skysight-inc/HackerNews huggingface dataset:
Apple's mistake is that they seemingly believe there is pushback because people misunderstand how it works. The reality is more nuanced: People understand exactly how it works, and how it works is that it is turn-key onboard spyware, that Apple pinky-swears isn't being used wrong today.

For example if the scope/mission expands (e.g. foreign governments), suddenly you've created a drag-net for whatever "badness" is of interest in whatever today's moral panic is (e.g. terrorism after 9/11). Plus perceptual hashing, by its very design, is created to be less precise than traditional cryptographic hashing.

A cryptographic hash + file size combo is unlikely to have a false positive within our lifetime (and it has been used successful by multiple companies to combat CP). The interesting thing about a perceptual hash is that the closer the source material is to the banned material in terms of actual content (e.g. nudity), the more likely for a false positive.

Therefore, if Apple does mess up via false-positive and manually review your material, it is more likely to be sensitive private materials (involving consenting adult(s), not CP) because that is what the perceptual hashes are looking for similarities to.

PS - If you think this concept cannot happen in a Western country, see the UK's internet filters as a textbook example. Originally started to fight CP, and now used to fight a ton of other stuff too with more proposals every year: https://en.wikipedia.org/wiki/Web_blocking_in_the_United_Kin...
Because they can, they pay no price for it
That's what happens when you have monopolies and politicians who are supposed to antitrust them are corrupted by them
This system already exists on iCloud. It's been in use for 2 years. Can you point to a single instance where it was used for ulterior purposes?
> My immune system is also highly effective against corona viruses, fungal infections, and other pathogenic microbes.

It sure is! Once it has had a look at the virus to know to act against it.

That is literally what a vaccine is - a way to give your immune system an early look at a pathogen so it knows to act next time it sees it.
A USB adapter for a classic Depraz mouse
Grew up in india, spent my twenties in the US, and now back in India. I can give you some potential explanation:

Even though the poor and lower middle class make abjectly low amounts of money, the upper middle class and the rich actually make money comparable to most developed countries. This is reflected in the real estate prices (Chennai, the fourth largest city, has prices comparable to Brooklyn). I can make 200k UsD a year and call myself upper middle class and no one will bat an eye.

While you can kinda isolate yourself from the real poverty, you’re never fully shielded from it. You will see people struggling if you live in India. Then, the only way you can convince yourself you’re not an evil person is by playing some Mental gymnastics. Thus you have people who refuse to accept how outrageous the wealth disparity in India is. Combine this with this misplaced cultural pride that seems comparatively excessive here, and you get people who become belligerent if you mention most Indians are poorer than dirt.
EFF (where I was working at the time) promoted Apple's first amendment argument in the San Bernadino case, which is a genuine argument in Apple's favor but not one that a court ended up deciding on in that case. There are also other arguments in Apple's favor there.

In general, it hasn't been very clear what the courts will or won't allow law enforcement or spy agencies to commandeer tech companies into doing. As we saw with several other countries' legislation in this area, it's also something that typically comes with strict gag orders and so we don't really even know much about what governments have tried.

I guess my main points would be:

* when these issues actually end up in court, it's not yet clear whether the first amendment issue about software will or won't be the most important legal issue, and

* especially in Australia and the UK, but very possibly also in other jurisdictions, there may already be tech companies that have lost secret fights over related issues and been forced to do things that users (or even most workers in those companies) haven't been told about, and

* if you don't like governments being able to backdoor stuff, maybe try to promote technology architectures where it's harder to hide features and functionality!

That last point reminds me how there's a kind of complicated side argument about how Apple's proprietary technology and paternalistic control most often make it harder for governments to spy on users, because there are comparatively fewer people to suborn or coerce in order to backdoor things, and it's harder to run code on the device that Apple doesn't approve of, and the company is very sensitive to public perception (maybe not this week!?), and has a big legal team to fight back against things. But when Apple does cooperate to increase governments' power in various ways -- e.g. banning specific apps from its app store, like it did with VPN and other anticensorship apps in China, among other cases, or doing this new scanning stuff -- it's also harder for users to override those decisions.

(I'm definitely not speaking for EFF here -- I stopped working there a year ago this week.)
While I really appreciate your work on GrapheneOS (and I will be checking out the sandboxed Google Play Services feature), I don't think it's very good form to heavily promote your OS in a discussion about a different OS, especially in such an adversarial way. There's room in the FOSS space for both GrapheneOS and CalyxOS.
Agree. I've driven nissan leaf for the last 5 years and just added tesla y.

Non-tesla chargers in my city are blocked by careless ICE drivers about 20-25% of the time, and the rates some of them charge are more expensive than gasoline.

the Y on the other hand, its like impossible to run out of juice, and not even a problem i have to think about unless i really want to. For non-tesla drivers: it navigates you where to go for charging when you need it, optimizing your route for the fastest charging experience.
> Or am I missing something?

You seemed to have missed the point of my comment. I'm not advocating for/against whether "homeless" should count people who are living with others due to economic necessity. I'm pointing out that heavyset_go's definition of "homeless" likely differs drastically than the one used by honksillet, and that him sneakily changing the definition to make a counterclaim is misleading at best.
I'm skeptical most people who download child pornography are active child molesters. Or most active child molesters distribute evidence of their crimes. And wouldn't NCMEC collect new images from the most popular distribution points?
Yeah the really interesting stuff is what they don't like to advertise.

In Florida, Disney actually has corporate control of two municipal incorporations aka actual cities.

They get to control who the half dozen or so residents are, and therefore control who the voters are.

Which besides complete zoning and land-use control, also gives them an amount of police and judicial power.

https://en.m.wikipedia.org/wiki/Lake_Buena_Vista,_Florida

https://en.m.wikipedia.org/wiki/Bay_Lake,_Florida

https://en.m.wikipedia.org/wiki/Reedy_Creek_Improvement_Dist...
'lacks' or 'is lacking in'
I've been able to get by so far with the inbuilt doc and reading the code for installed packages, etc. I can read other people's config and reasonably copy needed chunks, debug issues (I've submitted PRs to magit, org mode, and Doom to fix various issues).

The problem is that the last little bit to get to a fluent understanding has been elusive, e.g. how some of the macro-heavy features work (e.g. the common lisp stuff), or how to handle async code (e.g. how magit runs a command, and then refreshes the buffer after it completes). I have this fluency to some degree for the languages I'm paid to produce code in (e.g. C++, to some extent; Stroustrip himself said his knowledge of C++ was "7 out of 10 on a good day" or something like that), but these last few advanced features have been a tough nut to crack in elisp.
You should have told him that.
> I do wish something like emacs existed in slightly more modern form. I'd be thrilled if there was a modern text editor that allowed me to customize the app however I wanted by writing additional code in the language that the text editor is also written in (that is, repeating the relationship that emacs has with elisp).

Is there some reason you don't consider this to apply to vs code?
To me, my biggest issue with scanning user data is accountability and transparency;

Who will audit false passive cases including reasons for unlocking data ?
How false positive cases will be investigated and by whom ? (in case it was intentional data unlocking, eg. corporate espionage)
How "victims" of false positive cases will be notified ?
You should disclaim that you're on the core team of Marko.
In humans, more than a quarter of the bones are in the foot.

The number of foot bones in humans is not consistent. Some people have more, others have less.

My podiatrist told me this.

When I asked him about the foot bones of other mammals, such as dogs and cows, he said “Whoooah!!!”. The conversation became animated. He could hardly contain himself.
This cracks me up because I had an individual in my fraternity who was an advocate to integrity to the highest degree. “How we conduct ourselves when no one is watching” type of individual. Your boss had good intentions but it just comes off as too much for the average joe like you or I.
According to Apple's docs photos are encrypted in transit and on server but not end to end encrypted

https://support.apple.com/en-us/HT202303
Because of the movie Capricorn One from 1977.

Or was the belief of faking it common before that?
I've often wondered why with the prevalence of Echo, Google Assistant, and engines that recognize what copywritten song you're using in a YouTube video... They haven't extended the code on our phones to listen for the sound signature of anyone watching a well-known child abuse video. Surely if they use the microphone they can get a lot more positives. Instead of just catching people who watched it on the phone directly they'll pick up all those who watched it on an old TV or highly secure Linux rig like Tails (but that inadvertently left their phone near the speaker).

I'm sure the government has tens of thousands of hours of audio and will gladly supply the sound signatures. Think I should submit my idea to Apple??!
How does APL compare to J? Which one is more enriching to learn?
I’m writing this as a separate comment since it is an aside (i.e. not about investments in progressing indigenous languages online).

I don’t think it is wrong to call Greenland a country. As mentioned elsewhere, the word country is not strictly defined. Sometimes it means strictly independent nations, but most of the time it doesn’t. E.g. here is CIA calling Greenland a country (https://www.cia.gov/the-world-factbook/countries/greenland/).
> It does kind of bother me that Org doesn't have a particularly good formal spec.

We're working on it [0, 1].

0. https://orgmode.org/list/CA+G3_POBAB1QX1Zv8q9sjFh4KHUHVmaNXp...
1. https://github.com/tgbugs/laundry/tree/next
True. Apple is trusting that the National Center for Missing and Exploited Children will provide authentic and verified images. It is also clear from the details that some small number of matching images will not be enough to create a report and any report will be manually verified. A single matching photo will not create a false positive. Given the need to insert a lot of photos combined with manual verification of a flag, it sounds like a lot of people have to be corrupted to lead to a problem for someone. Also, NCMEC is well known. I hope they stay true to their stated mission. Time will tell.

As others have pointed out, the longer term problem is that the capability may tempt governments to put pressure on Apple to work with other image sets. However, Apple has of course had this capability for quite some time and (as far as we know) have not been doing this so if any company is large enough to resist they are. It is a risk, but not much more of a risk than it has been to date. I do think it is a positive sign that they are being open about what they are doing.
The real children abuser here is Marita Rodriguez.

Abusing the suffering of children for her own political and financial benefits.
Hiding behind the shield of abused children to not be held accountable for her claims and actions.
Intentionally using tragedies to bully, shame, and silence legitimate concerns.

Marita Rodriguez, here's a huge middle finger to you that will be held up until you prove that you've saved a single fucking child.
Those might not be mosquitos - I've had to deal with gnats when I head to the Georgia coast, and I barely feel them when they bite, so that might be the case for you as well.
It starts in our adolescent imaginations /s
To be fair, "Open Source" basically coined to mean "free software, but not as Stallman means it."
GrapheneOS has the substantial privacy and security features documented at https://grapheneos.org/features. This is a list of differences from AOSP. We've landed assorted privacy/security upstream in AOSP and AOSP upstream projects like the Linux kernel. Those features are NOT listed on that page, because they aren't differences from AOSP anymore. We're confident enough in our ability to implement substantial improvements that we can land features upstream.

GrapheneOS has an easy to use web installer: https://grapheneos.org/install/web which is based on the fastboot.js library created with our funding.

We also now has a sandboxed Play services compatibility layer implementing a no compromises approach to providing app compatibility:

https://grapheneos.org/usage#sandboxed-play-services

This will provide much more functionality than microG with better security and without sacrificing privacy by not giving Play any additional access than it has via the client libraries used by apps. It runs as a normal, sandboxed app and we provide fallback code for it to work that way. We return placeholder values for most of the privileged APIs and implement certain APIs like dynamite modules in an unprivileged way.

No need to bypass security checks in apps as has to be done to make microG work. That's a problem because microG doesn't uphold the same security model and checks as Play services. For example, it's not pinning component and server keys for important cases.

GrapheneOS currently has a much more barebones fresh install, but it's easier to install due to the web installer. The barebones installer is by design. We don't bundle proprietary services. We also don't bundle 3rd party apps and services unnecessarily rather than leaving it up to the user. We'll be providing a first party app repository with modern metadata signing, key rotation, delta update, stable/beta release channels, etc. within the next few months to make it easy for users to install an initial set of apps. High standards will be applied to the apps we choose to build for our repository.

Play Store requires API 29+ at the moment and that will be required to use the much safer unattended upgrade approach in Android 12 as opposed to the risky approach used by the Play Store, Aurora Store and F-Droid. We'll likely require API 30+ though.

F-Droid itself if API 25 (Android 7.1). The API level is the privacy/security level of an app. API 28 introduces a much stronger SELinux sandbox with per-app SELinux MLS domains protecting the app from others and other apps from it. There are many other improvements, with each API level making things better. For apps not distributed via the Play Store, this is a simple health check to see how much an app prioritizes privacy and security compared to simply getting it working.
Synchronization isn't required, actually. The timestamp is there to make the UUIDs roughly k-sortable, and to provide a "namespace" for the random values to reduce collisions.

Imagine you had three devices one of which has an accurate wall clock, one of which is 5 minutes slow, and one of which is 10 minutes slow, and you're using millisecond precision. So what happens is:

For a given arbitrary "accurate" time such as UTC 00:00:00.5 Dec 1st 2021 (500ms after midnight), device one gets 1 millisecond to generate UUIDs into that timestamp "bucket". If it generates enough, it might get a collision, but likely it'll be fine. After 1 millisecond, its wall clock moves on to 501ms after midnight, and it stops generating UUIDs that (might) collide with other UUIDs generated at 500ms after midnight. Five minutes later at 00:05:00.500 the second device (incorrectly) thinks it's 500ms after midnight, and starts generating UUIDs for that millisecond "bucket". And then after another 5 minutes, the third device does. And we can extend it; an hour later a glitchy NTP server (or daylight savings, or whatever) might cause the devices to all roll their time back, and then they all go through the "500ms after midnight" window a second time, getting another shot to generate conflicts. And that's fine!

What matters is the total number of UUIDs you generate (over the entire lifetime of your system) by devices which believe (correctly or not) that it's that specific timestamp.

Now, one potential gotcha is that a user might be overly clever and think they can back the timestamp out of the UUID to figure out exactly when it was created. That does require precise synchronisation if you want accurate answers, but if you're trying to figure out the exact creation time to the millisecond of UUIDs created in a distributed fashion...well, eh, hopefully you know what you're doing. :)
You say that they just paid for the reputation through marketing, but then you list ways that they earned it. You can't have it both ways.

Of course, now they've gone and un-earned the reputation. Too bad.
Each user can adjust the settings for how incoming images are filtered, one of the options disables it for friends.
I recall there are self-hosting solutions talked about an another thread. I will link if I can find it.
I think keeping things un-bundled is the best way to go, for the time being.

Non-smart phone for calls and texts.
Laptop for programs, web browsing, etc.
DSLR for photos and videos
Road atlas (a paper one) for getting places.
GPS is nice, but I don't actually need one, for now.
On a similar note, my city used to have a lot of 50 km/h four lane streets through residential areas, even though they were only minor trunk roads that didn't warrant that many car lanes. There was also a severe dearth of bike lanes, and since these are residential areas with lots of houses, there were always cars parked in the right lane and cars turning left into driveways.

The solution was to remove two lanes of traffic, forbid street parking, add a bike lane along each side of the road, and add a centre turning lane. this was all done with just paint and "no parking" signage. There was a bit of complaining about the loss of street parking, but other than that it's worked out great, and I actually see people using the bike lanes now, and traffic actually flow smoother.
They could do this with text, too. Look for "insurrection" or other keywords in notes, or emails. Report users with lots of hits to the authorities.

It's a slippery slope.
I can't access the course material. But basically it started with react, not HTML.

I would ve started with an html page and then add react to it to add some features.
People are treating Emacs as though it's an editor competing with other editors. It isn't. Emacs is a lisp environment. The editor built on top of that is at the same level as the IRC modes, mails modes, org mode, etc, etc, etc.

Emacs is an entire programming operating system you never have to leave. It's not even close to the same as VS Code.
Airport baggage drug dogs must obviously have far fewer false positives than that. So alerting on everything can't be the state of the art.
> Sure, I am quite willing to hang you with your own words.

That isn’t what you’ve done.

“As far as I can see: 1. This is a serious attempt to build a privacy preserving solution to child pornography.”

- False as you even argued

I don’t argue that.

>> They are not in this to make arrests. They just want parents to feel safe letting children use their products. Driving predators to use different tools is fine with them.”

> So according to your very own words,

Erm..

> this ISN’T a serious attempt to build a privacy supporting solution to child pornography.

These are your words, not what you quoted of mine.

It’s absolutely a solution to the problem of child porn on their platform. They care about making it safe for their users. Who is expecting Apple to solve the problem beyond that?

> It is at best something to keep the FBI at bay

These are your words, not something I have said.

> even though as you say it also introduces a back door.

Where do I say it introduces a back door?

> “2. The complaints are all slippery slope arguments that governments will force Apple to abuse the mechanism. These are clearly real concerns and even Tim Cook admits that if you build a back door, bad people will use it.”

> False, these are not slippery slope arguments

It is your opinion that they are not slippery slope arguments. I think they are, and as you have quoted I think they are reasonable. Slippery slope arguments are fallacies in the sense that the conclusions don’t logically follow, but that doesn’t mean that they are always wrong.

You haven’t hung me with anything - you’ve just voiced some misrepresentations of your own interleaved with quotes of me.
Good! These assholes have been building a moat around all of computing, and now it's almost impossible to avoid the multi-trillion dollar monster.

Think about all the startups that can't deploy software without being taxed most of our margin, the sign in with apple that prevents us from having a real customer relationship, and the horrible support, libraries, constant changes, etc. It's hostile! It's unfair that the DOJ hasn't done anything about it.

A modern startup cannot succeed without Apple's blessing. To do so would be giving up 50% of the American market. When you're struggling to grow and find traction, you can't do that. It's so wildly unfair that they "own" 50+% of computer users.

Think of all the device owners that don't have the money to pay Apple for new devices or upgrades. They can't repair them themselves. Apple's products are meant to go into the trash and be replaced with new models.

We want to sidestep these shenanigans and use our own devices? Load our own cloud software? We can't! Apple, from the moment Jobs decreed, was fully owned property. No alternative browsers, no scripting or runtimes. No computing outside the lines. You're just renting.

This company is so awful.

Please call your representatives and ask them to break up the biggest and most dangerous monopoly in the world.
Hopefully, in between the moral sponge work they do, occasionally gaze over a growing history of mugshots, years-left-in-sentence reminders, and death notices for the producers of this content, their enablers, and imitators.
You seem to be conflating the two systems. For the CSAM detection this wouldn't do anything at all because you aren't uploading it to iCloud.

For the child iMessage system it would notify the parents, not law enforcement.

It's nothing like swatting
So Amazon is exploitative, even if they're the best option available to workers... because all employers are exploitative? This isn't an argument against Amazon at all--you're just bellyaching about "the system".
Well if businesses are clustered together for the convenience of drivers, it will also be especially easy to access for the people living close enough to walk. But the math may hold be that this cannot be so possible for everyone.