skysight-inc/HackerNews huggingface dataset:
> The system is vastly more convoluted than I think anybody on any side actually realizes it is.

This is intentional. It's a game of attrition, and the insurance companies hold all of the cards.
TLDR: 99.95% of messages on Telegram stored as plain text on their servers and only encrypted between client and telegram server. End-to-end encryption only working for 1on1 chats, not available half of their clients and have terrible UX.
You can enable it on a per chat basis.
Yeah obviously there needs to be a balance. But I think it's popular right now to be unbalanced towards allowing any and all victimless crimes not thinking about the effects they do have on society overall and in the long term vs any particular specific person immediately
>Encryption really doesn’t matter as much as the trust of the app here. Any malicious app author can 100% secure encrypt everything in wire and yet leak 100% of your data to some state actor.

This is exactly the problem with Telegram. Telegram defaults to client-server encryption for everything, and you can't enable end-to-end encryption for anything on desktop, or group chats ever. Only 1:1 chats and calls on mobile have end-to-end encryption. Client-server encryption is exactly the "100% secure encrypt in wire". When that data arrives to the server, it's no longer encrypted, and Telegram can do whatever it wants with that data, including leaking it to some state actor (like FSB/SVR).

>Anything you type into the chat box is only encrypted by the app after you type and probably storing it in the clear in some local SQLite db.

If endpoint security is of concern, your options with networked TCBs are quite limited. Are you sure the malware doesn't have a chance to escalate its privileges and read messages in clear from RAM?

>It gives them a whole bunch of options to mess with that plain text data.

I'm looking forward to hearing about how you managed to fix this. Should we implement memory as eFuses (https://en.wikipedia.org/wiki/EFuse) to prevent editing logs? What if the user wants to delete his messages?

>Even if the app source code is published as you don’t know if they backdoored it before they submitted to App Store.

E.g. with Signal android, you can pull off the APK from the device, and compare its hash against the client that was reproducibly built from the source code you have in your possession. Been there done that https://imgur.com/a/wXYVuWG

>I am amazed at the low quality comments here.

Too bad you're not exactly improving them with your nonsense.
My buddy lives in Oakland. We park and walk around lake Merritt. He always leaves the windows down. His have been smashed four times. Oakland is not SF, but the practice isn’t unheard of.
Protobuf is a tag-length-value (TLV) encoding. It's bad. TLV is the thing that everyone loves to hate about ASN.1's DER.
Calling Linux pipes "slow" is like calling a Toyota Corolla "slow". It's fast enough for all but the most extreme use cases. Are you racing cars? In a sport where speed is more important than technique? Then get a faster car. Otherwise stick to the Corolla.
I think people are misinterpreting car free. Car free likely just means more of a park and ride type situation. You hop on a designated bus that will be available at various locations, and that bus will take you to the venue.
But just because it can be taken too far, doesn't mean the argument is bad. Likewise, the argument for a social safety net is good, taken too far you get Communism. Does it mean we throw the baby out with the bathwater?
Patients on Medicare/Medicaid plans have similar or worse issues finding therapists who take that insurance, so I am mystified as to why anyone would think that a single-payer system would be any sort of solution.

While in principle I think you're probably correct that providing good mental health services to employees makes for a more productive workforce, it's tough to connect cause and effect in a mathematically rigorous way. We just don't have high-quality studies in this area to establish cost effectiveness. And many employees tend to leave anyway for other reasons.

We really ought to break the link between employment and health coverage. That part never made any sense.
You forgot putting “price controls” in scare quotes while describing the program matter-of-factly as “negotiation”.

If you dive into the details of the law, it’s a “negotiation” only in the sense that drugmakers can choose to sell anything to Medicare or nothing at all if they don’t like the proposed price on any one drug. The penalties for “walking away” from that price are not limited to failing to make sales to Part D insurers. (Remember: Medicare doesn’t have its own formulary, that’s the Part D insurers’ role.)

Also you don’t have to know much about the history of this law to know the non-partisan Congressional Budget Office thinks we’re going to fail to achieve a dozen or so blockbuster drugs over the next decade due to this “negotiation”:

https://www.hks.harvard.edu/publications/biopharma-venture-c...
Physical Degeneration of the Agricultural Revolution
Only his word to go off of.
I’m not saying I agree but their argument seems to be that the body cameras being required to be running violates their 5th amendment rights. Your traffic camera was your choice to have running. Nobody required you to have one running.

It’s not a good argument but not wildly surprising either.
Unless you don't want to expose your kids to sun screen, eeek /s
Do the Most Interesting Musical Pipes Come from Ireland?
From TFA:

> Last year, the National Center for Missing & Exploited Children received 4,700 reports of generated AI child porn, with some criminals even using generative AI to make deepfakes of real children to extort them.

So, it’s definitely part of the conversation. Also, being a more general conversation means that it encompasses more specifics. Not being able to bring the general conversation back to specifics makes for a fairly useless discussion.
Ugh.

> I could go on for literal days

I believe there should be a way to have a rational discussion about this, point by point, maybe threaded. This ain't it. But whatever.

I am not married to blockchains, I have literally criticized blockchains. I have said that smart contracts and distributed systems are what we need, whether that's Internet Computer canisters, SAFE network datachains, IOTA DAGs, Hashgraphs, or Intercloud (something I designed). I don't know why people on HN love to do this strawman over and over.

Blockchain is a settlement layer. I don't even say it's needed for day-to-day micropayments. I explain how the systems could work, which could use any smart contracts for their settlement layer, I don't care about the underlying technology for those, but the Web2 elements are there: https://qbix.com/ecosystem#DIGITAL-MEDIA-AND-CONTENT

> The last I heard of [LBRY]

Yeah, they got sued by Gary Genzler's SEC even though their coin was one of the few actually being used as a utility token. They were forced to shut down their entire company, and only the network survived. Similarly with Telegram, with the SEC. I will wager that you're reflexively on the side of Gary Gensler and the government "because blockchain". But I would have liked to see this innovation grow, not be killed by governments.
I 100% trust they implement the signal protocol as they claim. I am also similarly sure that they ALSO have a sidechannel for everything.
Principles for Refactoring a Monolith to Microservices
If cops wanted to win the trust of the public and work alongside their fellow citizens to keep their communities safe, they would welcome to use of body cams and hold themselves accountable to a high standard of integrity.

Stuff like this certainly makes it seem like cops are more interested protecting their own power and their cushy pension packages and their corrupt fringe benefits.
The insurer is supposed to cover everything, as long as it is justified by the prevailing evidence and there is no alternative treatment.

However, you may have to fight for it.

https://www.healthcare.gov/appeal-insurance-company-decision...
Assuming an adversarial relationship, what sort of metadata could Google capture simply knowing which app was sending the notifications and who was receiving them?
Isn't that true of all doctors?
That town needs a new Chief and a new Mayor.
To the contrary, the damage of displacing their core service workers with overpaid startup employees can't go on forever. Pumping more money into the city isn't going to change the core issue, and businesses are starting to realize that they are the problem.
NYC Elizabeth Street Garden fight: A-list celebs urge Eric Adams to stop
You cannot always obtain a generic version; sometimes not even the original version.

Drug manufacturers regularly take approved medicines, which are off-patent and non-exclusive, due to safety reasons (side-effects, risks to patients) or due to commercial reasons: high cost of production, low demand, or possibly to increase demand for an exclusive alternative.

The FDA maintains a list of "List of Off-Patent, Off-Exclusivity Drugs without an Approved Generic": https://www.fda.gov/drugs/abbreviated-new-drug-application-a...

See also: https://en.wikipedia.org/wiki/List_of_withdrawn_drugs

There are also perverse incentives at play and it often isn't easy to get a generic approved, especially if the original drug was already removed from market, under biosimilar regulations:

https://prospect.org/health/2024-03-14-novo-nordisk-disconti...
It's practically a dog whistle at this point. These days I look for those advertising non-commercialness or communality as keywords.
Cursory glance at any MAANG recruiters on LinkedIn will tell you that
See for instance https://matrix.org/blog/2021/07/21/germany-s-national-health...
Public universities and their hospital systems are the largest employers in many cities and states. The status quo is already somewhat socialized. Like some dollars from expensive hospital procedures and drug research royalties go to the insanely bloated admins of these university-hospital systems, paying salaries of people who basically could be eliminated overnight and no one would notice, who are working 11am to 4pm 3 days a week, and whose primary qualification is graduating the same university system and occasionally being the partner or relative of another employee of it. On the one hand you imagine something that is Socialized, in some imaginary way, in your head, that only you know, fine. But think critically about whom is employed by pharmaceuticals, how did they get to that station in life, and maybe it starts to look like things being socialized more than they seem.
Removing comments is also essential
You'd be surprised at how many people I've interviewed over the years have been unable to hide the fact that they would be terrible to work with. In programming circles at least, I think the ability to socially manipulate and mask true character in an interview setting is way less common than the ability to practice questions and memorize answers.
He specifically explains what people think an encrypted app is:

>Many systems use encryption in some way or another. However, when we talk about encryption in the context of modern private messaging services, the word typically has a very specific meaning: it refers to the use of default end-to-end encryption to protect users’ message content. When used in an industry-standard way, this feature ensures that every message will be encrypted using encryption keys that are only known to the communicating parties, and not to the service provider. From your perspective as a user, an “encrypted messenger” ensures that each time you start a conversation, your messages will only be readable by the folks you intend to speak with.

So and encrypted messaging app means to people the security that an end-to-end encrypted app provides.

He then explains how Telegram is not end-to-end encrypted.

* No end-to-end encryption by default

* No end-to-end encryption for groups, not even small groups.

To add, there's no end-to-end encryption for desktop chats either. And no end-to-end encrypted cross-platform chats either.

Your post reads like dollar-store damage control team post that didn't even read the article they're trying to discredit.
> If it is free, then you are the product

I use Linux and it’s free. Am I the product?
> smog

June gloom is not smog.
CA has some of the strictest emission controls since the 90s at least. Electric cars are plentiful. It’s not the 70s any longer.

Now a fire can and does happen occasionally but that is far from a given at any particular time.
Which easily excludes 80%+ of the places either due cold, heat or pollution.
So... hire the most attractive pitch people possible? The goal of any startup is to survive. It's get the investment dollars or close up shop. The practical outcome of this article is for startups to recognize the effect and maximize it to their benefit. Onus is on the investors to stop acting like pigs. They should recognize when they are being played. Just look at those who backed Holmes/Theranos, largely older men like Murdoch, Ellison, and Kissinger. They should have spent more time reading and less time listening to pitch people.
Yep, the police are public servants. When you're on the clock, you work for the people.
Biennale.py (2001)
Are any companies doing r&d for drop in tire replacements that don't have as much of an issue with micro plastics?
I’m old enough to remember when Signal first implemented cross-device sync using a Chrome plugin.

I’d rather developers issue cautionary warnings than give a false sense of perfect security
there are services that sand down PCBs layer by layer to allow electrically exact copies

not viable for ICs, though
So that is how it crossed the road
>because the generic drug might not be good enough in your case.

The comment I was replying to:

>Often times, you’re looking at 10-100x the cost for “statistically significant” uplift in efficacy. What happened to value-based medicine?

If that's the case, sounds like the extra cost is worth it.
The external tank and both SRBs could be refurbished and reused. The orbiter also forms part of the first stage.
Telegram currently has very intuitive and snappy search, even in very active groups with years of content. That's because the heavy lifting is done by the server. Think that'd still be possible if there was no way for the server to process the data?
Introduction to HB21-1110: Colorado's Accessibility Law for State Agencies
Lua definitely will compile on an ANSI C compiler, without POSIX or Win32 extensions.
If the Secret Service doesn’t like what GM charges for a few dozen black Escalades, they can’t take a haircut on GM’s revenue for every one it sells to the general public.

But that’s how the IRA works.

Also, the way Medicare Part D was set up, the government doesn’t buy the drugs in the first place. Private insurers negotiate their rates and then are reimbursed. They already have significant market incentive and power to negotiate lower prices.
Isn't this how all the hyperscalers already run in China?
I mean, there are many proprietary “additions” to SMS. They often don’t work well with each other and telcos often have really odd controls that they place on that line of communication. iMessage still lets you send/receive via SMS if you want all of those caveats.
The ad itself was quite good and somewhat inspiring but the article makes some factual errors. It's neither a Navy or military recruitment ad- it's for maritime manufacturing.
>So how many services claiming encryption have this flaw? All....

Telegram is actually one of the only apps I've seen to defend their super-duper secure storage of keys online. All lies of course.

The overwhelming majority of secure messaging apps have no way to recover user data if you drop your phone in the ocean. This includes Signal, Wire, Threema, Session, Element, iMessage etc.
Yes, but Google cannot be compelled to turn over data they don't actually have on their servers because the users encrypted it before it arrived with keys Google don't control.

Signal could modify the application so a remote flag in the Play store binaries could be triggered to exfiltrate data as well. But the key distinction is the normal path of Signal gives them absolutely nothing they can tell anyone other then the bits they've put in the disclosure reports (namely: date and time an account ID used Signal I believe).
I seem to remember a conversation here on HN not too long ago where people tried to reconstruct the history behind "sharding" and, in particular, tried to find that 1980s paper you mentioned – without success. I believe they even contacted one of the authors.
Then why do legislators not finish funding the "minority" of the funding? The clinical trials are the most expensive and risky part. There is a reason the US government (and other governments) step away at that point.
True. But it may lead to some amusing situations - like when you are having a zoom call with people from all over the world to be at a disadvantage because you are native speaker or have C2 Proficiency in English.
That town sounds like the kind of place where dissenting views could face a lot of serious consequences because the corruption has captured everything.
I cam across this website probably in the mid 00's. It's still excellent but good luck finding it through a Google search. http://www.ufoevidence.org/
Seems to hang on some loading screen overlay. If it fits in a toot, care to just copy it here and save people a click?
I fail to see what this has to do with European conceptions of free speech in general. You may recall that Britain went out of its way to leave the EU, in part citing its dislike of the EU's legal concept of fundamental rights.
REME Halo was recommended to me and I bought one. Hard to know if you’re making a difference, but it’s something.
Self-describing is point-less for serializations. There is a great deal of history here. ASN.1 has self-describing encoding rules such as BER/DER/CER, XER (XML), JER (JSON), and GSER (never mind), and it has non-self-describing serializations like PER (packed encoring rules) and OER (octet encoding rules). XML and JSON are self-describing, naturally. FastInfoSet is a PER-based fast encoding for XML, because it turns out that XML is slow (imagine that). XDR is a non-self-describing serialization format that resembles OER but with 4-octet alignment. Flat buffers is essentially an OER-ish encoding for the same IDL as protobufs, and is much better than protobufs.

It would be nice if the next serialization format either is truly original or just solves problems that somehow none of the many existing schemes do.

How many serialization formats are there? See: https://en.wikipedia.org/wiki/Comparison_of_data-serializati... (which is NOT a complete list).
PMapper author here: I can't give PMapper the love it deserves, but I fully support the work done in Fennerr's fork at https://github.com/Fennerr/PMapper .
Probably off-topic, but the chicken and the egg "paradox" always seemed silly to me in the context of evolution. We know that there were birds long before chickens, so at some point, the first bird that we would consider to be in the species "chicken" had to hatch from an egg from a bird that was _not_ a chicken, so the egg came first. (This assumes that the question is specifically about chicken eggs; it's even simpler if you count non-chicken eggs from the ancestors of the first chicken, but the logic still works even if you don't).
The population of SF has declined 7% since 2020. With a population decline that steep, can't they just maintain the housing units they have?
>You are sure are relying on trillions of dollars and nuclear and conventional military capability to let you be at peace though.

The US-supplied bomb that destroyed my sister's hearing at age 23 is not helping me "be at peace."
Kind of annoying that I had to follow 4 links just to find a high level justification of the benefits of bootstrapping [0]. I was kinda hoping the "Why" part of this title would address that.

[0] https://bootstrappable.org/benefits.html
>I'm specifically referring to the idea that patterning insurance after the IRS

Maybe I'm missing something, but I don't see anyone who brought up the IRS as a model example except for you. It seems like people are just talking more generally about steamlined than the current status quo experience, and there are so many ways to steelman that which have nothing to do with analogies to the IRS.

To your credit you did note that you wanted people to take you up on your suggestion of using only bad examples, but I don't think your insistence on that front holds water because this is the type of thing where the difference that makes the difference is going to be the very details you are asking everyone to gloss over.
I'm starting to feel like the eu is an embodiment of the comic book guy from The Simpsons. He's just there and takes up space, complain about everything, and not do anything themselves.
The founder departing Meta on very bad terms is quite a signal to me:

https://www.forbes.com/sites/parmyolson/2018/09/26/exclusive...
Like V3 but with a specifiable hash algorithm.
>Drug manufacturers regularly take approved medicines, which are off-patent and non-exclusive, due to safety reasons (side-effects, risks to patients) or due to commercial reasons: high cost of production

Sounds like the new drug is providing value, contrary to what the parent poster is claiming.

> or possibly to increase demand for an exclusive alternative.

Aren't generics typically produced by a manufacturer other than the original manufacturer? Sure, the original manufacturer might have a generics division to compete with generics, but if they're the sole provider there's no reason to offer a generic to undercut their brand-name variant. This theory makes no sense.
Whisper transcription is extremely good. For most real-time transcription tasks I do think it performs as well or better than the average human at this point. In this case it sounds like the task is more active and involves actually thinking and talking to the other party, which makes it much harder. But for simply transcribing phone calls, the state of the art is very very good.
Are you going to run through what the problem with that was that makes it internationally important? Industrial explosions are an common event. Usually they make local news or whatever then people move on. We don't usually ban technologies because they can explode. Fertiliser explodes.

Did these kill anyone? Did they harm anyone? If the evacuations didn't happen what was the risk?
Hopefully the increased energy needs for advanced AI in Game Neverending 4 will lead to a major breakthrough in fusion power.
When AI Is Just Badly Paid Humans [video]
It's not great, but this is far from abnormal. I worked for a company (not my current employer) that got R&D grants or tax breaks (I'm not sure which) from a government. The engineers were asked to come up with defined projects that could be justified as R&D in the way the government wanted. We did, and we actually did the projects, but might have done them anyway.

Governments want to grow areas of their economies that they think could be beneficial. It's not acceptable to just hand out cash, and that can be trivially abused, so they put a little work around it to make sure the right companies are applying, and they tie it to token artifacts to make it seem more specific. Some companies commit outright fraud, but they're likely the minority and it's just a cost of the program, some put in a ton of effort and do it properly, and that's fine, and the majority just carry on doing the work they were already doing that the government was trying to encourage, and they'll hopefully be just a bit more successful as a result of the extra cash.

It's all a bit silly, but I don't think it's malicious or actually that bad if you assume that the government isn't trying to achieve a specific outcome beyond growing a sector, despite what they say.