skysight-inc/HackerNews huggingface dataset:
> Signal can't possibly read the data.

They literally can. If you can brute force a 4 digit pin, you can access any of the data protected by a 4 digit pin.
Some pins are longer, but it's notable that even after a lot of backlash they continue to push for "pins" and not "passwords" knowing that many will continue to use a simple four digit number.

> You can prove it to yourself. Go take one of Signal's servers and try to find someone else's data there. You won't.

um... what?

> Why would Signal update their privacy policy

To accurately reflect the data they collect and how it is used? So that they don't lie to their users by making claims that are demonstrably false? To notify whistleblowers and activists that their information and the information of those who they are in contact with could be discovered by state actors who can force Signal to give them access? There's three good reasons right there.

I'm sorry you're so upset by this. I know the reality is uncomfortable but that doesn't make it "fear mongering". I honestly wish it wasn't true. I wish they weren't collecting user data, I wish they were doing more to secure what they do collect, and most of all I wish they were honest and forthcoming about what they are doing, but wishes can't change what is. I hope that regardless of if you use Signal or not, you'll try to accept facts even when they aren't easy to accept.
https://en.wikipedia.org/wiki/Great_Oxidation_Event

This is what I am talking about. This perhaps predates even symbiogenesis or perhaps drove it. Anaerobic lineages died out in the oxygen rich environment that the first forms of photosynthetic life created. Cellular respiration using oxygen, as animals do, probably evolved after the atmosphere was already oxygen rich. There is a huge fitness advantage if you cannot make use of light energy, but can absorb cells that can and maintain them as photosynthetic eukaryotes do today through symbiosis of the cyanobacteria that became cloroplasts.

What I like about this example are the parallels to modern times. The great oxidation event was an extinction event brought on not by external factors, but by a life form producing gas that changes the composition of the atmosphere and leads to dramatic effects across the planet. Not unlike us humans today with our CO2 production.
I've seen this so much regarding covid-19 in Australia, especially at the start. Everyone I know complained bitterly at the restrictions we had in Sydney, even when they weren't that strict, saying "but only 5 people have died" or whatever. I'd say "Yeah, because what we're doing is working. Look at Italy, or the UK, or France, or the USA".

Interestingly, there was a clear divide between people(like me) who had family & friends overseas, and worried about them, and people(like my in-laws) who didn't.

Eventually we had to stop discussing it because my in-laws refused to consider anything happening outside of Australia as relevant input.
I think my highest-upvoted comment on HN is actually me ranting about how much I hate open offices (specifically me complaining about my coworkers around the World Cup).

I really haven't changed my opinion on this; do I sometimes miss hanging around coworkers in person? Sure, I have some good memories with them, but I very much do not miss open offices. If I had a guarantee of a private office, I'd realistically consider going back to in-person work, but it's basically off the table until then.
Would you be surprised if I told you that laptops have ports that allow for external devices like a display/keyboard/mouse.

Would it also surprise you that people would prefer a device that they can be used anywhere, rather than a fixed location.

The only way you could not get this transition is if you've never had to go anywhere outside your home.
Take it up with 1484 AD:

https://en.wiktionary.org/wiki/learnings
A Labor History of “Automobilization”
Many assumptions in your statement. You probably can't evaluate your productivity by yourself and record profits come at specific context, specific time and based on a historic inertia and multi-year strategy.

This is not about fighting any tyranny, this is about running companies, and the same way there are costs associated to work in an office for you, there are costs associated with employees working remotely (and not only economic), but you don't see them.
I was introduced to Scrum at 2 companies that didn't use Scrum this way, and am currently at a company that uses it exactly as you describe. It was a shock and it's a real pressure cooker.
I don't think we really know how to learn code generation techniques and prove them correct, yet. That would be, in general, a really neat and useful trick.
I could only find a way to get the single-line clock display in the top-left of my lockscreen instead of the centre on Android 12. Have yet to fart around on Android 13 with it.
I thought deno was supposed to take node’s crown first?
I left the US when Covid struck. No way was I sitting around there during all of this.

I took a 50% pay cut to move back to my home country, while producing the same output (and value)... the company directly benefited from that.

Now, if my company forced me back into an office I'd say no. I'd be on the market only for a remote role, still at a steep discount on US engineers.
Why wouldn't a smart company take that offer?

WFH is not going away, but I suspect the FAANG will move away from it and the startups will capture the opportunity.
If a person works best in this fashion, who are you to say it is unacceptable?
> No one in their right mind would run RHEL on a desktop.

Err.... yes we do? It's a development base I know isn't going to change for a long time, and I can always flatpak whatever applications I need. Hell, now that RHEL 9 includes pipewire I put it on my DAW/DJ laptop.
Agreed. This would make a wonderful follow up post!
> Has there been even one "High value target apprehended because Signal" headline?

There have been a few "high value target apprehended because AN0M" headlines, and if you keep an eye out for it way more headlines/articles where you go "Yeah, that's totally another AN0M bust they just haven't publicly attributed it".

I also suspect (but have nothing more than suspicion to go on here) that companies like NSO can probably exploit phones deeply enough that they can exfiltrate screenshots of Signal. But that they do so at such high prices that it is rarely used and even more rarely hinted at publicly.
You and NorwegianDude wrote the same thing.

>can't risk paying for it yourself.

is intended to mean

>can’t afford for themselves.
I mean you can, but you won’t collect wealth.
My team sometimes just hangs out in zoom, not talking. It's better than an open office since it's opt in.
there is no blockchain involved at all
> It’s easier to take a brainstorming walk

And since your chat program of choice now shows you as inactive/away for that 20min brainstorming walk session, manager sees it as you not working or being productive. Better make that time up!
> It's clear that monkeypox is spreading into the mainstream population

My understanding was that 97% of positive cases were in men who have sex with men, but with the huge caveat that only MSM were being widely tested. Have you seen more comprehensive testing data recently?
> I am not aware of a rasterizer that can operate directly with quaternions, nor a way to apply perspective or orthographic projections to them.

This reminds me of something (seen here) that I thought somewhat interesting.

Orthographic projects of cones an n-dimensional euclidean space can be used to generate (n - 1)-dimensional voronoi diagrams.

The author of the page that I looked at hadn't generalised to weighted diagrams, but that's trivially implementable by altering the gradients of the cones.

The dimensionality issue is significantly nastier - with higher dimensional forms lacking GPU support, so the page only covered 2D voronois.

It seemed like the idea could make for an interesting voxel engine, if 4D depth clipping were a possibility.
I’m doing my best! I’m in a very hybrid environment right now. But even people with a lot of experience find it hard. The O’Reiley book “Discussing Design” (strong recommend, it’s a good book) is about design critique, and it spends some time on how doing critique in hybrid/remote environments is hard. Sometimes things are just… more difficult, and it’s not trivially solvable.
From the comment I'm replying to:

> You can already see it with several countries' response to covid.

Perhaps the commenter was going for something else, but at least where I'm at we've had two straight years of people insisting they are muzzles, an infringement on our god-given rights, and the beginning of a slippery slope to tyranny. Perhaps the commenter meant something else, but since they didn't spell out what specifically about the "response to Covid" they intended to solve with a mail-order rocket launcher of all things, I was left to interpret for myself.
This is based on a permissioned threshold network, so as long as there are never a threshold number of nodes that are malicious and as long as there is a threshold number of nodes that continue to operate, the network's liveness and security is guaranteed. Using Bitcoin as a cryptographic reference clock has been proposed in the past, but the good way of doing it is relying also on SNARKs and isn't really that practical from what I can tell: https://link.springer.com/content/pdf/10.1007/s10623-018-046...
Nice .. theres supposed to be Fall covid wave.

https://www.publichealth.columbia.edu/public-health-now/news...
Yeah, we invented them for much the same reason as minimum wages and environmental law.

You shouldn't be surprised when you specifically go out of your way to find the cheapest factory to avoid paying non-slave wages that ignores what little laws for protection of workers and nearby residents that china has that they also ignore your spec.
So this sort of bleeds in to the Init Wars, but there's a lot of back and forth about whether LSB flopped or was deliberately strangled by a particular player in the Linux ecosystem.
You did not answer #1, do you believe the right to bear nuclear arms should be infringed? Can you answer?

Yes this is a gotcha question, which is the point, the strict reading of the second amendment says "Arms" the whole point is a logical exercise in whether that literally means all arms or if it is in fact not an unlimited right to all arms.

Making an amendment for every new form of arm would be a colossal waste of time if we can just agree that the second amendment is not an unlimited right as almost everyone understands it to be including conservative Supreme Court justices. This is actually settled case law and is "legal" your assertion that it is not legal is a farce so #2 is a non-issue except in an extremists mind.
Sources of resilience operate on three different timescales. The first is foresight. The ability to use feedforward to predict potential problems and avoid them. The second is coping. The ability to stop a bad thing from getting worse. The third is recovery. The ability to recover to a normal state once disaster has struck.

You need all three.
I'm only an occasional reddit user so have not looked for such clients yet my guess is most heavy users are already using such tricks as it's unbearable to put up with the magnitude of advertising on reddit

Note to reddit: rethink your advertising strategy as it's unforgiving to be pummeled by ads incessantly
Design work needs a whiteboard but no electronic tools come close.
I didn't even know Mailchimp supported transactional emails. I thought it was for newsletters and stuff.

It's kind of funny that Mailchimp treats a company as large as Digital Ocean as if they're a one person newsletter.
I am OK with this, I am sort of already doing this myself.

So what, if enough people quits, Apple will change course, otherwise, they can enforce it.
It’s fairly easy for most people to compare their own productivity before and after working from home. Mine is significantly greater. The number of hours I’ve spent working has drastically increased due to losing my 2 hour commute, and the focus I’ve been able to achieve at home is like nothing I’ve ever seen at an office.
> This is about fighting back to the tyranny of upper management

hardware engineering requires shared access to tens of millions of dollars of shared equipment.

disclaimer: ex Apple hardware engineer who used tens of millions of dollars of equipment.
Hmm. Well the OP did say "unpopular" -But, "rest of us" suggests you think I'm in a camp of 1. I assure you a lot of people worldwide accept constraint on their freedom of speech, for social gain. Would I want to have my social credit measured by an app? Nope. Not even close. But, asked about it, most shrug.

Plus, the misunderstood bit. I mean I get you know this, but do you think people actually know their 1st amendment rights? Like, its about specific things, not all things, and no, you (nor Trump) do not have an axiomatic right to say anything you like on Twitter, because "freedom of speech" (hint: Twitter is not a commons, or public space, or bound by laws in Congress)

Do you think "free speech" is going to save the defendents in the Dominion Voting case, Specifically Fox? Remember, the fine point here is "misunderstood" not "is important" -I think the libel laws may save Fox, but it won't be Free speech, it will be Libel laws. I kind of hope they lose because even if $1b is an over estimate, they trashed a corporate entity for political gain, by lying. Thats really bad. They could do it tomorrow to anyone else. Thats bully pulpit bad.
Firewalls are only necessary for OSes that open ports without good reasons and without good controls. In other words, your reaction is justified if you think Windows is normal and an example of how things should be.

The rest of the world, though, knows that you don't just randomly open ports without good reason and without ways to turn off services.
I was actually just trying to make a (poor attempt at a) joke. Honestly, I don't really know, or care, how Signal works.

I have no respect or interest in using any service which requires a cellphone to use it by fiat.

I don't really have any great concern about the government requesting my information, not because I "don't have anything to hide" or "because I'm too boring to care about" but simply because I don't care if they do. They will do what they will do. I will do what I will do. It's immaterial for me to worry and fret over the actions of someone else. Governments are simply a form of authority which protect those who pay up, and harm those who don't. It's neither my protector or my enemy, it's just a thing that demands money from me from time to time.

As far as secure communications are concerned, if someone is truly concerned about such things, the only reliable method I'm aware of is a one-time pad. [1] For most, such a system would be far too bulky and cumbersome to bother with, meaning that the communication itself is, in actuality, not worth securing to the highest degree. This, in turn, makes the thousands of digital alternatives "good enough" for all but nation-state threat actors. [2]

[1] https://en.wikipedia.org/wiki/One-time_pad

[2] https://nordvpn.com/blog/nation-state-threat-actors/
I think that depends on the team. When I was there I didn't work on a lot of "classified" stuff, so spontaneous conversations weren't too uncommon, at least in the NY office.
Tim Cook need to get beers with Nick Bloom.
with difficulty, and not that well. for example, firefox binaries require gtk built with support for X, despite only actually using wayland at runtime if configured. the reason why people generally don't complain about it is because if you have this sort of weird configuration, you can usually compile firefox yourself, or have it compiled by your distro. with binary-only releases, all complaints (IMO justifiably) go to the proprietary software vendors.
We made a contact manager for iPhone. We don't plan to market it until we understand better what we are doing.

https://apps.apple.com/gb/app/belua/id1638189843
It's actually the opposite, we are at an all time high for young people living with their parents, for longer.

Approximately 50 percent of young adults 18 - 29 live with their family now[0].

Initially that was thought to be a transient externality of the pandemic but it seems to be sticking[1] thanks to the outfall of the bull market crashing.

[0]https://www.pewresearch.org/fact-tank/2020/09/04/a-majority-...

[1]https://www.pewresearch.org/fact-tank/2022/07/20/young-adult...
Just adding an @ to the string match would make it a bit more robust. (Would still be vulnerable to jim@their.domain.my.domain, so add a $ on the end if it’s a regexp.)

But even with the most rudimentary web-dev languages you can replace the inner string match with a lowercase transform, split on @ and perform an exact string compare. Insanely simple stuff. Probably still a one-liner in any sane/productive framework.
Just because something has worked one way for ages doesn't mean it can't work another way. It really is a culture thing I think. If you've been working in an office your whole life and you are used to that then I can totally see it being difficult.

If you are a digital native whose social life has taken place largely online it is likely WFH is better.

In some ways the world/technology/culture has changed so much and so frequently over the last 40-50 years that each generation's lived experience growing up is markedly different than the last. In the totality of the human experience this is pretty rare. I think work is only going to become more age segregated over time due to cultural differences.
The article states going from 2 days a week to 3, yet most of the comments here are acting as if it’s going from 0 to 3. I don’t think this will make a substantial difference.
Beware, this attitude works while employees have relatively strong bargaining power. As tech layoffs accelerate, this bargaining power dynamic may change. Unless there’s strong unionization efforts on this basis, I suspect WFH is not long for this world in its current, widespread form.
>so you clipped it.

So what? You did say "few hours", right? I am only pointing out the ambiguity in your claims.

>there were several participants who never had detectable spike protein, even when they first checked on day 1 after vaccination.

Look that is fine. But saying "hours or days" is as good as saying we don't have a clue how long the thing lasts in the body. Because, we know that the spike protien itself has toxic effects.

Also I see that you ignored the bit about CDC modifying the statement about this. Not convenient for your narrative?
This is as daft as Googling "email" and expecting a de facto client. You're on HN, it's nerdville, expect more interest in the protocol than clients.

People search for "email clients. Try searching for "Matrix clients". Element is the best thus far, IMO.

"Widespread adoption" includes the EU's military, healthcare and government, so I wouldn't be so certain you'll end up being right. It's hit 60m publicly addressable accounts, which doesn't include any private servers or any kind of healthcare, gov or military: https://news.itsfoss.com/matrix-sixty-million-users/

EU is forcing interoperability standards. I have a gut feeling that you will look silly in five years time, but I'll buy you a very nice craft beer if I'm wrong. Hit me up on the bet in 5 years time: me@hammyhavoc.com

You were discussing "drop-in replacements", I gave you a drop-in replacement that still maintains interoperability with WhatsApp et al, which Signal does not. Classic shifting of the goalposts.
>Is this basically just putting someone on chain, presuming that there wont be a 51% attack

There is no chain or block creation. Also it's not a public permissionless network, so outside actors can't join for a sybil attack.

>I presume this timelock can be cracked early if I spend enough compute resources on it.

Sure like any cryptography, if you have more computing power than exists in the world

>Also I presume it doesn't work well for small time intervals (less than or equal to drand's block creation times)?

There is a dependence on transmitting shares between nodes in the network to gain a threshold number of share - right now each epoch is 30 seconds, but new networks could be created with down to ~1 second epochs
What's more surprising to me is that they haven't yet deleted the thread. This has happened many times in the past (customers complaining about widespread defects on Apple's support forum) and Apple usually deletes the threads or moderates them down enough to make it look plausibly deniable.

My guess is that the current class action will probably look unfavourably upon such an action given there are more eyeballs on the matter and people have probably already scraped it by this point.
Is there a country you would point to as a good model for free market healthcare? Because healthcare seems like a market prone to be abused by market forces because the demand for it is often inelastic.

For example, the free market price for insulin is basically infinite because type 1 diabetics need a constant supply of it or else they die. Judging by the price of insulin in the US compared to our peer nations, it seems like the US's problem is too free of a market rather than it being too restricted.
In my opinion, Valve+distros should fork glibc and do a glibc distribution that focuses in absolute stability.

Didn't glibc devs said that distros have the freedom to choose what to maintain to not break their applications? This would be just a collaboration between the distros to maintain the stability.
I feel like this is a really good point - Most people are likely pretty bad at measuring their productivity, and honestly my expectation is that (if present), the productivity impacts of long term WFH are likely to manifest in ways that aren't entirely obvious.

For example, it seems evident to me that there's going to be a lot less "cross pollination" (for lack of a better metaphor) between people in a WFH environment as opposed to an office. For those with plenty of experience, this will have a fairly minimal impact, but for anyone else I'm concerned about missing out on the little things that are seamlessly transferred in face-to-face interactions over time. That thing that takes you 30 minutes that can be resolved with a 5 minute chat with the guy who knows, etc. Things you won't even really think to ask about that don't get brought up.

Even less direct things as well - eg random new product ideas that come from a chat with a coworker, or improvements, anything like that. Those can all add up to improving products and productivity, and are difficult to measure the effect of.

All of this stuff is in the tail though, and we probably won't see the effects for years (and it'll be muddied by people who do genuinely work well in WFH environments too)
VC Funding to Black-Founded Startups Slows Dramatically as Investors Pull Back
I do think considering the average use case is paramount. That's why I think remote encrypted contacts storage should have never been implemented: most people won't choose strong passwords. Giving them the false notion that their sensitive stored data is cryptographically indecipherable is wrong.

As it stands now, people who create a Signal PIN aren't even warned about the security implications of using weak numeric PINs, which is among the worst of all possible worlds.

If this feature is critical, it should have been gated behind prominent passphrase entropy warnings, along with the data being put at risk [1], or it should have enforced actual strength requirements.

Signal is still better than most other messengers. I am mostly comparing it to its former self. And its former self worked flawlessly without needing to upload persisted contacts information.

1. https://github.com/signalapp/Signal-Android/blob/main/libsig...
0x80386 - 16 = 0x80376

:)