skysight-inc/HackerNews huggingface dataset:
>I prefer "your idea is pure garbage" over "it needs more work" because I want honesty above anything else as it leads to more efficient execution.

Does it though, or does it lead to animosity, back-stabbings, a toxic environment, discouragement and so on?

Such things also have their tradeoffs.
I worked with someone that claimed this, years ago. And they were still young enough that I believed them.
Yep. The late 70s and early 80s mark the beginning of several strategies, policies, and chess moves that paid off big time in the 90s.

The neoliberal movement gained a major presence in the Republican Party at the beginning of that span, and by the early 90s it had also captured the Democrats.

The Fairness Doctrine fell, and its absence was quickly exploited. The ball took a while to get rolling, but was moving fast by the early 90s.

Economic libertarianism saw some important activity near the beginning of that span, and its very confident anti-government and laissez-faire positions and language became very influential through the 90s, and it continues to grow.

The fusion of the GOP and evangelical Christianity became (very deliberately) much more solid in the late 70s and the 80s.

Basically the Republicans began in a bunch of ways to shift toward their 2rd major re-organization and re-orientation since WWII in a short span of years around 1980, with the 90s being when they'd pretty much finished that shift. They may be working on a 3rd one now, which we may end up backdating to the Tea Party movement (that time being this incarnation's "~1980" turning point). We'll see, depends how the next 5-10 years goes, may amount to nothing.

As a side-effect (or bonus, to those behind it) the Democrats ended up having their 2nd major change in the same period, too (to solidly pro-neoliberal). AFAI can tell they're not starting their next serious shift, yet.
I’m not sure I’m misunderstanding. This is another feature that allows someone with access to another person’s phone to enable stalkerware like features.
And any ISAs (or similar tax free savings things) you hold are fully taxable by the US. Joy.
The sound of a drone and the sound of a car or truck, even if the volume is the same, is very different. Drones put forth a lot more high frequency noise, which is far more irritating (and harder to block out) than the relatively low frequency of cars and trucks.
I get your points, but the end result is that the client in an E2EE system can no longer be fully trusted to act on the clients behalf. That seems alarming to me.
Thanks for sharing this article. Can someone knowledgeable about this issue explain why this is not a data issue? I have read people claiming that ML researchers may bring their own biases into the models but I haven't seen any concrete example of that. Even in the Twitter exchange in this article, Gebru doesn't explain how this is not just data bias. She just throws a lot of insults at LeCun but anyone can do that, right? I would have loved to see her explanation as she is the expert in this area.
Part of me wishes this test had gone on for longer, and had used several bugs of varying subtlety. I'm more interested in how long a supply chain bug can live than whether you can introduce one (because I've never questioned that possibility).
Does "request desktop site" not change the user agent?
> Children account for 1.3% to 4% of all US hospitalizations for COVID, depending on the US state.

That is an acceptable price to pay for indulging in crankery. /s
If The Verge's article is accurate about how/when the CSAM scanning occurs then I don't have a problem with that, sounds like they're moving the scanning from server to client side, the concerns about false positives seem valid to me but I'm not sure the chance of one occurring has increased over the existing icloud scanning. Scope creep for other content scanning is definitely a possibility though so I hope people keep an eye on that

I'm not a parent but the other child protection features seem like they could definitely be abused by some parents to exert control/pry into their kids private lives. It's a shame that systems have to be designed to prevent abuse by bad people but at Apple's scale it seems like they should have better answers for the concerns being raised
This was neat until it asked you to put the data on the blockchain. Might as well be asking to distribute the network packets over pigeons. What a totally orthogonal, shoehorned objective.
They are not using cryptographic hashes. They are using perceptual hashes[1] which are fairly trivial to replicate.

[1]: https://en.wikipedia.org/wiki/Perceptual_hashing
“Tab closed” popup?
That's true, but as the article highlight, people can not perfectly know what experience was really important for them.
> designate your partner as a child.

That's not how it works, unless you control your partner's Apple ID and you lie about their DOB when you create their account.

I created my kids Apple IDs when they were minors and enrolled them in Family Sharing. They are now both over 18 and I cannot just designate them as minors. Apple automatically removed my ability to control any aspects of their phones when they turned 18.

> Dads' photos of their kids landing them on a national kiddie porn watch list.

Indeed, false positives is much more worrying. The idea that my phone is spying on my pictures... like, what the hell.
The only thing that would actually make a difference is going full nuclear.

But the greens put a stop to that, so I find it hard to take them - and anyone else who, like you, writes paragraphs about things that in reality do not matter - seriously.
> 1/3 of emissions come China which has an autocratic leadership accountable neither to its people or the global community.

The US generates 2x more emissions per capita (15.5 vs 7 tons). Australia generates more than the US (17), and Canada even more than Australia (18.5).

We got plenty of work to do ourselves before we look to China.
Apple is putting the entire database on every phone to scan and promising to only do it for certain situations. They can alter that deal at any time, you’d have to be a fool to think that isn’t their plan.

On-device scanning of “encrypted” cloud content where Apple has always held the key makes 0 sense unless your plan is total device surveillance.
More importantly, you can't read long text in small copy by zooming in without having to scroll sideways in FF mobile. That's just such an obvious UX problem it's unfathomable how it hasn't been addressed yet. There's been an issue open on this problem for about 10 years already.
Probably so it can tie in with some smart contract that's based off the CPI (eg. Treasury Inflation-Protected Securities). As for why that's useful, I'm not sure. At the end you'll still need a trusted oracle for the scraped prices.
You can swipe the "Tab closed" popup to dismiss it.
When you get right down to it, civilization in general is based on the honor system.
What's funny is that some form of utopia is / was within our grasp, and we deliberately turned our backs on it in the USA.

A walkable city is far less organized than something like arcosanti, as they tend to grow organically. But they do provide a significantly higher quality of life compared to most cities in the USA, because of the focus on car-based transportation.
Tax policy is public policy.

If a government has a desire to deal with climate change, the best way to entice/force industry and consumers to take action is to bake those initiatives into tax policy.
The world’s species are playing musical chairs: how will it end?
Didn’t they [Apple] make the same points that EFF is making now, to avoid giving FBI a key to unlock an iOS device that belonged to a terrorist?

“ Compromising the security of our personal information can ultimately put our personal safety at risk. That is why encryption has become so important to all of us.”

“… We have even put that data out of our own reach, because we believe the contents of your iPhone are none of our business.”

“ The FBI may use different words to describe this tool, but make no mistake: Building a version of iOS that bypasses security in this way would undeniably create a backdoor. And while the government may argue that its use would be limited to this case, there is no way to guarantee such control.”

Tim Cook, 2016
If the government mandated them, they would absolutely be illegal searches. The government is not entitled to check whether or not I have a document containing certain content (illegal or not) without probable cause and a warrant to suggest that I do have that document (and that it is illegal).

I'm carefully not alleging that this is illegal, because it's a third party doing it and it's not obvious that they are acting as the governments agent. Regardless of whether or not that solves the legal problem of unlawful searches, it does not solve the moral problem that we have a right to be free from unreasonable searches.

Replace "child porn" with "political posters" here. If you would have a problem with that search, I claim that you should have a problem with this search, because the there is no evidence that the person you are searching is committing a crime, and as a result the claim for this to be a morally valid search needs to not be about guilt (which would require probable cause first), but about it not being a prohibited search in the first place.
What do these 2 lines do?

canvas.width = canvas.width;
canvas.height = canvas.height;

Workaround for some weird DOM issue?
From the paper you cited:

> circulating antibody levels alone are not definitive measures of immune status

This is well established in the literature.

The paper you have cited absolutely does not support the claim that the "vaccine is more effective than antibodies from a previous infection".
Mozilla Commonvoice – donate your voice
Tesla reportedly paid $1M to former employee
Could you talk more about that way?
not a bad idea, but the way to do it is probably to come up with a certain basket and then actually have people physically go into stores and record prices in those stores and then reward them with a crypto token for contributing ( kinda like the mystery shopper industry ).
clicking Back to Homepage we land on a curious selection of lists and articles:

Who is "White"?
Decline of White Demographics
German Elections since 1871
What would the World look like if the Axis had won WW2?
EU of Regions after Right-Wing Takeover

Im sensing a bit of a theme here.
No Temple OS.... REPENT HEATHEN.
What different people consider fun varies a lot though. There's no universal standard of fun.

Take Paradox games like Europa Universalis and Crusader Kings. They go to quite a bit of trouble to approach historical accuracy (there are still a lot of abstractions of course, but they do a far better job than the Civilizations and the Total Wars). A lot of people love them exactly for that reason. For those people, historical accuracy itself is fun. For other people, these games are probably horrible and tedious.

People have different tastes. I certainly would love a more historically accurate city builder. I lost interest in the fake base-building standard a long time ago.
extra internet points if someone can guess what Paolo Soleri's "bacon" number is to https://en.wikipedia.org/wiki/Edmund_Bacon_(architect)

teeeheheheh
By "actual, intended" purpose, I do not mean original. I mean commonly agreed upon purpose, that almost all would agree is the true goal to strive for in a {criminal justice system, healthcare, etc}. I specified "current" to differentiate it between the current purpose, and a hopeful future purpose, not a past one. I don't mean to imply that these systems have been "corrupted" from a virtuous initial state (because like you say, they have some dark origins). Though they certainly are corrupt.
Mistakes to Avoid as a Software Development Manager
I remember years ago when Firefox Quantum boasted of lofty performance improvements only to get pummelled in just about every benchmark against Chrome. I still check out Phoronix's benchmarks now and again and Firefox is consistently behind. Make whatever excuses you will, but the numbers don't lie.
I did this for a while. A few comments.

First, as pointed out by pwg, you might have a dynamic IP address. Also, your ISP may block access to port 80, but there may be ways around that (not sure anymore).

Second, I had occasional "brown outs" that cut the power to the server, so my website would go down at weird hours a few times per week. I purchased an uninterruptable power supply, which fixed that nuisance.

Third, I had a small user base (no more than ~5 people accessing the site at any one time), so I had no problems handling the traffic.
'Indian' is the same as 'Bharatiya'[1], which is as old as human civilization gets.

And I agree with OP that Sanskrit should be revived in India like the Jews did for Hebrew in Israel.

[1] https://en.wikipedia.org/wiki/Names_for_India#Bh%C4%81rata
$100k seems laughably low, when you consider that it buys less than 4 months of dev time (assuming a $200/hr consulting rate).
Awesome compilation but two rendering problems:

1. scrolling, I can't see the right side

2. collapsable hierarchies - i can't get a bird's-eye view for prolific parents
How about a counterexample? I am a consenting adult in my thirties. I create a photo or video and send it to my partner. The algorithm flags it as CSAM when it only shows a fat bald guy. Before I know it I'm under investigation and my life is ruined because the algorithm got it wrong. Even being accused of this sort of thing is enough to destroy someone and drive them to suicide.
Is there anything like this, but for visualising the connections between git commits, files, GitHub issues, maybe even classes etc...?
I feel like we keep making this mistake again and again. Like JWTs can be signed with the "none" algorithm, which as you might guess is very easy to forge. Conformant implementations can see that and say "yup, that's a valid signature" and happily let any user grant themselves any access they want. Big mistake. It probably shouldn't be in the standard.

(I like PASETO instead of JWT, but nobody else in the world does, it seems, so we're stuck with the broken thing forever. Client libraries at least special-case "none" now and make it auto-fail, which has probably saved a few people that didn't actually read the spec.)
What's preventing people from making up the prices?
When I was in school, we had a teacher who was really into photography. He liked to show us collections of slides of photos he'd taken throughout the 70's, 80's and 90's with his vintage camera equipment.

Honestly, we all groaned every time he'd bust out a slide reel, but the pictures were beautiful. Some of the best pictures I've ever seen. I'm not a huge photography buff or anything, I've learned some of the basics of photography, but that's about it. I'm really not even sure why, but, they were just nice to look at. Not just the composition of the pictures, but the colours and the saturation, they just felt good to the eye. I'm not really sure how exactly to describe it.
I feel like you’re sensationalizing this a lot.

There’s two functions here. Both client side.

First, machine learning to detect potentially inappropriate pictures for children to view. This seems to require parental controls to be on. Optionally it can send a message to the parent when a child purposefully views the image. The image itself is not shared with Apple so this is notification to parents only.

The second part is a list of hashes. So the Photos app will hash images and compare to the list in the database. If it matches then presumably they do something about that. The database is only a list of KNOWN child abuse images circulating.

Now, not to say I like the second part but the first one seems fine. The second is sketchy in that what happens if there’s a hash collision. But either way it seems easy enough to clear that one up.

No father is going to be added to some list for their children’s photos. Stop with that hyperbole.
I hate the nonsense and wish more people were direct like the Dutch.

In my experience pure academics and scientists are more arrogant and lack empathy rather than being Dutch and direct.
I’m pretty sure you don’t know what you’re talking about. Perceptual matching is not image matching.

Perceptual matching is used to sort categories of images. A quick DuckDuckGo will turn up many results. No stretch of the imagination will turn this into a bit for a bit comparison. This is a machine learning algorithm used to categorize images. https://www.ibm.com/blogs/research/2019/10/learning-implicit...

Matthew Green is tweeting about this: https://twitter.com/matthew_d_green/status/14230711866160005... and mentions that it is "preceptial hashing”

9 to 5 Mac article, in which they restate that it is not a classical bit-by-bit hash:

https://9to5mac.com/2021/08/05/scanning-for-child-abuse-imag...
1. What is the point of the blockchain here?

2. This seems worth way more than 100k & they just want multiple teams working on it (competing), so they can then invest 100k in a company? This seems incredibly underfunded.
You’ve got it mixed up. The messages are scanned for any explicit material (which in many but not all cases is illegal), not specific hash matches. That’s only for uploads to iCloud Photos.

Additionally, you are not “obliged” to report such photos to the police. Uninvolved service providers do have to submit some sort of report iirc, but to require regular users to do so would raise Fifth Amendment concerns.
These are people who think the government wants to censor their prices database... so not exactly geniuses.
what is the hashing scheme? I assume it must not be a cryptographically secure hashing scheme if it's possible to find a collision. It's not something like sha256?
Submission statement: Maturing big data analysis of biodiversity has lead us to some strange and surprising conclusions about biodiversity: it is not decreasing, even as the extinction rate far exceeds what it was before human domination of ecoystems.

I am intrigued by the outcomes of mature, careful, analysis of large datasets in biology leading us to conclusions very different to those drawn from prior studies. Ecology isn’t the only field this has occurred in. Similar trends can be seen in genetics and microbiome studies.
Safetynet is becoming a problem, and the trend shows to signs of slowing down.

I shouldn't have to choose between keeping full control over my device and being able to use it to access the modern world.
Well if you run 3 ad blockers like me, you won't have to worry about any of that lol.
I just checked my FB.

The first "suggested for you" piece is this link[1], about the Australian cycling team's bronze medal in the team pursuit. I'm a cyclist and Australian, and can confirm this link is interesting to me. It's from SBS, which is one of Australia's publicly funded broadcasters.

It's not a paid ad.

> More likely, Facebook have no real content for me because noone in my list of contacts posts on Facebook anymore and Facebook push this shitty content so thier pages are not bare.

Exactly. If you are only seeing junk content from your friends, then the suggested content is likely to be junk stuff that is globally popular too. That doesn't somehow make it some secret paid ad, it's just junk. Same way the old Buzzfeed listicles were junk, but popular.

> If you are so sure it's _not_ commercial content you have lost the ability to distinguish real content from adverts. That's a skill 7 years olds need to develop.

You say you and your friends don't use FB much. Whereas I do, and have spend 5 or so years going very deep on their advertising work.

Perhaps I do actually know what I'm talking about here?
There is literally no way to pay for "suggested content".

[1] https://www.sbs.com.au/cyclingcentral/article/2021/08/05/aus...
> Now there is a process on your phone capable of processing unencrypted data on your phone and communicating with the outside world.

What? That’s what all apps by definition do. My retinas can’t do decryption yet!
Technically it says "We'll invest $100k in the best entrant if you end up starting a company". I guess not bad if you're already working on this?
Hmm, I could have explained why that is problematic. The article here does it better than I can. On its own, a former CIA official working a different job is not unusual, that is agreed — on its own and not part of a pattern. https://thegrayzone.com/2021/08/04/twitter-uk-cia-reuters-ce...
If all you have is a hammer…
Shelah is a powerhouse, in fairness. A 10x mathematician.
Does something already exist that allows person from country A to find out in which country B their home currency goes the furthest? Sort of a combination of bundle of goods and exchange rate? I've thought it something that could be plugged into a charity finder.
True. HN isn't the right place for this flame war.
Try Vitasoy oat milk if that's available. Easily my favourite brand and much cheaper than Oatly (in Australia at least).
No, I'm being serious. technology like this could be very beneficial.

there's a good chance that if we continue to improve surveillance law enforcement agencies and justice departments could begin to focus on rehabilitation and growing a kinder world.

right they are like firemen trying to put out fires after the building has been ruined

if it doesn't work we're doomed anyway, so what's the problem?
Oddly enough, the page partially loads, hangs, crashes the tab and attempts to reload, hangs, and then crashes the entire running mobile chrome instance on my phone.

I don't think I've ever seen that before! I'm guessing the page is just memory heavy and android 11's memory manager can't figure out how to deal with it.

( chrome mobile, pixel 3 xl, android 11 )
I did forget. I've spent years trying to.
How is Shibboleth SP's track record on SAML vulnerabilities, either patching them quickly or avoiding them altogether?

My company needed to implement SAML SP support in one of our products so we could get academic customers, particularly those that are part of the InCommon federation. We contracted with a company that specializes in SAML and Shibboleth to help us get it right. We decided to use Shibboleth SP running in a container; that container also has Apache httpd (as practically required by Shib SP) and a little Python shim app that generates a JWT and passes it back to our main app. Hopefully that's a good way of using the nearest thing to a canonical SAML SP implementation, without running our whole application through Apache httpd. In case anyone's interested, our Shib SP container setup, with the Python shim app, is here:

https://github.com/PneumaSolutions/shib-sp

It's probably still too specific to our application, but might be useful as a starting point for others.
"How can we promote our crypto pyramid scheme?"
you can have them submit it by taking a photo of the price, or even by taking a photo of their receipt after they check out.
you can run sanity checks to clean the data, for example, if someone says eggs cost 50 bucks, throw away their submission, etc.
Likewise with some species of blackberries, but at least they have the benefit of providing a tasty snack before I go after them with tools and a fury.
>if you end up starting a company

How can you monetize this? The whole point is that the data is public for everyone to see?
> We've collectively handed control of our personal computing devices over to Apple and Google

Hey now, the operating system and app distribution cartels include Microsoft, too.