skysight-inc/HackerNews huggingface dataset:
> You have to keep in mind that to do this you'd have to blacklist every other server from federating, keep all rooms private and disable public room discovery completely.

Yup, if you want to run a Matrix server which doesn’t share data with any other server you just turn off federation; same as email. It’s trivial to do so.

> And it still wouldn't really be all that private, because matrix is public oriented protocol and nowhere on the main website do you see the word "privacy" in context of user privacy.

Nope. Matrix is for both private and public comms. For instance, right now the matrix.org homepage includes clips from the Synapse 1.65 blog post which celebrates hooking up private read receipts so you can disable read receipts from being seen by other users.

> You also cannot really delete users, nor force deletion of their messages from servers that you're federating with once the user uses the disable endpoint.

Obviously there is no guaranteed way to obligate a server you don’t control to delete your data. Prior to deactivating your account, you can ask servers to delete your messages. After account deletion, you don’t have a way to delete your messages… because you deleted the evidence that you created them when you deactivated your account.

> Also, matrix server specification is garbage, synapse is the only implementation that at least pretends to work reliably because of that, and it's maintained by a for-profit organization.

sigh. The spec is not garbage; Dendrite is perfectly usable (despite being beta), and I hear Conduit is usable too. Synapse is maintained by the Matrix.org Foundation C.I.C, which is a UK non-profit: https://matrix.org/foundation. Contributions come from all over the shop, including for-profits like Element.
Obviously not. A scheme like that would never stand up to scrutiny or an actual investigation.
The claim is wild because the german constitution does not encourage immigration.

It contains paragraphs that prohibit discrimination. It guarantees asylum for people that are prosecuted in their home country for political views [1]. There's also a paragraph that widens the definition of "German citizen" in the GG to those that were german citizens in 1937 or who lost their german citizenship due to the nazis. After the reunion some groups from russia emigrated to Germany (Russlanddeutsche) [2]. That is wildly different from wanting more immigration.

[1] there's a long laundry list of exceptions to that rule, for example you have to travel straight to germany without passing through a safe country. It's effectively void. See Art 16a https://www.gesetze-im-internet.de/gg/art_16a.html

[2] Article 116 https://www.gesetze-im-internet.de/gg/art_116.html
It's been over 10 years and we still don't have a decent usecase for blockchain outside of crypto.
That no longer a laudable goal; now we admire the safe middle of the herd. Don't be unique, don't be unusual, don't be noticed

Aren't TikTok and all other self-promotion channels not exactly about being noticed, being unique (or rather thinking you're unique) and so on?
> If you want to run unchecked third-party 1000+ line bash scripts on production appliances, by all means go right ahead.

Again, I have a better chance at reading all the code of dehydrated (which I have, in fact, done), then reading all of the Python code that certbot pulls in via dependencies on Ubuntu/Debian.
> Assume for sake of argument that it were possible to develop an encryption regime which protected bona fide users, but did not protect criminals. That would be a good thing. [...] The real issue is that you can't separate the two from each other - weakening encryption for criminals means weakening it for everyone.

Even if such a hypothetical encryption scheme was not intrinsically weaker, it still requires two very strong assumptions:

1. Not a single individual with legal access to the interception system will ever abuse it for their own purposes, or in exchange for a significant bribe or under the threat of blackmail from a powerful and wealthy malignant actor.

2. A future government (democratically elected or not) will never decide that currently legal behaviour is now a crime which warrants interception—say possession of drugs for personal use, "deviant" sex, unpatriotic discourse, etc.
> nowadays a terrorist attack can be coordinated fully remotely and anonymously.

Actually, Osama Bin Laden relied on trusted couriers; not phones, networks or encryption.
Hmm,

here is someone who would have loved E2E for his emails (and images in the cloud):

Google refuses to reinstate account after man took medical images of son’s groin
https://news.ycombinator.com/item?id=32560361

Given the tendency of large corporations to look into our private stuff, even on personal mobile devices (Hi Apple), encryption seems to be the only remedy. That is the reason why I store my (encrypted) notes with Joplin on my own server at Hetzner and it's the reason why I only buy smartphones which offer sd-card slots, so I can expand local storage instead of relying on someone's cloud storage.
So, in your described scenario, drones are functionally no different than a missile barrage, except slower, cheaper and maybe easier to deploy. So:

- Effective countermeasures already exists against this kind of threats, like CIWS.

- Carriers don't exists in a vacuum, there are a lot of other systems in a modern carrier group.

- Just like launching a missile barrage, deploying the tens/hundreds of thousands of drones is going to be quite the logistical achievement, especially bringing it in range of a modern carrier group, designed to project force against threats hundreds of kilometers away.

- Drones have significant range/projection issues. The Bayraktar, at $2M a piece, has ~300km of range and can only bear a very small payload designed to engage armored ground targets, nothing that would threaten carriers or destroyers, even deployed en masse.

- The bigger the range, the bigger the payload, the bigger the size/costs. The effectiveness of your drone swarm is always limited by this equation. Millions of small aliexpress drones bearing the equivalent of a hand grenade are not going to do anything against a carrier provided it can be deployed at all. You would need to be <10km away due to their range limitation and at this stage, there are already fighter jets and destroyers sitting on top of you.

- No single munition under the kiloton order of magnitude will sink an aircraft carrier. For a drone or anything under the scale of cruise missiles/MOAB, this means nuclear. Hand-grenade sized nuclear explosives in drone swarms? I wish! But to quote the fantastic game Highfleet, once you get the genie out, you cannot put it back in the bottle. If you plan to bring nuclear weapons to a war, everybody already has ICBMs.

tl;dr: Drones swarms don't disrupt the current status quo: Nothing except nuclear attacks or another modern carrier group will defeat a modern carrier group in a single engagement. The usefullness of drone swarms is not against modern carrier groups but small-scale asymmetrical engagements, such as the guerilla operations currently carried in Ukraine or in Syria, in which small drones are incredibly effective weapons. This is still a big deal, as it is the most likely form of conflict we're going to see in the rest of this century, not full-on peer-to-peer conflicts between superpowers.
Swift Sucks
This is something you should be discussing with your security provider and not asking on forums on the internet.
Oh no, I overread this, thanks for the hint. I don't know a lot about worker protection laws in Cyprus.
> You can still wipe the disk and install just whatever OS you want, right?

Then you basically give microsoft free money for windows license you don't use because the price includes windows license price.
Earlier discussion: https://news.ycombinator.com/item?id=21152542
The SMS/RCS/iMessage/blue bubble-green bubble debate is almost entirely exclusive to the strange market of the US.

Almost everywhere else in the world, users have simply adopted a variety of 3rd-party messaging apps that use the phone's Internet rather than GSM connection, like WhatsApp, Telegram, Messenger, Signal, WeChat, etc.

EDIT: While I understand the need for a 'universal E2EE messaging standard', we don't have one right now, and all three (SMS, RCS, iMessage) are poor stop-gaps. People need to send their texts, images, videos, and files to people without pain; that's all the average layperson cares about. What does fill this need are said 3rd-party apps, which claim to have E2EE messaging. Whether this is really true remains to be seen.
A starter repo for writing E2E tests based on Cucumber with Playwright
I hope there is an interoperable standard but it needs to be (a) end to end encrypted and (b) controlled by some standards organisation. RCS is neither.

And worst of all Google implemented encryption by layering it on top i.e. creating their own proprietary version.
I wonder if they're running Ubuntu on 32-bit hardware
Similar issues here, I had success with an archive link though:

https://archive.ph/nok4g
Why anybody might need to still HN accounts?
Sounds like the average politician.

I posit that people that rise to power and at the top of bureaucratic institutions are those diligent and stupid characters Kurt von Hammerstein-Equord was warning us about:

"I divide my officers into four groups. There are clever, diligent, stupid, and lazy officers. Usually two characteristics are combined. Some are clever and diligent — their place is the General Staff. The next lot are stupid and lazy — they make up 90 percent of every army and are suited to routine duties. Anyone who is both clever and lazy is qualified for the highest leadership duties, because he possesses the intellectual clarity and the composure necessary for difficult decisions. One must beware of anyone who is stupid and diligent — he must not be entrusted with any responsibility because he will always cause only mischief."
>"but because of a local population that has mostly no interest in family formation"

I am in Canada so do not know what the trends are in Europe but I can clearly see that having kids here is quickly becoming a financial burden many people can not afford. Part of it because people want higher living standard while the other is our fucking politicians creating such conditions.
Don't forget our prison camp in Rwanda!
We initially tried getting on-board the RCS train about 3 or 4 years ago, to be able to do "rich content delivery" to customers. Specifications and feature-sets were hazy and seemed to be poorly agreed upon, and service providers offering RCS termination to the mobile grid were few. Besides only Android having support for it, it turned out that in all of Europe we found just 4 cellular operators that supported it. Consequently the reach of RCS was extremely limited, so we abandoned the idea.

In the beginning of this year we had another look at the situation, and somewhat surprisingly there has been very little progress in terms of operator support. As we would say in Sweden: it appears to be moving slower than a snail on vacation.
Who ever need carrier based messaging in the modern world?
SMS moved to 2 factor mechanisms and other b2c needs.
I remember being in Tokyo station at rush hour and seeing a sea of beige/pastels and white shirts, with the odd pop of bright colour (usually another tourist) - exactly as you mentioned, but in the form of a microcosm.

I also remember noting that the effect of the homogeneity as being calming, generating serenity amidst what would otherwise be chaotic.

Perhaps the trend towards homogenous colours are communal hive-mind response to 21st Century overstimulation, noise pollution and ever increasing urban density - a desperate grasp for less stimulation in a world of endless beeping, flashing and ringing.
Oh ... today I learned. Awesome.

It is cryptically called "hide activity" in my translation of Spotify.
Honestly, if you enjoy fresh chilies and you're in Europe I'd recommend growing them. The seeds are small, light, and inexpensive to ship. As I understand it, chilies quite forgiving and easy to grow. You could order the seeds from the regular suspects or try something like r/SeedSwap.[0]

[0] https://www.reddit.com/r/seedswap/
I really really wanted to like mypy but my experience with mypy and Django has been very poor - it is slow, type inference is not good and most of the errors are false positives. Perhaps I’m spoiled by Typescript or django-stubs is just not quite mature enough.
I mean you can justify all you want, and there is various critiques on how the Verfassungsgericht has become an instrument of politics where the top assignments are now based on party affiliation. But regardless of what you think of it's decision and what you think of it's decisions, Artikel 2 of the GG says this:

> Art 2
> (1) Jeder hat das Recht auf die freie Entfaltung seiner Persönlichkeit, soweit er nicht die Rechte anderer verletzt und nicht gegen die verfassungsmäßige Ordnung oder das Sittengesetz verstößt.
> (2) Jeder hat das Recht auf Leben und körperliche Unversehrtheit. Die Freiheit der Person ist unverletzlich. In diese Rechte darf nur auf Grund eines Gesetzes eingegriffen werden.

"(2) Everyone has the right to life and physical integrity. The freedom of a person is inviolable. These rights may only be interfered with on the basis of a law."

You kill someone, you bomb someone, you support someone that is bombing someone -> you are inherently violating article 2 of the GG no matter how the VerfG decides to justify the Kosovo or Iraq war or justify it as a act of selfdefense.

EDIT: yes, on the basis of a law - that I retroactively rewrote in order to justify a "defensive war" that is on the other side of the planet. Let's not kid ourselves here. The German and US MIC has done a fantastic job in white washing the violation of something that has been proven to be a false pretence by now. Even assuming that the WMD defence held up in court AT THE TIME(which is a joke TBH, since there was no evidence available), we all know that all the officials admitted that it was a lie by now.
We were talking about a Marvel action flick, I don't think incredible dialog spanning multiple minutes is much of a thing apart from exposition dumps. I asked GPT-3 to spit out some paragraphs from a hypothetical script for Thor 5:

INT. DARKNESS
We hear a faint beating heart. A moment later, we see a light slowly growing in the darkness. As the light grows, we see that it is coming from a glowing object in a person’s hand. The object is a hammer.

We see the face of the person holding the hammer. It is Thor. He looks tired and beaten.

Suddenly, we hear a voice from the darkness.

Black Panther: You are not welcome here, Thor.

Thor: I know. But I must speak with you.

Black Panther: You have nothing to say that I want to hear.

Thor: I come bearing a warning. Thanos is coming.

Black Panther: We are prepared.

Thor: He is not coming alone. He has an army.

Black Panther: So do we.

Thor: Thanos is not like any enemy you have faced before. He is ruthless and he will not stop until he has destroyed everything that you hold dear.

Black Panther: We will stop him.

Thor: I hope you can. Because if you cannot, then all is lost.

Eh, looks real enough to me. Fine tune the model with all the specialities that make up Marvel movies and you'll crank out good-enough drafts in no time.
Part of reason in for many places outside US. There are no unlimited messages plan.

edit: people seems to miss that I said that this is only part of the reason not the reason. I also said many places outside the US (not all). So do people down vote because they think that there are only US and EU in the world? I am missing that point.
Funny. It's "I love bright colors but the next owner might not." Are we in fact collectively nerfing our color preferences based on a false assumption?

I have been buying bright red and yellow cars for over a decade now (no problem reselling them, FWIW). The problem is that it is so hard to even find cars for sale from the manufacturer in bright colors.

I think our tastes are being directed by marketing and bean counters making "safe bets". I feel like we've been driving office beiege for a few decades now.
I wonder how much in houses is related to how frequently we re-furnish our houses compared to 50 years back. I know old people who have the same wallpaper and furniture that they had when they got married, "if it aint broke, don't fix it", the younger generation is now much more likely to.

I have had 3 different sets of sofas/chairs in the last, perhaps, 7 years. Neutral colours means I can change the fittings to whatever I feel like. What I don't want to do is repaint everything to match.
SMS spam can be solved on the operator level instead of forcing devices/software to protect against it. Just because your country has poor telecom operators doesn't mean that applies to the rest of the world. My main phone number is a western Europe number that is added to all my outgoing emails + visible on my public website (and lots of other places) and I almost never receive spam SMSes. Last one was pretty much exactly one year ago.
Sweet that you went down the free route and made it an npm package, following the good way, by providing an optional upgrade to SaaS. Cool stuff. I could have used this dearly last time I scraped. Like others I used mixed methods (headless browser for renders and direct calls) and wrote a lot of error handling boilerplate.
What Alcohol Does to Your Body, Brain and Health – Huberman Lab Podcast #86
Chinese GPU claiming to be faster than Nvidia A100
Still find it incredible the green/blue bubble thing in the US isn’t a joke.
What do you mean by “want more immigration”? More tax payers? More potential customers? More cheap workforce? Immigration as a help for unfortunate people in other countries?
I built a whole product that does a lot more than this and never launched
right now, the domain is expired, and it's sitting duck in my private repo :D
https://youtu.be/OsmuB5_dfaw luckily, I had some demo videos recorded to show what it was capable of.
I wonder does any body would still interested in this.
I wish companies generally would be more transparent - I'd imagine this be the norm at most companies.
https://standardnotes.com/plans 2fa looks to be in the free plan now, fwiw. (long-term standard notes user here)
That is what people voted for...
Could you post updates on HN or to my email? Would love to read "a different perspective than existing books out there"..
How long before Musk weaponises this in his lawsuit against Twitter?
I feel like Cook & Co. have been bringing back the rainbow apple, no?
- Apple will have created two additional "multitasking" systems for iPadOS on top of the failed stage manager. People still continue to ask for a traditional Mac-like window management system and Apple still will be like "lol no".

- Apple arcade and Apple TV will still be around but Apple has no plan/vision for gaming.
It doesn't matter how low the error rate is. The fact that the European Commission wants to have a third (robotic) participant listening in on every digital communication is absolutely ridiculous.

Saying that this is about child protection is a blatant lie. This serves only as a stepping stone to introduce other screening criteria later. And with opaque ML models it will be very tedious to determine what the model is supposed to find.
You were replying to a person who were pretty clearly implying the position that the game is rigged. It's reasonable to assume your comment was meant to dismiss it as "you're just playing it wrong". I understand after your second comment that that was not the intention, but the first comment could be read as that.
Here's the thread roll out for those of you like me that find this hard to read: https://threadreaderapp.com/thread/1562004612172873728.html
Now, the question is: is that a good thing? SMS is like e-mail - you can have many clients for the same protocol. Don't like your built-in SMS app? Install another one. You can't do that with 3rd-party proprietary siloed communication platforms.
Funny to see an old comment of mine there. Looks like I wasn't wildly off base, fewf :)
So those of us who happen to own iPhones, and have friend who have Android devices, and would like to have (e.g.) group chats can go pound sand? Or try to get all of our friends/family to install yet another app?

What is the main argument(s?) against implementing RCS? That it doesn't have E2EE? Neither does SMS, so RCS is no worse in that regard, but seems to have some extra nice things.
Atleast in germany (almost?) every plan has unlimited messages nowadays. Even the cheapest prepaid plan. People still use WhatsApp, Signal, etc., because of media sharing and easy group conversations
From the very small sample I've had, a majority would want immigration as a help for unfortunate people in other countries.
Java in the Browser
> if the debugger keeps recording the full sequence of states and actions,

It's worth noting that the main time travel debugging technologies don't keep the state of every operation performed, only the non-deterministic ones (i.e. where new information flows into the recorded program). A compute-intensive simulation can run a few days and generate little-to-no state that needs recording.

Your point stands, though, that a malicious attacker could do many non-deterministic operations (e.g. read data in from a socket). This can be solved - relatively easily - with a circular logging approach is workable to address this. i.e. discard chunks of older history to free up space as you go.

(Whether individual time travel debuggers support that is, as far as I'm aware, more a case of balancing demand for the feature against engineering effort.)

> Such debugger would not be able to sustain a DoS attack if debugging in production (it would spam the debugger with lots of different states generated by the attacker); in fact, it would likely make it easier for an attacker to DoS a service as it would consume computational resources.

In-production use could potentially be very useful if that's where some weird flaky issue occurs, so this is worth worrying about. It's definitely true that you've got to have the resources / settings to not overwhelm your machine. The other thing is that adding a complex layer of additional software risks adding additional exploits into the mix.

If your production issue is at a customer site or in a semi-trusted context (corporate network service) - which for some software is the norm - then I think that makes the threat model a bit less scary.

Otherwise, I guess it's a case of sandboxing the software within other measures and maybe spawning a separate instance that's recorded so you've still got "normal" instances running in parallel?
No, I have not. The article has no clear direction, hence your comment. The article talks about parsing SQL DDL with the goal of creating classes/structures that represent the tables. You do not need to parse SQL to achieve this.
The premise at the start of the article is "parsing SQL so that we can achieve things in code that is not possible in SQL". If that were indeed the case, there would be no such SQL to parse in the first place!
Why bother hacking Twitter when it'd be cheaper to bribe an employee to get all the information you want:

> allows too many of its staff access to the platform's central controls and most sensitive information without adequate oversight

It'd be even easier if you find an employee who's on the same political team as you.
Ask HN: What is the career path for DevSecOp engineer?
Seems like DevSecOps engineer are neither Dev nor DevOps engineer. And they are not pentester.

So what is the career path for DevSecOps (assuming the person know coding and security testing)