skysight-inc/HackerNews huggingface dataset:
One system optionally checks iMessages (to be sent or received) against one or more "nudity" neural networks if the user is identified as a child in the iCloud family sharing group. If it triggered, the child is given information/opt out, optionally choosing to go ahead with sending or viewing, with the caveat that their parent(s) will be notified (optionally, I presume). Nothing about this event is sent off device. Apple employees aren't receiving or evaluating the photos. No one other than the identified parent(s) is party to this happening.

Neural networks are from perfect, and invariably parents and child are going to have a laugh when it triggers on a picture of random things.

The other, completely separate system checks files stored in iCloud photos against a hash list of known, identified child abuse photos. This is already in place on all major cloud photo sites.

Apple clearly wanted to roll out the first one but likely felt they needed more oomph in the child safety push so they made a big deal about expanding the second system to include on-device image hash functionality. I would not be surprised at all if they back down from the latter (though 100% of that functionality will still happen on the servers).
KMail used to be wonderful, but Akonadi has been a train wreck since day one. I had to switch to Thunderbird for work eventually because it just wasn't acceptable to not respond to urgent things because "sorry, my mail client decided to silently stop checking for mail again!".
Interesting, thanks.

1. How do you get around needing session level data instead of aggregate data when working with non parametric KPIs? GA in particular is notorious for sampling data.

2. True, but you can't get away from the fact that a split test only run for a day or two isn't going to give you trustworthy results. It's things like this that abstract away the statistical reality for lay users that cause poor decisions to be made under the guise of being "data driven". I think as testers, and you as a provider of a testing system, have a duty not to lead businesses to believe that they are making statistically sound choices when they may not be.
You know, I just imagined someone being held in custody by the police. Such a person would be described as 'cooperating' if they were not actively resisting. So, perhaps the understanding of cooperation must also include subjugation. English can be odd.
My first thought when reading this was hoping that these types of articles will reduce the comments I see on the internet that try and compare Delhi/Mumbai squalor to LA.

Then I read the first comment on this HN thread, which is directly comparing this to Toronto.

So either Westerners don't realize that people in these places are making less money in a month than the middle class person can expect to spend in an average afternoon, or there is some intermediate step of "let me compare this to what I know" that is happening. It's not really enough...you should experience it for yourself (there's also other issues, such as people claiming there's more homeless in LA than in Delhi, not realizing that a lot of effectively homeless people in India aren't classified as such - it'd be like saying you're not homeless in LA if you have a tent or a sleeping bag).

Reminds me of learning a new language, where beginners try to formulate thoughts in their native tongue and produce a direct translation, whereas those who are fluent can skip that step completely.
Hmm, never thought of that. But just curious, anyone dislike Harry Potter from the book Harry Potter?
> only v4 UUIDs with a cryptographically secure PRNG can be used this way

Only they should be used that way. Unfortunately other options (other UUID types, v4 with bad RNG) are sometimes used that way. At least other UUID variants are more faf to hack around than a simple increasing integer, particularly if decent request and access validation is in place, though if the wrong type of key is being used perhaps hoping for good validation elsewhere is a bit much.
But all of them are great, people in this "thread" are aiming at P series and XPS laptops, but from a performance perspective these aren't that great.
There are electronic three-way switches that have either a single button or an up/down rocker that always reacts the same way (up for on, down for off).

These are available in "smart"/connected form or regular electronics-only form. Example here:

https://www.amazon.com/Lutron-Incandescent-Single-Pole-Multi...

I agree with you and much prefer them to the traditional switches.
Facebook is much more about friends and family - there's status stuff on there too, but you can find Facebook useful without any interest in playing status games.

I don't think there are many people on Clubhouse who are using it to talk to have group audio conversations with their friends and family - that's what WhatsApp and suchlike are for.

Twitter is a bit more about status, but it also has a much stronger focus on niche interests. There are plenty of people I follow on Twitter who have low follower counts but consistently post interesting things about niche topics that I'm interested in.
I read the average American has four. Seems like more than one person could reasonably watch but maybe I'm just not devoted enough to television.
I wonder if their logo will land them in a dispute with Houseparty for confusion.

Maybe they should exit to Epic Games and rebrand to ClubHouseParty.

EDIT: So these logos are not similar no? Clubhouse [0] vs Houseparty? [1]

I guarantee (and I think Houseparty is watching them) that if Clubhouse decides to do video, Houseparty will file a lawsuit against them.

[0] https://twitter.com/clubhouse

[1] https://twitter.com/houseparty
Thanks. To be honest then, that last bit, "this RFC recommends using the entirely random UUID4 for anything that's meant to be used in a security-related context, presumably with a CSPRNG." makes me think this RFC could cause some problems.

v6 UUIDs only have 48 bits of randomness, which means that some newbies will think that's "good enough" for security, when in reality it's not.

I still like these new UUID types because I would use them as DB primary keys now (benefit of being time sorted but also globally unique and offers some protection against IDOR bugs), but important to know where not to use them.
they can't be argued with if they don't engage in civil discourse. the only option is to replace them with someone who will or remove their ability to affect the world in any meaningful way.
It takes significant historical events to shed the consequences of past significant historical events. The past is exactly that but that doesn't mean we can escape it. People with half a brain know and understand this but (if I'm understanding you right) there's also a lot of using it as a club in these types of discussions. We'll never get away from that without some significant shift in the collective frames of reference. My comment was more a challenge on the wording used in

> the mission of making Black people seem cheerful and unthreatening to America

_seem cheerful and unthreatening_ is in particular what I take umbrage with. That implies that America finds black folks threatening which is why there better be some deep clarification in that statement. But on it's face who really thinks this way? Only ignorant people and true racists have this perception. As far as I can tell that percentage is low.

As far as the business goes I think there's more opportunity in casting that wider net like Cosby or more recently The Neighborhood and creating more appeal for a larger audience. The model of "Netflix for black people" immediately excludes about 86% of the population. Some non-black folks will subscribe, and giving a very liberal 16% of that share they are still excluding 70% of the potential population. This doesn't mean that they won't be successful though - Tyler Perry basically does the same thing (though not overtly so) and he does pretty well for himself. If I were an investor I'd have to examine this under a microscope before jumping into any investments. But who knows? Hopefully they will do well.
> False positives are "free" to them.

Correct, just look at the incentives when it comes to handling sniffer dogs.
Why do people consistently try to run dev tools on their local OS when there are plenty of easy and cheap alternatives to accomplish more stable, reliable and reproducible environment?

Just get a $5/mo cloud instance and run your stuff as same OS as production and let other people check your environment even while your machine is turned off and continue working on another machine without duplicating the environment.

If you still want it locally, use VMware fusion which became free for personal use lately and run a real Linux like your servers do.

I see no benefit in running stuff on local OS.
No need for a tone like that
Do you guys want to get offended? Wanna see me tear Harry Potter down and ruin it forever for you
?
Indeed, but in return it only supports pixel phones, sadly (considering they're not great value for money for custom rom purposes, and most of their added value is lost when running a custom rom)
I don't know about you, but it took me a solid 2 minutes to see the difference (even with the chunks), and less than a second to see the other one.

The example given is especially difficult with any sort of dyslexia, which is where an more visual comparison would really shine
Economic policy is cooperation.
Lead Developer here, AMA?
> Marita Rodriguez, executive director of strategic partnerships at the National Center for Missing and Exploited Children, which Apple is working closely with on the scanning feature, sent a memo to the Apple employees working on this feature encouraging them to disregard concerns about the implications of this feature:

> “I know it’s been a long day and that many of you probably haven’t slept in 24 hours. We know that the days to come will be filled with the screeching voices of the minority.

> “Our voices will be louder.”

An external person put a phrase in one email they sent to some Apple employees. Hardly “Apple Discusses”. The headline seems like pretty obvious clickbait.
This may depend strongly on how your electricity is generated. Probably best to assume the electricity is solar generated since, over the life of a new EV, that's likely to be the closest to the mark.
> was Clubhouse ever all that popular

Honestly I have the same doubts and still can't help but come to the conclusion that it wasn't much besides a very aggressive marketing campaign. It felt like every post about Clubhouse had that one person talking about how lifechanging and unique Clubhouse was supposed to be using variations of the same examples.

Also the period of many articles that tried to tell us about the massive success.
Given how extremely fast that fad died I can't help but come the conclusion that the Clubhouse hype was mostly artificial.

Shows how disconnected investors and tech news can be from reality. Seems to me like way more people talked about Clubhouse than actually used it.
This piece resonates a _lot_ with me. There are a few rooms that are utilitarian in nature though (shoot your shot dating rooms for instance), and some where the people being seen are definite experts and it's interesting. Agreed that people with status have generally been leaving though.
This still comes down to assumptions.

If someone was using raw kubernetes manifests instead of Helm and charts they would need to know the schemas and details of those manifests. Then, when 1.16 came out they would need to update to the new apiVersion and modify their manifests for any differences in schema.

This requires someone who knows and understands k8s resources. This IS NOT a typical app dev or person who wants to run apps in k8s. I've been in numerous circles of app folks who have complained about this expectation from the k8s community.

On the main Helm project they have the stance that what's in a chart is up to the charts authors. Just like what's in a debian package is what's up to the debian package authors. That those folks should do a good job maintaining them. That's why it was a wontfix issue.

What we see as an underlying issue with k8s is the experience that app devs and people who want to run apps have to deal with. It's currently like expecting an app dev to write in assembly and know when assembly codes are deprecated or changed. It's in the pre-high level language phase. This comparison to assembly is one that's come out of the k8s community itself.
I get more what you're trying to say now. To some degree, some people are definitely failing to adhere to semver when they're part of a larger ecosystem that needs it, like the ones you mentioned. Regardless of what versioning a module uses internally for development, they should be exposing a good semver compatible version to the tooling that uses them that expects it, but they often fail in this.

There is, alternatively, likely some assumption at this point in end users that some random project on github or elsewhere might be following semver even if they haven't stated as much, and without a stated intention to follow semver by the project and showing that they are willing to do so that means little and is a poor assumption. That's not necessarily applicable to your original point though.
How does your country fare with its perception of Romani "Gypsies"
Nice, but still very Google dependant for security and OS updates.
I used CH for a little while, but my CH experience was soon overrun by marketers, self-promoters and the wrong kind of cryptocurrency people (wrong kind = people who are only into cryptocurrency because they want to make $$$, and they will evangelize cryptocurrency for all the wrong reasons).

So I lost interest and stopped using it.

But it’s hard to tell from an experience like that, if it’s indicative of CH as a whole or if I just ended up in the wrong circles on CH.

Compare to Reddit for example, I subscribe to very specific subreddits that are about my interests and generally have good luck finding interesting things to read and to watch on Reddit. Whereas if all you ever saw was the front page of Reddit, you’d have a very different experience. So maybe CH is the same way, maybe there is some really good stuff I am missing out on, who knows. And maybe it’s all trash. Either way, I’m not inclined to spend any more time on CH in order to try and find something that may or may not exist. Chasing Nessie or Big Foot would be more productive use of my time :p

However, if someone told me about some actually good rooms then it’d be different and I’d be willing to check those out. So I’m not completely writing it off. Just saying, I’m not going to spend more time there on my own trying to find good rooms.
The mother of a friend on mine in Pakistan was hiring a part-time housekeeper for ~3 hours per day. One housekeeper asked for $40 USD/month, and the mother thought that was too expensive.
This RFC has reason to call out MAC addresses directly as a security risk because they were standardized way back in UUIDv1. (To generate a standards compliant v1 UUID you are still required to use a MAC address, which is why everyone suggests you use UUIDv4 today, and exactly why UUIDv6 exists in the RFC, it's basically exactly UUIDv1 without the MAC address.)

The RFC leaves finding a machine-unique ID that isn't a security risk as an exercise to the user. (Mentioned directly in the v7 description where some bytes are optionally allocated for "flake"-like machine IDs.)
> This machine ID MUST be placed in the UUID proceeding the timestamp and sequence counter bits.

I read this as a strange word choice, but interpret as follows: "This machine ID MUST proceed from the timestamp and sequence counter." X proceeding from Y implies that X comes after Y.

If we examine the context, it is absolutely unambiguous (emphasis mine):

> This machine ID MUST be placed in the UUID proceeding [sic] the timestamp and sequence counter bits. This position is selected to ensure that the sorting by timestamp and clock sequence is still possible.

The proceeding sentence makes the intent clear, that a naive sort should preserve time ordering. The only way for this to work is for the timestamp and sequence counter bits to precede the optional machine ID.
> I see no benefit in running stuff on local OS.

A database on localhost is the fastest way to run your tests that need to talk to a DB.
Not disagreeing with your overall point, but amount of money (based on currency exchange rates) is a bad way to compare poverty levels across different areas. It doesn't take into account cost of living which makes a huge difference.
No questions, but a huge "thank you". I have not been this delighted with a tool since discovering Git. Once the little initial learning is done, it's so fast, powerful and easy to hand that it already feels like an indispensible part of my toolkit, after just a few days.
Why Do We Have to Die?
one screw up. There was multiple reports half were straight up lies the rest were extreme exaggeration.

I was software engineer and never noticed any bad behaviour.
LineageOS + microG here, on a motoX4. It's been the phone I use every day for about a year. My wife has the exact same setup, and generally gets along fine with it. FDroid has _most_ of the stuff we want. Some apps just aren't available there, so we end up using the Aurora store for those, with Warden used to scan those apps and stub out as much tracking code as it can. It's all about compromises, especially for others.

Self-hosted NextCloud replaced Drive/Dropbox, and with some plugins it also does phone/location tracking, secure messaging and video calls, TODO lists, and some more. Self-hosted PhotoPrism replaces Google Photos.

The phone experience hasn't been bad. One thing that came up initially is that most of the open source apps aren't as "pretty", and the UX just isn't as good. I don't care about it too much, and I'm fine with overall using the phone less anyway. The issue that comes up on a regular basis is the Google Maps replacement. OSMand is a great app, but like someone else mentioned it's more of a "look up the address and type it in" experience than a "show me all Thai restaurants in the area" experience. IMO small price to pay, I've been using GPS much less, and I've gotten much better at navigating with my "mental map".
Why YC fund this kind of startup.

I am fine if you want to downvote me but this kind of things I don't want to exist.

There are other ways to do this but building a streaming service for people based on their race is too much extreme.

I think people should try to bring people together instead of further separating based on their Race.
Very interesting, thanks. One less thing to worry about!
I'm mostly trying to keep the pathtracer simple and performant, so for this reason I would rather not implement bidirectional methods. However, I may end up implementing path guiding instead in order to better sample caustics etc.

I sample the lights proportional to their area times intensity. This is very much less than optimal for scenes with many lights.

As far as opencl goes, I don't have much experience with it so I cant really comment. For my GPU code I do tend to prefer a C-ish coding style, although I still use templates etc here and there.

SOA vs AOS mostly comes down to whatever access pattern you use on the data. On the CPU you mostly have to worry about the cache/prefetcher, on the GPU its more important to get coalesced vector loads in order to make maximum use of bandwidth
Dating is so depressing, and it sounds even more soul crushing under these conditions.
Aha that explains a lot. Yes I'd imagine Darwin having drivers only for hardware used in Macs and nothing else. I didn't think of that.
This has always been my general stance. It sounds cool but the juice doesn't seem worth the squeeze. It solves a problem that really isn't that big of a problem, IMO. It's almost a real life CINCO commercial.
We're in a profession where women are constantly exposed to unwanted sexual advances and innuendo. I don't think it's prudish to not want to think about "huge red butt plugs" while programming, unless I'm working on the source code for a butt plug.
Well it’s now common knowledge that they can and will do this. So oppressive governments will almost certainly mandate that its required to do business in those countries. Thus it’s a no win game for the end user. Unless you choose not to play.
Puppies aren't messy at all. You can shave all their hair off and there are efforts to deal with the slobbering. You can put a diaper on the back end of it and everything will still work.
Still photography too. In the Early 90s I did some college newspaper photography. We'd push our "400iso" film to 1600 by changing the processing, which worked but made it grainy.

Also manual focus, when shooting basketball and concerts was challenging as the depth of field is quite small. You quickly realize the price of a lens wasn't soo much the focal length (200mm) but increased rapidly depending on much light it let in.

But back to color. Some of those slide films from the 60s and 70s rendered color quite accurately/vividly. I went to a slide presentation and someone was showing slides and I guess I was a little stunned and you associate certain decades with a "look" that may have been a limitation of print film at the time.
The VPN is one of the Digital Services we offer, completely free.

https://calyxinstitute.org/projects/digital-services/vpn

We also include RiseupVPN, and Orbot (which is Tor as a VPN)
I think this is interesting because it's such a common issue on this board.

You can tell when people are requesting evidence to shut down a discussion vs. to broaden a discussion by the way they reply - if they bring in their own counter evidence and address the points being raised they're probably engaging in good faith and using evidence to find nuance.
I'll take the bait, these people are working towards a common misguided goal. why separate them?
Perhaps the analogy could have been clearer and the hypothetical more broad. I was trying to press on the difference between the shipper doing a very specific test vs some functionally similar but unknown test being done by the shipping company (the server-side test is unknown, it could be hashes, non-hash based image comparison, or manual review). I wasn’t asking about something like the sensitivity or specificity of those tests, rather, why we would be fine with one and not the other when the difference is not whether but when, where, and what test is applied.
Async Rust from the Ground Up: A Simple Web Server
The apparently simplicity of marketing new Cosby Shows in the mass media is the whole premise of this startup; it's "Netflix for Black people" because the bet is that Black people will appreciate a space in the media where they can simply tell stories centered in Black culture which aren't freighted with the need to bridge cultural divides. There is a time and a place for bridges and also for enclosures.

You are certainly welcome to subscribe no matter who you are, and you might well do that if you're interested in stories told in a Black context --- for the same reason you might have been super interested in watching Babylon Berlin even if you don't even speak German. Or you might not. That's one of the cool things about pluralism.
And yet actual window management on macOS is bizarre (wtf is with the maximization behavior, that it seems each app can decide on its own) and inflexible. Tiling, snapping, alt-drag, and shading are all missing. Automation, used to emulate those features, is cumbersome, slow, and, yes— janky. (It's way more work to customize or automate window behavior on macOS than on Plasma, for example.)

Pretty much every actual window management feature on macOS aside from dragging windows by the titlebar is janky as hell. :-\

(It is neat that display server crashes/restarts on macOS don't cause you to lose your graphical session, though. Idk if any F/OSS WMs have that.)