skysight-inc/HackerNews huggingface dataset:
Show HN: We made metadata-secure video conferencing that's easy to use
Hi, we're Barath and Paul. With our small and awesome team we built Booth to provide the kind of security in video conferencing that we always wanted but was never available: where the server doesn't learn anything about either the participants or their conversation, and it just works like normal in a browser.

The problem is that we're all using video conferencing every day, and what used to be conversations within the four walls of conference rooms are now happening on various video conferencing services. They learn a ton of metadata and data about the who, what, when, and how of every conversation. And when they get breached or have an insider leak, there's valuable information at the end of the line that shouldn't be there in the first place.

Our solution uses a classic idea we call the Decoupling Principle. The idea is to provide privacy and security online by splitting information architecturally and organizationally. That means two-party privacy for a service like Booth (in the current beta version of Booth, split between us and Fastly) and for functions like authentication and connectivity to be separated. (We wrote a paper on the Decoupling Principle with our collaborators at Fastly and Cloudflare that'll be published in a couple of weeks.)

Booth uses our Multi-Party Relay (MPR) (that lives alongside / separate from Booth), which is similar to Apple's iCloud Private Relay. So the traffic between you and the video chat server goes through the MPR. To the server, a meeting looks like it's between a bunch of Relay server IPs. In Booth, the video and audio is end-to-end encrypted using Insertable Streams (an emerging WebRTC standard that is currently supported in chromium-based browsers). We also prevent local address leakage that normally happens in WebRTC ICE negotiation. We built Booth on top of the excellent Livekit project, which in turn is based upon Pion.

You should be able to use Booth like you use other web-based video conferencing today -- create a meeting, share the link. Right now we haven't restricted the free offering, though eventually for capacity reasons we plan to. We have an enterprise offering with additional functionality that's in closed testing.

Ultimately our goal is to add metadata security to the Internet – to all sorts of services that are out there. We'd love to work with anyone who'd like to add metadata security to what they provide today. Thanks!
Meta’s Meltdown Shows How Big Tech’s Invincible Era Is Over
It's always amusing to see that site, because clearly there is actual wisdom in it, behind the funny way of writing. I feel like we'd also benefit from a version that's written in a more regular style, to have some frank discussions about what's said.

For example:

> 80/20 solution say "80 want with 20 code" solution maybe not have all bell-whistle that project manager want, maybe a little ugly, but work and deliver most value, and keep demon complexity spirit at bay for most part to extent

In some cases, shipping "good enough" solutions won't work when you have a specification with acceptance criteria laid out and QA will be stalwart in their efforts to check every single one of those. Thus, things won't be "done" until everything really is in place, which depends on the work environment.
The conclusions were at the very end, and I’m not really sure what they were. Not a very good article.
not even necessarily CEOs... just the phrase "taking responsibility" seems to have been diluted to usually mean nothing in most corporate settings.

software dev here - was working with a client, and a pm was pushing some not-great idea. I pushed back - "this is not core, not important, shouldn't be a focus, other things are more important, and already decided".

Pushback from them: "no no no, this is vital. Look... if there's a problem, I'll take responsbility".

6 months later, there's a lot of complications that I'd foreseen (and documented) earlier which were summarily ignored at the time. The "I'll take responsibility" person isn't on the project any more - they left. I'm fielding a bunch of "why was this done? this wasn't agreed on - what were you thinking?"

Well... when I don't do what they ask for, I'm stubborn/obstinate/roadblocking/etc. When I do it... it's wrong. Even if that original person was still around, I would be the one fixing all the bad data, having to reverse out the changes, revert to earlier state while keeping newer code in place. The "I'll take responsibility" is essentially meaningless in many situations. And I called that out too at the time and was told I'm too negative/cynical. It's just experience.

Lest this be seem like doom and gloom, I've experienced the opposite situation from above, where 'ownership' and 'responsibility' and whatnot were more enforced and honored across an organization, but it's been very rare in my experience over the last 20 years, and seems to be getting even less common. Having seen both situations, it's easier to tell the difference.

More and more folks having shorter tenures makes it harder for any org/team ethos to 'stick' for any meaningful impact, and absent that, it takes a lot more organizational effort to keep a commitment to stated corporate values. Not impossible, just hard to do, and often slips...
I notice people streaming in very low resolution without realising it, and sometimes intervene when the pain gets too great.

I’d be vey surprised if the average bitrate was anywhere near the appropriation.

However that wasn’t the point of the calculation, it was looking for a maximum.
This is true in my experience
Thanks. I ended up writing about my experience, which helped.

https://letterstoanewdeveloper.com/2020/05/04/how-to-go-thro...
The recently released OpenBSD 7.2 boots and installs on it, support for the same Qualcomm Snapdragon SoC used in the ThinkPad x13s was added during last release cycle, so support for the Microsoft Dev Kit 2023 came for the most part for free.

https://www.openbsd.org/72.html

OpenBSD developer Patrick Wildt shared boot messages (dmesg) here: https://twitter.com/bluerise/status/1585584481854816256

Another UK tech reviewer Alex Ellis showed it booting OpenBSD into X11: https://blog.alexellis.io/linux-on-microsoft-dev-kit-2023/
Yes, as tempestn explained this is to prevent bacterial growth, especially Legionella. Otherwise this can be a problem in areas where tapwater is not chlorinated.
https://youtu.be/YhRRny_sHYw?t=45
What does it NEED 16.2 for?

For perspective, Freeform was announced as a macOS Ventura/iOS 16 feature in June at Apple’s World Wide Developers Conference [1].

It didn’t make the initial releases but it makes sense to require the most current operating system version with the latest bug and security fixes.

[1]: https://www.macrumors.com/2022/06/06/apple-previews-new-free...
Right. They worked for a shitty company with shitty service that elevated shitty people to prominence while collaborating with a shitty government to oppress speech while ignoring shitty users who were distributing underage porn. Poor them.
Consider tweaking your policy to install Devuan instead.

Basically the same thing, but not only does it not have snap, it's also systemd-free :-)
Hahah, a while ago I was having dinner with some friends. One was at a company where there were layoffs happening and there was lots of speculation on the right way to get on the severance list.
Not the OP, but for me it just took a bit of mindfulness while presenting, and the realization that your pauses seem way more unbearably long to you than they do to your audience.
This is very cool. I love the focus on builders and do think there's a gap in easy to use 2d web-friendly game engines currently.

Phaser still requires a ton of boilerplate code compared to the example games here.

Both Godot and Unity are very similar to each other and aren't great for say.. hacking together a quick js prototype and sharing it with your friends on the web (or with a lil' device).
Ask HN: Why don't games allow you to automate some gameplay via programming?
Wouldn't this be a great way to encourage young people to learn programming?

For example, a game like No Man's Sky could have a python-like language that you can use to automate some repetitive tasks.
> keeping that person around doesn't help anyone, including that person.

Seems to me it obviously helps that person, but I generally don't understand corporate-speak so I might be missing something.
This is almost like an every day thing at this point :/
This would be a good short story writing prompt. I wonder if it would be a net-gain, as a developer, to crank out a short story each morning as part of normal kata. Seems like it'd juice the creativity-piece of the brain.
A single Stripe E3 role (senior eng) can pay over $500k/yr.
Thank you. That's actually one of the videos that I watched a few months back. It helped a little bit, but not enough for my tastes.

It just seemed like there was a LOT of extra tweaking I needed to do for each image. My suspicion is that if you want to use DT (effectively), you need to have a deep understanding of color theory and image processing (at least more than I am willing to devote).

I also enjoyed his rant(s) on the new releases of DT, especially the complaints about the UI.
That's fair - I hadn't realized Rebble were volunteers. I'd hoped the subscriber money might stretch to also compensating people involved. I certainly wouldn't expect volunteers to be working on repairs out of the goodness of their hearts.

I guess my dream is for Rebble to be like a cross between Framework & iFixIt - somewhere you can buy all your spare parts (and accessories?), maybe find repair guides... and then to continue the Pebble mission by making new models that can run Pebble software on modern designs. I guess it's just a dream. But if there's only about 2k of us Rebble subscribers, I'm proud to be one of those 2k!
Curious what all you had to do to switch from Signal to Matrix.
Ask HN: Wholesale Hosting Price Increases
Recently I've received price increase notifications from two hosting providers I use, OVH and Hetzner. Both increases are around the 10% mark. A mix of VPS and dedicated servers.

Understandable given the cost of energy at the moment, anyone seeing more extreme increases or have felt the price changes as a significant factor moving forward?
> Any change in absorption is going to be minuscule in comparison to the difference in calories one gets from all the excess sugar.

I think that depends on how much it takes to have this effect. If the equivalent of one diet soda every couple days (the doses in the article seemed pretty small to me?) is acting like a kind of pesticide, even in small doses, and killing a lot of calorie-eating gut flora, the harm might exceed the benefit. On the other hand if the artificial sweetener is replacing the sugar in 64+oz of soda per day rather than 16ish oz every couple days, sure, the benefits probably overwhelm any harm.
My friends and I used to play TripleA by emailing the game file back and forth. Good times.

If anyone is interested, there’s a great game similar to A&A but with simpler rules and tons of maps and scenarios. It’s called Lux Alliance by SillySoft.

https://sillysoft.net/vox/
>The rest are all feature requests.

More like missing basic features. I never said all are bugs, I said some are bugs and that all these things exist and work on the other alternatives like WhatsApp or Telegram
Yeah growing up in Germany gave me this illusion that all children can actually get a decent (even if not super spectacular) publicly funded education somewhat independent of social background.
The Fed is doing 0.75bp rate hikes every meeting and talking affectionately about Paul Volker. And Powell was pretty clearly saying that rates are going to go higher and stay higher longer than the market expects. We're going to have a recession.

This Black Friday is unlikely to be any kind of bellweather. It normally takes 6-12 months after rate hikes stop for them to be felt in the broader market. Next Black Friday might be a bellweather, but I expect that we'll already be in it by then.
SEEKING WORK | Remote from US (Utah)

Willing to relocate: No

Technologies: Full-stack Elixir with Phoenix & LiveView

Website: https://jsonmaur.com

Resume: https://jsonmaur.com/resume.pdf

GitHub: https://github.com/jsonmaur

Looking for part-time to full-time contract work in the Elixir space. I have several years of experience building high-traffic and mission-critical Phoenix and LiveView applications, and am hoping to continue working with those technologies.
The tax rate is only that high for amount earned after $500k too. And only for those in a few states like California.

$550 for gold level insurance is expected for someone young, which I guess you are.

You can ballpark almost anyone’s premiums based on the figures in link below. I would use Omnia Gold or Omnia Silver HSA numbers, and plus or minus 20% for your state.

https://www.state.nj.us/dobi/division_insurance/ihcseh/ihcra...
Signal never gave canonical permission to distribute a binary called Signal. Canonical just went ahead and did it anyway. How is this Signal’s fault?
You could have made billions on the stock market by accurately predicting this.

It's good to see leaderships take responsibility and change course in the best possible way. But the whole this is our fault, we should have seen this coming story is a bit nonsense. They are just being nice about the messy situation and taking responsibility even though its outside their control.
That's not their fault. If they're doing the job well enough at all 3, they've satisfied the requirements for employment. Who cares what others think about their "remote sentiment"?
They made no assumptions about the content. They simply expressed a distaste for the cover.

To continue the analogy, there are plenty of physics textbook manufacturers, and not all of them decide to use sex to sell their textbooks. Choosing to not engage with a blatant marketing tactic and picking another textbook is a perfectly valid action for someone of any age.
> For example, to list cloud functions you need permissions to create and edit, too. That’s broken.

Do you have a concrete example of that? Or, maybe you mean the console needs those perms to work?
Show HN: Mitzu the open-source Amplitude alternative
Mitzu is an open-source product analytics tool that directly queries your data warehouse or data lake.
(Something like Rakam was before Liveramp bought it)

We designed Mitzu for people who don't know or don't want to write SQL or python analytical queries.

It is only an MVP yet. So please be gentle :)
We are looking for constructive feedback :)

Landing page: https://mitzu.io
Demo app (sign in required): https://app.mitzu.io/sample_ecommerce_athena
GitHub: https://github.com/mitzu-io/mitzu
It's about 10 hours in playtime if your being casual.

More if your bad.

Speedrunners have it at about 1.5 hours
I'd buy one if it wasn't as slow and unperformant as all the reviews say it is. I want a Galaxy S10e in that package.
Never tried Duplicati, but restic + B2 has been great as "a different choice", and for my use case of backing up a variety of OS's (Windows, Mac, and different Linux distros, anyway), it's worked great.
Another entry in the decades-long saga: https://news.ycombinator.com/item?id=149257
Yes!

Both the bubble and the crash are almost purely psychological. It's greed and fear coming in waves. There can be technical fundamentals, but to take the example of Bitcoin, you don't need any technical fundamentals. Humans can create and destroy value on top of a very complex random number generator.
How many are a) utterly useless or b) competent but don't have anything to do so they spend time working on mostly pointless projects to improve their CV?

I hope my colleagues aren't reading this and looking at me.
Sile will take Docbook XML as an input format. Close enough?
What is GNU IceCat (formerly IceWeasel) then?
So crazy. I was out fishing with him 2 weeks ago in Ft Lauderdale. On the trip he was talking about how he had an underwater e-bike and would go 1-2 miles off shore and look for shipwrecks etc. He was very experienced in diving. I'm almost wondering if there was something else at play here. He's had a few stories of things happening to him / where he lives due to the nature of his work (reporting the innerworkings of all the BIG ransomware gangs).
> They created the business for people to have jobs

No, the created the business in attempt to get wildly wealthy and unfortunately they can't do this without also having to hire a bunch of people. They certainly don't create the business for the sake of employing people.

> People like to <poop> on CEO's & leaders in good times

In my experience the opposite is true, in good times people can't help but <polish the nob> of CEO's & leaders, since easy employment and good pay make the fundamentally exploitative nature of their relationship less visible.

> employees often forget that while the employee can just go get another job, the leaders have to keep hundreds, thousands...

of thousands of dollars in their account even when they "fail".

The key difference is that if I don't get another job, I lose my house and ultimately the ability to feed myself. If I don't play the game I quite literally am sentenced to death. The CEO of that lays off thousands can very easily spend the rest of their days in comfortable retirement at any given point.

I need to sell my labor to live, CEOs need my labor to get richer.
I love Alastair MacLean's stuff! What was it called?
It seems that despite increased risk of diabetes, being slightly overweight actually decreases all-cause mortality and being grade 1 obese doesn't affect all-cause mortality. I heard of this through a podcast and I'm not super educated, but it seems to me that the relationship of weight and health is more complicated, since I agree that increasing risk of heart disease, diabetes, etc. is bad. It just doesn't seem to bear out in actually killing a person. Maybe it decreases their quality of life drastically instead?

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4855514/
I surely known, lots of people with more credentials in the field than any of us.

By the way, type classes are somehow related to OOP, maybe you should listen to a guy called Simon Peyton Jones on Haskell influences.

To save you some searching effort, https://www.slideshare.net/nushio/peyton-jones2011type-class...

I would advise to watch the talk that goes with the slides.
Yeah I've been agonizing about the bangle for months now (thanks HN) and I saw a recent post from Gordon[1] that says the cutting edge builds are getting much faster.

[1] https://forum.espruino.com/conversations/381203/
Except it's owned by Meta, who I really wouldn't trust even if they say it's E2EE.
I'm not sure I buy that the MVP here is actually "viable". Suppose you're Reddit, and you have FatPeopleHate on your site, and you "ban" it, in the sense that you hide it from users who have not opted-in. Does that really provide the same level of enforcement as a true ban? It seems to me that the presence of that community on your site has effects that spread beyond the community itself, it shapes the way people interact even outside the soft-banned subreddit.

I'd be willing to bet that if you could somehow run an experiment in parallel where you had one Reddit with real bans, and one with soft bans, the quality and nature of interactions on the soft ban one would be much, much worse even outside of banned communities.
I would agree with you for the most part but also keep in mind 200k may not be the top 5% for particular locations. In San Fran county the top 5% is 808k (https://www.kqed.org/news/11799308/bay-area-has-highest-inco...).

I would be jumping with joy to make 200k a year with where I live now. However if I was in offered the same job in the bay area for 200k a year I would not be nearly as happy.
> This is 100% live coding in Vim

I don't understand why anyone would watch this at normal speed. I see that live coding is a thing, but .. why?
Not in the "-flation" genre, but Americans use "nickel and dime" as a verb: "The sticker price is low, but they'll nickel and dime you to death on the options." (speaking of a car with a low-seeming advertised price). Other categories where "nickel and diming" is common are airline tickets and car rentals.
On the other hand, if you have a pizzeria, and people are talking about diets, cholesterol, unhealthy food, everyone is buying fitness gear... but you still have a line infront of the restaurant, and your take-out phone operator doesn't have time to go pee, you don't fire workers.

So, internal numbers are probably showing a downwards trend too, if so many companies are laying off workers.
> Cobra rates are quite affordable. I was on Cobra when I was laid off due to covid, and it was $550 a month for top tier healthcare.

Those two statements are in odds with one another. $550 is quite a large sum of money to put out each month, particularly when you don't have an income.
Moxie was fairly controversial in his stance on several issues. That's not "fact-free".
My grandma uses WhatsApp Web and Facebook hasn't taken down the WhatsApp Web snap yet. Both are end to end encrypted and based on the same transport but one of them used copyright law to take down a redistribution of their application.

Looks to me like Signal is the interior app here.
It sounds like that was a horrific event. The inverse also happened under communist regimes though, since you bring it up, out of context of Java and AAA (triple A) gaming which is the definition most widely recognized by the HN audience in my view: https://en.wikipedia.org/wiki/Crimes_against_humanity_under_...
Second this. It should be drilled into the heads of everyone who wants to get into game development: USE A MAJOR ENGINE. No exceptions. Time is money, and hand-rolling an engine is a waste of yours. Unity and Unreal have many, many more man-hours of work put into them than anything you can build, so by choosing one of them you can avoid pitfalls you WILL run into starting from scratch, on top of the labor you'll save not having to build one in the first place. On top of all this, the entire gaming workforce is oriented around these two engines, so when it comes time to collaborate, you will be able to bring people aboard who can contribute immediately.

The GPGPU stuff is critically important if you are targeting low-level programming, to which I would add AI processors (NPUs, TPUs, etc.) And bone up on your statistics and linear algebra to like, the "Ph.D in math" level. The AI rocket is about to take off, big time; you want to be on it.
That's one of the fundamental tenets of society.
If you're at all concerned about privacy with the Bip, you can use the open source Gadgetbridge app[1] instead of Zepp for collecting metrics/syncing/uploading faces/etc.

https://gadgetbridge.org/
I think the point is that you can't call it Signal. Is that correct?
Neither of those says that anybody other than sender and recipient can access message contents. Just metadata, which is well understood (and from what I know, also true for Signal, correct me if I'm wrong).
> running without issue (AFAIK ^^)

If you don't know, then it's not working. At least that should be your stance on backups.
Is it mass hysteria, or returning to the mean after a decade+ of mania?
> takes horrible pictures on Android

This is mostly Androids fault... For me, even Whatsapp's built in camera is terrible. When you press the button to take a photo, it starts focussing, then takes a photo before the focussing is done. So every photo taken is reliably blurry. There isn't any way to take a non-blurry photo with the main (back) camera.

The main OS camera app works fine.

I think they have per-device logic for this sort of thing, and mine is an uncommon chinaphone, so presumably they haven't tuned the logic for it.
This is only true if they don't really care about your work, merely about your presence.