skysight-inc/HackerNews huggingface dataset:
that is an absolutely insane take.

first of all, if a loan allows early payoff without a penalty, then it's your prerogative to take that option anytime you feel like it with absolutely no moral qualm. that's the point of written down contracts. you are under no obligation to discuss your future financial plans with the sales staff, nor what strategy you plan to take. they in turn are free to make any deal they wish, and if they offer a deal whereby you have an option, they have offered you a deal whereby you have an option. you don't need to lie, but it's really irrelevant because the only thing that matters is the contract - if either side actually cared about something that isn't written down, then shame on them. "assumptions" is no part of it.

secondly, it factually just doesn't work that way. you could straight up tell them you want to pay it off tomorrow. they won't give a shit. if they "make money on the financing" via some incentive, they get paid when they close the loan regardless of when you pay it off. if you pay it off early they don't even know about it and could care less. and if the finance company cared, it wouldn't be an option or it would have a penalty.

you don't need to, nor should you, "stoop to their level". simply go in, pick a car you like, tell them what you want to pay. if they say "there's a better price if you finance" then either take that deal, or counter-offer the same in cash, or don't and leave. if they say, sorry i can only do that if you finance, then either take the financed deal (sometimes the rates really are quite good) or ask if it has a prepayment penalty: "so, if i pay that off in full next month, there's no penalty and you still give me this price?". then make them show you in the paperwork where it says that.

it's fine to not want to play games with deceptive dealers, but you are certainly under no moral or ethical obligation other than to hold up your end of whatever deal that is made.
My guess is that FB stores the keys to reverse the encryption.

The point of e2e is to block any third party to to see your conversations by sniffing packets. Not to stop Meta themselves.
It’s as open as OpenAI
"Each device cost $20K"!
The risk is not just 'stabbed by a tweaker' but 'surprise fentanyl'. And police are very unlikely to come after some random online buyer who is not distributing/reselling.
I think you'll find that the vast vast majority of us don't care about the whole "cannot be used for bezos yacht" problem when we contribute to free software.

I contribute with no expectation of monitory gain and absolutely zero desire for some random foundation or company that's part or almost always created later to make any money. If some contributors want to make money become consultants the "amazon problem" isn't a real one.

I love when Amazon or Google or whoever starts working with a project I'm touching it means it will normally get high quality contributions.
> without paying any sort of compensation to the redis developers.

AWS employee Madelyn Olson was a committer on Redis since 2019. Since 2020, she was on the core team of maintainers.
The Diamond Age published in 1995? An idea that's 60 year+ old?

The Diamond Age had specialized drones to shoot them and used barbs and nanotech - "When they were shot out of the tag stat's nose, they sprouted cruel barbs at the nose and a simple empennage"

The hard part is when you miss you don't hid a kid walking to school in the skull and kill or blind them.

Pictures of the non-nano real life tech - https://www.google.com/search?q=GPS+darts+police&tbm=isch

The Diamond Age invented "magic", then missuses it constantly (vacuums and hydrogen/helium at normal atmosphere are all about the same). There is not much to see there for predictions, it's fun fiction.
> How did folks come up with and it, prove it works and start using it

I mean, anything at the university level should include proofs on why it works. I would go as far as to say you aren't really doing math if there are no proofs.
Was initially expecting this to be more “elementary education” focused rather than academic math.
Good article. As a non-academic, it is cool to see the idea of “what makes a good paper” explored.
A lot of the concepts mentioned seem to hold up really well in theory but ultimately just seem like stylistic differences, to me.
Academic writing can have an international audience and perhaps “just being technical” has advantages.
That doesn’t change the point of the article, though.
FYI you can configure old UI to not show modal dialog for commit. Took me too long to learn this and this is how I use it now. I despise the new UI. Every tool don't have to become another popular tool (vscode). I find the new UI harder to use.

I like all the buttons and menus etc visible right there without needing extra clicks. When working with colleagues I can see them struggling to find features that I have been using with old UI for my advantage because it's all out there in front of you and they don't even it's possible.
There are the stories he tells about himself, his intentions, and his beliefs. Then, there are the cold hard facts.

Even if you wanted to believe his statements, they do not align at all with his actions.
Thanks! We changed the URL to that from https://www.thedrive.com/news/police-tag-fleeing-cars-with-g....
This validates my decision never to use Facebook or other social media apps on my phone or desktop. I know that they already know me because I was unable to talk some in my family out of joining and using their "services".

When I was young and almost a teenager we had a different set of social diseases that we worried about. Those were the days, my friend.
The whole move to new "open-core" licenses started with the most famous (infamous?) AGPL project - MongoDB. The AGPL is not what companies like this want (Mongo, Elastic, Redis etc). They don't want AWS's code: AWS is already providing that. They want AWS to pay them royalties or stop competing.
If it works as advertised, it would be near-magical physics, thanks for posting!
> The communications at issue relate to Facebook’s so-called In-App Action Panel (“IAAP”) program, which existed between June 2016 and approximately May 2019. The IAAP program, launched at the request of Mark Zuckerberg, used a cyberattack method called “SSL man-in-the-middle” to intercept and decrypt Snapchat’s — and later YouTube’s and Amazon’s — SSL-protected analytics traffic to inform Facebook’s competitive decisionmaking. As described below, Facebook’s IAAP program conduct was not merely anticompetitive, but criminal.

> ..This code, which included a client-side “kit” that installed a “root” certificate on Snapchat users’ (and later, YouTube and Amazon users’) mobile devices, see PX 414 at 6, PX 26 (PALM-011683732) (“we install a root CA on the device and MITM all SSL traffic”), also included custom server-side code based on “squid” (an open-source web proxy) through which Facebook’s servers created fake digital certificates to impersonate trusted Snapchat, YouTube, and Amazon analytics servers to redirect and decrypt secure traffic from those apps for Facebook’s strategic analysis.

Here's a link to the PDF document: https://s3.documentcloud.org/documents/24514262/discovery-br...
It's not in Debian and their wiki straight up directs you to podman with a nice big scary warning about dockers root issue.

https://wiki.debian.org/Docker

Docker is dyeing on linux podman will be the only one that remains.
Yes - isn't that what anesthesia does?
I'm not sure I would go as far as to ban anthropomorphism, but basically everything else you said I agree with. We should just blanket ban computers impersonating people - this should include deepfakes and similar. The only exception is for cinematic productions, with actors who have pen-and-paper signed consents.

As dumb and over-regulated as it sounds, it really isn't that crazy, and could have positive side-affects. It's one of those rules that really just enables us to trap bad behavior easier. It's like lying on a bank document, it's illegal because it helps law enforcement get a foothold into investigating more serious issues like laundering. Impersonating a person laws would really just helps us get a better grip to investigate phishing or other frauds, as well as address anti-consumer behavior.

It would also help with false advertising issues - "a computer cannot make promises like selling you a car for $1, but a person can. If a computer pretends to be a person, its hallucinated promises are legally binding, and the owner is liable". Same benefit applies to spam and fraud calls - simply pretending to be a person is enough of a crime to get a warrant to investigate the actual fraud.
Automatically solve captchas with NextCAPTCHA
> Publicly traded companies make money by creating value and selling products or services.

But their stock price is (mostly) independent of that. It is indeed true that at least with short-term trading, your gain is someone's loss, and vice versa. There is a difference between cryptocurrency and companies, but there is little difference between trading in cryptocurrency, and trading in traditional company stocks.
> The point of e2e is to block any third party to to see your conversations by sniffing packets. Not to stop Meta themselves.

No... the point of end to end encryption is to be encrypted end to end. Its literally the name. If meta can read your encrypted messages, that is just normal encryption not end to end encryption.
With inflation and economic growth, won't the wealth held by the top 1% always be a new "record"?

Even if wealth distribution doesn't change?
Related:

DOOM Captcha - https://news.ycombinator.com/item?id=27264988 - May 2021 (173 comments)
I believe this is the goal of https://faircode.io ?
https://ia801508.us.archive.org/25/items/gov.uscourts.nysd.5...

https://ia801508.us.archive.org/25/items/gov.uscourts.nysd.5...
Wasn't AWS a major contributor to Redis? How are they "freeloading"?
Open core only became a word people said 10 years ago, it's on the rise as a business model from what I can tell.

Do you have suggestions for alternative funding/support models? What is open core being replaced by from your perspective?
> But nobody thinks a PBX system is an actual human.

My grandfather getting trapped by a robot span call thinking he's talking to the Bank Employee at the other end tells me otherwise.
> re-selling your product” and not much more

That's not what AWS is doing. AWS is selling management services. The fact that managed DBs are as popular as they are says this is a significant value add.
The OpenWhisper protocol, which is supposedly implemented by Messages and WhatsApp, was designed specifically to enable anonymous key agreement between the two or more parties sending messages, and no one else, including the service provider.

Whether or not Facebook actually implements it this way is a great question.
Packet sniffing is mitigated by TLS/HTTPS.

The point of end to end is to to ensure that only me and the person I'm sending a message to can read it and that none of the systems in-between us can read the plain text of it.
Right. corporate America in a nutshell. And I'm not being glib: there is no external check on a slow drip of firings, and people will write you off.
If you just click through the links you’ll see the actual input to the LLM https://twitter.com/SammieAtman/status/1772075251297550457

Nothing you are saying is technically incorrect. But, optimal performance was not the goal. The goal was to see if this crazy stupid concept would actually work. And, it does!
> everything is always subliminally affecting you

Right, but certain methods are more effective than others. This paper is arguing and encouraging exactly how to manipulate more effectively.

> It might as well do it in a helpful way

Being more effective in teaching I agree is a good thing. But a math paper isn't for teaching, it's for showing a proof or making an argument. I just think we ought to set standards on academic research to remain as neutral as possible to let ideas flourish on merit rather than cunning tricks.

EDIT: I get that a career in academia requires all these games to get more citations. Looks at ML research, I feel like abstracts are written by used car salesman nowadays. So like, if you have to do it do it. But we ought to call it out from time to time.
This really reminds me of a writing course I took called “Writing Stories for Science”. That’s where I first encountered the idea of story beats. The class seemed more focused on the natural sciences and story structures, so I got the impression this must be very difficult to apply to pure mathematical writing. Maybe it’s easier in applied mathematics where there’s a clearer reason that could be explained to a layperson.
Define "fix". By definition you cannot have an open source licence which says "cannot be used for bezos yacht". Either you accept that, and don't rely on exclusivity for income (which really what the whole relicensing thing is about), or you don't open source your code (and accept that not being open source is a problem for some people). Open source + exclusivity for income is an unstable state, and really only works if no-one else competes with you (e.g. a specific niche), or you have some other means to enforce it (e.g. Red Hat limiting access to source to its customers, and not renewing contracts if they share the code).
Greetings, fellow digital pioneers! Today, we commence an exciting expedition into the immersive realm of “Pufferfish Frenzy,” an innovative web3 game crafted by the visionary minds at Mymetanomics. Join us as we navigate through this captivating NFT adventure amidst the ever-evolving expanse of the crypto universe.
Was the sentence "this is easily demonstrated by..." not originally part of the post you're replying to?
tho the parent poster could mean the skill in the job, rather than people pleasing skills.

Of course, it's a meme now-a-days, that meritocracy is how you (don't) get promoted, which is what the parent poster is lamenting.
Right, I think the violation here is misrepresenting what the app did. Users had to actively install this on their own devices.
Then don't make an open source hobby if you want to pay the bills with it. Or accept you're going to have to be a consultant for the project to make $$. I don't expect jack shit back for my open source contributions nor do I care if Amazon uses it.
Not to defend this practice, but some missing context here (AFAIK, I wasn't involved): this isn't the FB app, but apparently "Onavo Protect" followed by "Facebook Research" apps, the latter of which reportedly explicitly paid people to install it for the express purpose of collecting this kind of data.
Gen AI is a powerful tool that can help businesses provide better customer service at scale. By automating tasks, providing real-time support, and personalizing interactions, Gen AI can help businesses improve efficiency, increase productivity, and improve customer satisfaction.
Don't request it
Don't store it
Don't keep it.
Was your non-dilutive capital debt based and/or have covenants? If not, I'm really curious about what kind of structuring you were able to secure. To your point, non-dilutive capital is clearly superior to dilutive capital except when it involves covenants (which is quite often).

I do remember Pipe being in vogue a while back around financing based on futures of subscription fees, but so far that's the only model I can think of that isn't debt with either a) its associated covenants or b) some kind of underwriting box piggybacking off of dilutive capital (venture debt)
Honest question: I get why React has created the naming convention of "use*" for their hooks API. It makes sense to me. But why is in Dioxus creating a new signal called "use_signal"? This function call creates a new signal, doesn't it? The signal is not recreated on every rendering (that's the whole point of signals).

let mut count = use_signal(|| 0);

In SolidJS you create a signal with createSignal, which makes much more sense to me.

const [count, setCount] = createSignal(0)

The naming of the API matters, because state hooks behave much differently and might have complementing needs like "useMemo".

Is there a reason Dioxus for the "use_signal" naming other than trying to be close to React?
The Gini coefficient is a terrible measure to target.

It measures income distribution without regards to absolute measure. For example, Tunisia has a much better Gini coefficient at 33, than the US which is 40.

As a poor person, or even middle class, would you prefer to be in Tunisia or the US?
can you suggest few?
In this day and age, a gps tracker on a car is outdated tech. People carry phones with them that have much better geolocating devices than whatever these police departments can buy off the shelf.

People are crying foul about “dystopian” nanny state. In reality, that worst case scenario has already come to life. Except it’s not the government, it’s private entities vacuuming up all of your data. Your phone, your “smart car”, IoT devices, your smart home, various free software, emails, voice recordings, search history, watched video history, social media engagements, purchase history. All of these possible vectors. It’s all packaged up, and sold to advertisers or used to train LLM models.

Even the government entities have been caught buying up private data [1]

September 11, 2001 (2001-09-11) — changed the game on privacy. PATRIOT Act is awful.

[1] https://www.cnn.com/2024/01/26/tech/the-nsa-buys-americans-i...
In such a world most of the open source software you’re used to wouldn’t exist (or would be much less complete) and you’d be forced to work with and use proprietary systems most of the time.
I work a normal job.... Open source is a couple of hours a week at most. It's a hobby for me some months I do nothing other I crush bugs like it was my job.
Something very similar is happening, at a very rapid pace, in software development.
There exist shared-source licences which do this (https://prosperitylicense.com/ is almost what you describe, but it's the one I can recall of the top of my head), but you can't (by definition) have a open source license like this.
brother.

I saw a video of a guy automating an interview recently, and I was scared that idea would be flipped (interviewer/company uses AI to screen applicants)

yay! no more humans in the process. I wonder how much AI bias will come out in these automated interviews
As someone working in an extremely small scale world I don’t get opportunities to tackle scaling problems, so this was a very nice read. Thanks!
I can't believe I'm arguing that it's immoral to steal on HN, but here we are...

Yes, you might decide that breaking your moral code to feed yourself or your family is an acceptable tradeoff, but it's a tradeoff nonetheless. It's a conscious choice. A lot of people in history made a decision to go hungry instead.

Children might see the world in Marxist generics where some ambiguous, but for some reason always "wealthy" people stole all the fruit trees and poisoned the water. Adults usually deal with specifics. Who are all these mysterious people are? Do you think the food just fell from the sky before the industrial age? What do you think happened to the people who stole before the industrial age, hungry or not?
For sure. It's the difference between commoditizing your complement[0] and trying to build a business on something anyone can run for free.

0: https://www.joelonsoftware.com/2002/06/12/strategy-letter-v/
If do some rough math, 1% of the world's population is 81 million. So at $44T, if you took that $44T and split it up equally, each person would have ~$550,000 USD.

Doesn't seem like such a big number any more. I'd bet many people on HN have more wealth than that.

Actually, I'd bet many people on HN are in the top 1% of wealth globally.
Did you read the article?!
Yeah, it's tough to figure out who was harmed here. "Can we install an SSL MITM attack on your device?" "Sure, for money!" "Here's some money."

I mean, this is literally every big company IT department.

The best argument I could see that would lead to this succeeding is if someone at Facebook accepted the Snapchat ToS and it said "you can't use MITM to intercept our traffic". Otherwise, fair game, done billions of times a day. (Pin your certs friends.)
Comments moved to https://news.ycombinator.com/item?id=39832272 (which was posted earlier)
> And you as a customer can simply stop using their services if you no longer trust their intentions

The original premise of the article is we don’t have to be concerned with their intentions. This is false.

> Why are so many of you so keen for them to be "wrong"?

I’d rather they were right. But they are wrong.

> Like what even is the alternative approach here supposed to be? Don't build a product in the first place?

Don’t say you can do things you can’t.

I don’t have to offer a solution to point out they’re not offering one either.
Uh nope, that's a huge move of the goal posts. The point of E2E is to ensure that nobody besides the two endpoints can read the messages, including all hops along the way, notably including the service provider themselves.

The problem is that this requires users to do things like use one device to authenticate another or restart key exchange with all of their peers. If a user loses their phone, then they will need to redo their security exchange process, which nobody wants to do or even understands. Thus companies often store key material in an insecure way to allow new devices to be silently added to the account.

Plus, even if E2E is well implemented, there are still problems when the endpoint software can be remotely updated to a version that exfiltrates keys or messages.
> two or more parties

When you’re having a 1:1 conversation with someone at a party, and then crack a joke and some weird dude 10 feet away laughs at you and says “good one”.

The obvious answer here would be for meta to consider itself party to your conversation.
In my experience, (c) is a very large part of it. At one point in my career, I decided to try writing good, accessible articles, which properly motivated definitions and well-explained arguments with plenty of hand-holding.

When I did that, a version of the derogatory sentence "The proofs are easy / non-technical." would appear in the reviews. Every. Single. Time. Of course, I have some independent confirmation that the proofs weren't easier than in any of my other work (e.g. my coauthors and I had to work just as hard to get them), but this led to having to resubmit them to less prestigious journals than the ones which normally published my work.

I gave up on this approach, and realize now that the opposite is more likely to be rewarded: out of 18 eventually-published papers, I only managed to piss off the referees enough for a revise/resubmit decision once, and I really went out of my way to keep the proofs vague that time.

Of course, I had a largely unremarkable career in a somewhat niche subfield: I'm sure there are levels where (a), (b), and more importantly the sheer speed required to get a result out are bigger incentives. And from yet other fields, I occasionally hear rumors of people who master the art of opaque writing and "parallel construction" only to make it difficult for others to get ahead of them (hi שַשֶׁ!).
It's in Debian: https://packages.debian.org/sid/docker.io
My thesis is that when you don't have the pressure of VC funding (gotta hit the revenue numbers you promise to investors sooner or later), alignment between the business and the OSS community isn't as tough to find.
Open core is being replaced by "selling exceptions" to AGPL/SSPL/BUSL/FSL. See MongoDB, Elastic, Hashicorp, Redis, etc.

Personally I prefer the Adam Jacob trademark business model but it's not that proven and it can't be retrofitted.
And yet straight pipes are still a thing.
I put data into Google Docs knowing it lives on their servers. So there’s no problem there.

Signal has an open source client. Big difference for these claims.
This is not a new idea... i mean its so old it was called out as being "not free" back in the 80s by the gnu project.