skysight-inc/HackerNews huggingface dataset:
I had a similar experience with Matrix/Element. I was using the desktop app to chat with a friend, and while we were able to get some end-to-end encryption working, it was a huge pain the butt, and if two software engineers struggled this much to get the damn thing working, there's no way in hell that I'm convincing my parents to use it.

To me, we have to accept the incremental wins where we can get them; getting my parents on Signal means that they're not on WhatsApp.

I am a believer in federation, honestly, but the fact of the matter is that there's a reason that XMPP hasn't taken the world by storm, and people have gravitated towards centralized stuff: it's just easier, and not everyone is a software engineer.

That said, I would love to be wrong about this....if we can make Matrix/Element approachable by anyone, I would support that.
Coc has coc-pyright extension. You don't have to use pyls.
https://github.com/neoclide/coc.nvim/wiki/Using-coc-extensio...
https://github.com/fannheyward/coc-pyright
Yeah I'm charting the public's realizations, not security experts' realizations.
> Because of only predicting moves in isolation.

This actually may be the reason of higher ranking. What are the odds that a low ranked player will blunder a piece in a particular position? Quite low. But what are the odds that a low ranked player will blunder a piece in a game? They are quite high. So while this engine may predict most likely move, it can’t fake a likely game because it is too consistent.

I think GANs can be helpful to do something like this. One NN tries to make a man-like move and another one tries to guess whether the move was made by a human or the engine given the history of moves in a game.
Sounds like IRL
It is disappointing that touch id doesn't support this yet, it would be great. I put my ssh keys on touch id but my webauthn and gpg are on the yubikey and I have to remember which to touch. And the yubikey with finger print reader isnt out yet and I already have pretty much the right hardware in the mac...
Reduced profit is the other source, along with blowing through investment capital from people with big pockets who feel lucky.
Signal will have very hard time competing as a product with WhatsApp.

Their main value proposal is that they aren’t backed by Facebook, but other than that, there’s no real difference to end user.

That’s enough for geeks, but not very compelling argument to break to mainstream. To break into such a highly competitive market, they need more unique features.

Or they can count on Facebook to keep on shooting themselves into foot, which is possible, but historically risky bet (no matter what HN crowd says, they continue to be extremely successful and know how to grow products).
Is suggesting that the status quo could be improved so bad? I wasn't even "bitching", heck I use Signal too.
This comment thread is an example of social media at its absolute worst. Have an opinion? Big deal, everyone has an opinion. My advice is to keep it to yourself.
I agree, the results aren't substantive and don't directly correspond to such a one-sided title, as the results are much more nuanced and varied
With only 2 comments.
> I'd wager most people outside of the Apple ecosystem don't use USB-C at all

But almost all the Android phones are USB-C aren't they?

Other manufacturers' laptops are also often USB-C for charging. And other brands of things like wireless headphones. Apple uses it less than other brands, as they still have Lightning in many places.
> Eventually, the trim wheel made an abrupt twitch forward at the high rate, but only for a fraction of a turn. This, our instructor told us, was the MCAS system becoming active or “waking up”. What was happening behind the scene was the MCAS logic took a “snapshot” of the existing trim position when its threshold AOA was reached. It then calculated a maximum amount of trim that could be added. Should the trim ever meet this computed limit, the speed trim and MCAS system becomes inhibited for the remainder of the flight.

This seems like one of those overly complex behaviors that's indistinguishable from "randomly decides to just stop working" when someone doesn't fully understand (or remember) all the details. Is this common in aircraft, especially for critical flight systems?
Does a normal fly-by-wire system do things like this?
It does, and it warns the other users chatting with the person whose device has changed, but given the tendency of non technical users to click "yes/accept/okay" buttons in the GUI to bypass any error messages that come up on their mobile phone screens, I question how much value it has.

Two experiences: Among highly technical users in my peer group, when somebody upgrades or replaces their phone, if we're chatting with somebody who has a new signal device private key, I'll chat with them a bit by voice to confirm it really is them using a new phone. We've had a number of discussions about how it's apparently impossible to manually move ones' own signal private keys from disk storage on an android device onto a new android device. This works among people I know closely and recognize the sound of their voice.

Among non technical users, they'll just click the equivalent of "okay" and continue chatting without even thinking about what the error message means.
Another thing is that e2ee breaks a number of useful features of e-mail:

- The ability to painlessly access your mail from a number of different clients, ranging from fully-featured desktop clients to smartphone apps to webmail.

- Server-side filtering (both spam and in general)

- Server-side searching (mandatory for webmail and depending on how big your mail archive is, still rather useful for smartphones, too)
I don't quite "get" magit, can someone tell what's great about it / for what type of git workflow?
I have a $10/yr subscription to Marco Arment's https://overcast.fm/ for this purpose. "Smart speed" is a total game-changer.
> What prevents the same thing from happening to decentralized services?

Nothing, but at least knocking a server offline doesn't bring down the whole network, which is indeed "better than Signal" on this front.
If stealing the computer is enough, someone's seriously screwed up already — it's supposed to be 2FA, not 1FA.
I put a production AAA game on it (with horrible constraints for a cloud provider, like highly stateful connections and hard requirement to honour fsync in the underlying hardware)- and we had a truly great experience.

Can you go into more detail? Not saying you’re wrong of course, but your experience is massively contra to my own, and like I said, we have production on there with little to no issues.
Florida was falsifying data, got caught, and stopped.
If you follow it to it's conclusion to abolish nation states and create a world level confederacy ala EU or a politically binding UN, yes very much so. Usually people try to give some defense of patriotism or "acceptable" nationalism, but in my opinion the truth is that until we have the whole planet in a multilayer jurisdiction where local problems are solved locally but there's a clear path towards escalation into global jurisdiction, nationalism will continue to fuck us.
There are a number of metrics[1] for journal ranking. The journal in question[2] claims to have (or have had) an impact factor[3] of 0.593 (2017-18); "the ratio between the number of citations received in that year [...] and the total number of "citable items" published in that journal[...]". That's not a very good score. Nature has an impact factor of ~42 (2019), or to pick another example, because I recently referred to it here on HN, Eurosurveillance has an impact factor of ~6.

I don't think blindly following these metrics is a good idea, but it's not as a bad first approximation.

[1] https://en.wikipedia.org/wiki/Journal_ranking

[2] https://juniperpublishers.com/ofoaj/

[3] https://en.wikipedia.org/wiki/Impact_factor
If you're cryptographically checking that the connection you have is to your own server, sure, but I don't know any program that does that sort of thing. I guess if you're using TLS as a transport, the client handles that (if you have a self-signed certificate that you've told the client to trust exclusively).
Very quickly meetings started with question of
"who has a laptop with real HDMI/DisplayPort?
We would like to start in 15s instead of 15
minutes of fighting with dongles..."

I don't understand this.

There are plenty of arguments against against going all-in on USB-C and forcing people to buy/carry multiple dongles. I don't like dongles myself! I still use a (pre-USB C) 2015 MacBook Pro, partially for that reason. I greatly prefer common ports such as HDMI to be built right into the laptop.

But "15 minutes of fighting with dongles?" Even if there's some comic exaggeration here, I don't understand.

Of all my gripes with Mac laptop dongles, "fighting" with them is not on the list. They are as plug and play as it gets. No drivers, etc... I hate carrying them but they're not exactly difficult to use.

The only way I can imagine people "fighting" with dongles is if they were nontechnical users who had difficulties simply plugging a cable in.
> …identify what it was that Californians found so appealing…

Having been part of a group chatting about the propositions on the ballot, my belief is that few people voting on this had a good idea what they were actually voting for and what the effects could be if it passed. That's what $186 million (the most expensive campaign ever waged in the history of U.S. ballot measures) poured into the "Yes on 22" campaign bought.

Prop 22 is a great model for how to use propaganda to pass laws that socialize an industry's costs.
> There is a center of political gravity in the country that’s somewhat left of center on economic issues, and somewhat right of center on social issues,

That center is always moving: over the last 30 years, the economic center has moved rightward (see Bill Clinton and the "Third Way", or the tax rate of the top bracket), while the social center has moved leftwards (see public opinion of interracial marriages and LGBTQ unions). On both axes, the US center is right of center, compared to the rest of the world.
Git CLI is fantástico if you want to do two things per hour. If you want to do twenty, it's just too many keystrokes. Even if we only talk basic add/commit/push.

Two especially laborious operations are `git add -p` and `git rebase -i`. Try them out on magit, you'll see the difference.
Go lacks parametric ("generics") polymorphism but has interface ("duck typing") and effectively, via the syntactic sugar for embedding, also has subtype ("virtual methods") polymorphism.

It's 30 years too late to complain about three unrelated approaches to dynamic dispatch having the same name.
I wonder if it's possible with some tricks to build a message box on top of a regular DHT (distributed hash table) as commonly found in many P2P network implementations. There is no need to guarantee that the message is stored for a certain amount of time as long as the protocol knows whether the other party has received it or not: you can just put it into the DHT again as long as it's not received.
$50K is too high, unless you had a lot of actual process gaps to fill initially and are counting staff time in that. Also expertise isn't really that important - honestly the auditors are often (not always) minimally trained and often don't have much experience in cloud. Having someone on staff that truly understands what your unique system and processes and can articulate and document how it is (or is not) operating securely is a better use of money. Spend the $50K on actual security (training, code reviews, red team exercises, learning about TTPs and allocating time in the dev and QA cycles for these considerations).

As others have said above, the compliance part will be a by-product and will essentially fall in place modulo some extra documentation effort (which can be heavily borrowed from templates).

Vanta and StrikeGraph etc no doubt will make it more convenient to follow best practices and scaffold your continuous monitoring, but I see it as a nice to have, not a must have.
Just because they're unrelated to software does not mean that everyone will understand. I can't really tell you what makes them hard for people, I can only guess.

One guess is that there's the mental effort in keeping track of these threads (even when they're literally right in front of you in the interface.

Maybe it's the fact that they're just so used to the whole email chain with 15 levels of quoting old emails that is so common in many companies. Many many people are mentally immobile and unprepared to switch to anything else, once they're used to something. Lifelong learning is not something that is common in every job, like it is in software development.

Again you can't really ask me because I find threading totally awesome.
Some strategies:

Make reputation scores the result of some sort of eigendecomposition-based algorithm (similar to PageRank) where the initial state vector is based on the people you trust. That way, you’ll only give credence to a bot to whatever degree you (indirectly) trust the bot.

Implement Sybil resistance with a combination of verifiable cost and blacklisting. Make it cost real verifiable resources to create an identity (hashcash or Bitcoin burning or something) and then have a system for blacklisting fake IDs.
It probably won't be sold using large distributors in the USA, and Apple won't have a legal case in China.

In a way, the USA brought this upon themselves. Global intellectual property rights are prerequisite for international trade in services. But they also require international concorde on what they are.

America has shot itself in the foot by diverging from international standards of copyright and intellectual property. And it's really myopic: for example, Disney will marginally increase the value of their IP holdings by lobbying for a perpetual license to Mickey Mouse; but it will also preclude Disney from ever trading their IP on equal terms with China.
Spent a career and my health working for nonprofts, mostly as sysadmin but anything with electrons was my job. If someone asked me about it, and I could keep the fountain of bitterness corked, I'd say do these things for the reward you find in them, and expect no other. No one else will value your work.
How to Use ScrollView in SwiftUI
I see that you have not been paying attention.
Do you think that doesn't happen already?
Well in Pakistan the do that with Pilots without a license ;) But beeing Cern your Data Scientist is probably a Particle-physicist or a Scientific-Programmer, and so on...
Absolutely true, thanks for sharing
How to Build a Flying Car
Matrix is merely federated, right? Why is it unlikely that a situation like email or the Internet will emerge, where the network still ends up massively centralized because that's just more convenient?
Smallest H.264 encoder in 30 LOC
There is no tldr. It's full of information about avionics and control systems. There are descriptions of flight sim procedures. It's an interesting article to be consumed whole.
Show HN: FocusLite, website blocker to change habits
One thing that I think will always give Signal and WhatsApp an edge over something like Matrix is that it's simply tied to a phone number. You don't "make an account" and have to memorize a password or anything, it just falls into place like any other texting app. The barrier to entry is about as close to frictionless as possible.
that's my point. The reviewer or the book writer are doing it wrong.
Some of us in androidland continue to buy phones specifically because the headphone jack offers a quality of life improvement more than whatever other features are offered in place of the jack.
What Is Accounting? and Who Uses Its Data?
Can you name anything that should have been fixed in Signal Server before April? Probably not, but this doesn't look very good https://github.com/signalapp/Signal-Server/graphs/code-frequ...
Looking briefly at ebay, the 5500 XT goes for around 250-300 USD, while the WX2100 goes for around 50-70 USD.

And the 5500 XT has a TDP of 130 watts, vs 25 watts for the WX2100. The WX2100 is also smaller, and doesn't require additional power from the PSU, running entirely off the PCIe slot power.

Not that I'm saying it's great for gaming. But I'm running it on a IBM POWER processor which can't really play x86 games anyway, just open-source and java games (it can tank minecraft at 4k pretty nicely). It lacks an on-board accelerated GPU too, so going without isn't really an option.

I agree almost everyone should probably just get a better gaming card, but for the price this thing runs a 4k monitor great, has good video en/decoders, and a cool blue exterior ;)
Historians having to tape together records that Trump tore up
Azure UI, Flows almost everything feels half baked. They have this weird segue like UX in some places where trying to go back to a previous screen feels like moving a big picture around, it annoys me so much, The best thing that we found with Azure was using Azure AD, works as advertised and the SSO integration was smooth.

I still prefer AWS services like S3 because they're predictable and I've yet to run into an issue which AWS support wasn't able to solve.
While I understand the value of technological boondoggle -- sometimes there IS a pony in there somewhere -- SLS is just way too far over the line. Knife this baby and destroy the tooling that made it possible, so it never rises from its grave.
WhatsApp's founders were also "thoughtful", going as far as making Facebook promise to not do bad things with it (though we all know how this went).

This "thoughtfulness" is meaningless in the best of worlds when money (and duties regarding their investors/shareholders) is involved but even more so when it comes from some Silicon Valley tech-bros that would be the first to jump on the opportunity to sell out to Facebook or its future equivalent (remember that FB's reputation wasn't as bad when the WhatsApp takeover occurred).
If everything revolves around people I give authority to (my "friends") then any attempt to game my feed is going to result in a swift defriend. Problem solved.
What's untrue about that? There haven't been any commits to Signal-Server for almost a year.

https://github.com/signalapp/Signal-Server
I tried this on an airgapped machine that hasn't had any updates for a while and indeed was able to escalate.

I cannot reproduce this on my main machine.

Huh. This isn't good.
Would iPhone users be worse off if they gained the ability to use multiple different app stores?
I'm not worried about people that I moved to signal "grumbling" about being moved again to Matrix. If the Signal move was successful it should build confidence in future moves.

The killer app for Matrix for most people won't be ability to run your own home server, but the easy generalization of Matrix to things like Reddit/HN with good integration with 1-1 chat someday will be. Also organizational usage. That of course is way cooler than Signal "not being facebook". So biding our time is fine.

When the time does come, we should probably campaign for HN to be officially bridged with Matrix too :D.
The stdlib is the best for clarity. But there are some excellent examples of how to structure projects depending on what you're trying to build. Mat Ryer gave an excellent talk on writing HTTP Services. If you want a good example on how to write distributed systems then Hashicorps' projects are more or less gorgeous.

https://medium.com/@matryer/how-i-write-go-http-services-aft...

https://github.com/hashicorp
Because heavy allegation require heavy evidence, not lies about something unfounded.
Interesting! Thanks for the links.
Should work out of the box in current GNOME, assuming that the hardware side is properly supported.
Which is more or less verbatim addressed in the article...

"While that is somewhat true — at least by the metric of “secure messengers your granny can use”, there are some promising alternatives who are especially focused on decentralizing E2EE communications.

Nobody's saying there's a better alternative already, which seems to be your main gripe. The point is that Signal's model is still imperfect, and it's worth improving upon.

>If we could do better, we would have done better by now.

To claim this regarding tech, of all fields? I seriously can't imagine what would have to happen to make me think that everything has already been invented, and what we've got now is the best we'll ever get.
It wasn’t free in the beginning but it was cheaper to send a picture message from it than from MMS
> She had over 20 minutes of knocking and a few phone calls in that period.

So what? If somebody is knocking on my door, in the middle of the night, claiming to be a police officer, then making phone calls to verify that is 100% reasonable. If I had just been fired for politically motivated reasons, then making phone calls to alert the media when your home is being raided is 100% reasonable.

> They’ll most likely even find it boring and start skipping ahead to more knocking without a response.

Police are allowed to be bored. Police are allowed to sit outside a house and wait. It does them no harm, and does not justify them using additional force when serving the warrant.
This is a well known practice and recent trend actually (Redis, Mongo, Confluent, ES...the list goes on).
You choose a license that is restricting the usage of the software for certain class of users, whether that is cloud providers, SaaS services, your direct competitor, based on review or what not. By OSI definition this is not any longer open source software, but source available. There is a simpler way too: just pick a business unfriendly license and sell exceptions that is the dual licensing too. Check licensezero for how to automate this.
> make desks out of doors

This is such a stupid idea. At some point it would make sense to start making your own optimally designed desks.
If you need a lot of features, essentially: no.
There's nothing inherent about this to Matrix, I don't believe.
If each person controls the authority they provide to others (via friending, upvotes, etc) then the system can't be mass gamed, which is enough to deter most bad behavior.
Moxie forbids you from distributing branded builds of the Signal app, and if you rebrand he forbids you from using the official Open Whisper servers. Because his servers don’t federate, that means that users of Signal forks cannot talk to Signal users. This is a truly genius move. No fork of Signal4 to date has ever gained any traction, and never will, because you can’t talk to any Signal users with them. In fact, there are no third-party applications which can interact with Signal users in any way. Moxie can write as many blog posts which appeal to wispy ideals and “moving ecosystems” as he wants5, but those are all really convenient excuses for an argument which allows him to design systems which serve his own interests
Google-Chrome-stable on Ubuntu on AWS Lambda (no headless)
On the public repo, there have been no changes since April 2020

https://github.com/signalapp/Signal-Server

If you go here https://github.com/signalapp you can see there were changes 8 hours ago.

So yes no public changes have been pushed, but changes are happening. It is fair to ask what changes are being pushed given their push for privacy.

How much do you want to trust here?
Haha, I love the angry honesty in this post. That's exactly how I feel. I think it's possible that we can get the UX right for a chat app based on a decentralized protocol such as Matrix some time in the future, but that's just not the case today.

And today, I'd rather have everyone using Signal instead of WhatsApp. Yes, Signal might go evil in the future, but we'll deal with it then. In the meantime let's improve our decentralized chat systems. And as this current period shows, it's absolutely possible for a lot of people to quickly switch from one social network to another.
> For those that don't get it, CPUs can only have so many USB-c ports wired up

I don't get it. Why? And how many is "so many"?