skysight-inc/HackerNews huggingface dataset:
Not enabled for me, do I have to change a certain setting?
No, businesses are people, except when those people have committed crimes and are management, in which case they are inhabitants of a special purgatory that allows them to continue to use the world unabated, but prevents the world from contacting them.
> For all I care, castrate all the adults involved, when you catch them.

I doubt it would suffice. Chemical castration, perhaps.
You explicitly do not own the software running on the device. It's Apple's software running both on your device and on their servers.
I just read this opening two days ago, and it's frightening how well he paints the picture and how plausible it is to actually happen.
> just become tools of criminals

Or activists, journalists, doctors, lawyers, victims of police overreach, etc. If this is a question of framing then shouldn't apple be more than qualified to handle it?
I hate slippery slope arguments, but....

How long until media players and display devices are hashing all of our media to check for copyright violations. Right now it is effectively impossible for a consumer to buy a TV that doesn't include a computer capable of this.

CSAM is one thing, and from reports it sounds like checking hashes isn't really that effective. However, this paves the way for hash checks for a variety of scary things.

What happens when governments start distributing lists of hashes belonging to "subversive" material (this isn't pipe dream, numerous large countries already block subversive material on the internet).
Showing progress of dd writes using status=progress flag and/or pv command: https://www.cyberciti.biz/faq/linux-unix-dd-command-show-pro...
> exponentially better each year

I'd love to see sources supporting that; it sounds a lot more optimistic than I would expect.
Maybe this is already fixed in 11.1, but static site generation seemed broken for me with create next app. I had to go in and remove usage of this feature before static build will work.
This article leaves some really crucial parts of this timeline ambiguous. These things happened in some order:

1. Guy downloads stuff from website
2. Guy publishes stuff from website
3. Stuff becomes unavailable on the website
4. Website owners go to police, report “illegal access”
5. Police arrest guy

Either the police arrested him, and the company declined to inform the police that these illegally accessed files has been free to access, thus actively misleading the police, or company did inform the police and the police acted heinously by arresting him anyways. Maybe there’s a third option here that I’m not seeing. Seems pretty wild, and likely to me that the org should be criminally liable here (not that I know the laws or if they would be criminally liable.)
El Reg doesn't say in so many words that Hutchinson didn't know he was in a password-protected area (sorry, double-negative).

I mean: I believe that if he knew the material he accessed was behind a password wall, and that the search-result had pierced it, then he would be in violation of the CMA. That is: I think the Act doesn't require any kind of "breaking in" to create an offense; you just have to believe you're not supposed to be there.

IANAL.
Emerging Managers, Sidecars and SPVs
100%. If you look at productivity weekly instead of daily it always pays to have deload time daily, eat correctly, sleep 8 hrs, and get a workout in on a regular basis!
NASA’s Ingenuity Mars Helicopter Spots Perseverance from Above
Lol, you mean for men it's hard to get in. A woman or minority can just walk right in.
You might also be describing 2021-2051.

Well, except pension, which were largely gutted in the private sector by 1991 (it was the plot of the 1987 movie Wall Street).
Communist party?
Relativity Space – Fully Reusable 3D-Printed Rockets
What's the total addressable market for disrupting carbon footprint of banks? When every person is their own bank, there is less need for brick-and-mortar real estate, the employees commuting, and the like -- what the EPA calls "Scope 3" effects, as per: https://www.epa.gov/climateleadership/scope-3-inventory-guid....

The above carbon TAM is why I'm pro-crypto, as soon as we move past PoW.
The USSR destroyed itself. It was bankrupt by 1989:

https://www.nytimes.com/1989/01/22/world/soviets-foresee-bud...
AMD Platform Security Processor BIOS Architecture Design Guide [NDA]
FTX CEO Sam Bankman-Fried Profile
> There's room for those who trust Apple with their data, are fine with the implications of server-side data storage, and are not fine with their devices performing the scan on offline data.

Right, my point is that the latter (scanning of offline data) does not yet have any evidence of occurring, and we aren't "closer" to that being a reality than we were before: it is and always has been one software update push away from being a reality.
Agreed, and I'll add that the existing cloud systems have been running for a long time and have yet to slip into the various dystopian hypotheticals I've seen tossed around. Google isn't scanning Drive for documents containing anti-government sentiments. I'd be very interested in evidence that suggests otherwise.
No they were only scanning iCloud email. They were lagging well behind other services in identifying this content, only finding a few hundred compared to millions by Facebook for example.

The system only works with iCloud Photo Library, it needs a server side component to continue the process.

https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...

This is a very interesting read and personally I think they’ve gone to extreme length to make this system as private as it could be.
I'm looking for feedback on the onboarding experience, scoring yourself in the Marketing Scorecard, adding team members, creating high-level tasks and prioritizing them. Extra credit if you create your own model and find value using it with your team.
I think this is the best comment I’ve seen to date on this topic. From beginning to end, word for word.
If you're retired AND homeless, will you do the same, or will you have bigger problems?

Just trying to figure out where you've drawn the line.
Herd immunity is 'mythical' with the Covid delta variant, expert says
You seem to be confused about what Apple is doing.

Nothing anywhere says that Apple scans the pictures you store on your own device. They only scan the pictures you upload to their cloud service.

The scanning is done on device before upload in Apple’s case, and in the cloud after upload in Google’s case, but either way it is only done to photos that are uploaded to their cloud services.

If you are really claiming Apple scans the photos you don’t upload to iCloud Photo Library, then you are lying or dissembling.

I assume that is not what actually what you mean.
Greenhouse gas emissions must peak within 4 years, says leaked UN report
We have an internal provider that handles generation of IAM Roles and IAM users via an external API for various security reasons I may or may not agree with. The constant provider changes in 0.10 and upward were extremely painful. We actually ended up having several teams who so hopelessly fubared their tfstates trying to skip minor releases, we ended up having to take it away and put together a task force to do it ourselves across almost 200 repositories.

I’m not sure what you mean by “all three major cloud providers rewrote their own APIs.” Azure[1][2], AWS[3], and Google[4] are all maintained by Hashicorp. In fact, if you peruse the issues you’ll often see PRs opened by employees of the respective providers trying to fix blocking issues and they often devolve into literal begging for Hashicorp to respond and at least tell them why something hasn’t been merged. I know one blocker[5] actually cost Azure a very substantial customer as it languished in Hashicorp’s queue.

Hashicorp’s constant refrain of “Well it’s a 0 version software” while selling enterprise support and constantly shilling their wares as production ready across the entire DevOps space was dishonest.

I appreciate the position they were in and I appreciate even more their attempt to at least put out a good PR move with their 1.0 release. We will see how well it holds up over the years.

What you call “that good” I call “better than everything else but still byzantine and hellish to deal with every time someone DMs me, ‘hey, you know terraform right?’”

1: https://github.com/hashicorp/terraform-provider-azuread

2: https://github.com/hashicorp/terraform-provider-azurerm

3: https://github.com/hashicorp/terraform-provider-aws

4: https://github.com/hashicorp/terraform-provider-google

5: https://github.com/hashicorp/terraform-provider-azurerm/pull...
Agreed, but as of today, we are at the top of the slope. Maybe we skip, maybe we don’t.

As implemented, I agree with Apple
I'm just happy to see something about contracts here that's actually about contracts -- not about the blockchain things called "smart contracts," which are neither smart (okay, that's debatable) but definitely not contracts.
Sure. But like I said the causes are mostly political and legal.

A utopia of GPL-only mobile devices with no proprietary cloud service connections doesn't seem like a valid option. At least not for a large enough share of users to make a societal difference.
Everyone already agrees "staging area" is the best term. That's the whole point of the post.
If you read old spy novels, you'll read that one way foreign spies recruit domestic spies is by first asking them to do innocuous stuff ("send us some newspaper clippings"). Once they have them doing that, it is easier to get them to break the law and pass over _real_ secrets.

In other words, "just the tip".

This move by Apple is the proverbial tip. Eventually you can bet Apple will let governments upload not just hashes of CSAM, but "hashes" of faces they'd like to monitor. Or objects in images (maybe weapons, or chemicals, etc.)

I am so glad I don't use any Apple products.
Ah, yeah, sorry for not being clear. I completely agree that downplaying serious mental disorders is a problem.
> This is what's happening with open source hardware. For example, VESC and ODrive both quickly had knockoffs in all the usual places. The maintainers were somewhat understandably irked by this, but if you ask me it's exactly what should be happening.

That is fantastic (at least as far as I understand it). What a fantasy of open source that not only do people download your code and compile it, but they download your hardware design and manufacture it!

Who doesn't it benefit? The designers and other developers now have prototypes, etc. without having to pay for manufacturing.
It's ruined me to such an extent in that regard that I can't do 9 to 5 at all. I'd just be staring at everybody in disbelief - You work how many hours a week? I don't work that many hours a month! - and would probably be burned as a heretic.
This is exactly how they describe it.
If it changes, then I’ll change my position.
Europe needs to prepare for temperatures of 50C in future
People have been incredibly more ignorant in the past, it's the power brokers and influencers (wealth, media, political class, etc) that guided the unwashed masses to at least somewhat expedient futures previously, but who now seem to have either vacated their responsibility / succumbed to greed or short-term thinking or alternatively some breakdown of systems of power and democracy because of technology or legal changes and their effect on media, fragmentation of public knowledge, erosion of institutions, etc.

On a very real level, we have better technology, more people learning greater chunks of knowledge, higher literacy rates, etc. than we did in the 1700s or 1800s or 1900s, so you can't blame widespread ignorance alone.
Yeah, back when you'd need to wire lmgrd into whatever product you were building and also administer it on your lan for whatever tools you bought. Static, floating, HA, so many things to confuse or go wrong.

The whole DRM design pattern is a chain of weak links designed to keep a product from working. The customer is only satisfied if and only if nothing in the chain broke today, yet.
"What can I do?" Anything. - https://heated.world/p/what-can-i-do-anything
>> IMHO, crypto is like a new car with the revolutionary new feature of not having seat belt technology.

> Crypto is like that new car that can have a seat belt but you don't need to. The fact that it still doesn't have that seat belt doesn't means much, just that you need to be aware of it.

You're missing the point. To put it slightly differently: crypto is like the overconfident kid who thinks seat belts are stupid because he doesn't truly realize he can get into an accident, let alone die. He actually does need a seat belt, he's just not wise enough to realize it. When he gets in an accident and files out his windshield, then he'll discover he wants to use one.

>> Of course, when that happens someone in that community will call it a seat-strap and claim its a revolutionary new invention.

> Oh seems like you acknowledge that... but twist it like a bad thing?

Reinventing the wheel when everyone else around you is riding in cars and on bicycles is not actually inventing anything, let alone anything revolutionary. Then, if you'd previously spent the previous few years mocking wheels as stupid and useless, there's the angle of refusing to acknowledge that you were wrong.
Venture capital happened: https://archive.is/1t6qi
Household income doesn't track household prosperity, because household sizes have gradually declined.

>>as minimum wage becomes cheaper through inflation, it makes less sense for companies to invest in productivity enhancing automation and efficiency as they can just hire cheap workers and fire them as needed.

There is a finite number of workers. Once they are all employed, only investment into productive capital raises productivity.
I don't read it that way. Read back to your first comment on the thread. You've depicted a live debate about whether Lindell has any evidence for his conspiracy theory. We have the data he released. The debate, to whatever extent it existed originally, is no longer live.
Once again, Afghanistan is the graveyard of empires.
What would github for lawyers be? I think all you'd need is lawyers using github!
As a Chennaiite reading it at midnight, thanks. Now I can't sleep peacefully.
This great story is only half told!

Is the director the hero, who gave clear feedback to her employees then listened to the response and corrected the course?

Or is the director a lizard who demanded the impossible received junk in reply and didn’t recognize it even when courageously told?
E2E encryption of iCloud data is completely useless if it also comes with a feature to selectively upload some of that data unencrypted for snooping purposes. Even ignoring the issue that child porn will turn into child porn or terrorism or the cause du jour, the imperfect nature of the scanning includes a review process. This is more like Youtube content id than it is like an md5sum of known CSAM files. That's the violation.

Another article recently points out that even the md5sum databases include bad matches (a rhesus monkey was mentioned).
Counterpoint: If E2EE is, in practical terms, unbreakable, and if the endpoints are hardened, perhaps Apple's client-side scanning initiative is simply an expected result of frustration by law enforcement in criminal investigations. A law enforcement person told me that the CSAM issue is more widespread than the average person might expect.
Any sort of decision point that tends to vary between our customers. We are getting really tired of maintaining custom code piles.
Display devices do this, but for advertising targeting, not copyright violation right now. https://en.wikipedia.org/wiki/Automatic_content_recognition

Detecting copyright violation would need some sort of license info side channel so your TV knew what subscriptions, what digital copies, what BluRays, etc, you owned. Fortunately that's basically an impossible thing to wrangle currently, but if things like Blu-Rays go away it starts to be more feasible ("Oh, you're watching this show in 8K? Please connect your Netflix account to verify your access.")

Once the technical capability is there, how can we best stop it? That's where I don't have good answers.

Possibly the only thing unique about what Apple is doing is that they announced it.
I feel very uncomfortable with the potential misuse of this technology and the fact that this is simply a stamped Apple spyware. Another way to go around this is to not update to iOS 15. Let's launch a movement, something like #NotUpdating to send a clear message that our devices are not meant to spy on us.

#NotUpdating #NotUpgrading #BoycottApple
That's what I suspect and I'll be shorting more USDT today on AAVE.

Sorry, I don't see how this can work.

USDT is a fraud. Exchanges are active participants in the fraud by pegging USDT at $1.

The only way your short can pay off is if the exchanges stop the "pegging" game. When the pegging stops, the exchanges will likely fold up and disappear.

Who will you collect from for your short?
How? By investigating a report of a crime, determining it was false, and releasing the guy?
Yeah, that tweet was a definite WTF moment for me. Having to explain what cargo culting is to tech folks, is becoming more rare for me. Yet we continue to try to summon those gods.
Thank you! I've eaten Wholly Guacamole; not really the best, but now that I know it's pasteurized, I might try it again.
I would also assume that there are still billions of people around the world aspiring to live lifestyles like people in the US/Western Europe, so absent the development of an energy source comparable to the convenience and low price of fossil fuels, any slack in demand from US/Western Europe will be picked up by the poorer billions.
Velcro Cord Wrapping Tape: https://www.aliexpress.com/item/1005002433097616.html
I bought 4 different colors for wrapping different wires that go to different kinds of devices.

Magnetic chargers for all my devices: https://www.aliexpress.com/item/1005002239613192.html
For context, I never transfer data through cords for my devices. I have semi-permanently affixed these chargers to my devices and now I have chargers that work for all of them. Life-changing purchase.

Cheap Earbuds: https://www.aliexpress.com/item/4000507169624.html
I bought 10x of these for ~1 USD each, and it put a pair in every bag, box and jacket I traveled with so I'd always have a set with me no matter what. Very convenient.

Metal card wallet: https://www.aliexpress.com/item/32808543399.html
Going on 3 years, fairly durable for the price. Reduced wallet size by forcing me to discard (pun intended).

Sleep mask: https://www.amazon.com/dp/B07KC5DWCC
Also life-changing. I have 16 windows in my room and this allowed me to finally sleep past daybreak.

Ear protection: (not exact pair, but similar) https://www.amazon.com/12010-34dB-Highest-Safety-Muffs/dp/B0...
Combined with the aforementioned cheap earbuds, these replace 200+ USD noise cancelling headphones for ~15 USD total and allow me to concentrate at work.

Rechargeable batteries (AAA and AA), and recharger:
I use these for everything that requires batteries.

The Phoenix Project (Book): https://www.amazon.com/gp/product/1942788290/
This book helped me change my career trajectory in a positive way.
I agree. We only do on the order of 20 to 50 a day but only a few times a year. Having something like this would help a lot. Not that it can't be done on a computer but when in a rush and perhaps traveling or in the field having a one-to-many sd card cloner / writer is super helpful. The price isn't that bad considering people pay that much for a new cell phone each year.
What makes the Framework laptop so great is that it provides a user-controlled system without being ancient and crippled. It stacks up pretty comparably to a standard XPS or MacBook. As much as I respect Purism's efforts the Librem 5 is so much less functional than an iPhone it's almost a different class of device.
For my edification, what are you going to buy? I want to look at it and if it fits my requirements for a device, I might get right in line behind you.
The same argument can be made for Covid itself too and is also an anti-vaxx argument.
Everything we do has risks and we determine whether or not they're reasonable.

With vaccines, enough countries have said some have acceptable risk profiles (Pfizer and Moderna) and some are too risky (AstraZeneca).
I'm at least hopefully because this one appears longer (~9 years; if you count 2012-2019; most of the other drops were shorter and seem to be tied to major economic events - the 73 and 79 oil crises, fall of the Soviet Union in 91 and subsequent recession in Eastern Europe, and the great recession in 2009.

Seeing an apparent flattening in a period of major economic growth is really encouraging.
> Question: does a full git repo provide proof of provenance? As in, if a repo has no dependencies, and the git history shows that you personally wrote every line, does that work as proof of provenance?

I would think so. You could always simply copy-paste from "unwanted" sources, but having a Git repo, with full history, goes a long way towards proof of ownership. It can also help with justifying billing (some people bill by tasks, such as bug-fixing, or adding features).

> I'm not sure what you are trying to tell me here. Could you clarify?

I think that "supply chain" dependencies (like standard SDKs and libraries that are used as a "baseline") are juicy hack targets (think SolarWinds).

I would like to think that these types of dependencies should be held to much stricter standards than maybe a dancing cat animation.

Of course, there's that whole "blurry line" thing. A device SDK might not be used by many folks, but every person that has one of those devices, would use it. If the device were some kind of forensic tool, or bespoke military gadget, then that seldom-used SDK could be a rich target. You'd want it held to the same standards (or higher), than a C compiler or encryption library.

But people that like to license, want to license everything. They would insist on holding cat animations to the same standards as nuclear launch key crypto. I've seen this in action. People like that, almost stopped all productive work at a company I worked at. I won't go into details, but it's a very real problem, when you start to have industry standards and gatekeepers.

Software needs to be flexible. It's very, very difficult to have flexibility and Quality shacking up together. In the company I worked for, the hardware people insisted that flexible software was automatically "bad quality," so we were forced to apply rigid hardware development methodologies to software development; with ghastly results.

I write about "concrete galoshes," here: https://littlegreenviper.com/miscellany/concrete-galoshes/
Ok, what would be a confounding factor?
Or we could recognize that there is no good reason for the U.S. to have a military so giant that it requires massive, counterproductive subsidies to maintain “just in-case” we need to engage in a massive war.

The U.S. military maintained and fueled-up all of those tanks and jets for 20 years in Afghanistan and accomplished nothing. Why should the world’s climate continue to suffer for stuff like that?

What is more important, climate change or the fuel supply of tanks?
No they are different things. CSAM detection is looking for specific images from a database before upload to iCloud photo library: https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...

The child protection part can be enabled for under 13s if they’re in a family account. If enabled messages app will try and detect adult images being sent and received and give a warning to the child, it can also let the parents know about it.
This discussion is so weird because you're to the letter describing banks and bank runs, which does make sense because Tether and other stablecoins are banks, albeit without FDIC insurance.

What is actually bad about Tether that doesn't apply to USD and the current largely functional banking system?