skysight-inc/HackerNews huggingface dataset:
The reddit mods are little tyrants in my experience. I hope the one's that think they own reddit get booted. Really, some of them are awful people. I wish I were trolling but I'm not. They can try to get their users to follow them somewhere else but it will fail because they are behaving unreasonably and breaking a site we all like, which has never been a big money maker. The mods belong in r/choosingbeggers for acting like it should be free
Earlier in my career I ate up the lean startup, move fast and break things, y combinator stuff. And while there are some very good lessons there, I’ve also come to realize that when you stop working on a part of the code, that may very well be the last time someone goes in there to make serious changes for a while. So sometimes it makes sense to do it right, even if it takes a few days longer (but not if it’s going to turn into some massive overengineering project).
There's no way Apple's 1600 cd/sqm can damage eyesight - that's way below the luminance of everyday objects in full sunlight.
> CIA gave us Tor

I thought NRL gave us Tor.
Th jury for the trial for the crimes they never charged him with? Maybe they didn’t have evidence of a crime if they didn’t charge him. What is your reasoning?
I guess I expanded bullshit to, whatever people are saying and agree with isn't going to he right later.
Re: Pouzin, datagram, CYCLADES

This was it, even more so than Minitel. France had an experimental, working Internet in the 70's... That was shutdown over bureaucratic disputes.

What a monumental waste.
> Of course signal is open source, it’s on f-droid

Even with their criticism, the author is giving Signal too much credit.

Signal is not on F-Droid. Signal sends their lawyers after open-source app repos for including their app.

I think the only claim they have is their trademark name "Signal". I wonder what's a good name for packagers to use for apps like this. Reminds me of Firefox and IceCat, or Rust Lang and Crab Lang.
It absolutely does, it's just not as detailed as we have for how computers work....

Consciousness is in many ways an illusion, manifested as a result of complex chemical processes passed on from our predecessors and developed over the course of billions of years....

Just because you perceive yourself as having free will does not mean you actually do... See the recent post on this site about people getting convinced they committed a crime they not only were innocent of but had never even happened at all....
An interesting anecdote related to this: a friend of mine has done research at a marine biology institute based out of Hong Kong. Basically his work was in identifying and counting gastropods on islands in the South China Sea.

A year or so after his paper was published, as I understand it, he was approached by the Chinese government about fabricating data that would provide a biological basis for the claim that man-made islands in the South China Sea (created by the Chinese government) ought to be counted toward the territorial waters making up China's exclusive economic zone. Unfortunately I never got the details, but it was fascinating to hear the broad strokes.
How about DB-GPT? http://github.com/csunny/DB-GPT
As Microsoft has shown, you are the product even if you pay them.
Based on a couple of his best known stories that I read when I was pretty young, I revered him as an author.

But a few years ago, I found out that his short stories had been collected in a multi-volume series, and I started reading them.

I was pretty crestfallen; I don't use the term "cringey" much, but that's how I would describe a lot of them. I intended to read the whole series, but haven't and probably won't.

Not all of them were terrible, but the famous short stories he wrote were presumably famous because they stood apart.

Also he seems to have flirted with Dianetics in its early days, even basing some of his fiction on it.

So, I guess when you look deeper, he himself proved the law. On an individual basis, you have to produce a lot of crap to generate a masterwork.
How'd you end up as a minority shareholder? I feel like this is a fairly common story, and I'd be interested to know if there are signs/how to avoid it.
signal is a 501c3 nonprofit and technically this is how the work is founded. you also have the option to donate if you want to "pay" for it.
I personally think all the major VPNs are honeypots, that’s my conspiracy. Subpoenaing my ISP is far more work legally than just having data being fed to them for free.

For those who think that’s too far, Crypto AG. A company that actually wasn’t founded by the CIA, but was slowly bought out by intelligence agencies with shell companies. Also they were Swiss by every appearance! Good thing there isn’t a modern Swiss company many people here use and trust because they are Swiss and not US…

Also, paying for VPNs with cash is, in my opinion, overrated when they know your actual IP address. Sure, visit the coffee shop, but if the coffee shop has cameras…
Whatever interests you. the thing doesn't need to be commercial - what you learn by shipping might give you insights into problems to solve.

Of course the downside is you might be finding problems that only hobbyists have that wont make money. But you can do further validation to see if anyone will pay and if those problems extend to companies or solo professionals who will pay.
Well then doesn't every major metro area in the United States have its own dialect? How is this "emerging"? It's probably been like this for centuries.

What's "emerging" here is that anyone in the media now wants to mention this particular dialect for political reasons. The title of the author is: "Race + Equity Editor". Why divide people over something so subtle? It's not that unusual. There is no such thing as a common American English for this to be distinct from.
I grew up on the Oregon coast, and there are some interesting records and histories of Japanese ships washing up on the western shores of the Pacific. Pacific currents will carry all kinds of things from Japan to the coast, including according to some stories, Japanese ships gone adrift in the 1600's.

I can certainly attest to finding glass fishing floats on the coast as a child, and finding what clearly was a beam from a more traditional Japanese house on the Oregon coast some years after the 2011 Japanese earthquake.

My point being I suppose that you can find shipwrecks of surprising origin in places you don't expect.
I agree that there would be new issues with such a system but I think it would be fairer and lead to more decentralization overall.

I think vigilantism would better allow human nature to shine through. E.g. you can talk and reason with an extortionist directly but you cannot do that with a corporation or other large organization.
> Tell me how you do the control/auth and allow certain users to access a resource while others

how would you do this with REST? or any other kind of API? graphql, at it's core, is a tool for the frontend to describe to the backend what data it wants. how the backend replies to that is completely up to the backend.

> formulate complex queries where they ask for the kitchen sink

most concrete implementations i've seen include a way to limit complexity. in `graphql-ruby` for example, you can limit how many nodes, and you can apply a "cost" to a particularly expensive-to-calculate node if you like. Say you give an API only 10 "complexity points". You could make most nodes cost 1 point, and expensive nodes cost 3 points. Now, someone can _request_ the kitchen sink, but you can respond with a "no".
That they had substantial evidence of his intent to traffic (see the other comment on this thread that tracked down the NE Supreme Court case, which cited even more evidence), and probably would indeed have arrested him if he didn't fork over the cash. I feel like I've been pretty clear about this.
I don't think that glib saying applies to signal.

Signals money comes from two sources:

1. User donations - you can in fact be paying for it,

2. A 50 million dollar initial fund provided by a benevolent sponsor, and probably some other misc funding

It does not come from selling ads or user data, which is the usual meaning of that glib saying.
Do you think that this applies to Wikipedia, GCC, or Neovim too?
For sure! I’m assuming TAO or whomever can come after me at any point for manufactured reasons, if nothing else. Nothing I can do there…

I do think this matters in a general sense, because state actors targeting individual users is a completely different threat from state actors collecting the communication graph of a major hub.
In the 90s you'd go on the internet to find or share information and communicate, and when you were done you'd go back to whatever you were doing.

Today, you go on the internet and oooo cats... wikipedia lookup "polydactyl", get ads for cat toys, check to see if there are any reviews for cat toys, ... 3 hours later, you forgot what you started to do but the Amazon Prime truck is stopped at your house dropping off 17 boxes of cat stuff. And you don't own a cat.
Let people make their own third party tools/readers and then let these arguments rot

The ball is on Signal's control, but they are clearly not caring to improve further, just stagnate so long as they have got control of it
I have one of these displays and I would be in pain staring at that all night, whether it is actually physically damaging or not.
> the official app and will be served Reddit's ads, so Reddit will get the money.

It's not just about the ads. It's about the telemetry/etc and being able to link the user via other apps that collect data to correlate.

> How exactly is it not going to work in Reddit's favor?

- Reddit's official app is kinda trash. (I do use it, but it's so bad I usually just browse HN instead.)

- It's a reminder that Reddit has been getting more and more user hostile since Huffman took over as CEO again.

- Tying to above, I don't personally have confidence that Reddit will follow through on their promises of better mod tools in a timely fashion. This (along with recent developments) means a lot of dedicated mods are just going to give up, and the overall content quality will get worse still.

It might help their IPO but I doubt it will help the long term viability.
Will Elon Lose Control of Twitter?
I appreciated the distinction to help form my own opinion. I believe there are varying degrees of scummy-ness and appreciate someone not trying to "decide for me"
This is the experience I've had recently. And I was at LinkedIn, which I've always considered FAANG-lite, but it's Microsoft.

It's been such a pain just getting to talk to the first actual person.
No local setup it seems :(
Comments like this, however well-meaning, are so frustrating because they invite such a wide variety of reality checks that correct the specific impossibilities … but there is a very clear imperative and nothing to attach it to.

Federal courts should, and won’t.

Congress should, and won’t.

There are numerous others who should, and won’t.

We have countless examples of impenetrable injustice like this, and there isn’t any structural way to justice that’s remotely reliable or trustworthy. And it’s easy enough to respond with the glibness that others have: the reality is that the appropriate authorities are craven and the “should” is hopelessly naive.

The answer to that is one I continually find unfortunate and yet necessary. There are no heroes. No one is coming to save us but ourselves and each other. The body which will put a stop to this is us. And it won’t be done by behaving and deferring to some different part of the system that enables it.
Forlinx, as NXP Gold Partner, introduces i.MX91 SoC - an optimized blend of security, scalability, features, and performance for IoT and Industrial applications, showcasing the strength of their collaboration.
"trust" is one of those words which has contextual meaning. I actually do "trust" signal, for low risk things. I don't routinely do high risk things and so I can make a cost/benefit decision facing who might exploit what I am doing and the consequences for me.

Other people live in the margins of what either their own, or some aggressor society wants and information from/about them is key. I can understand somebody having a heightened sense of what should be the foundation of "trust" in these circumstances. But that said: simply using signal is probably putting a giant red flag over you in some circumstances. Or, PGP. Any self-installed cryptographic technology you are associated with, puts a marker against you for some problems.

I don't "trust" closed source. I prefer that people have review, and that objective groups of people I trust in a personal sense (because I know them, no matter how vaguely, from online lists, and IETF wg and the like) tell me from their position of contextual knowledge, and I admit some authority, where trust can be well placed. Some of them are American. Some of them work for agencies related to the state, like the FCC and in some cases the NSA. I again have to re-frame "trust" into the sense of what it means when somebody who works for an agency like those tell you something. (others of them are not american, do not work for these agencies, or sister agencies in five eyes or other economies. But I observe, if you are competent to speak about cryptography you almost certainly DO engage with people who work for state enterprises like NIST and the NSA, even if in other economies. Its just the way the world IS: academics who work on cryptography have a circuit of relationships which includes the mathematicians inside these agencies)

I don't "trust" Moxie quite as much as I did, because some of the actions around Signal confused and worried me. And, I saw little to no desire to engage. Well, he doesn't owe me anything, financial or moral. I have no direct relationship, and in the end if he decided trying to assuage a million edge users like me (edge user not edge lord) was a loosing game, I can't fault his logic but the other side of that logic is I don't "trust" him as much as I used to.

I do trust Meredith. I have met her (once or twice) and she seems to me to behave in an open, direct manner, and when she says things I see them reflected in what she does. And, I trust the kinds of statements she has made about signal and the kinds of things I see emerging around governance of something like signal.

In due course I do hope she and the board can say something about source code, and future development, and how we can re-build or build from scratch some reasoned trust in the code, and its cryptography and the trust in systems behind the code.
There are valid reasons to prefer other apps, but this is not really one of them; it is the Signal idiosyncrasy that has most clearly been vindicated, by what happened to Matrix, which has the opposite model and has suffered for it and will continue to.

In the unlikely event that a set of vulnerabilities as devastating as those from the Nebuchadnezzar paper were found in Signal, Signal controls the whole platform end-to-end, and can simply publish software updates to fix them. Matrix has to do a coordinated multivendor update of their entire protocol.
Not an especially thorough video, but it briefly discusses categories of jailbreak prompts, and mentions Hacker News comment section a few times.
Oh great, now someone's gonna copypasta the "ground temperature check" story.
Does Signal still try to access the address book and alert all your contacts you have installed the app?

That was a big reason from me to avoid it.
No it is not literally their charter.

SIGINT is one half their chartered purpose. The other half is SIGSEC. And I had good reason to know directly.
> signal is a 501c3 nonprofit

That doesn’t relieve one entirely of fears of betrayal. American 501c3 law allows nonprofits to act like ordinary for-profit corporations in many ways. Such organizations cannot generate a profit (which has a specific legal meaning) but they can amass money to pay as much as they want in salaries to their leadership under employment contracts, or use that money for things that none of the original supporters saw as part of the mission. The community’s insight into finances is limited to peeking into periodic tax filings instead of having insights into (and any oversight over) day-to-day operation.
Yeah the money comes from them having all the address books and having the info who is communicating with who. Even if they can't see the messages.
Your trust in Moxie doesn't much matter anymore, because he's not involved with the project.

It is absolutely not the case that cryptography engineers generally interact with NIST employees, and certainly not NSA employees.
The first problem to fix - https://pagespeed.web.dev/analysis/https-lemmy-world-post-23...

> Links are not crawlable

> To appear in search results, crawlers need access to your app.

Without that resolved, it really doesn't matter.
See also: Reverse Conway.
I’m personally not a fan of requiring phone numbers or disallowing third party clients. I’m not really sure how I could characterize those concerns as being “dumb” even if they didn’t particularly bother me.
It's when I realize that you cannot simply have the screen (of Apple devices at least) display "white" by demanding a color "white".
Variable naming conventions are different from syntax, right? The variables in your own code will be the ones you named.

I think this is more prevalent in Go though because go forces you to make many more local variables (since error handling prevents you from composing expressions), and when you need lots of useless local variables for intermediate values with no externally imposed meaning people tend to fall back to things that are easy to write.
Federation. Matrix has you.
A lot of the sentiment coming from non-gql people in this thread start with: "gql is impossible to X, Y, Z" which is immediately untrue by inference if you base it from how well existing companies in the wild have adapted to it, and provable on your own if you just went out and tried it yourself.

"from what I can see in the landing page, REST can do everything it does anyway" is partially true, but is not useful, because how else would have gql picked up adoption if it can't provide similar benefits as REST? I'm smelling a lot of cope from people who have buried their heads so deep in the sand that they cannot fathom a world that doesn't prefer REST anymore. At least try the tech for your own and make informed opinions.
They keep bringing up the point that for an E2E encrypted app to be secure the client and network must be fully independent from each other, but I am not able to understand why. If I trust Signal the client, why does it matter what backend it is talking to? Being able to communicate over an untrustworthy network is in fact a core selling point of such apps. So why does it matter that Signal runs both?
Openjob: best distributed task scheduling framework
Those are open source projects with people donating their effort into the final product. Signal has employed developers.
Thanks for this great post. I'm an organizer of a local DevOpsDays conference with a very similar attendance goal and actual (300 planned, 130 final attendance including speakers, sponsors, organizers). We were touch and go for a while as to whether we'd put it on. Ultimately there were enough commitments to vendors that it was cheaper to put it on at a loss than to back out. Fortunately we had some pre-covid buffer money that kept us from being in real trouble.

All that to say, the conference was a fantastic time, even with the fewer people. We went in with the expectations of a much more intimate event than pre-covid, and we were totally energized and ready to kick it off next year. None of the people there complained about the groups being too small. The conversations that happened were the right ones; the people that had them were the right people.
The NSA thing is the only thing I didn't check out, and it appears you are right, so I am dumb. -- I wrote this before Marlinspike stepped down and I never thought to check that either, so second point to you: I am idiotic.

Regardless that particular point stands even if he's not the messiah anymore, that he was heralded as a saint who bestowed on humanity the right to privacy, and that we should trust in him.

From what I can find about the entity that funded Signal from the government it seems to be a lot to do with the CIA and anti-censorship products designed to disrupt other countries... Which, actually fits with the narrative of censorship resistant messaging, at least -- so no reason to think that it betrays the stated mission of Signal

The foundation that funded them used to be called: Radio Free Asia (which on inspection seems to be considered propaganda, though seems to market itself as free media), now called OTF, if you see the list of other software they sponsor it's very much in the same category: https://en.wikipedia.org/wiki/Open_Technology_Fund

So, I recant those statements about NSA, I only know that a number of people in NSA are not using Signal, and I had heard about NSA funding from somewhere, which obviously is not true.

EDIT: It appears the link to the submission has been slightly altered to break it; it should be: https://blog.dijit.sh/i-don-t-trust-signal
Indeed. But, it's foundational for why people have reserved some judgement about the software and the service. I didn't know Phil Zimmerman but I "trust" PGP because of the amount of eyes on the code. That was the substantive point here about Moxie.

Unless and until somebody audits and reviews, I would believe code he wrote remains in the application suite and head-end services? Should I "trust" that implicitly?

> It is absolutely not the case that cryptography engineers generally interact with NIST employees, and certainly not NSA employees.

Day to day? no. Communications are confined to matters of substance between them. But I see NIST people at IETF standards meetings, Mailing to lists. I see engineers who submit algorithms to the NIST beauty contests talking online about who they discussed things with. I knew researchers in Australia who were engaged in NSA related study and it was simply understood no technology entered the building with them, to go and do face to face but the fact they met was not secret, and there are lots of people in bodies like IETF who meet these people on an as-needs basis.

Around the time of IETF being held in Beijing a number of people wound up being asked or told not to take their normal laptop with them into that economy. A lot more than I would have expected simply because of commercial in confidence reasons of risk.

"generally" might be too sweeping. It's not forbidden. It might be unusual.
I've gotten by with bcrypt + self generated tokens so many times it's not even funny anymore. Don't listen to these bigots. You don't always need 800 layers of Oauth etc
oh yes. chicken! my favorite vegetable!
Same. As trustworthy as Signal might be, the most trustworthy chat service is one I don't have to trust at all. Being required to give them access to my contacts was a dealbreaker for me.
> Taking sand and mud from the lake floor...

Eek. Cool idea but not necessary to disrupt the balance of something else to make this.
The IAD mission protects our assets, not those of foreign sovereigns or their citizens.