skysight-inc/HackerNews huggingface dataset:
This part appears to be missing from the Tor website:

> 2,500 pages of correspondence — including strategy and contracts and budgets and status updates — between the Tor Project and its main funder, a Central Intelligence Agency spinoff now known as the Broadcasting Board of Governors (BBG). These files show incredible cooperation between Tor and the regime change wing of the US government.

So the documents acquired via FOIA requests are worth reading, and it's worth discussing why the US Intelligence community has such an active interest in propping up Tor.
I actually couldn't get the script to work-- it keeps complaining that it can't find the Whisper executable. Do you know what I would have to do first to get it to work starting from a "blank slate" and cloning the repo? Thanks!
"You can't prove that they don't already do X, because X is by definition a secret action" is a pretty useless epistemology though. Every electronic device you've ever used could secretly have a cellular modem that can secretly download over-the-air firmware updates that alter its behavior to be maximally evil. You by definition can't prove that your coffee machine doesn't secretly have the ability to change its behavior to start connecting to the internet and DDOSing charities or something.
Show HN: Record breaking performance for Python, 6.2 mi req/s in TechEmPower
socketify.py just break the record for Python and now is the fastest Python framework in TechEmPower, is even faster than Golang Fiber that got 5.9 mi req/s

https://github.com/cirospaciari/socketify.py

https://www.techempower.com/benchmarks/#section=test&runid=1...
in space its the distance, light has a speed limit
Planter Fasciitis Is a Real Pain
Actually, the same editor recompiled for modern machines also loads instantly!

https://github.com/DigitalMars/me
https://archive.ph/EVhM1
> What threat model does this protect against exactly?

Two big threats: 1) insider attacks like the Saudi Twitter infiltration[0], and 2) Overreach by legitimate government process like subpoena[1].

> release the source

Useless. How do you know it's the exact source running on-device?

> Allow me to run my own backup software on their servers

Useless. How do you know your own backup software isn't compromised via a secret deal with Apple?

> Allow me to transparently run my own encryption before I upload stuff to their servers.

Useless. How do you know the OS isn't grabbing the raw files? How do you know your own encryption isn't compromised? How do you know that Xcode isn't inserting backdoors in the encryption you compiled from source?

> And a very long etc.

All useless. Tell me your perfect solution and I promise I can show it's useless (by your standards).

[0] https://en.wikipedia.org/wiki/Saudi_infiltration_of_Twitter

[1] https://ijunkie.com/your-icloud-data-phenomenal-law-enforcem...
> 1) they just ate every other 3rd party "secure" backup services lunch just like they did to the Hi-Res music industry.

This is an excellent point as to why you shouldn't even bother trying to develop software for apple machines. If it's anywhere near successful apple will just destroy you, after having taken a 30% cut from your revenue for years.
That's exactly how I've wound up contributing to a couple large open source projects. Try to build somewhat unusual stuff on top of it, find bugs/deficiencies, fix them.
I know someone who went all-in on Blockfi to get yields. They went all-in on crypto b/c their uncle made a bunch of money in crypto during the run up.

Well, hopefully their uncle can also bail them out ... they lost all their money. Over half a million dollars (!!!!!!!!)
Agreed. For many, myself included, receiving praise for an outcome gets internalized as setting that outcome as the minimum bar. It applies more pressure. For some, they hear that the outcome is valuable and punish themselves psychologically for not achieving it sooner. For some, it's even more complicated than that.

A few years ago, I was managing the most impactful engineer I've ever been around (and I've seen a lot great engineers in my 30+ year career that included stints at several startups including my own, going through a a pretty big IPO, working at a FAANG as it came to dominate it's area, etc.). It was her first job and the team was stacked with high performers. We were directly responsible for hundreds of millions of dollars a year in revenue. Three weeks into her career, everybody on the team was going to her when they couldn't figure things out. Just a phenomenal mind with a capacity for dealing with technical complexity and finding business value that I would have previously thought impossible. Of course that led to a lot of praise from me and everyone else. Every time I praised her for an outcome, she withdrew further, eventually getting to the point that she wouldn't say anything in one-on-ones other than short answers to direct questions. A few months in, the CEO (without telling any of us beforehand) used a slide from one of her design review presentations to inspire the company with the kinds of technical->business wins we were now achieving as a company - it devastated her, making her want to change careers. A month later, she tried to reject a significant salary increase.

Nine months in, she made (and corrected) a minor technical mistake. I mentioned it to her in our next one-on-one. As I did, she leaned forward and her eyes got big. She peppered me with questions until she understood my perspective on it from every angle. The more I spoke about it, the more she perked up. After seeing this response, I decided to try to find deeper "criticisms" to bring up with her. She was so good that it was HARD to find anything at all. Eventually I thought of what level she'd be at in ten years and framed things as "here are skills you have that you're not fully exploiting to be as impactful as you could be." It instantly turned our interactions inside out. She went from zero trust in me as her manager to complete trust in me as a life mentor in ~30 minutes.

Later I asked her why that worked and she said it was one of the few times in her life that she thought someone understood her faults and still valued her. It's just what you're saying about letting people know you see them and what they're doing, not just the outcomes they are a part of and how it affects you. I'm lucky to have learned so much about engineering, management, and life from my interactions with her.

One of my heroes, Fred Rogers, was very good at this 50+ years ago, saying things like "I like you just the way you are."
AFAIK, Datasette only offers read-only APIs.
I wasn't willing to go that far!
Typos-CLI – Source code spell checker
I am not the author of this tool but found it extremely useful. It has caught almost a 100 typos in our codebase in snake_cased and camelCased variable names, in prose in our docs, and it is programming-language agnostic! So awesome. Highly recommend. Easily set up as a github action in CI too
The internal address is optional, it's only useful if you want to have a known address if your uplink is down so you can do maintainance.

You only need two addresses:

- a global address

- a link-local address
They want to use it to get signed in but not to stay signed in. It makes sense to me.
Podman?
Any idea on how to do something like this? https://news.ycombinator.com/item?id=33795263
That's "quite literally" not true as I use Apple Music. So there you go.
I have a few streamers and Twitter personalities in my friend and family groups and so we do actually recognize these things. I grew up with a more "traditional" low-brow blue-collar upbringing and find it frustrating that my friends aren't following more of the World Cup, basketball, American football, etc etc. Funny how niches work right?
Another, more hacky option, would be to teach the binary executable how to download a new version, and start it to replace itself, while staying in the same container. Nginx does this for example. Of course, that’s some additional complexity, but then it is possible to have zero downtime upgrades (by basically upgrading the executable in the container but not the container itself). It is also possible, and simpler to upgrade the container, if it’s possible for
different containers to share the same volume, but I don’t think this is possible on Fly.io.
A colleague at a former academic job was questioned by campus police because he was one of a handful of people on the university network connected to TOR when a bomb threat was submitted (I forget how, though) from an IP address running a TOR exit node. Bomb threats from students were pretty common during exams, so after the cops saw that it was our very privacy conscious dev ops guy they didn't pursue him as a suspect. If the person who did it connected to TOR from the university network to submit a bomb threat to duck an exam, they definitely deserve to get caught. I think that qualifies as "just enough knowledge to be dangerous."
Doesnt deno bring a bunch of security improvements to the table?
Many people really don't connect the dots between tax policies and health care insurance/payment policies. Saying that health care/insurance is "free" makes it difficult to have a coherent policy discussion.

I know the ship has sailed on this but it I continue to see people truly believe that they are not paying for health care and that sort of misguided understanding of economics shouldn't be encouraged as it makes it difficult to have coherent discussions about many different public policies.

College education should be free...
College loans should be free (even when they weren't when the loan was taken out)...
Income should be free (UBI schemes)...

If you switch to "subsidized" from "free" the list expands exponentially.
The alternative is to admit that, while all megacorporations are fundamentally bad, Apple does occasionally do good things. This is clearly infeasible.
That’s super cool. Error correcting codes are truly amazing technology.
This reminds me of being taught that "ch" and "ll" were a single letter each in Spanish back when I was in school before they were re-digraphed in the late '90s.

Adapting alphabets to languages has a long history: just look at how the Greeks butchered the Phoenician writing system with weird concepts like "vowels" and "F". This is something that makes languages unique, and it should be chosen over having digraphs or diacritics.
Isn't it just "distance/c"? (or something like 0.999c since light is a bit slower in the atmosphere)
universe is a relative word, and typically treats us at being at the center (which in the whole of reality is somewhat unlikely). So it only describes that part of reality observable by us. 8,5 bn ly refers to roughly half distance to all of the observable events in that observable reality at the time these events occured. Since 3D space presumably expands, it would now take much more time for any event in our observable "universe" to reach from one end of the observation limit to the other...

by the way - if you want to go down further that rabbit hole a good place to start is to search for "levels of multiverse"
If around 80 million subscribers is nobody, then you are correct.
> Sure, like that is going to happen.

Something like hacking into a journalist's phone would require a lot of cooperation between infrastructure, software, and security to actually perform a targeted attack.

Despite Apple's harsh warnings about leaking secrets, people at Apple have already been spilling the beans about Apple's upcoming Ad platform for over a year, and that's just for something as morally grey as ads that they're going to spin as "privacy preserving" anyways. For something that actually goes against <everything> Apple has ever stood for, like targeting a journalist's phone to read their communications or extract data and secret keys from their advanced protection-protected iCloud Backups, at least one of the hundred involved would find a comfy bunker to live in with a phone line leading straight to News Corp or NYT.
> Some metadata and usage information stored in iCloud remains under standard data protection, even when Advanced Data Protection is enabled. For example, dates and times when a file or object was modified are used to sort your information, and checksums of file and photo data are used to help Apple de-duplicate and optimize your iCloud and device storage — all without having access to the files and photos themselves.

> • iCloud Drive The raw byte checksums of the file content and the file name

> • Photos The raw byte checksum of the photo or video

https://support.apple.com/en-us/HT202303
True, but the hole under discussion here is not one of those. (And it's important to note that big holes have weak tidal forces at the event horizon. They still probably have pretty significant tides close to the singularity, but God only knows what actually goes on in there).
quadrillions

Just to pretend to be an engineer a bit longer, 64 bits still provides a few orders of magnitude of overflow headroom for integer subtraction, addition, and division.

Multiplication is another story and might come up if you’re rolling your own cryptography. But then you have two problems since 64bits isn’t big enough.

Or rather three since you are rolling your own cryptography.
Is there really an ambiguity there or is this just a spelling quirk? Like are there any two words spelled differently in Russian that can be mixed up when transliterated?

I imagine, there's an official transliteration scheme because names in international passports have to be spelled in latin alphabet for reference. Is it ambiguous, too? Even if so, it's probably not to hard to come up with more two-letter combinations to encode every letter of Russian alphabet in an unambiguous way and so that even people who doesn't know the encoding could read it close enough.
My first computer was a TI-99/4. In 1980, I have no idea where my parents got the $$ for it. I'm 56 years old now and have supported myself and my family by programming for nearly 25 years.
Yeah. The guy had what appears to be a pretty great life. Looking through twitter, there's photos of him with his kids and wife.

I just can't comprehend how someone can arrive at the decision to commit suicide, especially when you have a wife and children, and to then tweet about it. The human mind is an odd thing.
Bun is able to run in these environments now - before it had that glibc error

Right now you’d need to download it via curl https://bun.sh/install | bash

But we need to make that better
Is China actually conducting Free Trade to the United States?
Same question. I also want to read a value, but can't seem to get it right. For example, I'd like to know what the current value of

CGFontRenderingFontSmoothingDisabled

is. I tried

defaults read CGFontRenderingFontSmoothingDisabled

but got:

Domain CGFontRenderingFontSmoothingDisabled does not exist
Masking seems to have a negative connotation. Usually, and indeed in the Wikipedia article above, it's presented as a boundary or defence mechanism against societal pressures. But interestingly, etiquette involves a lot of masking and the aim is to make interactions more pleasant for all parties.
Interestingly, there are a lot of ads that are like this… just subtler.

If you’ve ever seen tee shirts and similar products in ads that say things like “This Kansas City redhead likes their coffee with whiskey” or some other uncanny specific junk, thats how this works.

There is a whole new category of products based around these ads. I don’t know what they’re actually called actually, but it was on HN sometime in the last year. They’re usually tee-shirts and other “made on demand” products, and they use the magic of software to generate images for the ads, and products that produce to a ton of permutations, and target ad demographics that fit all of description. The products aren’t real until someone clicks the link, and then software knows which ad you clicked and generates it for that permutation.

The whole idea that the un-canny match will be enough to attract buyers for the novelty, and they eschew the inventory risk by just printing on demand.
They couldn’t without bypassing all their controls and assurance measures, which are required by not just governments but corporations who don’t trust apple or the government, as well as regulators across the world who also don’t trust either apple or the us government. If you’ve ever worked in a highly regulated highly sensitive enterprise tech environment you would know this is hogwash.
I see what you're asking for, but I don't think Apple would ever do it. A passphrase that is only used once every few years is a recipe for endless support calls.
> Even if it were used for intelligence purposes through the method above, which I don't think is at all established,

The snowden revelations were precisely about information gathering for intelligence purposes. The vast majority of intel gathering is not for prosecutionary purposes.
Any recommendations as for whom to follow on Twitter?
It happens because of LA geography which allows smog to become trapped.

https://www.latimes.com/california/story/2021-11-11/how-an-i...
Absolutely. Most political "debates" suffer from this.

"Everything is a trade-off" is similar - trivial yet profound.
If you lack context, see Peter Woit's previous blog post: https://www.math.columbia.edu/~woit/wordpress/?p=13209

And Ars: https://arstechnica.com/science/2022/12/no-physicists-didnt-...
It's not particularly surprising that all your devices need to be updated, how else would it work? The whole point of E2E is that the ends are your devices.
So you could say they're... Star Blazars?

"We’re off to outer space... We’re leaving mother Earth... To save, the human race! Our Star Blazers!"

(OK, so the spelling is off. But since I'm going to be humming this the rest of the day, might as well see if there's some 80s kids out there that will join in with me.)
I can’t wait for the mandated pop ups “did you know you could install a third party App Store” every time you go to the Apple App Store.
Is controlled burning some lost technology that only a modern druid can bring back? Or is it something states already do, and when they don't, it's for political reasons and various other concerns and even failings, not because there's nobody who knows how to steward the burn?

I could even imagine that, for political reasons, some indigenous entity is the right hand for the job. But surely not because they possess some secret hereditary epistemology in 2022.
Row change auditing options for PostgreSQL (2020)
We need much better models in browsers. The main reason is to pass everything through the language model and get polite and helpful responses. You never have to see Google, the website or the ads ever again if you don't want to. The QA model should be able to detect most undesirable parts - spam, ads, fakes, factually incorrect data. Something like chatGPT running locally. This is important for privacy. If we run the model, we have a safe creative space. If they run the model, they get everything spilled out.
Almost there: https://www.cnn.com/2022/12/01/world/scientists-baby-wormhol...
Apple launches end-to-end encryption for iCloud data
I'm interested in what the economic motivations were behind ornate buildings of old. I'm talking about the craftsmanship involved in intricately decorated buildings in urban cores, such as found in most of Europe and less baroquely in the art-deco buildings in the US. Surely at that time economic factors were at work too, and it is very expensive to have custom brick-work and gargoyles and copper accents, etc. At that time did we have a higher standard of what was passable as a public building? A pride in making something pleasing? Were these features actually not more expensive to create?
Yeah, I'm very skeptical. Just the decision to announce this by press release rather than peer reviewed paper suggests there are a lot of uncomfortable questions, similar to what you raised, that the authors are trying to avoid.
I wonder if anyone here has the AMC A-List subscription. I have had it for years and overall while I don't think I have gotten my money's worth across the entire lifetime of the subscription, overall it is still good value since when some really favorite movies come back I am going multiple times a month in the most premium format. For 25$ a month you get access to all movies playing(with exception to special third party events they play once in a while like "Fathom" events) in all formats. Three movies a week every week. You'd make your money back in essentially one or two of the premium screenings.

Despite this offer in the last two years I still have seen so many non-superhero comic book movies play to an audience of 1-2. (Me and a friend). I sometimes walk by a theater that has literally no one watching. I once watched with the lights on because why not? (there is a light switch located near the entrance)
I love vi bindings but I've found that if you're using oh-my-zsh this will break a bunch of stuff like the command history. If anyone knows of a workaround for that I'd love to hear about it.
Most of the code is here. It needs some linker config but basically you wrap symbols which depend on too new versions of glibc and dynamically load them or call some other implementation internally

https://github.com/oven-sh/bun/blob/main/src/bun.js/bindings...
the inside is even more ridiculous. It would be easier and faster to get in, do what you need to do, and get out if it was just an office building. No one physically goes to City Hall unless there's absolutely no other option.
how so? stock markets are using lasers to reduce trading latency vs everything else available so what do you mean not usable for real time communication?
Last time I remember the SkyMall catalog was full of devices that were supposed to relieve Plantar Fasciitis. Other than that I've never heard about it. Is this something that affects frequent fliers or some population of frequent fliers? Or do the people who sell such devices advertise there because all the other products are advertised there?
Very little locality of behavior. A service can appear in something like 8 different folders, can depend on stuff that is who knows where. It is just a not very elegant system, it's baroque and confusing where it doesn't need to be.

The solution of course is more systemd. Instead of using generic Linux tools like grep, learn and remember a bunch of weird systemd-journald specific commands. Unfortunately I'm also a programmer, and only really have room in my head for one grep command, so it introduces frission and I have to look up the commands every time.

Also just a lot of random breakage over the years.
Because without a priority, you have no means to make a decision when the goals conflict. If what's most important to you is having cake, you might have to limit how much of it you eat. If you instead value eating cake more, you might have to give up on the idea of keeping it.
The 'n' is really to help the flow as you are talking, so it depends on if you pronounce the 'h' or not. In british english you would nont say 'an historical' or 'an hyphothesis' since both are pronounced with the 'h'.
Hadn't heard of io.js before but from reading up on it it seems to be a unique case since they had the explicit goal of merging back into node eventually.

Can't really find what the main benefits of io.js are though...
Yep. Their CSAM implementation guaranteed that E2EE for photos was coming. I thought the death of that CSAM approach meant they just wouldn't ship E2EE photos. I guess you're right, they know governments will mandate it and they at least have an approach that's compatible with E2EE.