skysight-inc/HackerNews huggingface dataset:
The consequences of the 401k scam, and the loss of pensions and unions, coming home to roost. Lessons for Gen Z.
Just in case:

Sciter has Reactor - its own native and built-in implementation of React.

Main difference is that component is instanceof Element - components are DOM elements. This allows to unify React and WebComponent under the same umbrella/mechanism. Yet to extend standard DOM methods by use of JSX, so this

someDomElement.append(<div>Hello</div>)

works just fine - appends content from the vDOM.

In fact Reactor is three entities implemented natively:

* JSX - embedded into JS compiler (830 LOC) - https://gitlab.com/c-smile/quickjspp/-/blob/master/quickjs-j... , produces vDOM literals

* Element.prototype.patch(JSX/vDOM) (420 LOC) - reconciliation / diff implementation

* Binding of lifecycle methods (200 LOC) - componentDidMount and Co.

There is also native implementation of Signal's (310 LOC) but they are optional for React'alike functionality.
>A ~French~ Chinese citizen running a service in ~French~ Chinese is going to be subject to ~French~ Chinese laws and can expect to be arrested when they step into the country of ~French~ Chinese if they have charges pending.

>This isn’t some grand conspiracy theory.

Funny that when the wrong country does it it's tyranny. When a Western country does it it's the rule of law.

Especially when they are the exact same thing.
On Linux, if you get a SIGBUS
from poking a memory map that generally means you'd have certainly gotten -ENOMEM or -EIO during an equivalent sequence of syscalls (or been oom-killed, if you overcommit). Those are treated as fatal in the vast majority of programs, so dying to SIGBUS isn't meaningfully different for most usecases.

By your logic, passing a file descriptor to a library is also "unwieldy", because the library might not handle -EIO.

You can use MAP_POPULATE|MAP_LOCKED to ensure you get an error from mmap() instead of getting killed in the ENOMEM case, if you don't overcommit (if you do, you can still be oom-killed). You still get SIGBUS beyond EOF, but that's the behavior you want: it's equivalent to overrunning a buffer.

The behavior when file size isn't a multiple of PAGE_SIZE is legitimately weird (writes to the final page beyond EOF are visible to the entire system in memory but never written back to the file), but it's intuitive if you understand how the page cache works at a high level, and you can avoid it by making the size page aligned.

For more complex usecases where you really do want to handle these sorts of errors, userfaultfd() gives you all the tools you need: https://www.man7.org/linux/man-pages/man2/userfaultfd.2.html

EDIT: Initially described MAP_POPULATE wrong.
> but ultimately useless outside of research and side projects.

“Everything is useless unless it personally, financially benefits me.”
My understanding is that WhatsApp has never made claims comparable to Telegram or Signal.

I also can’t tell if you’re being sincere. I was under the impression that Telegram was considered significantly less secure than Signal and that the matter was mostly settled. I’ve been seeing the following talking points repeated for years now.

https://www.reddit.com/r/signal/comments/xk1jdw/comment/ipbv...
Hmmm.

Interesting take.

I am not even sure I agree, but in some contexts this may be true.

I think -- and indeed hope -- it's a temporary local thing and will pass.
> But segmenting a web intranet because you expect the information not to escape is doubly stupid.

It's one layer in the security stack. It's not sufficient on it's own but there's no reason to get rid of it because it's not 100% effective.

> you constraint the capacity of people to work physically to inside your office.

Or, you know, just have a VPN.
That’s good, while prosecutors and law enforcement are wasting time building a car against him, the drug dealers and pedophiles will just carry on elsewhere.
Yes, it was conspicuous to me that for the two other examples, they mentioned "this has been used in a real attack!", but for key derivation functions, they didn't say that.

Sure, you should still use Argon2.
All the doctors want to live in LA and NY. This problem only gets worse as medical school, etc becomes more competitive and costly.
> While Keccak doesn’t suffer from the length-extension attacks that HMAC is meant to address, the phrase “simply prepending the message with the key” carries a lot of assumptions about key length and key formatting with it.

A lot of assumptions, or just that it's fixed length?
Doesn't this ignore SpaceX being American?
I don't know why it's worthwhile to pay Cursor when CoPilot is free for unlimited use for open source developers.
I’ve been using Temporal, via a different polyfill than in the article[1], in production for about 6 months now. It’s a game changer. But JavaScript people are also broken from years of not having this so it’s been a hard sell. To many it’s just extra work. We’re about to start doing international stuff though so really hoping it becomes clear why it’s amazing to the team soon.

[1]: https://github.com/js-temporal/temporal-polyfill
We have a database right in the UK, originally derived from EU legislation. That would apply to postcodes AFAICT, but government can legislate in favour of the demos and against a private corporation.
Switch banks? Barclays is not a good experience and should be avoided at all costs.
If you were a human, you would have written "00:23", not "0:23".

It'll also convert "0:45" into "00:00AM" (and "0:23" into "11:00PM").
Actually, there is a moderation within Telegram; it is not at the scale of Meta & X in terms of the head-count. Telegram probably has 100x less employees than Meta (I don't know the actual number)
https://telegram.org/tos/eu-dsa
Whatsapp has to have some kind of escape hatch if not back door simply because of the amount of heat it doesn’t get (think of all the regimes who are ok with it).
While on the subject of Telegram, check this out:
https://github.com/simplex-chat
Raspberry Pi 720x720 Web UI Dashboard
Replit limits free plan users to 5 repls (unless a $25 subscription)
I don't see a report button anywhere in the Android app. Somebody please correct me if I'm wrong.
You can just buy all the stocks of the S&P 500 minus Boeing.
Why was the other thread removed? It was #1 on the main page.
The problem is not with communication with the outer world. The problem with other messengers is that everything you type there is monitored by CIA/NSA and Ukraine has access to this information. Telegram right now is the only secure messenger that doesn't leak them data on Russian citizens.
Gimmick for the very loud - and amateur in their footage - influencers who cry a river if their use case is not supported in a camera.
>It was unblocked because of the backlash from people, incl. Russian politicians who are heavy Telegram users. FSB has nothing to do with it.

Saying Russian government would give a shit about people opinions, funny joke.
Facebook does not generally take down content that is offensive or criminal in nature.

The have moderation teams because they are required by law.
These are outsourced to the lowest bidder. They are so overwhelmed by the amount of that content.

Watch those documentaries about the psychological traumas inflicted to those that moderate Facebook content.
HMComp: Extending Near-Memory Capacity Using Compression
Key points:

- Pavel Durov, founder and CEO of Telegram, was arrested in France after arriving from Azerbaijan.

- Durov was detained at Le Bourget Airport by the Gendarmerie des Transports Aériens (GTA) due to a French warrant.

- The warrant was issued on claims of Telegram’s lack of moderation and cooperation with law enforcement, making Durov complicit in crimes such as drug trafficking, pedophilia-related offenses, and fraud.

- Durov’s arrest was contingent on him being on French territory, as he is listed in the FPR (wanted persons file). Unclear why he decided to land there.

- Durov is now in custody and will face a judge, with potential charges including terrorism, drug offenses, complicity, fraud, money laundering, and pedophilia-related content.

- Authorities believe Durov will likely be placed in pre-trial detention due to his substantial financial resources and perceived flight risk.

- The arrest aims to pressure European countries to cooperate on law enforcement efforts against crimes facilitated through Telegram, particularly terrorism and organized crime.
This is an insanely big developing story.
Not deleted, just suddenly demoted to the 4th page. It's that broken HN algorithm that randomly messes up the front page for no reason.
Telegram has also large Russian pro-war communities, and it's extensively used by soldiers deployed in Ukraine for communication. If pro-war channels outnumber opposition channels (and they probably do), Telegram probably won't be banned as long the government has no alternative.

The fact of Durov getting arrested could be also used for propaganda purposes (no free speech in the West).
When you call to_owned, it creates a Vec<u8>. This must then be truncated due to the call to into_boxed_slice. The documentation says this could potentially mean a re-allocation depending on the allocator. When this happens the old allocation needs to be dropped too. You could try using a different allocator but before this I would recommend to replace those two calls with Box::from(s.as_bytes()).
The shadiness about Facebook's proprietary dataset of 300 million photos is concerning and should draw more attention. At the very least it is scientifically unacceptable - we should not high-five Big Tech researchers for intentionally unreproducible research. And if Meta is harvesting user photos for AI research and commercialization, they should tell their users about it directly (I am sure there is something buried in the TOS). Does the dataset include only public photos, or are Instagram DMs fair game? Does it include CSAM? Who cares!

Serious question: who are the people in the illustrations they used in the paper?[1] Are they Facebook/Instagram users? Did the authors ask permission to use their photos for an arXiv publication? Including their kids? Meta researchers really should be answering questions like this before they are asked - but these authors didn't even include an impact statement!

https://arxiv.org/abs/2408.12569
Sony WH-1000XM4

and before you get discouraged by my story know that my first reaction to this incident was "damn these are my favorite headphones", I had them for years, travelled with them, use them practically daily and they still look brand new.

can't say I'm a big user of the noise cancellation or even ambient sounds or bluetooth. just aux in the laptop and on planes, it's amazing.

9.99/10 ears still ringing, would buy again.
Why does everybody continue to be shocked that South African Apartheid Mafia Boy acts like South African Apartheid Mafia Boy?
> The issue we run into here is ambiguous encoding.

What I have done in the past for this is to encode the messages as UTF-8 and separate them by 0xFF, since that byte value never occurs in UTF-8 encoding [0]. If the messages to be hashed are character strings, you have to decide on some encoding anyway in order to hash them.

[0] UTF-8 bytes always contain at least one zero bit: https://en.wikipedia.org/wiki/UTF-8#Encoding. Incidentally, if one wanted to create the UTF-8 equivalent of zero-terminated strings without reserving a character value (like NUL) as the sentinel value, one could use 0xFF for that.
Sometimes passwords are stored in plain text to improve security. An example is K in mobile telephony, a number shared between the home network and the USIM. This is used for mutual authentication and establishing a cryptographic session key. There is no concept of a certification authority (which can be subverted) or a signature - there is just a shared secret, stored in plain text, so there are minimal trust requirements. But stored in a secure piece of hardware with write-only access for K. You pass a challenge in, and get back a number which can be used to prove identity, and a number which can be used to establish a crypto context (here I am simplifying by not describing the mutual authentication).

Ok, so in the context of your mortgage website, they may be doing the same thing. The motivation may be to stop keyloggers or anyone who is "inside" HTTPS getting the password. The implementation may be a hardware security module which is write-only for the password and which gives a yes/no answer when asked to check a character.
the ping thing came along I think because for a while, you could make connections and sending a bunch of stuff without bothering to read what was returned from the server, and I think the mechanisms at the time for dealing with these flooding connections was this ping thing so it required a fully functioning tcp connection instead of some wierd spoof halfway thing going on at the time. the text value of the ping at least has to be read and returned. thats how I remember it anyways.
> reads like an ad for something called AdGuard (I use unbound for most of this).

Definitely not an AD - it's just the best option that I found, and have been super happy with it! There are lots of ways to do this (people have shared even more options in the comments here), and for a lot of people AdGuard/Pi-hole/... are the relatively easier options
Ask HN: What are you working on (August 2024)?
What are you working on? Any new ideas that you're thinking about?
What he describes is why I have stayed away from using these tools so far. I don't want to be exposed to something that is just useful enough to feel indispensable, but still comes with so many drawbacks.
So he's a political prisoner.

The political establishment doesn't want the proletariat having journalism that reports against the wishes of the powerful or of regular people having free speech to be used against the government.

No ethical person should take part in enforcing these laws.
The discussion you are thinking about is neither dead nor flagged. Overly active discussions get downranked automatically:

„Other factors affecting rank include user flags, anti-abuse software, software which demotes overheated discussions, account or site weighting, and moderator action.“, see https://news.ycombinator.com/newsfaq.html
Except Telegram has much less E2EE than Signal or Whatsapp.

It's not on by default, works only between 2 devices, they both have to be online at the same time and you can't access anything from the web. And group chats don't support it at all. Private chats are not end to end encrypted by default and it's actually quite clumsy to encrypt them so almost nobody uses it.

It's really weird that Telegram is singled out like this.
> Telegram was also banned in Russia for a few years.

What has changed since then?
Yes, every other Royal Mail that benefited from a nationally compiled database would also be at risk of having the database they didn't pay to create opened up... meaning they could continue to use it in exactly the same way.

How devastating. /s

If you benefit by paying politicians so you can 'steal' national assets then why shouldn't we go after some of those assets. We're not even talking about depriving then if the asset, only making a copy of it.
> This is an insanely big developing story.

For people in tech
Yep, 1-in-270. https://en.wikipedia.org/wiki/Commercial_Crew_Program#Spacec...
A fun annotation exercise for HN threads!
They know exactly what is needed, but will only provide big updates, once the competition catches up or they think it would otherwise make their market share endangered. Like when they released the 5d mark ii with that awesome sensor.
Anything is possible, of course. But without evidence, it'd consider it nothing more than a conspiracy theory.
Based on media reports, Telegram has been continually used by a hostile autocratic government to recruit, organize and direct various gray-zone attacks against Europe, on European soil.

Now it sounds like Europe finally put the foot down.

And why wouldn't they?
If you control the network, you could observe a machine behaving in a compromised manner, without being able to find anything while accessing the compromised machine itself.
Author of compact_str here, you hit the nail on the head, great explanation!

> ... and another (217) signifies that it's a weird static allocation (I do not know why you'd do this)

In addition to String Rust also has str[1], which is an entirely different type. It's common to represent string literals known at compile time as `&'static str`, but they can't be used in all of the same places that a String can. For example, you can't put a &'static str into a Vec<String> unless you first heap allocate and create a String. We added the additional variant of 217 so users of CompactString could abstract over both string literals and strings created at runtime to solve cases like the example.

[1]: https://doc.rust-lang.org/std/primitive.str.html
And just as the previous thread was nuked, so was this one. It's a shame but I guess people don't want to discuss this.
Do you have any concrete examples where this would apply?
(person getting arrested in China over an offered service)

If not, this is just whataboutism.

I can't think of any, to be honest.
Where was that stated? In the press conference they said Boeing deferred to NASA to make the decision because they had a better perspective on the entire landscape of the problem.
He's an interesting but odd man. It's rare to see him fully dressed on his Instagram: https://www.instagram.com/durov. I expected him to remove his clothes during Carlson's interview, but he didn't.
There is a simple heuristic for what to use:

Use whatever keeps the cloud costs the lowest while ensuring the reliability is acceptable.

For client projects, a trick is to pretend the cloud expenses are coming out of your own wallet.
> Time is an excellent noise filter

Of code too.
Telegram is used by hundreds of millions in Europe and Middle East
as he probably should. but building everything from scratch just is the autistic urge to actually understand what you're doing. not implying you're autistic or anything, but I am and I can't always stop myself from doing the same thing, hehe.
Otherwise known as the flame war detector, which does a decent job of keeping flame wars off the front page but occasionally has to be fixed by a mod when it kicks in incorrectly.

Moderation is hard, and HN actually does a pretty good job all things considered.

Edit: it's already back.
That makes sense though. We all know all politicians are saints and would never fall prey to corruption or criminal interests. /s
What is an example of something that is newsworthy?
Not much incentive for Ukraine to hit Norway.
I'm curious how the people attempting news blackouts reason about it.

I doubt they explicitly say to themselves, "Today I do evil for fun and profit.". I wonder what their rationalization is.
Excellent question. And the answer is, of course, very simple: Being American (or, more generally, a liberal-democracy subordinated entity), you should expect even Elon Musk's SpaceX to be a bad bet. SpaceX will display its inherent inability too, eventually.
1) Updates/general makes sense as you say.

2) "Praising countries" aka focusing on increasing the reach of Telegram, similar to Zuckerberg with Facebook.

3) "biological father of "over 100" kids" is quite the mildly interesting fact. It's unsurprising for an individual in his position to be a little eccentric.

4) "shilling for some random watch-ads-to-get-coins" aka focusing on increasing engagement with the Telegram app ecosystem that directly benefits Telegram.

All make sense to me.
[dupe] err...unflagged?

Anyways, more discussion: https://news.ycombinator.com/item?id=41333038
I have tried the quest 3 and it’s like looking through a distorted version of the world through a low resolution camera with Vaseline slopped on top.

It’s impressive technology but it’s far from seamless. There’s less colours, less resolution, worse depth perception, more latency, and worse nightvision than your actual eyes. The quest makes your head quite a bit larger and you’re more likely to hang your head into something. It is very far from seamless.

They have a long way to go. Audio pass through still isn’t good enough for me to trust it never mind video pass through.
“About to be fixed” ≈ “this is the year of Linux on the desktop”

Wake me up when a browser ships Temporal.

Edit: Here’s Temporal on caniuse.com: https://caniuse.com/?search=temporal

Handful of APIs in the Safari Technology Preview, otherwise nada. I look forward to Temporal landing but it is still a very long way off.
The USSR was a totalitarian hell hole which had nothing to do with what communism was supposed to be.

It was still better than what happened to the USSR between 1993 and 2000 when the West won the cold war and dictated surrender terms.
By the way, Dropbox had a person from the govt (Condoleezza Rice) on the Board of Directors, and people still entrusted their data to it.
Most of the companies with actual money behind their space station proposals seem to intend to use the IDSS, so theoretically they'd be able to take either of the commercial crew spacecraft. Besides that, iirc one proposal is basically a "basic" cylinder which relies on a docked Dragon to support it. Starship is in an interesting spot because in a sense it's a station in itself. Starship deployable stations currently have the problem that the payload bay opening mechanism and volume aren't set in stone yet.
Open Source Loom Alternative
Previously: "the science of learning" -
https://hn.algolia.com/?q=%22science+of+learning%22
3 of his kids are in Moscow. Under Putin’s control.

Pavel Durov tries to play the “victim” to create a legitimate image for himself and Telegram.
telegram is compromised by Russia https://www.wired.com/story/the-kremlin-has-entered-the-chat...
(Deleted my initial messages since I didn’t realize retelling Claude is not okay :-)

Thus I will just summarize my initial hunch based on watching the video which wasn’t refuted by the upload of paper and asking about it:

proximity of the sensing and actuating electrodes.

In a nutshell, a gooey and sludgy demonstration of Kirchhoff's circuit laws.
I believe that escape hatch to be cloud backups, which are heavily encouraged by the UI and not end-to-end encrypted by default. iMessage has made the same compromise.

As long as enough people click that checkbox, law enforcement has access and Meta/Apple are out of the news without having lied about or hidden anything.
Please reread what I wrote.
so. why not this one?
In defense of Java's SimpleDateFormat, it's purposefully designed to be compatible with the ICU formatting.

The choice of 'Y' for the rarely used "week year" is unfortunate. For those unaware, in ISO-8601 every year has either 52 or 53 full weeks. If you want to format a date like "2023-W52-6" (the 6th day of the 52nd week of 2024) you would use "YYYY-'W'ww-u".

https://unicode-org.github.io/icu/userguide/format_parse/dat...
> If you were a human, you would have written "00:23", not "0:23".

No, I wouldn't. Leaving out the leading zero is pretty common where I'm from.
Speaking as someone that has both broken crypto systems and designed ones that got broken (internally, in review, before they made it out), it takes a lot of practice to become proficient at cryptography. Sometimes a little bit of knowledge is worse than none at all.