skysight-inc/HackerNews huggingface dataset:
>Neither "society" nor "voters" nor "corporations" make these decisions. It is always an arbitrary person who does.

Except in this case, a corporation (Apple) is making the decision relative to the sexual mores of modern Western society and the child pornography laws of the United States. It's unlikely this decision was made and implemented randomly by a single "arbitrary" individual. Contrary to your claim, it's never an arbitrary person.

And yes, I believe Apple has the right to decide how you use their product, including what bytes can and cannot be sent on it.

>Should one person surrender his agency into the hands of another?

We do that all the time, that's a fundamental aspect of living in a society.

But in this specific case, no one is forcing you to use an Apple phone, so you're not surrendering your agency, you're trading it in exchange for whatever convenience or features lead you to prefer an Apple product over competitors. That's still your choice to make.
OK. Another argument: what if a virus download the pic for you?
It would, but luckily that's not what's happening
Personally I built a simple theme from scratch, but it really depends on what your use case is. A personal blog is different than a product landing page. Short of looking appalling though, I would recommend focusing on the content of the page instead. If the content is good you'll get eyeballs regardless of the looks, not so much so the other way around.
I would find an existing business that is hosting on the public cloud. Often, it is just a bunch of VMs that don't really leverage what the cloud has to offer -- they are just convenient.

Offer to migrate them from the cloud to a private hosting for what they are paying today but place them on hardware that has x2-10 the existing capacity. You provide all the IT work that they are paying Amazon to avoid.

I basically did that for myself. I was paying $10K/mo to Azure. To get the RAM I really needed would have pushed my costs to $20K/mo so I bought $30K (4 machines) in hardware and signed up for coloc @ $1K/mo but it cost me two months in my time to move everything. The time hurt more than the cash.

If you can do that for one company that is spending $100K/mo at Azure/AWS/Google, then your runway gets a lot longer.
first movers also generally die or move on.

Sure, but before that they generally make a lot more money than the second and third mover. When all is said and done, Atari and Yahoo did much better than Colecovision and Lycos.

The risk with being the first mover is that, having easily seen off competition from the second and third mover, you become complacent and stop moving.
Earlier discussions:

Apple's plan to “think different” about encryption opens a backdoor to your life – https://news.ycombinator.com/item?id=28079171 – Aug 2021 (748 comments)

Expanded Protections for Children - https://news.ycombinator.com/item?id=28078115 - Aug 2021 (353 comments)

Apple plans to scan US iPhones for child abuse imagery - https://news.ycombinator.com/item?id=28075021 - Aug 2021 (368 comments)

Apple enabling client-side CSAM scanning on iPhone tomorrow - https://news.ycombinator.com/item?id=28068741 - Aug 2021 (716 comments)
yes.

[0] https://www.theverge.com/2014/8/5/5970141/how-google-scans-y...

[1] https://torrentfreak.com/google-drive-uses-hash-matching-det...
I was aware it was from the same author and brought it up, didn't realize it was linked on the homepage! Thanks.
They are communicated to engineers - in the form of deadlines...
I suppose one important distinction here, if this makes any difference, is that drugs and weapons (to use your examples) are physical items, and these could arguably cause harm to people downstream, including to the postal system itself and to those working in it. In contrast, photos, text, written letters, and the transmissions of such are merely information and arguably not dangerous in this context (unless one is pro-censorship).
In our apartment, we have the following smart features:

* Multiway light switches [0], which allow switching lights on and off from several different locations.

* A boiler, which heats water up automatically should it become too cold.

This covers lighting, heating, and supplies water at arbitrary temperatures between around 15 and 60 degrees celsius on demand, at several locations. The features do not require internet connectivity, are vendor-independent and have zero privacy issues. In the last 30 years since their installation, they have not once failed.

I am at a complete loss why this should not be smart enough. The technical overhead some people introduce into their lives just to avoid pressing a button to turn of the light is mindblowing to me.

[0] https://en.wikipedia.org/wiki/Multiway_switching
There are a lot of common names in OFAC when you get to the alias list. (because, apparently, a common name works well as an alias)

Jesus. Lopez. Mohammed. Mark Taylor. Sally Jones. Park. Wong. Kim.

Chuck Taylor used to be on there, but isn't anymore. (not the shoes)

Since there are a lot of alias matches, you get a lot of people who wind up matching when there's no reasonable way that there's an actual match. (i.e., they're happily living in the US and have an ordinary bank account there, not the dead dictator of Liberia, or someone in Columbia, or North Korea.)
> The amount includes spending by the city, Denver Health and charities, according to the Denver Post.

Comparing the city’s spending on k-12 and veterans vs the city’s, Denver Health’s AND charities’ spending on homelessness is not quite apples to apples. It would be far more helpful if the article broke this down but it’s Fox News so I shouldn’t expect much.

Also, spending money on people who are homeless is necessary if we want to help them. The article seems to indicate that spending money on them is bad. Educating a child in k-12 doesn’t have to be that expensive. Homeschooling is quite a lot cheaper than public education. But rehabilitating someone who has likely experienced a lifetime of trauma is going to cost.
I am genuinely astonished at the number of implementations and major players that are experiencing problems here. I’ve done plenty of HTTP/1 parsing (most significantly in Rust circa 2014) and some HTTP/2 parsing in its earlier draft days, and I can confidently and earnestly state that my code (then and now) would never under any circumstances be vulnerable to the ones I’m calling rookie errors, because I’m always going to validate the user input properly, including doing any subsequent validation necessary in the translation layer due to incompatibilities between the versions, because I know it’ll blow up on me if I don’t do these things. Especially when all of this stuff has already been pointed out in the HTTP/2 RFC’s Security Considerations section, which such sections you’re a fool to ignore when implementing an IETF protocol. The attacks that depend on content-length and transfer-encoding I’m quite not so confident about, though I believe that any of my code that I wrote then or that I would write now will be safe.

It’s quite possible that my attitude to these sorts of things has been warped by using Rust, which both encourages proper validation and makes it easier and more natural than it tends to be in languages like C or C++. I’d be curious to see figures of these sorts of vulnerabilities in varying languages—I strongly suspect that they occur vastly less in Rust code than in C or C++ code, even when they’re not directly anything to do with memory safety.
I love postgres.app, such a great solution. It always bothered me though that https://postgres.app would just 404 whenever I'd go to look up the docs or go to install on a new machine.

Hopefully a few other people have had their lives made a tiny bit easier by the redirect I set up.
The example you described is not analogous to texting a woman in a dating app.

But the point about cultural differences does stand (not that it should result in a government being able to police how two adults communicate.)
Bangladesh won't be around for that much longer. 75% of it is underwater due to flooding and that number will only increase: https://www.concernusa.org/story/bangladesh-underwater-human...
Wow maybe I finally can get a reasonable GPU for my eGPU box to connect to my 16” MBP.
You're not alone. Eco-anxiety is real and a growing problem. If you search that term, you might find something helpful.

I've seen suggestions that people will go through the typical five stages of grief, ending with acceptance.
I'm seriously considering getting rid of most of my smart home devices not because they suck but because the software to control it sucks. The Samsung Smart Things app used to be so responsive, I could turn devices on and off without much delay. Now when I open up the app I have to restart it wait for it to connect, then wait for it to find every device, then 20 seconds later I can push a button that does something. That's unacceptable.
So... the obvious Serious Issues here are privacy and child pronography. This blog though, is about an issue I don't know how to define concisely.

It's about getting labeled, for whatever reason as "high risk." I flagged some paypal thing years ago, when I moved countries. It was too much trouble to sort out, so I abandoned my $20 and moved on. Paypal has me in a no recourse bucket. Most transactions run through such risk assessments. False positives are tolerated. Child pronography scanning, as this post lays out, will have similar issues. We're already used to credit scores and insurance behaving like this.

I'm not diminishing the privacy aspects, but this neokafka world of automated, risk accessing bureaucracy is also a world we're constantly walking towards. It's also bad.
Imagine I am scraping Twitter - maybe I never accepted their TOS and don't even have an account.
That's how state taxes are dealt with in the US and a number of people go to great pains to make sure they stay exactly the number of days in some high-tax state that lets them skirt liability. I'd be surprised if similar things didn't happen in Europe but I don't pretend to be as familiar with what goes on there.
I came across a video[1] where Paul Stamets and Steve Sheppard were experimenting on ways to save bees using mushrooms. Wonder how much effort it would take to implement it worldwide or if its even practical to implement on a world scale.

[1]https://m.youtube.com/watch?v=Y_lqIUlON1s (5.38mins)
While amusing... the value of most of those sites is not the site themselves. But the people network that is there. Why is everyone using it? Because everyone is using it. Then suddenly the 'crowd' will move to the next one. There will be a few holdouts that stick but it will be a zombie site that lumbers on. For example myspace, digg, and fark are still around.
That evil EU goes after poor shady business' practices again. \s

I also love this, you can actually quickly make a better decision on what is worth.

It would be interesting to see if UK decides to drop this law as result of brexit.
Why would you doubt the seriousness?
I’m remember the Netflix documentary Wild Wild Country in which what effectively was a cult purchased a large plot of land that had been killed by something along the lines of overuse/neglect/etc. and all sorts of people scientists/lawyers/engineers came together and basically resorted it, made it arable and wild life returned. Shame it probably couldn’t happen without the cult aspect.
Apple’s documentation discusses how they use a neural network to generate the bits which get turned into the hash.
As climate change disrupts supply chains, life is poised to change drastically
That's really nice of you, thanks!
I was referring to enterprise internal or b2b software
the entire architecture is awful. The smart home has all these smart devices calling out to cloud APIs for even the most basic functionalities that could be performed locally.

The "Cloud" is used to turn on a light in the house. I'm not sure if they want to collect information but smart devices that operate locally have far less failure cases.
There’s a lot of nuance here.
Nice! I'd really like to see what owning, maintaining, scaling, customizing etc would be like in no-code context.
"No code" here means they are "no-programming-language" not "no-coding". We've used several no code solutions years ago and business could not expand them so in the end developers sat with a complex application that would be maintainable in text code but not with a UI because a UI it's hard to understand what is going on.
Metaverse Tracker
Depends what you mean by smart? A lot of smart people enjoy technical & mathematical problems as opposed to business, hustling and risk taking. So they are probably on the career track at large tech and finance companies.

It allows you be well paid while specialising on what you enjoy. No drama.
Scanning on device (albeit only of photos shared off device) seems like an ill-considered PR move for a whole child safety push (perhaps with a "look at how powerful our iPhone chips are" angle). As you mentioned, they've already been doing these checks for some time on their servers, and people concerned about false positives should realize that Microsoft, Google, Facebook, Amazon et al are doing identical checks with a very similar process.

I imagine there are some frantic meetings at Apple today. However the grossly misleading claims people have been making to fear-monger aren't helpful.
Your reverse proxy can handle the TLS termination. Nginx or Traifik or whatever.

Besides, if you're doing microservices, whatever is managing them should be able to restart them gracefully. No need for reload as such.
Yea, I meant parity for vanilla ML models. For anything off that beaten path it's much much faster
No, perceptual hashes don't work that way. It's a comparison of similarity to a target, not just making an MD5 hash of an image.

Here's Apple's documentation on it : https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
Investors Should Consider Changes in Commercial Real Estate: Morgan Stanley
Based on an article I found from 2015 on MD5, it takes about $0.65 in compute and 10-12 hours to make small mods to an image to achieve an arbitrary hash. I dont know this hash used here, but would it be reasonable to create a 'make small changes to this image until it has this hash value'?

If so, there will be false positives but they will be intentional. Black hat can send a collection of 100 modified but innocent meme images with nefarious hashes.
Unfortunately communism is horrible for individual privacy, liberty, and often life everywhere it's been tried, because humans suck.
> I think you and this app are solving quite different problems.

No, they're not. You both just want a Postgres instance you can access locally. The major difference is that Postgres.app does not seem to do a good job of separating different databases.

> All my interaction with the database is via ad hoc SQL commands and locally run scripts and desktop applications.

You can do this with DBs built by Docker as well, with the added benefit that you can erase and rebuild them whenever you want, and they're separated by project.
Thank you. You’re the first person who actually tried to help.
I've found the Strategic Intelligence Network (there's a copy at https://the-eye.eu/public/Strategic%20Intelligence%20Network...) very helpful as it contains lots of survival resources. It's also just really interesting to read- some of it would raise eyebrows (there's a subdirectory just for weapons and explosives) but I've found a lot of it is genuinely educational, like military literature on how to defuse or recognize explosives, etc. Plus the survival subdirectory is perfect for this situation. Anyone else have similar survival resources?

Edit: In the parent directory (the-eye.eu/public) the "murdercube" directory is amazing as well. Similar type of survival resources, but even wider scope- you truly have to just scroll through to see how much stuff it has. It's got so much military, survival, health, literature, fiction, education, etc. it's actually incredible what resources people put on the web for free.
I have a semi-smart home in that I’ve got a few smart plugs connected with Alexa and it’s useful to turn on/off a bunch of lights at once - or have them come on in the evening while away. Other than that I’m not really sure what more I’d want. Maybe some kind of instant-disco lighting so I can rock out to Dire Straits?
I had a look at OnePlus and checked wikipedia to know which country it comes from, and... wow :

* benchmark results faked by software

* personal data collection

* backdoor

All of these do not appear on the English page so there's a link to the French one : https://fr.wikipedia.org/wiki/OnePlus#Controverses
Right. The interesting part is that there doesn't seem to be good guidance from OFAC on exactly how tight/loose the matching needs to be, and on what parts/fields of the transaction need to be scanned or not. So, everyone implements it differently.
Have you been able to determine how much space one would need to feed one’s self using basement space and assuming abundant solar power? I don’t like outdoor garden setup because people will steal it, animals already do.
>all of the technologies inside the iPhone were made possible by public spending on R&D

That's a classic case of not seeing the wood for the trees. You're looking at all the individual components and failing to see the significance of the composition. That's exactly the mistake Apple's competitors made at the time (except the Android team).

All the iPhone's competitors contained all the same technologies you're talking about. There were even phones out there before them with capacitive touch screens. None of them changed things the way the iPhone did.

>those people have succeeded in telling lies and stories that discredit the real innovators

There are hours and hours of footage on Youtube of Steve Jobs talking as long as his voice held out about where individual ideas came from, who developed specific technologies and who in his team thought up this or that. Also many interviews with former Apple engineers and execs talking about his personal contributions.

I truly, genuinely have no clue where you got this idea from. It's like you've invented a cartoon fantasy caricature of the world in you head populated by pulp novel villains. The reality is a lot more complicated and a lot more human.
Rust: First Thoughts
> him and his family will not be vaccinated anytime within this decade.

because of the nanoparticle adjuvant that enacpsulates the subunit? yeah that's been on the top of my mind too, but covaxin is a traditional inactivated virus and it confers 70+% efficacy. my question is, if a vaccine that is the same genetic material (maybe a little less, but not heavily modified like mrna or run through the moth/tree approach like novavax) then why are we ignoring those who were actually infected?

food for thought: long covid is H O R R I B L E, and that should be everyones reason to take a vaccine.. but if you don't want to, just be prepared to sit on the sidelines for a year or maybe more. once the pandemic, as defined by the government, ends then you are on your own. there is already less patience for those who need to take extended time from work for a covid positive result
Seems like you’re exercising a lot of social control over the couple. Why shouldn’t they be allowed to privately communicate their feelings. Simply chalking up social control to “cultural differences” ignores the fact that these aren’t cultural mores developed independently, but the results of a highly moralizing tyrannical government trying to assert social control for the material benefit of those at the top.
"Prepping" became a "lifestyle", which means that it has become dominated by companies looking to peddle things to people whose judgment has been clouded by fear. There are ways to prepare for a climate-induced collapse of civilization, but stockpiling guns and MREs in a bomb-proof bunker will only suffice as a survival aid as long as there are people out who are actually prepared with agricultural know-how and tools (with the idea being, presumably, that you use your guns to threaten them to give you food (foolishly assuming that the farmers don't also have guns)).
A lot of off-the-shelf consumer smart home products do suffer from the drawbacks you've listed, but they do not generally apply to the smart home concept. My home is automated using components that use the KNX standard, and although the initial investment is higher than a conventional electrical installation, I'd argue maintenance is actually simpler and cheaper – as pretty much all of it is in the software.

Additionally, there's quite a few benefits:
- It's all wired, so it's been rock solid;
- It's vendor agnostic;
- It's entirely local, so there's no subscriptions or even an internet connection dependency;
- There's a ton of gateways available that allow me to interface with non-KNX products;

Overall, I'm pretty happy with it. It is just a matter of convenience however, it's hardly a must-have.
Writers’ block? Tools that simplify the report-writing process allow security
It would not, but given how widespread this issue is it seems likely nginx is vulnerable, and sensible to assume it is unless otherwise demonstrated.

It’s not like the feature is super useful in general.
99.9999% of all living species have been wiped out by mother nature herself.

You should find solitude in the fact that we might be the only species who actually have a chance of not becoming part of that statistic which we do by making the planet much more hospitable for us than life used to be. We do this by creating new knowledge which we then use to turn useless materials into valuable resources which allow us to solve problems that have always been challenging us.

So go on live your life, eat, travel, create, consume. Don't worry about the catastrophist rhetoric, don't worry about going vegan (unless you want to), don't worry about your CO2 footprint or any other things other people want you to care about for their own political ideologies.

Be optimistic and worry about living a good life, with good people, doing good and meaningful things and if you have the skills maybe get into something valuable like coming up with how to create more powerful energy forms such as fusion.
Relevant past thread: "The 10 Reasons I Ripped Out a £6k Lighting System"

https://news.ycombinator.com/item?id=25099615

tldr: unreliable hardware + bugs ... results in endless hassles

On the other hand, you have the ultra-high-end of smarthome tech with systems like Crestron. It seems ok but it's very expensive (million dollar mansions/estates budgets) and the custom programming is proprietary so the homeowners can't modify it themselves.
I’ve got no problem with taxing carbon-emitting fuel much higher than today.

If you tax three mile trips extremely enough, you turn a 4 mile roundtrip into around 15 miles of driving in a lot of cases. Need to go A to B to A which are 2 miles apart? Drive A to C (3.5 miles) to B (4 miles) to C (4 miles) to A (3.5 miles). Does that policy make sense in light of the obvious workaround?

Tax the fuel and you align the incentives much more closely and much more difficult to workaround in ways that work against your intention.
I believe we are not on the same page for wnat we consider a complicated system to be. Do yo assume that $developer it the owner of all code in this mental exercise?
> Building in danger zones where the home will need to be replaced in 10-20 years is an awful investment on a 30 year mortgage.

With a cheap enough house, it's just the thing. Spend all of your money on land.

Maybe the future is in RVs. If they let me get away with it, I can see scraping a parking pad in Big Sur and sticking a motorhome on it. Relatively earthquake-proof. Fire? Simply drive away. Vacations to the desert can be slept in your own bed. Want to live the classic life? Buy a GMC Motorhome.

Maybe those behemoths make sense. Live the Jim Rockford lifestyle.