skysight-inc/HackerNews huggingface dataset:
That was my impression too, that this was more of a thread to slander Telegram than anything.

The main leg that Signal has to stand on is it uses standard encryption, but it has all kinds of shady components like it used to require sharing phone number to contact someone, and the cofounder Moxie launched some MOB crypto scam which went to 0 and he has now quit the project too.
OpenAI to announce ChatGPT product improvements; "feels like magic," says Altman
I'd forgotten about the Aggregation Theory piece.

"By extension, this means that the most important factor determining success is the user experience: the best distributors/aggregators/market-makers win by providing the best experience, which earns them the most consumers/users, which attracts the most suppliers, which enhances the user experience in a virtuous cycle."

Sadly, the reality of the virtuous circle though is: enshittification.

"...from music to video to books to art; the extent to which being “special” meant being scarce is the extent to which the existence of “special” meant a constriction of opportunity"

I don't get this. Rarity or inaccessibility has been used as marketing tool, sure. But great music and books were not scarce for a long time pre-internet. Feels like a "never mind the quality, feel the width" view of culture.

"LLMs are breaking down all written text ever into massive models that don’t even bother with pages: they simply give you the answer."

When will people stop saying that? The give an answer, yes, but is it the answer: caveat emptor.
Reject it. Go analog. Enter the world. You'll be happier and your life will have meaning.
You are speaking of metadata as if all metadata is equal. Signal does collect phone numbers (even though, since usernames have been introduced [1], this can be made opt in from now on), but not the contacts or social graph, neither many other relevant metadata [2]. What they can gather from this, is only when the specified phone number registered to signal services and its last connection to the server [3].

So, if you can call "metadata exchanging app" an app that simply has a list of numbers registered to the service, without any metadata assigned to them except their last access, the same label could be assigned to a much larger number of services.

It may not be anonymous, but it can hardly be disregarded as private.

[1] https://signal.org/blog/phone-number-privacy-usernames/

[2] https://signal.org/blog/sealed-sender/

[3] https://signal.org/bigbrother/central-california-grand-jury/
Ask HN: Should I introduce ads?
The platform I launched last month — whereto.stream has quickly grown to 30k monthly active users (thanks to this wonderful community), and I'm now eager to enhance the service with brand new features.

However, to achieve this, I'm trying to gauge user interest and willingness to pay for a premium version to avoid introducing ads.

All feedback is welcome!
When David Allen released his book "Getting Things Done" (GTD) over 20 years ago, it was like a revelation. Everyone was into GTD and was creating lists, defining contexts (@errands, @groceries, @phone, etc.) and talking about "Inbox Zero": process everything into meaningful lists, leave no stack (email-inbox or desktop) unprocessed.

David Allen was fully into lists, and he recommended not to use the calendar for task management, only for appointments. It was "sacred terrority". Why? Because the calendar can never hold as many items as lists, and he had hundreds of items in those lists. And he started his system from the observation that people manage their lives with their calendards, because they don't have better alternatives.

Fast forward twenty years later: After a detour via Bullet Journals (slow down, create one page for the day, and try to focus only on those items), the calendar and time boxing are all the new rave. Why? Because lists tend to be a magnet for items, and they get more new entries than we can process.

I am predicting the calendar will be out of fashion for task management in a year or so. And then we'll go back to post-its maybe?

The thing is, no system is able to handle the amount of commitments we have in modern day life, either internal (I'd like to lose weight, be a good father, community member, have control over my personal finances, be a good spouse, etc.) or external.

Observing people who are highly productive, I realize they don't even have a task management app or a proper calendar. They use whatever they have (a piece of paper, Notes app in iOS, their email inbox (mailing themselves), or whatnot), but they have a sense of urgency, laser-like focus, and ignore most of the demands thrown at them, looking like egoistic psychopaths, but getting big sh*t done, all the while we mere mortals write on HN or curate our (latest) todo lists or calendars.

What to make of it? Productive people use what is available, put more focus on the task at hand instead of the tools, and have a sense of urgency and focus on very few things.
> I'm sure reactionists will immediately drop Signal because Elon the great said they should

Signal got a massive boost in popularity because "Elon the great" literally told people to "Use Signal".
The most amazing thing I've seen all week ... and of course this gets "flagged".
Went to apple. Told them i wanted their best computer. Two employees lied to me and sold me one. Turns out that was not their best laptop. The employees just sold me whatever. Tried returning it. Nightmare. Ending up just leaving it there. Two weeks later finally refunded. Gross lying liars. Awful experience.
It's interesting to see this comment downvoted. I'm honestly curious as to the thinking here. How are parents having kids because they want them not acting selfishly?
It’s ultimately a distinction without a difference, as it is an appeal to the morality of the corporation behind the product, which can change from based on their incentives. E2EE protects against that.
> 1 in 3.5 children aged 9 to 18 spends 50+ hours caring for family members.

Surprising, but you can't just dismiss statistics on the basis that they're surprising to you. A lot of people lead very different lives, invisibly.

15-20% of people are disabled: https://www.ons.gov.uk/peoplepopulationandcommunity/healthan...

Not immediately clear if "caring for family members" includes older children caring for younger children, but that would certainly bring up the numbers.

It is possible that the "50+ hours" is not accurately counted.
Yeah, the pro-encryption and pro-privacy people sure seem to be trying to tell us something about Telegram
People do seemingly crazy, risky things for seemingly innane reasons today. Why would ancient humans be different in that regard?
It's completely fair to criticise Signal for its weird decisions (like that time they stopped publishing part of their code for a while to surprise everyone with a crypto scheme.

However, when this criticism comes from an insecure competitor that was forced to pay back immense amounts of money for misleading investors about crypto, I wouldn't take that at face value.

Signal is mostly fine with some weird/bad decisions. Telegram is worse in every single way.

All of that said, I've never seen any of the cryptocurrency shit show up in my phone. Is it geofenced or something?
same, I wish more libraries would go the ecto design route. my ecto queries map pretty close to 1:1 with the sql counterpart. no guessing what the output is going to look like. I spend my time debugging the query and not trying to get the orm to output he query I want.
For premium, I'm thinking of features like availability alerts, collaboration on lists, hiding watched content, filtering by subtitles and audio, finding your favorite songs and albums ;), showing only your services, data privacy, dark mode, no ads...
As someone who switches between PyCharm and VSCode, I find that Copilot seems to work better in VSCode for some reason. Nothing major, but the suggestions I get just seem slightly more relevant to my code base, and are more often what I wanted.

Although I could be hallucinating the whole thing.
Torvalds detecting by compiler Arithmetic Overflows/Underflows
Please post examples. I'm looking for such tool.
As I recall they went out of their way to hide that they were working on that shitcoin integration as well, Signals open source releases went dark for a year or so without explanation and then it turned out to be because they didn't want people to know about MobileCoin. Compromising the transparency of the project to obfuscate the development of a feature that they surely knew would be unpopular isn't a good look.
Show HN: Controlling a Web Cursor Using GPT-Vision
Hi HN! this is a weekend experiment to see how well GPT4V can see and navigate the web. You be the Judge.
The presence of a source map doesn't automatically make this open source. It's copyrighted and proprietary unless there's a license that grants additional freedoms.
> security dark pattern - make privacy a big selling point, but then don't activate the security by default

pretty similar to whatsapp. they boast end to end encryption, but business account (all of them now) uses the facebook server's key, so that the business can give access to several other clients to answer customers. they still call it end to end encryption, and this was actually the last crap the original founder accepted before leaving with lots of money on the table.
Without "SIM card" and "without a number" are different things. Apparently you still need a number, a "blockchain-powered" number:

"[...] You can have a Telegram account without a SIM card and log in using blockchain-powered anonymous numbers available on the Fragment platform."
It's funny, the "Godfather of accelerationism," Nick Land, saw fragmentation as the solution and universalism as the problem.
This article holds up really well. Only things I would suggest is to consider Darktable instead of Lightroom; it will 100% meet your personal needs, and probably meet real world professional needs in most cases too.

I would also suggest considering a compact point and shoot instead of a DSLR or mirrorless. I have gotten way better shots with my ~$700 ZV-100 (marketed as a vlogging camera, but it's great for photos too) than I have gotten with my DSLR in the time that I have had both, simply because I actually take my ZV-100 everywhere. Image quality wise it sits between my cell phone and my DSLR, but being able to put it in my pocket like my phone has been a game changer.
>many or most companies out there will be more or less fine with mid-tier talent.

Indeed. As my years go by, I value reliability more than talent, possibilities, records. For example when playing games, I always leave a good buffer so that the card delivers the 60 fps in the most complex scenes too. I value that more than beautiful, but sometimes choppy performance.
The NVDA screen reader reads this text as: "This is my email frame link email us." That is by no means equivalent to actually seeing the email address. I found that HTML entity encoding every single character of the link takes care of any spam problem already and is much more accessible.
You will eventually revise your opinion once you find your chat logs 20 years later in some randomly occuring IRC logs because that one guy was using an IRC bridge.

You cannot critique missing guaranteed end to end encryption when effectively matrix cannot guarantee it either.
WrenAI makes your database RAG-ready
Ironically I saw that FB Messenger started adding E2EE by default to my chats, whereas Telegram I believe still requires opt-in.
Loom was a fabulous game but it was never on C64.
I would be very interested in you providing an example of Deep Learning offering more cultural or historical impact than Socrates / Wittgenstein.
> I understand why you don't like this approach but think of it from the other side's perspective.

I did and my opinion remains unchanged.
CSV is CSV. A serialized object is a serialized object. The main concern they cite, are supply chain attacks. So it’s like saying loading a package can… load a package. Supply chain attacks will always be a thing. I’m grateful for the work of the researchers in question but don’t feel this is much of a blemish when it comes to R itself being insecure.
Maybe just don't use either one and switch to briar or tox instead?
Show HN: Generate a website in 6 seconds with Groq Llama-3-70B
I've been using Entity Framework for the last 5 years and have not encountered this issue, as long as I've got all my Includes specified correctly.

There is also the AutoIncludeAttribute that you can specify on entity fields directly to always include those fields for every query.

My main complaints with EF are that the scaffolding and migration commands for the CLI tool are nearly impossible to debug if they error during the run.

But when they run right, they save me a ton of time in managing schema changes. Honestly, I consider that part worth all the rest.

There can also be some difficulty getting queries right when there are cyclical references. Filtering "parent" entities based on "child" ones in a single query can also be difficult, and also can't be composed with Expression callbacks.

But in any difficult case, I can always fall back on ADO.NET with a manual query (there are also ways of injecting manual query bits into EF queries). Which is what we'd be doing without EF, so I don't get the complaints about EF "getting in the way".
Nix, arch, basically everything packages it.
https://words.filippo.io/dispatches/telegram-ecdh/

EDIT: discussed on HN: https://news.ycombinator.com/item?id=40315274
> Remember also that who you are (or even just the fact that you are) is in a very large part due to them.

I’ve got a PTSD when it comes to being in a relationship and struggling to make my own family because my parents cheated on one another, and I’m in huge debt and living in friend’s house because I allowed them to move into my house after they lost their incomes due to covid.

Yeah, I remember everything.
Repeating the same talking points doesn't make them true.

Even if there is no nationwide "social credit score", local governments have been experimenting with an incentive and penalty system for decades now. This is well documented inside and outside of China.

Even the new nationwide law set in place in 2022[1] mentions some of the same practices carried out by local governments:

> There are 14 penalty measures for untrustworthiness, broken into 3 types [...] such as restricting entry in a marketplace or industry, restrictions on holing [sic] positions, restrictions on spending, restrictions on exiting the country, restrictions on promotion to a higher level of schooling, and so forth [...]

The law is so vague that I can imagine in practice it's abused for all sorts of things, such as "causing unrest", "spreading falsehoods", or whatever the local or central government deems to go against their bottom line.

Even sources that try to label this as a myth[2,3] can't avoid mentioning that these systems do exist as localized "pilots". So whether or not this is done nationwide, whether or not a "score" exists for individual citizens, and whether or not they're aware of it, doesn't make this a myth, or some form of Western propaganda. Your statements that all of this is a myth is patently false. Please stop spreading disinformation.

[1]: https://www.chinalawtranslate.com/en/sc-punishment-list/

[2]: https://merics.org/en/comment/chinas-social-credit-score-unt...

[3]: https://www.technologyreview.com/2022/11/22/1063605/china-an...
EDIT: Disregard below. I'm an idiot when it comes to maps. The statement regarding if the developers are still Russian I believe is still relevant.

Considering the state of Saudi Arabia, having it there is marginally better, but still problematic.

And if the developers are still Russian, there's nothing saying they aren't being squeezed unless their families came with them to Dubai.
You wouldn't necessarily need that. You don't actually need translated text for every single language pair a LLM will learn to translate.

ie train a LLM on English, French, Spanish data. This data only contains parallel text in English-French. Can this LLM still translate to and from Spanish ? Yeah.
"because men don't want to be in relationships with women who earn more."

This on it's own may be a correct statement however as you phrase it makes it sound like this this is the defining reason.

It's not, there are anecdotes of (insecure) men not wanting this dynamic, but a majority of cases the opposite is true. Women seek men of higher value (earning potential), not less. Men seek youth/beauty.
yes, but that's the point: it's not a technical problem, it's an institutional problem. Facebook is pure surveillance capitalism. They live by scooping your data. E2EE is hardly a concern or a solution.
> the legal threats were about using the Signal name

that's just misleading misdirection.

Firefox have issues with the legal name, that's why the source is called by other names and the branding is added later on.

signal ties the branding with the code, so it is impossible to build from the canonical source without triggering the branding issue.

So, in practice, it is a convoluted way to annoy anyone releasing from source. And as we know, actually using open source software without a "distro" is insanity. You cannot trust 1000s devs. you trust the distro, the distro trust 10s of package maintainers, the package maintainers trust 10s of devs. and everyone is happy. I trust f-droid just fine. But i don't trust the person who is publishing every apk on random sites like signal.
https://news.ycombinator.com/item?id=40342534
Outdoor time is good for kids' eyesight
I'm sure there is still plenty of quality furniture being made, but being on a budget in my 20s they were out of reach. I brought a lot new furniture when I brought my first home and almost all of it fell apart within 10 years, some in a matter of years. Specifically Veneered MDF would chip and would often fall apart at joins. Plastic drawer rails would snap. If a kid climbed on them they had no structural strength and would bits. The thin back panels of cabinets would come away from the body or break off and reattaching every few years.

In recent years we've instead been picking up old furniture people are getting rid of (for free) and refurbishing it. The only thing I look for is that it's made of quality materials which isn't hard to find if the furniture is 30+ years old.

I think some people don't want old furniture because it looks dated, but the nice thing about refurbishing is that you can quite easily add modern touches – or just whatever style takes your fancy. Chairs can be equipped with modern pillows and a new finish. Or old cabinets can have new door handles, hinges and a modern paint job, etc. Apart from the furniture we want to look older, I doubt most people would even realise it's all 30+ years old.

Additionally all the furniture we have now can be refurbed when we want a new look and they actually last... It's more effort for sure, but it's nothing an amateur DIYer can do with a few tools and a bit of creativity. And if you don't need them anymore (because you're moving etc) people will happily pay good money for quality refurbed furniture. What people won't buy is some crappy 10 year old Ikea cabinet.
As I stated in a sister comment, Dubai is marginally better, but not significantly better. If it's the same original developers, they could be squeezed through their family.
It asks for, but does not require access to contacts. As of lately, it does not require phone number either.
GNU Libtextstyle
That's a generous translation! They were shown to be double-encrypting, using nonces where they weren't required, and generally making a bunch of mistakes that would be fine if they were writing a student level implementation of a secure messenger protocol, but not one that went on to be tacitly endorsed by a bunch of nation states!

It's like a clunkier version of the backdoor in Dual EC DRBG. When problems like this are found, you can either assume deliberate malice (as in the case of NIST) or accidental incompetence. Either should be immediate grounds for not using the software. This isn't Flappy Bird. This is meant to be secure comms. The "This Is Fine" mentality doesn't cut it.
What revelations ?
Substantially, the idea is: how can you assess reliability of the framework on which you would be building specialized functions, if the framework is as impredictable as a LLM?

(Although the article offers more sides to the problem, and stresses on the grave engineering risk of letting data and commands share the same channel.)
Clickable link https://whereto.stream/ ('Show HN' discussion was https://news.ycombinator.com/item?id=40213562)
"Winning" would mean not having to comply with the subpoena...
Windows had been data loss positive for a while. I've lost files on Desktop and under C:\ couple times from trying to disable OneDrive.
“Rolling your own crypto” is discouraged for programmers, not for field experts. It’s not your average joe’s first try at encryption writing a caesar cypher…
You can achieve a similar effect with a two instruction program where each one copies the other two forwards. In fact you can submit it exactly if you use with the bit encoding of instructions to construct the program in memory.
Permira is taking Squarespace private in $6.6B deal
Yeah, basically both super duper encrypted privacy oriented services want your phone number.

Sorry, but that's not privacy. I don't care what they do to encrypt your messages, they are still tied to me, which makes the super duper encryption pointless.
> Telegram has launched a pretty intense campaign to malign Signal as insecure, with assistance from Elon Musk

I got a bit confused here! Didn't Musk support and encourage people to "Use Signal" three years ago?! https://twitter.com/elonmusk/status/1347165127036977153
What do you mean by SGX? SGX, even if it's fatally flawed, won't be worse than not using SGX. That's the worst case - they added a broken sandbox. Best case - they added a working one.
This is a model checker written in Clojure.

I had to poke around to find the first article.

https://recife.pfeodrippe.com/notebooks/recife/notebook/slow...
That's not true tho. f-droid supports (true) https://f-droid.org/en/docs/Reproducible_Builds/ for quite some time now. Those are signed by both, f-droid and the author.
I thought they only customers for green apples here were office catering managers who didn't actually have to eat the horrid things and just wanted an aesthetically pleasing display. But according to your first article:

> But he warned that the popularity of green apples has plunged in recent years. Their market share has fallen to 10% as the sweeter varieties Braeburn and Gala have taken off.

> "Granny Smith eaters tend to be in a category of their own," Mr Barlow said. "They are more likely to live in the north. And in terms of demographics they're slightly lower than average. They're slightly more into the B2s and the Cs."
Interesting! YC themselves said it was “at least 50%”, but looks like even more than that based on the company tagging in startup directory. Curious how much people think this is (probably all 3):

1) signal value: AI-anything is getting funded atm and founders are smart.
2) founder-level trend: founders are actually just working on AI much more naturally.
3) YC selection trend: YC deliberately pivoting towards AI in its selection process.
> If the app developer tells me it's dangerous and I shouldn't do it, can you even expect users to do this?

If you care about reproducible builds and avoiding trusting Google, you're already in the class of not-most-users.

Signal seems to have usually taken a pragmatic stance of defaults mattering.

Afaicr, that was the argument for linking to phone numbers (it allowed for more lazy users to use it) and encryption by default (few turn on opt-in-encryption).

And it seems accurate to say 'for most users, who don't know what they're doing and don't want to play personal-IT-department, using the Google Play store is more safe and secure.'