skysight-inc/HackerNews huggingface dataset:
If you've worked in computer security long enough, you know that Apple could already have added a backdoor into every build of iOS that allows the government to read any material on your device they chose to read.

My contention isn't that I trust my government, but instead that this specific technology is no more threatening than the technology already present on my phone and the trust I've already placed in the vendor.
Eh, I disagree - your definition feels like moving the goalposts.

Apple is under no obligation to host offending content. Check it before it goes in (akin to a security checkpoint in real life, I guess) and then let me move on with my life, knowing it couldn't be arbitrarily vended out to x party.
Who needs the NSO group?

Repressive regime TODO list:

1: create a child safety organization, or require an existing one to accept your images

2: add images of the children of dissidents (or journalists, or leaders of other political parties), photoshopped to be sexually explicit

3: dissident iphones informs on them. Apple turns the information over to the authorities in the host country

4: if Apple pushes back, threaten iphone sales. Or just improve your doctoring.

5: if Apple plays along or doesn't complain, insist on the ability to detect terrorists, criminals, etc. Again, threaten iphone sales, allow Apple to keep the agreement secret.

This may only work once or twice, but it's worth a shot! If you make it to step 5, you have a really bespoke, beautifully designed, Apple managed intelligence apparatus. made with love in Cupertino.

Maybe this is an overly cynical take, and in addition to the cryptography they have rock-solid, audited governance and internal controls that would prevent it and/or insider abuse.

Maybe localities with real data privacy laws (EU) will be able to offer protections to their citizens with fines big enough Apple will begrudgingly agree, so that a repressive regime can't target their citizens as well as citizens in the host country.

Maybe this isn't a slippery slope to more exotic forms of surveillance, like scanning your contact list for pedophiles.
That makes sense. Thanks for answering. I don't have much familiarity with Unity as a tool or as a company/business model, so I didn't realize they already had alternative monetization methods.
Note that execution shards are not really on the roadmap anymore as sharding is planned to be data only and serve as a scaling factor for L2 rollups.

In just a few years the only usage of the L1 will be security and data availability for rollups and a settlement layer for international organizations and state level actors with the vast majority of normal activity happening on various L2s.
The argument from reactionary HN neckbeards is basically, "can't you see that this _could_ be used for great evil?"

No shit. That's obvious to just about... everyone on the planet. Many things in this world can be used for great evil: knives, gasoline, guns, TNT, cars--even most household items when used with creativity. It is quite impossible to create something which can't be abused in some form. But society still allows them, because it judges that the good outweighs the bad, and systems exist to manage the risk of evil use.

In this case, I have every expectation that this scanning will be auditable, and society will eventually work out most of the imperfections in systems like these, and strike the right balance to make the world a better place.
So first of all - France is known for it's remarkable protest culture. That's not typical. Secondly, the fuel tax in question, while reasonable and necessary, is also a somewhat special case even in France because it represents taking away peoples everyday mobility. As cars electrify, that will be less so, and other measures - such as those targeting luxury travel like air travel - would surely not see quite the same levels of protest. And at this point, because the protests were widespread, and because they succeeded, there is going to be vigilance against sneaky plans by the government to pass it while nobody is watching - but that too is a fairly local issue.

I expect that even in France those tax hikes will eventually pass, even if it takes longer than elsewhere and much longer than other measures. It may need some other compromise, like a comparable tax-reduction for median incomes; and some level of political maneuvering to placate the particularly hard hit. Or perhaps they'll try to achieve similar reductions via other measures such as speed limits and regulations on cars. But I don't think it's representative of social upheaval vs. climate-change cost in general, anyhow.
You're really scared of typing NSA?
Apple's paper talks about decrypting suspect images. It isn't end to end.[1]

[1] https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
I ran into a similar issue trying to write an FTP client implementation from the spec. It turns out that most servers don't support 90% of the spec, and some very important things (such as the output format of LS) are completely unspecified.

I threw out that first implementation and just got the 3 most popular servers and made it work with them.

Random example: I'd like to present directories and files differently so users can chdir to a directory. There was no single method for detecting a symlink to a directory that worked on any 2 of the 3 servers I targeted for support (other than issuing a CHDIR and checking for success, and I wasn't going to issue a CHDIR for every item found when listing a directory for performance reasons; I did have to issue a CHDIR for every symlink on one of the 3 though).
the road to hell is paved with good intentions
Do bubbles become less of a bubble a certain point? What problems does it solve? It has no real use.
Your entire argument could be applied to iOS itself. ;P
I look forward to the day that marrying your hamster is legal.
So nothing? It's interesting that Bellare and Boneh are involved. That's the extent of my commentary.
Ask HN:Has there been any big CDN or DNS blackout or something?
I’ve been the whole day finding myself hitting pages that don’t load.

Anything on github.io pages, a lot of github assets (images and the like), and now I just realized I can’t acces thedailywtf either. At first I thought it was me, but even on mobile I keep not getting anything.
600K Americans died from Covid, yet even now, it's not exactly hard to find people saying that the real danger was emergency government responses we met along the way.

The tricky thing about "Climate moment" is that it's impossible to prove that any single disaster was caused by climate change, because it's statistical in nature. A super-hurricane could ravage Florida or Texas, and you will always find someone saying "You can't prove it's global warming - freak weathers do happen all the time! Now is not the time to be carried away by knee-jerk emotions!"
Neither of those groups are getting senators elected so I don't care about them. I want to know who is funding real political action at the upper levels.
You had me until your last sentence. What do you mean that the term is being discontinued due to public pressure? Isn't it natural for concepts to go away if they're found to be inaccurate (ex: phlogiston)? I also don't understand "everything is equal anyway". Could you elaborate?

Since you mention the term in relationship to the public, I actually think that "alpha" as a term to describe someone who is dominant has been doing just fine as a societal meme, despite it being used less among biologists/whomever. In this sense it doesn't seem to be going away at all.
By "doing SAML" do you mean from the server perspective or the client perspective? This simple client library works with .NET 5.

https://github.com/jitbit/AspNetSaml/
The salt in MSRs has different requirements from that in solar thermal systems, so there's not really a connection. Also, solar thermal is pretty much a dead technology now; PV (and batteries) killed it.
If I recall correctly, there's one at Arcosanti too (I visited it in the winter of 2013).
Not really, iOS didn't really have the capability of scanning and reporting files based on a database received by the FBI/other agencies.

There is a big difference when this has been implemented & deployed to devices. Fighting questionable subpoenas and stuff becomes easier when you don't have the capability.
Why? It doesn’t have to be that way. Social Security has been successfully bolstered in the past and can be again. I don’t see why it can’t remain solvent for the foreseeable future…
Upon reviewing TFA it appears this is intended for iCloud users as a privacy-focused alternative to CSAM-scanning the images you upload to iCloud on-server. Rather than leaving images unencrypted on-server so thay they can be checked, the images are checked on your own device prior to upload (to dramatically simplify it). The sell here is that CSAM checking is then done without revealing the image to Apple...unless it's CSAM, and there's enough of it.

iCloud was already scanning for CSAM, this time though they do it without seeing what you upload to the server.

This is essentially encryption with a backdoor, and the chief objection is basically the same as the Clipper chip/Skipjack. There are privacy issues with the idea of backdoored encryption, as the EFF pointed out. To counter misinformation that is being spread, it's not a little AI cop doing blanket scans on your image library and app caches - it is expressly intended as a part of iCloud CSAM detection.

But at the same time it seems trivial for Apple to expand it to that someday, since they just deployed a method capable of doing so trivially. Conceivably they can make the API so that it does a scan when an image is saved to disk. This is not currently what will be done but whether or not they will is anyone's guess.
> We’re going to have serious problems within the next 5-10 years

I'm having trouble reconciling your statement there with your first one:

> I’m frankly less concerned about climate change - in reality we don’t have enough data for super definitive answers. Further, we can and the world can fairly easily adapt. A few degrees over a hundred years is easily manageable.

So let me understand:

1. You think that insect population decline isn't related to climate change.

Okay I can buy that. Humans have built a lot of roads and vehicles emit a lot of pollutants and pollutants kill insects. So what do you propose to do to solve that? Or do you think it's a different problem? Perhaps climate change is a contributing factor.

2. You think we have declining water availability.

Indeed, we do. Many states have had more severe and more prolonged droughts that previously recorded. But, on the flip side, some states are getting inundated with more rain than ever before. It's almost as if the climate is changing. So anyway, how do you propose to solve the water availability problems?

3. Solar weather could wipe out all electronics.

Yeah that's a tough one. It sure would be unfortunate if our planet's magnetic shield stopped working one day. But on the flip side there's not much we could do about it. So why worry? There's other things to worry about like climate change and the insect apocalypse.
Yeah, that was the original idea. United States would menace the rest of the world a lot less if it weren't truly united.
AbstractDifferentiation.jl for AD-back end agnostic code
How I Learned to Stop Worrying and Love Tech Debt
Except the hashing and hash comparison are happening on the device itself.
https://twitter.com/sfmnemonic/status/896884949634232320

>> "By all means, compare these shitheads to Nazis. Again and again. I'm with you."
I want to use org at work but the performace of emacs on windows is beyond unusable. also copy paste just doesn't work without pulling teath. its such a dissapointment.
I believe this is false. The Corellium guys are (much?) further along technically. But they don't care to put their code in a format that upstream will ever accept. I believe this was the main reason collaboration went nowhere. Corelliums forked kernel will always be little more then a marketing toy because of this.
I've been in physical/remote meeting splits. It's not really that hard. The trick is having everyone sign into the meeting with their own PC.
Very fun! Would a similar visualization work for showing the insides of a go binary?

It would be super cool to have a way to visualize how different modules add bloat in size (and may pull in other bloaty modules as well)
That's my concern: what happens the first time a government insists that they flag a political dissident or symbol? The entire system is opaque by necessity for its original purpose but that seems to suggest it would be easy to do things like serve a custom fingerprints to particular users without anyone being any the wiser.
> recruited mathematicians to analyze it, and published the results, as well as one in-house proof and one independent proof showing the cryptographic integrity of the system.

Apple employs cryptographers, but they are not necessarily acting in your interest. Case in point: their use of private set intersection, to preserve privacy..of law enforcement, not users. Their less technical summary:

> Instead of scanning images in the cloud, the system performs on-device matching using a database of known CSAM image hashes provided by NCMEC and other child safety organizations. Apple further transforms this database into an unreadable set of hashes that is securely stored on users’ devices.

> Before an image is stored in iCloud Photos, an on-device matching process is performed for that image against the known CSAM hashes. This matching process is powered by a cryptographic technology called private set intersection..

The matching is performed on device, so the user’s privacy isn’t at stake. But, thanks to PSI and the hash preprocessing, the user doesn’t know what law enforcement is looking for.
In addition to F-Droid, you can get Aurora Store (which is on F-Droid) which lets you use an anonymous login to get at the Play Store. I use it for a couple free software apps that aren't on F-Droid for some reason.
Why not use the SIM for two factor authentication. That's what is used in Scandinavia with BankID.
> The laws may not be just or correct, but they are the current state of the world

America, not Europe. Or Japan.
Yes, but generally that could be handled in a multi-stage process. First you would create the new column with no constraint, then periodically start updating the rows, once nearly all the rows are updated with the new default, in a transaction you update the rest of the rows, update the table with the constraint, and set the default. Not very much downtime is required with this approach (although of course it is more involved).
The solution would be to keep using plastic and set up garbage collection infrastructure in the countries who spill all the garbage in the ocean.
I don't think it has anything to do with age. It has everything to do with you adding the phone to your family under settings and declaring that it belongs to a child. You control the definition of child.
Ahem there is also https://repmgr.org

An actively developed FOSS solution backed by EnterpriseDB also one of the main company supporting PostgreSQL.

But err... And ahem ahem... there are more
https://www.postgresql.org/download/products/3-clusteringrep...

It's a choice of the PostgreSQL development team to only include low level api for HA in core project. But it's fairly harsh to say there is no active support for HA. Many maintainers of the core are also invested in HA related project build around PostgreSQL.
For people in eastern USA or Western/Northern Europe, the jet stream collapse is gonna be "the big one". Up until now, climate change has been a gradual-ish slow-boil process.

If the jet stream collapses, your long-term climate changes overnight. Eastern USA cities underwater, Western Europe 5C colder.
You're spot on about the 0-day comparison. As always, something will arise to let people with the motivation hide illegal images. The problem is how it will be used against everyday citizens, who don't have sophisticated tools and maybe just share images of Hong Kong freedom protests, or books, or anything anti-totalitarian. The emotional appeals about this being about child abuse are absurd on their face because of how easily those people will hide. It's a good thing that some people are able to see through that as a ploy. We shouldn't have to go there and prove our bonafide hatred of abusers every time we justify our right to secure encryption or freedom from surveillance. Doing so almost validates the government's position. Just like in China you would have to say "of COURSE I hate the democracy protesters! I just think..." No, you shouldn't have to take a deep emotional dive into a history of abuse to justify your human right to privacy.
There is a minimum number of hash matches required, then images are made available to Apple who then manually checks that they are CSAM material and not just collisions. That's what the 9to5Mac story about this says: https://9to5mac.com/2021/08/05/apple-announces-new-protectio...
It's not just about performance reviews.

Imagine a world in which it's very difficult to assess performance, because that's often the reality.

How does this system flourish if everyone is doing the minimum / least?

It doesn't. It fails.

'Do A Good Job'.

That the performance reviews say are a secondary factor.

If you all stop doing good work, it will fall apart quickly and you will all be poor.
>This is why both sets of speaker cables to my amplifier are the same length.

Why?
Wow, I would buy every book written by this person, as the amount of knowledge and experience required to pull off a stunt like that feels overwhelming

Does anyone know if https://dougallj.github.io/applecpu/firestorm.html is the "Dougall Johnson's work if you can find it" reference, or is there some dark web version?
How? Please be specific.
It very, very rarely is.
Amish community in Lancaster County reaches herd immunity from Covid-19
I think you've gone off the deep end. I replied to a comment suggesting making hospitalization of unvaccinated illegal by social policy. I said that doesn't make sense in a country where government is not nominally involved in hospitalizations.
The most distinctive one is when you start typing a chord- it can take up to a good second to populate the command list. Compare this to vscodes command palette which is instant.

I admit that perhaps there is a configurable lag built in (it would make sense to do so) and while there are other examples that I know bother me, this is the one that jumped out straight away. I'd have to dig back in to have more specifics.
I want to use PostgreSQL, because there seems to be a lot of technical discussion around why it's so great, but the tooling I have available to me seems to be immature compared to MySQL's.

And so, I find it really difficult to justify investing time in building up infrastructure to support it for my clients' work, because I need to be effective from day one.

Realistically that has absolutely nothing to do with PostgreSQL but whether or not some little third-party company or one or two individual developers have built something solid like Sequel Ace. That's really troubling for me to think about, but these CLI tools are insufficient for being productive.

This a great example to me as to why a business can't use a potentially superior product because some ecosystem feature is non-existent, or is hard to find.

That being said, I'm not too upset because modern MySQL seems perfectly fine, and still more widely used than PostgreSQL.
Student Beans' GTM teams uses DocSend analytics to improve customer experience
If you make a donation to a political candidate, that is public information today.
What do you think is wrong with existing solutions like OPSkins (RIP, played themselves), Bitskins, etc?
My boomer parents felt the same way and yet they're receiving it right now. 65+ year old people are one of the most powerful voting blocs.
Meanwhile I feel like on my Linux laptop Firefox has only been getting slower and slower every year. Perhaps the fact that I'm using a GeForce as my primary GPU can have something to do with it? I read it causes some problems with WebRender. Anyway it's sad to see Chromium being way snappier on my machine, I have to use it for meetings because just after a couple minutes audio in FF starts to stutter intolerably.
In any case, it never had to turn petty, even if they really did feel like RE knowledge from Sandcastle was being used. Even if code wasn’t shared, knowledge could have been. I came out with the feeling that they had bigger concerns about optics above all, and they couldn’t use the same approaches that might’ve worked when they were the David and not the Goliath.

I don’t want to be the asshole dredging up drama needlessly, but the line just feels snide after all that happened. Like, if you wanted a slick logo, name and marketing page, you all could just make one; you had absolutely no trouble doing so for Project Sandcastle. I don’t see why this statement needs to be made here and now, as nobody would’ve batted an eye if they hadn’t said anything.
Then you have two choices, disable iCloud photo backups or don’t upgrade to iOS 15. There are plenty of arguments against Apple’s scheme, but this isn’t one of them.
What transparency? The algorithm is secret. The reporting threshold is secret. The database of forbidden content is secret.
Yeah I think it wilted a while ago, as fun as it might be to think about.
Then don't offer "E2EE"
>why it doesn't work well for me

Possible reasons:

1. (macOS + inside terminal) isn't a common workflow for emacs contributors, or perhaps for people with that workflow working with 256 colors isn't an issue

2. people who want that workflow who care about having 24 bit colors didn't bother to file a bug report (did you?)

Bitter pill, but I hope it helps: as a beginner to an ecosystem, if you are going to be opinioniated about having an unusual workflow, you are always going to run into problems. If you are running Emacs locally, just run it in GUI mode, that's what most people do.
I'm in quite a number of different highly technical discords and none are quite like comma's. I mean that in the most scathing way possible unfortunately.

Disagreement and dissatisfaction are carefully curated and manicured to make it seem much more friendly, and put certain people in a much better light, than in reality. I've never seen so many posts deleted and users banned.
EROEI of 100 is not 10x better than an EROEI of 10, though. There is diminishing returns on EROEI. Relevant figure could be "net energy delivered" (or some such) that goes from .9 to .99, a 10% improvement.

Also, I believe the EROEI of 10 for solar is for PV operated in Europe. But there's no reason to put the solar-powered PV factories in relatively bad locations like Europe.
I had no idea that plant was toxic or invasive. I used to pick the flowers sometimes. It is all over the place in Florida.
> they are sending known photos of child exploitation to a minor

How do you know its a known photo of child exploitation? The original image that was hashed and then deleted. Two completely different images have the same hash.

WhatsApp automatically saves images to photos. What if you receive a bad image and are reported due to someone else sending the image to you?
I have no idea what causes it for you, but I see this : https://i.imgur.com/KEWYqIW.png

(ff 91.0)
I don't know about your country but in mine in Europe teens have privacy rights OVER their parents' paranoia.

That includes secrecy in private communications and OFC privacy within their own data in smartphones.
Servo is mostly dead the team got laid off
To me this reads like someone arguing that a champion race car driver must never have had a genuine interest in automobiles if they've never rebuilt an engine.
You should understand the difference between a protocol and an easy to change implementation detail before throwing around words like FUD.