skysight-inc/HackerNews huggingface dataset:
> A set of unverified hashes that you hope only came from NCMEC. Telecoms do this on their own devices - not yours.

Yes, those are the main things we’re concerned about.

> Apple just opened the door for constant searches of your digital devices.

Specifically, it opens the door to them scanning content which is then end-to-end encrypted, which is the main problem.

I think the jury is out on whether this capability will be abused. Apple has said they will reject requests to use it for other purposes, but who really knows whether they will end up being forced to add hashes that aren’t CSAM?

I agree that both of these are potential problems.
That’s a reasonable value proposition for the type of company that would be relevant for. I think a more relevant role for a minority board member in the way you describe would be marketing partnerships with other firms that would help reach that demographic. However, this would still be, as all board members are, chosen for their connections, probably even more so than the old fogeys that grew up with the business. But fundamentally I see your point, and my guess is that the firms that this is relevant to know their business better than anybody else, and have been trying their best to find someone that will be good for the business. If I had to guess at the difficulty, it’s that well-connected women and minority business leaders face so much pressure to deliver social justice rather than profits, and these businesses might not be interested in sponsoring that.

Your board makeup is very idealistic, as in, assuming that boards are active participants in the business. Think investor relations and partnerships. Expect the female and minority multiple representation trend[1] to accelerate with this mandate.

[1] https://corpgov.law.harvard.edu/2021/06/25/the-board-diversi...
The stupidest part is why it changed:

https://engineering.atspotify.com/2021/04/07/building-the-fu...

According to https://community.spotify.com/t5/Community-Blog/The-New-Desk...

"We're working on bringing back a list-like Discography view, something many of you have mentioned missing in the new UI"

They could have just left things as is, but no.
I trained as an animator and really, if you want to be able to pick up any of these things, move to Los Angeles. Find classes, visit figure drawing sessions, find people who are in the industry or on its periphery. The internet spreads it out but you are still much more likely to luck into things like “hey my buddy is looking for help on a project” and “I’m gonna go visit my friend who works at WB, wanna come along?”.

You may get some of this by joining animation forums. Join in stuff like “reanimation” projects or other weird passion projects. Don’t expect it to be paid for a depressingly long time.

And personally? I use my animator training to draw comics and do commissions, it’s fucking grueling work. Even if you can get a union gig.
> just add the trump-beats-cnn-gif to the hashes

They could literally do this right now server-side and nobody would ever know.
In Lua terms, the question doesn't even make sense. Symbols are just strings which you can type without quote marks using the . accessor, table.foo is syntax sugar for table["foo"].

I have no idea what you mean by advanced methods on container types though. I find the simplicity of Lua tables liberating rather than constraining.

Lua tables are a Map type, anything except nil can be a key, and every key has a value: if you haven't assigned something to that value, it's nil. There's no separate "object" and no separate "symbol", those patterns are implemented using tables and strings. Even global environments (you can have as many as you need) are just tables.
Adopt a kid instead (updated my original post a bit) if you absolutely must.

But trust me, there are plenty of rich HN readers who are going to ignore me. There’s going to be plenty of new rich kids out there to found the next Facebook and then wonder how they can help with climate change before they have a couple more kids.
I'd use Roger Nesbitt's insights to do a premortem for what might hold us back as we grow the organization. Keep your focus on whether or not people have the right context, agency, and incentive to deliver. You can achieve that with numerous org structures. Don't let the recent org-structure hype (e.g. squads) dictate your decisions.
Apple gave up in the face of China. Why not the US too?
>The use of the detection algorithm is for iCloud only today.

Yes, which is what I was saying in my comment. If or when it comes to Apple changing this then I would agree it's a battle worth fighting, but that is not what is happening here and that is not what I was correcting in this article itself.

>The main issue is that the wall has been breached:

The wall was breached when we opted to run proprietary OS systems. You have zero clue what is going on in that OS and whether it's reporting; you have to trust the vendor on some level and Apple is being fairly transparent here. I would be far more worried if they did this without saying anything at all.
Garbage collection is not part of the Common Lisp standard.

DISASSEMBLE is magic and practically speaking it’s easier to write machine language performant code in CL than any other language. Yes of course you can look at =as= output in your favored language, but it drops you out of your flow.
Accessing a subnet that is behind a WireGuard client using a site-to-site setup
> someone usually mocks "it's always about the kids, think about the kids." To those critics: They have not seen the scope of this problem or the long term impact.

What you are saying here kind of sidetracks the actual problem those critics have though, doesn't it? The problem is not the acknowledgement of how bad child abuse is. The problem is whether we can trust the people who claim that everything they do, they do it for the children. The problem is damaged trust.

And I think your last paragraph illustrates why child abuse is such an effective excuse, if someone criticizes your plan, just avoid and go into how bad child abuse really is.

I'm not accusing you of anything here by the way, I like the article and your insight. I just see a huge danger in the critics and those who actually want to help with this problem being pitted against each other by people who see the topic of child abuse as nothing but a convenient carrier for their goals, the ones that have actually heavily damaged a lot of trust.
Lego Art posters announced with Star Wars, Iron Man, and more (2020)
Try that on your next date and let me know how it goes for you.
I Want to Hire Someone My Team Said No to on the Debrief
Some other options are Earth Class Mail (https://www.earthclassmail.com/) and Traveling Mailbox (https://travelingmailbox.com/).
The elephant in the room is having huge swaths of the state requiring nothing more than a spark to go cataclysmic. Lightning strikes, failing catalytic converters w/side exit tailpipes spewing hot sparks, careless campers, arson, there's an endless list of sources for that spark.

It strikes me as ridiculous PG&E takes so much blame, if there were no power lines California would still be burning.
Gergely Orosz provides helpful advice on a difficult situation. I will add that you can take the different concerns and address it in the onboarding plan (probably needs to be more tailored), who will assist with it, and how to measure their success after 30 days, 90 days, and 180 days. Remind the team that you'll own the decision for better or worse, and need their support and trust if we want to give it a real chance.
so maybe i'm confused, but i thought it worked like this:

pre this thing:

* before syncing photos to icloud, the device encrypts them with a device local key, so they sit on apple's servers encrypted at rest and apple cannot look at them unless they push an update to your device that sends them your key or uploads your photos unencrypted somewhere else

after this thing:

* before syncing photos to icloud, the device encrypts them, but there are essentially two keys. one on your device, and one that can be derived on their servers under special circumstances. the device also hashes the image, but using one of these fancy hashes that are invariant to crops, rotations, translations and noise (like shazam, but for pictures)

* the encrypted photo is uploaded along with the hash (in a special crypto container)

* their service scans all the hashes, but uses crypto magic that does the following:

1) it does some homeomorphic encryption thing where they don't actually see the hash, but they get something like a zero knowledge proof if the image's hash (uploaded along with the image in the "special crypto container") is in their list of bad stuff

2) if enough of these hit, then there's a key that pops out of this process that lets them decrypt the images that were hits

3) the images get added to a list where a room full of unfortunate human beings look at them and confirm that there's nothing good going on in those photos

4) they alert law enforcement

a couple points of confusion to me:

1) i'm assuming they get their "one in a trillion" thing based on two factors. one being the known false positive rate of their perceptual hashing method and the other being their tunable number of hits necessary to trigger decryption. so they regularly benchmark their perceptual hash thing and compute a false positive rate, and then adjust the threshold to keep their overall system false positive probability where they want it?

2) all the user's photos are stored encrypted at rest, it seems that this thing isn't client side scanning, but rather assistance for server side scanning of end to end encrypted content put on their servers.

first off i think it's actually pretty cool that a consumer products company offers end to end encrypted cloud backup of your photos. i don't think google does this, or anyone else. they can just scan images on the server. second off, this is some pretty cool engineering (if i understand it correctly). they're providing more privacy than their competition aaand they've given themselves a way to ensure that they're not in violation of the law by hosting CSAM for their customers.

but i guess the big question is, if people don't like this, can't they just disable icloud?
I’m not virtue signaling.

Other than the political action thing (honestly think it’s pointless) and the fact that I buy too much crap online, that’s how I live my life.

I just don’t see a way where humans “beat” climate change without an incredible (and incredibly unlikely) shift in how we live our lives.
Exactly!

And borrowing money to spend on consumables like apples is clearly risky borrowing. How will you pay it back once you've eaten the apples? So the lender is very strict and the rates are high.

When you borrow money for an asset, it looks safe. You aren't spending money you don't have. You haven't really spent anything; you can always sell the asset to repay your debt! And in the meantime, you reap the gains as the asset goes up. So mortgages are cheap and the lender works hard to help you qualify.

But like you say the risk can only be shuffled into bigger gambles, not removed. You can't make risk-free money by borrowing money cheaply to buy growing assets forever. If the assets are increasingly bought with debt, then their price will correlate inversely with the cost of borrowing.

So right when borrowing gets expensive and you want to sell your assets to pay back your debts, the asset price also drops because everyone else is doing the same thing. It's very hard to de-risk because almost every asset ends up correlated to the same thing: the debt that people are buying those assets with.

I do believe the Fed understands this (and more relevant to me, the Bank of Canada). They know the game they're playing, and I think they're very good at it. And they know the psychology.

They believe the economy will be better off with a period of transient inflation that levels off, because it will get oversized debts down. They're hoping they can hold off on rate increases before that happens, so that rates don't go up until debts are under control. And they're hoping the lenders will go along with it.

Here in Canada we're seeing pseudo interest rate increases via the "stress test", where you have to prove you can afford a 5.8% mortgage in order to get a 2% mortgage, because the government needs to keep debt servicing costs low as they inflate them away without incentivizing everyone to load up on even more of them. That net doesn't catch everybody, but it should protect the most vulnerable. It's a very delicate balancing act. I don't know if it will work.

I think we'll find out soon.
> bar publication of a wide range of material about a court case

applied to all but journalists?
You did agree to upload your information to another server when you turned on iCloud Photo Library.
California is a desert. Those other states are not.
the name is inspired by a Japanese word, and I'm sorry for my unfortunate name choice , I once search on Google when I start this project, but unfortunately I turn on the safe mode ...
Your manager is coding and opening PR?
>Demand drives creation. Getting rid of it on one of the largest potential viewing and sharing platforms is a move in the right direction in addressing the problem.

Yeah, that focus has worked really well in the "war on some drugs," hasn't it?

I don't pretend to have all (or any good ones for that matter) the answers, but we know interdiction doesn't work.

Those who are going to engage in non-consensual behavior (with anyone, not just children) are going to do so whether or not they can view and share records of their abuse.

The current legal regime (in the US at least) creates a gaping hole where even if you don't know what you have (e.g., if someone sends you a child abuse photo without your knowledge or consent) you are guilty, as possession of child abuse images is a felony.

That's wrong. I don't know what the right way is, but adding software to millions of devices searching locally for such stuff creates an environment where literally anyone can be thrown in jail for receiving an unsolicited email or text message. That's not the kind of world in which I want to live.

Many years ago, I was visiting my brother and was taking photos of his two sons, at that time aged ~4.5 and ~2.

I took an entire roll of my brother, his wife and their kids. In one photo, the two boys are sitting on a staircase, and the younger one (none of us noticed, as he wasn't potty trained and hated pants) wasn't wearing any pants.

I took the film to a processor and got my prints in a couple of days. We all had a good laugh looking at the photos and realizing that my nephew wasn't wearing any pants.

There wasn't, when the photos were taken, nor when they were viewed, any abuse or sexual motives involved.

Were that to happen today, I would be sitting in a jail cell, looking at a lengthy prison sentence. And when done "repaying my debt to society" I'd be forced to register as a sex offender for the rest of my life.

Which is ridiculous on its face.

Unless and until we reform these insane and inane laws, I can't support such programs.

N.B.: I strongly believe that consent is never optional and those under the age of consent cannot do so. As such, there should absolutely be accountability and consequences for those who abuse others, including children.
You can’t seriously be suffering that Apple not implementing these measures will somehow be good for privacy in China?
You're assuming that perceptual hashes are uniformly distributed, but that's not the case. If I post a picture of my kid at the beach I'm far, far more likely to generate perceptual hashes closer to the threshold. Not to mention intimate photos of/with my partner.
Doesn't really matter, at most companies +150 employees CTOs are abstracted from making those decisions. It'll be senior level individual contributors that make the case across the org to other ICs.

At that level we're very much aware of the current situation. On a personal level the moment Elastic announced their changes I dropped all support for them moving forward.

They got out done on their own product. Elastic cloud had little value add and once managed ES came along it became pointless to use their cloud.
That seems like a ‘no’ then.
I think your reading of what I posted is both pulling things out of the context of what I actually said and a bad faith reading. Please dont pull things out of context when you’re trying to have a discussion, when you do this, it implies you’re not getting full comprehension of what was actually said. It’s not a herculean task to keep all points from a couple paragraphs in context. It’s not difficult.

I make it very clear that academic publishing has issues. I state it plain as day, I even literally finish my comment with “And to be very clear…:

> And to be very clear, there are very serious problems in the academic publishing world, no question.

However, changing something without even an understanding of what could go wrong is a very serious mistake. As I said in my comment, this doesn’t mean we shouldn’t seek to change and improve things. But if one can’t even imagine what could go wrong, than this person either hasn’t though much about it, or they clearly do not understand the subject very well.

If something needs to be fixed, don’t fall into amature hour. Take the time to actually understand the subject first. Then start fixing.

Now don’t pull bits and pieces of what I said and separate them, please. It’s only a couple paragraphs, It’s not difficult to hold onto the entire context of a couple of small comment paragraphs.
Maybe you're right. I could feel the parent comment's pain from that implication that he was underdeveloped, largely because I agree. I have also noticed in myself that I'm often not aware of my underlying emotions, but very often a victim of them. To everyone around me I seem like an unemotional male, but I think in reality I'm low in emotional expressiveness, reactivity, and neuroticism.
Hardly. Plagiarism is passing someone else idea or work as your own. Most terms especially technical ones have precise agreed upon definition. Calling quoting them plagiarism is stretching the notion to its limits. Thankfully there is no philosophical conundrum to be had when people are lifting complex explanations.
Just so you know, the exta SDRAM on MiSTeris only needed for some of the bigger emulated systems (e.g. CPS2). You can emulate a fair number of systems without it.
I would guess it's some quirk, like a domain that originally had a real DNS A record, then switched it to point at 127.0.0.1 some time later. But the cached index pages remained for some time as well.

Edit: Apparently not. See https://news.ycombinator.com/item?id=28112231 The entire request is all 127.0.0.1 links.
I searched the keyword "SEO" and didn't find any match in the comments here, I'm surprised.

For anyone who has been a webmaster, one can immediately recognize it's an extremely common technique in the blackhat SEO scene for decades, used by content farms everywhere. One just copies articles from somewhere else, replace all words with dictionary synonyms to evade the search engine penalty, and fill the resulted websites with spam.

Perhaps it's not as popular in the English world, but common in China, and is a standard tool included in all blackhat SEO software. And no, it doesn't work well, the output is gibberish too in spite of the language differences. Oh, and the article says:

> A high proportion of these papers came from authors in China.

Exactly what I expected. The spammers found a new market, apparently. It's sad to see that some scientific papers and journals are literally becoming blackhat SEO spam and content farms.
Why? It would be interesting to compare the two systems, but there is no reason to assume the trade-offs are the same.
How does the fires being common across the region absolve California of the accusation of mismanagement? Isn't that more damning?
They do tell you. If your account is flagged, you are notified and have the opportunity to challenge it.
> Google News snippets -- isn't that just "deliberate copyright infringement on a massive scale", if you squint

News snippets seem analogous to thumbnails in image search.

I imagine a fair use defense might be affected by 1) how much of the content is used (e.g. small abstracts vs. full articles) 2) whether the use is transformative (e.g. for an internet search index vs. in a virtual newspaper), and 3) whether the use is commercial (e.g. whether it's by Google or archive.org, and whether there are advertisements shown next to the snippets.)
I just tried to browse to 127.0.0.1 and got an error that the site cannot be reach.... What's wrong with me? Am I really here? Do I exist???
Tech brief: error handling in TypeScript
800ppm is "on the line" per what's industry recommended for an office http://www.energy.wsu.edu/documents/co2inbuildings.pdf
If the visual proxy is enough to determine CSAM from non-CSAM, it's a significant invasion of privacy. Sure a thumbnail is less information than full-res but not that much less.
That's too short a thought, it detracts from the point.

It is bad to post passwords, not just because you lose privacy, but because you'd lose control of important accounts.
Asking people to post their passwords is not reasonable.

I think you might have a point you're trying to make, but please spell it out fully.
yep. what if i take a burst of 12 photos that all incorrectly fall as a false positive to NeuralHash (which is a ML black box), and an Apple reviewer is now invading my privacy by looking at my photo library?
I actually just looked this up as I was curious of what preceded MTV (I wondered if it was a chicken and egg problem. Did MTV have to convince bands to createmusic videos?). The answer seems to be that Australia had been innovators in this space and the US was just catching up to the music video concept, so there were probably less US bands with music videos ready for the launch of MTV.
The post you are replying to did not blame Trump for the fires, it said he was incoherent and incorrect in assigning blame. He continues to do both of those things in his role of King of the GOP, so there's no reason to stop pinning blame on him for things he is doing.
Balancing the one side playing aggressively for the win is the fact that the other side can "aggressively" seek a draw. The "if-we-draw-I-win" side is now way more motivated towards seeking out drawish positions.
You may be right about “should” but the insurance industry is basically an investment industry financed by premiums and always has been.
Don't get me started on how I'm a better driver when tipsy than the average 80 year old that still has their license...

The tongue in cheek point I'm trying to make is that too much of the conversation focuses on relative risk. Relative risk obsession has people not taking more risky, but still incredibly safe (at least in the short term) vaccines here in Australia. Absolute risk (or its delta) tends to be a much more salient number to the victim.

It does help the antivaxx crowd in some circuitous arguments however, as the chance of an unvaccinated person killing a vaccinated person is low if vaccines work!
> make it illegal to offer E2E encryption without this backdoor.

It isn’t a back door to E2E encryption. It can’t even be used to search for a specific image on a person’s device.

It could be used possibly to find a collection of images that are not CSAM but are disliked by the state, assuming Apple is willing to enter into a conspiracy with NCMEC.
I've worked in IT support for many years and this generally comes with the territory. Although some users/customers value your contributions and are very grateful, the majority unfortunately view IT as dial-tone service; only interacting with IT when something "doesn't work for them." As an IT professional, patience is highly-valuable skill.