skysight-inc/HackerNews huggingface dataset:
The messaging to the user should be actionable, so the exact filename going to them doesn't make any sense, but giving them a clear sentence of what exactly went wrong and what should be done to fix it if possible, or a UUID (or "Guru Meditation" value if you're feeling old school) to give to the helpdesk that can then be used to look up all of the relevant information on the other side is reasonable.

We were talking about obfuscating what the user did wrong and giving them a misleading message to somehow improve security. Saying that giving them information they can't actually use (like the path to a configuration file in a proprietary web service) is what we're discussing is moving the goalposts.

I think this is probably taking the advice about not letting people on the sign-in window know if a username/email exists in the service or not (to determine whether or not it is worth spending the time trying a list of potential passwords for another user and access data they shouldn't) and expanding it without understanding the nuance. Before they have signed in you don't know who or what is accessing the login path and therefore there's much less confidence that it's a legitimate user. Once the login is successful and that auth token is being used, though, the confidence is much higher and obfuscating details of the relationship between the company and that particular user is pretty strictly anti-user since the user can no longer be certain if the implicit contract of services provided will continue as expected or not. (Couple that with network effects, migration costs, etc, and the relationship becomes even more lopsided.)
Based on App Store downloads on both platforms, they are well over 200M at this point.
The payment system that adds a tip line for every transaction is another big one. It feels so passive aggressive when a staff member stands there and watches me fret over what to tip when I'm just buying a bottled drink. And it's not even that person's fault.
“I just don’t want go back to work, and ignore the fact that there are people need to go to work to make living and are willing to work in The office. “

Honestly I feel all these RTO rants are so unnecessary since if you get a remote job just keep it if you like. Or change a job if you don’t feel like to RTO, that’s the only ACTUAL action you can make impact. Instead of “telling” employees RTO is bad for them.
> the stack is not really optimal (last I heard it was java)

how's java relevant here?
Codegen: Fully-autonomous software engineering automation
French suburbs are still quite dense comparing to American ones. So space is indeed a major factor.

Cheap and abundant energy is here but there is no political and economical will to pursue such an agenda. The US has plenty of deserts and is yet to expand all its renewable potential and these are blue collar jobs!
The Emergence of P2P Protocols Set to Revolutionize Content Distribution
It is easy to setup fault tolerant, simple, low maintenance and cheap for small traffic and data infra in the cloud (e.g. AppEngine+CloudSQL) where provider will provide 99.99% availability.

Internet not working is usually can be mitigated through multiple providers, cellular included
I suspect you're on the wrong side of town for a comment like this, haha.

Almost always its just conflicting requests. Every ticket has a clearly defined user and business value to the person who wrote it.
Some people take psychedelics for the feeling of connectivity, and there is some talk out there about psychedelics being healthy for the brain and "helping the brain form new connections" (all of that is based on very limited evidence and a lot of woo), but even that isn't what the article was about.

The article just scanned people's brains while they were on drugs and saw that the electrical activity was more erratic and scattered than normal, not more active and connected, and concluded that people were using psychedelics based on a myth.
Who is the active user base for signal these days? Everyone I knew who was using it dropped off after the SMS debacle, which was a shame.

Edit:
Wow some weird haters on HN today. I was honestly curious as an active signal user that was no longer able to use it to message people in North America and had never seen anyone using it in East Asia. Apparently this makes some other signal users very angry.
The server must keep track of the locks, and it can only know about the lock being released if the client tells it. E.g by sending a message that the field is not focused any more. The tricky thing is in the "edge" cases, or really the non-perfect cases, which there are plenty of (as I think GP described).

The server can decide that the client is offline if the server misses expected heartbeat messages from the client. But how often will those be sent and how long grace period will we allow? If it's too short then it will be unreliable on shaky 4G connections, if it's too long then it will be annoying in the other direction.

And that's not considering the "social" problems with locks. I've worked on replacing a system that was lock-based with CRDTs where the lunch scenario from MontagFTB actually was a common occurrence.

In an "ideal" scenario your lock acquisition problem is not hard. Client's just show the UI optimistically and whoever the server decide was first gets the lock. The loosing client throws any state the user created in the short time-frame. Over reliable and fast connections for granular locks, this works fine. But in the real world that's just one of the issues with a lock based approach…
My laptop from multiple years ago (6GB VRAM) can run local models with decent performance. It's my understanding that the major energy cost is from training the models, which you do somewhat infrequently, and that generation isn't nearly as costly.

Someone who knows more, please correct me if I'm wrong!
When I'm doing realtime applications using cheap, low-power, high-clockrate ARM chips (I don't consider x86 chips for those sorts of applications), I'm not using an operating system at all. An OS interferes too much, even an RTOS. I don't see how this changes anything.

But it all depends on what your application is. There are a lot of applications that are "almost real-time" in need. For those, this might be useful.
For Python, there is the Pint library: https://pint.readthedocs.io/en/stable/
Sure, AI songs will be about love and Gucci belts.

There is also dance music which arguably has no viewpoint (considering it has almost zero lyrics).
I keep re-reading this section of their blog post trying to figure out what I'm missing here. $2.6 million full load per employee on avg? Is this heavily weighted to a few executives? Can somebody explain this to me?

Edit: I'm stupid and did the math backwards.
Considering how Griffin treats his customers, and the market in general, this tracks.
Show HN: Flywheel - The all-in-one growth platform
Those types of functions are only allowed to take in dimensionless (ie scalar) values. Numbat seems to handle this correctly, see [1].

[1]: https://numbat.dev
>The problem with both [examples of taking performance enhancing drugs, implied] is it requires other people to also take those drugs to be competitive.

Writers..
You don't need multiple security protocols (and in fact that is almost always a bad idea). You just need one good protocol and a way to securely exchange the keys. What signal solved for the most part is the secure key exchange.

If you want to talk to one person, you can give them a USB key in person with a set of crypto keys and then use that to encrypt your messages over any transit method and it will be secure.

The hard part is the key exchange.
Russia loads missile with nuclear-capable glide vehicle into launch silo
But there is literally no trace of wrongdoing. If you're going to sanction somebody, keep at least some screenshots around. Briefly digging in NixOS repo and the Discord I could find nothing even questionable the banned person did.

Regarding the image/homepage being provocative, again my suggestion would be those be. The fact that you don't agree with some person on an issue is no grounds for a ban.
Ask HN: What are interesting mediums of art that have come from the digital age?
I'm a digital artist in my 20's and I find it pretty difficult to label my work. I also assume others probably have a similar issue since most institutions & galleries around me also don't know how to label digital work. So I ask, what are some mediums you've seen come out of the digital age? I'm hoping to compile a list of resources for other digital artists to reflect on and get a sense of "ah! that's what you call it!"
I prefer the Glove80 over both (not affiliated, just my experience). Regardless of exact model, split ergonomic is a game changer.
Focusing on app features is one thing but the bigger picture is that Signal is at risk of not existing without capital… (just donated $20 today and I wish I could buy stickers off of them).
Open sourcing doesn't alleviate the need for an SBOM. Regardless of source availability or license type, it shouldn't be a lengthy engineering exercise to determine what software components an organization is running every time a CVE is published. The people doing patch management at large organizations are typically not software engineers, and even if they are, they don't have time to read source code. The questions they are trying to answer should be able to be answered programmatically in seconds. This isn't an engineering problem, it's an operational problem.
The better way to do this is to write the logs to a file or an in-memory ring buffer and have a separate thread/process push logs from the file/ring-buffer to the logging service, allowing for retries if the logging service is down or slow (for moderately short values of down/slow).

Promtail[1] can do this if you're using Loki for logging.

[1] https://grafana.com/docs/loki/latest/send-data/promtail/
I think that too.

I watched today a couple hours of Youtube videos. How many bots are needed to match that much traffic?

if we're talking about requests it makes sense. I just have to open my apache/nginx logs to see how many bots are attempting to get in.
Only thing I can think of is it incentives them not to put backdoors into Signal/get fired.
Yeah I think that's reasonable. Them asking and waiting for equipment is the key point, not keeping it.
This isn’t really the case for some college degrees. You cannot be successful in engineering e.g., specifically ME (in my case), through memorization alone.

For many degrees, you’re absolutely correct though. I remember being envious of such workloads in college simply because of the idea that time spent studying directly correlates to your grade. Engineering degrees, in general, simply show that you know how to learn. Memorization is helpful but alone is not enough to understand concepts and apply them.

Memorizing formulas vs. being able to derive them is a good example here.
Yes, it is true. https://en.wikipedia.org/wiki/Regulatory_law

And EO 14028 does it: https://www.gsa.gov/technology/it-contract-vehicles-and-purc...
Philosophy is already a self-destroying enterprise (it lets you think out to the limits of thought). Eugene Thacker's "The Horror of Philosophy" series is probably the best thorough explanation of this.
Has anyone tried setting up their own Signal server? Be cool to do this, and then give all your friends the ip for truly private messaging.

https://github.com/signalapp

Seems like all their stuff is open source.
Thank you for the frank sharing of where you are coming from and clarifying so richly your thinking, it's really valuable to me. It shows me again how we all are different and soothes me to a degree, reducing my expectations of myself around strangers.

I agree with you, given that context. This article is not an effective brief nugget on emotional introspection for videogame writers.

I see it intended to be something different in style. And the fact that I choose to see it differently is the fascinating part to me, than this whole thread here on hacker news. It's like everyone else on this thread is upset and throwing their systematized note cards up in the air due to the article being unoptimized for Google's search engine. It's frankly odd to me, this mob of judgment jumping down the throat of the author.
One thing I’ve noticed over the last few years: none of Michelin-star, tasting menu, $200 and up per plate restaurants have QR code menus. And regardless of personal taste or any kind of objective assessment of pros and cons of digital menus, whatever upscale space converges on, becomes the status symbol. So digital menus are bound to become a symbol of cheap places, if they haven’t already.
> Again, don't say "safety". That's well understood. You don't want 200 rocket companies launching at the same time from the same area. Got it. The difference is, that scenario is about traffic control and not about having to get permission to travel.

The public safety interest doesn't end at launch, it covers the entire lifecycle of the equipment until it de-orbits. Amateur launch operators will also bring less sophistication around collision avoidance.
Reserve Soldiers help test 3D-printed explosives containers
That's nice, can it work out of web browser to actually make something usable?
WiFi calling isn’t always free internationally though, it often gets charged according to your phone plan’s international rates, which is discouraging for many people. Signal, on the other hand, just sees WiFi as WiFi.
That code shouldn't generate any branching (unless on an odd cpu). A serious compiler should recognise it can be done with a conditional move.
Some of these things raise an eyebrow and I'd like them further broken down (but in the mean time, I'm still donating):

* $19 million for 50 staff

- That's $338k/head on average. At face value for a nonprofit, I'd like these costs broke down as this seems excessive. There is far cheaper IT labor available outside SV.

* 20 petabytes per year of bandwidth, or 20 million gigabytes, to enable voice and video calling alone, which comes to $1.7 million a year

- I'd drop these features if possible, or give them to donors.

* Storage: $1.3m, Servers: $2.9m

- I was actually expecting this to be far higher

- Long term storage should probably be donor-only

- Servers could likely be optimized by going hybrid cloud with colocation and owning own hardware, but again, was surprised how "little" they're spending on this.

* Sms registration fees: $6m

- Stop contributing and supporting the "Your phone number is your identity" problem.

- Move towards helping educating society and establishing a set of encryption keys as their long term identity

It's easy to criticize from the bleachers. Still thankful for the app and I'll continue to donate.
You mathed backwards. It's $380K per person fully loaded. Which is pretty inline with decent tech salary these days.
I think your math is off? $19M/50 people = $380,000?
I wish I could use signal without a phone and phone number. Otherwise it is useless to me.
Fluticasone is fantastic btw
> As a small nonprofit organization, we cannot afford to purchase all of the physical computers that are necessary to support everyone who relies on Signal while also placing them in independent data centers around the world.

This is really the crux of the problem. ~$3M of servers per year is more than enough to start purchasing hardware, I wish there were easier ways for people like me to participate and help Signal on the cheap.

As someone who participated in the builds they complain about being expensive (and ignoring their , I don't think it's a function of centralization or "troubling" as much as it is practical. Meta, Google, etc all have many billions they could be saving if they could figure out how to make it cheaper too.
"But I do make some, and many people make lots of money with simple tools all the time."

My boss makes money. I'm a simple tool.
Is it possible to self host signal? Can signal move towards a model like the fediverse where the software development is decoupled from the hosting costs?
I don't think realtime anything has much to do with mutex deadlocks, those are pretty much orthogonal concepts. In fact, I would make a stronger claim: if your "realtime" system can deadlock, it's either not really realtime or it has a design flaw and should be sent back to the drawing board. It's not like you can say "oh, we have a realtime kernel now, so deadlocks are the kernel's problem".

Actual realtime systems are about workload scheduling that takes into account processing deadlines. Hard realtime systems can make guarantees about processing latencies, and can preemptively kill or skip tasks if the result would arrive too late. But this is not something that the Linux kernel can provide, because it is a system property rather than about just the kernel: you can't provide any hard guarantees if you have no time bounds for your data processing workload. So any discussion about -rt in the context of the Linux kernel will always be about soft realtime only.
You're doing that division backwards.
? That sounds like you make some inference about how I treat others based on how I view the process of assigning interpretations to words. That's kind of arrogant, this isn't Reddit.

I take a lot of care to follow people's preferences, because I don't want people hurt, I rather have more comfort and happiness overall in the world and I prefer more friends and good relations rather than fewer.
I'm also reminded of Steve Jobs's Interface Builder demo: https://www.youtube.com/watch?v=dl0CbKYUFTY&t=70s

I still think it's impressive that AI can just look at 2 rectangles and discern slider though.
unlikely the people i want to talk will bother setting this up
> for the rest of the world the insane mark up on that communication method has mostly obsoleted it...

For P2P communication. SMS is alive and well for B2C messaging, most importantly for 2FA OTP delivery, but also as a first line of defense against spam/bot account creation.

It's not a good solution to either problem, but it's slightly better than nothing (which apparently makes it good enough for many), so I suspect we're stuck with it for now.

> That'd be all well and good... the technology would die naturally, but all my American relatives continue to stubbornly use iMessage.

iMessage is not SMS, though. It just uses phone numbers as identifiers, but so do many other popular over-the-top messengers, including the most popular one globally.
And? Were you born knowing C++? Is that a genetic trait?

As you yourself have implied, you have to _start_ somewhere.
> going fully digital with little reason to do so

In many areas, there's a huge reason -- the availability of labor has decreased, so cost of labor has skyrocketed, along with inflation generally that can't always be passed on to customers.

Restaurants that used to be able to afford 2 servers can now only afford 1, so customers have to order digitally because otherwise it's too many tables for 1 server otherwise.

You don't have to be McDonald's scale. I'm talking about independent small restaurants.

(I agree it sucks for the customer -- I'm just saying restaurants are being forced into this. They're not doing it for fun.)
Awesome TLDR;

Thx!
Missed that bit. I wonder what equipment they connected it to, for that to happen. Seems like a bigger deal than finding that molecule!

I suspect they mean something slippery when they say 'synthesized and tested', like a simulation.

Pictures or it didn't happen.
I have very different memories of the early 90's. While, even as a programmer, while I very much interacted with computers as a tool, I tended to treat interactions with it as a conversation with the engineer who designed the hardware or software I was interacting with. Most non-programmers weren't really conscious of the engineer on the other side of the conversation, so the other side of the conversation was the "stupid computer".

I'm not sure the key change over time here is the about "emergent technology". My observation is that, as computers were increasingly networked (particularly after the explosion of the Internet), perception of computers shifted much more to being a communication tool... and that's now literally true as the primary computer people interact with is their phone. Even before smartphones, once the networking became ubiquitous things started changing. Email was initially the primary use for networked computers, and then with the web they became tools to interact with remote people/organizations, and with the explosion of social media they became tools primarily for interacting with other people. Before networking, the person at the other end of the conversation was just so much more removed/abstract, so most people's mental models were left with only the device itself in the interaction.
Thanks solardev, I've managed to get Java out of the stack replacing it with a Python package. Still horrible but not bloated anymore :). Now I'm looking for options to package a Python app, that seems to be way easier, so many new things for me here
We need an AI to flag all posts about parenting so it can make people read this statement before they comment.
Oh wow, I use WinMerge and they almost look identical on the screenshots. Honestly googled if they are not the same, or open source version of it - but does not seem so.
Anecdotally: I never met failing or bottom-barrel students taking ADHD meds to boost their performance.

Obviously, I can't know if students from the bottom percentile also engaged in that, but all the students I knew that took drugs to perform better, were motivated students that wanted to maximize their grades. And they studied things that required lots of reading and memorization (law, medicine, and similar).

My take was that the kids that used those drugs, were the ones that wanted an extra push on the last 10% - to put it that way.
Phew, that's a hard one. People are still demonstrating for the safety of the Palestinian people, and the Israeli army is very much aligned with that (Israel provides medical supplies, helps evacuate people, etc.). In fact, the leading slogan in Israel is "Free Palestine, from Hammas". Though at least from what I'm saying there's a lot of talk about unity, so there's probably less public tolerance for protests. The thing is, Hammas butchered a lot of peace activists in this attack, they killed babies, they raped women, and they kidnapped many people. Everyone's children is now in Gaza fighting for the safety of everyone in Israel, and its mere existence. I think protesting about anything other than the return of the 240 hostages still help in captive would be considered bad taste.
I am reminded of Outer Wilds (no spoilers, just an awesome experience/game).
It's a bit off topic, but I've wondered the same.

We could stack a hundred layers of encryption algorithms, and if just one of them works, then the whole stack is secure.
Why is it that SMS is so damn expensive? (or more specifically, what is it about Twilio et al's businesses that makes them cost so much?)
Another python alternative that work well with numpy arrays is astropy.units (also mentioned on the pint website):

https://docs.astropy.org/en/stable/units/
> we have no basis for thinking that LLMs are somehow unable to compute the same set of functions as humans, or any other computer.

Humans are not computers! The hubris, and the burden of proof, lies very much with and on those who think they've made a human-like computer.

Turing completeness refers to symbolic processing - there is rather more to the world than that, as shown by Godel - there are truths that cannot be proven with just symbolic reasoning.
A TechCrunch RSS feed was hijacked in 2021. Nobody noticed