skysight-inc/HackerNews huggingface dataset:
> with the express intent to harm their customers.

This of course gets into 'what even is harm?' since that's a very subjective way of classifying something, especially when you try to do it on behalf of others.

For CSAM you could probably assume that "everyone this code takes action against would consider doing so harmful", but _consequences in general are harmful_ and thus you could make this same argument about anything that tries to prevent crime or catch criminals instead of simply waiting for people to turn themselves in. You harm a burglar when you call for emergency services to apprehend them.

> This isn't an issue you can hold a middleground position on. Encryption doesn't only kinda-sorta work in a half-ass implementation; it doesn't work at all.

This is the exact issue that the U.S. has been entrenched by - thinking that you can't disagree with one thing someone says or does and agree with other things they say or do. You can support Apple deciding to combat CSAM. You can not support Apple for trying to do this client-sided instead of server-sided. You can also support Apple for taking steps towards bringing E2EE to iCloud Photos. You can also not support them bowing to the CCP and giving up Chinese citizens' iCloud data encryption keys to the CCP. This is a middle ground - and just because you financially support Apple by buying an iPhone or in-app purchases doesn't mean you suddenly agree with everything they do. This isn't a new phenomenon - before the internet, we just didn't have the capacity to know, in an instant, the bad parts of the people or companies we interfaced with.
To be fair, NTLM authentication being broken has nothing to do with HTTP/2.
Cool!
There are at least 2 more VQGAN + CLIP systems:

- makeai.art (also see https://news.ycombinator.com/item?id=28070149)

- https://NeuralBlender.com
Can someone who understands cryptography well enough please comment, if these hash comparisons can easily be extended to other areas such as contextual analysis of photos or texts?

For example would it be easy now to get to the hypothetical scenario where a text containing certain phrases will be flagged if some partner / regulator demands that?
Mitigating Memory-Safety Bugs with Efficient Out-of-Process Integrity Checking [pdf]
> The mRNA vaccines by now have more evidence on their record than most vaccines when the become available.

Not longitudinal evidence.

I’m not advocating hesitancy. I personally have been vaccinated. The only point I’ve argued for is not mandating vaccination. I strongly oppose mandatory medical treatment of any kind, and that has to include vaccination.

However it is also still true that these vaccines have not received approval, and although widespread use certainly may be better even in terms of lives
lost than the economic damage, that is definitely a very bad reason to mandate medical treatment.

> I would offer you a bet that the side effects are less than 1,000th of the effects a corona infection.

For most people, you may be right. I’m happy for that case to he made, openly, with data. What I object to is forcing people on the basis of that data.
If you ask my kids, they'd say yes. RecRoom on the Quest2 is a huge and fun. It's full of social spaces and games. They'd spend all day on it if we'd allow it.
Loss of quality is totally missed in the CPI. Take this example. A restaurant hires rookie waiters because they can’t pay the more experienced staff. Your meal still costs $50. But is it worth this same? Not at all.
"We are so sorry that we raided your house and blew the whole in your 2 years old baby, but the hash from one of the pictures from your 38,000 photos library, matched our CP entry. Upon further inspection, an honest mistake of an operator was discovered, where our operator instead of uploading real CP, mistakenly uploaded the picture of a clear blue sky".

https://www.aclu.org/gallery/swat-team-blew-hole-2-year-old-...

PS. On a personal note, Apple is done for me. Stick a fork in it. I was ready to upgrade after September especially since I heard touch-ID is coming back and I love my iPhone 8. But sure as hell this sad news means i8 is my last Apple device.
Science doesn’t apply to unstatusquo either? Like getting people to take vaccines that haven’t gone through long term trials? But if there are any side effects to the vaccine you’re liable unstatusquo. How about that? Prepared for that? Have the means to pay for care and long term effects? Economic damage to society?

Wonder if the vaccine makers are willing to be liable? Nope. How about the federal government? Nope. unstatusquo, are you a taker?

My brother in law died of a heart attack a day after getting the vaccine. No autopsy to see if the vaccine had anything to do with it. In fact they refused to do one. They really don’t want to know that there can be side effects. Weird that when my father died years ago, there was an autopsy.

unstatusquo is so insistent except when it matters.

How about you pay the family?
Oh good lord, how do you get that sort of layout?

(I need to learn how Emacs manages its windows; Mostly I have one Treemacs buffer open on the left, then a single large editor window with Olivetti mode on the right.)
Anatomy of a Game: The Script System
Who but the audience has control over whether or not to be convinced?

This is the part I won@t budge policywise on. I won't accept a Big-Brother-Knows-Best arrangement where some nebulous group gets to wield absolute control over what things people say get to be heard.

For every untouchable, despised viewpoint in the town square are instances beyond number of parents warning children to take that individual as an example not to be. Or instances of a future being moved to counter the movement. Life, and by extension free-speech, is risky. We know this. We've known this. We will hopefully teach our children the same so they too will know.

Ours is not the right to forge their chains. Liberty is important, hard won, and easily lost, and difficult to reclaim. Does that mean unpopular movements gain momentum? That lives may be lost? Yes. Does that mean we should abandon all semblance of commitment to Liberty, and erect the illusion of a safe world only to have it be shattered again and again in a self-reinforcing spiral whereby more and more liberty is ceded to authorities so they can deliver more safety?

I know what my answer is. What's yours?
Do they have any that they haven't fired?
Imagine someone was hired to reduce the problem of child trafficking/exploitation, and are the head of this group at the justice dept.
Lets say they have the option to work with private orgs that may have solutions that could walk a fine line between privacy and their dept goals.

I'm interested in knowing your perspective on how one should approach achieving these goals.
Could you explain please - can these hash comparisons be extended to other areas such as contextual analysis of photos or texts?

For example would it be easy now to get to the hypothetical scenario where texts containing certain phrases will be flagged if some partner / regulator demands that?

Or doing face recognition on images, etc.? Or is this still completely different from that
yes, given that the probability of getting infected for vaccinated people is about third of that of unvaccinated, and once infected vaccinated spread the virus the same as unvaccinated (discussed at length with the links for example here https://news.ycombinator.com/item?id=28066844), forcing vaccine upon low risk groups starts to looks like an immoral thing as it does nothing to prevent the spread (roughly speaking the Delta's R0 for vaccinated is the third of Delta's R0 for unvaccinated, i.e it is like the R0 of the original).
> Experts at a New Holland Borough Healthcare Center said around 90% of households dealt with at least one coronavirus case after churches reopened last year.

I’m not confident that that metric equates to what that doctor says it does. There’s no mention of how an infected person in a household was treated. I guess the assumption is that they were not quarantined from the rest of the household, but I’d like to see self-reports if nothing else.

The Amish are already a fairly isolated group, so (speculation) if most of their COVID cases are “people who have more dealings with Englishers,” which I would expect to be the case, then even if their incidence is lower than reported, their more external-facing folks might have a high-enough level of immunity to stop it spreading. It depends a lot on how people with COVID-like symptoms are treated within the community though, and this story and its links say nothing about that.
The stuff you can do with emacs, which is around 50 years old now, is still phenomenal, and it's still under active development to provide all manners of features that make emacs an immensely powerful and expressive lisp machine.

The only reason I haven't got into org-mode is because of the context switch and the fact that I'll spend more time figuring how to organise my thoughts.

But emacs is still my daily driver for everything I work with but typescript, so far. It's the most seductive technology I've ever had the pleasure of working with.
Implicit Ordering in Relational Languages
> libertarian ... want to avoid any kind of regulation

Much of what people know about libertarians comes from its opponents. Actual libertarians believe that the proper role of government is to protect peoples rights, while maximizing their freedom. Proper regulations would be aimed at preventing one group of people from hurting others.

"For their own good" regulations, though, are not libertarian. Adults should be allowed the freedom to make their own choices about themselves.

P.S. I got fully vaccinated at the earliest opportunity.
The coolest part imo is that the the servers aren't communicating directly to one another. The client brokers the communication so that both IDP and SP can be on completely different networks (bridged by the client). You probably already knew this but sharing because I find it interesting (and for the edification of those that are unfamiliar).
>yes, we don't support dynamic registration of apps for eg OIDC/oauth

Which is what I am talking about and ALOT of SaaS vendors do.

They have you go to AzureAD Go to Enterprise Applications, click "New Application" and then choose Application not found in Gallery.

When you do that, i can see no way to use anything other than SAML .

nothing in the Microsoft Docs, nor anything I can see on any portal gives the ability to for an Enterprise to Add their own Customer Open ID Connect application, you have to go through the process to add an App to the Gallery.
No. I'm not talking about defective products. From https://www.sacramentoinjuryattorneysblog.com/do-airbags-cau...:

"A study by the United States National Highway Traffic Safety Administration (NHTSA) revealed that from 1987 to 2017, frontal airbags saved more than 50,000 lives. While airbags cause some injuries, the number of lives saved offsets the potential for injuries. Airbags also often reduce the severity of injuries in major crashes. Even so, airbags do come with a downside.

The NHTSA also reported 175 fatalities that were caused by airbags in the decade between 1990 and 2000. 104 of those fatalities were children, and most of the rest were female adults that were shorter than average. All of the fatalities, interestingly, occurred in low-speed accidents that the occupants would have otherwise survived."

Note that we're talking about 175 fatalities due to airbags in 10 years, despite 50k lives saved over 20 years. This is always the case with any kind of intervention -- nothing is ever 100% perfect. But we can't lose the forest for the trees.
My guess is we overestimate human intelligence.
This endeavor is impossible. The prize should be 100M$. I think a better system would be simply to survey people and ask them to assess their perceived purchasing power.
Last I checked, and having worked on a few oauth clients, OAuth2 is more of a set of rough guidelines.
BQN! The entire BQN website is generated with a markdown processor[0] that handles the parts of Github-flavored markdown I use and adds features like highlighting and the ability to drop into BQN to generate html or svg. Github doesn't display markdown source nicely, but you can scroll down to the <!--GEN line in [1] to see how this diagram is made (plus definitions at [2]).

[0] https://github.com/mlochbaum/BQN/blob/master/md.bqn

[1] https://raw.githubusercontent.com/mlochbaum/BQN/master/comme...

[2] https://github.com/mlochbaum/BQN/blob/master/svg.bqn
I don’t get the resistance to paying for roads. Roads don’t grow on trees. We have to pay for them somehow. I’d prefer more public transit and less car oriented cities, but we need roads too.

a miles traveled tax should have a vehicle weight as a multiplier, even though wear doesn’t become significant until they’re over some threshold.
> The 73 year old guy marking ppls receipts ain't gonna tackle anybody, and I wouldn't be surprised if the company tells you not to try to stop shoplifters anyway.

You don't have to stop and show them your receipt.
This seems less concerning than the fact that iCloud backup is not end-to-end encrypted in the first place.
It's probably useless - but it would make for a killer powerpoint slide at your next meeting, wouldn't it?
The explanation is complicated but really fascinating. I think I understand it, but not well enough to explain it. Read the section entitled "What cryptographic tools are used in the implementation of the system?" in this write up about Apple's methodology.

https://www.apple.com/child-safety/pdf/Technical_Assessment_...

Also look at their full whitepaper here: https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...

My take is that performing the initial hash matching and encrypting the results in two separate layers on device prevents Apple from having meaningful knowledge of low (under the set threshold for being flagged) quantities of matches on a user account. This protects the use of the threshold as a way to further reduce false positives. For example they couldn't comply with a subpoena that said "Hey, we know you set a threshold of only flagging + reporting accounts with 50 image matches, but we want to see a list of all accounts with 10 or more matches because we think that's good enough."

This method lets them set and enforce a threshold to maintain their target false positive rate which they say is ~1 in 1 trillion accounts incorrectly flagged.

Disclaimer: I'm not a cryptographer and could be misunderstanding this.
You could turn the argument around. Seat belts pretty much only protect the person wearing the seat belt, while vaccines protect the population in general by stopping the spread of Covid.

So people should have the freedom to harm themselves by not wearing a seat belt but vaccines should be mandatory to stop covid from spreading everywhere.
Apple already controls the entire photos pipeline on your device, and in fact all of the OS code. If they want total device surveillance, they've got it today.

They're doing this because they are announcing it, because they think it's a net positive. You might not agree, but the argument that this is somehow creating the technology for scanning and is therefore nefarious is missing the point that if they wanted to do this surreptitiously and nefariously, they (a) wouldn't announce it and (b) could have been doing it for years. This isn't some fancy new tech, except for the privacy bits, which obviously wouldn't apply to Evil Schemes.
I’ve recently switched to org-mode, and the nice thing is you really don’t have to dive into the deep end. The full scope is enormous, but all you really need to use is basic markup, at least for typically notetaking. You can add more features over time if/when you need them.
I encourage people to read the article.

The gaslighting and evasiveness of "medical experts" reminds me of Soviet and CCP propaganda. :)

(I've advocated for a focus on US herd immunity for over a year since Americans aren't big on vaccines anyway.)
Show HN: Sylphi – Health and Wellness Social Network
We're Sylphi (www.sylphi.io), and our team is building a social network for Gen Z and Millennials to share, discover, and discuss content focused on health and wellness. As members of Gen Z ourselves, we have been searching for a positive social media platform that cares about mental health, cares about social impact, and cares about people. Sylphi fills the void in the current landscape of social networking platforms by being a values-driven company dedicated to creating a safe space where people can be vulnerable and have real discussions about health.

Key Features of Sylphi
Join communities to find solidarity and support. No followers, no influencers, and no pressure to be anyone other than your true self.
Share your thoughts, feelings, & experiences anonymously. Our team takes moderation very seriously to maintain a safe space for everyone.
Discover new ideas & people. Search for new communities to join, and browse your feed for relatable content posted by real people.
We are excited to launch the waitlist for Sylphi’s beta test. If you would like to become a beta tester or want to be notified when our app launches, please add your email to our waitlist at www.sylphi.io. You can also follow us on LinkedIn (http://www.linkedin.com/company/sylphi-hello) and Facebook (https://www.facebook.com/Sylphi-112906861041000/).

Sylphi is currently incubated at the Harvard Innovation Labs and backed by Harvard Undergraduate Capital Partners. We are excited to build a better future and would love to hear your experience building social networking apps. Thanks, and we look forward to having you join our community!
Tim Cook doesn't Lie. I think he convinced himself what he said wasn't lying. That Apple and himself are so righteous. Which is actually worst, because that mentality filters through from Top to Bottom. And it is showing in their marketing and PR messages. He is also doing exactly Steve Jobs's last advice to him, Do the right thing. Except "the right thing" is so ambiguous it may turn out to be one of the worst advice.

My biggest turning point was Tim Cook flat out lying on the Apple case against Qualcomm. Double Dipping? Qualcomm patents being more than double than all the other six combined? And the tactics they used in court which was vastly different to Apple vs Samsung's case. And yes, they lost. ( Or settled )

That is the same with privacy. They simplifies their PR message as tracking = evil. Tracking is invading your privacy. Which is all good. But at the same time Apple is tracking you, everything you do on Apple Music, Apple TV+, App Store and even Apple Card. ( They only promise not to sell your Data to third party, they still have some of those Data. ). What that means is that only Apple is allowed to track you, but anyone else doing it are against privacy? What Apple really meant by the word Privacy then is that Data should not be sold to third parties. But no, they intentionally keep it unclear and created a war on Data Collection while they are doing it. And you now have people flat out claiming Apple doesn't collect any Data.

Then there is a war on Ads. Which was so bad the Ad industry pushes back and Tim Cook had to issue a mild statement saying they are not against Ads, only targeted Ads. What?

Once you start questioning all of his motives, and find concrete evidence that he is lying, along with all the facts from court case of how Apple has long term plans to destroy other companies, they all line up and shape how you view Tim Cook's Apple. And it isn't pretty.

And that is speaking from an Apple fan for longer than two decade.
NYU Researchers Studying Disinformation on Facebook Cut Off
Politically targeted violence has been a reality in North America for hundreds of years, mostly enabled the past 150+ years in the US by organizations that exist to keep their members anonymous.

The Proud Boys and 3%ers and Oath Keepers that try to remain anonymous are following the KKK playbook.
Which is an absolute rent-seeking shakedown.
Question (I'm not being facetious; I actually wonder this) - Why do companies (and some workers) seem to believe that to have a great office culture people must be trapped there?

This is one of the sticking points in this discussion, I think.

(Leaving aside the issue of long commutes.) Why do people's actual hours sitting at the desk need to policed?
Wow, that is definitely taking it too far. And not only is he putting his daughter in immediate physical danger, he is also inviting an intervention from the gov't if they find out. Definitely goes beyond my risk tolerance even if I don't care much for being told what to do.
Yeah I lived in Kenya. Giraffes are highly intelligent and develop a friendly relationship with humans - at least the ones that feed them.

There are some parks where you could feed them up close. Not quite sure if they are as friendly in the wild though.
Any link on the old MS office videos? Never heard of this
The "Metaverse" is such a vauge and boundryless concept that's it's almost meaningless. You could argue that email and the Internet are already a kind of "metaverse."

Facebook's announcement says more about Facebook than the product/solution that Zuckerber is pitching.

The "metaverse" should be a collection of tools that people choose to use; like the Internet. Facebook would like to take away that choice. It would like control and to monopolize.
Except that the powers-that-be just admitted that vaccinated people carry the same viral load as the unvaccinated.
Tabnine for Teams
The WWW is 30 years old today
.ml and .mli files are not recognized either. Still, it's a fun tool.
if I am in the AzureAD portal and go to Enterprise Applications, click "New Application" and then choose Application not found in Gallery.

When you do that, their are 3 SSO options for the new Applications, None of them are OpenID Connect

This is how 99% of all SaaS Vendors instruct people to add new Applications
You know it can be used to get the geo location in the meta data of pictures for people who took photos at protests. Etc
That sounds odd way for people to behave. Perhaps there is something else going on in Statisticsville that wasn't mentioned?

Maybe, even though only 2 people died, another 8 got admitted to hospital with a serious life threatening disease. Of the 6 that were discharged, 2 suffered continuous relapses requiring multiple readmissions and major life style changes (like stopping work).

Or perhaps there was something significant about the extra 2 that died. Maybe, rather being in retirement, they were in their 30's, shouldering the peak of adult responsibilities like child raising?
socal and NorCal have vastly flora, and the mega fires are all in the North. I wouldn't expect Mexico to have fires like NorCal no matter what the government did.
1. Riots are manageable. Rollout strategy would have a lot of impact on the severity of backlash.

2. Data privacy issues marginal, not particularly unique. It’s an extant, broader problem that should be addressed but isn’t a reason to refrain from vaccination.

3. Laws and regulations don’t require individual consent. Again it’s marginal: the state already requires / bans various behaviors related to the bodies / health of individual citizens.

4. Involuntary experimentation is a minuscule / out-dated problem in the present. And it’s a non sequitur from vaccinating the population.
My father, in the 1960s, would not accept delivery of new cars unless the dealer installed seat belts. He'd never move an inch until everybody in it was belted up. It was the only car I ever rode in that had seat belts in it, for most of my childhood.

Seat belts have saved my life, and that of other family members.

My father was a libertarian, too.
A guy I know got banned this week because he posted a cute kitten that looked like it was suffocating someone with the icanhazcheezeburger like caption of "i kil you"

Banned for 24 hours, lol. Anyway. I think that is within bounds.
But it's easy to do that for a small subset for finetuning compared to cleaning up the entire dataset.