skysight-inc/HackerNews huggingface dataset:
This isn’t a neutral network classifier, it’s an algorithm that searches against existing CSAM photos.

https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
This is a system for just one jurisdiction though? Is there talk about doing this outside the US? For multiple jurisdictions you’d need different sets of known hashes.
how is this not a violation of the 4th amendment if Apple is performing this search on behalf of a government entity?
> A picture of child abuse is child abuse in that the abuse of a child was necessary to take the picture in the first place.

People have made all of these points before, but I still wonder what the legal and/or practical basis of the law is when the pictures or videos are entirely synthetic.

On another note, I wonder how much of this kind of Apple(tm) auto-surveillance magic has made it into the MacOS.
Hasn’t Google been parsing Google Photos images, email content, and pretty much everything else since forever? Do you just stay off of smartphones and cloud platforms entirely?
> Moving it on device will show 0 improvement to the original goal, while opening a door that quite frankly I never expected Apple to be the one to open (I would have bet on Microsoft).

The CSAM scan is only for photos that are to be uploaded to iCloud Photos. Turning off iCloud Photos will disable this.
In which case it would be wise to be extremely conservative in your estimation, taking initial engineering estimates and padding them further, not whittling them down. Because a baby takes nine months and can't be safely rushed out in six no matter the acts of congress, presidential edicts, and demands from the grand poobah.

If you fix the dates, something else has to give. If time, cost, and scope are all fixed you're going to fail, almost guaranteed. There are always unknowns and in this scenario the only thing you've allowed to flex is quality.

I'm not saying you can't come in on time and under budget. This article spells out the dysfunctional dynamic of date pressure. By creating this much pressure from the beginning, you create an environment when corners are cut from the beginning and the problem compounds over time. The pressure-cooker mindset of management kills the quality of the project, even if the estimates did turn out to be reasonable.
Dream weaver was a WYSIWYG website builder that offered the ability to edit the “raw” HTML. If you want mockups/wireframes/etc., there’s Adobe XD.

Tangent: who names these things? XD? Where did that come from? It looks like a laughing emoticon…
It's heard this referred to as "it's a 'as it turns out'"
Like someone already responded. How much is actually going to charity. Helping out your local church more than it needs to function does not and should not count as charity.
- Learning from others around me who are smarter/more experienced. This is maybe the number one thing.

- Switching jobs when things get boring or I feel like I am not growing in the ways that I want to be. It's eye opening to begin a new job and feel like a noob again.

- Building side projects. Reading and following tutorials are good and all, but there comes a point where you just gotta build something to really grow.

- Becoming part of a community, because it motivates me to learn and improve and also to try to share what I learn with others. I think this happens best at a small, local level. I don't get much out of attending the big conferences (other than it's usually fun).

- Having a blog, or just someplace to keep track of the interesting things you learn about. Can be a good marketing tool for yourself as well.

- Keeping a high level of communication going with your colleagues about what you're working on. I feel like this has earned me promotions.
Is this a joke? Do nothing, keep living and producing. Is it too hard to live sustainably? Oh that's okay, nobody is perfect, surely everything will go fine :)

You feeling bad while reading these articles is smallest of our problems.
Trying the demo, the page is too wide for my phone, resulting in horizontal scrolling (Safari)
I enjoy it, the safety guarantees let me sleep at night, and the package APIs don’t constantly churn.

The only thing that I usually can’t find a library for is API clients for various services. Most companies don’t make a haskell client. In these cases I have to make HTTP calls to their API myself.
Well, about that ...

https://blogs.bmj.com/bmj/2021/07/05/time-to-assume-that-hea...

"Richard Smith was ... for many years the chair of the Cochrane Library Oversight Committee, and a member of the board of the UK Research Integrity Office."

"Stephen Lock, my predecessor as editor of The BMJ, became worried about research fraud in the 1980s, but people thought his concerns eccentric. Research authorities insisted that fraud was rare, didn’t matter because science was self-correcting, and that no patients had suffered because of scientific fraud. All those reasons for not taking research fraud seriously have proved to be false, and, 40 years on from Lock’s concerns, we are realising that the problem is huge, the system encourages fraud, and we have no adequate way to respond. It may be time to move from assuming that research has been honestly conducted and reported to assuming it to be untrustworthy until there is some evidence to the contrary."

So a former Chair of the Cochrane Library Oversight Committee thinks medical research is filled with fraud. How reliable can it be really?
Comments like this add absolutely nothing to the discussion. You are ‘pretty sure’ someone predicted something similar some time?

What value does that bring to the table?
I would say a lot of this confusion comes from the word engineer. Building software is not like building a bridge. You can't design it first and then go and build it.

So I would say engineer is a poor term, but also the only one we've got for now.
Postico is the only application I miss from the days when I developed exclusively on the mac.

To be fair, I use (and like) TablePlus, but it's no Postico...
US employers added 943,000 jobs in July, signaling a strong labor market
Detailed documentation after finishing... I find bugs and areas for optimisation when I'm forced to articulate decisions behind code months after writing it.
Speaking of health, I can tell you that for a long time I was overweight. Everybody was telling me to go to the gym, but for a big person it's hard to do both physically and mentally, so I decided to change my diet. Also, my friend told me about the supplements that worked for him, so I bought https://www.biox4nucific.com/ and I really started losing weight. It wasn't fast, but I was glad to see any result at all, and now I feel much better.
Using THC Hydra to Brute Force Login Forms
We're still doing cold war propaganda 30 years later?
My Life with Linux: A Retrospective
What I am saying is that people have been told pretty clearly that FB would sell all your data to anyone, use it to target people with misinformation that clearly influence election outcomes, and lie about it everywhere. The dent that these revelations had on FB’s userbase is peanuts.

Same thing with whatsapp.

Apple’s saying that they’ll use a robot to check that their users arent paedophiles is clearly not going to change anything. Use your energy elsewhere...
To be fair, it’s the security team’s idiotic position on IMAP that prompted the parent commenter to find a workaround.

It’s like how having super draconian password reset and complexity requirements ends up being less secure because users will start writing their impossible-to-remember passwords on post-it notes.
Get an app for your MVP at a flat rate
The audience is an interested one, capable of reading at or above college level. The paragraphs are coherent and well structured. Not everything is a pop science article written for middle school level readers.
Exec PutMsg / GetMsg is rather foundational. If they changed it, everything would break. With Amiga OS, if you wrote your apps to API spec, compatibility was rarely broken. I remember those big "Rom Kernel Reference Manual" books! I think I still have one collecting dust, at my parents house.

But yeah, if you did weird things like mucking with hardware registers directly or used undocumented fields of a struct, then yeah, you could have a problem.
Fracking also increases the supply and therefore reduces the price of natural gas, which leads to more gas consumption and less investment in greener alternatives. Coupled with the ecological hazards that fracking itself imposes, I don't see how we can consider it a net positive.
Can’t we use the same method to generate adversarial inputs to iteratively train multiple model? After each model is generated we expand the data set by using the prior model to generate the adversarial inputs and then train a classifier maximizes the performance on both the inputs and adversarial inputs.

Now we just use n models in production and use voting for produce the label.

As n gets large, does this become robust to adversarial inputs?
Basement because I have more room, can channel solar/wind energy into low-power LED grow lights when the skies may be dark. Or utilize generators to power 100w lamps. It's also out of sight so no fear of neighbors trying to ransack my garden. I don't have a large yard for a greenhouse, but I do have 1,000sqft of unfinished basement.
Sorry for not clarifying earlier. This was built to be a web-first clone only. It does not work on mobile.
Author here, thanks for posting.

Here's some more color on the reflection on comments, straight from the Linux Kernel documentation that capture my intention much better:

"Comments are good, but there is also a danger of over-commenting. NEVER try to explain HOW your code works in a comment: it’s much better to write the code so that the working is obvious, and it’s a waste of time to explain badly written code.

Generally, you want your comments to tell WHAT your code does, not HOW. Also, try to avoid putting comments inside a function body: if the function is so complex that you need to separately comment parts of it, you should probably go back to chapter 6 for a while. You can make small comments to note or warn about something particularly clever (or ugly), but try to avoid excess. Instead, put the comments at the head of the function, telling people what it does, and possibly WHY it does it."[0]

[0] https://www.kernel.org/doc/html/v4.10/process/coding-style.h...
Microsoft and Google have been doing that in their online services for ages, but not on your personal devices.
Jennifer Aniston to cut unvaccinated people out of her life
https://photos.app.goo.gl/kBoR9MCsGwfHG6NB6

One week given west coast wildfires - perhaps 1-2 months in regular NYC air.

Obviously, the healthier, happier and more financially efficient solution is to not pollute the air in the first place. This is wishful thinking given west coast wildfires.

Scaremongering aside, it's obvious that air quality matters enough to health, to be worth addressing. Heck, if you're buying organic milk or filtered water, then filter your air.

Filtration doesn't need to be expensive or fancy - a 20" box fan with 20" filters works great, no duct tape required - when you turn it on, the filter "sticks." I've proven it's effective with an air particle meter.

https://photos.app.goo.gl/YgUnGbNzpYfNW2yr5
You are right that some specific features on iCloud do have end-to-end encryption (only those listed under "End-to-end encrypted data" on this page).

But the majority of users' sensitive data is not included in that set of features. For example the Photos (what's being affected here), Drive, and Backup features don't use it. Note that any encryption keys backed up using iCloud Backup are therefore effectively not end-to-end protected either.

Somewhat misleadingly, this page indicates those features use encryption both "in transit" and "at rest", but Apple controls the encryption keys in those cases, so they are actually not end-to-end encrypted.

Here is a report indicating that scanning is already happening on the server side: https://nakedsecurity.sophos.com/2020/01/09/apples-scanning-...

Here is a report about how the FBI specifically pressured them against adding end-to-end encryption to iCloud backups: https://www.reuters.com/article/us-apple-fbi-icloud-exclusiv...
Even just putting food in the oven, without using the cooktop or oil, will cause VOCs to spike.
“Bury your head in the sand like we did! Don’t worry, your privilege will save you!”

Delete your post, mate.

The only thing most people talking about climate are selling is the idea that we should keep the planet nicer than we’ve been keeping it. With the climate situation being what it is, only Big Money is telling anyone to “ignore it” and saying that just tells us what side you’re on.

> As a young person who will get older you will have the chance to buy a home

I bet Social Security will be there for us too, huh?

This is a dangerous lie. i can’t tell if it’s just utterly useless, or if it’s actually a psyop designed to sow complacency in the populace.

Olds and the rich have been using this language to manipulate the rest of us for years. It’s finally coming to light that no, it’s not true, and it was never going to be true for us.

We have the data. Home ownership is only getting further out of reach for most of us.

> everyone did before

And this is where we see that your idea of “everyone” is limited to land owners (now where have I heard land ownership and personhood equivocated before…?).

That kind of thinking will only make more of the mess that we have to clean up.
Tree-planting: Why are large investment firms buying Welsh farms?
They already do. Peak population growth rate (i.e. new humans relative to existing ones per year) was over 50 years ago and it was decreasing most of the time since then. We now only suffer from the fact that the base number is now much larger (leading to higher absolute growth numbers).

https://en.wikipedia.org/wiki/Population_growth#/media/File:...
Out of curiosity, how does Samsung Knox handle privacy?
Shine a bright light through the envelope, you Should be able to make out some letters. Maybe make a neural network for reading these letters and putting them together into sentences.
It would have been the AMOC, which is the most significant component of the overturning circulation system in the global ocean, and the one whose weakening would have a clearest and most immediate impact.

Unfortunately, predicting its behaviour is difficult, for a variety of reasons. However, that doesn't mean such predictions should not be made, nor that alarm bells shouldn't be rung when it appears that things might be going awry, especially given the AMOC's global significance. Surely we can agree that insisting on only considering dangers of which we are entirely certain is a foolish approach to risk management?
for 4chan maybe that's true but I'm not sure what about some public whatsapp group? I have been part of few public hiking/travelling group and even though I have most of them muted (to avoid distraction) all pictures end up in my Photos 'Recent' Album.
Thanks for reporting it!
The gulf stream does a huge amount to warm Europe relative to those latitudes in north America or Asia. If those currents shift or weaken it will result in much colder climate in Europe, though the rest of the globe will continue warming and is warming now (what you're observing).
I don't mean native Americans - I mean the residents of any country who also hold some other passport/citizenship.

> By your standard, it should be wrong for people to have one at all

By "having a passport" I mean eligibility for a passport aka citizenship, not literally whether you've applied for one. Equal opportunity should exist - whether it is taken advantage or not is another matter.

> It's a matter of a person's choosing to meet the requirements to obtain one or not

How does one choose hereditary requirements? Or capital requirements (aka golden pass)?

> your argument was one escaping to another jurisdiction

Maybe there are similar issues between state jurisdictions, but I talked specifically of national/country jurisdictions which aren't really similar; especially wrt tax.

In any case, I think the point is moot since all US citizens are (equally) fairly free to cross state lines. The point isn't that it's unfair to move to another jurisdiction with another as fall-back, but that not all are equally able to do this - which is true of states.
I've recently bought a pinephone, I'll be glad to get out of the apple eco-systemm
Sounds like a prisoner's dilemma, where from an individual perspective it makes sense to make a certain decision, but the same holds true from anyone else's perspective, and when everyone does it you end up in a worse-off situation than if everyone had cooperated.
Posting prices online is infeasible because the system has been structured such that the price is different for everyone, depending not only on which health insurance company they use, if any, but also on which of that particular company's plans they have. And it's ever-shifting. Maintaining an online price sheet that is even accurate, let alone navigable, would only be feasible for large corporate entities, so expecting something like that to happen would only further advantage the oligarchy and undermine what remains of the free market in this sector.

But what you can absolutely do is call and ask. Assuming you have the time to do so, of course. Urgent care does have a distressing tendency to be urgent.

And it is wise to do so when you can. For a really pedestrian example, it's worth asking your pharmacist about the retail price of a drug before paying. If the retail price is lower than your prescription plan's copay - something that happens quite often - then there's no sense putting it on your insurance. And no, I don't think it's the pharmacist's job to keep track of that. The elephant in the room in this discussion is that American culture already does way too much shitting on service industry workers. We need less of that, not more.
There is nothing wrong with working to dead lines estimating and planing development and releasing software thats good enough not perfect.

The problem is when people start trying to change the plan half way through execution, non tech people will constantly try to do this because they are clueless its the project leads job to tell them no.

When your manager asks you "if anything can be done to pull those dates in." you say "no" problem solved, until your line manager goes to the big boss who asks the same thing and do you know what your answer is? Thats right its "no". When the big boss says you have to do something then tell him "I cant magic more time you need to cut features", big boss and manager will argue their point but unless you can do magic your point remains the same.

I know its scary being blunt with your big boss but as a senior developer thats your job.
Yep..... I'm not endorsing them per se, I'm just saying work is going on to get them to work on pmOS (and Mobian).
Indeed. The "10 years" has always been "we have ten years to stave off a collapse that will then play out over the next hundred or so years."

Shellenberger's new book Apocalypse Never has been a comforting read in this regard. Despite the provocative title, he's a serious environmentalist and does not argue for "no action" but rather that many of the actions being pursued by NGOs and groups like XR are very short term oriented and not thinking about the big picture of second order effects. In particular, he argues that the key to saving the environment lies in doing things like deploying natural gas and nuclear power into Africa and South America to develop those economies as quickly as possible— that this is the route to stemming coal usage and hitting the world population cap sooner rather than later, and those are the two most important factors when it comes to ultimately controlling emissions.
Humans as a species have had the best track record for acting in a logical fashion on earth

Which doesn't say much. Most complex organisms on Earth go extinct.
PornHub recently changed their policies after an article appeared that pointed out that many underaged boys were uploading videos of themselves masturbating to the site. I forget the numbers, but it was quite substantial. Of course the boys in question claimed they were of age, although they apparently were not.

Were the uploads self-abuse? Was PornHub subsequently spreading child abuse? Did everyone who saw any of those videos abuse the child who uploaded the videos?

The legal answer is, for the most part, yes on all counts. But should an OS report users for clicking on PornHub recommended videos?

It's reasonable to assume this happens on most porn sites that allow user content uploads.

It seems such scanners should be employed by sites prone to this kind of illegal use, and not be part of a global all-devices-on-hand dragnet where there is so much room for error.
Because it was leaked, and the press release was damage control.
On the whole I've found that the tooling around postgres/postgis is always slightly better. Most other people publising scripts and tools for doing various types of analysis also seem to use postgres/postgis so it's more likely to be able to borrow someone else's good idea. Postgres/PostGIS has a whole bunch of features and commands that sqlite/spatialite don't have and even if don't think I'll need them it's always nice to have the option.

And since installing and setting up Postges on windows and mac is just a single download and double-click these days, there really isn't a good reason not to do so.
> users don't actually seem to mind using terrible software so long as it solves the problem they face better than not using it

This is true and, once you get over the myopic code focus that most of us shared in university, incredibly self-evident. "Users prefer to use the thing that solves their problem better than not using the thing." I mean... yes?

The real takeaway is that "software quality" means something very different to users than it does to developers. Developers want efficient, ergonomic libraries, aesthetically pleasing logical structures, and elegant software designs. That's what we call "quality". Users just want their damn problem solved, and if they can GET software like that which solves that problem, then you bet they'll buy it, but if they can't then anything which actually solves their problem is far better than doing it by hand.

This was the first big lesson I learned out of uni and it's stuck with me ever since. If you're interested in making commercial software, you're not there to solve the problems YOU think are important, you're there to solve the problems YOUR CUSTOMERS think are important.
Umm this guy should tread lightly. Whats up with the prodding? This is some straight up blackhat hacking.
Yes, probably? Does not seem like such a big deal to think the legal system is biased against men? It also does not necessarily mean that means too much.
Thanks for the article. As per the article, the main reasons for fatigue is the dry eyes, headache, sensitivity to light. I deal with dry eyes by doing the 20-20-20 rule and the sensitivity to light by trying to get the better sleep.
Only after BWX landed - before that, you had to ensure all accesses were 4 or 8 bytes, and aligned on 4 byte boundary, then do appropriate bitmasking and shifting.
leaving behind the generally toxic startup small business universe for less glamorous government work.
Have they? The whitepaper made it sound like the encrypted security voucher is created from the database of known cp on the device at the time the image is uploaded, and the only way for Apple to decrypt something is if it matched something in that database.

It did not sound like they could retroactively add additional hashes and decrypt something that already was uploaded. They could theoretically add something to the list of hashes and catch future uploads of it but my understanding was they cannot do this for stuff that has already been stored.
iCloud Photos are not end-to-end encrypted in the first place.