skysight-inc/HackerNews huggingface dataset:
>It's not e2e encrypted, so what? It's something the majority of users does not need, and that doesn't increase security that much given their downsides.

Privacy is a human right. Everyone needs it. And Telegram advertises itself as an encrypted messenger. For every non-expert, that means end-to-end encryption. Only me and recipient can read the message. Users expect Telegram to be more secure than WhatsApp. Telegram claims its more secure than WhatsApp, and Telegram has attacked WhatsApp over its security. WhatsApp is always end-to-end encrypted, Telegram is not. So don't go putting words into peoples mouths.

>Given that they store everything on their servers, it means years of chat history that probably weights Gb for each user

It could be stored there with client-side encryption, Telegram doesn't need to have access to that data. Also who says chats that are ephemeral in nature need to be forever accessible. I save what I need from Signal or Telegram.

>This is the reason Telegram can offer you to have all your messages, including medias that can be up to 1Gb each, stored on a cloud for free.

It's not free. It comes with the price of your human right to privacy. You should get a job at Facebook with this marketing pitch.

>As I user I prefer Telegram just because it's the only app that works perfectly synchronized among multiple devices

It doesn't sync secret chats at all with multiple devices, not even desktop. Signal does.

>good quality native clients

Your script is seven years old https://signal.org/blog/standalone-signal-desktop/

>You can put a backdoor on endpoints, that is compromise the user phone (something they do)

Nirvana fallacy. Why is Telegram offering secret chats if all endpoints are compromised? If they're not always compromised, then it should offer end-to-end encryption for everything, always. Like Signal, Whatsapp, Wire, Threema, iMessage, Cwtch, Briar, Element, Session...

>you can make a MITM attack on the server

Which is why every messaging app worth its salt offers safety numbers https://support.signal.org/hc/en-us/articles/360007060632-Wh...

Even telegram has them, although their initial implementation of babby's first QR-code was a joke. How do you compare over the phone shades of a color matrix?

https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSUnBRB...

>you can access the data that is backed up on other platform

Oh, that would be horrible. Good thing Telegram doesn't have its data backed up in cloud, no wait, sorry, it does. ~Everything you ever do with the app is permanently stored in an ecosystem built by the Mark Zuckerberg of Russia, and his PhD in geometry bro Nikolai.

Shill harder.
It's sad to see the decline in values that had me in love with joining this industry. This is now a financialized company, keeping things consistent, and shipping a credit card, is much more important than bold HCI moves, or letting any % of profit dip in service of searching for a wider revenue basin.

I worked in Android at Google, and I think the year-long shipping schedules are inimical to SW exploration.

Communication is poor enough at BigCo that you'll have a feature approved in August, in flight by October, duplicated and shipped by a completely different team in January, and have to throw something together to be ship-worthy in April.

And if you don't, you didn't get any work done this year. It's not really "you need to launch to promo" as "if you don't launch, welcome to the performance shitlist. hope you don't become part of the 5% we'll sacrifice to Wall Street this year!"

Then, the schedule offset between the top and bottom means by the time you're done shipping the barely working version, its time to do whatever thing the VPs were kicking around the last few months by themselves and fell in love with.
Sqids looks fantastic, thanks for sharing!
Their original purpose was to identify messages in Apollo's distributed computing architecture. UID and later UUIDs were a reversible way to mark an intersection point between two dimensions. Any two machines would generate the same UID/UUID for the same two inputs, and a recipient of an identified message could reverse the identifier back into the original components. They were designed as labels for ephemeral messages so the two dimensions were time and hardware ID (originally Apollo serial number, later Ethernet hwaddress etc).

I think a lot of the confusion can be traced to the very earliest AEGIS implementation where the Apollo engineers started using “canned” (their term, i.e. static or well-known) UIDs to identify filesystems. Over time the popular usage of UUID fully shifted from ephemeral identifiers where duplicates were intentional toward canned identifiers where duplicates were unwanted and the two dimensions were random-and-also-random.

The history gets even more complicated because Microsoft hired one of the top Apollo guys to do MSRPC for Windows NT, so there is also “GUID” which differs from UUID in the layout of the fields and is not mixed-endian despite what a lot of sources will tell you. In addition to ephemeral RPC message-identifying GUIDs Microsoft are also in love with canned GUIDs for identifying COM classes, media codecs, and almost anything else that would ever need a well-known identifier. See https://gix.github.io/media-types/ for example.

Apologies for linking my own repo twice in the same comment section but I started (and need to get back to) compiling the history of all this in the README of my UUID library. Apollo started in 1980 and the Leach/Salz UUID RFC draft didn't happen until 1998 so there is a huge amount unsaid by the modern standards: https://github.com/okeeblow/DistorteD/blob/NEW%E2%80%85SENSA...
> So far claims from the media sound like Durov's being prosecuted due to very little moderation on the platform, not because of E2EE.

But that's why it's good. With all the mainstream media censoring stuff, telegram was a (good for the people) exception.

On the other hand, that's probably why they arrested him.
That would be an odd epidemiological profile...

Even at worst, when the patents expire after 17 years the miracle becomes affordable for all.
metadat@zukrfukr:/src/dozer$ \
wc -l
$(find . -name '*.c')
280 ./src/item.c
851 ./src/lex.c
166 ./src/parser.c
107 ./src/libdozer.c
103 ./src/resolve.c
167 ./src/path.c
219 ./src/traverse.c
91 ./src/scope.c
144 ./src/qbe.c
134 ./src/map.c
1045 ./src/expr.c
266 ./src/nhad.c
349 ./src/emit.c
92 ./src/main.c
231 ./src/type.c
223 ./src/pattern.c
97 ./src/typemap.c
224 ./src/token.c
148 ./src/util.c
141 ./src/stmt.c
5078 total

5kloc is pretty light for a `rustc', where are the tests showing what aspects of the grammar ar supported so far in @notgull's crowning achievement ? The article might be longer than the source code, which would be extremely impressive if the thing actually worked :)

I was not able to compile tokio with dozer.

For comparison, turn towards the other major lang HN submission today: a Golang compiler written in PHP; It comes with extensive tests showing what works and what does not. Somehow even the goroutines are working.. in PHP.

Golang interpreter written in PHP - https://github.com/tuqqu/go-php - https://news.ycombinator.com/item?id=41339818

Godspeed.
Some systems expect UUIDs so you don't always have that choice.
It's interesting how much of the (latency sensitive) data processing is done on the main CPU; I've not used early Macs much, but given they have a multitasking GUI, would user input be noticeably delayed during disk activity, or could it cause problems to e.g. move the mouse rapidly while it was accessing the disk? 16 CPU cycles per bit sounds like it wouldn't leave much time for anything else.
Saudi investment in diversified industries in SA and overseas is huge. For some worryingly huge. If you disliked former soviet oligarchs investing in property and football teams, the Saudis are there too.

It's also exploring tourism. Western women are welcome to sun-bake around pools in designated areas of KSA. It's only local women who are under stricter controls.
>Yea, that is moving goalposts.

No it's not. The comment I replied to was the one suggesting there is a causal relationship.

My anecdote is a counterargument that shows the erroneous logic underlying the original claim.
Telegram basically have "trust me bro" security.

Even worse than Apple. They at least have some e2ee options.
Only those that go in frames. The angle is applied while using proper cutting technique for knives. A flat blade would also go dull rather quickly, as only one portion of the blade would be doing all the cutting (well, tearing, a straight drop with a flat blade would be like trying to chop a tomato rather than slicing it).
> You can just say cash and that’s fine.

Cash isn't income. It's an asset. You don't even report assets. You report income, and you have to specify where it came from.
But with the Rust compiler in C the audit path would be much shorter it sounds like, and therefore be more auditable.

Plus OP also wrote in the post that a goal was to be able to bootstrap to Rust without first having to bootstrap to C++, so that other things can be written in Rust earlier on in the process. That could mean more of the foundation of everything being bootstrapped being written in Rust, instead of in C or C++.
The Most Loved and Hated Classic Novels According to Goodreads Users (2020)
Photographs have been faked and fooling people since 5 minutes after the first photograph. AI doesn't make this any worse than Photoshop or the airbrush.
Generally that'd be a form of constructive dismissal, which would be similar to a firing for unemployment purposes.
This is really out of scope for this case though. Most of what is discussed in this case is about public, unencrypted channels
This is probably more about keeping their communications from the public's prying eyes. In the U.S. this sort of thing is illegal: all intra-government communications must be a matter of record except for oral communications.
The single-payer health system. That covers everybody with a basic but high-quality level of health care. The rich can afford a (slightly) better health care using Private Health Insurance, but that generally only allows short-circuiting the length of time one waits for elective surgery. However, even the rich can get absolutely free medical care from doctors and hospitals.

When I went into hospital for triple-bypass cardiac surgery, my queue-time was about 14 days from "We're not sure if we'll let you go home tonight" to "Welcome to the Theatre Suite" using the public no-charge part of the health care system. The "routine bypass surgery" (according to my medical records) was performed under the public, no-charge system. Thank-you to my Iranian-immigrant cardiac surgeon.

That was followed by two days in ICU, again using the public, no charge part of the health care system.

From there I went into a Private Single-bed room for the next 3 or four days, using the Private Health Insurance part of the health care system.

After I went home, I had six weeks of Cardiac Rehab, again being paid for the Private Health Insurance part of the health care system.

My out of pocket expenses: Zilch, nada, nuffink.

The Australian public health care system is paid for by a taxation levy: the rich subsidise the poor. It's a win-win system. We all benefit. Without the system in place, the rich would miss out too, as the system would otherwise be too expensive even for most of them, if available at all that is.

Without it, I almost certainly would have died 19 years ago.
Ada Lovelace is often credited as the first computer programmer. She died in the late 1800s. Programmable electronic computers didn't come along until the mid 1900s.

Though it obviously depends a bit on what you are willing to count as computer, or as code.
The wikipedia entry for this confirms two sources depending on context, and in your case it came from a late 80s paper:

Sarin, DeWitt & Rosenberg, Overview of SHARD: A System for Highly Available Replicated Data, Technical Report CCA-88-01, Computer Corporation of America, May 1988

https://en.wikipedia.org/wiki/Shard_(database_architecture)#...
The C ABI won't die because it has a stranglehold on *NIX. Every new language you make has to conform in some way to C in order to use syscalls.
When the people speaking standard English are outnumbered by the people using other forms dynamicity is to be expected. The curse of lingua franca.
Elon Musk Forced to Reveal X Investors
I mean look at Paris. The city’s residents emptied out.

This is still ok in Europe, especially France, which have a culture of weeks long summer vacations, so it wasn’t as much of a disruption as timing the vacation right.

I’m not sure how well it will work for the residents of LA when US residents have no such limitation.

OTOH, LA is large and broken up enough enough that it may not be very noticeable for the residents as long as they remain in their residential areas.
Pharmaceutical research is a common global interest.

But there is no way to levy any global taxes to pay for it. That makes this idea practically impossible.
Correct. And the chicken was written in COBOL.
How would this be disproven? What would you observe?

This should hint to you why, despite sounding reasonable, what you said isn't a common-sense, no-evidence-needed or even wholly-formed idea.
> unless you want to run a separate messenger infrastructure.

Or if you S2S federate with the upstream server. Which is a core differentiator of XMPP and Matrix. Signal server(s) notably supported proper federation during their initial growth-phase but famously closed it off ("The ecosystem is moving").

Similar story as Google [Chat/Talk/Hangouts], which did federate over XMPP before they closed that down years ago.
As if this is exclusive to SF. The urban decay is happening everywhere. The US is very poorly planned and built. Car centric transportation simply does not scale. It's not good for people nor is it good for the environment. (No, electric cars and FSD will not salvage the situation)
Still not indexable, referencable, or freely readable

It's a walled-garden system which is fine for private chats between groups of friends, but Discord is increasingly being used as a place to report bugs and share information. Telegram furthermore requires signing up with a phone number which Discord did not (now, often, you need to for participating when an admin of a community aka gild aka misnomer "server" turned on that requirement)

https://xkcd.com/979/ This comic will not be understood by gamers growing up today... (Except in many cases someone posted a solution or nudged DenverCoder9 in the right direction at least; with Discord, Slack, or Telegram you'd simply never find the thread in a search engine to begin with.)
Rancid and greasy
It was a skeleton crew of H-1Bs being held hostage in a building that Musk was refusing to pay rent for.
pencil/ink on paper
As a driver, I have a lot more control of what scenarios I find myself in when driving vs when taking the metro.
This is quite sad and indicative of how poorly planned the city is due to car centric transportation and car culture.
Yeah I’m sticking with ULID and Sqids for my ID/slug purposes.
I’ve used Feather, worked out OK for me. I have a couple of other blades I prefer though.
You're right that there isn't a good standard way to configure this, but a lot of terminals should be able to do it. The magic phrase is “word characters”. I know Konsole, gnome-terminal, iTerm2, Terminal-dot-app at least have this setting.
How does it follow that Signal knowing a phone number means they know who the identity that phone number represents is communicating with?
My first thought was that sharding is a natural step once you know about hash tables. Or a rolodex.
There are multiple comments in this thread explaining why it is a very real issue. It is a party issue because one party relies on de facto voter suppression to win.
One of my sideprojects is intended to address this: https://lwn.net/Articles/976836/

The idea is a syscall for getting a ringbuffer for any supported file descriptor, including pipes - and for pipes, if both ends support using the ringbuffer they'll map the same ringbuffer: zero copy IO, potentially without calling into the kernel at all.

Would love to find collaborators for this one :)
In general, courts have held that Fifth Amendment protections against self-incrimination pertain to testimonial evidence, not broadly to any possible evidence that might be incriminating.

The Fifth Amendment does not extend to physical evidence or other non-testimonial evidence, even if such evidence is potentially incriminating. For example, courts have held that things like blood samples, fingerprints, handwriting samples, and even video or audio recordings do not fall under the protection of the Fifth Amendment because they are not considered testimonial in nature.

The report notes that it is the police chief, not a lawyer representing him, who is making the preposterous argument that the Fifth Amendment justifies his conduct. Any lawyer who tried to make that argument would be made a laughing stock.

Indeed, I would think that this internal affairs report, where the chief is essentially admitting that he knew he'd done something wrong and was trying to prevent incriminating evidence from being recorded, would be pretty damning in front of a jury, because it establishes that he was well aware of the recklessness of his conduct.
Telegram publishes open-source clients that can run on open-source platforms. Signal does not offer any client that doesn't depend on proprietary code (either iOS or Google Play Services) and is aggressive about taking down third-party builds that remove that dependency. I'd say there's a lot more reason to assume Telegram is not wilfully backdoored than Signal (though I'd trust Wire or Matrix ahead of either of them).
Yes, in which they needed a new AI for the NPCs and spawned LLMs
This doesn't really say what you think it says.

In fact there is a great deal of uncertainty regarding future drug prices, and it is one of many factors rattling biotech investment.
Voter suppression is not "nonsense", it is real.
This is actually great blogpost since too many people tend to believe that Telegram is somehow more secure and private then alternatives on market.

Also it's not like Telegram dont have censorship. During last 3-4 years there was many cases where Durov blocked bots and channels that belong to protests and opposition in Russia, marked them as "fake" or just plain removed with no trace.

So it's just another case where some rich guy try to sell his own platform as some "freedom of speech" one even though it's just censored to his liking.
Immagine a world where every framework / API / database had its own incompatible UUID format. Without a standard specification that's where we would end up. Do you want to live in such a world?
The state counts are from the linked website. (As someone from Europe I have zero idea about any of this. I was just fascinated by the "TLAs".)
This makes zero sense. If I have a traffic camera in my car or an action cam on my bicycle helmet, there is no fifth amendment right to suppress that evidence in court. So, what in the fifth amendment makes this any different for a law enforcement officer?

I'm actually generally sympathetic to law enforcement officers. Most (but not all) cops are good cops. And it's a hard job. But it should be a hard job. After all, law enforcement is granted an unprecedented, exclusive power no one else has, a monopoly on the legitimate use of violent force. With great power comes great responsibility (and accountability). Law enforcement officers are employees of the state (which represents the people). When "we the people" collectively hire a few individuals to exercise violent force on our behalf, it's reasonable that we also require digital accountability, including GPS, video and audio recording as a term of that employment.
As you alluded to, Matrix has really horrible UX. Telegram is meant to be easy for the many to use: finding content in chats or even globally across public channels for example is intuitive and snappy because their server does the heavy lifting. That's a huge sell for many, myself included.
I did not mention conviction, only prosecution.

It’s not unreasonable to think “we should look into this guy that is publishing CSAM even though he’s posted it under hashtag #totallylegal”

I have a legitimate question for the defenders of this specific activity: If a bad actor were to produce real CSAM by harming children and then used an img2img model that creates very similar but distinct outputs, what do you call those outputs? CSAM? Art?

What (if anything) should happen when law enforcement sees those images?

How can the idea of “synthetic CSAM that harms no one” exist without some mechanism to verify that that is the case?
> "oh the savior of the woeful masses, and the silver bullet of all thy problems"

Who said that? Everyone I've talked to warns about their shortcomings (including their creators) and even the platform where I use them has a warning plastered right under the input box saying "ChatGPT can make mistakes. Check important info."
But why are so many South Asian if they are so rarely East Asian?
The problem is that it never ends at protecting Danish women or kids, or "fighting terrorism".
I'm not sure why you are being downvoted. Import bans on food and vehicle tariffs suggest the US has to deal with a lot of complexity regarding cars and food prices. Drugs are no exception. If only there were any easy answer.
Sounds like it needs software subscription added /s

IMO people wouldn't mind replacing it if it was easy to access.
They’re employees performing a paid job. Not random citizens.
Ballots do not, and must not, have any ties to the voter. Secret ballot is essential to prevent coercion.
The public did not know and you can easily see what people thought by looking at this graph:

https://manifold.markets/TimothyBandors/will-boeings-starlin...

If people knew what NASA knew that graph would look a whole lot different. NASA misled the public and then slowly let the cat out of the bag.
We (Americans) stole it in the first place, so it is only fair that we’re happy to share.
> malicious app author can 100% secure encrypt everything in wire and yet leak 100% of your data

Um, surely you understand the difference between piping random-looking bytes uselessly to whoever and having a readable copy of all data readily available to whoever hacks the system or applies for a sysadmin role? Or are you making the assumption that people use a closed-source client and the server can push malicious code?

> Even if the app source code is published as you don’t know if they backdoored it before they submitted to App Store.

Doesn't work if you have third parties also working with the system or forking the code to work with it. It gets noticed. Your concept of "e2ee can be 100% leaked anyway" only works if you don't know what code you're running. You need to trust the community in general to uncover issues you've overlooked (in the code or build process) but that's not the same as not having encryption at all. You can't audit the servers but you can audit the client code.
I mean, they’re not wrong… they offer investments, predictable salary path, health insurance, job security, pto/sick leave, saving many other things.

And work on some of the coolest machines in the world.
I've been working on an electronic music controller designed around seven-limit just intonation that I'm calling the Mosaichord. It's a 4-octave keyboard using a scale with 28 notes per octave. The keys are pressure-sensitive.

Recently I got a DIY strobe tuner I've been working on up and running, which pairs nicely with the Mosaichord.

https://www.youtube.com/watch?v=Lkz-fZN54OI

The Mosaichord works pretty well these days, and I've assembled a bunch of them. Just got a new batch of PCBs yesterday to make more. There's a basic website up, but I haven't yet set up a proper web store.

https://desideratasystems.com/