skysight-inc/HackerNews huggingface dataset:
Signal pushing contacts I haven't spoken with in 5 years, do I want to connect?
I have had it installed for a week but uninstalled immediately when I got a push notification that another contact also had signal.

Just because we both use signal doesn't mean I want to be reminded of them.

And that made me think, if I was reminded of them, then it works the other way too. Literally anyone in my hundreds of contacts could be getting notifications that I am on signal, do they want to connect with me? Do I want them to also know I am on signal?

A lot of my contacts are ex clients, networking flybys, even random people I shared numbers with drunk at a club. Many are professional contacts, others I just want to monitor if they ever try and contact me, maybe one day I want to talk to them, on my own terms.

By consenting to give signal access to my contact list I didn't want to opt in to giving them carte blanche to broadcast my presence to every random person I have ever sent a message to. But that is not an option when setting it up,
and that is what it will do.

I have 20 years of contacts, and I don't want many of them getting any kind of notifications with my name in it. I don't even have anything interesting to hide. But if I decide to re enter a person's life I want to do so on my terms and not that of an algorithm.

So I uninstalled. Then I reinstalled and did not grant permissions to access my contacts.

Lo and behold after reinstalling without contact list permissions it knows the names of people in my contact list if I manually enter the mobile number. On the second install, these details must be getting fetched from the server, assuming android permissions are solid, because I provided my contact list in the first place.

I checked with a friend who also reinstalled and he is seeing in signal the full name of a person he hasn't contacted through signal, by their phone number. Which must be due to sharing the contacts the first install.

Lesson learned not to share contacts with any app ever.

Signal is not a panacea is all I can say.
It's not selfish to be out and about if you are young and healthy. The recovery rate for 20-30 YO is 99.99%+, and if you are healthy it's likely higher[1].

It's on the same order of risk as driving. Many young people die driving every year, yet we still do it plenty, with reasonable precautions. If you take reasonable precautions, are young and healthy, it is a risk worth taking to many.

[1] https://www.nature.com/articles/s41586-020-2918-0/figures/2
Most large websites could do a little extra work on trimming their image size & be fine with the size of Blazor with WASM.
Lovely work, I was looking for something like this the other day and I'd like to thank you for sharing it! Especially since it's in Python I can understand it without too much hassle.
What a good job on the documentation as well!!
It will be sent encrypted, and the receiver will only be able to view it if they are on an encryption-capable Matrix client.
Yeah I've been grinding my teeth thinking about exactly this all day. :(
No one pays for SMS in France. And probably in most European countries.
Wait, I didn't realize they implemented a JIT cache before their AoT compilation option. It seems like pre-populating a JIT cache, dumping it to disk, and throwing that in as an extra resource in a JAR would have a lot fewer caveats than at least their first implementation of AoT Java compilation.
But are Microsoft or Google's keyboard apps actually secure? That is, is it certain that they don't log keys or phone home somehow?
Nodebook – Multi-Language REPL with Web UI and CLI Runner
BART has an app that you can use to report beggars and other disruptive people on the train. Did you try using it?
I've never understood how so many tech workers see themselves as broadly left-wing, while at the same time gentrifying entire cities, spending their life's work growing and optimizing the fortunes of the wealthiest individuals in the world, and increasing the tools of surveillance on the population and competition between the rest of the workers.
That might have been true depending on your age.
Love to. I’m a card-carrying member of the Over-sharers Club

The way I think and care about people has changed. I no longer care what people think about me. At the same time, I have a depth of compassion and empathy I couldn’t have had before.

I have no obligation to anyone. This lets me choose to care about someone without getting unnecessarily attracted. As a result, I can share my love and support freely without worrying about people taking advantage of me. I have no guilt showing people the door.

As a result of this, my motivations have changed. To use a metaphor, I see myself as a light in a dark world. My goal is to make everyone’s day a little better. I’m not some kind of savior, though I have saved lives. I’m just a “good person” trying to do “good things”.

My interests have changed in odd ways. I’d never have written erotica but sex is far more interesting to me now. This isn’t a result of me being repressed. I’ve always been asexual and been hypersexual since I was nine. But now I’m deeply exploring sexuality in my writing.

The last one is both odd and the most fundamental to my being. Just take it at face value.

I had a deep, spiritual connection with wolves from six years old until my break. That connection was a core part of me and without it, I wouldn’t have known who I was.

That connection is gone and I really don’t care about it. As far as I’m concerned, it was delusional thinking.

I no longer have the spirituality that was such a part of me. There is only the rational world now. (Side note: My faith in God had always been rational, not emotional or spiritual.)

If I had to guess, I think sexuality took the place of spiritually in my brain.

It’s quite possible I haven’t changed as much as I think, but the world inside my head is so vastly different, I can’t understand the person I was before.
Offtopic, but hello, how are you learning Spanish? Any hacks or cool techniques so far?

I’m learning it too and I’d like to think I’m 30% there, and I’m learning for my family .
It's clear he was seeking solitude more than he was seeking nature. It just so happens the two go together frequently. It does not particularly appear any 'achievement' was intended.
Reverse Engineering Prodigy, Part 1
Ask HN: How to be careful with phishing and domain redirects?
I came across this article today [1] where a popular journalist in India was tricked to think they had a job offer at a prominent University by an elaborate phishing scam.

After this I started thinking about the security of modern day domain redirects in the context of phishing. One could register thexyz.edu or something similar that's close enough to xyz.edu for phishing and then directly domain redirect.

The commoner, who may have the basic instinct to verify the source of the email might just try to look up the domain from which the email was sent but if that redirects to the real domain they maybe convinced that it's the actual one.

Are there any mechanisms to prevent this kind of malicious domain redirect that can be misused? What are your thoughts on this from the security perspective of the larger crowded who may not be well versed with technology?

[1] https://twitter.com/Nidhi/status/1350024214997155840?s=20
Let's grant that's the point of the feature.

I don't mean to take this into a culture wars direction, but, this sounds less "empowering" to me and more along the lines of "Hey female user, we know you already expressed interest in this male user by swiping right, but are you really, really sure you actually want to talk to him?".

That's a pretty far stretch for the term "empowering".
It sounds like the author comes from a Windows background. FWIW, way back when I was a beginner, there were already tools geared towards this exact "no command lines ever" audience: xampp[0]. You'd be surprised how far xampp plus php.net docs can take you!

Nowadays, there's also tools like codepen, cloud9, etc, not to mention an endless amount of resources for learning in all sorts of formats (many of which are free).

The thing that bothers me is this idea of "look, I'm a beginner, but your not-geared-at-beginners tool should be geared at beginners!" Imagine you are a beginner at art, and you go around demanding that oil on canvas shouldn't involve brushes and mixing paints because that's too hard, or that metal sculpting shouldn't involve sparks flying out because that's too scary, and instead everything should be as easy as using crayons. That'd just be silly.

At some point in the mastery ladder, you will run into established tools and you just have to learn how to use them.

There's certainly an argument to be made about how rough the ground is when you've veered off the beaten path, but if we were to make a road analogy, while something like setting up a M1 assembler under linux might be way out in the weeds, installing node.js is at worst akin to driving in from out of town.

[0] https://www.apachefriends.org/index.html
Personally, I really value the fact that tmux has a nice, clean api to manage windows and panes. I have a few scripts which run a bunch of tmux commands to create new windows with multiple panes for logging/consoles/source code for an individual service. Being able to use send-keys(http://man.openbsd.org/OpenBSD-current/man1/tmux.1#send-keys) has been amazing for automating things like this. I'm sure that other tools that I'm not aware of can do this sort of thing, but I find it to be quite productive.
Paying for avatars and stickers.
Elizabeth II seems more about ruling her family with an iron fist. I guess that's peak Britishness?
You can’t just dismiss it as “oh these guys are emotionally immature”.

The average woman on dating sites gets hundreds of messages, and the average guy gets tens. That is a MASSIVE imbalance in favor of women.

It’s not hard to imagine that this could cause problems that would lead to a group like incels being created.

I think we need to look more into the cause (why are men so devalued on dating sites) and not the symptom (why are men getting bitter and becoming incels).
Legally, I’m sure their contributor license agreement gives them the full rights to do that. Which was my understanding at the time. I’ve contributed to lots of projects that have them, and I likely will again in the future.
Even without shutting off the internet, couldn't governments crush crypto by making it illegal to buy or transfer? Countries could do this simultaneously.

That would effectively stop ~99% of the affected populations from using it, no?

What's the counterargument to this possibility? It seems to hinge on getting too big to ban.
How many online businesses got shuttered that you know of?
WhatsApp Delays Rollout of New Privacy Tools After User Backlash
What i don't like is that "everything" is 10$ a month. I would like to subscribe to some payment aggregator where they charge me X dollars a month in one transaction, then pays it out to developers/service providers. This way things could go down in price too, since the fees would be lower because of less transactions. This way cheaper services like messaging could be 1$ a month without being eaten up by fees.
I laughed at the Toyota test, because there's a ton of truth in there. Got to test the mix on bad speakers to see if it translates...humbling, but necessary for a good mix. I do test in my car (coincidentally, it is a Corolla) as well :)
Yes. The actual coverage number is not meaningful, but knowing for sure that a function or a line of code is not covered at all is invaluable.

I use SonarQube/SonarCloud for the reports.
In terms of value for money, better any of them than the usual contracting suspects- Oracle, Lockheed, Northrop, etc.

IT budget details at the bottom: https://mailchi.mp/bidentransition/ascertainment-news-statem...
Agreed, there is a simple & likely explanation for this outage, being a huge increase in user base worldwide.
Is anyone aware of an open source alternative for Kibana and Logstash (based on lucene)?
Isn't that the other way around - there aren't windows arm builds that run under virtualization.framework? I mean, there are windows builds for 64bit arm, just as there are Linux builds?
Why is the French Wikipedia different from all the others?
I was looking at differents Wikipedias to see how they are celebrating Wikipedia's 20th birthday and found out that the French one has a completely different layout compared to the others, which ony have a different main page along small details.
Does anyone know why Wikipedia en français has this different layout, is it a test for a new layout or something? I tried looking up on the internet but found no information about it.
Thanks for posting the link.

Donated.
Google news has really gone down hill a lot in the last year or so. Constantly recommending stories about Cardi B / random celebrities I care nothing about, creepily recommending stories based on topics I've looked up in Google _search_, and news video clips which I'm not going to watch while commuting are all features that make for a negative experience.
Well, yes, but what this article tries to do is hint to where you can start your trial to reduce the number of error to begin with.
If you don't intend to use a specific server, it's the same as creating an account on any online service.
I set up an monthly donation just now, thanks for the reminder.

Remember: regular donations are better because they help with long term planning.
> you get network lag on all stateful UI interactions

Isn't this kind of a good thing, though? Now your UI can't lie to you about the true application state, making you think something worked or completed when in fact it's still interacting with the server. /s

I like SPAs because they can work offline / on spotty network connections. I don't like SPAs because they are often unclear about whether or not they are fully synchronized with their backend. I kinda wish people writing SPAs just wrote totally offline apps first that then had an independent synchronization mechanism with their respective backends as a general rule.
Last time I was exploring this space, ElasticSearch was hands down better than solr from a "speed to market" and "developer experience" standpoint. Those things really matter. It's one of the reasons MongoDB got way more popular than it should have based on all the compromised built into the platform by default.
Your belief about Skype being owned by Bill Gates is kinda factually true. Not necessarily Bill Gates himself, but Microsoft acquired Skype back in 2011.
> Now fast-forward one year. In March of 2020, I bought a large amount of Bitcoin. At the time, I saw a market dislocation and the likelihood of significant dollar inflation due to the US Government’s likely response to the unfolding pandemic.

I'm frustrated by this statement. If you predict inflation in the USD that is not currently priced into the market, then there are already plenty of conventional ways to make money on the prediction.

For example, go long on real-return (inflation-adjusted) bonds, and go short on nominal bonds. Or purchase call options on commodities (preferably ones like food or energy that would be directly part of the predicted inflation). Or just invest in less-speculative equities like utilities or transport.

There's no need to structure investments to also bring in the entire unhinged, speculative nature of cryptocurrencies just to place a bet on inflation. Bitcoin (vs the USD) has had tenfold increases (year-over-year) and larger than 50% drops, all against a USD that has not in fact experienced abrupt price-level swings (expressed in terms of consumer goods).
United States too. Same feeling that most messages are iMessage or SMS. But as one of two extended family members with Android against ~10 with iPhones, for me iMessages are pretty horrible. They mostly work most of the time, but frequently there are glitches on glitches. SMS between Android phones are rock solid. Just a single data point.
I guess if you had everyone rate the relative worth of each year of their lives and the effect of lockdown on that value, the maximizing strategy would be probably be no lockdown.

The thing is though that those later years of people’s life are often worth very much to those around them.

For instance, what about a four year old whose primary caretaker is their grandmother? Four is a precious year with an outsize effect on the trajectory of someone’s life. The calculations are not so simple then.
I try not to shun incremental research because I understand there is value in it. Unfortunately, a large portion of it is frankly very uninteresting and these 'may be' sort of weak links are a necessity to continue research and progress by appeasing the purseholders.

Often these sort of results are picked up by journalists and overemphasized but there are inherent pressures for researchers, their supervisors, and everything up the finance food chain to do the same sort of marketing as well. You have to make sure the people who pay the bills have some sort of progress report that shows improvement and ROI.

The current way of coping with this pressure is showing small promising incremental updates on low risk studies regularly and then doing the interesting research with any slack time you have to hopefully discover the next real breakthrough or leap. Breakthroughs are often non-incremental and are the real allure of research and science, at least to me.

Unfortunately, society doesn't like seeing big risks taken, resources spent, and little to show beyond the, still quite valuable, knowledge of "this didn't work." The vast majority of researchers hate small incremental research and much prefer to use their creativity to take larger incremental leaps or even paradigm/perspective shifting leaps. If we want to stay ahead of the world in terms of research we need to be willing to take bigger risks and accept failure on those risks. Scientific progress is largely at the mercy of the business and economic culture it's conducted within.
I know you're being facetious, but any SOC2 audit would overlook this because they're just going down a checklist making sure specific controls are in place and not actually probing for the various possibilities to bypass these controls.
Seems like a great improvement, thanks for sharing!
What is even the point of tinder passport?

Unless you're ready to hop on a plane and go fuck your match halfway across the world why even bother? Is it for all the people hoping to hook up when they arrive at their vacation spot?
Since I've read 'Three Body Problem', I'd be breathing a lot less easier a week from now.
All four of those possibilities exist at any other time in human history. This is not the first year where I can catch and spread a disease that can kill someone else.

Likewise, how far do you extend this logic? I can catch and spread Covid literally any time I go outside. Do I have to avoid all other human contact, or is it just the things that a tribunal of strangers on the internet thinks is unnecessary?

> So if you take dumb risks and raise your odds of catching COVID and passing it along, then I am happy to scold you. People who recklessly pass on COVID are why millions are dead and dying.

I made a comment about two consenting adults, who live alone, taking a calculated personal risk. I am not sure who is being reckless here, but at the least this is an exaggeration.
I believe there is value in learning Lua, and reading Programming In Lua in particular, early on. It's object and inheritance system is in your face. I feel learning it afforded me a more intuitive understand of prototypal inheritance systems.
@IfOnlyYouKnew Very level headed and great comment. It’s amazing how much victim blaming HN does on almost any topic.

Separately, IMO, previous girlfriends or friends, etc. won’t go out of their way to spit on someone’s grave. I think the exception is when someone finally feels safe to speak out that they were abused or if the person was a true POS.

Not sure why the default logic in this case is to automatically assume the exes are bad mouthing the deceased just because they can. Sure, it happens, but in this case there were two separate first-hand accounts and from the girl’s parents.
With a 5.10 kernel, everything works perfectly fine (at least everything I use). Note that I use Debian bullseye.

It's much much less noisy that my work laptop T480s. The fans don't run too often, and I find them very discreet.
we’ve been working a lot on onboarding on Element, just as Signal have. it’s not perfect, but empirically it’s good enough for many non-technical users. comments like this are likely based on stale data (eg from when we forced e2ee setup during registration).
also check if your employer does a matching donation. Its an easy way to double your donation. I do a single yearly donation for that reason
WhatsApp to delay new privacy policy amid mass confusion about FB data sharing
Sigh... No, digital signals are not “square waves”. https://youtu.be/cIQ9IXSUzuM
Are you suggesting that glaciers in Northern Europe eradicated material culture in Africa? This is very much at odds with your previous post.
Rephrased: Amazon played hardball with open source Elasticsearch, limiting elastic's ability to make money and forcing a license change. Now you should use Amazon's fork instead!

This is not a good outcome for people who want an independent OSS ecosystem.
Loki and grafana? (not really an alternative in the sense of "full text search" over logs, but an alternative in the sense "an interface for aggregate search over logs").
send your mom to https://element.io. nobody is asking her to run her own server(!)
Thanks for sharing that link, you removed enough friction that I now donate monthly :)
Microsoft does own Skype now, so in a way he does.
fuck the touch bar.
Sorry how did you determine they're running on DO? I only see ns30.dns4pro.com. like records under NS
Elasticsearch, Kibana, and Logstash all have OSS distributions, and are included as part of Open Distro.
i have so much fun in public websites seeing americans fight over right and left. its good entertainment. keep it up.

anyways. It will be really difficult to convince my friends to remain on signal. At least they are technically sound. Thinking an excuse to come up with though. i donated money today too.
> It has to be stressed that in the midst of the market mania in which we find ourselves, the cult-like fervour behind cryptocurrencies such as bitcoin has become untethered.

Wow, imagine choosing that last word unwittingly...
I struggle with this in my personal life. To most friends and acquaintances I can be friendly, personable, interesting, and engaging when we meet. But at home, with close family, and especially with my wife I struggle to be that person. My default state is that I mostly want to be left alone. All the people closest to me seem to want something -- time, attention, help, emotional support etc. none of which I seem to need from anybody else and leads to annoyance and resentment on my part. It doesn't help that I have a particularly stressful job managing a large team with silly interpersonal issues and politics that I have to deal with.

My wife and I have our good moments, are good parents (I think), but day to day is such a struggle. It is constant cycle of me wanting to be left alone and her wanting something or the other from me and getting annoyed that I show reluctance to do it leading to resentment on both sides. Not sure how to fix it or where to turn to for help. I am not an angry person and I don't physically yell or hurt her but she has said that me being reluctant with most things is a form of emotional abuse, which after reading this concerns me and is cause for introspection.
Yes, apparently.
Sure, you have a high sanctity moral foundation. Many others do not. To me, a dead man with no family ties is just a sequence of tissue arranged in a certain way. I will deal with it as I deal with bark or fungus. There is no person left.
I worked for lockheed... they have an infinite funnel of money from the US...