nothing but grow. And for years after Microsoft killed it, it did nothing but grow.

Microsoft killed it because it was a mess on every level, and they didn't like the part they were the ones maintaining. But lack of demand certainly wasn't a factor there in any way.
It's a free government service in the US. 711 is the number for the relay service from TDD - voice. Unfortunately it is sometimes abused.
Sure it does, for the cash flow reason I mentioned. Consider the debt payments as an insurance premium against financial problems.

A municipality can take on debt for a capital expenditure on a bridge or something that might reasonably be dismantled or replaced around the time the bond is paid off, for the same reason.

I would not consider either case to be irresponsible or economically irrational in principle. Especially as humans have finite life spans.
https://aronsonllc.com/nonprofit-organizations-accounting-fo...

I dont understand it much, but its to make Signals life easier during tax time since its such a large gift.
I'm surprised there was no mention of Penlight in that article. Penlight, a supplemental standard library for Lua that is heavily inspired by Python's own standard library, has been around for years now:

https://github.com/lunarmodules/Penlight
Problem is why would a satellite internet provider provide service? Money is the obvious answer, but how will customers get money to them?

I could just see them continuing to provide service at no cost as a gesture of goodwill (particularly if their satellite covers another country), but only so long as limited customers use it that way. They won't be doing upgrades though. And it isn't hard to figure out who is getting internet in this way and physically confiscate their equipment.
We use server-side Blazor for all of our interfaces. These load incredibly quickly. I personally don't like the concept of WASM and client-side Blazor. Especially, for the use cases where <100 people are going to be using the system at the same time.
Yeah, of course, you can still find shitty laptops with these issues if you look in the discount bin at Wallmart but for a fair comparison, most new laptops in the MacBook price range (1000+ Euros) don't have touchpads with segmented zones anymore like the ones you're describing.
Donated, and submitted for employer match!
The study doesn't mention caffeine, but I'm curious if it's a factor.

Caffeinated drinks make me need to pee more often than non-caffeinated drinks. I'm curious if that reduces the amount of time that the bladder cells are exposed to oxidative stress from urine.
A fifty-year, interest-free loan is functionally a donation, IMO
Didn't Egypt end up with citizen-run satellite or mesh networks that crossed borders? I vaguely remember people from other countries organizing on Twitter to provide it somehow.
Java. https://github.com/signalapp/Signal-Server
I've been using these -https://www.amazon.com/gp/product/B07N1CB4B1/

basically anything I own with a lightning or usb micro port gets a magnetic plug (and any usb c device that I dont charge once a day) and becomes an instant magsafe device.
Isn't this precisely what some ad tracking people or rights management are doing? Aren't they adding audio that is out of range for human consumption but things like Alexa can hear them so that, or so the broadcaster can tell that a pub is broadcasting a match without paying for it, etc?
I think that need of public outcry to stop such ludicrous infringement of freedom of expression is enough to show where Germany stands.
Is there reason to think that velocity will remain low in the long term, though? If it's just temporary economic effects caused by COVID (e.g. less physical commerce), then surely we will see higher inflation as those effects go away?
I don’t believe fun conversations are mutually exclusive with secure communications. You can have fun conversations with them being secure from prying eyes.
Show HN: Tappy: Jitsi and WebRTC and REST and Electron and React
What a wonderful story and I'm very happy for you! Congratulations! I am a happy customer and love the product you all built and are still improving. Keep it up!! :)
Please make your points without flamewar rhetoric. Your comment would be just fine without that ending.

https://news.ycombinator.com/newsguidelines.html
Screen resolution problems make a lot of sense. I’ve built a few Raspberry Pi gameboys lately with a 3.5” 640x480 screen and they look great but text is _tough_.
Why? The research will continue to be shoddy no matter where it’s posted.
> By making girls making the first move, you empower girls, you prevent them to get a insulting message from all your matches, you make them feel they decide. Girls are happy of this environment and stay on the app.

Respectfully, that doesn't make sense. All you did is introduce another step before the male sends them an insulting message. Previously they would get the message right away, now they get it after saying "hi" and pressing the Send button. I still see the "women go first" as pure marketing, with no real empirical backing of being empowering.

Maybe the genius of this is that it forces the woman to re-examine the profile of the match one more time after the swipe to see if this is someone they would actually want to talk to. It forces a second sanity check of the match. I could see that argument, but I'm not fully buying it.
Hot reload would probably cut my implementation time in half on this current project. Regardless, its still lightyears better than developing some javascript SPA and fighting all that extra boilerplate.
>Now burritos is not where most money goes

Speak for yourself!
It's been proposed to use this sort of thermal store to store electrical energy, by converting the heat back to power using a thermal cycle. If a heat pump were used the efficiency might not be TOO bad. The per-energy cost of such a system could be an order of magnitude less than batteries.

One interesting side of this is that it admits extremely cheap "assurance" storage. That is: if one has a fuel to heat the thermal store when needed, then this can provide an assured source of power in the event of very rare prolonged outages that deplete the usual store. The marginal capital cost of adding this capability could be a factor of 3 less than that of providing dedicated gas turbines (using hydrogen, say) for that assurance.
Couldn't agree more. Found this article that aptly sums up the issue: "hiring a data analyst won't solve your business problem" rofl https://medium.com/swlh/why-hiring-a-data-analyst-wont-solve...
Maybe in analog, but in digital, they are squares and what not type of waves.
The problem I have with articles like that is they are long on innuendo and implication and short on data. We get a lot of "not much bad is said about them" without much comparison to sources that aren't funded by them that might be more neutral.

In the end it's very hard to tell if they are talking about pit bulls or puppies. Having nothing bad to say about a dog breed known for high profile attacks, dog fighting, and other negatively associated events would be extremely suspect. Having nothing bad to say about puppies in general is expected of such a benign subject. I doubt the Gates foundation is either a pit bull or a puppy, but I can't responsibly make an assumption even about what side of the spectrum they are from an article about how suspicious the absence of criticism is for an organization which is supposedly trying to do good as a charity.
Actually, ads on Prime videos are for their other shows, and skippable. I discovered nice shows that way.
But I agree, we should have at least 2 easy options in settings:

- Never show ads for other shows
- Always skip opening themes
Read the post. I've had this discussion dozens of times now, everyone repeats the same arguments, all based on what Keybase puts out, never checking anything for themselves or even logically reasoning about how this could work (for those who bring up blockchain instead of third party proofs). There's a reason I link the information you're looking for, you don't even have to check it for yourself anymore.

> It was mentioned on hacker news that the app should check third party proofs by itself. This is not exactly what end to end encryption means since it still relies on third parties, but nevertheless, having to [compromise] 2 or more companies' servers before being able to MitM someone's keys (which are additionally TOFU'd) should give quite some confidence.

> However, when checking in Wireshark whether it actually does this (ask the Twitter API for the proof string and verify the signature with the the public key it received from Keybase), Keybase on my phone did not contact Twitter at all. (It did, however, proudly proclaim that the new chat was end to end encrypted.)

> The packet capture started before the username was typed into the search field on the test device and ended only after Keybase completely established the chat and claimed it was end to end encrypted.

> It is deemed implausible for the mobile Keybase client to simply have downloaded all signature chains from all users that exist on Keybase and to have checked all their proofs prior to starting the packet capture. This is the only way I can think of how the third party hosted proof could have been verified prior to the packet capture.
As someone who's barely used lua (only when forced to), I dont get it.

There error messages aren't great, the 1-indexed arrays, the syntax is super weird.

I understand there is good technical aspects to the language, but I am really thrown off by the syntax. I get that that could go away with time, but I have no reason to believe that "learning lua" would actually bear any fruit.

Part of me is convinced that Lua is liked simply because it's unpopular, and that if it was used in production more, people would hate it. Kinda like we hate javascript and c++. Maybe it's that we hate our jobs, and blame the language, and then we go home and screw around in lua, we enjoy ourselves and blame the language.

EDIT:
Just to piggy back on my comment here:

I've been optimistically looking at the wren scripting language. That seems like the "correct" way to make a scripting language, at least from the outside. I should make it clear that I am not speaking from a position of authority, but I am sharing my opinion of LUA as a pessimistic outsider, which I think is very common view.

[1] https://wren.io/
One reason to us SaaS - if there's a hack you can blame them rather than taking the heat yourself. It's outsourcing of culpability.
In an ideal world, these are mostly reasonable questions, even if a bit specific to the OP's requirements, but unless you are purchasing SaaS software on a large, enterprise-style license (i.e., 6 figures or more), it probably won't be cost-effective for most vendors to gather and collate this documentation, as well as answering these questions, just like it's not worth it to ink a custom contract on a smaller deal, where legal fees alone might eat up the entire profit margin or even push it negative. Engineering time is expensive and some of these questions are technical or "special" in nature.

There's a reason why standardized third-party audits like SOC-2's and ISO-27001's exist: to reduce the time required to document your veracity and security as a vendor for a potential customer. Since even large customers rely on the statements (independently audited, unlike in these questions) of a security attestation to make purchases, why should a customer request that extra time should be taken away from other responsibilities, like making better products or providing customer support?

I freely admit that I'm a bit biased against ad hoc security questions, even though I used to do it myself when working on large security teams. ;) My security-focused SSH key management company, https://userify.com, went through the time and expense to achieve AICPA SOC-2 certification from an independent third-party auditor to reduce the time and costs involved in responding to smaller RFP's, and to provide fully documented, standardized, and legally binding proof of our security bonafides. We still try our best to intelligently respond to any and all questions, especially about security, from any customers at all, even free-tier customers and hobbyists, but it's harder to do that when presented with a big list of questions that are mostly answered in our SOC-2 audit already.
i didnt know you could set up bridges for signal. what does your server look like in terms of users? i want to test it out but dont know what i need to get started (besides the guides and all), just with the server
> since at least 2015 disguised in pirated (cracked) games and software such as League of Legends

LoL is free, though. Why would anyone use a pirated/cracked version? What would that even mean?
It's simple if you setup your infra in such a way you expect to be able to turn it off. It'd be a lot harder in the US where things are a lot more decentralized. In Uganda, I wouldn't be shocked if all connectivity to outside of the country went through one physical building.
> wouldn't UBI tend towards an inflationary spiral?

A UBI higher than the economy can support would seem to drive inflation, especially if we're (literally or effectively) printing some of the money.

Whether that leads to a "spiral" depends on what we do in response. If our UBI is intent on delivering a certain real value, so we give an $X that we adjust regularly to account for observed or expected inflation, then we run risk of inflationary spiral. So let's not do that.

If our UBI is a fixed dollar value, increasing based only on targeted inflation, then inflation drives down the real value to something we can empirically support.

There are also proposals that tie income to a specific revenue stream (a carbon tax, or Alaska's permanent fund), which has its own dynamics but doesn't seem to risk inflationary spiral.

> But without price controls, what would prevent rent/mortage/food/entertainment prices from just rising to absorb everybody's newfound income?

Competition, of both direct and indirect substitutes; this is the same thing that prevents rent/mortgage/food/entertainment prices from rising to absorb everybody's oldfound income.

Considering rent and mortgage in particular, as they seem to be in more limited supply than the others, I want to note two things:

First, competition is not merely competition amongst like units. If there is a fixed number of rooms for rent in a city, more people that want rooms than rooms available, and everyone can pay more, we should expect prices to rise. But as prices rise, choosing to take on an additional roommate, keep living with your parents, or similar become more attractive. And of course, the number of rooms for rent is only approximately fixed, even in the short term. These will typically stop the price from rising the full amount.

Second, we aren't actually particularly limited on housing available; we're particularly limited on sufficiently desirable housing available. A huge portion of what makes housing desirable is that it is sufficiently close to sufficient sources of income. By reducing necessary income, we are actually directly increasing the supply of "sufficiently desirable" housing, even before anyone starts building.

> College tuition has been going up exponentially since the introduction of federal student aid.

There is a very different dynamic when we give people dollars that they can spend as they need, versus when we give people potential dollars they can only spend for a single purpose. If I save a dollar on tuition today, and I'm borrowing from a lender that will only lend to me for tuition, then I can't turn around and use that dollar for anything else that I need (or want). This means it's less important to me to save that dollar, so there's less pressure keeping the price down.
I've personally had (many) more signal issues than WhatsApp issues, and not one of the signal issues was accompanied by a banner.

I am not vouching for WhatsApp. I just don't think we should pretend that Signal is more reliable than it is.
Exactly. GP's comment is the most HN thing I've every seen.
You can use the public matrix server that offers an interface to it with the Element web client and is maintained by Element the company (used to be called New Vector):
https://app.element.io/

If you do want to set up your own server I wrote a guide when I learned how to do it with Google cloud instances:
https://munfred.com/matrix
I am betting it is the Feds. They want visibility into everyone's conversations. They want power.

Welcome to your dystopian future.
> also being swamped with right wingers

So is Signal. 'right wingers' are everywhere.
that's coming in .NET 6.0
Show HN: Modeloptic – Powerful and Intuitive Financial Reporting and Projections
The limit of human hearing is a bit above around 20KhZ. Emphasis on the K. It is totally possible to hear 20Hz noise. In fact 20KhZ is better for this because you can use a higher bit rate and that band is going to have very little intentional noise to begin with.
Was that the hypothesis, or just the marketing? Obviously real names make it easier to integrate marketing data from disparate sources.
At the end of the day SQL ended up being my company's entire analytics solution so I think that speaks a lot to its staying power.
I've personally used the browser dev tools in a "consumer" capacity, to:

- Filter content feeds by custom criteria

- Count the number of items in a list

- Tweak a blog post's styling to make it more readable

- Automatically click a large number of items at once (instead of manually)

- Delete cookie overlays and adblocker-detection overlays

Just a few weeks ago a friend asked me how he could go about putting together a little GUI for navigating some D&D rules

Not that the average person would necessarily bother to do all of this stuff, but I think there's a larger space of usecases here than you're assuming
$100 million given current growth wont last as long. Telegram 4 years had a run rate of $1 million per month for servers and dev costs. At that time they had about 200 million users.

Signal is using AWS & GCP ( for cloud fronting ), they could be approaching that spend level.
I’m with you about USB-C.
I really like my MagSafe but many of them worn off (just like Apple Lightning cables).
What I really love in USB-C is that it’s a standard!
Brave Apple switched everything to this type of connector. I actually get that. but if you’ve sticked to it for 6 years. keep it.
Aloha Vlad!

Thank you for sharing that story! I think the first word I
would use to describe, before inspiring, is "terrifying" :),
but happy to hear it all worked out.

I was a little surprised to read this because I worked in
the low code Web IDE space in 2013 as well, and don't remember webflow back then, but then when I go back through my old emails I see we exchanged ideas and motivation! Very cool. So so happy you all ended up making this a reality. We ended up taking an early exit, which was great too, but I felt guilty we didn't solve the problem we set out to solve. Thank you for doing that!
Thanks. Seems obvious now that you write it.
It looks like you've been using HN primarily for political battle, as well as posting a ton of unsubstantive comments. We ban accounts that do those things (regardless of which politics they support or oppose). I don't want to ban you, but we have to protect this place, and political battle and unsubstantive comments are the two biggest problems.

If you'd please review https://news.ycombinator.com/newsguidelines.html and fix this, we'd appreciate it.
Even during the Ryzen 2000 generation you could find reasonably priced laptops with 1080p screens, though the compromise would be a tiny SSD or spinning rust.
I've been waiting for this for years as well. I would think some group of publishers would partner with some micropayment tool. Maybe, you buy a pool of tokens, and if you don't have a subscription to a magazine, you can apply a token. I think it would require some cash, management, and connections to create an initial pool of publishers that would make the service viable (ie, I already have 10 subscriptions, so I would need n more that I don't want to before I would fund some pool). Because it doesn't exist, and seems so obvious, I also expect that it doesn't happen for other contractual/competitive reasons. But, here's hoping some entrepreneur takes it on.
From the levels of spread in southern CA it's clear most people are not abiding by the stay-at-home order.
I worked for a HIPAA covered healthcare company that routinely passed audits. They also stored all the production database and server passwords in a plain text file accessible to half the company and no audit trail of any kind on logins.

Clearly no auditor ever asked or looked.
Yes right. Apologies.
Doesn't "run-only" just mean "compiled"?
If you're hacked and leak your customer's data, and it turns out that you materially lied on your customer's security questionnaire/due diligence, you could be sued by your customer for damages, and your insurance company could refuse to defend you.
Somebody posted an article here about “unbundling reddit” and this seems right up there. Atom finance also tries something similar, but they want you to pay for it.
Good idea. Just did too!
Nice info there. I recently started using xmake and for someone who is spoilt by npm, cargo and nimble i was really impressed by xmake. I finally dont have to write Makefiles.

Lua is a very good choice for config files. Wezterm uses lua for configs. Lite editor uses lua only plugins and configs. And many more. Maybe someone/group of people can step up and declare an universal config format using lua for everyone.

As for batteries, I would love to have that but wouldnt that again defeat the whole purpose of Lua as embeddable? But of course people would love to have it.
But evidence shows countries turning the internet off all the time, let alone specific filtering, and their economies haven't collapsed. India does it dozens of times a year.

In most cases you don't need to completely turn everything off, just shut down the mobile networks, and maybe the big domestic broadband networks, and that's good enough.
Who is "we"? If you had maybe five other studies replicating that second result about stress and sexuality from the past 20 years, I might find it credible. I don't find one study on this topic from 1974 credible enough to believe it.
In the late 2000s, I worked for an enterprise software company. Turns out many smaller customers that needed our software were Windows based and ran our Tomcat based software on Windows servers. The larger companies that had dedicated Unix clusters for our software and other things.

In the world of SaaS, this becomes less of a thing, but there are still a lot non-tech small businesses that start with Windows based IT solutions because they want Office & Outlook. Then they find some domain specific thing that they want to host and since they know windows, it runs on a Windows server.
uncle sam's priorities are set by capitalists.
What's the betting line on memory in the 27-inch model no longer being upgradeable by the user?
This. Absolutely none of my family and friends in China use Signal. There are a few that uses slack though.
Here are a couple of papers about supposed mechanisms:

Regarding caffeine:
https://pubmed.ncbi.nlm.nih.gov/16709440/

Regarding coffee polyphenols:
https://pubmed.ncbi.nlm.nih.gov/16709440/