Hacker News new | past | comments | ask | show | jobs | submit | secondary_op's comments login

> claiming that Signal is 'in bed with the government'. Bulkshit. We know the people who work at Signal since when we were kids.

* Bulkshit * - put more unique slang such as so everyone immediately recognise Langley doing damage control.


Yes - if you're want to further enrich PayPal Mafia et. al. and other bunch of golden billion elites [1], otherwise - No.

[1] https://en.wikipedia.org/wiki/PayPal_Mafia

[2] https://en.wikipedia.org/wiki/Golden_billion


Why is GUI builder for ImGui is not implemented in ImGui itself ?


What makes you think that it isn't? Looking at the code and screenshot it uses Dear ImGui for its UI.


I'm never using this editor unless it can install itself and work completely offline, without going for downloads and making web requests , it is crucial, especially after totally not related xz fiasco and the white house praise for rust.


I only use editors written in C, as God intended.


Correction: written in C plus some LISP, as God intended.


This might seem funny until you read Ken Thompson's "trusting trust" paper and realize that bootstrapping Rust is a so overwhelming task that someone implemented a Rust compiler in C++ for this purpose: https://github.com/dtolnay/bootstrap

I mean, who knows what kind of malware is transparently being injected in all Rust programs out there.


Nobody wrote a C++ compiler for this purpose; they wrote a Rust compiler (mrustc) in C++.

> I mean, who knows what kind of malware is transparently being injected in all Rust programs out there.

FWIW, using Guix it is very straightforward to build the rust toolchain fully bootstrapped starting from mrustc and gcc.


> Nobody wrote a C++ compiler for this purpose; they wrote a Rust compiler (mrustc) in C++.

Edited the comment


If you want a fast, low-memory-footprint editor with no spurious network connectivity and a conventional desktop UI, check out Geany: https://geany.org/


`unshare --user --net zed ~/file-to-edit.txt` seems to work fine. it just shows an "auto update failed" warning in the bottom, but seems otherwise functional. does that work for you?


> especially after ... the white house praise for rust

What's the threat model here, that Rust is a trojan language from the feds?


I recommend reading this paper, as it gives some understanding of the things that are possible with an infected toolchain: https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...

Some modern compiled languages such as Zig and Go can be officially bootstrapped from a C toolchain. And a C toolchain can be bootstrapped with Guix using only a 357-byte blob. This gives some good confidence that you can bootstrap a malware free toolchain using auditable source artifacts.

Rust however, does not have an official way to be bootstrapped from a C compiler, which means developers must use a previous version of the compiler to build a new version. In this situation, you can never be sure a malware was not injected in a previous version of the compiler (see the Ken Thompson paper for an example). There's no way to know because you are using a unauditable blob to create another blob.

This is why someone created mrustc, a Rust compiler implemented in pure C++, so that Rust can be bootstrapped from a C toolchain (see also: https://users.rust-lang.org/t/understanding-how-the-rust-com...).

The mrustc solution is not good because there are essentially 2 implementations of the same compiler that have to be kept in sync. It would be much better if Rust used a solution like Zig's: https://ziglang.org/news/goodbye-cpp/


This was interesting, cheers!


Snowden memoir not simply called "Permanent Record" if you like to read, it's in chapter: Part Three - Fourth Estate, or in audiobook at 08:30:24

He writes about CIA CTO, Gus Hunt talk at GigaOM's Structure:Data conference in 2013, still available to witness https://youtu.be/GUPd2uMiXXg?t=1258

TLDR: “At the CIA,” he said, “we fundamentally try to collect everything and hang on to it forever.”

> The second event happened one year later, in March 2013—one week after Clapper lied to Congress and Congress gave him a pass. A few periodicals had covered that testimony, though they merely regurgitated Clapper’s denial that the NSA collected bulk data on Americans. But no so-called mainstream publication at all covered a rare public appearance by Ira “Gus” Hunt, the chief technology officer of the CIA. I’d known Gus slightly from my Dell stint with the CIA. He was one of our top customers, and every vendor loved his apparent inability to be discreet: he’d always tell you more than he was supposed to. For sales guys, he was like a bag of money with a mouth. Now he was appearing as a special guest speaker at a civilian tech event in New York called the GigaOM Structure: Data conference. Anyone with $40 could go to it. The major talks, such as Gus’s, were streamed for free live online.

> I got insight, certainly, but of an unexpected kind. I had the opportunity of witnessing the highest-ranking technical officer at the CIA stand onstage in a rumpled suit and brief a crowd of uncleared normies—and, via the Internet, the uncleared world—about the agency’s ambitions and capacities. As his presentation unfolded, and he alternated bad jokes with an even worse command of PowerPoint, I grew more and more incredulous.

> “At the CIA,” he said, “we fundamentally try to collect everything and hang on to it forever.” As if that wasn’t clear enough, he went on: “It is nearly within our grasp to compute on all human generated information.” The underline was Gus’s own. He was reading from his slide deck, ugly words in an ugly font illustrated with the government’s signature four-color clip art.

now, coupled with pentagon shenanigans https://www.reuters.com/investigates/special-report/usa-covi...

> Nevertheless, the Pentagon’s clandestine propaganda efforts are set to continue. In an unclassified strategy document last year, top Pentagon generals wrote that the U.S. military could undermine adversaries such as China and Russia using “disinformation spread across social media, false narratives disguised as news, and similar subversive activities [to] weaken societal trust by undermining the foundations of government.”

Good luck trusting OpenAI's generative seductive female operative with Johansson voice.


There is new interpretation of existing executive orders that prohibit US citizens from providing anyone in Russia with

IT Support and Cloud Services: Any IT support or cloud-based services for covered software (like ERP or CAD) to Russian entities are prohibited.

Consultancy and Design: Services related to IT consultancy, design, or custom software development for Russian companies are not allowed.

https://ofac.treasury.gov/faqs/added/2024-06-12

So Uncle Sam allows only to consume and degrade and disallows to create and prosper. Should Russian citizens comply ? Hell no.


> Should Russian citizens comply ? Hell no

OFAC compliance is not on the citizens but the service providers.


And I though that Skala, FP (monad in X is just a monoid in the category of endofunctors of X) people are pretentious sect, this is so much worse, given their customer base, I immediately presume that this is nothing more than approach to deliberately make things unintelligible for as many people as possible, so that your white collar hedge fund guy would have heart stroke just by glancing at this source code, not even trying to read or understand it, that is one way to treat people and make business, it is despicable. Industry needs to formalise this into well known phenomena much like Security through obscurity [1] so that kind hearted pragmatic people avoid this like a plague.

[1] https://en.wikipedia.org/wiki/Security_through_obscurity


It’s not at all clear where you read pretentiousness. Is it the mere fact of its existence?


Try it or any other APL for 3 months. You will change your mind.


That's it, ddg is gone from my Firefox and hopefully from my browsing habits.

Speaking about Firefox, it is insane how needlessly complicated it is to add new search engine to Firefox [1]

    1. Open a new tab and type about:config in the address bar
    2. In the search box type: browser.urlbar.update2.engineAliasRefresh
    3. Click on the little + symbol on the right. It should look like after you pressed it: boolean true value
    4. Go to firefox Settings → Search. Or enter this in the address bar: about:preferences#search
    5. In the "Search Shortcuts" section you should notice a new "add" button. search add button
    6. Press the add button and fill in the name, search engine url and a keyword(optional).
    7. Go to the "Default Search Engine" section and select the engine you just added.
[1] https://superuser.com/questions/7327/how-to-add-a-custom-sea...


Neat, I kept thinking there should be a way to add keywords to that list and now I know how to do it (execept for some reason you can only add a new engine with a keyword there and not add a keyword to an existing engine :( ). I use mozlz4 and aeson-pretty to look at the search.json.mozlz4 file.

https://github.com/jusw85/mozlz4

https://github.com/informatikr/aeson-pretty

To be fair you can also just right click on the URL bar when on a page that advertises having a search and click Add <name of search>. Or if you want to search by keyword you can right click on most search boxes and click "add a keyword for this search". Mycroft Project has a bunch of random search engines ready to add to Firefox (via right clicking on the URL bar when on the search entry page):

https://mycroftproject.com/

If you use more than one search engine, I like the Right Click Search addon to be able to search highlighted text with multiple engines easily (unfortunately not monitored by Mozilla but you can look over the code before installing and turn off updates since it is quite simple and requires no permissions):

https://addons.mozilla.org/en-US/firefox/addon/right-click- search/

The most privacy friendly way to search is to search the site you want to end up on when you know what site that is and they have a usable search.

For general search engines, I suggest giving Metager a try, it is a non-profit metasearch.

https://metager.org/


> For search engines, I suggest giving Metager a try

Cool, might as well give it a go while Ecosia is down. Thanks.


Presume that duckduckgo is not private or otherwise compromised.

For example many things I search trough duckduckgo later that day showed up in my twitter/x.com algorithmic feed, coincidence ? don't think so.


Or it could be that, when you search something, you also click through to some of the results, where FB/AdWords and other trackers are present.

Alternatively, there was a fallacy of human mind(forgot the name), where if you think of something, your brain will start focusing on the random occurrences of that things in all places. So, those ads were always there, your brain just started focusing suddenly on those as you were thinking of those things.

Note: Not affiliated with DDG.


Yes, in this case only way to not be spied on is to not go on the internet

https://en.wikipedia.org/wiki/Frequency_illusion


It's called the Baader-Meinhof effect.


duckduckgo don't prevent website to track you or deposit cookies etc. Once you're on a website, let's say twitter, duckduckgo does nothing.

> When you view Twitter content such as embedded Tweets, buttons, or timelines integrated into other websites using Twitter for Websites, Twitter may receive information, including the web page you visited, your IP address, browser type, operating system, and cookie information. (https://developer.x.com/en/docs/twitter-for-websites/privacy)

So, if you visit a news paper that have embedded twitter post in it, twitter might know you passed by this website.


There's also the likelyhood that the pages you landed on sent your info to their "ad partners"


bing.com also down, looks like duckduckgo is frontend to bing

at least bing images, https://www.bing.com/images/search?q=katrina


> It's not you, it's us

> Bing isn't available right now, but everything should be back to normal very soon.

> https://www4.bing.com/bingparachute/panda.png

> https://www4.bing.com/bingparachute/bing_logo.png


It seems that https://www.startpage.com also uses Bing for its images.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: