skysight-inc/HackerNews huggingface dataset:
> What's to stop an attacker from generating a NeuralHash of popular memes, deriving a key, then bruteforcing the leaked data until it successfully decrypts an entry, thus verifying the contents within a specific user's cloud photo library, and degrading their level of privacy?

Decrypting vouchers requires the server blinding key and the NeuralHash derived metadata of the input image (technical summary page 10, Bellare Fig. 1 line 18). This attacker only has the latter.
Are children allowed on the island after what happened there?
There has only been one time in human history where slavery was "racialised". The whole concept of "race" was invented to support this kind of slavery.

The descendants of people who bear the same skin hue of the formerly enslaved still have to live with the stigma caused by slavery.

This (and in many other ways as pointed out by the last commenter), is what makes the effects of the Translantic slavery still reverberate today - because people are still judged by skin colour because of that precedent that was set back then.

I don't know why this has to be continually explained to supposedly intelligent people - wilful ignorance?
I think napa cabbage and a few others are also all the "other" brassica.
No. People in tech like to believe that holding people accountable is "abusive" or "bullying." Someone in this thread literally posted that shooting down someone's opinions is bullying, accusing someone of insufficient effort is bullying, working them hard is bullying.

There are people in this world who actually care. They want to make a positive impact. Then leeches join their team and want to do the minimum. And when they get called out, it's "bullying." That's bullshit.
Good link to explain why "CSAM" is being used in lieu of "CP"

https://www.adfsolutions.com/news/what-is-csam

> However, the phrase “child pornography” is almost too sterile and generic to properly exemplify the horrors of what is being created. That is why many advocates, including the National Center for Missing and Exploited Children (NCMEC), believe this phrase to be outdated.

> NCMEC refers to these kinds of material as Child Sexual Abuse Material (CSAM), in order to “most accurately reflect what is depicted- the sexual abuse and exploitation of children”.

> As a result, many organizations and advocates now refer to this material by the new term rather than "child pornography" because it explicitly ties the material to the source of the problem; the abuse that is being perpetuated to create it. Furthermore, children are re-victimized every time a file is shared, sustaining the abuse in a continuous loop.
CSAM is not necessarily pornographic material, but merely material that becomes objectionable within context.

For example, parents' photos of kids in the bath isn't CP. However _someone else_ having a _quantity_ of bath photos is CSAM, if they have no reasonable reason for possessing them.
Imaginary mass, not negative mass.
Your original argument doesn't make sense though. The point is that at the time of publication the papers have already been paid for (and yes, this includes the salaries of the researchers/authors). Researchers/authors don't actually need to make any money off of the papers. And even when Elsevier does sell a paper, the author does not receive a royalty [1].

[1] https://academia.stackexchange.com/questions/109003/why-are-...
Vaccine-resistant lambda variant is in the US
>If anything the US needs more carriers as recent years have taught the navy.

This is an insane position. The US already has a bigger navy than the next 10 great navies combined, 8 of which are close allies. There has never in the history of the world been such a huge power imbalance (the British Empire at its height maintained a navy twice the size of its two biggest rivals). And you think they need a bigger one???
I know a developer on the ES AWS team who said the same thing almost verbatim before they quit this year.
What terrible reasoning.

'Child pornography' is already too long to say repeatedly in a sentence so it is often shortened to "child porn." CSAM has far too many syllables so it too is shortened to two syllables in the form of the spoken acronym "CSAM" and so we're back to square one.

With that said this is a fascinating display someone pressing the reverse button on the euphemism treadmill. I don't think I've ever seen that before.
I’ve often said we need the next constitutional convention to revise the government in light of society’s progress — this reinforces that view with the heat of boiling blood
After years and years of captchas I still have no idea if I’m supposed to select all the poles for the traffic lights as well.
I never understood kindles. I really disliked mine. I only liked the data storage aspect once during a camping trip so I could bring some reference books, but paperbacks would have been fine too. I started reading paperbacks again and it’s been wonderful

Pdfs/epubs on a laptop can be handy if you are making anki cards as you go
Yeah. The book has some great insights around institutions. My notes from the book https://ashishb.net/book-summary/book-summary-why-nations-fa...
>>> I feel like the so-called "modern woman" was sold a bill of goods when they were told "What's good for goose is good for gander". This is simply not true.

I think the modern woman has realized that a good marriage is better than being single, but being single is better than a bad marriage. Plenty of health studies have been performed that show this: health outcomes are better for women in a good marriage, and worse for women in a bad marriage [1]. Why trap yourself in a bad marriage if it's going to kill you?

[1] https://www.apa.org/news/press/releases/2003/09/marital-bene...
It was my understanding that natural immunity to covid19 isn’t long-lasting but does work well as a replacement for one of the two doses.

A quick Google search turns up this too: https://news.yahoo.com/vaccination-may-more-protection-covid...

I’d love to read up on the other side though, if you happen to have any articles to share.
Jan 6
Then why use a kindle at all ? There a better and or freer brands if you don't use amazon ecosystem.
Location.

Weed is sold in stores at local prices. Theres lack of competition.
The thing with Emacs is that sort-lines is a string you can copy and paste into a buffer, whereas in Visual Studio it's a command that you have to execute.

Disclaimer: I don't know Visual Studio that well. Still, I suspect what I'm writing is true.

I wrote about this in a separate comment: https://news.ycombinator.com/item?id=28104243
Then you have no reason not to go with elastic unless you host on aws. From the drama described in the article it sounds like elastic will try to keep clients working only on its own fork while amazon will play catch up.
Ask HN: How do you use Anki?
I just recently installed Anki in hopes of using it to organize and keep knowledge fresh in my mind. There seems to be a few different ways it could be used. How do you use it and what are your best tips and tricks?
What you're really pointing out is that it creates a disincentive to hiring parents. Whether there is a corresponding bias is unknown.
Do you really not understand the differences in difficulty between a cooperative, planned ahead rocket landing, and an adversarial attack on an actively evading target whose position may not be precisely known even at the start of the attack?
Common Interview Questions and How to Nail Them
There are countless historical examples where it has been embarrassing or unethical to comply with the law.
lol with that five-bishop endgame I would be scared to death of an accidental stalemate.
I thought that process required a pressure fryer. Do you have one?
I'm sorry, you can consider Jan 6 to be many bad things, but none of those are a meaningful threat to American democracy.
The Starship promised launch cost is literally two orders of magnitude smaller than current launch costs. I would start there.
My undergrad university library has (had?) a bound copy of PGP source code on the stacks for checkout.

If I remember correctly, digital copies of the binaries and source code were prohibited for export as a munition, but publishing the source code in a book, made it a book, and thus eligible for export.
Top Leadership Skills and Qualities of an Effective Leader
Some of us have very strict security settings that cause captchas to be very frequent and I believe more challenging.

I whitelist domains for cookies and I am not signed in to a Google account. These two things really can make the web a frustrating experience. I’ve lost out on campsites from US national parks because a captcha popped up when I tried to add the reservation. By the time I passed the multiple tests, all the campsites were taken.
While this actually happened, was it ever challenged in court? Because judges aren’t robots, and I find it highly unlikely that they would interpret so literally as to allow this loophole.
I was joking, of course.

But what I was getting at is that I’m seeing an analog with this latest scan, in that the scanning software is now on the server where you are electing to store your photos. So, hard drive scan on your local is fine, yet hard drive scan on your remote is outrageous?
Travelling in a ship at 0.95c, what is the danger of hitting anything on the way? Is it possible to dodge anything at all?
Saying programmers should "just do more work" is incredible economic naivety.

Back in the day people dependencies were an obscure free software thing and everyone just rewrote the same shit against Microsoft's or AT&T's interfaces, with maybe some in-house libraries.

People sucked at making and using abstractions, and didn't do it.

Then the pendulum swung and people started being download all sorts of crap and everything began to depend on everything else. Every once and a while the pile caves in and people star all over.

People sucked at making and using abstractions, but did it.

There's no way to roll back the clock. Forgoing code reuse is too costly. But we could write better abstractions and think about what it means to maintain whole library ecosystems (planning the division of labor and separation of concerns) rather than just individual libraries.
I don't think the number of syllables is the important thing here. Rather that the term "porn" doesn't—by itself!—impute any moral judgement. It's just a thing. Some people think it's all bad, others think some is okay while some isn't, and some think anything with consenting performers is fair game.

But children are incapable of being consenting performers. That's what separates abuse material from porn. So to make damn sure there isn't any overlap in the Venn diagram of media that depicts sexual acts, they'd rather not associate "child porn" with anything else that exists in the universe of "porn".

It's a completely separate category, not some "bad" end of a spectrum.

That's the reasoning I've heard before, anyway.

And I agree with you on the reverse treadmill thing. It's interesting. On a related tangent: I've always hated how journalists use the term "sexual assault" to refer to a wide range of offenses, from forcible rape to a passing grope. Although those are both bad things, it's clear that one is tremendously more harmful than the other. We should use language to clarify that.
The same reason the ACLU challenges the no-fly list also serves to challenge driver's licenses, and actually exposes that we are accepting very strong prior restraint on the right to travel. You can keep people from driving, but not proactively.

Some other arguments though, yes, they go too far.
> For CSAM matches, the cryptographic header in the voucher combines with the server-side blinding secret (that was used to blind the known CSAM database at setup time) to successfully decrypt the outer layer of encryption.

In the text you referenced, it specifically says that the blinding key would be needed to decrypt vouchers which are CSAM matches. This is because Apple set up their CSAM database in a blinded manner. Therefore to access a hash from the database from which to derive a decryption key, Apple would need the blinding key to first decrypt that hash value.

However, and attacker would be generating their own (presumably unblinded) database, and therefore wouldn't need to access Apple's blinding key.
Not a markdown server, but an in-tree ACME SSL provisioning module for Apache.

I think Caddy deserves some praise for marketing this a standard built-in feature.

For nginx there is ngx_http_acme_module unmaintained, unpackaged and out-of-tree, and https://trac.nginx.org/nginx/ticket/1480 is still open upstream...
Link to the relevant survey: https://survey.1password.com/self-host/
Very similar to the cryptocurrency field. Lots of noise nowadays.
I didn’t understand why he traced jetliner designs to the B-47 when the cylindrical fuselage idea has been dominant since before WWI.

I think he meant to refer to the engines under the wings on nacelles, but when someone gets something that obvious mixed up in their script I think of Gell-Mann Amnesia suspect everything else they’ve created.
Bernard Arnault supplants Jeff Bezos as the richest man in the world
Fusion power plants already seem unlikely to be economically viable, given the huge radiation damage that the whole structure takes, requiring constant disposal of radioactive concrete (presumably via robots) and rebuilding the structure every 10 or so years. Adding lunar-mined fuel to the process seems to be going in the wrong direction.
YouTube Video of the mystery street vendors:

https://youtu.be/v7sn42heQ2w

Why do they keep saying "anybody can eat this"?
From https://www.cdc.gov/media/releases/2021/s0806-vaccination-pr...:

> In today’s MMWR, a study of COVID-19 infections in Kentucky among people who were previously infected with SAR-CoV-2 shows that unvaccinated individuals are more than twice as likely to be reinfected with COVID-19 than those who were fully vaccinated after initially contracting the virus. These data further indicate that COVID-19 vaccines offer better protection than natural immunity alone and that vaccines, even after prior infection, help prevent reinfections.
of course you can also shift demand curve. If you have current price P and demand D, and you slap a tax T on top of the price P, the demand at price P is going to be lower, thus the whole curve is shifted.

Yes, ceteris paribus if you lower the price, there is going to be more demand. But you can't lower the price ceteris paribus because there is not going to be more supply. So in order to lower the price you need to figure out a way to lower the demand. Be it regulation, taxation or cheaper alternative products or something else. As long it is cheaper to run a solar panel than a generator in a developing country, it does not matter if the fossil fuels become 10 times cheaper, people will use the solar panel.

Higher price means higher resource extraction and consumption, that is a fact that you can deduce by just looking a the supply side. If you double gas/oil price, for sure more is going to be extracted? (And by price I do not mean post-tax/regulation consumer price, but the price the gas/oil producer gets from the commodity in the market)
I don't understand this. Delayed how? Does this mean if you are watching a video, and the person is talking, that a delay of milliseconds between the person's lips moving and when you hear it? But what does that have to do with castinets? I wouldn't be able to see them they probably move so fast.

But they don't mention video matched against audo delay, that I read. If you start a song and they delay it by 10 seconds, it just starts 10 seconds later, how would you even know there's a delay? Or if there's a delay in the middle of a song, how would you know any difference, as maybe that's how the music piece is supposed to sound.

What am I not getting?
> what do they do when Maryland and Virginia roll their national guards through DC?

That’s literally the civil war the commenter was talking about.
I had never heard of RCS but as soon as I read "RCS requires carrier cooperation" I thought "They're doing it wrong." This sounds like they're taking the worst misfeature of MMS and doubling down on it.

What happens when you take an application and specify its protocol too low in the 7-layer stack? RCS, apparently.
Libertarian reasoning circa 2005: all digital files are just numbers; you can't patent mathematics; therefore download all the movies illegally!
I'd guess that turns aren't a big deal. Commercial flights rarely turn above 10k feet, so really just some risk of airsickness briefly at either end of the flight. Wing flex during turbulence seems like it would be a far bigger concern for passengers at the ends. That would not be a fun ride, but maybe these crafts handle chop differently? I'd imagine the flex is more evenly distributed, but still problematic.
Lynx has already been patched.
Agreed. At least, US is a free country.
> to understand whether an adversary can deduce the websites a user is trying to connect to, using a set of IP addresses originating from the user’s device alone.

If you as a residential broadband singlehomed user in, let's say, China, have all of your traffic going through an advanced DPI system run by an authoritarian state, they absolutely can correlate your activity on a number of metrics and statistical methods even if the crypto for end-to-end transport of your content is flawless.
But ElasticSearch isn't open source, it's only source available.
A good point, but one addition: nobody directly uses PGP.

While Debian and other package signing continues to use PGP (and yes, Debian may move away, and signify/minisign is preferable) there are lots of “infrastructure” uses.
And that's fine. A 1.0 release existing as both randomiser/jQuery and jQuery/jQuery is fine, and then 2.0 only exists as jQuery/jQuery; so long as your package manager has good tooling for rewriting imports (and usually sed is enough). Making migration to alternative implementations easy should already be a design goal.
I realized child beauty pagents and other sexual exploitation of children would be considered Child Sexual Abuse Material in some cases. People, even those with good intentions, are not going to like where this is going.
I hate the physical act of having to turn pages/make sure the book is angled toward a light source.

Kindle makes it possible to read in the dark and without changing positions. Also if you read a lot you aren’t piling up a bunch of physical books you aren’t likely to ever read again.
Scientists find ‘gatekeeper’ of conscious awareness
Check for AMS papers, e.g.:

"First result from the Alpha Magnetic Spectrometer on the International Space Station: precision measurement of the positron fraction in primary cosmic rays of 0.5–350 GeV"

https://scholar.google.com/scholar?hl=de&as_sdt=0%2C5&q=alph...
No, PGP's weakness is that the Web of Trust is an unworkable solution for the general population for key exchange. It works fine for a you and your circle of crypto nerds, but as a general solution it's impossible.

IMHO this is a case where perfect was the enemy of good. Many possible solutions were rejected because there was a possibility that someone could MITM your first contact, even though in the real world this is unlikely. The key registries were almost a solution but none of them ever gained enough traction to be a default solution and mail clients were strangely hesitant to incorporate them even when they did implement PGP.

PGP was always half of the solution. Sadly they never figured out the other half. Microsoft almost got it working with Exchange, but even then you usually it only works on a single domain at a time. You can't use encrypt an email to someone at a different company even if they are using Exchange.
The number of syllables matter if the goal is to prevent a term from feeling too sterile. If a term is too long and unwieldy then people will naturally shorten it to an acronym. And once they're using an acronym then we're back to square one because acronyms are devoid of the meaning that words have.

I've wondered if there is an intent to distinguish between child pornography that teenagers are producing on their own to share with each other and the kind child pornography that pedophiles and child rapists create forcibly against the will of the children in the content.

Maybe that's the actual difference between CP and CSAM.
Maybe both are a subset of CP.
One word: search. Most of the traditional compilation pipeline can be expressed using deterministic rewrite rules. Synthesizers of all families generate and consider a large number of possibilities.

Flipping it around, there's an old joke that "a synthesizer is just a compiler that sometimes doesn't work."

But the first thing to learn is that, the deeper you go, the blurrier the lines get. There certainly exists a compiler out there that does more search than a good chunk of things done under the name of synthesis. (Especially because "synthesis" has become a bit of a buzzword in PL circles, and often gets slapped where it doesn't really belong.) I've discussed this briefly before in my blog: http://www.pathsensitive.com/2021/03/why-programmers-shouldn...
Aside from trying to buy a commonly used reliable device, that what the match test was for. When my device was reading 12ppm pm2.5 and a blown out match made it read in the 100s clearly the device is working to some degree of accuracy. I could've checked it outside I guess but I think local air conditions would predominate over any official city average I could have compared it against.
They ignore the crap UX changes over the last months, like spacing out the bookmarks in your folders. WTF were they thinking?
Covid-19 Test That Detects Variants in Your Spit
The DNA analysis didn’t identify the exact variety.
I'd be happy to get reliable delivery at all.

Between the occasional lost package/letter and the post office closing for lunch in the summer, it's not the best experience.
Interesting. Australia, Canada, Hong Kong, USA were all colonised. Now we can conclude it is not colonialism either.
I'm not even saying Libertarians are wrong about drivers licenses, just that they're idiosyncratic and unpopular on that issue, and it's worth knowing what you're getting yourself into if you take their word for everything. I think Reason is generally pretty sane! (But they were idiosyncratic and unpopular on the opiate crisis, by way of example.)
A world where governments aren't able to forcibly close, and more importantly, impound your bank accounts even if you're the head of a Mafia family, or a corporation doing something that the law deems a corporation shouldn't do, looks to me like a very serious step towards anarcho capitalism - which, by the way, is the stated goal of not so few cryptocurrency fundamentalists.
Oh, that’s a good point about the syllables. I agree. “Cee-Sam” is a technical jargon-y sounding term. No visceral feeling behind it.
Ah, my bad. I somehow got mixed up and thought we were talking about LEO prices. I agree, going below $1K/kg to the Moon's surface may be hard even for Starship as it looks like it requries multiple tanker Starship launches to refuel the payload Starship waiting in orbit. I do think LEO prices will probably be lower than $1K/kg.

I believe Falcon 9 could be priced a good amount lower and still be profitable on a per unit basis (ignoring ongoing R&D) but SpaceX has little pressure to do so as there isn't a competitor with a similar offering. It's interesting, as once Starship is out it may somewhat cannibalize the Falcon 9 marketshare.

You raise a good point about the shuttle, however SpaceX can learn from that. I'd bet they are striving hard to make Starship more effectively and efficiently reusable than the Space Shuttle was. We shall see how successful they are with that. I'd be very surprised if it was not a significant improvement over the reusability of the shuttle.

Perhaps the real paradigm shift will occur once there are two or more companies with fully reusable rockets such that there is more competitive pressure to cut margins and lower prices.