skysight-inc/HackerNews huggingface dataset:
For both of those, you can put them through some chromatography/spectrography/etc. and figure out essentially what's in them — what ingredients, in what ratios. What you won't find out is the particular process required to get those ingredients "formatted" the right way to taste like the result.

(E.g. Coke apparently does some fancy, hard-to-replicate-at-home kind of micronized emulsification to the flavoring oils that go into it, to get them into suspension in a water-based drink in a way that results in a smooth—but not viscous or lingering—mouth-feel. That process doesn't change what's in Coke; it just changes how it's in there.)

Also, in both of those cases, FDA inspectors know not only the what but also the how, as they check the manufacturing process to ensure that they're putting in what they (privately) claim to be putting in, no more and no less. And we can then trust the FDA to not let them put anything too "weird" in there, while they can also trust the FDA to not tell everyone what they know about the process.
Regardless of whether this attack works or not, you'd assume this scheme produces a wider attack surface against pictures in iCloud and against iCloud users. One attack I could imagine is a hacker uploading child porn to a hacked device to trigger immediate enforcement against a user (and sure, maybe there are more controls involved but would you carry around a very well-protected, well-designed hand grenade in your wallet just so you're bad, it'll explode).
Unless their business is threatened
The SCIP quote the author tries to dispute is still very true. If you ask developers of a decently sized modern mature software system to list the main problems they are encountering, they will probably name complexity, legacy code, lack of documentation, bugs, and not the performance.

As to making readable programs run fast, this is the job for compilers. Compilers should perform more and more sophisticated code transformations for high-level languages with well-defined semantics, generating faster and faster code. The application-level programmers should not be burdened with details like CPU cache size.
https://hackaday.com/blog/
I cant send the payment to agora.download, but i can send it to test.agora.download . What's happening?
There's a concomitant number of ground stations augmenting the network. In my relatively small town starlink has 300gbps via fiber serving two base stations.

They're doing the infrastructure right with the aim of $100 gigabit internet service. Which Hughes and viasat could have pulled off if they'd been able to reach the same orbits, volume of satellites at the right price point, and been willing to invest in our take advantage of infrastructure on the ground.

The pay per byte model is fraudulent, whether your connection is satellite or coax or fiber. Once that is embraced, networks stagnate. Because established satellite isps are universally scumbags, I'm very glad starlink is breaking them. They'll have to compete with an unmetered service model, or die out.
Well, the experts which were consulted by the writer of the article have this to say:

> I had a breakthrough a few months later when I came across a thesis paper by Dr. MS Rathore, who had propagated Maerua oblongifolia in the lab in 2011. He had seen the tree many times in the desert state of Rajasthan. “But I haven’t heard or seen anybody eating the root,” the scientist said over a call, sounding puzzled.

> “Its roots are sparse and inedible,” added Dr. NS Shekhawat, his thesis adviser and a retired professor of botany. “Growing in dry regions, where will it have so much water to develop big roots and be fat and juicy? [The snack] can’t be Maerua oblongifolia.”

Which seems to provide a little bit of a counterpoint.
Inside the War on Apple and Google App Stores
Strange, I'm on Catalina and it runs fine. I did have to override the security settings [1], but everything else was fine.

[1]: https://support.apple.com/guide/mac-help/open-a-mac-app-from...
Probably US would pay Russia for keeping them in place.
There is no more committing to the ES community for AWS. I agree a single project would have been great but lets just be clear the necessity for the fork was entirely on Elastic Co.
WhatsApp allows you to download an APK from their website. It works without Google Play dependencies.
Use the audio puzzle and type incorrect words that sound right.
"Disinformation" is just a fancy word people(in this case pro US-UK government propogandists) throw around to shut down people when they have no valid comeback.
We've banned this account for posting the same things over and over. Single-purpose accounts are not allowed here, and using the site primarily for political/ideological battle is also not allowed here.

Please don't create accounts to break HN's rules with.

https://news.ycombinator.com/newsguidelines.html
Who has died on a space station? Do you have some information everyone else does not?
New error message : Payment Problem

You already paid that invoice! Ask them for a new one?

I still cant pass the paywall.
For some reason, after reading the initial reporting on this system, I thought it was running against any photos on your iPhone, but now I read the actual paper, it seems like it only applies to photos destined to be uploaded to iCloud? So users can opt out by not using iCloud?
There is literally a Doubt section there, the page isn't well-cited on the food bit.
The video discusses jet aircraft "tube and wing" design. There were no operational jet aircraft prior to WWII, and the first test flights only predated the war itself by four days.

https://en.wikipedia.org/wiki/Heinkel_He_178

There were pressurised aircraft prior to WWII, but only just. And the first pressurised civilian commercial aviaation aircraft was also a Boeing design, the propeller-driven 307.

https://en.wikipedia.org/wiki/Boeing_307_Stratoliner

One might argue that Boeing wasn't entirely the first to commercial jet airliners (the De Havilland Comet preceded it in commercial use by 6 years, though proved remarkably unreliable initially), but it was the first commercially successful jet, truly ushered in the Jet Age, and has served as the fundamental prototype of the vast majority of jet-powered aircraft which followed (Concorde being the principle exception). The 707 was developed directly from Boeing's work in developing high-altitude, long-range bombers during and after WWII.
It's already like that, and it always has been. The most powerful people have immense power because they are inside governments or have corrupted them. At a level below that, they have funds in hidden offshore shell accounts, accounts under other people's names, physical assets.

Further, like encryption, cryptocurrencies are not something that you can ban in an effective way no matter how desperately you want to, so you will just have to deal with it.

The most powerful people will always have privacy and be above laws. The only way you can equalise it is to give some of those abilities to the little people
I wonder if captchas are driving any change in language.
Multics Gets a New Release 52 Years After Launch
Not even close. My arm is about 3 inches longer than my foot.
16k is indeed pushing it, certainly w.r.t. generation (they'll recognize around 16k words, but won't be able to use them). And because they're never going to recall truly random words, there'll be 30 bits or less in the final passphrase.

Just in case: correct, horse, staple, battery are far more frequent, and acquired earlier in life, and thus more likely to be part of a passphrase than e.g. rime, bagnio, pungently, cruse.
I don't deny that it's possible. If you're having champagne and caviar on your date you're definitely going to run a bill of over Rs. 10k. But the author claims that 8k is a typical expense for a date night out, which is absurd.
Using a Makefile with Your Web App
Agree.

The way the article is written you'd think this was NASA's station. How dare NASA let this happen!

It doesn't belong to the US, it isn't NASA's station, it is the International Space Station. The module that tried to take its football and go home was Russian.
So like Gumroad but with crypto payments?
It's Indian street food so I'd say what you describe is the optimistic scenario. Worst case it's an industrial product of sorts, produced backyard factories. South Asia has a huge variety of culinary plants and snacks, some of which are unknown even to locals, especially if it's a regional thing. But that no one would know and no one wants to talk about what it is, that's highly suspicious.

It's really sad, China and India have among the best food in the world but they also have among the worst food safety record. Almost anything can be faked or adulterated for profit, from cooking oil that makes people go blind to instant baby formula that kills the infants.
Depends on the age of consent in both person’s jurisdiction and where they go with those pictures. My 16 year-old self got quite a lecture when my girlfriend and I took some pics of each other and my parents found them. (Age of consent was 13 where we lived, but it was 18 just up the road in another state).
Torture is not a good example. If you torture someone enough they will tell you whatever you want them to tell you in order to stop it.

Mike Baker talks about why it was pointless for the CIA to torture someone and why when they train people how to handle being capture, they tell them to tell the truth with a little information redacted.
wow, so much missing nuance and little actual understanding… I am not religious but bless your soul… is all I want to say to this
meh. let the earth burn.

we made our bed, now we sleep in it.
> This is completely wrong.

Which part? The fact that storing "length" along with a hash is not superfluous?

You can probably find many things which have a SHA hash of "ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb" (infinite things, if we assume arbitrary-sized inputs), but you can only find ONE thing which has that hash and has length 1. I just made it impossible (not just unlikely) for you to find a collision.

> The known collision attacks for the MD-family and SHA-1 all in fact produce collisions with the exact same length.

Emphasis mine. And note that I did not claim otherwise in my comment.
His demo runs as a GitHub action. And you could wrap this in a serverless function.

The point it that you could roll-your-own on your own terms.

Personally I think it's great that it wasn't built for an online service - the misaligned incentives tends to spoil the result.
I believe Franklin said something along the lines of anyone who gives up freedom for security doesnt deserve freedom at all.
>In fixing the academia publishing industry there currently exists 0 experts that can predict that so any random guy’s guess is as good as anyones

I'm not sure how you can look at political discourse in the United States today and say "yep, let's just blow up academic gatekeepers". Just one anti-vaccine paper from almost 30 years ago (that wasn't even accepted into any publications) and fueled an entire generation of luddites.

The value of academic journals today is trust and the internet has not solved that. Pretend if GP had been searching Google, rather than SciHub. There are millions in the US who have used Google to deduce that placing rocks around your house can cure your migraines all because an enterprising individual had gamed SEO.

"It’s too complicated to fix it" is not what the parent poster was implying. If you take a second to breakdown the actual value that journals provide then one clear way it can become much worse is a model similar to the open web where anyone can publish anything with very loose standards for reproducibility or rigor.
Try harder and follow the links

https://www.youtube.com/watch?v=XlwOrdciEX8
I'm a bit surprised I need to spell this out: examples supporting your argument and assertions.
They're providing all of this information which says that this program that runs on our devices is incredibly safe if we're not bad people.

That's not far from saying "only criminals have something to hide".

Seeing this come from Apple, a company which has won a lot of popularity with its stance on privacy, is absolutely astounding and definitely makes one wonder whether there is an ulterior motive.
Also don’t upload to MS, Google, Dropbox as they also scan for CSAM.
What do you make of this?

https://www.youtube.com/watch?v=XlwOrdciEX8

and this

https://www.youtube.com/watch?v=v7sn42heQ2w

Have you ever been to the Champavat region of Uttarakhand?
"Received Payment

A welcome gift! Thanks for trying HTLC.me!

0.00313370 tBTC ($140.06 tUSD)"

What is the difference between USD and tUSD?
Very much so! Plus it's open source and anyone can run an instance.
Yes if you only care about 2d bbox detection, a smart bounding box annotation tool has some advantages. If you need to solve 3D vision tasks, as is the case in 3D bbox detection, 3D keypoint detection, 6D pose estimation, then you need a tool that can also label the z dimension.
And ignore context? Absolutely.
Yes. Bitcoin, specifically.
Where can I bet against Chinese manned missions to Mars in 2030?
HTLC.me is a testnet Lightning wallet, so the balances are in tBTC, testnet bitcoin. tUSD isn't a real thing, it just means that if your balance was in BTC and not tBTC, you would have that much USD.
There is no food 'regulation' for the snacks sold in open cart. There are innumerable varieties of such snack which are not 'mysterious'.

This seems to be 'mysterious' because of the writing skill of the author. She successfully managed to create a buzz.

If finding the answer was the goal it could have been easily found out by offering 10X-50X (approx $150-$700 = Annual income perhaps) the money they offered mentioned in the article as a proposition to take over their business and as part of that asking them to show the source of the 'supply'.
Not for "security" but rather for surveillance. The problem is the phones are too secure for governments to get the surveillance they want out of them.
Here is a piece of commentary from a Russian insider covering the launch of Nauka, but not the docking, in Russian [1]. There was a litany of smaller issues with the launch, probably stemming from the fact that the module has been tossed around for 25+ years.

I generally don't expect Roskosmos to make any comments regarding Nauka unless it blows up or something. Part of the reason, apparently, is that Roskosmos is being assessed for new funding (from the blog post, Google translate edited for clarity):

"""

Docking is scheduled for July 29. The future of Russian manned astronautics depends on its success. With Nauka, the Russian segment will be able to operate for another 10 years, and be more effective as a research platform.

The future of the independent Russian Orbital Service Station (ROSS) is also indirectly related to the success of Nauka. With Nauka, Roskosmos gets a chance to show that it has the ability to create and launch manned space stations. This, in turn, increases the likelihood of obtaining the funding for ROSS.

Probably, this is the reason that Roscosmos has been reluctant to voice any of the problems with Nauka. When half a trillion rubles is at stake, you will inevitably lose your voice.

"""

Half a trillion rubles is about $7bn American. I've been hearing about plans for this new station for a few years now. I don't really know if it's real. Involvement with the ISS, where Americans shouldered 80% of the financial burden, is really what kept the Russian space program relevant. So I don't expect us to pull out of the ISS voluntarily. If the ISS ends up being decommissioned this decade, hopefully we can piggy back with the Chinese on their new projects or something. That's assuming we have anything they want, which is a big question mark come year 2030.

[1] https://zelenyikot.livejournal.com/158629.html
"The most terrifying words in the English language are: I'm from the government and I'm here to help” --Ronald Reagan (b. 1911)
Who says the best outcome is when perceived risk equals actual risk? It may be better for everyone involved to overestimate the risk, same as driving a car.
Fantastic effort - great to see decentralised file downloads with the ability to accept payments. It's a good step towards freeing independent commerce from the increasingly-censorious establishment tech players.

There is certainly potential for negatives, like people self-hosting to sell pirated and other illegal content. However we're at this point because the establishment services have been engaging in worsening behaviour over the past few years.

Good luck and looking forward to seeing this develop.
A much better criticism of that line would be that it was attacking a strawman. It was a hyperbolic representation of the fears I was trying to quell. Saying that I was implying those politicians should be forcibly removed from office requires ignoring a LOT of context. It wouldn’t make very much sense for me to signal that I supported using violence against detractors while arguing that the backlash to transphobia is massively overstated.
ok, so this means linux for sure now?
Why give up hope of a good marriage for fear of a bad one?
According to the article it’s not actually the root, that’s just a story the vendors tell, it’s the stem.
Yeah pretty much. Another way of thinking about it, is that to upload an image to iCloud, your phone must provide a cryptographic safety voucher to prove the image isn’t CSAM.
The technotronic era involves the gradual appearance of a more controlled society. Such a society would be dominated by an elite, unrestrained by traditional values. Soon it will be possible to assert almost continuous surveillance over every citizen and maintain up-to-date complete files containing even the most personal information about the citizen. These
files will be subject to instantaneous retrieval by the authorities.

(Zbigniew Brzezinski, Between Two Ages, 1971)
This would be thin margin, low volume business and usually these cart owners source all the raw materials directly.
Can't Amazon just serve these bogus headers and keep opensearch compatible? It's not like headers are copyrighted...
Are you using the agora.download or test.agora.download? If you're using test.agora.download, are you paying with htlc.me? Can you provide the invoice ID? (It's the hexadecimal string after `/invoice/`.)
> - It is WYSIWYG editor so that you don't have to switch context.

Funny, avoiding context switches is why I keep everything in plaintext...
that's academia for you. lots of book smarts, useless at street smarts.
Once they get Skylink it sounds like a libertarian dream.
New Laptop – ThinkPad P14s
Stop defending Apple! They have always handed over their Chinese users' data to the authorities. They were always willing to compromise user privacy to the state.

They once had a marketing stunt where they wouldn't unlock an iPhone for the FBI only after they had already handed them decrypted backups from the very same phone.
https://burglarsguide.com/ is the book site
Much of the discussion is about how trivial it would be for Apple to start scanning any photos on the phone at a later date.

Right now they are able to bill this as doing what they currently do server side, but client side. Later, they can say they are simply applying the same "protections" to all photos instead of merely the ones being uploaded to iCloud.
> who makes Google money

Could you expand on this a bit? How, specifically, does DeepMind make Google money?
That's a lot of substacks to pay for, I can easily see that touching $50/mo on substack itself. Do you feel that amount of money justifies what you get?
Not if it’s actually toxic. In that case revealing the source could get them in serious trouble and wouldn’t be worth it at any price.
Actually that’s not true. In 2017 .wed (with real customers) gTLD ceased operation and was taken over by ICANN under the EBERO program. http://domainincite.com/22372-as-wed-goes-ebero-did-the-firs...
Ah, but one big reason people use password manager programs is that the passwords are simply too awkward to type by hand.

If you have passwords which you can easily touch type, because they are just words, then your password manager can be a 3x4 card in your wallet.

That card, rather than revealing the passwords, can just use some sort of shorthand mnemonics that only mean something to you. For instance, "correct battery horse staple" could just be noted down as a "CBHS", or some other idea.

Typable passwords are useful with any sort of manager that doesn't enter passwords for you. E.g. a hardware device with a display that just shows you the password. Such a thing will work in circumstances when you're not able to run your password manager for whatever reason.
A stretch that one enjoys is a waste of time because nothing gets stretched.
I'm really curious to hear any stories or more detail about how Rust can feel weird to someone without experience with functional programming concepts?

One of the things I like most about Rust is how aggressively normal it feels to me, and it's really hard for me to remember what it's like to encounter this stuff for the first time.
Technically the truth, anybody can eat this. They didn't say it's a good idea to do so ;)
That they are 100+ years old doesn’t change the fact that that they remain illegal (and thus available for political leverage).
Any single person moving there with a SV salary can single handedly triple the GDP :P
Let's say i want to test it by using real BTC. How can i do it? The real lightning wallet.
> ...while living in a world that increasingly becomes difficult to succeed in

This is interesting. What is different about the world today than in the past?
I'm using the agora.download.
test.agora.download is working fine.
https://news.ycombinator.com/item?id=28085035
You can ask the question at little differently. The authoritarian state may not care about most sites, but they do care about a few selected sites which they consider "subversive." By monitoring the traffic at both ends, they could potentially correlate packet timestamps, and infer your IP without directly tracing it. Kind of like Shazam for dictators.
According to Grubers analysis it compares the csam pictures against the library. Your 17 year old is not part of that database. Hence no hash matches.

CSAM provides a library with hashes that are compared against the photos on the phone.

The real problem comes when governments make laws that open the mechanism to different libraries of photos.
Nicer screens/features and hackability mostly. The Kindles so far are midrange hardware at best (and their pricing reflects that). Only the Kindle Oasis 3 approaches a resolution on which you can open a comic/manga/pdf full page and read smaller fonts. Entirely missing from the Amazon lineup (and where we're entering the $400-$1000 range) are ebook tablets.

Having gone through a dozen different reading devices, I can say that I prefer Kobo devices. They admittedly have a special place in my heart for being fixable after I soft bricked one by messing around with the OS via ssh - their "internal" storage is an actual physical micro sd card sitting on the board that you can pop out after opening the device. A kind stranger on a forum sent me a good firmware and a 'dd' later I had a working device again.
Can they scan for face recognition? For specific faces?
+1, some elongated thin buttons on the bezels with great tactical feedback would be killer. Nook's had this iirc. And yes touch everywhere is getting old
Without a list of requirements answering this question is impossible. There might be 1 required (e.g. authN/Z) that for _reasons_ upgrades the level of complexity considerably.

That said, the web is complex today because user expectations grew significantly. A website must be compliant with all browsers, mobile ready, save state without users clicking a 'save' button, etc. A CMS might do all that out of the box with boilerplate generic code.