skysight-inc/HackerNews huggingface dataset:
i dunno, reading this thing sure does make it sound like it's only for photos stored in icloud. and the existence of such an elaborate system sure does seem to indicate that photos are end to end encrypted on their servers, otherwise they could just hash them there.

it does the matching client side, so the hashes never leave the client. what it does send with the photos is this threshold thing where if enough of them are hits, it reveals them, otherwise they see nothing.

it seems pretty unequivocal that this is all a system to support scanning of e2e encrypted images on icloud. there would be no need for such an elaborate system if they could scan the images on the server. as far as i know, google does not e2e encrypt images, and for all we know, they actually do engage in server side scanning.

to quote their statement https://www.apple.com/child-safety/:

> To help address this, new technology in iOS and iPadOS* will allow Apple to detect known CSAM images stored in iCloud Photos. This will enable Apple to report these instances to the National Center for Missing and Exploited Children (NCMEC). NCMEC acts as a comprehensive reporting center for CSAM and works in collaboration with law enforcement agencies across the United States.

> Apple’s method of detecting known CSAM is designed with user privacy in mind. Instead of scanning images in the cloud, the system performs on-device matching using a database of known CSAM image hashes provided by NCMEC and other child safety organizations. Apple further transforms this database into an unreadable set of hashes that is securely stored on users’ devices.

> Before an image is stored in iCloud Photos, an on-device matching process is performed for that image against the known CSAM hashes. This matching process is powered by a cryptographic technology called private set intersection, which determines if there is a match without revealing the result. The device creates a cryptographic safety voucher that encodes the match result along with additional encrypted data about the image. This voucher is uploaded to iCloud Photos along with the image.

> Using another technology called threshold secret sharing, the system ensures the contents of the safety vouchers cannot be interpreted by Apple unless the iCloud Photos account crosses a threshold of known CSAM content. The threshold is set to provide an extremely high level of accuracy and ensures less than a one in one trillion chance per year of incorrectly flagging a given account.

> Only when the threshold is exceeded does the cryptographic technology allow Apple to interpret the contents of the safety vouchers associated with the matching CSAM images. Apple then manually reviews each report to confirm there is a match, disables the user’s account, and sends a report to NCMEC. If a user feels their account has been mistakenly flagged they can file an appeal to have their account reinstated.
Don't read HN on this topic. Read what actual climate experts have to say. Look at their academic and public-facing statements on the subject. Climatologists, climate economists, energy and agriculture experts.

Start with reading. For example http://www.withouthotair.com/
Agree. I appreciate this suffers from a No True Scotsman fallacy, but the framing from the OP completely misses the point on what a Product Manager _should_ be doing. There’s a near infinite list of things customers want. From missing features, to bug fixes, minor UI improvements, to whole new products. If people are making change for change sake it’s usually more of a symptom of not doing the work to actually identify what would be impactful and valuable. It’s reaching for what feels easy versus doing the hard work.
Would you bet on a manned mission happening tomorrow? Betting on things isn’t what you want to happen.
Attainable goals are more motivating and meaningful than unattainable ones. It's in many ways a different event because the equipment is different, so why should a record for a different event stand.
It depends on the production. I think this was especially true on US/CA productions while everything was predominantly hand drawn in the 80s/90s. You'd have key-frame animators that laid out the actions, and in betweening would be outsourced. I'm sure it is still done now, especially for TV where the budget is tighter. It's a tricky business, I empathize with owners that want to make the situation better but need to compete on bids, and employees (if that) having difficulty making rent on the frames they can get approved. Like with code, you have to love it to stick with it.

I have no idea what it's like for anime. This is subjective - but I think the quality is usually much higher. I'm not sure how it is done.
I'm actually super impressed at the lengths they went to make this as private as they did.

With the proviso that you have to trust the code they push onto your device actually does what they claim in the paper.

But it does, on the face of it, prevent the "cops adding the latest cop on black person murder viral image to the CSAM content hashes and easily seeing who has it on their device and when it showed up there" concern. They are at least going to need to add enough _other_ hashes to the list to get everybody with their target image over the threshold, then get it past whatever Apple has in place for their manual review and "visual derivatives". And surely that sort of abuse of the system would set off alarms instantly at Apple when a big list of hashes of images that are common enough to all push BLM activists and sympathisers over the CASM count threshold.

(I also wonder what those "visual derivatives" they get are, and how well they are going to work to filter out false positives, and how Apple are going to take care of whoever ends up doing that review work. While I have a fairly positive impression of the care and effort Apple put into ensuring my privacy, I have a somewhat less positive impression of how they treat outsourced or low-skill workers. I won't be _too_ surprised to hear the same sort of horror stories about both the work, and the management overseeing the workers that do this sort of job at Facebook... I can't imagine a worse job description than "review images to check if they are real child sexual abuse images", and doing that for minimum wage and no benefits with supervisors threatening to fire you if you take toilet breaks or miss your 150 images an hour targets - is sadly something I totally expect to read about in a year or two's time.)
Great to see this - Barrelfish is a very interesting OS and its really good to see ETH Zurich continue its history of creating original intriguing hardware for research and teaching. Hopefully Enzian can can get enough traction in the R&D community to enable wider interest.
No, but it is enough to invalidate statements, that are obviously false in the light of the counterexample.

Also, lacking skills in first order logic casts doubt on any kind of "understanding".
Watch the credits (which is hard for modern TV, but not so hard for movies). When you see hundreds of people listed under animation and 99% of them have names associated with one culture and that culture's home region is low income, chances are it was outsourced to that region.
You’d think so, but my wife uses a bank that spent a good 12 years without a substantial change to their website. It finally got a major refresh a few years back and everything just FELT better. It was like fixing up the lobby- it might be secondary to the primary purpose of being there, but it made it a better experience for the customer.

That’s ignoring things like online bill pay, mobile banking, and roll outs of new financial products that really are innovations from the last 10-15 years.
In addition to just really liking the IT people at some of the places where I've worked, I've found that the people who are hostile are really shooting themselves in the foot when they do need help. Making friends across all departments goes a really long way, and there are cool people in most every walk of life.
What does it tell us that none of the other hominid lineages survived?
These sounded Chinese to me so threw this comment into Google Translate to figure what typical forward translations are and reverse translation of tortured versions will be. Bingo. Those are clearly translated from Chinese. Not sure if those are some form of plagiarisms as clamored or just a bad translation software prevalent in Chinese research communities though.

From top to bottom: 信噪比, 個人數字助理, 雲計算, 數據倉庫, 中央處理單元, 語音識別, MSE（均方誤差）, 隨機訪問, 隨機森林, 隨機值, 情感分析

Deep-fried versions: “旗幟到喧囂”, “個人計算機化合作者”, “霧霾計算”, “信息庫”, “焦點準備單元”, “話語確認”, “均方錯誤”, “任意通行權”, “任意林地”, “不規則尊重”, “惡名考試”
How do other OSes’ sandbox implementations keep track of temporary authorizations to files?
If it can be outsourced, it will be outsourced. It an absolute race to the bottom shitshow
I would have agreed with this on principle, assuming motivated actors who are willing to read technical papers on PhotoDNA, keeping it unpublished is only delaying these actors.

Although there can be real value in delayed release, secrecy, and obfuscation, that is especially useful if the author can credibly convince NCMEC and other relevant parties to make use of the whitepaper while it is private.

If delaying gains little, secrecy is less helpful. Sunlight tends to be the best disinfectant.

As it stands, it is hard to judge how much progress is being made behind closed doors to improve PhotoDNA.
Can you tell us more about the tool? I love baroque EDA tools. It's a problem.
The GP might be thinking of Interlisp-D which was image based.

I remember Dough Lenat had an image that he used continuously for years. I wonder how you can depend on your research results after that — who knows what’s in your environment?
A Feminist Critique of Murakami Novels, with Murakami Himself
Having also worked on mortgage software, there are ways to "sell" it -- the people your software helps are getting homes when they might not otherwise have been able. That's pretty exciting for them.
Wanting to be competitive (aka getting paid well) is the root of the problem. The top jobs are ridiculous in every field. Because there is so much competition for them, competitiveness becomes orthogonal to doing your job well.

In most fields, there are also second-tier jobs. You get to enjoy a nice middle-class lifestyle with a good work-life balance in a stable long-term job. The incentives are there to do your job well, because you have to face the consequences of your choices. I know plenty of software engineers in jobs like that. When the company eventually goes bad, they have no trouble finding new similar jobs, because good experienced software engineers are scarce.
This is an unacceptably bad launch post.
They also commonly complained that the Common Lisp standard was too large with too many library functions. Nowadays one common criticism is that there aren’t enough libraries.
i think it was a joke...
Those are subjective but there's a good paper on accuracy here https://www.sciencedirect.com/science/article/pii/S036013232...!

tldr for CO2 best is https://www.kaiterra.com/en/laser-egg-co2
Literally everybody believes that if AR glasses are possible, they will replace smart phones. However, the display technology to actually make them useful is absent as is the input system. Is there anything on the horizon that actually fixes these two things?
Dominate in this space, self-hosted options.

Mainly geeks are the ones that will self-host so it looks like a fair comparison.
There is so much focus on the technical aspects such as probability of mismatch etc.

For me the risk is much more that through some mechanism outside my control real CSAM material becomes present on my device. Whether its a dodgy web site, a spam email, a successful hack attempt or something else like that, I feel like there's a significant chance some day I'll end up with this stuff injected onto my phone without me knowing. So I'm not at all concerned about the technical capacity to accurately match to CP etc. In fact I'm even more worried if its really accurate because then I know when this unfortunate event happens I face a huge risk of being immediately flagged before I even know about the content and then spending years extricating myself from a ruined reputation and a legal system that treats evidence like this with far more trust than it should have.
Tamajoji – A Browser Port of Tamagotchi
Or it’s one of many test images, like EICAR, so people can test and validate the system without using abhorrent images.
Isn't this like the debate between paper voting and electronic voting? Wouldn't there be many security risks involved with smartphone passes?
Inclined to agree, though I have no clue about the timeline. As others here have said, need low effort input in addition to the AR. Something that tracks finger movements would be good.
I thought it was interesting how Spotify acquihired uTorrent's creator, Ludvig Strigeus, to build the Spotify desktop client. uTorrent was tiny and fast and written in c++, and early versions of Spotify were also small and incredibly snappy. I assume the move to Electron was a necessity to support a team of hundreds all working on the client, but it's still regrettable.
Rage of the machine: An AI makes metal music and GPT-3 reviews it
I suppose I meant web search engines like Google
What are your thoughts on the Collison brothers and Stripe?
I have no idea whether this statistic is true or not, but "nearly 1 in 10 children in the US will be sexually abused" is an incredibly high number.

I have no doubt that some cases of sexually abused children must have also existed in the environment where I have grown up as a child, in Europe, but I am quite certain that such cases could not have been significantly more than 1 per thousand children.

If the numbers would be really so high in USA, then something should definitely be done to change this, but spying on all people is certainly not the right solution.
I almost replied that I had the same view after reading your comment but before opening the article in question. After reading the first but of the article, I think the GP is possibly saying something else, when taken in context, which is that this is exactly the behavior that would be expected from someone that's plagiarizing something else in general using the technique from the article, and all the criticism did was help them get a better plagiarized paper.

I can't speak for GP as to whether this was true, or if there are different norms for that sector, or the author was slightly aggressive in asserting their rights, or the assumptions we're making about the content of the criticism are off, but given the article brought a new dimension to it, I thought that worth mentioning.
I still have WhatsApp on my phone and I have had issues in the past with backups so I have it set to save the media directly to my photos app.

I also have notifications off on it and check it when I need to.

All this needs is someone forwarding me something that’s in the DB.
You Don’t Need to Meet Every Qualification to Apply for a Job
Good point about the possibility of capturing a bunch of distinct photos with the same perceptual hash, either by taking a burst of photos or by editing one photo a bunch of times. I guess a better implementation would never upload two different encryption keys for the same perceptual hash and just send dummy data instead, but I haven't seen any indication that they actually do that.
after a bunch of looking, the paper that had the most detail on quality and sensors used is https://www.sciencedirect.com/science/article/pii/S036013232...!

the most accurate readily available for CO2 seems to be the "Laser Egg+ CO2" for $200 https://shop-usa.kaiterra.com/collections/frontpage/products... which uses SenseAir S8 but looks and sounds a little silly

and the $150 "Awair Element" https://wiki.liutyi.info/display/CO2/Awair+Element+inside which uses the Amphenol Telaire T6703-5K
I think you deeply misunderstand the statistical nature of a world record. there is a piece out there somewhere about zelezney's record being a more significant outlier than Bolt's. But to be clear, you're insinuating that Jan was a cheat? I had training sessions with the former AR holder and numerous conversations with a former WR holder and threw at a high level. I'm quite familiar with the sport and I'm truly curious as to whether you're making this claim about JZ and if you could name 10 throwers without Googling it.
Fall of the Empire: How Inner Turmoil Brought Down LucasArts (2015)
Three star reviews are all you should read these days. It’s typically unbiased / unemotional and objective. 1 and 5 star reviews don’t tend to be reliable.
Situational Irony can be unspoken.

So, the man, portentiously explaining what mansplaining is, while the woman next to him sits quietly.

Or, the criminal, railling at his car being keyed, while he was breaking into a house.
"Because for developers, this is a lovely and colorful playground. This is what they breathe and live. For end users, it's a nightmare designed by amateurs."

At last, someone who understands the problem and who can actually articulate it.

It would be nice to see the software industry become a true engineering profession like, say chemical, civil and electrical engineering but I've resigned myself to the fact that I'll not live long enough to ever see it.
Based upon your description around plagiarism, I doubt a customary end-credit "to an anonymous reviewer" could have been enough.
So it becomes ore again? It won't just go away.
Nice.

Here’s the first official video on YouTube (not just a test which was then deleted). “Me at the zoo” by jawed (a YouTube founder) 2005-04-23 https://youtu.be/jNQXAC9IVRw 19 seconds long
Thank you for pointing that out! I didn't know that until today. I also discovered that you can get RSS feeds from Reddit and a few other services (see my other comment in sibling sub thread)[1]. So, it sounds like I might be using RSS more.

[1] https://news.ycombinator.com/item?id=28111810
Gmail is a very good example of a finished app being tinkered with. No one asked for Meet to be integrated. There was already a good app for Meet. Then came Chat and Rooms!!
Neural search in combination with learning algorithms and traditional keyword searches are clearly the future. They vastly outperform traditional search engines.

At sajari.com we have been working on an experiment that uses a 1 cpu machine on cloud run to serve a neural network generated, hash based index of an old BestBuy catalog (25k products). Retrieval uses an approximate nearest neighbour (ANN) look up which typically takes ~1msec. Speed and relevancy are already pretty good.

But we have also learned that there is no one silver bullet and we have seen the best results when combining neural search with traditional keyword search and reinforcement learning.

You can take a look at the demo here: http://neural-hashes.sajari.com

Be gentle, this is an experiment and not a production scale implementation.
> Your comment is tantamount to gaslighting.

That's a bit strong. People can have different experiences, amazon might treat different groups differently, etc
Thank you! This is all very useful info!
If you know the g's of vibration (force) and the hertz they needed to use on the screen, can't you calculate it? Maybe you also need to know the weight of the passenger as well as the details of their strobe method.
Literally Apple could just add a different set to the set of hashes they push? That seems very naive.
I discovered something similar a couple days ago. After googling the title of a paywalled article (that I didn't care enough about to actually pay to read), the closest thing to the unredacted article in the search results was a version that that clearly been automatically rewritten in this exact manner. It was barely decipherable, so I gave up immediately.
Right. Gorilla arms aren’t much of an issue if you can input with your arms at rest. Repetitive use injuries would likely increase.
In a bit of irony, I just realized that I've heard that song hundreds of times over the radio, but not until today had I ever seen the video.
Maybe unlikely between two Indo-European languages with closely related sentence structures and vocabularies, but plausibly likely for others. DeepL just gave me "potter's screw" for "pan-head screw" in my language, for example.
Fun fact. Uwe Hohn, the permanent record holder, is the coach for this year's Olympic gold medalist.
Relatedly, I don't see much discussion around the nuances of what counts as cp. In my experience, the vast majority of cp people are likely to come into contact with is "consensual" (the definition of consent gets weird here) images taken by teenagers of themselves, not old men raping little kids. So what happens if a 17 year old girl takes pictures of herself, sends them to her partner, they break up, he posts them online as revenge porn, and a site moderator reports it as cp and its hash ends up in the db? Now police come after her because she has 25 similar images in her icloud and she gets treated like a criminal? She definitely did break the law I suppose, but there's so much more nuance there. I really feel like these are the kinds of people who are most likely to get flagged. I (hopefully) don't know anyone who keeps swaths of abusive cp on their iPhones, but I certainly have known a lot of underage kids with intimate pictures of themselves and their friends/partners.
I like the Superman II commercial at 10:45.

And Atari 2600 at 36:48
The temptation to compare athletic and sporting performances between different eras, is doomed to disappointment.

Whilst we could standardise a javelin, we can’t recreate the culture, diet, stadia etc of bygone epochs, so the comparisons will always be qualified or debased.

It is frustrating that we don’t have time machines,but perhaps that’s a reason to think further about what it is that fascinates us about athletic and sporting contests.
I've noticed businesses becoming more and more customer hostile as they become near monopolies.

Terrible quality, customer service wait times of 45 minutes or more, shrinkflation, predatory contracts, etc. etc.

Modern Capitalism does not appear to be healthy in a lot of areas.
You mean, pay for the food that employees go out and buy with this card? Well, what's to stop someone from having a $1000 lunch at Saison every day? (It's right across the street from the Cloudflare SF office!)

You'd obviously have to put a cap on the amount people spend. But then people feel like they have to spend that much or they are missing out. This quickly leads to the obvious question: Why don't you just give us the money and let us decide how to spend it? Again, I'd rather just have the money added to my salary than have to deal with spending caps.

Every tech company I've ever heard of that offers free food does it by having the company acquire the food directly and provide it to the employees on-site. But doing that is a whole logistical thing you have to commit to, and has plenty of down sides.
Maybe it’s the understanding of the premise that most software has to be created iteratively that is flawed. It can be created iteratively. But it doesn’t always have to be iterated upon so much after that. Certainly not all of them.
I typically suggest something like your first 25 domains are exempt, registered businesses also get some reasonable amount. Past that there should be a relatively hefty squatting fee. Maybe additional exemptions can be applied for.
That homo sapiens sapiens most likely displaced them, but that doesn't really mean as much as your comment might intend to insinuate.

Neanderthals lasted half a million years, and the more we learn the more we appraise them as sophisticated. That said, they seem to have faced a caloric challenge in a world with sparse mega fauna.

Based on everything I've read, modern humans pre-language excelled at one specific thing: walking very long distances without exhaustion on less calories. Ends up that's pretty dang useful in spreading across the globe.
All the gold content is in HyperTrader. Should have just linked to it