skysight-inc/HackerNews huggingface dataset:
I think Moxie came up with the end-to-end encryption technology that WhatsApp and Signal uses.

It is great.

But it didn't prevent Facebook from trying to abuse WhatsApp users in every conceivable other way including some rather innovative ones as seen recently.

Also it didn't prevent Signal from releasing a desktop client with a really nasty XSS bug and the phone client hasn't exactly been without faults either.

You and Moxie are both much smarter than me but I foresaw and maybe even predicted (possibly so early it is under another handle) some of Facebooks actions while everyone else was just talking about how E2E-encryption was the big difference.

This feels more or less the same: the intent is honorable, the core code is clever and almost unbreakable - but you cannot really trust all of the actors you need to trust for the system to work.

We cannot read WhatsApp messages in transit. And, as specified this system sounds good. But WhatsApp happily uploads unencrypted copies to Google Cloud and/or iCloud without your consent if another participant enable backups, and I'm fairly sure we'll see this system containing huge opportunities for abuse by power hungry regimes as well as one or two nasty bugs that has the possibility to utterly destroy a few innocent persons lives.
Exactly, if some whistleblower is going leak a picture of some classified documents, the intelligence agency could simply upload a picture of the documents to the database. And bam, the journalist is arrested.

Moreover, if the database doesn't store actual images and instead only the perceptual hashes, it would be impossible to audit, even if the auditor has access to the database.

All the auditor would see is a bunch of hashes, they wouldn't be able to tell which hash actually represents CP and which hashes represent pictures of confidential documents.
Why do you think this will give Godot more attention and not Unreal?
Mostly because the gap in international political reach and leverage, respective economic situations and means are too huge for there to be a point.

Also because I suspect the population here to likely be mostly from Western countries. Cf dang’s comment[1] stating that 50% of the userbase is from the US

[1]: https://news.ycombinator.com/item?id=25787770
In "Cities: Skylines" you work with taxes and land use. It sure would be cool if there was a medieval version of it.
I agree it's not a violation of the fourth amendment (so long as Apple is not being forced to do this by the government), which I why I said "the principle behind the fourth amendment" instead.
"Lots" is very, very subjective. What country do you live in? I would say (as an appreciative donor/patron myself) there has been very, very little in the way of direct donations to the founder himself. This is no "get rich quick" scheme. Frankly I don't know of any programming language that's ever been such a quickie in this regard.
And how often to noble causes stay noble?
This is exactly the first thing I went for. I cannot believe how immensely gratifying it is to hear that sound once again.
Then you’re refuting the basic premise of the article, which is that the ultra wealthy want to avoid taxes.

Why else would Eric Schmidt want to become a citizen of Cyprus, which then also allows him to live elsewhere in the EU? It’s certainly isn’t to end up laying more in taxes than he would in the US.
Show HN thread about this site from a few months ago, from the creator https://news.ycombinator.com/item?id=26900533
That's easy to say as an experienced employee, but when you're a new hire and you have no clue what's going on around you because there are no conversations to accidentally overhear, no one sitting 3 feet away to ask random questions of, and no way to interpret your boss's apathy about your existence...

Plus reading here about certain companies' interest in pruning people ruthlessly...

I could see why morale among new hires would be problematic in this rather chaotic time.
MySQL is also licensed under the GNU GPL.
The additional information is good reason for this post to also be on the front page. It is not a reason to flag the original and bury that discussion.
So you are asserting it is impossible for a virus to increase its fatality rate through mutation within the same species? That there has to be a zoonotic transfer for this to be possible? Where's your evidence? Because this must mean that contrary to the prevailing belief across the scientific community that Spanish Flu did exactly that (1), there must have been 2 Zoonotic events transfer events between the first and second wave.

You're looking at a Nobel Prize here if you're right, take your best shot sport!

1. https://www.livescience.com/1918-flu-variant-deadlier-later-...
To everyone angry at this change, please take a moment to directly let Apple know how you feel. https://www.apple.com/feedback/
I think only smallpox has been eradicated. Polio is in it's way out, but it has been in it's way out for a long time, and I think we still need like 5 or 10 years to eradicate Polio. [1]

In spite total annihilation of covid-19 would be nice, really nice [2], I expect that the more deadly variants will be destroyed, but the very mild variants will continue to fly under the radar like other coronavirus. Perhaps we will add a yearly vaccine/booster for the very young and very old, like with the flu.

[1] I hope to see it. Let's organize a big party that day.

[2] https://xkcd.com/2448/
> A good start is to try easier problems that will hopefully provide some insight into the hard problem. I.e. if you have some theorem you want to prove about all matrices of a certain form then do it for 2x2 and 3x3 matrices first or something.

Other times, it helps to go the other way. If you have a load of numbers to work with and can't see a pattern, replace them with variables; there will probably be more patterns in your derivation if you do that, and you'll be able to simplify more easily.
Yes. Find the one's producing it and use proper infiltration tactics.

Empower children to report abusers and protect them when they do.
Another Nix Success Story
Sorry for the confusion — I was referring to just the CSAM hash feature that uploads results to iCloud.

There is also scanning for nudity in the Messages app, but those scans happen on-device and the photos stay on-device even if nudity is detected.
There's a lot of discussion about "should most devs be expected to know this off the top of their head these days?" that I think misses the point entirely.

A much more relevant question is: when you are working on code that eventually needs a "give me the first 42 bits of a 64-bit value" function, do you: (a) do some basic research into binary operators since you're at least aware that binary operations are a thing, or (b) just whip up the first loop implementation that comes to mind?

If you're verifying your code anyway - which I sure hope you are when writing a delightful loop like the one in the linked article - it won't take you long to check out what the bitwise operators do.
No. Whatever minimal impact this will actually have does not justify the vastly oversized means that they will be accomplished with.

I would also not celebrate random warrantless house searches even if it managed to stop a couple of terrorists attacks in a decade.
Lol there is no way they will be scanning for just one type of thing. That would be a waste of computation. They will tag everything and decide if they want to use it later.

Scary times; for exactly the reasons you've called out.
Goodness, I hope not!

I run GNU/Linux, and use encryption. Any mandatory technology which could scan my hard drive for child porn could scan it for:

- Antigovernment subversive materials

- Embarrassing things to blackmail me with

- Non-PC communications

- Right-wing/left-wing political materials

- And so on

I'd like to continue to have a computer I control, and I'd like my child to grow up with that freedom too. I'm much more worried about risks to my child's freedom and privacy than the (exceptionally rare but frightening) chance of exploitation for child pornography.

As a footnote, many algorithms able to correctly identify child porn would also be able to generate it.

https://en.wikipedia.org/wiki/Deepfake_pornography#DeepNude
They're kids . . .
This iMessage feature is good, it's the hashing all of your photos for comparison against CSAM hashes that's the problem. How do you know if you've tripped the wire? What about false positives?

Given how free US Law enforcement is with violence, any potential threat of involvement with them makes me very very nervous.

Going to need to reconsider hosting my photos with Apple devices.
> In most Western countries, being a resident is associated with healthcare and pension

Then that's the difference.

American citizens can collect Social Security while residing in foreign countries. Same with VA benefits.
Prior to this change, they couldn't. Now they could.

It's much easier to change the policy than to add a new mechanism. Governments, including the US government have previously attempted to force Apple to break into users' devices, and often apply gag orders to such attempts.

Now they could, and that's enough for me to be unwilling to keep sensitive information on an iOS device.
If they outright lie about their device spying on you, the repercussions are much worse than them openly spying on you.
Anyone think they can explain this in the source code?

function ziggurat() {
return ((Math.random() + Math.random() + Math.random() + Math.random() + Math.random() + Math.random()) - 3) / 3;
}

https://github.com/vikrum/kidpix/blob/9385acf5b3f57cdc8c5b3f...
Statistics showing more young people hospitalised with C19 not what they seem
Thanks for pointing that out and doing the math.

I did some digging, here is the paper outlining the methods and data sources for the numbers on the page you linked to [1]. That paper cites two other papers used to estimate the asymptomatic proportion [2][3].

Here is a more recent systematic review [4], which estimates that at least 33% of infections are asymptomatic.

And another recent paper which estimates the lower bound for asymptomatic proportion (AP) to be 37%, with an upper bound of 67% [5]. "The estimated AP varied with age, from 74% (95% CI 65–90%) for < 20 years, to 61% (95% CI 57–65%) for the 50–59 years age-group." [5]

[1] Estimated Incidence of Coronavirus Disease 2019 (COVID-19) Illness and Hospitalization—United States, February–September 2020
https://academic.oup.com/cid/article/72/12/e1010/6000389

[2] Estimating the extent of asymptomatic COVID-19 and its potential for community transmission: Systematic review and meta-analysis
https://jammi.utpjournals.press/doi/pdf/10.3138/jammi-2020-0...

[3] Age-dependent effects in the transmission and control of COVID-19 epidemics
https://www.nature.com/articles/s41591-020-0962-9

[4] The Proportion of SARS-CoV-2 Infections That Are Asymptomatic
https://www.acpjournals.org/doi/full/10.7326/M20-6976

[5] Estimating the asymptomatic proportion of SARS-CoV-2 infection in the general population: Analysis of nationwide serosurvey data in the Netherlands
https://link.springer.com/article/10.1007/s10654-021-00768-y
(Full transparency: I'm CTO/cofounder of Oso, a series A startup building an open source framework for authorization)

Super interesting how many companies are building authorization systems based on Zanzibar suddenly! This is a bit of a shameless plug, but I just wrote a blog post earlier today talking through how to build Zanzibar from scratch in ~150 lines of code: https://news.ycombinator.com/item?id=28076549

Not many people talk about how Zanzibar requires you re-architect your application around authorization when you really don't need to do that at all. Any sufficiently powerful authorization framework can handle the same flexibility. If not more, since most Zanzibar implementations can't handle simple attribute-based controls (e.g. anyone can read a document if its public). Which means you'll end up implementing a bunch of authorization logic in your app anyway.

---

Edit to add: I realise in hindsight I got a bit too absorbed in thinking about the Zanzibar part to say congrats on the launch! It's awesome to see the space heating up, and love to see more focus on the developer experience :)
I’m personally on the hybrid boat, but one thing I’m worried about is whether full remote just leads to more outsourcing. Out sourcing has a lot of issues, but the actual differences between an onsite employee versus a remote employee in Prague are bigger than a remote employee in Montana versus Prague. And the perceived difference to a cfo may be even lower, so maybe they’ll go with wherever is cheaper.

Are these concerns of being careful of what we wish for too premature?
It is great that you can switch on any page in the documentation to the documentation of another release of PostgreSQL. That is extremely helpful if you are working with different versions.
You'd have to be more specific, but yeah, amazing, isn't it. God forbid you share something real, we don't do that now. All about that money and happy people probably pay more. Very good, greed is a big part of any downfall.

Not like I was complaining much, I had my own subreddit with exactly one post lol.

It's fine though, such a society is bound to go to shit soon enough. If I live, I will buy drugs illegally, I will forge papers, I will import and sell drugs and more, and then I will do whatever I can to help bring this motherfucker down.

Come on, ban me here, too. I'm fucking done with this circus.
This is also climate dependent, though. Most of CT, VT, MA, NY, PA, NH, ME are essentially tactless forests separated by small meadows. Where I grew up in CT, if we did not prune the forest, it would encroach about 5-10ft/year into our lawns. if you truly didn't mow, it might have been twice or three times that.

Also when I grew up we'd make burn piles once a year to burn all the deadwood that came down around the property. It was often impossible to light those piles of wood without kerosene since everything was so wet.

I think a lot of the forest living is inspired by places like VT and CT where building in a forest is fine and safe. In the middle of a pine forest in northern CA is a totally different ecosystem and can't be treated the same.
The U.S.A.'s weak privacy protections aren't the entire world, you know.

In the E.U., and other places, companies are definitely held to stricter standards as to what extent they can search a private device, even if they claim the o.s. is only a service.
First off, I don’t think this is some evil plan to kill our privacy. I think this project is done with good intentions, if nothing else.

However I think this is an interesting question: how does Apple know that the hashes they’re supplied match CSAM, and not, say, anti-government material? How would they know if the people they got hashes from started supplying anti-government hashes? Apple will only be receiving the hashes here - by design, even they won’t have access to the underlying content to verify what the hashes are for.
Don't spy on my device. I literally don't care if that doesn't help some pet cause.
It's not just your own GPS, they would log the driver car GPS too, so it's, on average, 4 coordinates per ride.
What's really remarkable about this as everyone argues whether it's good for a "software engineer" to have even the most basic understanding of how a computer works is the magnitude of extra work being done here as the computer sees it versus what the coder sees.

The coder sees one version being one line with an operator they don't know and the other version being 10 lines of code that look a little dense but it's all stuff they know.

The computer sees one instruction versus thousands or maybe tens of thousands.

Now is it silly to check if a multiplication is by 2 and then use shifts if you're writing a high level language and it's a one off/non-critical operation? Yes it is. But if you're decoding/encoding binary data as a lot of people have conjectured then you're probably doing a lot of it and this really matters.
Why is it a liability? It’s how every other commercially licensed engine was built in the past. Unity is actually unusual in that respect.

See id, valve, unreal, crytek.
> For added fun, a Sun Type 5 keyboard converted to USB

We must have _very_ different definitions of fun. The pile of mush that was the Type 5 is up pretty high on my list of "never again" keyboards. I was a full on Sun fanboy, but even I was the first to admit that their input devices could be pretty awful.
macOS.

Can you give me a hint on how to do the async LSP thing then? I never was actually interested in becoming a master in Emacs. ¯\_(ツ)_/¯
Yeah, not everybody has to work with networks or cryptography, but I would've imagined that people at least read libraries that they use (to figure out what's going on under the hood) and inspect/debug low-level stuff from time to time.
Read the article again. The on device scanning makes hashes on the local device
They scan photos in the cloud now. And do you think Apple will announce and let users opt out of client side scanning changes?
Slippery slope is a shockingly predictive heuristic.
Is the blurred-photo feature available to adults as well? I can imagine that some people who get unsolicited photos sent to them might want it.

Also, it looks like the blurring feature is limited to the Messages app. That's pretty easy to work around.
Yeah, we just did this this week to work around a bug in the URP package, it does work.
Obsolete as in, postgres is free/open/libre and as good or better than other options for 95% of projects, and growing. It's a similar situation to the old adage about "skating to where the puck is going," rather than where it is now.

I don't use Web DB UIs, but I like dbeaver and pgcli a lot. You may find them useful.
No. That's the whole point of this endeavor.

It's a privacy-preserving framework to allow the government to monitor the contents of iCloud directly, with few, if any, Apple employees ever having to get their hands dirty.

Apple just handles a target database that gets distributed to phones, and then compiles a list of users whose data had hits against the target database.

Apple employees don't have to dirty their hands with what, perhaps, is in that target database. Not their problem!
Jobs' engineering team did it when compared with other libs at the time with NextStep. I know devs who claimed they were 3x (or more) more productive than their Windows and other Unix counterparts during that time. Rails arguably brought a similar revolution in the webdev world.
I'll take an unpopular stance. This is the least bad way a backdoor scan could be implemented.

At the very least, this makes retroactive scans of a newly banned content difficult without explicit deployment by Apple, and explicit software update from a user. In Western countries, this friction is enough to ensure people will be able to file suit in courts to block the government.

In authoritarian governments, it's not, but then, nothing is.
I'm not sure I really follow this (Signal Protocol is Trevor and Moxie; in particular, I think the triple-DH AKE is Trevor's invention) --- but I'm just here to point out the interesting cryptography angle. I wouldn't touch the policy argument here with a 10 foot pole.
Play with me for a second...What if sustainability creates wealth? After all—once you are born into a wealthy family—the joke is on you if "you lose it".
This is all a few months after touting themselves as a company focused on privacy. Decentralization is the only way to truly know you have privacy today I suppose.
Companies that own and operate prisons in the US are big business
cat /dev/urandom and it also has CP, oh noes! quick delete everything.

Hoarding porn is kind of useless nowadays, especially without any kind of selection and categorization, but maybe someone does it because it's their hobby (or obsession), who knows.

Also if a lot of people has a bunch of porn images scraped from forums it's quite possible that eventually some of that might become illegal as the laws change here or there around the world. Should they proactively delete everything? Sure, they could. To be safe.

But this kind of safety is absolutely the bad kind on the long term. (Though of course it's possible to advocate for reform while not storing content with uncertain legality.)
Thank you. I deeply appreciate you mention our efforts. We spend quite some time and knowledge to build accurate speech recognition. Not that easy to get as much mentions as Mozilla, so we are thankful for every single one!
Is that what a cursory Google search brings up? It actually did launch in December 2020, so that's awkward.

Some HN users are staking Eth and earning on Eth 2.0 contract, which functions on the Beacon Chain.

Both chains have not been merged yet, far from vaporware so I guess last decade called and wants its arguments back.
Amazon Print On Demand | Software Development Engineer | Senior Software Development Engineer | San Luis Obispo, California ONSITE

At Print-On-Demand, we enable authors around the world to publish their books on Amazon for free, in multiple formats, in just a few minutes. We make authors content available all around the world, and when a reader places an order we print and ship the book within 48 hours.

Print-On-Demand has changed the world of publishing, where previously authors needed a large contract to get their book printed, Amazon makes this available to anyone. Our technology is driving a change in the supply-chain economics of Amazon and other make-on-demand products are following suit. Spikes in demand for books never result in lost sales, since we can print any order we receive at any time.

We work with a wide range of tech, with partners all over the world. Interested in large throughput micro-services? High traffic react and angular websites? PDF processing including optical character recognition, image generation, automated quality assurance? Royalty processing, aggregation, reporting, and payments? Order planning, routing, and optimization? We do it all, so in this role you have the opportunity to go deep in areas you are interested in while getting wide technical experience.

We work out of a small office, where Print-On-Demand was originally built as a start up, in sunny central California.

Contact: William Schaller - schallw@amazon.com, hiring manager.
Build multi-armed bandit for production in minutes (AWS and cortex.dev)
This is sort of a "if all you have is a hammer, everything looks like a nail" issue.

I have a very smart friend who doesn't code, but is a math wiz and makes a ridiculously high salary at a big tech company. She'll do things with spreadsheets that seem like a ridiculously complicated and inefficient way to do things that I could efficiently do with a couple lines of code.

But of course, she can also quickly do things with spreadsheets that would take me forever to code up. She earns that big salary.

This is like that. I guess it is unfortunate that this developer never ran into bitwise operators, but honestly, I have hardly used them in decades (I learned to code in C, now I'm mostly JavaScript and Typescript). Obviously the developer has a lot of really useful skills, and in this case was able to solve the problem, if not optimally.

I bet that developer is a lot more productive in general, than me from 25 years ago who knew bitwise operators but none of that other crazy stuff.
I hope it's hash-based and not AI. Training that NN would be one of the worst jobs I could imagine, you're adding commercial value to child porn and all the misery it entailed.
Hasn’t the concept of alphas been discredited/debunked by the originator of the concept? Or is that strictly for wolves?
That sounds nice. The tax preparation lobby in the US has so far prevented the IRS from pre-filling our tax returns.
Already you sound adversarial, like this is a battle of work cultures and you want your side to win. You say things like "return to work", as if the people who are working from home aren't already working. Did you mean your comment to come across this way?