skysight-inc/HackerNews huggingface dataset:
Should probably say "most engineers I've worked with," but I think that's mostly a testament to the git workflows where I've worked (lots of small commits and short-lived branches).

Plus, once you pair with one person with snazzy aliases, it might make you want to make your own
Well, unsecure in the sense that a reporter was mistakenly added to a group chat they certainly should not have been in. A secure app in this context would prevent random people from being added to secure areas.
In my view the author is putting the cart before the horse here. His primary argument seems to be that people already think in bullet points, so the fluff around them is unnecessary and can be excised without destroying the original message. But that fluff is there for many reasons. It adds context, it allows us to commingle our meaningful and valid emotions alongside our facts, and ultimately, it lets us tell a human story.

The way in which we create and consume information has a direct effect on our experience of the world, and I think there is a deeper point to be made here about how the way we use communication technology. The endless firehose of information is drowning our brains to the point that we are compelled to find a way to cope. But I would argue that the way to do that is to rate limit receipt of messages so that only the quality stuff gets through, rather than letting everything through and destroy every human aspect of them in the process. It’s Twitter’s 140 character limit argument from last decade all over again; the medium becomes the message, so we must be careful what mediums we use.
Actually, I think it's the other way around. Trashing the GoF is a sign of a blind trend follower. Someone who lauds them are bucking the trend and might have interesting things to say about it.
The legal process in the US is driven by the parties, and the party with more money can abuse this fact. Party-driven discovery is a major scene of abuse in this regard.
Tulsi Gabbard is a liar and needs to be removed from all positions and tried for perjury. How you can see that and then say, under oath, "nah, no weapon systems were discussed"?
What people think is quality and what is are not always the same.

Modern building codes make the cheapest houses much better than the best houses from 100 years ago. Nobody knows how to see insulation so they don't count it. Old houses often overbuild some obvious beam and so that part of the house is very strong, but some other beam wasn't strong. Yes old houses had access to old growth trees that were stronger, but that doesn't make up for good engineering.
Get out of the house? How about "get the countermeasures out"?
Arithmetic is sufficient math for at least half of workers for the foreseeable future. Realistically if you can read/write, do arithmetic, show up on time, follow orders, and put in effort you can succeed in most trades.
Man in the middle attacks require access to the mobile or networking infrastructure (so not necessary, but much more likely and easy)
How could anyone know, unless they have contributed to Signal's repo ?

Presumably within Signal, there are plenty of weak points. And certainly Signal's ability to modify their app as they please doesn't fit within the OPSEC guidelines.

The question is: why would one of the most powerful militaries on the planet use a consumer app, regardless of its reputation ?

And the answer is: because the Trump administration is compromised.
Yeah especially in the context of multiple contributors, 15k is so small it's almost hard to do collaborative coding (apart from pair programming).
no, simplex chat is https://simplex.chat/
There are certain pieces of text that appear right before some of the greatest pieces of code ever written. For example, we've all heard of NASA code requirements. If you get the LLM into the "mindset" of a top-tier professional developer before getting it to spit out code, the code quality will reflect that. If your prompt is sloppy and poorly defined, you'll get copy-pasted StackOverflow code, since that's how most SO questions look. If it's stupid but it works, it's not stupid.

The hard part is that finding a local optimum for prompting style for one LLM may or may not transfer to another depending on personality post-training.

And whatever style works best with all LLMs must be approaching some kind of optimum for using English to design and specify computer programs. We cannot have better programs without better program specifications.
"The Mueller Report Vol I firmly establishes that the Russians sought to interfere in the 2016 election, they explicitly preferred Trump over Clinton and aimed to help him by 1) hacking her campaign and 2) spreading misinformation on social media. It further found that despite the Trump administration claiming they the campaign had 0 contacts with Russian nationals, in fact they had over 100 contacts." -- Russia preferring Trump is nothing to do with Trump, and in fact backfired on them.

The fact that Trump made jokes about emails that showed the DNC cheating the primaries to disfavor Sanders and give first sight of questions to Hillary doesn't prove he's a Russian agent.

"Because the facts found by investigators show collusion happened. Russia wanted Trump to win, and Trump wanted to win; the two coordinated publicly and in private; the campaign lied about it every step of the way; and they obstructed any investigation as much as they could, which included firing the FBI director, and lying about the contents of the Mueller report when it was finally released."

There is no evidence Trump campaign colluded with Russia. If there was, he would have been indicted.
I was tempted to go into the fact that the video streams wouldn't pass through BEAM, because that would be crazy, but I cut it out.

AIUI, technically, the old phone switches worked the same way. BEAM handled all the metadata and directed the hardware that handled the phone call data itself, rather than the phone call data directly passing through BEAM. In 2025 it would be perfectly reasonable to handle the amount of data those switches dealt with in 2000 through BEAM, but even in 2025, and even with voice data, if you want to maximize your performance for modern times you'd still want actual voice data to be handled similarly to how you handle your video streams, for latency reliability reasons. By great effort and the work of tons of smart people, the latency sensitivity of speech data is somewhat less than it used to be, but one still does not want to "spend" your latency budget carelessly, and BEAM itself is only best-effort soft realtime.
I remember how big of a deal it was when Obama wanted to keep his Blackberry. I have a colleague that used to work for RIM, and he's alluded to work he did for that effort that he's still unable to discuss.
The two assumptions that aren't quite right are the number of characters per line and the number of hours per day. For most work it's hard to spend more than four to six good hours per day just doing actual work; but when kicking tires on a hobby project, it is easily possible to stay engaged for an unhealthy amount of hours in a row.
"This concrete, unambiguous example contradicts my worldview so I am going to report it."
Yes, they are. The largest of those three figures involves the purchase of a hard asset that provides utility to the purchaser over time. If you buy a $30,000 van, you’re not out $30,000, because you’ve received the van in exchange.

I note that you didn’t provide equivalent figures for the EU, however, so I imagine you’re less interested in making an actual argument than you are in looking clever.
Even in SF and NYC, you will find friends by wearing a MAGA hat.
Makes total sense and we have this as WIP
We are just a bit over 200 years old, give them a bit more time, the lawyers are tirelessly working to make the court system faster, cheaper, and have better outcomes they just need a bit more time.

Any day now...any day...
Interesting post. Curious though why you did not stream directly from Tauri (as you say you used to build the app) and you are sharing the screen from Rust. Was it because you had higher latency?
Thanks that’s what I was looking for!
"Secure", particularly when used in the casual general public sense, is a pretty overloaded term. All real security is in the context of a specific threat profiles, and makes tradeoffs vs other required functionality. Signal is definitely "secure" in the sense of its core cryptography and design, and it's aimed to be of practical value to the global general public. But that requires being able to scale massively, making authentication more convenient and leaving more up to the users, who won't tend to have their own sophisticated centralized auth system, IT support, and constant life/safety critical stuff being thrown around. Signal provides tools that can be used for better assurance in who you're talking to but it doesn't simply take that out of users' hands entirely because for its use case that simply isn't feasible.

For small vetted group top secret conversations by a sophisticated organization, it makes more sense to have something where inviting anyone who hasn't already been brought into the magic circle with physical interaction is simply impossible. If technically unsophisticated users are important, ideally one would have fully vetted tech support who will be monitoring all participants and doing the verification work for them. All managed via central systems and heavily walled off with multiple layers from crossing between high and low sides. If they want to talk to the general public, they should use physically different devices. Worse scaling, far more friction, but that's OK for top levels of a big organization in the context of extremely sensitive information.

Signal is a tool and a decent one, but no tool is good for absolutely everything and trying to use a hammer as a saw isn't a defect in the hammer it's a problem with the user/organization trying to do something so foolish.
No, my RandomThingie is even *-er
Benchmarks are WIP. We're thinking about durability, task latency, agent throughput. What else would you like to see?
No, they're wrong. Signal is considered extremely secure, which is why journalists and government uses it. Some people like to criticize anything Trump does, right or wrong.

That being said, the Signal non-profit entity is located in the US, so probably subject to the same risks as WhatsApp and Messenger; namely US courts compelling them to share data.
We publicly know about tools like Pegasus and competitors Predator, Hermit and I would confidently assume hundreds of other tools that dont publicly advertise themselves. (they all might be using the same handful of 0days for all we know)

There are multiple public price lists for 0days, Crowdfense currently has iOS full Zero Click Full Chain listed as $5m-$7m

And thats a long way to say - thats correct, its insecure. For the price of $7m any adverse of the US (or friendly country, who cares) can read all these government messages (who knows how many more Signal groups exist without the Atlantic editor)

That would be the cheapest way to get US confidential information in the history of spy agencies. The NSA budget is $10B per year

The assumption of anyone should be - everything in my iPhone and Android phone can be read for $7m. The conversations im having in front of my iPhone can be recorded for $7m. Then the only question left is - is the information worth more than that

If the answer is yes, assume your phone is compromised and only talk near it / message using it, information you understand will become public
Might as well, but most end devices you’d want to connect would be copper. Most devices I physically connect are poe anyway. Sure my nas and desktop are fibre/10g, but my aps are all Poe copper, my laptop is copper unless I break out my dongle (although it’s rare ok not on wifi), my backup pihole is copper (I like having a second dns server in case the main vm on the nas fails)
> One day we'll just send bullet points as emails. We'll reach business speak protocol version 2.0. That which was verbose becomes terse. No more time wasted translating thoughts and injecting platitudes.

I'm not sure about you all, but as a non-manager at [big tech company] I can count on one hand the number of actual emails I've sent in the past year.

Everything is IM chats. Its actually pretty nice
Notably, it’s a common feature in a corporate environment, even though the stakes are typically much lower.
Region as in "relatively close to Europe". Immigrants are coming all the way from Middle East where US performs the operations, not our neighboring countries.

Russian thing is all EU fault. Glut for cheap oil made putin think he has a big bargaining chip against EU and that this will all be a simple task.

I don't know what propaganda media you get your information from, but people of Europe are not gloating or thinking you are stupid.
I work for a company that has US offices (as many Europeans do) and we work very well together. We travel a lot between countries and work face to face and there have never been any problems.
The issue isn't the cryptographic strength—the issue is that it doesn't provide capabilities for an organization to manage it (such as preventing unknown parties from being added to group chats).
How does performance compare to running native code?
Does the web really work that way though?

Maybe it does for your historical reference example, like a CV. If we presumed that those pages with that content would get any traction at all.

Generally the way it's working is people continually pump out content, big tech algos surface it to other people and within a few days those pages don't receive any visitors at all.

If you have a great channel where people see that link, great. But most information discovery is via the big tech algos.
The question to ask yourself is what value one gets from that refactor. Is the software faster? Has more functionality? Cheaper to operate? Reduce time to market. These would be benefits to the user, and I'd venture to say the refactor does not impact the user.

The refactor will impact the developer. Maybe the code is now more maintainable, or easier to integrate, or easier to test. But this is where I expect LLMs will make a lot of progress - - they will not need clean, well structured code. So the refactor, in the long run, is not useful to a developer with an LLM sidekick.
The sentence applies the "unsecure" adjective directly to Signal as a "messaging platform", not to the phone itself or the wider context. Signal by itself is secure. No need to mince words here, the Washington Post is simply wrong.
> whereas Svelte and Vue did not.

The svelte guy was hired by Vercel a few years ago and is completely on board. Same strategy used to co-opt React.
It's https://datasette.io - I'm still having so much fun with it, especially since any idea I want to experiment with can be justified as a Datasette plugin!
you seem to be projecting your own experience rather than giving an accurate representation of developer productivity - 15k is not the norm at all or even close to it.
I tried pitching "generalized overloads" to Bjarne on a few occasions: `operator .` is highly problematic (you can read about it); but a number of the other `operator`s seem to be ok: `;`, `?:`, `if`, `for`, `while`, `switch-case`. Where things get challenging are: `goto-label` (just... mechanically). And, finally, do we want to overload aggregate & enumeration declaration? `typedef` declaration (this gets into name unification which is really awkward in templated contexts); function definitions, etc.). My argument was "leave that for C++14". For 90% of the code I was looking at the statement-level `operator`s solved the problems I had: it promoted the body of the functions into plain-old-template metaprogramming. Templated return types (a la Veldhuizen) converted function definitions into first class types that let me operate on functions, just like we've always done.
Nail plates.

Screws should _never_ be able to hit the wiring. If that's possible, someone failed to install nail plates or Smarshield sleeves.

As for the sharp corners, IMHO you should always install a raceway of some sort (everyone just uses smurf tube), then pull the fiber in afterward. It takes real effort to fuck up the bend radius of conduit.
There's a major bias by outlets like the NYT to paint red states in a bad light. In reality, the worst state in the country for lacking public defenders is Oregon.
Dunno about m-gig, but I don’t like 10g copper as the power use is so extreme. I go for 1g copper or 10g fibre.
> bullet points for everything will change human communication to that format

I'd be okay with that! Verbosity has become too pervasive as of late.
> Ultimately your cloud functions reach out to your database, that is centrally located...

A big difference is that your code running in the datacenter should always be well connected to the network. The user running your code out in the middle of nowhere teetering on the edge of available mobile coverage... Not so much. SSR means the user can begin after one round trip instead of, at bare minimum, two (and more realistically at least three – HTML, JavaScript, and data), which becomes significant as latency rises.

Although I would agree that the cases where you actually need that are not as common as we like to think, and even where justified a lot of developers are bound to screw it up such that the app isn't usable without multiple round-trips anyway. It is certainly something you should think long and hard about. It is not tradeoff-free.
Ferrous Systems Donates Ferrocene Language Specification to Rust Project
Right but the course of action should be to add on to them, not invent entirely new stacks.
256 bit encryption can't secure kneecaps.
All languages have patterns. They differ some between languages as language features dictate what problems need conceptualized solutions that are different from what the language provides. There are also lots and lots of domain specific patterns that are not very documented but which people that work within a domain tend to recognize.
> Does it seem reasonable to take the word

I don't know why you'd put your provider on blast like that unless you knew they'd resist any pressure or just not care about shady activities. It would just cause more issues for you (the criminal) if they cut service.
Soatok wrote a good blog post about this that was discussed yesterday:
https://news.ycombinator.com/item?id=43471223 The Practical Limitations of End-to-End Encryption (41 points, 42 comments)

The gist is that there are potential threats that any end-to-end encryption cannot fully protect against. Signal is a good provider of that encryption, but there are other considerations to protect highly confidential data, and Signal often lures non-technical users into disregarding those.
And were any of those for public urination alone, without any obscene intent at all? Just a guy peeing in the bushes because he can't find a bathroom?
Can you share some examples of these certain pieces of text and greatest pieces of code?
Delete the Workforce
Can you point to any actual real-world cases where something like this has happened? It sounds like a movie concept; we're letting real-world policy be determined by a fantasy people have about a lone gun enthusiast killing a bunch of drug cartel members?
Reminds me of a project I did where I looked into cocktail data from some of the more "involved" cocktail books like Death & Co, etc. Was quite tough to clean when I tried this about ~6 years ago.

How were the recipes tagged after being crawled?
What if one has been trashing it all along?
> Messages are expected to be written across several coherent English sentences, neatly organized into paragraphs, finally with some sort of signature. In the programming world we refer to this as boilerplate.

"This HTTP call has no message body and therefore no content, and can thus be ignored" he said confidently, not noticing the status code. The verbiage is where you find out useful information, like whether the speaker is on your side and whether they understand the problem the same way as you and whether they're dumb. It's not as if the reason we didn't adopt bullet-points-only ten years ago is that it required better AI.

More generally, I submit that when faced with a long email thread, skim reading is superior to LLM summaries in all cases (except maybe the one where the reader is too inexperienced to do it well). It's faster, captures more detail, and (probably most important) avoids the problem of the people on the thread coming away with subtly different understandings of the conversation.
Show HN: Left Field – a dating app where your pools is who you cross paths with
Tired of swiping? Me and my best friend Kate (recent Brown grads living in NYC) built Left Field to help people meet more effortlessly. We do the looking for you: when you cross paths with someone especially compatible, we’ll send you a push notification nudging you to check out their profile. You also get a daily stack of people from your current neighborhood. Curious what HN thinks about building dating apps around proximity and context vs. infinite swiping.
99% of people don’t need the bandwidth. Of devices that can really benefit (mainly games consoles assuming your upstream connectivity is enough to cope), how many even have a copper port nowadays?
But the difference is that Signal has been architected from the start to retain much less (meta)data on the server, so that even if the Signal Foundation is compelled to share the data they have, that data will be extremely limited to the point of being mostly useless.
> What do you know of this evidence and how do you know about it?

It's called "discovery" for a reason. You ask for everything you think might be relevant.
A secure app in this context also couldn’t be loaded on any random smartphone and allow you to login with single-factor authentication.
HN discussions have a time limit after which nobody can reply anymore.

Also, in the YouTube comments, of three people trying to point to the timestamp of the girl saying 我和我妈妈一起来玩儿的 https://www.youtube.com/watch?v=MlKxBTLrvCY&t=4110s one actually manages to do so, fully restoring my faith in humanity.
It's the same if you go west -- Hudson County, NJ, is mostly neighborhoods that were designed as streetcar suburbs if you measure by land area.
> so do humans very often.

While I do see this argument made quite frequently, doesn't any professional effort center in procedures employed particularly to avoid mistakes? Isn't this really the point of professional work (including professional liabilities)?
These are fantastic, I've been contemplating getting into woodworking and I love these as examples of project writeups.
Right, and once you write it down on paper it becomes obvious. Unfortunately it wasn't anything I remember being taught in school.
That was the idea—we started by normalizing all the standard parameters found in most cameras. The challenge came when we had to incorporate brand-specific parameters, many of which are only used by a single manufacturer. Operators also weren’t keen on having values changed from what the camera itself provided, as some settings serve as familiar reference points. For example, they know the right detail enhancement values to use for football or studio work. So, we kept normalization for the key functions where it made sense, but for other parameters, we now try to stay as close as possible to the camera’s native values.

As for the topics on MQTT, they function as a kind of universal API—at least internally. Some partners and customers are already using them to automate certain functions. However, we haven’t officially released anything yet, as we wouldn’t be able to guarantee stability or prevent changes at this stage.