skysight-inc/HackerNews huggingface dataset:
What I've done:

- designed and built a house on renewable energy

- designed and built a windmill

Unfortunately both of these I have had to abandon, the former because it is on the wrong continent compared to where I am today, the latter because of permitting hassles.

- I do have the maximum surface of the roof covered in solar panels, a good 2500W peak.

- transport myself everywhere I can using bicycle / e-bike
(< 30 km, sometimes much more than that if I'm not in a hurry)

- eat very little - hardly any, actually - meat / poultry / fish

That still leaves a ton of room for improvement but as long as I'm living in my current situation I personally can't do a whole lot more for a variety of reasons, and I would if I could.

I have fortunately been able to stop flying completely, all of our work is now remote and we are pushing hard to keep it that way (when before our customers demanded on site visits all over europe).

Compared to 1 year ago my energy usage is probably about half, compared to 10 years ago it is probably less than 25% because this is a much more temperate climate.

So, what have you done?
Wow I'm definitely not a fan of these kind of posts!! In fact, I can't stand them.
I turn my computer off frequently and FF launches instantly when I open it. Just as fast as any other program (and I'm a tab hoarder).

Though the number one reason I have FF instead of Chrome is that FF Mobile allows ad blocking. So I can have ad blocking across my browsers, send tabs, and keep consistent plugins. The anti-tracking and privacy features are also a great plus.
Well, I hate working in an office. So, I guess we all have to suffer a bit so that everyone can work in their optimal environment.
> I would gladly take this if it removes a barrier to making iCloud E2E encrypted; they are likely bound to do this type of detection, but doing it client-side before syncing feels like a sane way to do it.

But there is an issue there. Now there is a process on your phone capable of processing unencrypted data on your phone and communicating with the outside world. That is spyware which will almost certainly be abused in some way.
The child pornography detection only tries to find known child pornography. It does nothing to stop traffickers.
Yes. I'm not interested in catching pedophiles, or drug dealers, or terrorists. It's the job of the police. I'm not the police.
In essence companies are forced to be litigious about their trademark. If they don't defend them or become generic the trademark is lost. Even if Oatly believes that there is little to no risk in consumers confusing PureOaty, this might become a liability in future lawsuits
I wish Mozilla spent ten percent as much time un-fucking their old features as they do coming up with new ones. Firefox Mobile still doesn't have a user agent switcher. The "tab closed" popup still blocks you from opening the next tab. There's still no option for moving the New Tab button to the top of the screen.
When u upload any build to app store, before you can have it in testflight or submit it for release, you have to fill out this questionnaire asking "does your app use encryption?" If you say yes, you're basically fucked, good luck releasing it.. You have to say no as far as I'm aware.
Crypto tax changes spark clash between White House, key Democratic senator
lol no, the burden of proof for efficacy and safety is on those pushing the idea. It's perfectly reasonable to reject something based on a lack of, or questionable, empirical evidence.

There's nothing stupid about rejecting "expert consensus" when the data backing the experts doesn't exist.
There is a possibility I might have one, I'll have to look for it sometime to check, I have never actually used it because the camera it came with is a cloth shutter and isn't accurate anymore and I doubt there's anyone who reconditions 1960s slrs to like-new anymore. The thing about these lenses is that they are manual focus. I wear glasses. Realistically, am I ever going to want to use a manual focus lens again? Likely not, and my assumption is that this probably applies to most people.

This is not the first time I have read about old lenses making for a more pleasing picture, but I have to question, how true is that really? And how much of it is just expectation of how a photo should look? People today are accustomed to accurate colors and in-focus photos. They probably wouldn't care for photos taken with vintage lenses as much.
Chinese Aquaculture Grows Alongside Global Appetite for Fish
>Some systems work out better than others, but they all bear the thumbprints of actual hands.

Yep, ultimately any system will be only as good as the people manning it. No amount or reworking a "system" will help it beyond a point.
Due to the sheer amount of ETH that is off-market and unavailable for sale, I doubt one entity would be able to acquire a majority of it.

If they can acquire a majority of only the active, staking ETH, then other big ETH holders can start chipping in stake to tip the scales back.
ABCL became available in 2005[+], about two years before the appearance of Clojure, and both continue to be developed/maintained to the present.

[+] https://abcl.org/svn/tags/0.00.10/j/README
Not to derail, but surely you're aware that tax-funded services taken for granted in those "many other places" are separate fees in the US.
Yeah me too!! I still use and love RSS! That's why these posts are just ridiculous.
In the press release Apple says they are using hashes of hashes.

Apple has no visibility into the original image that generated the hash, so the gov can compromise the list at the source and Apple would have plausible deniability.
Going on with your life in this situation means police officers have been given copies of the photos that triggered the checkpoint. Do you want that?
Don't wanna have anti cheats installed? Don't play (online) games, noone is forcing you, for me I'm really happy i have the option on Linux in the future.
> Well, sure when you exaggerate what I'm saying into 'exhaustive' conversion and a 'complete absence' of megafires it sounds like romanticism.

I merely made what was implicit into explicit; using the term "garden" implies a total control.

> The population density was considerably higher before the arrival of in particular smallpox, for one thing.

I'm not interested in the density over time. Do we know the acres of forest-land per capita and the total area a certain manpower can manage this way? Especially since you scale back to 12k years, I wouldn't be surprised if there are orders of magnitude mismatch between the work-load and the population's capacity.

> West Coast natives in fire country absolutely set fires and managed the forests to make it easier to hunt and prevent as much conflagration as they could

No question they did. Local village populations do this around the world today. "As much as they could" doesn't make it their garden though, nor guarantees that the methodology scales to today's land use practices. As a proof you can look at this month's Mediterranean wildfires in Italy, Greece, Spain and Turkey.

> The romanticism was thinking of North America as a "wilderness" when it had been inhabited for, again, 12,000 years. Humans shape their environments, the indigenous people of this continent were not an exception to this.

Roughly 25% to 45% of the world today is still wilderness depending how it is measured. It was probably 99% 12k years ago (I don't have data on this one).

People shape environments but not uniformly, nor necessarily forever. People being evil destroyers of nature is a last century outlook (and maybe rightly so) but in the times of those indigenous tribes, nature used to be the main adversary of humans, destroyer of populations. The idea of "wild man in harmony with nature" is a new age anachronism by people who probably haven't even camped in the wilderness, at least without a full-spectrum REI gadgetry of 21st century.
We are sitting ducks if you think about it. If a couple university researchers can get malicious code into the Linux kernel, just imagine what well funded state actors are doing?

https://www.theverge.com/2021/4/22/22398156/university-minne...
We’ve had empirical measure of industry related climate change since the 1860s hidden away by industry, who continued to be confirm through private research over and over.

If our math models can predict the Higgs decades before it’s experimentally discovered, why is a math model from the 70s confirming society will implode in the 2040s any less reliable? Same correct order of operations. Reconfirmed recently by better trained experts.

Unfortunately your “always been this” way is problematic nowadays since humans weren’t always capable of annihilating themselves. A whole lot of their imagined scenarios rightly were bullshit. Previous generations left behind rock and stone buildings, some sludge at worst.

We’re leaving behind an industrial mess and a melted planet.

Now is a very different point in time.

Earth will go on with or without us. If the answer is shrug it off, well that won’t work as a majority get anxious. Nihilism risks social stability and solution seeking. If a bunch of people aren’t going to care, why support society? Let’s all just go tribal now.
I had an Amiga 1200 and got it working with a VGA monitor soldered onto the connector (like a VGA adapter on Ebay now) and a setup VGA file in Workbench 3. It looked great in 640x480, no chunkiness. So it is possible.
OsmAND
People over estimate how thick 5' circumference is
CSGO actually have a lot, overwatch or valorant are way better examples.
And remember the E2EE is pure speculation at this point.
Not just for the easier replacement, but also to avoid translating the mechanical stresses directly to the motherboard. The separate PCB can mount in a way that lets it move a little.
There isnt anything shadowy. It all open sourced unlike some of the work that bankers do.
Cow milk is also highly subsidised in the EU and sold at closer to zero margin because of the high control over the market relatively few retail chains have, especially in Germany.

Oldy but goody: https://www.kuechenstud.io/kuechenradio/episode/kr_121-milch...

Edit: obviously we shouldn't subsidize industrial farming and its carbon emissions and instead charge for these negative externalities. We are all paying for this cheap milk consumption with our climate.
OK sure, but you can create usable feeds. There are services that will do this for you in like 5 seconds.
Yes, I would have to.
Tim Cook looks like he believes in money, first and foremost. Anything goes second.
4th Amendment. Plaintiff lawyers gear up.
> people see the repercussions they would stop.

I doubt it. I think it's more likely that they'll do the shooting from cover so they can't be seen by the drone.
Doesn’t change that you’re a liar.
Makes you rally for NAMBLA
I think you're both partially right.

> In these new processes, if an account held by a child under 13 wishes to send an image that the on-device machine learning classifier determines is a sexually explicit image, a notification will pop up, telling the under-13 child that their parent will be notified of this content. If the under-13 child still chooses to send the content, they have to accept that the “parent” will be notified, and the image will be irrevocably saved to the parental controls section of their phone for the parent to view later. For users between the ages of 13 and 17, a similar warning notification will pop up, though without the parental notification.

This specifically says that it will not notify the parents of teens, as GGP claims. So GP is right that Apple isn't doing what GGP claimed. However I still think you might be right that GP didn't read the full article and just got lucky. Lol.
Dijkstra's letter "How do we tell truths that might hurt?" is a famous rant with a good deal of rhetorical flair.

In context you can see that he (rather hilariously) savaged some of the most popular commercial programming languages at that time: FORTRAN, PL/I, BASIC, COBOL, and APL.

(Somehow Lisp/Algol/C/Pascal got off unscathed; presumably they weren't popular enough in 1975 - otherwise Dijkstra would undoubtedly have had bad things to say about them as well.)

https://www.cs.utexas.edu/users/EWD/ewd04xx/EWD498.PDF
That's... actually not that terrible for an enterprise code? Sure it's verbose and inefficient, but it does one thing, and it's trivial to fix, without rewriting anything else.

An actual experienced enterprise developer would have created BitManipulator, BitManipulatorConfig, BitManipulatorFactory, ShiftBitManipulatorImpl, XorBitManipulatorImpl, and BitManipulatorRetryWrapper, and you will be required to specify which operations to use by adding a yaml config file, which includes thread pool options and has five different versions in the git repository and three more in k8s clusters.
Perceptual hashes aren't cryptographic.
That "tab closed" pop-up is maddening. I've mainly assumed I was just doing it wrong, it is so bad.
That would be child abuse. A lack of socialization and proper education is a greater risk to children than a minor respiratory virus. Remote learning isn't an adequate replacement.
As others have noted, many of these issues are fundamental to XML DSig, which is insecure by design. [1]

However, the “what does the future hold” of OIDC is not much brighter. OIDC is based on JSON Web Tokens (JWT), which manages to avoid some of these issues (e.g. signs the encoded value), but introduces new ones (JSON interpretation bugs, algorithm substitution bugs, etc). They’re similarly terrible by design [2].

However, what OIDC does relating to signing is far worse. In many OIDC deployments, the idea is you use something called “OIDC Discovery” [3] to discover the expected signing keys for the OIDC server. You fetch those regularly (e.g. daily), and do so over TLS. With SAML, you exchange certificates, and then rotate them every 2-3 years (with things blowing up on expiration), but with OIDC, you often end up using OIDC-Discovery, and thus can change keys daily.

This means that a single malicious TLS certificate can be used to MITM your OIDC Discovery exchange, and from there, impersonate any user from the identity provider to your system, the relying party.

I spend my days in the TLS trenches, working to improve the CA ecosystem, but I absolutely would not trust the security of all users to a TLS certificate. The reality is that BGP hijacks are still a regular thing, as are registrar hijacks. Even if you find out about a malicious certificate (via Certificate Transparency), and revoke it, virtually none of your tools doing the OIDC-Discovery fetch (like programming languages or curl) support revocation checking, and even if they did, it doesn’t work at Internet scale. To deal with this problem, some relying parties do a form of poor-man’s certificate pinning, but now they’re at risk of even greater operational failures than SAML expiration in the start.

In practice, it seems plenty of OIDC clients just shrug and go “yolo” - if they’re talking TLS to the IDP, that’s good enough, and no need to bother with signature validation of the assertion at all.

For all my hatred of XML DSig and SAML, I’ve seen few auth standards as bad as OIDC: because it looks good, but is hell to implement correctly. At least with SAML, you know it looks bad to begin with, so you’re hopefully on guard.

[1] https://www.nccgroup.com/globalassets/resources/us/presentat...
[2] https://news.ycombinator.com/item?id=14292223
[3] https://openid.net/specs/openid-connect-discovery-1_0.html
I have FF 91 on Linux and mine takes ~200ms: https://i.imgur.com/EzdLYXb.jpg

This is with uBlock, HTTPs Everywhere, "I don't care about Cookies", Greasemonkey, etc etc

I have a 1700x, so a bit faster than your 8250U, but released the same year.
There is a scale where that doesn’t work anymore.

If one child abuser can sell his contents to thousands via nothing but WhatsApp, word of mouth, and a Bitcoin wallet, what will you do to fight that?

I’m all for freedom of speech and freedom from fishing expeditions and what not, but if you don’t deter these things they will grow.
Even then, say you trusted Apple.

Nobody signed up/purchased an iPhone trusting random 3rd parties/CSAM aggregators.
NIST’s Quantum Crystal Could Be a New Dark Matter Sensor
> While I still use google maps

I use Citymapper simply because I find it better (for the city-based journeys that are my usual call for a map app) - but it not being a Google ~data collection device~ service is no disadvantage.

At least, depending why you dislike having everything locked up with Google or whoever I suppose. Personally it's more having everything somewhere that troubles me, I'm reasonably happy with spreading things about. I like self-hosting things too, just needs a value-add I suppose, that's not a reason in itself for me.
SpaceX will attempt to stack Starship SN20 on Super Heavy rocket booster today
You’re misunderstanding what this is if this is an actual concern of yours.
I see what you're saying, but a single miner can't reject a transaction, they can really only delay it.
I disagree, it's easy to do something and then dismiss the importance it could have on you (which is also the point of the article). You have a bit more authority as you know what you went through, but on the other hand you're advocating for something that you didn't do.
> My constructive advice, then, is that you engage with your security professional before starting work, ask them for their input, and follow it.

You sound exactly like the kind of security professional I’d like to work with and I agree with everything you said.

To give you an idea of my lived experience, I’ve actually had security team members refuse to disclose the tools they are using. This baffled me, because as you say why wouldn’t they want developers to run linters as part of their process? The only possible explanation I can think of is that being a human frontend for automated tooling is an easy high paying job.
Or saw "CA" and thought country rather than state.
I hear you but I also feel like this is already happening. Not only did everyone in this chain, for 2 years, say "its not my problem, I'll push it forward", when it had to be reviewed they did it secretly without recompense for the harm caused.

They received the pass and then pretended it never happened
No, that’s my point. If they’re already remote then the difference is diminished between someone who wanted offices remote so they could move out of a high cost of living area and the remote person in another lower cost of living country. There is value in having people onsite, but without that consideration then the supply of workers is higher.

Is this necessarily bad? No, but be prepared for more competition and maybe needing to move to an even lower cost area than you’d imagined.
Ever since I started using RSS, back in the Google reader days, I used it in list view and clicked on articles I was interested in. I still do this today. I run ad blockers, so I'm absolutely useless to the sites, but I want to see the article in the original format.
What is the point of E2EE vs TLS/SSL based encryption?
A lot of cheating just can't realistically be detected on the server.

Feel free to not play those games that requires anti cheats and let the ones of us who likes having it enjoy a game with less cheaters.
> is vulnerable to what the US considers to be proper

This stirs up all sorts of questions about location and the prevailing standards in the jurisdiction you're in. Does the set of hashes used to scan change if you cross an international border? Is the set locked to whichever country you activate the phone in? This could be a travel nightmare.
You are wrong. It is not a numerical Hash of the exact image.

It is a perceptual Hash of the images characteristics and perceived continent by the algorithm, that’s the “neural” in neuralmatch.

Apple, for yours has been building-in machine learning dedicated chips into their builds so this shouldn’t affect battery life.

Matthew Green is tweeting about this: https://twitter.com/matthew_d_green/status/14230711866160005... and mentions that it is "preceptial hasing"

9 to 5 Mac article, in which they restate that it is not a classical bit-by-bit hash:

https://9to5mac.com/2021/08/05/scanning-for-child-abuse-imag...
You’re obliged to report that image to the police. These types of images are contraband.
On iOS this is done on-device. Apple provides the model(s), and while your phone is charging and asleep it classifies your photos.

I can’t find an extended explanation right now, but they say as much under the photos heading on their privacy page: https://www.apple.com/privacy/
December 2021 is the optimistic estimate, Q1-Q2 2022 is the more realistic one, and the one I've been hearing lately from some people involved in the process.
Why Zymergen Stock Is Plunging 76% Today [Aug. 4, 2021]
You presume Apple and the DoJ will implement this with human beings at each step. They won't. Both parties will automate as much of this clandestine search as possible. With time, the external visibility and oversight of this practice will fade, and with it, any motivation to confirm fair and accurate matches. Welcome to the sloppiness inherent in clandestine law enforcement intel gathering.

As with all politically-motivated initiatives that boldly violate the Constitution (consider the FISA Court, and its rubber stamp approval of 100% of the secret warrants put before it), the use and abuse of this system will go largely underground, like FISA, and its utility will slowly degrade due to lack of oversight. In time, even bad matches will log the IDs of both parties in databases that label them as potential sexual predators.

Believe it. That's how modern computer-based gov't intel works. Like most law enforcement policy recommendation systems, Apple's initial match algorithm will never be assessed for accuracy, nor be accountable for being wrong at least 10% of the time. In time it will be replaced by other third party screening software that will be even more poorly written and overseen. That's just what law enforcement does.

I've personally seen people suffer this kind of gov't abuse and neglect as a result of clueless automated law enforcement initiatives after 9-1-1. I don't welcome more, nor the gradual and willful tossing of everyone's basic Constitutional rights that Apple's practice portends.

The damages to personal liberty that are inherent in conducting secret searches without cause or oversight is exactly why the Fourth Amendment requires a warrant before conducting a search. NOW is the time to disabuse your sense of 'daftness'; not years from now, after the Fourth and Fifth Amendments become irreversibly passe. Or should I say, 'daft'?
Anyone 13 or older can remove themselves from a family sharing group. The only exception is if screen time is enabled and enforced for their device.

Frankly, if you have an abusive partner with physical control over you and a willingness to do this, the fact that Apple supports this technology is the least of your problems.
Well, the site owner would have 0 control over what extensions I have installed. Asking me to disable them would most definitely result in me leaving.
South Korean approach, bind your real id to the game, cheat and end up with a fine irl.
OK, blockchain fans, I’m genuinely confused as usual… Can someone explain what the point is of collecting price data and then putting it on the chain with a smart contract to do calculations on it? If “censorship” is a problem, why not just broadcast/mirror the signed data? If the calculation is untrusted, why not just publish the source code and let people run it on the published data? What is the blockchain accomplishing here?
Unless maybe the primary value of a lot of senior engineers is onboarding and coaching.
Ah, well, I only picked up go very recently so I have no experience writing go outside of the emacs+lsp environment.