skysight-inc/HackerNews huggingface dataset:
I doubt NASA wants to put 4 astronauts on the next Starliner flight. So if NASA declares this crewed flight test a failure and requires a redo (and possibly even reverting back to a third out of one planned uncrewed flight test), Boeing is still on the hook for their operational 6 crewed flights.

Here's the problem: Starliner flies in the Atlas 5 rocket. Which is officially deprecated and all of the vehicles that will ever built have been booked. Which would mean that Boeing has to nicely ask Project Kepler for one (or more) or their remaining Atlas 5 slots. All of this also pushes back the final flight of the Atlas 5. Starliner already has 5 years where it's the only mission in that rocket, requiring hardware and operational knowledge to be on retainer just for Starliner. At least the pad that launches Starliner can also do Vulcan launches, so they won't be hogging a launch pad just for this problematic program.
I'm always curious to see how people are selling desktop software like this. This developer has many other misc tools for sale on this website.

Q: Are mac people more likely to look for and buy misc desktop utilities?

I wonder about market size vs niche size for windows vs macos vs linux tools. Clearly windows is the biggest market, but I feel like I run into a lot of these niche macos utilities for sale, often here on hackernews.

For linux which I'm most interested in, I have a harder time imagining people wanting to pay for a closed source tool. But am trying to note successes with people using patreon, itch.io, or github sponsors.
New AI Bots Will Do Just About Anything for You
Last time I used Telegram and had a look at the "discussions around your area" or something, I couldn't find anything that wasn't about selling drugs or fake documents. It was a giant drug delivery platform.

It might be different in other places but here, in a large city of continental Europe, Telegram is definitely little more than an enabler for illegal activities.
https://archive.is/umsnp
Shufflecake: Plausible deniability for hidden filesystems on Linux (2023)
Having rewatched that myself the other day it's not actually as good an example as I thought - I use Claude 3.5 Sonnet a bit in it (which was released the morning we recorded that video) and then get a bit of benefit out of Val Town's integration with Codeium, which is similar to VS Code Copilot - but not as much of the code in it was LLM-generated as I remembered.

A better (written) description of how I use these tools is this one: https://simonwillison.net/2024/Mar/30/ocr-pdfs-images/ - and this whole series of posts: https://simonwillison.net/tags/ai-assisted-programming/
What would you say to someone who claims that "never" obviously means "not before the end of this quarter, cause who could possibly care about anything beyond that"?
You have to be careful to toss around gigabytes, but what's unreasonable about 64MB? You should only be running about one per core, right?.
The shuttle could get 24 tons to orbit, Saturn V could deliver 130 tons.

The per launch cost was the same when dividing the overall cost by the number of launches. Saturn V launched 13 times, the shuttle 135 times.

There's just no way to rationalize the whole project not being a terrible idea from beginning to end.
Yes! A number of projects have already adopted Jiff too. numbat and gitoxide to name two big ones. :-)
I would probably still reach for scrypt.
What about Signal?

What about Messenger and Whatsapp, also end-to-end encrypted?

Will they be arrested?

Is this the end of end-to-end encryption chats?
Nice. Not as impressive as bash, but got a ncurses clone of breakout/brick attack in C. https://github.com/Subsentient/bricktick
https://en.wikipedia.org/wiki/Cumberland,_Maryland#Demograph...

Historical population

peak was

1940 39,483

2020 19,076

It is still dropping

The racial makeup of the city was 89.4% White, 6.4% African American, 0.2% Native American, 0.9% Asian, 0.1% Pacific Islander, 0.3% from other races, and 2.8% from two or more races. Hispanic or Latino people of any race were 1.2% of the population.

I wish them luck but I don't want to live there.
You're the one who is spreading FUD. Telegram was officially (legally) unblocked in 2020. There is 0 evidence there is an active force trying to block Telegram in Russia. Which is very busy blocking every non-russian platform btw. As you yourself pointed out, most likely the reason why TG was down is because of attempts to block other platforms.
Still a difference between "you'll be fine" and "if you're newly choosing, might as well not pick PBKDF2 where anyone with a regular GPU gets a 100x speedup compared to your server CPU". Bcrypt wasn't even designed for memory hardness but is so much more annoying to crack because it seems to stress (per my understanding) the GPU's memory bus just enough with the iirc 4k state table that's being randomly accessed
Frostburg State University, Deep Creek Lake and Wisp Resort are close. Summer temperature was 10 degrees F cooler than my house near DC the last time I spent a week at Deep Creek.
They will. And then they’ll learn the fundamentals. I thought I knew most things I needed when I was 20 because who needs fundamentals when you can just use frameworks? Ah well…

I don’t think this is any different from “young devs don’t know shit, they only know Unity but have no clue of how things work in reality.” Developers need to start somewhere and will work their way down the stack. As the height of the stack increases, that journey takes longer. But the height increases because every additional layer increases productivity.
The procedures and setup for censoring the Internet were significantly improved; no need to go to the court, no need to exchange data with ISPs, black boxes with DPI are installed at every large ISP, compared to blacklists of IP/hostname hat were sent to ISPs before.

I think this might become a future for most of the countries; China and Russia are just several years ahead.
Given that OSM has a lot of building addresses and locations (at least it has building names and numbers and the streets they are on, plus their outlines) I wonder how much of the PAF could be recreated from the data in CodePoint Open combined with OSM. If adding more house numbers etc to OSM would help improve that then it could be crowdsourced quite quickly via Street-Complete or similar.

For the purposes of the quick address lookup it doesn't even need to be 100% accurate. If a property is incorrectly listed against two postcodes it won't really cause problems, so the lookup could err on the generous side
Did i miss anything skimming the article.
How would a target get infected
If you don't cooperate while having the data and your approach to legal compliance is "votes on your personal TG channel", expect to get arrested. At least the services with actual E2EE worth a shit can make a convincing argument they can't produce the data.
It pains me to agree, but this is quite right: for every important developing story that gets erased like this, there's like 500 nonsense flamewars that guaranteed you don't want to read, that get erased by the same heuristic. It's genuinely tuned well.

(I'll never agree with HN's title-editing bot though. That thing's cray).
Windows machines have the benefit of official Windows support where the integrator worked out the kinks and built-in a bunch of hacks to fix whatever half-broken things the manufacturer cobbled together. Linux machines don't usually have such affordances, you just install it on a random _Windows_ machine and hope it works. It's actually amazing it works well 90% of the time.
Vaporware means something is a concept that hasn't actually shipped yet. You seem to be using "vaporware" to mean over-hyped.
But they recommend Signal themselves...

https://www.politico.eu/article/eu-commission-to-staff-switc...

>The European Commission has told its staff to start using Signal, an end-to-end-encrypted messaging app, in a push to increase the security of its communications.

Also Telegram is not E2E by default. You need to activate it per chat. By default and in groups it is only server encrypted.
It definitely takes effort to stay that fit. Nothing wrong with being proud of the way you look (:
Not just fast, it's web-scale

https://www.youtube.com/watch?v=b2F-DItXtZs
"100% private" claims always make me incredibly suspicious since it is impossible to achieve that. Security is a matter of threat modeling against an expected adversary and nothing protects against a serious interest from a state level actor.

This is why I don't really care that Telegram doesn't do E2EE by default. Most of my chats aren't that interesting and in my threat model it's good enough.
Making it work asynchronously would require the compiler to split the memory access into two parts, a non-blocking IO dispatch and a blocking access to the mapped address. The OS would need to support that, however, and the language would need to keep track of what is a materialised array and what’s not.
Yep, classic backdoor for thee, but not for me!
Hah, agreed on the title editing bot.
There are no vendors, Telegram issues those numbers. So it's basically a pass to create account w/o mobile number requirement, if you're ready to pay for it.
A complete timestamp should include a timezone, and a timezone is best defined with a geographic location.

Example: you want to schedule events in Madrid, Spain and Warsaw, Poland. Currently they both use the CE(S)T timezone, but the EU is looking into abolishing summer time - which would lead to countries adopting their own timezones. At the moment "Europe/Madrid" and "Europe/Warsaw" are identical to CET/CEST, but that hasn't always been the case in the past and obviously there's no guarantee it'll always be the case in the future.

If you stored those events as CE(S)T, what are you going to do when summer time gets abolished and Madrid ends up at +1:00 year-round but Warsaw at +3:00 year-round?
This looks super cool! Will try to find some to compare it to the setup I'm on now
I run into CORS issues often when fetching RSS feeds from browser Javascript [0], where the RSS provider has failed to currently set the Access-Control-Allow-Origin header

[0] https://porjo.github.io/freshtube/
Yes it's a scrappy MVP right now.

Images have quality problems, like you described, as I haven't got accuracy figured out across the 3k+ counties.

Crime stat is awkward because everything else 9/10 (schools / snow) sounds like good or a lot. But with crime, it's a feature that people want less of. Since there's so many features I went with 10/10 is consistently good, but I do keep getting feedback about this that maybe I should change it.

Out of 10 is a percentile: 10/10 = top 10%, 9/10 = top 20%, 1/10 = bottom 10%. I'm trying to figure out the right granularity between showing the most important info for quickly figuring out the stat, vs. showing all the details about it, because there's 50 features, with another potential 50, and many have multiple ways of thinking about it. So it can quickly become a deluge of info without the right UI to surface <-> deep.

I really appreciate the feedback and my email is eric@exoroad.com in case this is off topic.
Fix it by piping
also that the key is never used for anything else (which could allow for unintentional collisions)
It is an incredible but true fact there’s often no known way to repair large organizations once they have gotten sufficiently sick. They have to be dissolved and new companies have to be built from the ground up. As you suggest, this is incredibly destructive. The employees and expertise aren’t destroyed — they start and join the new companies — but the relationships and institutional knowledge is largely lost. But it is recoverable, and the alternative is often worse.
They are US citizens, nobody dares to arrest them (except for Russia and North Korea).
It happens. A major landmark, let's say leap forward in my career - I applied to a job at (to keep it anonymous) let's say a research center in a scientific field that is maybe top #1 or #2 depending on whom you ask in that area. Swiftly rejected.
Randomly, maybe 6 months later, a very exasperated PI from the same institution contacted me directly. She'd fished through the HR system, nobody good was sent through, she'd found me, went in for an interview. It all played out beautifully. Great team, one of the best jobs I've ever had, lifelong mentor & supporter & vice versa.

I think the question is who is the guy calling out irrelevant resumes, and are they qualified for it.
Well I mean in many countries, blocking the surveillance agency from listening in on your calls/texts/chats is illegal. So making an app that interferes with the agencies ability to "listen in" is infact a criminal enterprise.

Don't have to like it but the law is the law.
> "opens up the ability to repurpose the hardware for more things today, and means that a *randomly discovered* shrink wrapped headset twenty years from now will be able to update to the final software version"

No, the device in his hypothetical is randomly discovered, so it is not ungenerous to assume that the person discovering it randomly didn’t happen to have set up a dev account. Because most people don’t have these types of accounts, a random person discovering the device should not be assumed to have one.

Additionally, he’s clearly describing something serendipitous, not something that requires planning ahead by 20 years.
What a wonderful view into the past!
To get the analogy straight, they would definitely arrest the CEO of the roadworks company if the road was letting robbers through but hindering law enforcement and the CEO was refusing to make the changes legally asked of them to mitigate the problem, yes.
I'm surprised you had issues with CTEs -- MS SQL has one of the better CTE implementations. But I could see how it might take more than just trivial transformations to make efficient use of them.
I think you underestimate space travel to space station.

Well it seems like it is routine thing now and spacex seems like routinely launches without a flaw.

But going up there and making it back is still huge feat that is possible only by collaboration of huge numbers of super experienced and highly trained professionals.

I am going a bit over the top - but still travel even to low earth orbit is something far outside of any human being reach - on his own or his group of buddies.
EU themselves recommend Signal. That is even stronger as it is end-to-end encrypted by default.

https://www.politico.eu/article/eu-commission-to-staff-switc...

>The European Commission has told its staff to start using Signal, an end-to-end-encrypted messaging app, in a push to increase the security of its communications.
This tracks pretty well with my experiences learning programming, both when developing websites and making video game mods.

The times I failed, I was looking at other people's work and trying to figure things out too quickly and in an unstructured way. I saw the complexities of a program that was in development for weeks/months/years, then basically panicked and thought I'd never be able to make something like that.

When I learnt the basics, I then saw how these problems could be broken down into their simplest forms, and ended up learning a lot more efficiently as a result.

Of course, having examples of what to do helps a lot, it's just your examples need to be merely a tad more complex than what you already know, not a masterpiece from some genius that spent the last decade working on it. Or if they are from that sort of person/company, you should try and break down sections of the work at a time to understand where they're coming from, not the whole thing at once.

It's much more reasonable to try and figure out how someone like Facebook or Netflix implemented a profile page or edit button than say, how the whole system works on a greater level.
Aren't open source apps like Jabber or Element which do not require a phone number and allow to host your own server, a much better playground?
Visit? What would that accomplish? I'd have to move.
And East Asia, especially Hong Kong since 2019.
> STRING_AGG aggregation result exceeded the limit of 8000 bytes. Use LOB types to avoid result truncation.

Looks like not all databases (mssql in this case) like the generated result.
Hah! Life would be great if the EU's problems started with von der Leyen
> Q: Are mac people more likely to look for and buy misc desktop utilities?

This has been one of the options for well over a decade.

And yes.

Check out dozens of them less expensively using setapp:

https://setapp.com/

Many work on both MacOS and iOS (yes, iOS software paid for through a SetApp subscription).
> How would you suggest addressing these in a way that is backwards compatible with all existing web content?

Version numbers. Solving the problem in the future but not the past is still better than leaving it unsolved in the future and the past.
It's because it is in fact used for this, unlike say whatsapp that does not enjoy any trust.
I buy some MacOS utilities. There are some good ones out there, and I don't mind paying for things that make computers less grating.
My NPR station has a roll call of billionaires every hour- from the McDonald's founder's foundation, the Gates foundation, the Carnegie foundation, etc
Nitpick: USSR was never officially a communist state, it was a "socialist" state. I remember the Soviet government had slogans like "we will build communism by 1980" etc. No one thought they already had communism. IIRC their idea was that, to build communism, you must have some kind of transitional state/ideology first. But something went wrong :)
I'm inclined to be skeptical of NASA's Public Affairs office.
Online Go code checker?
Teaching chat models to solve chess puzzles
>After a while they just stopped trying and decided that it's less reputational damage to just let it be.

That's not true. It's legally unblocked. the reason why it was unblocked was never published. "It was unblocked because they gave up" is just your interpretation of the events. Pretty naive one, in my opinion.
The LUKS2 source code mentions there is an attack on Argon2 which they prevent by setting rounds to 2 or 4 iirc. Not sure what that's about though, would need to look it up again but perhaps heed the recommended settings to avoid such pitfalls

As for parallelism=1, why would you do that? My understanding is that you want it to a point where it'll saturate your memory bus because then you're getting the most out of your system -> making it the hardest for the attacker. (Pretty sure this takes more than one thread on a modern system because I've tested that argon2id with the same number of rounds and memory gets faster with more threads.) Beyond that, increasing memory usage is good because that dominates the die space of an ASIC which in turn dominates the cost, if I remember and understood the argon2 paper correctly. The repetitions value is the last thing to touch, namely when you've run out of threads and usable RAM (such as when it gets into DoS territory)

(I focus on argon2 because that's what I've read up on. Scrypt is also a good option but I'm not sure the same advice applies because it has this TMTO attack. The underlying concepts will be the same of course, but tweaking one parameter before another may play into the attacker's hand.)
> not being able to decrypt chats that he has no keys for…

Except he (or his corporation) has keys for almost all initiated chats on the Telegram network. Only the private chats are E2EE and they're not default and rather inconvenient because they don't sync between devices (unlike Signal's E2EE chats).
Don't judge it for one single experience. It'll take several for you to understand well how impactful these tools are for SWE.
> However, anyone can report the message to moderators.

Good luck with that. And that's a seriously big issue. Moderators (and "moderators" in Telegram mean an alleged team of people they hire to moderate all content in Telegram - if you report content, the group administrators won't even be notified about that so they can act by themselves first) in most cases won't do absolutely anything.
No, because then they'd have to acknowledge that WhatsApp and iMessage are both compromised.
Here is a couple of typical examples when blocking is limited to a single region:

https://storage.googleapis.com/gsc-link/cbe9d20e.html

https://t.me/agentstvonews/4973

https://t.me/meduzalive/94295
by "other side" you mean "invaders of their sovereign neighbour"
How does an external authorisation service work without the knowledge contained in the application’s database? And vice versa, how does the application make the efficient correct queries from its database when the authorisation information has been externalised?
I'd draw a line at the post's NIST-adjacent advice.

With the caveat that I may be up to two years out of date here: Last I checked Balloon was a bad choice (only a research implementation) and Argon2 didn't meet the requirements (unapproved primitive in BLAKE2).

With enough rigamarole can you get these into a government office? Probably. But scrypt and yescrypt (the default on most Linux systems) already fit the bill, so just use one of those.
From my experience those charges are valid and well deserved. As a Telegram user since 2015, I've spent 2 years actively reporting groups and individuals in posession of explicit materials involving children and animals. Some of my friends have also joined me in this effort. Unfortunately, Telegram never banned any of those groups and individuals which is a textbook case of not only being an accessory to crime, but also being complicit in letting the crime go on.
Go Sync.Pool and the Mechanics Behind It
> It's literally about checking boxes rather than doing things that are effective.

Absolutely. Checkbox security is a proximate cause of the Crowdstrike disaster.
> One possible implementation might be to literally have the operating system allocate a chunk of physical memory and load the file into it, byte by byte, right when mmap is called… but this is slow, and defeats half the magic of memory mapped IO: manipulating files without having to pull them into memory

This doesn't defeat the purpose necessarily. How about for example, implementing a text editor: I want the best performance by loading the existing file initially (say it is <1MB), and the convenience and robustness of any writes to this memory being efficiently written to disk.
and the Russian govt has carte blanche access to Telegram. Russia invaded their sovereign neighbour Ukraine who the f cares about their forums for messaging. yawn.
"You'll wear yourselves out swallowing dust, running around the courts to unblock the assets." (c) Vladimir Putin when persuading Russian oligarchs to repatriate their wealth. Turns out he was right.
/s aside, politicians need privacy for the same reason the rest of us do: they work with sensitive information and it's really important they don't get blackmailed.

Simultaneously, they need a light shone on their private lives for the same reason they want to do that to the rest of us: to make sure they're not abusing their access to sensitive information, getting blackmailed, or otherwise being nefarious.

I have absolutely no idea how to fix this apparent paradox. Perhaps it can't be done. Even if it can, tech is unstable and this is all a moving target — the way GenAI is going, I suspect that we'll all have to carry always-on cameras that log and sign everything just to prove we didn't do whatever some picture or video shows us doing.
Yes, yes they do. And they have high-pressure air wars and they short batteries through paper clips chains to see how hot they can get them. Kids still do stupid things, honest.

-a mentor of an unspecified FRC team