skysight-inc/HackerNews huggingface dataset:
It is unrealistic to expect corporations, which exist solely via regulations of various governments, to act as if they are immune from government regulatory control. In fact, a lot of negative press for FAANG (add extra letters as needed) specifically makes the point that they are acting as if they are bigger than any government.

In that mindset, the answer is absolutely to combat and to attempt to change broken laws first.

Also, it isn't just "think of the children". For instance, there have been some _terrible_ proposals under the banner of Right to Repair. People tend to not want to invest the time in understanding the ramifications of the actual proposals, and instead vote for or against the concept. One of the reasons ballot measures are both empowering and terrifying.

Good regulations take time and care - and generally, less is more.
> it also means anyone, anywhere,

it's only in the US. not in Europe or ROW.
Microsoft Decides to Refresh Its OneNote Desktop and Windows 10 App
So HN seems to irrationally hate Bitcoin and crypto, but the entire first part of this story could have been solved with that.
If Spyware Engine is allowed to be installed by some idiot with company in his hands to amplify his idiocy, what prevents another idiot with company in his hands to do the same?

And how about specially crafted 'normal' pictures sent to individual to trigger the system? Special mind would have a perfect tool to get some one down / put into the troubles.
Or rather, "Ridley Scott and Chiat/Day's '1984' Macintosh Commercial, commissioned by Apple". But still, they never promised us it wouldn't be like "Animal Farm"...
> if your worry is governments reading your mail

complicated. As long as they require a reasonable warrant (ha!), I'm fine. Email is an inherently insecure protocol and ecosystem, anyways.

I haven't used email for communication that I consider to be private for a while - I've moved most, if not all, casual conversation to signal, imessage. Soon, I hope to add something like matrix or mattermost into the mix.

My goal was never to be perfect. My goal is to be able to easily remove myself from an invasive spyware ecosystem, and bring my friends along, with minimal impact.
In cloud storage they can manually review the picture on server side for false positives before throwing to law enforcement.

You are consenting to the upload and are aware that it can be searched so not a legal problem.

Law enforcement will also review the picture in the cloud instead of busting your door to search your phone and the whole scenario from article.

When they do it client side they can't just upload your content on hash collision. (or maybe they do which is also a problem in itself)
This works the same in other directions. Try getting a visa, work permit, job, bank account, credit as a foreigner immigrating to anywhere in Europe, or Japan, or almost anywhere else.
"Just" don't use the same database that the application is using for it's internal data.
If we are taking wikipedia as ground truth, the next line is:

An overfitted model is a statistical model that contains more parameters than can be justified by the data.

Another definition from https://www.ibm.com/cloud/learn/overfitting#:~:text=Overfitt...:

Overfitting is a concept in data science, which occurs when a statistical model fits exactly against its training data.

We can argue over the precise definition of overfitting, but when you fitting a high-capacity model exactly to the training data, that is a procedural question and I would argue falls under the overfitting umbrella.
>> has effect that each person would behave as 'someone is looking'

I don’t think that’s true. Compare the difference in how people react to cctv vs how they react to “Surveillance Camera Man”.

This is a cctv system, you can forget it’s there. Until it incorrectly flags you anyway.
I'm just trying to buy time until open source and secure alternatives have addressed these problems. Apple doing this has moved my timeframes up by a few years (unexpectedly).
Just a quick reminder:

* Microsoft scans and deletes stuff on your drive it believes is harmful [1]. There was also some indication a while back that they would delete 'pirated content' - i.e. anything some algorithm detects you "shouldn't have" [2].

* Google Drive have been deleting 'pirated content' for quite a while based on hashes [3]. I imagine other cloud services do this as well [4] and I recommend you do not sync your important files with such a service.

This was always on the cards. Next it will be 'terrorist materials', then it will be 'harmful content' and soon simply 'DMCA content' stored locally will be reported to the police. Freedoms definitely erode if not defended.

On a related note, projects like Pine64's Pinephone are early stages (read: difficult to daily drive) but definitely in the right direction [5]. Some day in the near future you will be able to get a decent mobile experience without having to worry about spyware/adware/malware.

[1] https://news.ycombinator.com/item?id=27914752

[2] https://www.indiatoday.in/technology/news/story/windows-10-w...

[3] https://torrentfreak.com/google-drive-uses-hash-matching-det...

[4] https://www.extremetech.com/computing/179495-how-dropbox-kno...

[5] https://wiki.pine64.org/index.php/PinePhone
Yes it's obviously beneficial. Alone you are just alone. A lot of people don't have many friends or just don't have time for them. Still it's difficult. I always worry about how much of a creep I am, so I don't do it very often.
The system is used during synchronization to iCloud Photos, which is an optional feature.

Other hosting providers do similar scans, but they do not do them within the client-side component. Presumably, this is done to give the hosting environment no access to the actual data (e.g. data access such as by subpoena becomes a cross-organizational auditable event)
> poedermodel.

Poldermodel : https://en.wikipedia.org/wiki/Polder_model
I have now fixed the one vulnerability you got right (MITM):
https://www.groupsapp.online/post/improved-e2e-encryption
Ah, so it's can by default, but should only when it affects a certain subset of pre-approved issues.
I also use Fastmail but being fully aware that Australia where its hosted is part of the 5 eyes spy network, and also one of the countries acting extreamly oppressive towards its citizens when it comes to covid restrictions.

So I don't actually expect my mail to be private. But at least it's not Google.
I have been self-hosting email for 7 years successfully. But it required a physical server in a reputable datacenter, setting up Dovecot, Exim, SpamAssasin, reverse-DNS, SPF, DKIM. It took a bit of time to gain IP reputation but then it has worked flawlessly since. Occasionally some legit mail is flagged as spam or vice versa but it is not worse than any other mail provider. So it can be done! But my first attempts to do that on a VPS failed as IP blocks of VPS providers are often hopelessly blacklisted in major email providers.
If I keep all my data sequestered on my phone -- which I'm bound to do if I am privacy conscious -- then obviously scanning the phone benefits the CCP.
- I don’t think Lex asks open-ended questions, he asks exceedingly basic ones that often betray a lack of knowledge on the topic.

- Long is not equal to deep. There is a lot of empty filler content that isn’t authentic or relevant.
Alternate view point - driving projects to a specific deadline allows the other departments in the company to coordinate marketing, packaging, and selling the product. These people don't sit on their hands patiently waiting for engineers to finish building, their work can take many months just as the development does, and sometimes also involves making tradeoffs to deliver on time. No company wants to wait another year after development is finished before they start earning money for it.
> I don't like this way of doing things, but

Yeah yeah. We know. Won’t someone think of the children.
Don't modern OS's use page-based COW anyways for large copies?
Asking what version of a tool was used, actually reveals a lot about the candidate. It's not about knowing if you know the exact same version as the company.

First probe is if the candidate doesn't have slightest clue what version they were using, that's a big red flag. This is more common than you would believe.

Second probe, candidate knows, but they only used a 25 year old version (also more common than you would believe when it comes to c++), this can be a warning flag that they are not interested in learning new things. But doesn't have to be if it was company policy, which is also interesting if they were in position to change this.

Third probe, ask follow up questions on differences since version N-1, this shows if candidate is staying up to date with latest trends or not.
There are so many good ones I don't think I could choose :).

Maybe also "Love is in the Wind" from RiME:

https://www.youtube.com/watch?v=Z2gfNQP6lgY

That one still builds up to a longer melody at the end while the Mario Paint track has a both slow and meandering feel to it that I guess isn't that common even for ambient stuff.
Seems smart why? If we check the air two hours later, is it meaningfully better than before we started?

A daily changeover seems much worse than constant exchange, and both of those pale in comparison to filtering.
I love org mode and use it for almost everything (note taking, agenda, to-do list, contacts, teaching materials, protocols, documentation, ...). The boost in productivity that it gives me is amazing and I do not expect to switch to another system in this life. However, I agree that org is not a great tool for writing serious documents intended for publication. First, the issue about collaboration that you mentioned. Just about 10% of my collaborators use Emacs, and even those people aren't serious users of org mode. But even when I'm writing alone, I really do need the power of LaTeX in the vast majority of cases. Org allows embedding LaTeX (behind the scenes LaTeX is a stepping stone on the path to PDF), but if I end up littering my org document with LaTeX macros anyway, I can just as well use straight LaTeX and org doesn't really buy me anything. It just adds another level of complexity to common authoring workflows. I also often use literate programming techniques in my articles, and Knitr (LaTeX' solution) is considerably more powerful and reliable than org's Babel system.
Sorry, wasn't ripping on Lineage. It's more the entire ecosystem. I mentioned in prior comments, but I think that in a few years we'll have a practical, open source, third party in the mobile phone os wars - one that has reasonable app coverage.

I don't care if I use google or apple services, btw, I just want the data flow to be on my terms.
"destroyed" and "not created" are not synonyms, they can't be used interchangeably as you do here. This invalidates the argument for me to be honest.
Americans don’t have a clue about US immigration paperwork or USCIS because we don’t have to deal with that. You probably don’t know how hard it is to immigrate to your home country either. Having done it both ways in my experience the US bureaucracy was no worse than some other places, and not corrupt like some places. I’ve been asked outright for bribes in SE Asia and Mexico by immigration authorities, something that doesn’t happen in the US or EU.
It's also why (among other reasons) the UK peerage doesn't have "Counts." It uses the old Anglo-Saxon "Earl" for county-level peers even though the Norman system largely displaced the Anglo-Saxon system after the conquest. Curiously though, the wives of earls are countesses.
There are several known flaws in CPI calculation like this, but not all of the ones being touted in this discussion:

First of all CPI only tracks basic commodity goods like bread, milk, coffee, etc as a proxy for the basic cost of living. It doesn't track complex or premium products like frozen burritos.

It tracks the quantity of these products people actually buy and their cost per quantity, so reductions in the size of chocolate bars or amount of cereal in packets will not fool the CPI.

It does not take into account the quality of these products. If people start buying less premium coffee and more store brand coffee, or if manufacturers start putting less cocoa and more fat in chocolate this will not show up in the CPI.

The CPI is just one statistic, and should be considered alongside other measures such as consumer buying power and cost of living calculations.
The compute is on the edge; the data is local, just marked for cloud sync. This way, you get to pay for the capital and energy costs of the scanning instead of Apple.
It seems like you're asking a more general question unrelated to JSON. Rather you want to know how to manipulate data without all the ceremony of a strong type system, as you would in JavaScript or python. This is completely valid and is the best choice for simple jobs.

If you have a set of key value pairs where all the values are the same, you can use a Map or HashMap. These are both easily serialisable.

I'm not sure there's a way of having key-value pairs without a schema and with different types of values. If it has a schema you can use a record of course.

If you just want to add a single value, such as pdfUrl for example, you can include this as a nullable (Maybe Text) value in the record. Receive the data without it and return it with it. If you wanted to, you could also use a type parameter to guarantee that a pdfUrl is always included in the response record.
Seems that most comments are on the privacy side of the argument. So I will try to defend this :)

"Apple’s system is less invasive in that the screening is done on the phone, and “only if there is a match is notification sent back to those searching”, said Alan Woodward, a computer security professor at the University of Surrey. “This decentralised approach is about the best approach you could adopt if you do go down this route.”

So it will only happen when you upload data to the iCloud. So the question is then: is it okay for apple to make sure no illegal content is stored on its servers? I think you could argue both ways but to me at least it is less privacy invasive than it seems.

it is about expectations of privacy, in the same way you can expect less privacy in a public space in the real world. It should be clear by now that you can expect less privacy on the public web. Of course a counter argument is that is is perhaps more like renting a hotel room than it is a total public space. But you can also expect less privacy in a hotel room than you can expect in your own home.

For many years privacy and freedom of speech has been a hallmark feature of the internet. I was (kinda still am) a big proponent of this. But we have seen what will happen if you take it to its extreem. From disinformation campaigns to illegal activities. So to me (and incidentally Facebook) we should get better (inter)national rules about how we want to use the public space of the internet. Just in the same way we have rules and laws in public space.

Internet is blending more and more in to the real world. So governments should make it clear in what way we can expect privacy and free speech and where we can expect it (self hosting, public platforms etc) and what responsibilities companies have to enforce it.

The hardline arguments of privacy advocates are the same that the NRA is using to prevent any form of gun control. It starts with A what is them going to prevent to do B. Well rules, regulations and laws. You should be very aware that privacy isn't watered down and law enforcement should make sure they don't mis use what rules there are. But to me checking hashtags for know child abuse photos is the same as doing a basic background check before giving someone an assault weapon

That being said it will stop no one from encrypting images before uploading it to iCloud.
You mean a phone to receive a text for MFA? "Most" can't be more than that.

However there are a couple of new "Fintech" banks in the UK that are mobile app only. No website and I assume very difficult to get anyone on the phone. That seems crazy to me. Access to your bank is at the mercy of Google/Apple.
The article is full with interesting nuggets of wisdom, but I found it all over the place, as it mixes several issues (all of them important) into one.

The article mentiones "high-value" projects (vs "low-value" projects), but the actual distinction made is between high-effort (new framework, new kind of product) and low-effort. Value and effort are not neccessarily correlated, indeed by the end of the article the team has had a high-effort project that resulted in a low-value product.

It also conflates product discovery (what will actually have value to the users) and technical discovery (how do we build the damn thing). It starts with the technical challenges (and I totally subscribe to the notion that estimating anything that you're not doing routinely is Dangerous, see https://blog.senko.net/bridges-vs-apps) but then veers off into describing mismatch between features built and value add (also a very important subject, but a different one).

I would love to see author expand each of the sections into an own article and explore these things in more depth!

The most underwhelming part for me are the recommendations at the conclusion. So (focusing here on tech aspects) if "Something by Date (tm)" methodology is bad (which I can agree with in principle), the solution to "let competent engineers prototype [the app] in 3 or 4 different frameworks", ie . "give your engineers unbounded time"? All developers (and I am one) wish they'd have more time to implement things properly, so that's not a new insight. But it's not actionable either - "give more time" then turns into "Something by Later Date (tm)", which is basically the same problem, just with more money (and thus stakes) involved.

I hoped to see an exploration into how to creatively solve for "can we deliver value" + "we have this budget and time" constraints.
Given that people move jobs quickly anyway, it is not clear that value matters. Rather, I need the appearance of value by X and if that is done by mortgaging the future, well, that is the next guy's problem.
https://pubsonline.informs.org/doi/abs/10.1287/ijoc.4.2.146

Constant time feasibility check of inserts and linear time update after insert.

Of course, there are tricks that support multiple simultaneous inserts and tricks that minimize the update of the data structure after insert.

But, if you want to do 2-opt (k-opt) with time windows, then you have to work out the details because no one in academia did.
I think apple silicon will work with AMD in the future and AMD will be the GPU supplier for high-end workstations as the Mac Pro and iMac (in some configurations). As impressive as the M1 being on-par or even better as Intel CPUs, I don't think Apple can pull the same with a GPU (developing and relesing a high-end GPU that is on-par with AMD/Nvidia performance wise).
While I think they could achieve that given their engineering resources, I don't see a ROI for them on that matter. They will focus on low- and mid-range, power-efficient iGPUs to support everyday usage, but the high-end segment is not important for their overall business. The market for Mac Pro is just not big enough in their overall lineup to compete with AMD on that matter - as they will not ever become a GPU supplier to Windows machines and always focus only on the Mac.
My record for one I've actually solved is like 6 months working on a problem (on and off). I'm actually more of a physicist than a mathematician (although my work is all about proving theorems and lemmas), so the objects I work with tend to be at least possible to play around numerically with for special cases.
That may apply where patents are concerned.

For copyright, there really is no need to be as paranoid. It doesn’t protect some generic logic, only the particular rendition of it.
As a game developer who learned things the hard way I'm happy there are so many great tools now which let people express themselves and share in the joy of making your own digital experiences.

The lower the barrier of entry, the more people have the opportunity to try their hand at game development. That means more developers providing more exciting ideas! It might mean there's more low-effort stuff out there, but there's always been tons of low-effort stuff out there, anyway.

People are often complaining about a lot of poor quality stuff on the market. I don't actively seek it out and I rarely come across it. So, why would it bother me?
Because this is the biggest capitalistic entity in history, and the only risk it faces is governmental actions. When it comes to governmental action against privacy, that means undermining encryption for everyone.
I changed from extreme reluctance to engaging with strangers to the opposite, talking freely and easily to anyone, from age about 40.

It changed my life, for the richer.

It took a while to learn how.

Most of my learning was unlearning - how to not feel awkward; how to not sound inquisitorial, superior or annoying, how to not be frightening.

And some learning was constructive - how to talk about small stuff. I’d avoided that because I thought of myself as more consequential and intellectual than that, but I was wrong.

In fact, talking about that bus, or that billboard, or that dog’s haircut, or that man’s coat, is key. People respond by answering in kind - friendly, upbeat and curious. They can do this precisely because the topics aren’t personal or weighty, but there’s enough content in expressing a sentiment or a point of view for them to make a small personal statement.

Once a conversation with a stranger is started with the right energy, it’s as emotionally satisfying and meaningful as a casual conversation with a colleague or friend.
Language Server Protocol Support for Emacs
Conceptually, it's useful to think of a house as an investment good that produces housing services (shelter, living space, etc.). These housing services are what you get when you rent a house. If you're a home owner, you don't pay rent explicitly, but it really is as if you had rented out your house to yourself and you were paying rent to yourself. Therefore the cost of housing services is best estimated through rent prices.

The other thing is the cost of the house itself, not the housing services. This includes the purchasing cost and the cost of repairs that you make periodically. The repairs are not a problem but the purchasing cost would need to be spread over the useful life of the house. If the house is bought on credit then the buyer will also incur funding costs (i.e. in the form of interest payments), but these can't be considered costs that are related to housing. They are separate. It's like if you buy a car on credit you'll pay more than if you paid for it with your savings, but that doesn't mean the car is more expensive.

CPI includes housing services and repairs. As far as I know, it doesn't include houses, probably because they're considered an investment good, while CPI is concerned with consumer goods. At any rate, mortgage payments are not a good estimate of how much houses cost. The reasons are interest, which is a different cost, and the fact that principal payments are arbitrary as they vary depending on things like mortgage length, and so on.

Anyway, I understand that many people feel strongly about CPI and inflation measurements, but while cost accounting is not rocket science it's not completely straightforward either, and most of the time criticism of CPI by layman people turns out to be misguided.
Scarlett Johansson’s Black Widow lawsuit has unearthed a problem with streaming