skysight-inc/HackerNews huggingface dataset:
> And we should trust them on this because...? More importantly, even if they're doing everything client-side now, why should we trust it won't change in a few years?

If you use an Apple phone, you have no choice but to trust them. They produce your phone and control everything on that phone. Did you trust them before? If so, why and why would you not trust them now with this feature? If you didn't trust them before and don't trust them after this feature, you probably shouldn't use one of their phones.

> This situation is not like a fire. A fire in one apartment threatens the entire building (and everyone in it), and it spreads very quickly like started. This is more like installing chemical sensor...

I would consider a sensor that detects drugs in apartments a lot more orwellian and I'm pretty sure that something like that would be a lot more controversial than what apple is doing here. They are not adding a feature to catch people that use drugs, just child predators. There is a massive gap between the two and there are zero people that consider allowing child predators to exist is a good idea. I'm also pretty sure that there are zero people that agree that letting apartments burn down is a good idea.

> Perhaps people would mind less if they could trust the system will work. But anyone with even little bit of exposure to tech industry already knows that these systems don't work, and data collected is routinely abused.

Yep, exactly, this changes nothing really. I hate apple products and I don't use any, but their reputation is the least bad and I trust them more than others.

There are horrible monsters in this world, we don't live in a libertarian society, most people don't want to, and a lot of people will be completely fine with sacrificing client side scanning of their pictures to catch those horrible monsters out there. This issue is not black and white/right versus wrong. There are trade offs and it was a judgement call by apple. Everyone has some line where they would be ok with this feature. If it helps avoid the scarring of 1,000 children per year, maybe you don't think its worth it, but there is some line where everyone concedes. I don't really know what is an acceptable amount of horribly scarred children to trade for not having one's pictures scanned on one's phone but if they keep their word and it doesn't turn into an orwellian nightmare, then I would be incredibly grateful for every scumbag they help take off the streets.
AT&T FTTH in Texas. Its 2-3ms from my home to Google's CDNs. 2-3ms to Cloudfront. 4ms to akamai. Its 3ms to my friend's house, 1ms to my work's office. Its 2ms to my colo in town.

40ms is me essentially connecting halfway across the country. A Digital Ocean droplet in SF or NY is ~40ms.
I don't think even the great Yogi Berra could have said it better.
Congrats on your launch here on HN. This does seem like a nice niche market to tackle. I think you're positioned well in the market for multiple reasons.

I'd be worried about Netflix if they saw you're growing fast, but until then I doubt they'd be a threat. If they were courageous enough to do this they would have already, so most likely they're waiting for a player like you to prove that there is a large enough market for this before they pull the trigger. And I think by that time you should be large enough that it'd be just easier for them to acquire you instead.

Second, if you build out your platform in a way that can be generalized it could be worth even more. The platform should be content agnostic so that it can be used for other underserved populations down the road.

Sweet idea and good luck!
> The machineID MUST NOT be an IEEE 802 MAC address.

> MAC addresses pose inherent security risks and MUST not be used for node generation.

Interesting concern in the distributed generation pathway.

I've used MAC addresses in the past for absolutely unique identifiers, but this is calling out that as a security risk, because the time + arp data might be known to predict a future UUID from a machine?
> In the US, it looks like the number of child pornography cases is going down each year

Prosecuting fewer cases doesn't mean less abuse is occurring.

It doesn't even mean that the number of instances of abuse for which cases are prosecuted are going down, just that the number of offenders prosecuted is going down.
I'm pointing out that it is technologically possible to do so, and I do not want to bet my life that Apple's code has no bugs. I've been writing code for 20 years, no one can convince me this shit won't ruin at least one life in the next decade after its release.
My point is more that for somewhat implies exclusion, while by doesn’t.

Restaurant for Italians. Suggests that non-Italians don’t belong here.

Restaurant by Italians. Suggests that Italians make the food here and that it’s not for a particular group.
Facebook acquired osmeta in 2013, which built a UIKit implementation that allowed for cross-compilation of iOS apps
For “intended purpose” of differing sectors of society, one may start, if one chooses, with Plato’s Republic.
How's the Anbox support on it? I'd like to keep using the large F-Droid app ecosystem until native alternatives are as good.

Also have they resolved the kernel updating issue? All phones which ship with Android 11 or lower are unable to have their kernel updated because each device uses a modified kernel[1]. Phones which ship with Android 12 like the Pixel 6 all use the same Android Common Kernel, so it's enabled Google to guarantee the Pixel 6 will have at least 5 years of kernel and OS updates for the first time in Android's history.

[1] https://lwn.net/Articles/830979/
I think it’s also an issue of “if this, then what else?” Time and again, we’ve told society to do something and then life as usual can resume. Sure, there’s been folks that have fought against every step of the way, but many have followed along. Now we’re asking people to do something deeply personal that will be with them the rest of their lives. If they do this, they’re wondering, will they finally be left alone to live their lives?
I think HTTP/2 is fine when it's used end to end. So if you've got a single webserver setup, or a reverse proxy that speaks HTTP/2 to the back-end, it's great.

However, if the only way you can use HTTP/2 is by having the front-end downgrade it to HTTP/1, I would recommend disabling it.
Of course, that can be the basis for blackmail but I guess that what's going to happen most frequently will be a parent sending a bathroom or beach picture of a child to his/her spouse or parents, getting flagged and... what? This is going to happen tens of thousands of times pretty soon.
Perhaps I worded it poorly, but I was addressing the idea "the audience for a packaged Mac application", which to me suggests a less technical user. Which is fine for non-dev tools, but I wouldn't consider a user needing a database to fall into that category. (though perhaps that's true of developers who don't write SQL, but only rely on an ORM)

> Obviously Postgres.app is easier

Not necessarily. I used Postgres.app prior to switching to Docker Compose. It's a great option if you work on one app, don't need to switch between multiple versions, and don't need to work with a lot of different extensions or configs. I personally prefer keeping all of my config in source code, in the context of my application.
On the neural hash algorithm, I presume it must be some sort of a standard algorithm since the hashes will come from third party organisations. Is it available as a library anywhere?
I will say that there are verticals where "x for y" group do very well - media and content and dating apps come to mind as one. It seems to work better where there's an aspect of cultural or group identity that comes along with the "Y", and I think this project would qualify as that.
No, I'm not saying farmers should drive Teslas.
OK, but the largest factor keeping Europe warm is not the Gulf Stream but rather the Rocky Mountains (via their effects on air currents): https://www.americanscientist.org/article/the-source-of-euro...
PhotoDNA is analogous to the detectors. The analog of “opening every package” would be human review of every picture.

We already have real world evidence for “what statistical properties the detector would need to have” to be better than opening every package, because the real delivery companies are literally doing this today. There’s nothing hypothetical about the question.
I wonder if CPI adjusts for this.

I’m betting not.
It turns out Sensible is also a word that is up for definition.
Unless you live on a huge country (china, india, russia, etc), for an ordinary person, they will consume more media from the country that influences them, than their own country.

Big productions are in a huge % american media, national media for some ~40million population country, limits itself to talkshows, entertainment world, sports and so.. not movies, series or sitcoms
I find this framing to be too inward looking. SemVer isn't for me as the library developer, it's for users of my library. What it really means in that context for most users/customers outside of toy projects is:

EXPENSIVE-HIGH-RISK-UPGRADE. MEDIUM-RISK.LOW-RISK

There is a carrot-side to this but that usually only matters in specific cases for a subset of users.

EDIT: one small practical addition: If you are fixing a big that requires very large changes to how things work at a more fundamental level, I'd at least think twice about shipping that in a patch. While it technically fits the definition of SemVer, it might violate implicit expectations of users who are using your library in production. The change really needs to carry its weight.
Oh yeah? Which one?

I kind of doubt it because I've been censored for simply asking very straightforward questions with zero adjectives.
Do you believe that sexual predators sharing images with children on iPhones is a problem?

> It has nothing to do with not recognizing another side.

It seems like you are simply stating that the other side’s priorities are wrong.

That seems like a reasonable belief that won’t help anyone with the problem of creeping surveillance.
I think it's terrorism, and CP.

I have a feeling the CIA, or FBI, had a little chat with Tim Cook, and Tim caved into the pressure.

Who knows they might have some very embarrassing info about the man, and used it to get what they wanted.

I guarantee government, including the IRS, Immigration, etc. will be accessing Apples severs.

At least we won't have to listen to Apple privacy commercials anymore.
Because not every photo is uploaded to iCloud.

If you use iCloud, this is already happening today, probably.

If you don’t use iCloud, yes, the idea is local scan, match hash, then upload for manual review. The involuntary upload will have been covered by the EULA.

I’m not endorsing the idea. But this seems to be the only way it could work.
As I mentioned below, “fail” is an overloaded word and in server another meaning is intended. Longer but more correct: “BREAKING_CHANGES.FEATURES.BUG_FIXES”

You can get everything right and still intentionally introduce a breaking change in a future release.
Viasat also heavily throttles video streams, so as not to allow a user to accidentally reach their monthly data cap in the first day or two.

I currently average 25-30 Mbps on speedtest.net and 700 kbps (not a typo) on fast.com. And still I reach the data cap in two weeks or less. Fortunately (?) it's a soft cap, not a hard one. All it means is no streaming anything in the evening till the month rolls over. (And, perversely, you don't want to do any large downloads until after hitting the cap!)
I'm glad she is able to forgive them. They should still go to jail.

I find it baffling that internet death threats are ignored by law enforcement. Yes, they can be hard to investigate, but most law enforcement doesn't even try. The FBI doesn't have the resources, and local law enforcement considers it out of their jurisdiction. All will basically tell you, "Eh, it's just some jackass blowing off steam. They probably won't actually kill you."

But the threats themselves are crimes. Even most free speech advocates agree with that. And by ignoring threats, we've given people willing to use them the ability to shut down speech of anybody they don't like.

I suspect that if just a few of these crimes were prosecuted, the Internet would become a somewhat less terrible place. I doubt it would be that hard: few people are really trying to cover their tracks.
Because the Health Dept. doesn't have ~$100,000 to drop on a robot dog, the sales literature for Spot is slanted to appeal to a macho law enforcement mindset, and the police realize that the optics of "robot police dog" need at least token camouflage.
Have you tried out the Fuji X100 and its later iterations? Yes, it's autofocus or electronic "manual" focus with a faux-coincident rangefinder mode and a fixed lens, but it's about 1/10th the price of a digital M-series Leica and lens. I've had an X100S for almost nine years and still use it daily. I really like how compact it is and I feel like I've learned through practice how to anticipate moving subjects and compose decently well with the frame lines in the optical viewfinder.
X11 cannot handle two screens with different resolution scaling. For example.
I meant more from an air cleaning perspective not efficiency. Tesla built a very efficient auto HVAC system that pressurizes, cleans, and recirculates air through a multistage HEPA filter ("Bioweapon Defense Mode"). That kind of cleaning is usually reserved for commercial/hospital use and very expensive to implement in the residential space right now. In the last Battery Day, Musk indicated he would like to adapt the design to home use.
The difference is whether you break old code for users.
Well yeah he isn’t the most polished, but he puts the guests at ease and the conversations benefit from that. He reminds me of Tim Ferris in some ways, who was often barely coherent, although Ferris was never quite believably authentic and was clearly building some kind of empire.
Since Microsoft now supports Android apps, you can expect ungoogled android to become more popular since more apps would be written which dont need play store
For laptops I'd recommend the framework laptop (https://frame.work/). It's thin, powerful, and modular.
> This video is unavailable

Youtube unlisted video purge strikes again?

https://support.google.com/youtube/answer/9230970?hl=en
Maybe the 'offence' is from somebody reading far too much into something?
You don't get to see the code.

That's like saying Microsoft in the 90s/2000 could do no wrong because all eyes were on them. Or enron...
So, what's the current experience like on Android w/o Play services?

I know at some point it was quite bad but that there were some up-and-coming solutions.
All good points, thanks for your input. I liked it as I haven’t seen a similar ones from a reptile company but agree it could be better.
Not much actually since it's just strings of hashes. It will however use CPU cycles when it hashes your device's photos.
Yeah they are pretty straight-up about lying on the package. One I bought recently said "over 6 feet long!" But was more like 5'6" long.
This is a horrible article since it talks about color and images but lacks illustrations. I suggest something like https://www.studiobinder.com/blog/what-is-technicolor-defini... or YouTube videos on the topic since a color picture is worth 3 * 1000 words.
Will is now suggesting "LEARNING_OPPORTUNITIES.FEATURES.BUGS"
Seems like it has to do with the word failure more than anything. It is a failure, every time you don’t ship a perfect product it’s a failure of some kind. The iteration process is simply removing failures from a product until you reach feature completeness. I don’t think the difference is that large between a failure and a mistake.
For those interested in time based UUIDs, I've written libraries in Ruby and Go to move quickly between them:

https://github.com/sudhirj/uulid.go
https://github.com/sudhirj/shortuuid.rb
https://github.com/sudhirj/shortuuid.go
Hah that's really good.
Incidentally, there was a lot of simulations of what was going on on television during the time, especially leading up to the landing itself. It may have had something to do with why it got stuck in peoples mind that the entire thing was simulated.
How often does one need to do that though?

At ${dayjob} we do it once in a blue moon; not out of sheer necessity but for legacy reasons.

Other than that I never do it.
0. Time since last Intentional-Breakage/Funding-round.

1. "Features" released since last Intentional-Breakage.

2. Acknowledged mistakes since last "feature" release.

3. Scuff-ups since last mistake or "feature".

4. Comical 'release name' to distract management from size of last two numbers.

0.1.2-3-haffagudtay
> UUIDv4, which is not much different from 128 random bits

To quantify how different: UUIDv4 has 6 fixed bits and 122 random bits.
“So I spent a week doing OAuth2 stuff. It took a couple days to read through [Google’s] ten-thousand lines of code, so then I went and looked for other libraries. There's `python-oauth2`... it's the second version of python-oauth, it doesn't actually do OAuth2. But that took a while to figure out. So that one was a little bit better, 540 source lines of code, 15 classes, but I wasn’t going to put that in either because it didn’t actually do what I needed to do. So I rewrote that to just do bearer-token authentication, it’s ‘python-foauth,’ or if you prefer, ‘eff oauth.’”

-- Jack Diederich, “Stop Writing Classes”, https://youtube.com/watch?v=o9pEzgHorH0
> based on someone’s skin colour you are determining their culture/heritage. What does a Nigerian have in common with a Jamaican, apart from the melatonin in their skin?

Based on their skin color, they are treated the same way by much of society. They are often compelled, for safety and for just day-to-day peace from racism, to live in the same neighborhoods, go to the same schools, eat at the same restaurants, visit the same websites (where they don't have to read racist comments), play the same online games (ditto), etc. - heck, you can't even watch porn without encountering endless racist portrayals based on skin color. So people with 'black' skin have many common experiences.

Also, market segments don't have to be perfectly defined. We can always find flaws - no two people are alike; no one person is exactly alike from one day to the next.
I am interested as well - terrestrial civil engineering, and associated carbon steel, concrete, and rebar materials, are dirt cheap in comparison to interplanetary aerospace engineering and their alloy or composite materials.

I'd have started my design like a Delta robot or inverted Stewart platform, with a trio of sturdy towers, a catchment ring in the middle, and cables running to large electric motors with massive heatsinks (saltwater?) that could position the ring anywhere in X/Y/Z between the towers. By choosing a site with a low central valley between three natural peaks, you could get a huge amount of volume and not need as high a tower, I hear there's a site over a Puerto Rican sinkhole that recently became available - though be gentle during disassembly of the previous structure, it belongs in a museum....

Engineering is expensive, materials are cheap; always make the process window as large as possible!
To a first, second and third approximation:

poor = small energy footprint

rich = large energy footprint

Assuming the problem is that the global energy consumption is too large, the last thing we want is to increase the energy footprint of the people we already have. Moving people from poor countries to rich countries means greatly increasing those people energy footprint. It is in direct contradiction to the stated goal of reducing the energy footprint of humanity, and serves as a strongly visible signal that the ruling class is not serious about reducing global emissions.
Like most things, it depends on leadership beating the dead horse to constantly remind people of the difference.
https://www.w3.org/People/Berners-Lee/1991/08/art-6484.txt might be a better thing to post
Do you believe you can stop people from sharing imagines pre-determined to be exploitative and illegal by a central authority who has already logged and recorded the hash of that photo with children by deploying a universal scan system to all phones - when phones aren't a primary tool of trafficing illegal content?

>It seems like you are simply stating that the other side’s priorities are wrong.

This is a juvenile attempt at a nobility argument. That you can do anything as long as the goal is noble. Just as I wrote first, anything if it’s “for the children”. This is how all sorts of abuses are carried out under the four horsemen.
Right, but clearly people just ignore those, otherwise shrinkflation wouldn't be worth doing.
Oh, totally. I was just responding to the subtext in the parent comment that government oversight was to blame for this action.
The huge one for me is that if I make a mistake in code or admin and accidentally run "update users set permission = 'root' where id=$1" using an account id instead of a user id, it does nothing. If I'd used integers I'd have given root permission to a random user.
When I lived in Los Angeles a long time ago I didn't drive much so I never got around to renewing my plates (from another state). For nearly two years, it was never a problem.
Most African-Americans, particularly the descendants of slaves, have essentially been forced through a cultural funnel to become a new thing. Up until retail DNA testing, the average AA person would have no idea if their ancestors were from Angola or Sudan or Zimbabwe. Teaching ancestral language and culture was generally forbidden. People from a vast set of backgrounds were forced together. Sometimes bred against their will. We are not "heading to" equating culture with skin color, we did it as a matter of policy centuries ago. And it's produced an incredibly vibrant culture at that. African-Americans are arguably the most significant cultural force in the world through music and entertainment.
Just ran a speedtest on my phone; I get 19ms on a Farmer's Telecom fiber. 60-70ms on the work VPN.
Another way to think of it is that the more pull there is for the system from everyone, the better it is going to get, because the financing is a win-win-win.

It’s possible that the huge thrust of energy towards super heavy is initially to make a bunch of money on starlink…

The economics usually improves with the more people you can serve.
> 48-bit pseudo-random number used as a spatially unique identifier
Occupies bits 80 through 127 (octets 10-15)

Is 48 bits really enough to be a spatially unique identifier. Roughly 16 million entities would have a 50% chance of collision.

If you have a spatially unique identifier collision, it seems it might be possible for two independent entities to generate the same time stamp and counter codes resulting in an overall UUID collision.
No, Black culture is not simply about skin tone.
I think the questions are "why are the police using covid relief funds to buy this?" and "would they use this on the general population, or just the homeless population?"

The second question is very important because it is a leap down the slippery slope towards having a robust and officially sanctioned caste system.
Have you ever reflected on the magnitude of American patriotism post-WW2, especially during wartime? Seems to be a major case of widespread, ideological and irrational pro-governmental belief.
Oh, I only meant that with SAML, the SP has to deal with maliciously-constructed assertions. A buggy SP (and as the comments on this article show, these are common) can be fooled into allowing an attacker to bypass authentication. Thereby making it a little bit too easy for users to log in. ;)