skysight-inc/HackerNews huggingface dataset:
They've just posted an update saying that the issue was fixed on July 21. It's certainly good that it's fixed...

But that's still over 7 months before it was fixed, including a 2 month period where people were still bumping the issue asking for help with no response from maintainers (afterwards, the issue went quiet until ~2 weeks ago). And there was at least one other issue on the same problem a few months later that received no response [1].

I understand the team is probably understaffed given the vast number of open issues (1300+) they have, many with no response, and I can sympathize with the challenges of being a small team developing an app used by millions, but they probably need to figure out a better way to triage...

[1] https://github.com/signalapp/Signal-Android/issues/11137
Quill? Why would we want to use Quill that needs all of our private data?

Have you not seen over at Apple App Store what they’re sucking off of your phone from your Quill app?
Dealing with thousands of messages in a folder somewhere is not really problem for mail servers.
Not really no, this would break just about every software workflow I use. My music production workflow relies on being able to arbitrarily send inputs and outputs between any other piece of software I want.

There isn't really any software I use that can exist in its own sandboxed bubble separate from everything else.

I've experienced this several times trying Android ports of Linux software I use, they're usually lacking features or configuration folders are inaccessible because of Android's sandboxing and permissions.

The last thing I want is for my desktop to be that way too.
And to verify, the "mistake" is seeming to not actually care that this was a serious bug for 7 months (cough while they launched MobileCoin)? That is an attitude issue--and one endemic to Signal (which, most charitably, simply doesn't have the resources to sufficiently care sometimes)--not a "mistake" I expect to be easily rectified.

(And as I mention on a nearby post: you don't have to fix it to widely disclose it; like, you don't work in the dark to fix an issue like this for seven months as, even if it were your "top priority": you quickly time box it and then disclose the issue so people can mitigate their exposure or help better crowdsource finding the information you need to fix the issue.)
AWS offers a bunch of different queue-like services: SQS, Kinesis, MSK, Amazon MQ (supporting both ActiveMQ and RabbitMQ).

I don't think it's possible to build a queue-as-a-service that is any simpler than SQS, so there is literally no better name than SQS. (also, the suggested name "Amazon Queue" is pretty similar to the name "Amazon MQ" which does in fact exist)

It's a queue. It supports enqueue and dequeue. And that's pretty much it. It's a Simple Queue Service.
Personally I want to have secure communications with _all_ my friends and family, not just the paranoid tech nerds and people I can pressure into it.

If this is what the masses want, give it to them. Encryption only works if people use it.
I’m convinced that the solution is a system that uses a long tubular plastic liner that continuously renews the surface of the bowl between uses and simultaneously traps the session products in a sealed bag via thermo sealing.

Why do it this way? Uses no water while not allowing the accumulation of smelly material. But why seal the product into bags?

The waste needs to be disinfected before it can be disposed of in a casual manner. And ideally the smell should be neutralized. I think the best way to do this is by heating it up. Incinerating your poop every time you poop is too energy intensive. Instead, you can save up the bags and then burn them in large batches. Or send them off to be processed elsewhere.
Which this bug was left open for months while users were experiencing this privacy issue.

How can I recommend a chat app that does this and claim they are a privacy based app? and also does not respond to urgent bugs in this manner?
Some better footage:

https://twitter.com/dexcash/status/1419080071621619715?s=21
https://twitter.com/arnejrgen/status/1419248599624568832?s=2...
The only possible competitor (from a network effect perspective) is Matrix/Element.

The UX is completely unpolished and at least 5 years behind Signal.
They said “warehousing industry”, and you looked up “warehouse worker”.

That’s probably the discrepancy, fwiw.
Fixed in 5.17, though I only have 5.16.1 available to me despite the fact it’s supposed to be available from a few days ago.
They have to compete, but competition will almost certainly be lower across the board if people can't go to cram schools. It's not going to fix anything, sure, but it should help.
> "Effusively positive" sounds like it would be deliberately distorting reality in order to present a point. I'm sure there's plenty of appetite for accurate documentaries about Travelers.

One of the Assassin‘s Creed games has an exploration mode, and if you walk by one of the outdoor “classrooms” the narrator will explain that while they show boys and girls learning together, the reality was that only boys were present in the schools, and that the creators here specifically chose to show the way it “should have been“.

They spent some unknown amount of money on this major feature that toured all around their map, tons of real photos and documentary about how they captured the feel, interviews with historians… centering on historically accurate, but when it came to controlling their own wokeness for a second, they had to present the “effusively positive“.

I don’t care what they do, but it was an admission that they didn’t really care about nonfiction, and made me untrustful of the remaining content.
I think this is because of the massive pushback in recent decades to Milton Friedman's essay “The Social Responsibility of Business Is To Increase Its Profits,” where he put forth that the most net benefit would be provided to society if firms focused their efforts and resources onto their core competencies.

Now, people think that is distasteful and that businesses should be doing all kinds of things like charity work and soup kitchens and funding housing developments and schools and so on so forth. This is called "stakeholder capitalism". It produces the result you describe.
The market is simply too young compared to the "baseline," and he's only testing one ticker. This might make more sense, even with the limited age of data around today, if he took the 20 or so most prominent cryptocurrencies to have a better sample size, since they are all correlated anyways.

The progression of charts correlating with Benford is exactly what you would expect if the titles "NYSE, Berkshire Hathaway, Bitcoin" were replaced with "2800 tickers over 40 years, 1 ticker over 40 years, 1 ticker over 7 years."
STTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTatic Hands. Lookup
Bug report is eight months old now. I don't think they're freaking out much.
To see it in action, Ary Borenszweig (the creator of Crystal) presented his prototype at the Crystal 1.0 Conference:

Full talk: https://www.youtube.com/watch?v=een_W1YEICw

REPL (starts at 1:06): https://youtu.be/een_W1YEICw?t=66
Pry-like debugger (starts at 9:36): https://youtu.be/een_W1YEICw?t=576
I think there's some confusion about how the sockets api works, let me see if I can clear this up.

Posix does not specify that network sockets should be accessed by file paths. It's possible to do so, but unspecified by the standard.

Sockets produced by socket(2) are regular old file descriptors, just as created by open(2) on a file path, or any other descriptor generating syscall like pipe(2) or epoll_create(2). There is no separate representation among any of these -- they are all just file descriptors. There are many, many ways to create descriptors and many aren't associated with a filesystem. There's no efficiency issue here, nor is there a divergence from a consistent pattern.

If you like, you can use fchmod(2) on a descriptor generated by socket(2) and change its permissions. You can track it by its inode. It doesn't matter that the descriptor is not linked to a filesystem, any more than for a similar descriptor created by pipe(2). They all have the same functionality and fit within the same consistent metaphor. When you run grep | grep, the pipe descriptor has permissions, mtime, ctime, atime and the rest. Everything just works.

It's trivial to write a filesystem to expose descriptors, in fact /proc does this already for all descriptor tables across all processes. There's no rebuilding of any wheel - the point of commonality is the "struct file" in linux/fs.h.

There's no such thing as a "raw handle" here, btw. That phrase has no meaning.
It also sounded like a very difficult bug to track down, even as a top priority. Requiring a combination of certain settings plus a rare database ID intersection.

Combine that with not logging user behaviour heavily for privacies sake makes this a very tough one to replicate.

All of which was addressed in the bug report.

The realities of software development on a large scale with a privacy focus are sometimes hard to grasp. Although I do admit 7 months for a production release is quite a long time, even factoring in the pandemic and mobile app Play Store release cycles.
Tobacco firm Philip Morris calls for ban on cigarettes within decade
Perhaps that number is for "rides" and not "people".
I'm not saying you should recommend Signal, just pointing out that "there are audits, why does it have such bugs" doesn't tell the entire story.
Oh communication is so important, isn't it? There's even an old Slim Gaillard song about that I used to lindy hop to https://www.youtube.com/watch?v=teaxWYRH9A4

What I've read, Kiesenhofer would have preferred to race the time trial instead of the the road race, she even told that the austrian press just before the race. A breakout gives you the advantage of riding your own pace at our optimal and constant power level; something a you can't in a breakout group where the the lead does cycle and goes from hundrets watts to almost zero and back again. I guess it's partly due to her not being a professional (anymore), thus not having to deal with team trainings and training mostly on her own? Not sure on that.
For me some of the problem is how hard it is to find an alternate opinion from another source. Once you click on a shared link, you are down a rabbit hole. Anyone can stick anything up on a blogpost or whatever, but whilst old information (news) sources were supposed to at least provide some manner of breadth in coverage. In theory anyway.

Twisting facts is a neat trick, but ensuring people never read anything else is the real magic here imo
For what it's worth, there's a very easy registry edit that can be done to restore this functionality, but it's annoying it's not built-in anymore.
From what I’ve heard from mental health professionals, in practice simply being able to answer some very basic questions (like “Are you hungry? If so, what should you do?”) with plausible answers (“I should eat”) is sufficient to pass the “gravely disabled” test.
Nothing stopping the elites from pumping out fake polls to keep us distracted from how bad things are getting.
I think this is actually art imitating science, but that's a quibble.

As for the rest, I heartily agree. I've been thinking about that here lately, how we watch movie fights and they are typically highly choreographed and often visually beautiful forms of dance that likely have nothing at all to do with what real violence looks like.

Not that I want to promote real violence, but I wonder what impact that has on human psychology and how unrealistic it makes some of our expectations when dealing with actual reality when it fails to match up to what we have fed our brains via various forms of media.
I do a similar (minor) hack in converting my unpleasant work commute to exercise by biking to work/the train station.

20 minutes a day of not very hard cycling provides a pretty decent base fitness. Or at least I like to think that.
A parasite he may be, but people can do a lot more harm as part of the economy than that.

It’s simply a question of leverage, even something as seemingly pleasant as Disney World causes significant direct and indirect ecological harm in ways a homeless person doesn’t. And frankly you can find plenty of far worse examples than Disney World.
As someone who has done both weight lifting and foundation work (for fun, not profit!), the beat down of concrete work is real.
Yeah seriously, I for one am gonna have to throw in my hat for scaling. Big pixel isn’t paying me off, I can just tell an absurd discrepancy in the realism of (lol, cartoonish in reality) graphical menus and fonts. Granted you can go too far
The pressure to vax plot is 1000x worse, celebrities, government people, online influencers...

People should make their own decision and not feel pressured either way
Ah, I replied to another comment along similar lines, so you are correct. Plucking a ripe tomato will most likely set of a little 'orgasm' in the plant, while eating a tomato will most likely set of a thundering earth shattering 'orgasm' in the tomato :)
Well yeah but it’s a bad example and is still annoying. I stopped reading it..
Like NJM commercials, they poke fun at jingles by having commercials with annoying jingles. It’s really not witty!
A VLAN (Virtualized [private] LAN) is a LAN all to yourself, on top of a real shared multitenant LAN, through the magic of virtualization.

So a VPC (Virtualized Private Cloud) is "a cloud" (e.g. the whole of AWS), all to yourself, on top of a real shared multitenant Cloud, through the magic of virtualization.

In both cases, the traffic going over the LAN or Cloud is isolated from other tenants by the virtualization mechanism, so you don't need to encrypt said traffic the way you would in an untrusted "just leasing several random VMs in separate racks in a colo and having them communicate over the colo's shared LAN" environment (which is what AWS's pre-VPC "Classic" EC2 environment was.)
Hi there, Signal-Android developer here. I updated the issue to reflect this, but this bug has been fixed. I was tracking it on a separate issue, and had forgotten to close this one.

We do, in fact, take issues like this very seriously. This bug was extraordinarily rare, and because we have no metrics/remote log collection, there was an initial period where we had to spend time adding logging and collecting user-submitted logs to try to track it down. As soon as we were able to pick up a scent, it was all we worked on, and we were able to get a fix out very quickly.
Sish: HTTP(s)/WS(S)/TCP Tunnels to localhost using only SSH
My point is what specific devil in the detail do you refer to beeing only present in defining good and bad without religion (or strong value system)
The place I go is a structured workout with row, bike, versaclimber, and strength stuff (free weights, push-ups, core). Agree that row and push-ups would be a great combo.
Did they kidnap foreigners to do research or translation?
The Big Brother one was jarring. Too much.
Find an exercise/activity that you enjoy or makes you feel good. Doesn't matter if it is weight lifting, road cycling, or dancing. Once you find it, just keep doing it.

If you get bored, try something else for a while. If that doesn't work, switch back.

Since no two people are the same, no exercise plan works for everyone. For me, weight lifting and technical mountain biking get me going and make me feel great. Tennis used to be a thing I lived for. Running and road cycling is a agony for me. Dancing is great. But I have friends who love to cycle 100 miles in a straight line. I guess there's some mental thing happening, but I just cannot do that.

An activity may really wear you out, but if you feel more energized the next day, then it's a good one for you. And if you start craving that feeling, then you know you found a good one.

Even within one type of exercise, there are many different approaches (which work better or worse depending on the person). Low rep, high weight is my thing. High rep, low weight (like road cycling) is a muscle burn and mind burn killer. So if you try something and it's not for you, make sure you try a variation on that before you decide the entire activity is bad.

Diet is important, but it can be easier to follow a good diet when you already feel better from the exercise. And you may find that you have more discipline after a good workout. On the contrary, a day which sucks and you can't get up and go to the gym is a day you're also likely to order pizza and beer for dinner.
The problem isn’t that people are wanting too much. It’s that getting on the property ladder at all, even a small condo in a metro where there are jobs, is becoming far, far more difficult than for previous generations.

And of course, if people need to work longer and harder to achieve what would've been considered fairly modest goals by (recent) previous generations in terms of housing, then they have less time and energy to devote to friendship and community.
So, did they disclose the issue? Were people using Signal warned somewhere that this was a known issue that they were hunting down? (I am guessing not as no one here has been like "oh yeah: everyone using Signal knew to be careful with this feature".) It being a difficult bug to fix doesn't mean that's your only recourse for something this serious.
import torch
x = torch.randn(4000, 4000, device='cuda:0')
y = torch.randn(4000, 4000, device='cuda:0')

import time
torch.cuda.synchronize()
t0 = time.perf_counter()
z = torch.zeros(4000, 4000, device='cuda:0')
for j in range(4000):
z += (x[:, j] * z[j, :]).relu()
torch.cuda.synchronize()
t1 = time.perf_counter()
print(t1-t0)

seem like 640ms-ish for me (on a rtx3090). How much faster is Julia, then? Is it double or single digit ms?

Of course, the backward will be more work because you need to recompute which bits were 0.

I can appreciate that Python is slow and that Julia has very nice properties dissolving the boundaries of operators that are awefully hard in PyTorch & Co, but this is one of these examples where the story seems rather flawed (you don't need the for loop over 64 billion elements, just over the 4000 j-coordinates, and the Python overhead here isn't too bad, either). As far as I can tell, the large overhead here is from materializing the intermediate results in global memory. Personally, I would hope that the fusers might be able to fuse in the not to far future, so the entire thing can run on the GPU in one kernel, but until then, if Julia can do that, it'll have a huge advantage here.

Shameless plug: In my courses about efficient PyTorch, I always give the rule of thumb "avoid operations on individual elements, but things operating on hundreds+ elements should be fine". And the reason isn't as much just "Python is slow" but the overhead of the tensor objects.
Back in the days when people could pay $$$ to change the voice of their cars GPS, the most popular soundpack in US was "the British butler".

On the other hand, "surfer dude" was pretty popular in Europe. Not sure how to interpret that one...
Which is why I said at worst. Please read.

Could you recommend a better chat app that is user friendly enough for regular people to use that is not Signal or WhatsApp and is cross platform?

Quill are at least working on E2E, not introducing a cryptocurrency like Signal and don't require your phone number.
Yup. Even educational videos like [1] are probably using audio compression so they don't show the real loudness.

Research [2] shows suppressed small arms are still well over 100dB (e.g. landing airplane loud) at peak impulse.

[1] https://youtu.be/1VWcGwPJQfc?t=30

[2] https://www.researchgate.net/profile/William-Murphy-18/publi...
CAPSlock
Bots that they know of.
Personally I realized during the Pandemic that a lot of the relationships I'd fostered over the course of my adult life were lead by a desperate desire for belonging rather than on sober considerations such as: do these people respect me at all?; do these people care about my inner life at all?; do these people share a desire for growth beyond that of our local maximums?; do these people have any ambition at all? - these were just drinking buddies at best.

I'd always had teachers in grammar and high school telling me directly or indirectly I was wasting my potential trying to be like the other kids but I only recently understand what they meant and what, more importantly, they saw that I didn't, but that's what a childhood of deep ostracizing both within and without one's family will do.

Much of this thought process has only been possible because I enrolled in therapy a few years before the pandemic. Prior to this I meandered around life with a desperate, pathetic cheerfulness that masked how alone I already was. Alone, not just on the basis of deep, meaningful companionship but that I hadn't at all cultivated being a friend and ally to myself, such that I allowed myself to take on friendships that were not good for my growth as person at all, rather caused me to regress to the same old childhood tropes and tactics time and time again, unable to address the real interpersonal complexity that requires a defined and resolved character to decide and navigate; I tried to be these other apparently successful types to have some social life rather saying NO to what I knew wasn't going to get me where I wanted to go and the kind of people I'd probably enjoy beyond inebriation and frat-level jokes.

What sucks though is that you spend so much time in these relationships you develop a sort of Stockholm Syndrome where the sense of "love" and "affinity" are really just "this is all I've ever known".

Rebuilding at a late age like myself is going to be tough, social media can be particular booby trap here I realize, but it seems necessary.
Even with dirty power, it’s a more efficient use of fuel all around to rely an 60% thermally efficient stationary plant instead of transporting a mobile ~35% efficient engine.
I despise most job boards I’ve seen because the search features are almost always trash.

For example, I might want to find a job as a developer, but be interested in working in a certain domain or technology. So I may search for “X developer”. Unfortunately most jobs boards I’ve used (notably LinkedIn’s) will simply ignore the search and just show me jobs related to either “developer” or X, the latter of which may start pulling random non-developer jobs depending on the term. None of them seem to support standard search engine operators as well.

Another problem, which is actually touched on in the article is keyword spam. Say I make a search for Y developer. Well there are always a massive amount of jobs that will match with something like this in the description:

Requirements

experience with a programming language like A, B, C, X, Y, Z

And of course the role has nothing to do with most of those languages but because they decided to spam the description with a uselessly generic phrase like that, it comes in the search and just adds even more noise I have to try and pick out.
The immense number of C bugs is not merely due to C's popularity. Other languages lead to less buggy and more secure code.

This is largely due to memory safety. However, immutability is also known to reduce bugs and be more secure (as many security related bugs are due to mutability). Lastly, superior concurrency constructs also have this bug-reducing effect.

That said I haven't looked into empirical studies. But I feel like it is just factually the case, at least for memory safety, that in most other languages you literally are unable to create entire classes of bugs that are possible in C. So just logically thinking about it, I don't even see why you'd need to see empirical studies. It should be quite obvious!

Although it'd be cool to see the empirical research too! Maybe someone else can reply with links to studies.