skysight-inc/HackerNews huggingface dataset:
> - It's run _before upload to iCloud Photos_ - where it would've already been scanned anyway, as they've done for years (and as all other major companies do).

Then why build this functionality at all? Why not wait until it's uploaded and check it on their servers and not run any client side code? This is how literally every other non-encrypted cloud service operates.
The Enterprise Apps section is heavily SAML based, but if you want to look up how to write an app for AAD you won't likely find any SAML docs, you'll find the OIDC docs and oauth SDKs we build. If you see other places where you feel we default to SAML, I'd love to fix that.
The number of dimensions we have improved life for humans in an environment which have always been hostile not only to humans but to the 99.9999% of all species ever existed it wiped out is quite a lot more staggering.

Nature didn't give us a safe and friendly environment we made unsafe, it gave us a hostile and dangerous environment we have made safe by using technology to impact the planet to better suit us.

All impacts have externalities but I take those any day over just waiting for some catastrophe to happen whether meteors, super vulcanos or any other real threat that is out there lurking.

Technology is the sole reason we are 8 billion people on this planet and still are most better fed than 2 billion people were 150 years ago.

Living on this planet IS life in space and we are luckily constantly improving our ability to cope.

All solutions create new problems but these problems are better problems to have.
It's not doing any sort of scanning of your photos while they're just sitting on your device. The CSAM scanning only occurs when uploading photos to iCloud, and only to the photos being uploaded.

Source (pdf): https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
That’s a problem with NCMEC, not Apple’s proposal today. Furthermore, if it were an actual problem, it would’ve already manifested with the numerous current users of PhotoDNA which includes Facebook and Google. I don’t think the database of known CSAM content includes photos that cannot be visually recognized as child abuse.
And if you don’t believe me, ask yourself who holds the keys to iCloud data for both foreign and domestic customers. Ask Apple if it has ever provided data for a foreign customer to the US government. What do you think GDPR is for?

Hint: it isn’t end to end encrypted, Apple doesn’t need your password to read the information, and you will never know

Who the frack would design a system that way and why?
Tony Hoare's section was very lovely.
A lot of us have long been tired of the "all things must be Linux" mantra. It is nice having options, having other environments.
Don't forget food etc - even as a vegetarian, in Europe, you're likely to hit that 1.6 tons number just with food, or come close to it, at least as much as my google-foo tells me. Of course, these numbers are all quite hard to estimate, and particularly for animal products (which you don't consume!) include questionable factors like land-use changes - which are questionable not because they don't matter, but because of the remarkably optimistic assumption that land use change is driven by consumption, rather than driven by the low cost of said change for those actively doing it.

But sure, it sounds like you've found a lifestyle that works for you and has at least considerably less impact, regardless of the exact number (and ignoring the exact number is likely wise anyhow). Great!
If this is really so valuable, why aren't the largest, most successful corporations in the world Dutch?

Interesting organization theory question here.
Well, I think everyone have had an opportunity to check results of phase three trials since last October or September?
This literally begs the question whether the prescriptive approach is to be preferred over the descriptive one.
> considering the transparency of it

What transparency? Apple doesn't publish iOS source.
Strange that we're all commenting on an article concerning specifically the ultra wealthy renouncing citizenship to reduce tax liability then
A $100k Prize for a Decentralized Inflation Dashboard
Is there a more efficient system to arrive at consensus of a state in a distributed, trust-less, permission less manner?
Plus the language constructs, at least when transliterated into English, tend toward the imperative.
Which put me at odds with my mother in law till I figured out she really did not have another way of communicating and was not as harsh as her words sounded.
Evidently. Including one container ship with an ice-breaking bow. From Wikipedia: "Nuclear-powered icebreakers are much more powerful than their diesel-powered counterparts, and although nuclear propulsion is expensive to install and maintain, very heavy fuel demands and limitations on range, compounded with the difficulty of refueling in the Arctic region, can make diesel vessels less practical and economical overall for these ice-breaking duties."

No doubt that fossil fuels present an attractive option with their energy density and relative simplicity insofar as shipping in more temperate zones is concerned. Seems to get back to the question of incentives - short of artificially increasing the immediate cost of fossil fuels (and all downstream containerized goods) it may be challenging to adopt nuclear or renewables in the global shipping industry.
Matt should read the release before live tweeting FUD. The database is shipped in the iOS image, per the overview, so targeting users is not an issue (roughly).
Since nobody would ever object to it, protecting against child abuse gets used as a wedge. As the article points out, the way this story ends is with this very backdoor getting used for other things besides preventing child abuse: anything the government asks Apple to give them. It's an almost inevitable consequence of creating a backdoor in the first place, which is why you have to have a zero-tolerance policy against it.
The programs you suggest should treat these individuals DO exist. Typically the people afflicted with addiction and/or mental health issues refuse treatment.

I have seen well intentioned social workers walking through these tents cities trying to bring people in for treatment. They do not want to go.

Should we force people into facilities they cannot leave so that they can be treated?

It is a similar story for homeless shelters. The issue isn't the availability of beds - it is that the homeless do not want to stay in the shelter.
Sure, it is better on big screens but it is hardly worth the annoyance of messing with the user's day. They could have had an update nag screen "Do you want our fancy new position of the bar?" at start-up or something for such a big change instead of making it default for current installs.
> The original definition was putting tax and KYC requirements on people who don’t have, and can’t get, that information.

You fundamentally misunderstand regulation. If someone can’t/won’t do something, regulation is enacted to either compel them or to outlaw their behavior.

Your tacit suggestion that because miners can’t do something means the law is flawed, is akin to saying “oh well burglars won’t pay for the goods so oh well”. If we pass a law that miners can’t follow, then mining becomes illegal. We do this all time, especially in finance.

A more realistic example is “WhatsApp is E2E encrypted so traders can’t be monitored”. This means WhatsApp is a non-compliant (“illegal”) facility to transact in most regulated markets.
Is this a bot comment? Account is two hours old.

You want to not suffer through political memes? And jump to scanning private messages for dissent, by authoritarian governments being okay!?

What?!
I would argue UTC timestamps are still ambiguous, just in a different way.

How many seconds between now and 2038-01-01T00:00:00?

It's impossible to say because we can't predict future leap seconds.

Many uses of future times are always going to be ambiguous because humans care about timezones, which can change at any time.
Hey, I'm moving the mouse but the pointer isn't going much of anywhere! What's wrong?!

Oh yeah, the mouse isn't CORRECTLY ALIGNED with the mouse pad! I'd better check if the mouse pad has moved out of its proper position on the desk. And pay a bit more attention to how I'm holding the mouse so that I don't introduce too much rotation about the vertical axis.

That alignment was something I never had to worry about with any type of mouse I used before or after. On the other hand, it worked pretty well when it was lined up right. It really seemed to track motion more smoothly and accurately than mechanical mice.

For those who don't understand why it had to be aligned, Wikipedia has an article (https://en.wikipedia.org/wiki/Mouse_Systems) with two good photos.

Mouse: https://en.wikipedia.org/wiki/Mouse_Systems#/media/File:Sun_...

Close-up of grid: https://en.wikipedia.org/wiki/Mouse_Systems#/media/File:Mous...
Doesn't hurt to know it, sure, but it's entirely not useful for a large majority of developers these days.

Something like:

(some_var & 0x003ff000) >> 12;

Or even:

_displayControl &= ~DISPLAY_ON;

Is not immediately clear what is going on (other than some masking and shifting is happening), and these are simple cases without a lot going on. To understand these operations, we have to figure out what's significant about these numbers, what the variables might be here, etc.

It's a lot easier to understand:

display.disable();

Which is what most higher-level-language developers (web, apps, even backend, and more) will use and expect to find in a codebase.
I don't think I've worked on any problems that took more than a couple days to solve. And yeah that feels intuitive. But I suppose I would have thought these long-unsolved general case math problems were mired in emergent properties at large numbers that made these kinds of approaches impractical.
> Deforestation

It's not that clear-cut: https://www.weforum.org/agenda/2018/08/planet-earth-has-more...
Wouldn't a lack of shield promote coverups?

The only loss for the officials here is embarassment
Few people (some, but few) are asking for companies to eliminate the office for people who want to be there. From what I've read, there are even more people who prefer 2-3 days in the office to a fully remote lifestyle.

The real sticking point seems to be attendance requirements.

Having to go somewhere every day even if it takes 3 hours to get there and back, whether you're more productive there or not.

Having to be there certain hours, even if a slight shift in hours would save you thousands of dollars a year in childcare expenses.

Having to sit at the desk until 5 pm (or longer) for show, even if you're a salaried employee, are fried from numerous meetings or an intense thinking job, and spent other time -- not at the desk -- thinking about work problems.

Having to work all of your 8-10 hours in a row, even if you would be more productive if you broke it up into 1-4 hour bursts spread throughout the day.
I assume (and this is my opinion, to be ultra-clear) that it's a blocker for E2E encryption. As we've seen before, they wanted to do it by backed off after government pressure. It wouldn't surprise me if this removes a blocker.

Apple has shown that they prefer pushing things to be done on-device, and in general I think they've shown it to be a better approach.
We've done a great job of making everyone's life difficult enough that they don't have the spare cycles to worry about anything farther away than next week.
That just shifts who controls the monopoly on verification. Not trusting anyone isn't a reasonable goal. Open verifiability allows you to choose which entities to put trust in and how much trust you can afford to eliminate by doing things yourself.
Hmm, seems to me since most smart criminals understand not to leave a digital footprint that what Apple will catch is those are idiots and make a honest mistake and those how are dumb and make a mistake in putting their illegality online.

So I would ask US Lawmakers why cannot the phone companies make the same commitments? As the reason seems to be we have bad people doing crime using digital communication devices.

Last time I checked the digital pipeline ie phone lines is still under FFC rules is it not?

If they answer that its to hard tech wise then why cannot Apple make the same argument ot law makers?
People seem to speak extremely mechanically in these samples, which I suspect may lead to training bias against native as speech if used.

I think it should be explained that one should speak naturally when reading the lines.
You were downvoted unjustly. I think your opinion is mostly valid, but I think people undervalue simplicity because they underestimate knock-on effects of their decisions.
Apple employees successfully pressured their employer to fire a new hire and are petitioning to keep WFH.

https://www.vox.com/recode/2021/5/13/22435266/apple-employee...

https://www.vox.com/recode/22583549/apple-employees-petition...

Will they apply that energy and leverage to push back on this?

How else can this be stopped before it goes too far? Telling people to "Drop Apple" is even less effective than "Delete Facebook".
What is the point of running this on device? The issue here is now Apple has built and is shipping what is essentially home-phoning malware that can EASILY be required with a court order to do something entirely than what it is designed to do.

They're opening themselves to being forced by 3 letter agencies around the world to do some really fucked up shit to their users.

Apple should never have designed something that allows for fingerprinting of files & users for stuff stored on their own device.
https://i.imgur.com/TFTOj8Z.png

This is with the default spacemacs theme. Can you tell which one is the terminal and which one the GUI?

https://www.gnu.org/software/emacs/manual/html_node/efaq/Col...

Emacs does have the feature you want. Perhaps your setup wasn't supported. Which terminal/os were you on?
Indications from genetic research are that humans may have about twice as many female ancestors as male according to some theory about discrepancy in the "time to most recent common ancestor" for mitochondrial DNA (extrapolating for female ancestors) and the nonrecombining portion of the Y chromosome (extrapolating for male ancestors).

I think the presence discrepancy is reasonably well accepted.

https://academic.oup.com/mbe/article/21/11/2047/1147770
It's unlikely I would ever move away from (Neo)Vim as my 'main' (i.e., programming) editor, as I find it much more intuitive and comfortable.

Instead, I think of Emacs + org-mode as a single, separate entity solely for to-do tracking and plain text hierarchical note taking. I find that the conveniences of org-mode for these specific tasks outweighs the otherwise unintuitive (from the perspective of my muscle memory) interface.
Bringing More Humans into the AI Lifecycle
Had to do with whether you had 4mb of RAM or 8 or more. 4 was unusable.
> I think that’s a fundamental error made by scientists in every field. They don’t realize that when you’re learning something you’ve got to see something at all levels. You’ve got to see the floor before you build the ceiling. That all goes into the brain and gets shoved down to the point where the older people forget that they needed it.

The biggest parallel I can draw here is people that went to college, and then in their 30s and 40s tell people to not go to college.
But the leaky abstraction is useful in that it is a good thing to have some conception of how the machine works. There's a part of my brain that still thinks of every system as an overgrown Apple ][+. It's not the case, of course, but things like pointers, memory allocation and the like made perfect sense to me because I had a sense of what was happening at the hardware level. The last assembly language I used was IBM's 370 assembly and I have only the vaguest knowledge of the machine code on the systems that I use today, but that 35-year-old knowledge is still helpful
FAANG definitely has a high bar, but there are many factors that affect interviews. However, I think a big part of it is that they were willing to take a risk on hiring me since I had 3 years of experience and did solidly on the interviews. In contrast with the non-FAANG companies I applied to, they probably saw the obscure company I had been working at as a negative and decided to play it safe and pass on me. What further supports this theory of mine is that, around the 6 month mark at FAANG, recruiters started flooding my email, even though the difference in experience between 3 years of programming and 3.5 years is minor.
> Is there something about modern life that just inescapably creates this complacent, servile temperament in most of the population? Or has it always been there and I'm just overthinking it?

I only have anecdotal evidence, but it seems like most people don't care about problems unless they affect themselves personally right now. Also, most of us (HN aside) don't tend to think seriously about how things will go wrong, we're generally optimists that give more weight to the good something will do.
Helen Lovejoy voice Won't somebody please think of the children‽
In the short term, sure. But what if this is a local maximum which accidentally cut off all viable future branches? A bit of caution when making these irreversible decisions would go a long way.

Wiping out the rest of the planet to give us a safe habitat may have been a giant mistake, monocultures tend to end bad.
This is a good read: https://www.hklaw.com/en/insights/publications/2021/07/agree...

For example

Control/Command + F = "Ireland"
Black Hat USA: HTTP/2 flaws expose organizations to fresh wave of request
"Throw stuff at it until it looks like it works" is probably not the development practice you want to employ for an authentication service.
Children are at exceptionally low risk from Covid. The data is simply overwhelming.

https://news.ycombinator.com/item?id=28041775
Wars are used to force citizens to give up their labour for free to the state. In a country with financial mismanagement wars can be used to erase debts.

The US does and will go to war if it feels its dollar/oil hedgemony is threatened. if the dollar demand/circulation outside US falls for any reason, it will cause hyperinflation within the US economy. So they have to constantly threaten/intimidate other countries.
I cannot comment on Israel, but it is true (anecdotally) for Canada. Doctor and medicine shortages - day-long waits for ER care - hospitals overflowing with elderly patients - etc....

I have had far worse experiences in Canada than in the US.
Does it let you select from multiple routes? I've been using Pocketmaps, but it only gives you a single option for routing, which can lead to issues in certain contexts
I’d say you’re spot on, but I can’t say why.
... which is a way of being insecure by design. Design does not happen in a vacuum and must take the context and the audience into account.
https://www.cs.utexas.edu/~EWD/ewd08xx/EWD852.PDF

https://www.cs.utexas.edu/~EWD/ewd08xx/EWD852a.PDF

For anyone else who found the transcription to plaintext difficult to follow at times (some formatting losses). The second is a slightly edited version from 5 days after the first.

Most of the "take-down of Margaret Hamilton's methodology" is directed at the writing in 3 texts, and a large chunk is just a brutal description of one James Martin and his book Program Design which Is Provably Correct.

Quoting Dijkstra:

> I have never had reasons to consider James Martin as a competent computing scientist, but that he is a competent salesman I don’t doubt: he must have seen a market for [2] at $200 apiece. The book is so terrible that that is a depressing thought.
Check out leanpub.com ... basically what it is.
> the current situation is a semi-failure

WOuld you care to expand on that? I'm curious what in particular about the US immigrant culture you would like to see adopted, and what about the current German system prevents that culture from developing.
Part of the fatigue is the intense level of PPE. Its physically exhausting and usually just theatre because so many healthcare workers are either vaccinated or have already had COVID.
Nothing wrong with using emacs for just org-mode if you want to use more of the interactive features. You give up something vs someone who’s “all in” on emacs, but it’s workable.

I’m teaching my son to code and we use emacs only for magit. He may get more and more exposure down the road, but for now that’s enough to justify what little bare minimum learning curve is needed to get a great git porcelain.
Find collisions, spam the colliding photos to people you don't like, watch the mayhem unfold.
That really makes little to no sense - it's not E2EE if you're going to be monitoring files that enter the encrypted storage. That's snakeoil encryption at that point.

I sincerely doubt Apple is planning to do E2EE with iCloud storage considering that really breaks a lot of account recovery situations & is generally a bad UX for non-technical users.

They're also already scanning for information on the cloud anyway.
If you want to federated eg AAD with Gsuite, it'll be via SAML, but I don't know of any consumer service that's ever supported SAML. It's so weird the author used Twitter when they were one of the classic original Oauth creators.
No, you're reading into it.

I think that both sides of this issue should be allowed to do whatever they want to do, and we'll find out what the result is.
It's absolutely a fallacy according to any course on logic because it is impossible to refute.

https://www.txstate.edu/philosophy/resources/fallacy-definit...
Ouch.

macOS with iTerm2 and then Alacritty.

Now I am even more confused why it doesn't work well for me.
Huge difference between memory bus in front of memory controller vs behind it. You cant just plug yourself into a DIMM slot and act like a device on a memory bus. You will have to perfectly emulate particular ram supported by your memory controller (protocol, access patterns, timings), and this will be strictly a slave affair.
With a broader rollout to all accounts and simply scanning in iMessage rather than photos there's one possible scenario if you could generate images which were plausibly real photos: spam them to someone before an election, let friendly law enforcement talk about the investigation, and let them discover how hard it is to prove that you didn't delete the original image which was used to generate the fingerprint. Variations abound: target that teacher who gave you a bad grade, etc. The idea would be credibility laundering: “Apple flagged their phone” sounds more like there's something there than, say, a leak to the tabloids or a police investigation run by a political rival.

This is technically possible now but requires you to actually have access to seriously illegal material. A feasible collision process would make it a lot easier for someone to avoid having something which could directly result in a jail sentence.
What's the embassy doing for me as an American citizen living abroad who uses none of their services (except passport renewal but that's only because of the other ridiculous rule that US citizens must travel there on a US passport). Why am I paying for it?
None of the announcements describe an iMessage back door, even if you’re being extremely generous about what back door means.