skysight-inc/HackerNews huggingface dataset:
Let's recap what is happening here, because we are going a bit off-track with this discussion.

My original post was about the fact that I am tired of media outlets making borderline denigratory titles all the time about Telegram.

You replied, stating that I claimed that "Telegram is secure", which I did not do. Then, I tried to clarify my original post.

Then you claim that these vulnerabilities show that "Telegram authors don't have the know-how on how to implement secure protocols". I asked you to back your claim, because I don't see how the discovery of a bunch of "almost impossible to carry out in practice" vulnerabilities might imply that Telegram's engineers are incompetent.

To which you reply that "Telegram isn't end-to-end encrypted by default". Now, unless I am missing something obvious here, you just stated a fact that has no relevance whatsoever with your former claim. The claim to prove was "Trivial vulnerabilities discovered --> Telegram authors are incompetent". Now, if you changed your mind, and want instead to argue that they are incompetent because they did not implement e2ee by default, it's a totally different discussion and has no relation at all with my original post, nor with the article we are commenting (imo).

> Finally, I'm a bit puzzled, you seem to be "open minded" yet your post didn't even touch on this massive issue of failure to provide E2EE for groups, desktop clients, or anything by default. Were you unaware of it?

I am aware of how Telegram works. But why do you suggest I should have talked about this? It is totally unrelated to my original point.

> Or would you argue the endless list of competition that actually does E2EE properly (Signal, Wire, Threema, Element...), over-do security?

I never stated such a thing.

> You're also not even remotely interested in agreeing with the academic community

It's not that I am not interested in agreeing with them. I am openly criticizing the behaviour of some of its members. It's a different thing. But also this is a different discussion, and I should not have included that comment, maybe.

> "no breaches have been made public, therefore it must be secure".

I did not claim this.

> How familiar are you with the field of computer security, do you know how security is quantified?

Please do not patronize me.

Finally, I am not interested in having a discussion that is unrelated with the topic of the article, or my original comment about it (because it would be too long and tiring). However, if you want to know my opinion on all this related issues that you brought up, you can read what I wrote about it here: https://germano.dev/whatsapp-vs-telegram/ (even though this does not talk about Signal or other open source e2ee messengers).
TIL: Horace Dediu coined The Networking Paradox, a claim that no network of any kind has ever made a profit. Hysterical if true.

Among other gems in this interview with Amir Haleem, CEO of Helium. A startup which claims to be "the world's first peer-to-peer wireless network".

http://5by5.tv/criticalpath/265

https://www.helium.com/about

--

For the pedants, like a 1998 flashback, The Web is not the Internet. Different levels of the stack.

Also, the anti-Web was called Xanadu.

Like mediums before it, The Web is an ad-funded outrage machine, now amplified by algorithmic feedback loops. Responsible for annihilating truth, weaponizing doubts, history's largest transfer of wealth, and the murder of millions (so far).

We can never know if the Xanadu path would have been better, preferable. Or if it was even feasible. But we do know that its systems of payments and copyright would have mooted the most toxic aspects of The Web.

https://en.wikipedia.org/wiki/Project_Xanadu
Your solution doesn't address at the problem the article was describing. The stated problem is the "censorship" by tech companies. Allowing posting via API rather than just a user interface does nothing to solve that. If it doesn't solve the problem, why are we doing it again?

Your solution creates the new problem that normal users don't understand what access they're granting to an API. Every API you expose is a tool for an unscrupulous app to exfiltrate data about you or your contacts. It's an avenue for sending spam. It's an avenue for monetizing your account's reputation by taking actions such as liking content, following/subscribing channels to boost their engagement numbers, scraping content that your contacts had not shared publicly.

It makes abuse-fighting much harder, since you can no longer trust the application to collect any kind of bot detection signals, and since huge tons of user interactions will be getting artifically concentrated at a few API gateways.

And finally, while nobody has a right to their business model, it's maybe useful to consider what the implications would be. It basically makes ad-supported services impossible, since somebody will inevitably implement an ad-free client for the service. (Or even worse, a client that just shows their own ads instead). Do you think we're really willing to go back to a world where the only free (as in money) services are ones that are being subsidized?
I'm not sure it's a good idea either, for the reason you say. Actually it's a long-established principle that lists don't make great HN posts (https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...). So we may well end up doing what you suggest—we'll have to see.

However, it would still leave open the problem of editing work, which is currently unsolved. I'm hoping that the Meet the Batch threads will involve much less of that per startup. Letting the startups present themselves unfiltered to HN is a really bad idea, because most founders don't understand the culture here and naively step into HN the same way they would, say, ProductHunt—or worse, repeat their Demo Day pitch. This is a very efficient way to get yourself flagged and flamed, and also is a risk for YC (imagine "I don't understand how YC can possibly fund such #@!&*" comments x 1000).

We explain the difference clearly enough at https://news.ycombinator.com/yli.html, but an explanation isn't enough. It needs collaborative work in practice. Personally I think not sounding like an ad and speaking as a person rather than a brand is good practice throughout life, not just Launch HNs, but I'll settle for getting Launch HNs right; that's turns out to be hard enough.
I probably model it off myself too much.

I know Postgresql very well... But I rarely use psql. I still use pgadmin.

That said, I never load CSVs into Postgresql. I still tried very hard to load CSVs into Excel.

My personal opinion is that people have their preferences. If they prefer command line tool, Superintendent is probably not for them.
No issues on my iPad you might want to take it to Apple.
So there’s no way at all, to your mind, to distinguish millions of shitposts about “The covid vaccine causes infertility, and contains 5G chips” from, for instance, genuine risk information?

We truly are swimming in a world in which nothing is true. Or you are anyway.
I think we agree that when rent exceeds the cost of a mortgage one of the possible root causes is the cost of capital is high for the renter. Whether the cost of capital should be the same across different populations (in this example - the renter and investment firms) is another question.
Regarding your reply for 2: I completely agree, however the immutable packages do nothing to protect my personal files. Any modern Desktop OS should recognize the need to distrust applications by default.

That said, Haiku isn't really any worse in this regard than currently existing desktop OS.s
The argument that those acronyms are a requirement for the understanding of the ethics of autonomous killer robots is a very difficult one.
> Far, far more deadly and dangerous "conspiracy theories" existed before the internet and caused actual deaths of sitting politicians.

Care to name an example?
It won't make an impact unless you go top-down. I addressed this in my other comment. It's like expecting meaningful change by having people spend less water before companies spend less water. It's not impactful or meaningful.
Aquatic plants and algae are accounting for many times more usage . . . co2 dissolves into fresh and saline waters worldwide
Some ideas for playing a notification sound in a script runtime:

Shell

# system beep; also flashes the screen if you have that enabled in accessibility
osascript -e 'beep'

# play the sound file given by the file system the path
afplay /System/Library/Sounds/Hero.aiff

AppleScript

beep

do shell script "afplay '/System/Library/Sounds/Hero.aiff'"

JXA + Cocoa API

$.NSBeep()

// search for and play a sound file; the lookup path is defined by macOS
$.NSSound.soundNamed('Glass').play
In which data structures? For example in CL hashes use multiple returns so in 99% of cases you can just not care, and when you do care about the difference you just check the second return value.
Interesting, I thought there might be something built-in for randomness. Great animations!
There's an extra period at the end of the URL. Works if you take it off. Alternately, here's a DOI permalink: https://doi.org/10.1038/nature22030
Here are the current number of deaths per million from COVID for the G7 nations:

Japan - 119

Canada - 696

Germany - 1,093

France - 1,704

US - 1,876

UK - 1,886

Italy - 2,118

Judged by this metric, Canada came second among the major first-world democracies. We did well. To be sure, there were missteps. We should have done better. But we could also have done a whole lot worse.
Truth is, as an open source project, Godot would need people interested in multiplayer to implement that stuff. :(
Qbix: Open-Source Social Operating System for the Web
It didn't require a scientific paper to create the mascot but you seem to be arguing it requires a "good paper" that's been validated to rename it? You are demonstrating a status quo cognitive bias.
Can you provid examples of this? De we have examples of public health being leveraged for anything other than public health?
just print more 0% perpetual debt, i mean money. print more money, that will solve the problem of establishing arms length trust between people.

it always does.
You can simply see the history of algorithms over the last two decades. Look at things like RC4, which is notoriously hard to use safely. It had a history of many issues and was ultimately abandoned even though you could theoretically use it securely to this day. It is situational, but with cryptography, algorithms are deprecated from an abundance of caution in many cases. It’s a little different with a protocol and not a foundational algorithm, though. We can often correct a protocol in a safe way compared to an algorithm that is often simply deprecated. Still the sentiment is mostly correct, but perhaps a bit overstated.
It amazes me what my 2 year old manages to absorb and understand. Feels like there's a big disparity in their ability to observe and absorb compared to being able to articulate.
Aren't property taxes a form of a land value tax? You could argue that property taxes aren't high enough - or priced below market value - to incentivize efficient resource allocation.
I'm really surprised and impressed by some of the huge changes this language family has passed through. From mzscheme to Racket, then to Racket on Chez Scheme — that these changes didn't kill it is a testament to the care with which the implementation was done and the transitions were planned.
I don’t mind changing names if it’s based on evidence, not just because someone has some crusade.

Should Aztecas Stadium change their name? What about the MN Vikings, NY Yankees, TX Cowboys? Kaiser Chiefs of ZA, Ebusa dwarfs of ZA?
BoGL Board Game Language
Yeah, didn't think that'd be a popular idea. LOL
Perhaps the author was only referring to their own brain
You may be interested in mold (by the author of LLVM's lld).

It's a very comfortable order of magnitude faster than gold, and starting to become pretty stable.

https://github.com/rui314/mold
Try any veg. indian dish and you'll be surprised how delicious vegetables can be prepared.
In a lot of cases, parameters like this have a fairly broad plateau where they provide almost optimal performance, and then drop off sharply when you get too far away. MAX_THRESH is 4, but I'm guessing that you'd get less than a factor of 2 difference in performance for any value from 4 to 32 on modern hardware, and above that you'd start seeing a quadratic slowdown, and maybe you'd see a factor of 2 or 3 slowdown if you set it to 1. If you decide to do the experiment, I'm interested in hearing your results.
It's also an option, but HN follows a power law (doesn't everything?) and the front page sits at the top of the power-law pole. Also, the current idea is also an experiment in solving the editing problem, which I described above and at https://news.ycombinator.com/item?id=27877627, which a separate section of top-level posts would not do.
police could have re-sold the booty rigs for millions
who is getting job offers while not looking for jobs....
… Electron
I just checked and I still have my lifetime membership.
Perhaps our generation must suffer during an evolutionarily difficult time so that we do not end up in 1984?
Gmail has been sending every email from to ubuntu-security-announce@lists.ubuntu.com to spam for me for the last several months. Anyone else? I've been marking every single one of them as 'Not Spam', but to no avail.

(I do realize I can create an explicit filter rule to avoid this, but at this point I just want to see how it plays out.)
well, probably makes more sense to say

"Unvaccinatrd Americans still not concerned about covid19"
Is your sentiment not a little unreasonable? You seem to disagree with the godot maintainers on where the effort should be placed, but, this is as open source a project as they get. Improving one aspect doesn't belittle all others, nor does it really hinder it.

As unsurprising as it might be, they are improving godot in the ways that they can, because they want it to be better. This is unrelated to the existence of UE.

I'm sure the godot community wouldn't mind if you shared your experience on game networking, and possibly contributed in that regard. I myself would appreciate it, as with you, I've found it to be limited. The underlying components and language features are there, but how to tie it together with redundancy and prediction, and a bunch of other tricks of the trade, is not trivial.
I believe it's Rewrite it in Rust
Bitcoin ‘To Overtake’ The Dollar By 2050 And Soar To $66,000 By The End Of 2021
Or for the free open source equivalent, I like and use Stats:

https://github.com/exelban/stats

(Though I really wish it had a more Googleable name...)
And Trump didn't get involved in Syria? The 59 Tomahawk cruise missiles launched on 04/07/2017 don't constitute involvement to you?
>Even in normal groups the default is that any user can add someone so the new user would need to get the decryption key on invite.

Signal has group invite links.

>Then you have bots that need to be able to read messages so they need the key too.

Signal has bots.

>Then you have cloud search

What you have is search, and Signal has search too, for the local message log. Telegram's log search lacks partial and wildcard searches. It's extremely inferior. Also, Telegram's cloud search gets extremely slow if you try to find anything older than few months.

>You may not like it but its clear and easy to understand.

It doesn't explain why they can't implement E2EE for normal group chats from technical PoV. Neither does Durov's blog post.

> But what user care about is how fast it is

What's the difference? Give me numbers

>how much data it uses

What's the difference?

>how much it drains the battery

What's the difference?

How about some nice facts and sources?

I think it's cute you try to label every secure feature an anti-feature, without understanding security is the fundamental attribute of every feature. You wouldn't use a feature that leaked the content to your worst enemy, why would you upload it to server that when hacked, allows your worst enemy to read it?

>I use telegram almost exclusively for public stuff or semi-public stuff.

Sure, if you personally have nothing to hide, you're welcome to use Palringo (that AFAIK still pushes everything over HTTP) for all I care. Just don't enforce your privileged threat model to anyone else.

>Its absurd and nonsensical

You're in a conversation about security of Telegram. If you don't give a shit about security, go, enjoy your life. Why did you bother come here to brag about your privileged life that doesn't have to be concerned with security?

> It would be like making twitter completely e2ee

That's bullshit. Twitter doesn't e.g. have groups that would enjoy expectation of privacy. Twitter is also not a messaging app, it's a social media, moreover, it's a micro-blogging site. It's content is intended to be public. Sure, the direct messages should probably use opportunistic E2EE, but its not exactly advocating itself as "heavily encrypted", it doesn't IMO have to be.

>You have the option for e2ee one-on-one chats if you actually need it.

No I want E2EE for my group of 10 close friends. I don't want E2EE for 2000 member super groups. And the problem literally is, I don't have the option for E2EE 1:1 chats, they're N O T available for Linux desktop I use. We don't actually have the option. What Telegram has, is a sad excuse of E2EE 1:1 chats on limited platforms, which only functions in online debates. Telegram does NOT have E2EE in practice. If it had, I'd be having my chats on Telegram instead of Signal, and wouldn't have to raise awareness on the issue.
Blam, that's the podcast I was thinking about, but wow, great digging!
Why is collecting all this information suddenly OK as long as it's "only" used for Advertising purposes?

Is there a reason we also also forbid Google and FB from gathering this information? Or are their business models too important, and we can't decrease shareholder value?

Or since "the users" click-agreed the business model is absolved and it's okay! What could go wrong, ever?

Or, a modest proposal: we could agree that even corporations who sell HW/SW for personal devices shouldn't be allowed to collect this data, period. No one needs to mine our GPS history, messages, search, etc. Even if it means those who do it today makes less money.

Ads are fine, but maybe we agree it's fine if ads aren't quite as targeted, either.

I'm wondering if we might be better off with "punch the monkey" than hyper tracking and targeting.
>It won't change everything but I think it will become important. General purpose computing will continue it's dying path and in 10-15 years

I swear these kind of statements makes me feel old.

People in tech has been saying this for a very long time, and it's never been true, the PC market will only die if innovation and usability is dead.

What has happened is that we've spaced out our usage of tech with specialized tech, a good recent example is how say for instance smart watches have replaced the heart beat sensor and as a notifier /clock tool which the smartphone used to be.
Notwithstanding that it's not really "full self-driving" and at this point should be shut down by the FTC, is it even worth it? 200$/month is a lot of money and you might be better served with uber/taxis/bus for the most part.
I’ve seen Tesseract pop up on almost all archive.org files. Never got around to look into it further, thanks for the link!
So if someone comes up with a paper that says the opposite (that using native American names) has a proven (by the a paid study) positive impact, since it's low stakes, we should go ahead and name teams after native American tribes?
Do you hold an oracle which tells you which studies will not replicate, or is there some particular trait of the study that provably doesn't replicate?
I would remove Python from this list. Getting Python services that I don't directly work on running on my dev machine is the only case where Docker has been a lifesaver for me. Not having to deal with Python's insane amount of environment dependency (even with virtualenvs and all that business) is worth the bulk of running a Linux VM on my Mac. If I didn't know better, I'd say Python was the entire reason technologies like Docker were invented in the first place.
Intel Core processors are now being smuggled to China
I really don't like the idea of HN being bifurcated in this way ("punters"). I think it's bad for community and community is incomparably more important than juicing HN like a lemon [1]. Therefore my long-term intention is very much to figure out a way to have all this not be restricted just to YC startups—and to make this a win-win by having it lead to YC getting to fund more startups too.

[1] https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...
So you’ve identified a motive. But I haven’t heard of any suspects. Plenty of reporters covered the motive aspect. But unless there’s a lead on a suspect there’s not much point to rehashing the motive story.
One reason could be potential exposure to legal issues if someone does something illegal on the Internet connection registered in my name.

Now, if I lived in a halfway sane society, meaning one where the worst case scenario would be police knocking at my door and asking some questions or even serving a search warrant, that might be a risk I'd be willing to take.

Unfortunately I live in a completely deranged one, where the more likely scenario would be flashbangs through my windows, a battering ram through my front door, and full auto rifles in my face.

No, thank you.
OP here. It is not that automatic. We simply import every column as TEXT, which seems to work well enough :)
Also, surprisingly often, doing something reasonably workable but far from optimal, and then throwing generic compression algorithms at it, can work very nearly as well as carefully doing the precisely optimal thing. SNMP uses BER, which has lots of carefully thought out compact representations for data types, and COAP has CBOR, and in both cases you can usually do as well or better on space by running a simple ASCII syntax through LZW. Usually not that much slower, either.
The latest Macs already have this, at least some of them do. The audio output gets distorted the more CPU load is going on. Really fun on video calls.
Is it so unbelievable though?
I think that this is almost a common-sense finding for anyone who has ever had money problems.
New Law Will Help Chinese Government Stockpile Zero-Days
How about we spend less time debating which horrifically powerful weapons to make or not, and more time on how to foster a society that doesn't have any use for them?
I grew up in a fairly poor home and it was similar. My parents sometimes acknowledged that we were poor, but they otherwise seemed to pretend it wasn’t true. Asking for something that cost money was practically punishable - instead of saying no, we still can’t afford that, it was construed as rude and selfish.

This kind of sensitivity and denial around financial difficulties is common but very unhealthy for both the kids and the parent.

Kids won’t hate you for having money troubles. They won’t be annoyed that you can’t buy them {cool thing} if it’s clear why you can’t. If they are, it’s another learning opportunity.

I’m doing okay now, but I share my financial mistakes with my kids when it’s relevant and try to keep conversations open about how these matters impact them now and later in their lives.

My hope is that as they age they’ll see me as a resource for help, someone to guide them through things, to recognize that their finances aren’t something to be afraid of or keep secret.

In my parent’s defence, they wanted to hide our financial situation because it scared them and they didn’t want it to scare and unnerve their kids. The trouble is though that like you said, the kids will know anyway. The lack of insight into what’s happening only makes them feel more insecure and normalizes hiding upsetting things from people you love. Good intentions only get you so far, I guess.