skysight-inc/HackerNews huggingface dataset:
CentOS is good about a year after first release. But all the packages are ancient.
Interfaces and Interoperability After Google vs. Oracle
Yes, but my understanding was that they do this for iCloud-synced photos.

If iCloud is off, do they still do this? Your quote actually doesn’t contradict that, which is my main hangup. If you turn on iCloud, you forfeit certain expectations.

I’ll read through it carefully now.

EDIT: It was the very first sentence of the intro:

> CSAM Detection enables Apple to accurately identify and report iCloud users who store known Child Sexual Abuse Material (CSAM) in their iCloud Photos accounts.

I don’t get it. It’s their platform. Other image platforms do this matching. Old film shops used to do this matching. Why is this evil?
Read further down:

> the blinding step using the server-side secret is not possible
on device because it is unknown to the device. The goal is to run the final step on the server and finish the
process on server. This ensures the device doesn’t know the result of the match, but it can encode the
result of the on-device match process before uploading to the server.
Yes, some (many?) brokers already offer similar services (i.e. debit card and checking). I think they typically only allow those to access cash on hand though and won't initiate any sales of any securities.
That’s not correct. This applies only to iCloud Photo Library, not to iCloud as a whole.

iCloud Photo Library is an optional feature, and there are numerous alternatives.
Related, busier thread: https://news.ycombinator.com/item?id=28113852
That's a terrifying story. Do you have a link or any other details?
This is a decent comment, and I get it. I also don't want to fool with my setup too much anymore. I use Manjaro for my primary system, and it's great though. I don't want to manage the software that I use everyday through SNAPs or however you do it on Ubuntu nowadays.

I just want the very latest of a short(ish) list of things, lets say arbitrarily within about 2 weeks of release, which is what Manjaro basically gives me.

pamac upgrade -a

Done. Or even better, most of the time:

pacman -Syu

This could be great for a games platform, because you'll get the latest CPU bytecode, and eg. Vulkan, and graphics drivers as well as the latest compatibility tools. Usually it's best to have the latest.

Anyway for Steam deck my first reaction is that they will need to:

1. Do like Manjaro and hold updates for a period of time before distributing them.

2. Provide some sort of one-click revert for when an update randomly prevents your device from booting. These are basically the only big problems that I encounter anymore - it usually takes 20 minutes to an hour to figure out which package is the problem and fix it, but you don't want to be doing that on your $600 steam deck.

Edit: As far as updates that brick your system go, my first experience with Arch was that if you don't keep up with the rolling releases, you will brick your system guaranteed when you update. So we'll see how that goes. That was 10+ years ago, and maybe it's not as bad now.
The Chinese manufacturers. They are the ones responsible for their pollution. And the Chinese government who allows it.

Just like drink manufacturers should be responsible for the plastic waste they produce.
Apple was in a very bad damn if you do damn if you don't situation.

Their CSAM reporting looked awful. They needed a solution. They came up with something that's definitely more elegant and more privacy-oriented than scanning all iCloud Photos.

They went for the more complicated solution, which incidentally is one that less people will properly understand (or care about), therefore limiting the size of the inevitable dent on their privacy reputation.

I think they are also preventing the consequences of some upcoming legislation in the US, UK and other parts of the world to make CSAM scanning mandatory in the Cloud, which would carry the risk of weakening Apple's privacy infrastructure even more.

So, if you're given the choice to go for a haute cuisine gourmet sandwich with a side of shit salad, and a huge shit clam chowder, what would you rather go for?
In Cupertino they picked the sandwich.
That's wholesome.

I used to play a lot with my niece. I can't wait to have my own children to play with them. It's so full of possibilities. Not many games are this entertaining and educational at the same time. Even though it depends very much on how you play it.
Cheap attachable toilet bidet
Haskell Methods
It was clear from the start that SARS-CoV-2 would become endemic. Very interesting write up + data here.

> Cure-Hub's data shows less antibody diversity in vaccinated individuals than naturally infected individuals. Fewer unique antibodies provide the virus with an avenue for immune escape through S protein mutations.

The data compares natural immunity vs vaccinated immunity. I'm curious to see this data compared against individuals who were infected and were then vaccinated vs. individuals who were vaccinated then infected.
This is false. 90% of China's co2 emissions are for local consumption, not manufacturing.

https://ourworldindata.org/co2/country/china
I have no idea, since I'm not the Mozilla exec responsible for those decisions. It's a hot take, but it's not my take.
I remember buying an reading a lot of the books from the list in that appendix. L. Sprague de Camp, Lovecraft, Moorcock (the entire Stormbringer series), and Fritz Leiber especially.
Truly dystopian. I can't wait until someone has to drive to the hospital but has been drinking and can't.
Physicists discover new kind of tetraquark–the longest-lived yet found
Power struggles, brain drain cloud Windows' future (1999)
GOG: Syndicate Wars, Syndicate Plus, Ultima Underworld 1 and 2 Giveaway
One thing that I've noticed when digging into historical programming languages of that time period, is that many of them didn't really treat arrays as a type, but rather as some kind of variable modifier - and then putting the brackets after the variable name makes perfect sense. Notably, Algol-60, the granddaddy of all the C-like languages, already had this syntax:

begin
integer x[1:42];
...
end
“Google has the capability to upload images from your device and could choose to upload every image IF ORDERED TO.”
> This is policy, not capability. The capability is each and every image can be scanned.

Are you familiar with the implementation? If it's in the uploader, then the capability for each image to be scanned sounds like it would involve a bunch of code changes.

But let's posit that the implementation just checks the "uploaded to iCloud" flag and hence this is "just policy". I agree that this is concerning, but I think it's important to distinguish between "could do X" and "is doing X" when describing a situation.

> You are incorrect

I would love to be enlightened here. Can you please point me to an explanation of how my understanding is incorrect?

> but also the concern is NCMEC’s database’s accuracy

I absolutely share this concern.

> You are taking these points entirely out of context and in a vacuum.

No, I don't think I am. I think there is enough heated rhetoric going on here, with people mis-stating what is actually going on to justify how they feel about it, that it's worth being very clear about what the problems here really are. Otherwise it feels like people are arguing against strawmen and makes it too easy to dismiss concerns that are very pertinent.

The original article for this thread, by the way, does a good job here.
This sounds like a plan Fauci would come up with himself.
In arch, everything works straight out of the box. However the box is very small, and you need a lot of other boxes, to get a «normal» working system that can write code and play music and tile windows and…
Show HN: LifeBits – share memories, not posts
Sure, I can see that line of argumentation, but you’re paying a constant opportunity cost for having cash around

In some sense this is a form of self-insurance rather than paying a “premium” in opportunity cost to the bank each month / year.

Also: I know recommending options to novice investors is considered heresy, but in my experience 1 year puts insuring 50 or even 70% of market value via strike price are often considerably less costly than a 6-8% assumed annual opportunity cost between SPX and some 0/1% saving’s account.

Something that’s automated like this could easily just buy puts with a 1 year window on deposit and paired sell them with equities on withdrawal.
> Apple is doing it, soon, on your phone.

Apple is only checking images you choose to upload to iCloud photos to see if you are uploading a collection of CSAM. This is entirely optional, and they have publicly explained what they are doing.

They are not sniffing through your communications as they see fit.
Agreed and a great example of why his message on free software is so important. I would never have been as cognizant of the topic if not for his laser-focused and committed work.
Thank you, that is useful context!
The Zika warning posters and insect repellent are plentiful in Disney World.
I just want to contest the "too stupid to realize a scam" bit, in part because of the idea that stupid people are deserving of mistreatment (they aren't), but mostly because stupidity has very little to do with it. Vulnerability has a lot to do with. Most of the time, most people aren't vulnerable to scams. Thats the trick though, a successful scam is about finding people who are temporarily vulnerable. And everyone is at some point in their lives.
Mail processor. I spend $20/month, they receive all of my mail, open it, and digitize it. They discard the junk mail if I want. I never have to visit a mailbox again. I can even register it as my address on my driver's license and for my vehicles.

EDIT: The service I use is https://www.sbimailservice.com/.
> My goodness, I couldn't imagine a stupider way to fight CSAM.

That's the point. It satisfies the letter of the demands from the crazies, while not actually accomplishing anything, and creating discourse in the rest of the population to work towards realizing that we shouldn't be bending to the whims of the crazies at all.
Yeah, it was never just "the Patriot Act" and it wasn't rejected particularly thoroughly so no one would be terribly surprised if the Patriot Act 2: Electric Boogaloo happened tomorrow.

But still, the regular renewals have ended and the Patriot Act is dead. It's not surprising that it wasn't bigger news -- March 2020 was a little busy -- but it's worth taking the win.
Why are they 'preventing' the upcoming legislation?
What does Qui mean in this context?
For any population you test wherein the true positive rate is very low even a very low false positive rate will produce overwhelmingly false positives.

Also you could trivially have 1 bad guy with thousands of photos being accounted as 5,000 reports instead of 1 report listing 5000 images.
For Some In China's Middle Class, Pollution Is Spurring Action

https://www.npr.org/sections/parallels/2017/03/02/518173670/...
I was under the perception (new to HN) that downvotes are for when someone's comment does not add value to the conversation (eg. memes and name calling). Downvoting something you disagree is dangerous because it'll feed those that truly believe that to believe it even more (being silenced). Instead of downvoting we need to dedicate time to reason through why x is misinformation and walk through how you get to your conclusion. Sure not everyone has the time for that but also because no one is willing to dedicate time for that, we have this quick easy divisions with no explanation.
Windows for games, macOS for anything that might qualify as work. Linux for single-application multimedia appliances, probably on an RPi so the install is just a dd command and the platform's got enough eyes on it that it'll almost certainly Just Work with minimal tinkering. Linux on servers, but eyeing FreeBSD pretty hard.
IPCC Sixth Assessment Report 2021
Senators have a deal on the crypto amendment, and Treasury won’t oppose it
As I see it, it's plain and simple: companies want to make all the money in the world at any cost. This "growth" is how they measure their success among each other. But caring for their users and treating them as adults with agency doesn't earn as much as manipulating them into doing something they never intended. And this manipulation drives the ongoing dumbing down of everything. Back in the day, if you were annoyed by something in a piece of software, you went looking for a setting to make it your way, and more often than not, you found and changed it. No more.

Apple in particular is a good example here. They used to position themselves as a company that makes great tools that empower people. But now they're putting their own agenda, and, conveniently, bottom line, before that. That's how we end up with endless redesigns of things that worked perfectly fine for everyone (e.g. safari).
That is one plausible outcome here, yes.
> Why is BP's fault?

Where have you been? You missed oil comapnies spending billions to misinform people, the corruption, the carteling, ghe cover-ups, the greenwashing and everything else?
Onceler is one option based on Ruby, in-memory storage only:

https://github.com/ab/onceler
No, but from your multiple posts on this article, I don't know that I can take your android posts in good faith.
Science Museum, UK: criticism over climate exhibition sponsored by Shell [video]
25 years ago! the prices haven't changed!
I don't really see any argument against of for either distro here. And then there is de false argument that Debian 'groups updates in to a big update', which is also not really the case.

I suppose the real issue I personally take is the wording used here; updates aren't "just updates" and haven't been for a long time, not even in commercial-desktop-land. You have updates that just do things like security and bug fixes, and then there are feature updates, and then you have major changes. In Debian's case, you don't get major updates of packages within a single Debian release. If you started with GNOME2 for example, you don't get GNOME3 until the next Debian release. But you do get GNOME 2.1, 2.2, 2.3 etc. (this is just an example, not a real versioning or naming scheme)

What the article makes it seem is that you don't get minor updates either. Or bug fixes. Perhaps this is a result of trying to 'dumb down' the intricacies of downstream vs. upstream packaging, distributions and multi-project releases.

At the same time, the whole argument doesn't make any sense anyway: if you are Valve, you control your own releases and your own distribution. It matters a whole lot less what 'upstream' vendor your use is doing, because you can always do whatever you want in your own distro. Or better yet, you can take what upstream does, and use backports to get major core changes into your current version. And if that isn't enough, you can take a look at the many bistro-derivatives, including the likes of Ubuntu; they are (sometimes loosely) based on an existing long-term distro but with a lot of local modifications/replacements on top of that.

Because Valve is already making their own distro, it is unlikely to really matter what 'upstream' they use, the only big change would be the standards they uphold (be it packaging methods, like dpkg vs. rpm) or openness (DFSG vs. "I'll just drop this binary in here and see what happens later"). Better yet, if Debian wasn't a good fit, they could have gone with Ubuntu instead. Or any other derivative.

It smells like a 'we wanted something different but not really deal with licensing/legal' combined with 'the new guy runs arch on his Thinkpad so yeah'. In the end if matters a whole lot less than your average distro-war; Valve still just has a distro, they still release it, and they still support it. It's just more hobby-like than production-like at this time. Switching to some SONiC-SAI type architecture would have made more sense.
Indeed. But it strikes me that the places with the most rigorous enforcement of theological dominance also have the worst child abuse problems. Or, as an AI would decide, men in robes can't be trusted.
Posted here 6 days ago: https://news.ycombinator.com/item?id=28050750
Varying length of phone charging cables.

Bought a couple of bundles of iPhone charging cables from Amazon that were 3ft/6ft/10ft in length with charging attachment from my old iPhones.

It's such a great feeling to use the phone from any part of my place without having to worry about length of the cable.

I keep a couple of the longer cables in my car too just in case someone wants to charge on a long trip.
That is one of the reasons I'm running Manjaro, like many replies here.

I get new hardware support and access to the many only-arch-pre-packaged software, in a more stable base.
yes search is broken. When you report SEO spam sites to companies like Cloudflare or Godaddy they just ignore them. Meanwhile Google happily incorporates negative SEO in their rankings. These days I'm using duck.com to have some decent results
Really prepping them for office life and working as an individual contributor with this approach
> This is (rightly) causing enormous damage to Apple's brand

Apple’s brand according to HN has already been damaged by too many trade offs: walling off the App Store, the MacOs system disk, availability of stand-alone OS updates and more.

Extreme temperatures and wildfires are to climate change as tangible customer data leaks are to Apple’s implementation of security and privacy around its ecosystem.

That is, CSAM scanning does nothing to prompt a 114 degree day in an iPhone user’s mind.

Until Americans are hauled into custody the way Belarusians are right now, this will not enter the customer perception of Apple’s brand.

And if that future lies ahead, it will be way too late to matter.
It's such a bad attempt for the West to wiggle out of its own responsibility. Especially the US has a crazy high CO2 emission per capita. That's a much more damning number that should lead to action.
I appreciate how the hardware pictured is an Intel "NeXT" Unit of Computing.
I second that. Automatic snapshots are priceless
My take on what makes eval of lisp different from other evals is at https://taeric.github.io/CodeAsData.html

The part that I think I do a poor job of understanding/explaining is that lisp doesn't eval strings of code. Instead, it evals lists of tokenized data.
> Any changes that could be problematic are announced on the site and the arch-announce mailing list

Yeah.. once I did a normal upgrade and it fucked my whole system. I asked for help and I was told that exact sentence "read the mailing list, it was announced". Thanks, but no thanks.
Once you have a good Creeper farm you suddenly have the problem of there not being any kind of sand farm in the base game AFAIK. You can dig up a desert to get a big supply, but even that will get consumed by a constantly running TNT factory.
Land/Value tax is the best.

Poor people, hell half of middle class don't own land or property.

Land and the resources on them should be taxed for the value they give whoever owns them. This could essentially pay for Basic Income, and it's not something you can 'offshore', and it even makes foreign investors pay nice taxes, (we could even tax them more).
The standard investment risk questionnaire, in combination with risk-appropriate choices, is a safe harbor for advisors.
It's just a number taken out of thin air, just like the original 2 million.
Imagine if home builders, under pressure from law enforcement and government bodies, included built-in devices in your home that monitored and analyzed your behaviors and interactions, just to 'keep people safe'.

And you couldn't uninstall them, even though you own the home.

And you couldn't know when a human was reviewing 'suspicious behavior' telemetry, which included images, video and audio of you and your family.

And you couldn't control anything about when and where this happened, except by moving house.

And all of this was framed as a 'safety' problem, and if you complained about this, you were considered one of the 'screeching voices of the minority'.
> from a supplier and are freely able to dictate terms

Taylor does not supply McDonald's the giant corporation: it supplies the individual franchisees, who are closer in negotiating power to any small restaurant (except that they also have terms dictated to them by McDonald's itself).
My point is that you don't need a lawyer to use crypto. Just the same that you don't need a lawyer to order LSD off the dark net. And 99% of people who do both, do so without a lawyer. The rising price of crypto clearly shows the market shows no fear about this measure slowing down widespread adoption.

But for a small percent of unlucky people, mostly disadvantaged people without connections who can't afford the lawyers to insulate themselves from legal risk, the government will come in and randomly ruin their lives. No enlightened society should ever criminalize a victimless behavior, unless it's capable of widespread enforcement. Like the war on drugs, criminalizing an activity that you know you can't stop only ruins lives, without actually stopping the thing you're ostensibly worried about.
But the point is there’s an existing database. Either you have a photo in that database, or you don’t. So your kids naked photos don’t get triggered. And even if that photo is legal, not only is there human verification and minimum quantities required, it would be very strange for you to have in your iCloud photos that were part of CP collection sets regardless of content.
In Past 12 Months U.S. Mobile Tabletop Game Spending Rises 40% to $704M
It would be better if Apple refused to implement client-side scanning altogether.

Making a claim we know they cannot uphold is pointless.

Oh and it's time to update this ad:

https://www.businessinsider.com/apples-ces-ad-las-vegas-misl...
along with intel. they had sweet 4 way fat binaries that had code for all 4 architectures.
Is that so? Your source doesn't show which percentage of energy is used for foreign production or to support foreign production
It is not at the moment but we are considering making the server + maybe infra repos public in the future, most likely when we've agreed on and implemented some sort of self-hosted option(s).

We will probably write a blog post or two about how we've designed the API + infra around it as there are some interesting topics to be covered.

One of the goals was to also have fun and experiment with a few approaches we've been wanting to use but could not on our daily jobs.

For reference, everything is on AWS and we are using AWS CDK (TypeScript), having moved away from serverless.com recently.

We are ONLY using managed services/resources which are "fully serverless" (API GW, WAF, Dynamo + Dynamo Streams, Lambda, EventBridge, ...) - to save cost, to minimise waste, to reduce ops, etc.

Hope this helps, happy to provide more details.
What about option 6?

Create a GPG key and encrypt / decrypt your messages.

It takes about 10 minutes once to set up your key and then it's easy to send and receive encrypted messages with no central server since you could send the encrypted text over whatever transport mechanism you prefer (gist, email, etc.).
I have owned nearly every premium phone on the market and none of them come close to the Sony Xperia for battery life. I try new iPhones every other model or so...battery life has never been outstanding.