skysight-inc/HackerNews huggingface dataset:
There is so much oddness surrounding this.. First, I don't really see how you can prosecute ideas, because as much as authorities will try and narrowly-define this case as being about moderation (of a platform), and cooperation with authorities, ultimately this is really an attempt to prosecute the idea/concept of publicly available 'e2e' encrypted communications. Second though... How does that list of charges only amount to a maximum of 20 years ? lol
The parent wrote that the "main problem" was that they put the security at the end of the budget list. My argument is it doesn't matter where it is on the budget list, it will always be subservient to the actual business of the Defender. That is, my argument is the "main problem" is that perfect cyber security Defense isn't anyone's actual business.
It's true that pristine wilderness isn't attainable anymore (climate change, for one thing) but that doesn't mean that we can't use it as a goal of some sort - that is, getting it closest to what it would be like in the absence of humans (mostly; I'd support compromising on expensive, unlikely-to-work projects such as cloning the woolly mammoth, as that money could be better spent elsewhere).

The book does sound excellent, though.
Right, I think that's an important distinction to make, but it's not really one that's explored in the article.

The article doesn't say anything about E2EE specifically, but I think it would be understandable to "read between the lines" and assume that Telegram is in trouble for offering E2EE - but I think/hope that assumption would be incorrect.
IRS has a method of last resort to collect overdue taxes: Revoking your passport
See https://tromp.github.io/pearls.html for suggested changes to make thus run with modern compilers.
I think this is bound to lose out to a plugin for video editing software (e.g. Premiere or FCP) that creators already use. Single-use online utilities like this might catch on with consumers, but professionals are going to want something that fits in with their existing workflow.
No need to imagine: https://signal.org/bigbrother/
Telegram is for the most part not end-to-end encrypted, one to one chats can be but aren't by default, and groups/channels are never E2EE. That means Telegram is privy to a large amount of the criminal activity happening on their platform but allegedly chooses to turn a blind eye to it, unlike Signal or WhatsApp, who can't see what their users are doing by design.

Not to say that deliberately making yourself blind to what's happening on your platform will always be a bulletproof way to avoid liability, but it's a much more defensible position than being able to see the illegal activity on your platform and not doing anything about it. Especially in the case of seriously serious crimes like CSAM, terrorism, etc.
E2EE is optional on Telegram and not really convenient. You can create a private chat which will be E2E encrypted but this takes a few taps and pins to device. Most of the users don't bother. And the main target is not personal chats but channels which can be easily discovered and followed.

This is not an e2e battle, this is the hunt for channel owners. Frankly it is too easy to make a "local chat" and sell stuff. Durov has the data and this is his weakness and strength. Platform is viral but there are too much for one hands.
That's exactly what control by gov is, otherwise they can already see public channels groups.
hah, not sure i want a game that replicates my life ;-)

but i love the thought of exploring this space. hopefully there are more ideas
> Boeing is a 'too big to fail' corporation with a significant source of revenue coming from the government. 40% in 2024¹, billions of dollars of public funds! Just a bit more and it would be mostly state-funded.

SpaceX (as of a year or two ago) was getting 45%+ of its funding from the US government.

And then there's the $900M in subsidies SpaceX asked for to provide rural internet access via starlink...
You're technically right (I think). However, I believe if you witness a murder and know the murderer and the police asks you: "Do you know anything about X murder?" Then I think you're legally required to tell the truth here.
This is misinformation that Telegram stores chat data in plaintext on their servers.

It stores it encrypted with encryption keys split across the globe.

Not perfect, but multiple legal jurisdictions would have to be subpoenad for Telegram to read your non-secret chats.
Quotes from John Archibald Wheeler
Good news. Hopefully a country as wealthy as Finland can just roll this out countrywide without much thought, if not already standard
Passwords matter if your goal is to get free wifi. But wardriving can also scan for devices ... vulnerable/exploitable devices. It is not hard to track down specific vehicles and security systems, which are the first steps to all sorts of high end property crime.

The uuid for a tesla car's bluetooth is 0xFE96 or 0xFE97. Some targeted wardriving easily gives you the general location of every tesla in a neighbourhood, and then the phones that unlock them. Then you sniff the ssid from the phone, look it up in wigle, and you know exactly what car lives in what garage, along with where the phone is that can start said car. Wardriving isnt all about kids wanting free wifi.
Signal has the better protocol and the better organisation behind it, but inferior apps and UX. It's unfortunate, really.
Repetitive doesn't necessarily mentally or physically trivial (for automation).

Many of the things people who work in the trades do is repetitive work, most of which is not currently possible to automate. It's the same for mental tasks.
You can report people and have their messages sent to Meta for review.
Apart from working on my start up, and open source project https://github.com/laudspeaker/laudspeaker (open source firebase cloud messaging) I've been writing a short sci fi story, sort of like a techno thriller inspired by michael crichton, called Panopticon. Its set in our time frame and is all about encryption, three letter agencies, and a race against time! Here's a link with the first 20 pages if anyone is interested! https://docs.google.com/document/d/1VRI4X5fCUpwurUDvKmvzJpT7...
What are the downsides to telegram providing default E2EE? Seems like a no brainer to have it as a default feature for the product.
I would genuinely love to offer free use of my wifi to anyone that needs it.

1. My billing is usage based, the bills could be astronomical

2. Laws around who is at fault are the person paying the bill. My IP address doing who knows what could easily land me in jail.

Sadly, the cons outweigh the pros
In the meantime French government is promoting Olvid that claims “Your exchanges leave no digital trace. No one will ever know who you’ve discussed with.” How does it make any sense?
The publishers are probably embarrassed that they turned down the book because of their pro-Stalinist vision. Holodomor? What Holodomor?
This rings so true to me. In fifth grade after being given an IQ test, I took Algebra I early, only to retake it when I moved to junior high the next year. Then I had to retake trig because I did no homework, but aced the tests. Luckily the teacher recognized my ability and allowed me to take pre-calc while I retook trig.

By the time I was in undergrad I had no motivation to study. I'd skip classes and cram the night before for any class that was memorization based. I didn't even buy the books, just went to the library and checked the book out for a couple hours.

Fast forward a bit and I ended up dropping some classes because I was paying so little attention, I didn't even know when the tests were supposed to be. Came in one day and the prof said, "You missed the test last week, I presume you want to retake it?"

That said, I've done well enough having gone back later in life to get a PhD, but I do wonder sometimes if I would have accomplished more if I was forced to push the boundaries of my ability, thus leading me to develop a work ethic earlier on.
Same reson people choose macbooks for work over running Linux, it's just a nicer product
If I were Moxie Marlinspike I would not be traveling to Europe any time soon....
A waterspout may have sunk a luxury yacht
Telegram is not a secure messaging platform. By default Telegram is not encrypted at all. Only "secret chats" in Telegram are encrypted. Telegram groups are not - and those can be made public and basically are just Telegram hosting content on their servers for you.
The future of data centers – on land, at sea, and in space
SpaceX have a contract with NASA where delivering on their promises matters. Despite what some in the general public would have you believe, the evidence to date is clearly they're currently the most capable at delivering, one only has to look to Falcon9 or Dragons record to date.

What I don't get is when the public feels entitled to some forensically audited answer. Especially when the business in question is privately held. He's entitled to his view, I mean someone else asked for it, we're entitled to disagree, we know he is often over-optimistic on timelines but there's no need for people to get butthurt over it like many seem to do. Imagine every time some other influential person made a comment, people fervently came out specifically to comment "They're a liar because of x reason". He runs the company, we don't, he's our best insight into the business, we can adjust expectations accordingly.

Sorry I removed the snarky comment.
Apps? I just use it for messaging.

I haven’t noticed any major UX issues but I use it for one thing only
Telegram has always been just one slip away from this kind of stuffs because it's a centralized service. Depending on how laws are read, it could be seen as complicit in various crimes, and it's politicians who decide how to read those laws, not tech people. It might be the end of those good days where things were so simple and easy.
A lot of really terrible takes in this comment section. Telegram didn't have encrypted groups by default, and telegram possessed a lot of content on their servers that they had been made aware was illegal and didn't cooperate. Nothing more, nothing less.

The comparisons to other providers is off base because either other providers are cooperating more when they possess actionable, unencrypted information and taking steps to detect or prevent such recurrences or they are like Signal and do not have access to the underlying material in the first place or store it for very long anyway.

One cannot legally run a hosted, unmoderated content platform in the developed world, one will always be required to remove illegal materials and turn over materials in cooperation with law enforcement.
This is no longer true, whatsapp have taken steps [0] to make their e2ee auditable and honestly I disagree with the idea that no e2ee is better than closed source e2ee. I'm not sure why you would trust a privacy policy more than you would trust encryption, with a court order Telegram would provide your chats to law enforcement, while Whatsapp would not be able to.

[0]: https://engineering.fb.com/2023/04/13/security/whatsapp-key-...
I'm cooking... Essentially a way to mock up any layout with design for any interface (web, mobile, desktop, whatever) and then save the layout in a portable format so anything can read it. The data is formatted so that you can re-create the layout natively.

https://youtu.be/P_4mhMB-0L8

-Uses WASM under the hood (blazingly fast)
-Exportable into a simple format for desktop, mobile or web use
-
@htmx_org
integration included
-Pluggable into any existing front-end or back-end (React or Laravel, etc...)

For now, the work of re-creating the layout lies on programming but I will start building plugins so that it lessens or removes that need.

Website soon!
I'm working on a platform that allows students to view and work on relevant past exams from anywhere, gamify and track their scores, and maybe add some LLM integration to discuss answers and ask follow-ups.
This will work. Just target through tiktok the most degen creators who are just chatting on their videos.
I think it stands to reason that if they were nearly bankrupt after flight floor, having to self-fund flights one, two, and three would have definitely bankrupted them.
Ooo, that is interesting. There was a website that kind of did that, but you could only compare single items at any given time, which kind of defeats the purpose (if it is to save money).

Ideallly I'd like to see something like a personal basket where you can add your recurring stuff (eggs, milk, etc) and compare the subtotal among local grocers. Bonus points if you add in value of store points + credit card bonuses (which might be significant, like 5% for Amex cobalt at a market coded as a grocer VS 1% for non grocer code like Walmart).
yes i still pay for both
Related projects[1]:

Spacial Shell (i3/Sway, OCaml) https://github.com/lthms/spatial-shell

Newm (Wayland, vry fancy) https://sr.ht/~atha/newm-atha/

Video of newm https://youtu.be/z7S3L-RZskY

Obsolete (but fascinating):

CardboardWM (https://gitlab.com/cardboardwm/cardboard)

EndlessWM (Wayland) https://github.com/peterfajdiga/EndlessWM

1: From https://lobste.rs/s/urwcat/spatial_shell_6th_release_might_b...
> You're wrong, defenders are not profit centers. You don't expect the security guard for your office building to generate profit, why would you do so for your digital assets? defenders are like lawyers and hr, they are cost centers whose existence is justified because attackers also exist.

I didn't say that infosec was a profit center. But they're in tension with profit centers for attention and sway, and by the way--the profit centers are the ones who make money.

I've said it before, I'll say it again: People Respond To Incentives. Lawyers and HR are generally not respected except insofar as they protect companies from visible legal risk, and often not even then. Infosec is so vague as to appear as a tiger rock to people who aren't plugged into it.

> Defenders are there so that when other teams who "ship" attempt to do so, they don't get the application, system, company or wherever you have protected data doesn't get compromised.

Everyone, infosec included, is trying to ship. Shipping is how you make money, make payroll, and keep people employed. You only don't ship when your risk calculus indicates that the cost of not shipping is less than the cost of shipping.

This us-versus-them thing brings us back to "the most secure system in the world is in an unplugged box". But we don't operate businesses off of unplugged boxes. Risk management exists. If this is how you would argue risk management with the median exec I've known, you'd lose. I have skilled infosec friends who've had better success than this through wise process and product choices, though.
I’ve been working on Don’t Double Book Me (https://dontdoublebookme.com) the past few weeks out of frustration with keeping my personal and work Google Calendars in sync.

Previously used Reclaim but found $10 a month to keep 2 calendars in sync was excessive and the software was increasingly becoming more team oriented, no longer for individuals. Felt like I was paying for a product and also the product. I just needed to keep 2 calendars in sync, not smart meetings, analytics, integrations, etc. ideally I set it up and forget about it.

I really needed a way to sync my calendars privately, without all the extras. Now that Dropbox has purchased Reclaim, it's even more important I feel like my calendars are not spied on. I knew I could provide a similar service.

Here’s what makes me excited about it as a user:

Affordable: Just $20/year with a 7-day free trial. Cancel at any time for a pro-rated refund.

Privacy First: No need to store events on a servers enabling unlimited calendar syncs.

Working Hours: Adaptive feature that adjusts if an event falls outside your specified working hours.

Round Event Times: Opt to round event start and end times to the nearest 15 or 30 minutes for cleaner scheduling.

Invitations: Block time between calendars when you receive a meeting invitation that you haven't responded to yet. Decline it? The time block on your other calendar is removed.

My plan is to keep it small and focused, while also listening to user feedback for how you'd like to manage your personal and work calendars more efficiently.

Thanks for checking out my new project.
Boy is the comment section ever glowing.
Creators who create this type of videos are not editing on premiere. They are usually editing on their phones manually stitching content on the tiktok editor. They will gladly pay 5 bucks.
TL;DR yes, and Moldbug explained all of this in like 2009
For one, it's the only major messenger that has an actually lightweight, well-written and full-featured desktop client rather than yet another boxed-up web browser. I might be more enthusiastic about using the alternatives if I could use the Telegram client.
Show HN: The Colophon – Web Design Catalogue
This is effectively plaintext, in that one entity has all of those secrets for everyone. That's one entity to subpoena.

If that entity doesn't comply, governments will get upset and charge your executives with crimes if they get the chance.

Different jurisdictions makes it harder to kick down the doors and get the keys, but it doesn't change the fundamental problem.

"Nuh-uh, I put all those records in a box in Switzerland, you can't have them" does not work well for US citizens, unless the government fails to even notice the box.
> Then I think you're legally required to tell the truth here.

Or you can just not respond, at least in the US. https://en.wikipedia.org/wiki/Self-incrimination
Leiden University spies on their own students
Big tech made me feel like that. Hope you feel better at new gig.
While owning a printer is still a curse (1), and software continues a cloudward spiral (2) I’ve made solid progress on a local-first indie barefoot app for designing and printing labels. I just shipped a new feature where you can use modern JS to build logic for each label, modifying variables, hiding and showing objects, formatting dates, etc. More at https://label.live/guides/add-logic-with-script-variables

[1] https://aftermath.site/printers-suck-so-bad

[2] https://news.ycombinator.com/item?id=41300888
I tried ChatGPT 4 for some time and went back to just using manpages after several wrong results.
Sometimes results were bad even after providing information about my platform.

Have there been posts already from people accidentally deleting files caused by trusting LLMs too much?
> They are stored in plaintext on telegram servers

FYI, this is a totally misleading and false claim.

Telegram uses the MTProto 2.0 Cloud algorithm for non-secret chats[1][2].

In fact, it uses a split-key encryption system and the servers are all stored in multiple jurisdictions. So even Telegram employees can't decrypt the chats, because you'd need to compromise all the servers at the same time.

Telegram's algorithm has been independently audited multiple times. Compared to other apps like WhatsApp with claims of E2EE and no body of verification and validation.[3]

[1]: https://core.telegram.org/mtproto#general-description
[2]: https://core.telegram.org/mtproto/AJiEAwIYFoAsBGJBjZwYoQIwFM...
[3]: https://arxiv.org/pdf/2012.03141
Makes sense. That it is so much faster on repeat wakeups does seem to hint that it could be computing a something. I'm assuming you are saying that most of what is getting computed is related to paging in/out memory? That would track on how it could be better with larger pages.
Non-deceptive placebos can reduce stress, anxiety and depression, study finds
If it doesn’t psych you out too much, trying to engage with the crowd maybe once per set or every other set could be a good way to force the habit and make it easier over time.

Not that it’s necessary for all styles, but when I’ve been to comedy shows in the past the people who are able to deal with the crowd really well are always the most impressive to me :)
1. You've just passed the cost to the unemployed developer.
2. Some of us do badly at standardised exams but are still highly competent and can prove it in other ways if given the chance.
3. If I fail an interview, I can reflect on where I did badly, study hard, and hopefully do better at the next interview days, weeks, or months later. A yearly standardised exam means I'm potentially unemployed for a whole year.
It's incorrect to say that they weren't cooperating with authorities at all.

In the EU, Telegram blocked access to certain channels that the EU deemed to be Russian disinformation, for example.
Maybe it will be analogous to steel. For most of the post-nuclear age, steel has been contaminated with radionuclides from atmospheric nuclear weapon use and testing. To get "low background" steel you had to recycle steel that was made before 1945. Maybe to fact-check information we'll eventually have to go to textbooks or online archives that were produced before 2023.

(Steel contamination has slowly become less of an issue as most of the fallout elements have decayed by now. Maybe LLMs will get better and eventually the hallucinated "facts" will get weeded out. Or maybe we'll have an occasional AI "Chernobyl" that will screw everything up again for a while.)
English still uses the cognate "strand" to mean beach or riverside. The most famous is The Strand in London, along the Thames. It's a bit archaic sounding but is not too uncommon.
How fortunate for Intel that as soon as they ruin their CPU naming scheme, AMD follow suit.
And don't forget that SpaceX had to sue the government/Boeing/Lockheed/ULA, multiple times, just in order to be allowed to compete for these contracts rather than having it locked down to the usual suspects.
In every country I know of, the freedom to not be responsible for what your user's do on a platform includes certain requirements. Removing illegal content is the very least a platform must do.

Every country has their own definition of "illegal" content, but things like CSAM are illegal everywhere, and that's one area where Telegram never really bothered to take action.

The arrest warrant has been out for a while, so I doubt Durov got himself arrested by accident. He probably has a plan, or at least good lawyers.
I’m referring to tracfones or similar prepaid devices which you can buy in the US for very cheap. In other countries if you apply yourself just a little bit you can get the same result. Greece has SIM card registration yet you can buy pre registered ones off the street in Athens. Latvia, Lithuania, Netherlands, Estonia, UK, and other countries have no SIM card registration at all and roaming works good across the EU. And you only need the number once to sign up.
An online tool for product managers that helps them turn written app specifications into something more interesting and visual.

https://appflows.ai

It doesn't save anything to the cloud.
It supports markdown.
It currently doesn't using an LLM but I'm sure that will sneak in at some point.
One day, I'd like to have it generate wireframes using AI.
There was a great deal of interest in how to remove airborne viruses during Covid.

One of the biggest takeaways seemed to be that UV light destroys viruses in seconds.

Seems like there a lot of things we could do
I think in most modern democracies you aren’t legally required to tell the police anything. Courts are a different case though.
Generally, there is no general legal obligation for bystanders or witnesses to report a crime, but there are exceptions.
Building transcription app that lets me dictate notes to notion.

Doint a lot of exploratory work for my day job and trying to establish practice of good documentation so i hope being able to ramble as i work will make this easier.

At this point it's simple macos flutter app that toggles recording on global keyboard shortcut.