skysight-inc/HackerNews huggingface dataset:
> That is not a problem for open source that has been audited.

Big leap of faith. You probably won't need both hands to enumerate people capable of correctly audit a piece of modern crypto software in the hole world, and probably half of them work or have worked for governments. Even using those resources, one thing are obvious flaws, other are weakening of the robustness of the protocol in certain conditions. Even with your top 5 (first hand), no one would guarantee the protocol and implementation is free of backdoors.

> We also know why the US government supports Tor: It goes against geopolitical adversaries like Iran and Cuba by helping dissidents in their countries.

I'm not a tor expert by far, and even I know that if you have enough entry and exit nodes under your control, you can identify both source and target of traffic. It makes sense for the USA to use a communist/Iran(terrorists!) excuse to pursue that goal. So, it makes sense to create a layered secure communication channel that only you can reverse, and pitch it worldwide as a safe means of communication for "dissidents".
The original article goes into great detail as to why we're moving away from local vaults.

That being said, we are looking into gauging user interest in self-hosting. Please take a look at our survey [1] if you want to share your thoughts. Hope that helps!

[1] https://survey.1password.com/self-host/
Have a healthy ecosystem of investigative journalists who use encourage critical thinking in their readers by showing evidence of such misinformation.
Well they did win. They beat the U.S. just as they beat others. We spent too much money and time. 20 years and a trillion dollars. Iraq was able to form a government. The Afghani people just didn’t have the ability to do it with our help (or we failed at helping enough). We lost. Time to go home.
Comments moved to ongoing related thread:

Senators propose antitrust legislation to promote app store competition - https://news.ycombinator.com/item?id=28144867
I wonder how the Cydia lawsuit against Apple is going.

I'm not a lawyer so I don't know, if this law passes before the conclusion of the lawsuit, is Cydia out of luck?
Surely that is the entire point?
Imposter syndrome is the gluten allergy or OCD self-diagnosis of the tech world. People should just get over themselves. You have a skillset that commands a high salary? Congrats. Get to work.
Cheating in video games is a growing industry. But if they push boundaries and are a US or EU company they will be sued to splinters for it.
So I should measure geriatric developers against junior developers just to be fair?
I think having two app stores being installed would (or should) satisfy this.

I think the intention is to prevent Apple saying "either you use our store exclusively, or you opt out of all our apps".

Google lets you install a browser from one store, a game from another, and everything else from the official Play Store.

Google could also easily implement category switching. The URL navigation structure of android could just append ?cat=gaming.
> I have filed many bug reports for paid software over the years. The bugs were fixed exactly 0% of the time

In my experience, the big difference is buying software (good luck with getting Microsoft fixing a bug in office or windows; no one even tries) vs buying a service. If we bought specialized custom software support for some expensive hardware, those companies jump when there is a question.
That’s reasonable logic but for me with a company subscription and previously having been an individual purchaser with my backup in iCloud rather than on 1 pass servers, it doesn’t really tilt the balance - I also hate electron with a passion and will be looking to stay on 7 for as long as possible with a high likelihood of shifting to a different provider due to the forced shift to cloud storage after this.
In the US, your W-2 employer has to withhold your taxes on behalf of the state so they have to have your legal residence. I suppose you could file a tax return where you later claim that you weren't really a NY resident but a CT resident, but then you're going to have to file taxes with CT and pay out of pocket with penalties (since you were supposed to have them withheld from your paycheck) and NY will probably dispute your return, as they have documented proof of you being a NY resident. Especially if your income is high, which will be the case for many Google employees, it's a bad idea to have your residency in that dispute state where multiple states can claim you as a resident.
I basically stuck with it, because I liked the people I worked with, and they gave me enough free time to do the stuff I enjoy doing, while paying me...OK, for the stuff I don't enjoy doing.

What I really enjoy doing, is writing code for free. The kind of code that I write, on my own, is precisely the kind of code that most modern corporations don't want.

I take Quality very seriously, and that's actually an impediment, in today's coding culture.
I've said it before: I wish I was actually good enough to have ok imposter syndrome.
It’s also always fun to accidentally zoom in on the entire UI of the Electron app, pushing all the toolbars off-screen. This has happened to me multiple times in nearly every Electron app I’ve used, with VS Code being the most common.
I think one way or another, we have to accept less material wealth, which is going to be a hard sell in any case.

My idea is to trade less stuff for more economic security.
If I understand correctly, this is similar to Google's CitC (clients in the cloud) [1].

According to the article, Codespaces supports non-IDE users by allowing ssh. CitC supports non-IDE users with a network file system. This seems preferable - the editor runs on your local machine with low latency, but you still run tests on the cloud machine.

I wonder if Github supports this workflow, e.g. by configuring sshd to allow sshfs/sftp access.

[1] https://cacm.acm.org/magazines/2016/7/204032-why-google-stor...
Very good uwu
Global warming is about average temperature increases. Individual one-off high temperatures only gives ammunition to climate deniers when they see a record low temperature somewhere in the world.

It does more harm than good to raise the climate change alarm for these events, and requires some statistical gymnastics to conclusively tie it to global warming.

The real alarms are more than sufficient.
There are also what I think are reasonable models for providing people with ownership of an app but also being able to charge upgrade fees (for example, TablePlus, Dash, Sublime etc)
Most peoples biggest asset is their home which just costs more in property taxes and doesn't provide much benefit because they still need a place to live, preferably near their workplace.
We need to be crystal clear that the coalition fighting apple on this (match.com and friends) are EXACTLY the type of people you DO NOT want on your platform.

"FTC Sues Owner of Online Dating Service Match.com for Using Fake Love Interest Ads To Trick Consumers into Paying for a Match.com Subscription"

DA claim in CA "Match used actions that included misleading billing characterizations, nonconspicuous auto renewal disclosures, elimination of required cancellation disclosures, and imposition of a long and tedious cancellation process,” the district attorney said.

Do I think match and all the other scam billers / loot box mechanic providers will be able to get consumers into their impossible to cancel flows with $1 and $0 offers (with hidden huge renewal fees and early cancel requirements)? Sure.

Note that Apple's policies cost developers like you LOTS more than just their cut.

Their billing flow includes same font size trial renewal details (no * or hidden renewal rules).

Their flows include easy cancellations WITH REMINDERS ahead of time on subscriptions (no call to cancel).

Their flows include prompts to cancel subscriptions on app deletion (when I deleted the few paid apps I have where you subscribe on provider site they NEVER once emailed me to give me a quick link to cancel related subscription).

So you really could offer the $0 and $1 offers and even MAKE MORE MONEY.

Do I think this would destroy a lot of the "don't think about it" apple platform vibe? Also for sure. And so as a consumer I'm glad apple keeps these folks in line and off their platform. I can just imagine the spamming pop-ups to try to get folks into these crap billing flows already.

Do devs not pay attention to per user cash money revenue? Apple is building a platform that should be MORE lucrative, not less by making it safe to spend money on. Are devs really making more per user on Android? I find that hard to believe. The same sideloading epic likes on android means tons of stuff can be pirated etc.
The hits just keep coming. First I have to move off the apple ecosystem, now I have to move off of 1password.
Bridging the Gap Between Developers and End Users
While I also recognize the valid argument that this is deceptive, I have to agree with you:

1. In no world would I ever believe that a cold email was significantly personalized/targeted, except if the overall content were highly specific to me. This might be wrong a good portion of the time, but it is what it is.

2. Even if I were 100% unaware of the existence of AI/ML, a video wouldn't change my mind about #1. I would be more inclined to think that they'd recorded themselves rattling off a list of customer names and then stitched that into the main video, or just rerecorded the same video hundreds or thousands of times. The latter would take some dedication, and be a pretty big waste of time, but it wouldn't convince me that the sender knows or cares more about me personally.

3. Including a video message in an email in itself is uncommon in and of itself, personalized or not. If the technique increases conversions, this alone could be a sufficient explanation. To the extent that the personalization does further increase conversions, it's equally valid to hypothesize that a novel tech demo catches their attention as it is to hypothesize that people are being deceived. Personally, I would lean toward the former.

As an aside, even in the promotional video on Windsor's home page, the videos are kind of uncanny valley. May not be a big deal if the recipient doesn't think too much of one word being slightly garbled because the remaining speech sounds natural, but I'd be concerned about it completely butchering some names (particularly longer ones).
> I thought you were looking for a way to teach others without using partisan examples/current events because that would imply taking a stand on the issue. And, if you took a stand that might turn people off.

These sorts of ideas are precisely what I was inquiring about. You seem to be implying that any claim that's involved in partisan politics is either impervious to critical thinking, or that we ought to avoid thinking about such a claim critically because it might upset some people. In either case, that would be the extreme opposite of what any class that teaches critical thinking ought to be teaching.
>second-guessing whether you're good enough to deserve your position.

Often with an element of "what will they do when they realise".

I've come to understand, though, that I'd been worrying about the answer to the wrong problem. I know I'm not as good as I could (maybe should) be, and I know that for any given metric I have peers who can and do outperform me. But the word "expectations" is a loaded one: when suffering from imposter syndrome it's important to stop worrying about what expectations I have for myself and instead look at the expectations set in the specification for my role.

I also remember that the company spends quite a lot of money on me every single month. So when they tell me that they're really happy with that arrangement and that they believe that I'm meeting their expectations, that helps me to set aside my expectations.

Conversely, if your manager tells you that there's a problem and you're not meeting their expectations, they are definitely correct that there's a problem. They might not be correct in their diagnosis, but you can't simply ignore the issue.
Fair enough... but for those that don't their recommendation engine is garbage.
OUTED!
> They prefer that their online activity is lost amidst the noise.

Their activity. Not yours.
https://www.theguardian.com/world/2013/oct/04/tor-attacks-ns...
https://edri.org/our-work/secret-documents-reveal-bnd-attack...
I wonder if this could create circular downtime: if Codespaces goes down, how can Github engineers work to restore service to Codespaces?

The tool to fix the broken tool is the broken tool.
The metaverse is a dystopian nightmare – let’s build a better reality
If their concerns are validated, are they still "conspiracy theorists"?

I mean, this reads a bit like "don't kill rabbits or else those people who say you kill rabbits will be further validated with their conspiracy theories!"
> Signal uses a form of Diffie-Hellman to generate a common key. That exchange has to be signed. Without this signature you would have no way to know where a message came from, just like in the unsigned PGP case. Without this signature you would also be subject to MITM attacks (unlike the PGP case).

In what sense do you believe X3DH is "signed" ? Is this going to be more handwaving where you treat authenticated as "signed" just because that's how you'd do it in PGP ?

The recipient of a first X3DH message does know for sure it is from the sender, because they're the only one that could have performed the steps needed without the recipient's private keys.

But if (like the recipient) you know their private keys, you can just forge messages that are entirely plausible.

Consider an initial message purportedly from Alice to Bob but let's suppose we're Bob and we're forging it. How do we go about this?

We need to do three DH calculations. First one, is Alice's long term Identity crossed with Bob's prekey. Alice would do this by knowing her Identity private key, but we know Bob's private prekey, so we use that with Alice's public long term Identity.

Second one, Alice's ephemeral crossed with Bob's long term Identity. Alice would do that using her ephemeral private key, but we know Bob's private Identity key, so we use that with any key X.

Third one, Alice's ephemeral crossed with Bob's prekey. Alice would use her ephemeral private key again, but we know Bob's private prekey, so we use that with key X again.

We now have a secret key we can use to encrypt our forged message "from Alice" and we write key X into the headers where Alice would have written her public ephemeral. Our message is indistinguishable from genuine. Only Bob (who forged it) and Alice (who knows she didn't send it) know this is a forgery and neither of them can prove it.

> In the Signal case you would have to claim that your trusted correspondent forged a message from you. That wouldn't really work.

If the Secret Police are content that you are a Blasphemer or you plotted against the Emperor or whatever without proof, nothing would "really work", regardless of the technology used or not used. That's not interesting here because we can't do anything about it. If the Star Chamber will have you executed based on hearsay, that's just as true for literal whispers as for a Signal message.

In contrast PGP provides them with unshakeable proof even though it didn't need to.
Them HN commenting standards…
There is also Dota Plus, with a monthly subscription, developed by the same game developer, basically the OP idea more or less
No, biometric prints are used by every major social media company.
Lets invest $1B into a program to objectively measure which people are least vulnerable to logical fallacies, examine how they cultivated that skill, and build a curriculum for use in every public classroom.
Data Protection Authority
I generally agree. MacOS appears to be stagnating in its capabilities, even if there is a constant churn of UI and features. The Human Interface Guidelines-based approach of old seems to have been blurred thanks to the iOS mashups we are now seeing, and native apps that used to feel substantially better aren't really better enough anymore.

However, for me the big issue with Electron or other web-tech apps is the performance - they all feel incredibly slow and laggy, engorge themselves on my machine's resources, and generally slow down substantially the longer they have been open.

Considering my main gripe about macOS when compared to say, Windows, has been the general performance of the UI and apps, this isn't a particularly welcome phenomenon.
Yes, because NYT and WaPo did so well with the Trump-Russian collusion stuff, right? ... oh...
I think almost all my neighbors are 'millionaires' but 90% have median incomes for the city. Their net worth is just their house.
A semi-common workflow for me is to just copy my entire file into a Sublime buffer, make edits there, and paste it back. Everything is so much snappier.
Hi. I'm a feature developer for 1Password, and I want to clarify a few things. I've already posted this elsewhere, but I've seen multiple threads spreading misinformation that our technical decisions are being driven by VC funding. This could not be farther from the truth. We have been working on these changes long before we received any form of outside investments.

Over the past few years, we've been working on consolidating 1Password's business logic into a single Rust-powered core that could be shared across all our apps. This has many advantages: feature consistency across platforms, faster development cycles, and better security. When building the front-end for the desktop platforms that would take advantage of this new core, Electron suited us perfectly, since we could write our UI code once and make it consistent across Linux, Windows, and Mac. We actually did build a native Mac app initially alongside the cross-platform Electron app, but we eventually decided that having two separate versions of the macOS app (one in Electron, one in SwiftUI) would cause a lot of needless development churn and hassle for both customers and our support team.

I can understand your frustrations about Electron and our subscription-based model, but I hope you find my explanation reasonable. Please stop spreading misinformation.
The idea of:

> For example, we have an "Early Ganker" tag for the gamers who tend to gang in the early game. [...] We provide these tags based on only publicly accessible data on the official game publisher API. For example, any gamer can search for the opponents’ game data and conduct a similar analysis.

also seems questionable to me. Is it common/practical to do this kind of thing in these games? It seems to me that, while it might be technically possible to get the info, it should be impractical for a human to actually do the analysis, in the timespan allowed by a pregame lobby, right?

I guess it could also depend on how much preprocessing they do... hypothetically we could imagine a game where every match is recorded and saved to a public user account, and a "coaching" AI system that extracts users tags by watching these offline, and then just queries them at match time. This analysis would pretty clearly be information that players wouldn't normally be privy to, despite being available through legitimate means.
Same story for me. I switched to the KeePassXC ecosystem eventually as a result — it's open source, has compatible clients for just about everything, and has one-click import for 1Password vaults.
It will be a while before the entire earthbound population is using cryptocurrencies, but I think it was hyperbole and that we should not take it seriously. /s
I wonder if they've considered just allowing people to say what they want. Maybe they could create some form of legal provision, perhaps even an amendment to our constitution, which would allow for freedom of speech. Thoughts on this idea?

Plato's Five Regimes - we're basically skipping straight to the end.

There is no going back once we are there, so I hope you have all your ducks in a row and have enjoyed everything you wanted to before we arrive. Once were there, it's over; for everyone.
Hand them off to the FBI and then what?
>It's not about privacy but governmental control and freedom.

You say that like its a separate concept from privacy and anonymity. Its not. The government is (should be) just a non-profit corporation. Other than that, those concepts are fundamentally equivalent.
tl;dr - after guy dies in 9/11, family and girlfriend grieve in different ways over the last 20 years.
Back in the day, during the dorm wars, we would all have syslogd writing to terms to keep track on our nefarious neighbors in realtime. Echoing ANSI escape codes strategically was a good way to erase those tracks.
How does

> For example, we have an "Early Ganker" tag for the gamers who tend to gang in the early game. [...] We provide these tags based on only publicly accessible data on the official game publisher API. For example, any gamer can search for the opponents’ game data and conduct a similar analysis.

work? Is this the sort of analysis that is humanly possible to perform before a match?
You said "When the death rate is normalized for population age distribution his "excess" shrinks to near 0". Then you said that baby boomers were getting old and the "excess death calculation... doesn't account for this natural spike in death". I cannot possibly read this in any other way than a claim that nearly all Covid-19 deaths are old age deaths.

I doubt I'll find this actuarial data, since it doesn't exist. Your proposition is ridiculous on its face - a cursory glance at the CDC graph is enough to see that. The swing in death rate is enormous and lines up perfectly with the Covid-19 waves. Actuarial data, no matter how comprehensive, doesn't say things like "40% more deaths in April". Look at the CDC graph. Look at it.

Actually, it's so ridiculous I have a hard time believing that you really believe it. Between the way you deny claiming things we can all see you claimed, and the way you've created that account just for this thread, I really think you must be trolling here.
Yes but they can creatively say it applies to a whole manner of tenuous things. A sneaky newspaper owner can’t claim copyright on anything other than what they own
The anecdote at the start of the story seems off-target since that scam-artist wasn't an "imposter" of the sort discussed in "imposter syndrome".

To compare:

* Imposter-syndrome is when someone worries that they're incompetent/unworthy/whatever, when others probably wouldn't agree. They feel like others would look down upon them if (what they believe to be) the truth of their incompetence/unworthiness were to be revealed.

* An actual imposter would be someone actually incompetent. For example, someone who got hired to a role that they're actually bad at, but their incompetence hasn't been realized yet.

* The scam-artist discussed at the start of the story seems to have been more malicious than incompetent. While this would make them an "imposter" in a sense, it's not really what "imposter syndrome" is about.
The posts I was replying to talked about 'keeping in the brain-attic tools which may help do work' and 'real, tangible, applicable skills'. That's a different definition than what you're proposing.

Different people will have different definitions of useful. And different people will weigh usefulness differently in determining value.

My point is that I don't need to find some arbitrary definition of 'useful' to cover something in order to find it valuable.
For much the same reason I don't want an hour-long commute: I don't want to waste the time. I enjoy taking a pleasant 5-minute (or 20-minute) walk regularly, but I'd much rather spend 90 minutes grocery shopping a month rather than 10-20 minutes every day or every few days.
Imagine if you'd done the same with Dogecoin...