skysight-inc/HackerNews huggingface dataset:
> In other words, the bugs are in faulty implementations, not specification.

Problems with STARTTLS have been going on for atleast a decade. At some point you need to start wondering if the design isn't the problem.

Besides, why would you even want STARTTLS? Even the authors of the RFC can't come up with a good reason to use STARTTLS [1]. Most of these reasons are from another era:

> Separate ports lead to a separate URL scheme which intrudes into the user interface in inappropriate ways.

Actually knowing in advance if something is going to be a secure connection (like HTTP vs HTTPS) sounds pretty desirable to me.

> Separate ports imply a model of either "secure" or "not secure." This can be misleading in a number of ways. First, the "secure" port may not in fact be acceptably secure as an export-crippled cipher suite might be in use. This can mislead users into a false sense of security. Second, the normal port might in fact be secured by using a SASL mechanism which includes a security layer.

Export ciphers are obviously not a thing in 2024 anymore. And "using a SASL mechanism which includes a security layer" where apparently someone made their own alternative to TLS sounds like a really bad idea.

> Use of separate ports for SSL has caused clients to implement only two security policies: use SSL or don't use SSL.

That actually sounds desirable.

> Port numbers are a limited resource. While they are not yet in short supply

Only very few protocols get an actual IANA assigned port number nowadays.

[1] https://datatracker.ietf.org/doc/html/rfc2595#section-7
Are you running a lot of systems on over-decade-old OSs? Because tmux isn't really new anymore
We can just disagree here for now, since we agree directionally, and I think people should use Tarsnap.
It could be designed that doing so will generate some alarm to other people. For example, the backdoor do not exists and it has to be developed, so the attacker has to keep them hostage for some period of time and loved ones may report a missing person. The software then might have to be signed with a key that generate alert to the whole engineering team, which someone else in the company may investigate the unauthorized release as cyberattack. Perhaps the release signing key is physically stored in the office (eg. Yubikey) which also require the attacker to perform a heist in the office.

Surely some three letters organization probably could pull that off, but it add risk to their operation that the operation could be leaked.
This is really cynical.

You live in a society where almost everyone goes to work to produce something that they will not directly consume.

Humans figured out a way to organise everyone and get them to work cooperatively, it's the free market.

In fact, it couldn't work any other way. Suppose you had 100% altruism and everyone wanted to promote the "greater good". You wouldn't ever know how to direct people towards that greater good. You need prices to drive production.
Sadly it wasn't 100% safe like hoped: https://pubmed.ncbi.nlm.nih.gov/38390323/ .
> It's a natural fit.

Does the wine project have the resources and knowledge to maintain it?

Or is it just so that microsoft can say they aren't the ones discontinuing it?
I find 0 investors no matter what I search in Europe?

Edit; I guess it has glitches? Seems for the same query I get 0 or many sometimes.

Can I change my filter after search? It seems to throw out my settings which is weird as my type of business, what round and location are not going to change, so entering that multiple times is... no good.
Telegram allows everything and anything, including unsavoury/illegal content (supposedly you can report it and it gets taken down, but potentially the whole crux of the issue Durov was arrested over was that it's not enough/fast enough/law enforcement can't report). There are channels from Russian and Ukrainian officials making official announcements (today our city of X got hit by missiles, please go to ABC if you need help), there are Russian officials using it for official communications (including military and intelligence). There are paramilitaries and other such groups using it for internal and external communications too.
I really don't get the push of Blazor everywhere instead of its original WebAssembly target.

It is like the Web folks, that don't get anything else, are now pushing where .NET goes, mostly since .NET is now under Azure org chart.

I have done Web and native since "forever", not everything has to be for everything.
I don't know, I think the Racket GUI toolkit and JavaFX work fine for building cross platform standalone applications.
TPUs are essentially garbage compared to NVIDIA hardware. TPUs are king of nothing, but a primary ingredient in Kool-Aid
It was miraculous what you could do with GEOS on the Commodore 64. I did a lot of school projects, such as papers and newsletters. With lots of fonts and graphics.
I guess it's true, I'll be around in 10 years, they probably won't be.
I guess the idea is that facts corroborate, and therefore, the most efficient way to learn to reproduce all things is to preferentially learn things which fit in with the rest of the things you are learning. This of course assumes that the majority of the training corpus represents truthful behavior, otherwise it becomes more efficient to become really good at making things up.
No hack job needed on someone who can't call themselves news without going to jail.

https://nymag.com/intelligencer/2023/05/all-the-texts-fox-ne...
Polls are worthless.

https://x.com/HuffPost/status/795663593689808896
Read the actual charges. Providing an encrypted means of communication is one of the charges.
Productivity blog shares a blog post on it

https://blog.productivity.directory/taskwarrior-the-command-...
My point was that just because we impose a new tax on unfathomably wealthy people, it doesn't mean that we are inherently going to impose that tax on normal people. We can't be so scared of our own shadow that we are paralyzed into inaction. So scared of new taxes imposed on ourselves that we don't try to tax the uber wealthy. At the end of the day this is a democracy (obv with flaws, but still a democracy.) If politicians start taxing your 100k investment fund the way they are taxing a 100M investment fund, vote them out.
> Why can't the servers distrust the clients? What should a 'client side anti cheat' actually prevent?

There are two issues. One is the user seeing things that the server is hiding, such as enemies hidden behind obstacles, by going into "wireframe mode". The other is superhuman performance via computer assistance, or "aimbot hacks".

The first is a performance issue. The server can do some occlusion culling to avoid telling the client about invisible enemies, but that adds to the server workload. The second is becoming impossible to fix, since at this point you can have a program looking at the actual video output and helping to aim.
(You can now get that in real-world guns.[1]) Attempts to crack down on people whose aim is "too good" result in loud screams from players whose aim really is that good.

[1] https://talonprecisionoptics.com/technology/how-it-works/
Hey! It's the English version, something got broken. Your message made me learn about that. Thanks! Spanish and Catalan versions seem to be working properly.

On my next deploy that will be already fixed. Unfortunately, software done for the city council has very slow cycles due to several actors interacting. And the deploy will delayed specially now, on summer. Today I'll fix that, but probably you won't see changes until next week.

Sorry for the inconvenience.
Indeed, it seems that 80usec is just given as an upper bound based on the 1MB buffer at 100Gbps.

It is definitely possible to go much lower than 80usec on Ethernet. But obviously it depends on the scale, utilisation etc.

At the sizes of GPU clusters we're talking about these days - 32K and up - things get tricky.

The main alternative to Infiniband used in the industry is RoCE - Meta has written a lot about it [0].

There's several reasons to avoid Infiniband, such as cost, availability, vendor lock in, lack of experience etc.

Those are some of the reasons why many players are trying hard to make Ethernet work, see Ultra Ethernet [1].

[0] https://engineering.fb.com/2024/08/05/data-center-engineerin...

[1] https://ultraethernet.org/
The article specifically argues about the ex-hypothesis of Durov's involvement in these crimes.

And maybe I misread it, but this thread also argues about that possibility.
The author wants to cry against the EU lows because EU bad period. "Don't travel to Europe, don't hire in Europe" and so on. The rest is looking for arguments to support his "hunches".
well because realtime online multiplayer game need to be "FAST", I mean really fast

sure if you develop platform today we can check token user now with hashtable we have in database but in games ?? You cant verify calculated damage numbers users gave, not fast enough
How much though, i mean you're basically doing vector work, and only when its visible within range, and then when its visible within the player and the player hitbox is.... oh I see.
The Richard Montgomery is quite a mess. I hope there is ongoing research somewhere about using robots to incrementally reduce a cache like this.
If rocket science were as cheap to practice and as in demand as programmers then there absolutely would be rocket science boot camps.

There aren't, because the demand for space rockets is very low and they're extremely expensive.
Any war between the U.S. and Canada would play out in strange, unpredictable ways just due to how closely intertwined pretty much every critical capacity of our two nations are.

Both the West and East coasts would immediately have their power grids upended by the loss of Canadian hydro. Fuel supplies (and practically everything else in both countries) would be disrupted as Canadian suppliers turn off the taps and American refineries go dark. Pipelines would, in all likelihood, be sabotaged so that they can't be started up quickly even once controlled. Large parts of Canada would go on a sudden bread and meat diet, since they rely almost entirely on imported fruit and vegetables.

Neither side would likely have the element of surprise, since both sides would be compromised by a large number of people in their command structures who are either from the other nation or sympathetic to it. A significant portion of U.S. forces would likely refuse to follow orders unless there was a damned good reason to invade Canada. Civil unrest in the U.S. itself would be a huge problem for the same reason. U.S. rivals such as China would pounce on the opportunity to take advantage of things while all this is going on. If the U.S. rolls into Canada then nobody is going to give a fig about Taiwan.

Occupation would be another matter entirely. The territory is massive and the enemy indistinguishable from yourself. Canada would present many of the same difficulties with terrain as Afghanistan, but with a populace that can tell which end of a toaster to plug in.
* Pass through a window without lag - That's why the server is sending multiple copies of potential movements and paths through the level for each character, but terminating the ones that are about to reveal their effects (no longer be culled by walls / objects) when they'd send false information to non-cheating players.

* Aim Assist - what's that supposed to work with for the assist? I guess it might help someone target a player once they're exposed, or once they've locked on. For that I think that extremely top tier players might behave within fuzzing distance of tool assist, at least some of the time. Dodging might have similar issues. I could even see ML assisting inputs just based on frame-grabs off the screen video output. -- So I'm not sure what client side anti-cheat is supposed to do here.

* HUD improvements - like what?
Or, you know, hire ANOTHER software engineer to add the backdoor. Probably cheaper and less hassle and less illegal.

In either case, you'd have to fool the internet army, who are watching the source code of projects such as this like a hawk.
I didn't know that, that's awesome. Thanks!
The first rule in any software backed by a server, but especially multiplayer games is, you never trust the client. You could have a perfectly deterministic game where every action is validated on the server, be defeated by running the game at half speed.
a good example of people not understanding what they're asking is where people showcase the whole "which is bigger? 9.11 or 9.9?" and of course a LLM will return 9.11 because in most contexts (chapters, versions etc.) it is the bigger number, but if you specify the context is fractional numbers then most models will correctly say 9.9 is bigger. A while ago I kept seeing people tout the conventional "9.11 is bigger" answer as proof that LLM's don't understand numbers and are bad at math. While this is still empirically true, I don't think most people understand these things as well as they believe they do either. Specifically, people don't understand how broad and ill defined their questions often are, and how much of their preconceptions need to be communicated for their questions to mean what they think they mean.
Yeah, same for me. The more I learn the internals, the more magical it gets. We are literally making pieces of sand, rock- think. That's magical.

The same happened to me when I studied Physics with great care.
A new type of tax on the absolute wealthiest of the wealthy is not "taxing everyone to death." I'm sure there are some great ways we can reduce/improve government spending, but that is completely separate from the idea that the mega-rich should be paying more.
While I agree that in many (all?) ways it is that simple, this is an area where there is a lot of scope for there to be unseen pressure from intelligence agencies. The French literally invented espionage (I choose my words carefully here) let alone whatever pressure comes at Telegram from elsewhere. It is hard to be confident in the whys of decision making around large communications tools and security.

Although, ironically, if the French are arresting him now that says good things about Telegram and their willingness to dob customers in.
There have been several arrests of drug dealers using whatsapp over the years.

Do you have any official source that criminals on telegram are more? Or is it just a feeling you have?
Telegram Founder Was Wooed and Targeted by Governments
> the more I pay attention to the world and my senses, the less magical it becomes

I feel you because I was like that too, but at some point, my brain bit-flipped to the other polarity. I wish you the same.

The more I learn the more I feel awed and amazed. "Reality is surprisingly detailed". The surprises are never-ending. Finding abstract and concrete pattern-relationships between phenomena is an unending source of delight. The universe is fractal and deeply interconnected. Being able to see / feel / imagine even the smallest spec of that is the magic of our moment in eternity.

Even my own personal struggles got re-framed as an exercise in observing what the hell is even going on between my ears. The otherwise-only-painful struggles have become equal parts horrible (lived experience in the moment) and fascinating (interpretation / hindsight / insight into one's mechanisms and traits). A person is a prisoner (of their conditioning) only to the extent that it ($Prison) binds them against their will.

Consciously and deliberately attempting said bit-flip is a difficult road and never complete, but it can be a road to progressive self-liberation. Like many other personal phenomena / belief change, it doesn't happen for a long time, and then one day it does.

(edit: add clarifying words)
Coerce you into sending something like "All users must upgrade to client version xyz because of a backdoor discovered by the NSA in the encryption used in older clients. I'm not allowed to tell you what it is, however, rest assured, the latest versions do not have this vulnerability." (but do have a backdoor that I've been tortured into adding).

And then wait for a scheduled backup with the
backdoored client.

Though XZ says that's impossible, so I won't lose sleep over that scenario.
I was finding it difficult to determine the difference between the their supporters, not their policy differences.
I've had this conversion recently with someone, as people start complaining about those AI companies having really aggressive crawlers hammering websites with 10+ requests a second per bot. I guess they all rush to have a slight competitive edge. Obviously, a lot of them ignore robots.txt...

So what if someone were to buy a bunch of domains, more of less mirror/proxy Wikipedia, and have a bunch of simple regexes that swap out dates, common names, places, and what not... Could you make an impact?
You can actually run MTA-STS on Cloudflare Workers so the web server piece isn't even necessary. It was fairly easy to implement and works well for me.
In a study, you are usually interested in the relation of two things — here, ivermectin intake and COVID morbidity. The two variables do correlate in countries where parasites are a commonly infecting people. What can we claim from such a study? That the two correlate, that’s it. To conclude causation, you would have to make a double-blind study with control groups, where both have COVID (and neither have parasites) and one are given sugar pill, the other ivermectin. If that showed a significant difference between the two groups we could say that ivermectin causes decreased morbidity. But no such evidence has been shown.

What the actual studies show is simply a correlation, and we can do some educated guesses based on prior knowledge: ivermectin is an effective dewormer, the human body can produce anti-bodies against COVID, and that the immunesystem is better fighting a single thing, than multiple ones. Putting these together, we get a reasonable hypothesis showing a third variable that explains the measured correlation, through a causative mechanism (parasite hindering healing and parasite getting killed).
The Out-of-Office Reply That Says 'Stay Out of My Inbox'
AI companies are already paying for data. For example, OpenAI has done deals with the Atlantic and Reddit. It seems likely to continue?
Klarna weighs removal of co-founder's key ally from board
I pay for Cursor (with sonnet) and Copilot and I also use Aider with Sonnet. All are excellent productivity boosts.
Surely some three letters organization probably could pull that off, but it add risk to their operation that the operation could be leaked.

This is basically a point I've made in a few of my talks about security and cryptography: The point of cryptography isn't to guarantee that your data is safe; it's to raise the cost of an attack to the point where a potential attacker decides not to attack. In particular, there's usually a human involved somewhere (sending or receiving information, or both) and humans are squishy and fragile; but torturing people attracts far more adverse attention than torturing data.
Everything in Rust requires unsafe code at some point. Encapsulate unsafe code under safe and sound façade, and hide it in a library. Or use an existing library for memory management: arenas, RC, or a Mark&Sweep GC (rust-gc, pgc), etc.
That's almost exactly what happened with the MEV-1 pandemic of 2011.
Another danger here is that other governments (eg Russia China) might respond assymetrically (or even exactly the same) against other CEOs of companies that give agency to narratives they are not happy with. For example by kidnapping them and constructing some bogus charges, using this instance as a precedent.
https://api.isfizzbuzz.xyz/

Cheers!
No it's a NATO war against unaligned companies that don't only cooperate with NATO.
I usually talk a lot about Oberon, or Limbo, however their designs were constrained by hardware costs of the 1990's, and how much more the alternatives asked for in resources.

We are three decades away from those days, with more than enough hardware to run those systems, only available in universities or companies with very deep pockets.

Yet, the Go culture hasn't updated themselves, or very reluctantly, with the usual mistakes that were already to be seen when 1.0 came out.

And since they hit gold with CNCF projects, pretty much unavoidable for some work.
Uhhh… demos would be more convincing with enemies and decreasing health
Mastering Reddit OSINT: The Ultimate Guide Reddit, often referred to as “the front page of the internet,” is a vast, sprawling forum where millions of users discuss everything from niche hobbies to global events. In the world of Open Source Intelligence (OSINT), Reddit stands out as a goldmine of information. With over 52 million daily active users and thousands of niche communities (subreddits), Reddit is a platform where people share opinions,....
You can keep that in the file
Per https://www.reddit.com/r/nuclear/comments/xtv31i/cost_of_the... the number is more like 100B EUR.

Compare that with renewables, the subsidy of which is reported to be up to 6B EUR for 2025. https://www.bloomberg.com/news/articles/2024-07-24/french-su....
It is unclear how this relates to the 30B EUR subsidy program approved by the EU Commission in 2021 https://www.pv-magazine.com/2021/07/29/european-commission-a...
The whole Architectural Uprising movement sort of started in 1984 when the young Prince Charles gave a speech at the Royal Institute of British Architects 150th anniversary gala evening. During his speech, the prince said that a proposed new modernist extension to the National Gallery was ugly. Or to be more precise, he called it a carbuncle in the face of a dear old friend.

The Venturi columns seems to lack entasis https://en.wikipedia.org/wiki/Entasis
We'll always have Paris ^W jwz.org.
Isn't it what Google's mission is?

"Our mission is to organise the world’s information and make it universally accessible and useful"

https://about.google/intl/ALL_uk/
> where he has citizenship

Durov is being persecuted for his role as a CEO of Telegram. Telegram is a legal entity that has nothing to do with France
The Cloud Gaming platforms could record things for training data.
> there are very obvious reasons why it’s better to have the Taliban using WhatsApp and the US getting all that metadata and maybe more, rather than the Taliban finding some other channel

There are some very obvious opportunities when the Taliban (or enemy de jour, like drug cartels) feel the need to be "finding another channel".

https://en.wikipedia.org/wiki/Operation_Trojan_Shield

"Hardened encrypted devices provide an "impenetrable shield against law enforcement surveillance” and are in high demand by TCOs (transnational criminal organizations), thus the shutdown of Phantom Secure in March 2018 left a vacuum for TCOs in need of an alternative system for secure communication.

Around the same time, the San Diego FBI branch had been working with a person who had been developing a "next-generation" encrypted device for use by criminal networks. The person was facing charges and cooperated with the FBI in exchange for a reduced sentence. The person offered to develop ANOM and then use his contacts to distribute it to TCOs through existing networks. Before the devices were put to use, however, the FBI, and the AFP had a backdoor built into the communication platform which allowed law enforcement agencies to decrypt and store the messages as the messages were transmitted."

I'm still seeing drug busts here in Australia that're attributed to An0m (or which look extremely likely to have used An0m as part of the investigation).
To most people in most life situations these series of symbols do not represent chapters or versions, but numbers. If you have to always give this context to an AI then the I is not there yet.
Did you post this because of an especially big thunderstorm somewhere?