skysight-inc/HackerNews huggingface dataset:
That’s really not enough, forest fires are basically distributed denial of service attack. A tiny spark which wouldn’t be a significant issue on it’s own can destroy a house when nobody is there actively protecting it.

Clearing vegetation and material selection can make a huge difference, just don’t expect a normal house to be ok anywhere near a fire.
I guess the joke flew over your head :P
That's not what I said?

Apple is hurting the App Store more by allowing an automatic free trial to subscription roll over. And in this case, it's a clear cut zero benefit for users

I'm not suggesting the App Store is perfect, but this seems like an obvious fix for a whole class of issues without harming the user one bit. It even helps Apple by making the App Store more profitable in the long term
Is an new bucket leaking in a dozen places worse than an old one with all leaks fixed? I would say yes until those holes in the new one are also fixed.
> I have no idea how black and white monitors worked though, I would guess they'd have less than 8 bits of brightness info?

Depends on the monitor; I think ones existed with anywhere from 1-8 bits.
I think they were ridiculed for the later parts of that article.

> When Wade Crowfoot, California secretary for natural resources – identified climate change as the primary cause of the wildfires, Trump interrupted: "It'll start getting cooler – you just watch."

> "I wish science agreed with you," Crowfoot told the president.

> Trump responded, "I don't think science knows, actually."
No, I’m not. You’re confusing the issues. If you have a child’s account, joined to your family group, you will get alerted about explicit images — if you decide to use it.

The photos that you are obliged to report are child pornography that match a hash in a database used everywhere. If you don’t report, you’re in a place where you may have criminal liability.
To an extremely coarse approximation, a lot of AI techniques boil down to similarity matching. If you've got an algorithm that is most commonly implemented wrongly (binary search is the classic example here [1]), I would fully expect something like Copilot to happily reproduce the common wrong code instead of the rare correct code. I mean, it's already been established that Copilot happily suggests completions susceptible to SQL injection attacks, and that's a security flaw that "everyone" is aware about.

And as sibling comment alludes to, security implications are very frequently areas that require very deep knowledge both of the standard and of how breaks in security protocols usually end up happening. How many commenters on this article were aware of the potential for canonicalization attacks in security before reading the article or the comments here? I'd wager relatively few.

[1] If you're wondering how almost all binary searches could be wrong, the answer is they fail to account for overflow in calculating the midpoint.
While I wholeheartedly agree, I'd argue there is value in having R&D teams tinkering around with different ideas. They may churn out duds, but theoretically they will produce something valuable eventually.
Thanks for the reply. I’m sorry I still don’t see an example of the bias due to hyperparameter selection or tuning. Or model selection. The bias due to data is pretty clear to me and I see so many examples in the wild.
I was about to also mention Gource.

Here's a render I made in December, "1500 Commits (39 months) in 1 and a half minutes": https://www.youtube.com/watch?v=szhYhph4C2U

And he's another one I made a few years ago, "100 Commits (18 months) in 1 minute": https://www.youtube.com/watch?v=aIN4mOdL0d0
Mobile: “Organice” is by far my favorite org mode editor on a mobile device. And it’s not even a native app, it’s a PWA. https://github.com/200ok-ch/organice

Like others have mentioned, you don’t have to switch to Emacs. 99% of what I do in Emacs is in org mode. You don’t have to stick to one editor. I use NeoVim when in a shell, Jetbrains when I’m at work, VS Code when trying out other languages…
>only occurs when uploading photos to iCloud, and only to the photos being uploaded.

Or so they say? Did you see the source code?

Anyway that's not the issue.

The issue is what they are going to do next without telling you.

The issue is installation of spyware engine, not it's current usage.
He's not a philosopher, he's a psychopath. Someone drowning creates more suffering than one loser running on rocks.
I bought a SPARC 1 that I later converted to a SPARC 5. Lovely pizza-box.
The "algorithm" isn't some sort of neural network trying to intelligently identify things that "look like" CP. It's a perceptual hash matching against a database of known CP. It has to find multiple matches before it flags the account for review to reduce false positives. Only after review confirming a match to known exploitative images is the info referred to NCMEC for action.

Full whitepaper: https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
We typically do that after FDA approval. Don't get me wrong, I'm vaccinated (he says to not get reflexive downvotes, but it's true), but the FDA hasn't yet approved these vaccines.

We simply don't know what we don't know. For me, the risk was worth it. I can't speak for others.
that's nuts.
Slippery slope has almost always meant a fallacy, because it typically invokes "the sky is falling" examples that have no evidence to support it coming to pass - even here.
Would you have recognised the opportunity to use it, not knowing how it works?

Sometimes when we learn a new technique we suddenly see all the places it can be used that we didn't know about before. There's the old (probably apocryphal) story about the landscaper who was able to fire one of his staff when a customer told him he can calculate the side of a right-angled triangle without measuring all 3 sides. What he did worked for him, he just didn't know there was a better way.

Anyway I do agree in this case you are probably correct. I think most programmers these days use bitwise logical operators for flags and rarely if ever bit shift outside of system code.
80 compute units gets people going that are not technical. They'll just exclaim "80 compute units!? I am totally buying this".

Also see MHz and Megapixel race. Ever wondered why Ryzen CPU boxes are fancy? Same concept. As far as people are gullible, marketing will continue to serve them. Let's educate the people from recognizing marketing non-sense. Only then things can improve. Barking at "worthless marketing" people is naive - they're doing exactly what the numbers are indicating. If they don't, product won't sell as much. They're literally doing their job. Blame the people but we don't like to confront that.
Just remember that out-of-the-box Solaris 2 had an absolute ton of remote root exploits. So, unless you have access to security patches don't allow inbound connections to the VM. Even with a full patch set it's probably not a good idea.
I mean totally crazy.

Nightmare stuff
previously stated I despise? where?

It's not now, but it was as i know people who suffered from delayed treatment. As well my aunts a nurse and covid was hell for her, i'd rather she not go through that again because people think they are too good to get the vaccine and turn it into a political issue.
Don't feel awkward about it. We're all minds speculating about minds. My blue will never be same as your blue, and so are my pains, pleasures, etc - no matter how closely some of my qualia may resemble yours.

We're all in our own little specula (watchtower) seeing the world from our vantage points. Thus we can do nothing but speculari, or speculate so to speak.

This is why psychedlic experiences are so meaningful. They help us to experience the meta-ness of the experience per se.
Huh. Never heard it put this way but of course you are right.

Phrased this way the solution seems pretty clear -- we need to decentralize personal information out of these 3rd party databases. No amount of security is ever going to prevent a leak at some point so it's insane to keep creating these massive databases; and every time we ratchet up the security we're actually handing power over to the State and multi-national corporations.
Thanks, it was an honest question, something I've noticed a few times and wondered about.

I was going to say (did type) that I can't think of another word that's used in the same sort of declaratory way - but actually, as I wrote, it occurred to me that 'funny' is too.

'Funny, I just never noticed it with 'sad' until a few years ago.'
I appreciate this comment. I as well wish just "regular" taxes were more simple to file and also I can imagine how frustrating it might be to not be able to access certain services. Thank for the clarification.
> Investor after conducting further due diligence is not obligated by these Official Rules to make an investment in the Winner of any dollar amount.

No thanks
under a bridge downtown.
I don’t think that zip recruiter data is accurate, apparently the average engineer salary in Sunnyvale is 100k, where I can see new grad salaries are above 120k and do that doesn’t take into account bonuses or stocks.
That's exactly what they're doing. And they're requiring multiple matches before an account is flagged, further reducing false positives. They claim they've set the threshold to achieve a ~1 in 1 trillion probability of an account being improperly flagged.
> Mandatory vaccinations are much more digestable.

????

The state has the power to enforce mandatory vaccination, but does not want to use it, so use mandatory vaccination instead, which is more digestable.

Did I get that right?

(From the linked wiki article: "Massachusetts .. had compulsory vaccination," and also "Massachusetts law empowered .. cities and towns to enforce mandatory, free vaccinations for adults". There's no difference between compulsory and mandatory in this context.)
Reality doesn't care what humans want.

The options are make some voluntary changes now, or make very chaotic and much bigger forced changes later.

If we make the wrong choice our culture becomes extinct. We may or may not survive as an animal species, but that's almost a secondary issue.

That's it. That's what's on the table. Short of surprise alien intervention or unobtanium Magical Carbon Capture Technology™ there are no other choices.

The political problem is that we've managed to isolate ourselves from both physical and emotional challenges to the extent that we'd rather believe in a variety of fantasy game tokens than deal with reality.

But if that's the best we're capable of as a species, that's where we are. No one is going to give us a special pass. We'll just be one more failed species in a very long list, and that will be that.
There is a big difference between "forcing" people and requiring vaccines to access certain types of services. Kids in the US do not have to be vaccinated unless they want to participate in govt funded services in which they would be exposed to many other vulnerable children. That seems entirely fair and something I could get behind for covid vaccines even though I would categorically not get behind forcing people to get vaccinated. Private organizations also have the right to require such things for the sake of safety.

Current policies on other vaccines are very analogous to many many requirements we take for granted and that people largely don't whine about: seatbelts, license for driving, building permits, etc, etc. Reasonably administered there is wide consensus these things aren't worth fighting over and produce far more good than harm.

Why covid vaccines (and gun laws for that matter) are being received differently (with hysteria IMO) by a certain subset of the US population is a whole other conversation...
The reason there's no concerted effort for Bloomberg, S&P, etc to create an alternative inflation index is because there's no point. It won't be able to be integrated into financial products. Finance is extremely regulated and apart from some bespoke CDS, getting acceptance of a main stream financial product with this weird index would be very difficult. With smart contracts there is no approval process and a very low cost to create such products. But who knows, maybe no one is interested, but it's still an important project

> That seems pretty consistent with the figures from CPI:

CPI 1970: 31.1 CPI 2021: 570.6 Increase: 570/31 = 18-fold compared to 31-fold. Don't just say "looks similar" when you could do simple division and realize it's not similar. I don't think there is a single economist that would argue that health care spending has not grown considerably faster than the rate of inflation.

Here's the continuously compounded rate of growth of health expenditures as per the st louis fed

DATE HLTHSCEXPHCSA_CCH

1/1/01 8.61255

1/1/02 8.53011

1/1/03 6.8683

1/1/04 7.1269

1/1/05 6.22677

1/1/06 6.17762

1/1/07 6.12021

1/1/08 4.61058

1/1/09 4.60561

1/1/10 3.86769

1/1/11 3.5515

1/1/12 3.53598

1/1/13 2.54628

1/1/14 5.1474

1/1/15 6.26148

1/1/16 5.01743

1/1/17 3.98121

1/1/18 4.16224

You can do the same for housing [1]

[0] https://fred.stlouisfed.org/series/HLTHSCEXPHCSA#0

[1] https://fred.stlouisfed.org/series/MSPUS
They don't want to do it serve side because they don't want to see your unencrypted data!
You framed the issue perfectly. A mismatch of competing incentives. That seems to be a problem everywhere beyond just security. it seems that bonuses should be tied to security as well. Then maybe software engineers would be incentivized to build things securely.

A clawback of bonuses for security vulnerabilities might be an interesting idea? Or better yet bigger bonuses if there are no breaches.
Minor nitpick: sign in with Google and Facebook don’t use SAML, they use OAuth and OpenID Connect. Leading with those as an example undermines the authors later points.
Why should "more productive" be the standard?

If a person is equally productive but happier, why not let 'em be happier?
The problem with the “there’s no way to predict how this will evolve” argument is that it would apply equally as well years before this was announced, and to literally anything that Apple could theoretically do with software on iPhones.
When I implemented an HTTP2 server several years ago it was all of the "fun" of HTTP 1.1 parsing and semantics plus the extra challenges of the HTTP2 optimizations such as HPACK, mapping the abbreviated headers to cache in-memory representations, stream management, and if you supported Push Promises then that too.
> Warrant provides SDKs for authorizing access to your backend as well as a React SDK to make it easy to show/hide pages and components in your React app.

This actually sounds really cool. It’s always a pain recreating JWT and setting up security between the backend and frontend. Doing this as a framework and an api seems like a good approach. Thanks for sharing.
Dang. This got removed.
Imagine if the government said they were installing a backdoor in your checking account to 'anonymously' analyze your expenses and payees, 'just to check for known illegal activity'. Every time you use your debit card or pay a bill, the government analyzes it to see if it's 'safe'.
Your friend does sound insufferable, yes. But I don't think it's quite fair to Mr. Singer, whatever you think of his arguments, to say he merely 'fancies himself' a moral philosopher - it is his day job... [1]

1: https://en.wikipedia.org/wiki/Peter_Singer
for some reason I thought XUL was dead and gone, with the UI now coded in html and js - wonder if they can further improve loading by removing XUL in the futre
I have only seen the Clown Prince Apologia posts.

Admittedly they gave me a laugh while I was in the middle of helping cat herd the exodus to libera, but it was definitely a "laughing at" not a "laughing with".
And anyway, buses and trains don't even have seat belts.
Ancient fish traps in a Vancouver Island estuary
Indeed, I think Australia got lockdown right to start.

However there were incoherencies in the lockdown (wealthy foreigners and Hollywood stars can come and go; few Australians can get home). The vaccine rollout has been a shitshow; I'm in the US, another nest of incompetence, and got my second shot in April while some of my friends back home (yep, in Melb) just got their first. And the financial support for people who are really suffering has been nothing compared to the States -- so much for helping the Aussie battler. No intelligent followthrough.

And let's not get started on Scotty jetting off to Cornwall uninvited for a seaside trip while everyone else is bottled up at home.
In my experience with these subscription scams, non-technical users who get scammed by them do not "blame Apple" but they tend to become incredibly hesitant to purchasing apps, and no longer purchase subscriptions

If Apple (and developers) want subscription apps to become a more popular business model, they should eliminate the automatic free trial -> subscription rollover. As it stands, it's just hurting the App Store's profitability in the long term

I agree on your second point. Subscription apps are mostly unnecessary. However, I like paying for app updates and am absolutely willing to pay for something similar to a subscription: the Sketch app model

In this model, you pay for the app and get it, as well as one year of updates. After the year is up you get to keep what you bought, but if you want another year of updates you simply pay for another year. That's a subscription-like model that I totally support
I sort of understand the point (or at least part of it). I don't believe in forcing anyone to get vaccinated, however I do believe vaccinated people should have the right to know who they are associating with, so they can make an informed decision.
I think this is a kind of "no true scotsman." The original comment was that effects must hit the "majority of the planet right in the gut (and then preferably the wealthy part)". SF is certainly a wealthy part of the planet, and trying to shift the reference group to only apply to the richest individuals is a little absurd. Unless literally the richest guy on the planet is specifically endangered, nothing will change?
in all seriousness there is no backup beyond a few hundred beds in even the largest cities, with waiting lists, and not exactly the first thing you think of when things turn strange in your life and you end up on the street suddenly. You don't think that you are "one of them" and you just are "holding on for this or that" to happen. At some point, if you exit early enough, you can still transition to other societal levels. Left long enough, it changes you or at least you are considered differently and looked at funnily, to say nothing about the difficult in maintaining work and income to get OUT of said situation, etc.
The relationship is interesting. Chris is trying to find a minimal set of functions good enough to derive the rest (a worthwhile goal, and it mentions at the bottom that I did something similar in BQN). Part of my current thinking about primitives is that it's not important how many there are, more that each represents a coherent simple concept. But primitives that are too similar can cause problems for memory and maybe intuition.
Sorry, but they're not "spying on your device". If you choose to upload your photos to their cloud service (iCloud Photo Library), they'll use perceptual hashing and private set intersection tech to check against a database of known exploitative child imagery to make sure you aren't uploading that to their service. That's it.
Ask HN: Can I make a comic frame by textually describing what I want?
I am like to write short stories.
For reasons I am not aware of, a few people like to read them.

It would be cool to a nice cover picture for each story,
now that I am making eBooks for them (epub, pdf, mobi)

I dont have any friends or friends of friends who could draw it
(Which is far from wanting to do it).

I dont have any money to hire a proper person for it.

I am thinking of something along the lines of an extremely versatile
version of the police "sketch a suspect" (whatever that is actually called)
You describe a face, and the computer generates pictures in an iterative
process that hopefully may lead to a "photo" of the suspect.

Is there any such tool out there where I can describe what I want in a picture
and have the computer generate it?

Something like:

Frame 1:

Takes place in a bar: (small, futuristic, sparsely populated)
1)
Rhinoceros (Gray), with human head (Black eyes, smoking, stubble)

2)
Humanoid StarWars Greedo (laser rifle, angry).
3)
Humanoid Bartender, Robot, red eyes.

I have not spent a lot of time figuring out what the structure should be
but really anything that lets you declare textually what you want in an
image.

I imagine the first version will look wrong but by refining it by declaring
more details and have the program create different suggestions the process
could produce a useful output.

I do know I can create diagrams of many types now by just textually describing
it

This would be taking the concept to a whole different level, and I presume
it would require a gigantic assortment of possible assets

Does this exist?
I think that's a rather quick judgement on moral philosophers as a whole based on the experience of someone who didn't even take the time to think through utilitarianism (one of the most controversial topics in moral philosophy) from the description you gave. I wouldn't be too quick to judge a major branch of philosophy like that.
The link below suggests that the story your doctor acquaintance is telling telling is either an outlier for your state or is just incorrect. BTW, I found this data from last week with this search "us hospitalizations covid vaccination status". There's also CDC data which is updated weekly that can be seen in the same search. So not hard or complicated to verify.

https://www.kff.org/policy-watch/covid-19-vaccine-breakthrou...
What? As a resident I think they aren't doing enough. The reason we haven't had much of a problem is because we've been strict. The problems we are having in NSW that I am currently living through now are because they didn't lockdown fast enough and hard enough to deal with the delta strain.

Socialized healthcare isn't the problem. We aren't trying to save the healthcare system we are trying to save lives and stop people getting a disease which often has permanent effects if they do survive it.

Now aside from our COVID response we've become a clown world police state I'll give you that. Our laws about being able to press software engineers into becoming spies for example, or our stance on encryption, or the way the NSW police keep strip searching everyone all the fucking time.

But to suggest we are doing too much to prevent the spread of COVID seems fucking insane to me
> breadth and depth of the penetration was so bad that we didn't even try to really get to the bottom of any of it

Correction: we didn't do that in the unclassified literature. PERSEREC did a deep dive and that deep dive remains behind the Green Door (same with Hanssen's, Boyce's, and Ames's, among others).
Matt Ginsberg on the Crossword Solver He Built to Take on Top Word Nerds
FUTEX2  for Helping Windows Games on Linux has taken a new turn
If you already control their apple account, then you already have access to this information. Your threat model can’t be “the user is already pwned” because then everything is vulnerable, always
Are you saying that you consider strings in Haskell to be a primitive?
S3 backups and other strategies for data durability through ransomware attacks
We've kept our numbers low because of the "over the top" reactions you're talking about. You'd be correct that our case fatality rate is higher, but that's not due to the hospitals struggling, it's because out numbers are so low that an outbreak in a few aged care homes seriously skews the data.

Also, US deaths per 100k: 187.3, AU deaths per 100k: 3.6
The guy literally says he timeboxed his exploration on this experiment.

I think it's pretty cool and would love to have the option to navigate repositories like this.