skysight-inc/HackerNews huggingface dataset:
> once this system is in place it will be used for anything, not just photos

The system seems designed to make it hard to use it for anything else. How will a hash driven by a visual perception based neural net be used on ZIP files? How can you add ZIP files to your iCloud Photo Library?

Sure, Apple could possibly do any number of bad and worse things. It’s a matter of trust that every time we update our iPhones that the update doesn’t include a ZIP file scanner or a blasphemy-scanner. This has always been the case, even before the introduction of the CSAM voucher mechanism.
You can't reduce gas emissions from landfills if you are then what goes into the landfill is not getting there and it's staying in people's yards as compost that's not a reduction that's just moving it to another place
As a long time Apple user and developer (since black and white Apple II), I have witness the rise/fall/rise again/and now fall again of Apple. The future computer I WILL be Linux/FreeBSD for all important stuff.
I wonder if in the +1.5C future people will be wearing solar panels on their bodies to charge their devices.
Well, that's the explicit goal of SEV.

That the CPU should be able to cryptographically prove that a VM has been setup without any interference from an inside attacker who controls the hardware.

At the very least, SEV massively raises the barrier to such attacks. It's now beyond the ability of a rogue administrator or technician, requiring complex custom motherboards. But a well-funded inside attacker can target something with high enough value.
Anyone knows how they plan to monetize Thunderbird?

I am skeptical about using a "monetized" mail client.
Get cancer and die.
>the mRNA COVID vaccines are at least as effective as the Salk and Sabin polio vaccines were.

that is simply not true. The scientific data has been widely available for several weeks at least, yet ultra-zealot covid vaccine pushers are just ignoring it and continue pushing Moderna/etc. stock up together with political establishment.

https://www.reuters.com/business/healthcare-pharmaceuticals/...

"the effectiveness of Moderna's vaccine against infection had dropped to 76% in July - when the Delta variant was predominant - from 86% in early 2021. Over the same period, the effectiveness of the Pfizer/BioNTech vaccine had fallen to 42% from 76%, researchers said. "

In general your post does the same propaganda trick that many similar posters here and elsewhere do - tightly associate covid vaccines which are failing for delta (nothing exceptional in such situation, happens all the time with flu vaccines) with success of proven vaccines. What is your point? To undermine the people trust in the proven vaccines like measles and polio and even in the general vaccination principle by forcefully pushing failing covid vaccines upon them?
> Also: if icc is going to go with LLVM as a backend, then what is the point of using icc at all?

They're not upstreaming all their optimisations. I'd be surprised if they upstreamed all their FPGA support as well.
I would say my primary device is a Windows desktop for the storage but I also use it to sync to a Macbook Air.
Because not everything on icc is going to be upstreamed to clang, thanks license.

It is not like clang is enjoying C++ Builder RAD abilities, PS 4 and 5 optimizations, or bitcode format used by watchOS.
You are right, and I agree.

However, languages live and the people of the USA are an important determinant of where the English language is headed. They have a particular history involving this word, and that history has not been fully reckoned with. It makes sense that the same word, although in other contexts with a slightly different meaning, would be redefined or removed this way, in order to deal with that history.

Natural languages violate the sort of origins and logical meanings all the time, so this does not have to be an exception.
Many of the proprietary C++ compilers (Intel included) are just repackaging of the EDG front end. The monoculture has existed for a long time in the C++ world due to the complexity of implementing the language to spec.

Honestly, I think it will be great to have one less set of compiler-specific oddities to worry about.
"The crypto community" is not one person.
So I'm gonna stick with real currencies but thanks...looks good.
Yeah, this is why the pro-vaccine propaganda is insanely condescending: of course we (phd) know that vaccine are efficient to stop the disease, and we are not debating that. In most case we debating the right to refuse it (which is basically not the case anymore for example in france), and also the fact that for many young people, it's close to useless.

Useless in the sense that the probability of having severe forms is suuuuuper low, and that the argument of 'limiting the spread to older/weaker people' is not so convincing since on the long term covid will end up spreading to the older/weaker people anyway if themselves don't vaccinate. SO we should focus the effort on convincing older/weaker to vaccinate and leave the Phds/young.
I recommend "doubleplusgood password", should be maximally inclusive.
Reverse Engineering UIKit to Fix Our Top Crash
They released codespaces to enterprise customers
I watched "Secret City" and was aghast at the secret trials, evidence, etc. Is all that really happening today in Australia?
"rouge administrators" ?
We use Intel Compiler mainly on supercomputers with Intel CPUs. IT can produce faster code. However it is not great to work with it. It lacks features of the newer standard and it is really slow. Usually we develop with clang or GCC and then we go on the cluster.
The original end of the internet used to be cool

But it seems gone now
The problem with data collection is not what they companies doing it use it for at the moment. The problem is making so many details of your personal life discoverable by someone simply buying some data and cross referencing databases.

When you lose privacy willingly saying "but I have nothing to hide" you also lose the ability to hide from bad actors.
Actually I was thinking of new features. For example, I developed a software application complementary to Thunderbird that used its DB to offer organizer functions (e.g. ranking of emails for task priority according to different parameters etc.)

I realize that many people take what the market offers.
So everyone living in a city should have to move to a cheaper area because their pay was cut for no reason? If anything the company should be paying more, because they save money on office space which now the employee is covering.
> I don't want to pay more for larger apartment

And thats a perfectly valid choice that you should be allowed to make. If you want to work at an office, you would make sure during the hiring phase that your employer agrees and provides that office to you. If the employer says that you HAVE to work from home, that is a factor that you should consider when accepting the job offer.
Adding a custom domain to Heroku apps for free
Code Signing Certificates are not enough
The prospects for Apple’s on-device CSAM Detection system in Europe
I don't agree that placing regulations on the finance industry can be in any way equated to totalitarianism.

In fact, we have already seen what happens when the financial industry is entirely deregulated multiple times worldwide.
Personally I don't trust anything that I don't self-host. With Hetzner I chose full-metal instead of VPS. I pay €40 for 4 TB (2x4 TB mirrored to be precise) shared among a large number of services, including Minecraft servers for kids. The load is very low and the maintenance is a pleasure. Plus I love tinkering with and learning new things, so this part of mine is fully satisfied. I learned with Hetzner that every 3 years or so a hard drive dies but they replace it within half an hour so I just let the RAID rebuild itself and that's all.
I was just about to say the same thing
> A friend in the UK or US willing to put a box on their network and lose some bandwidth.

It’s very tempting to ask a friend to buy a nuc, and just post them a pre-configured .m2 drive. Likely overkill as a Pi or similar would probably suffice.
You want me to include a Javascript file to style my website and you use the non standard `x-style` attribute. I think i will pass and write vanilla CSS or something that compiles down to it.
The account https://www.youtube.com/c/OliverResslerFilms/videos has been restored in the meantime.
I would say it was confused deputy attack : https://en.wikipedia.org/wiki/Confused_deputy_problem
They not just lost a few hundred Ks of users, they lost a huge chunk of evangelist. And worst than that, turning into anti-evangelist. I am that and so do many of my colleagues. I believe this is a trend though not many people willing to mention it. So seeing firefox dropped significant market share since 2017-ish to some reflect what we anti-evangelist are doing "unconsciously". This is what happen when the company decide to go with some smart-alec UI/UX designers that didn't do much market feedback but trusting their own instinct. Probably Jonny Ives wanna be.
You're assuming that wildfires cause damage always, most of those places you listed purposefully burn huge fires to create humus in order to grow crops to feed the overpopulated Earth. I was watching a off-road 4x4 channel where there were indigenous Australians setting fire a huge grassfields in Kimberly outback because that's the way their ancestors always did it and there was no other way to clear 14 ft tall grass in the entire valley.
> It's now beyond the ability of a rouge administrator or technician, requiring complex custom motherboards

The end of the abstract explicitly refutes this. It is claiming that a software-only solution, using keys derived with this technique, can pretend to be a suitable target to migrate a secure VM to, which then allows the rogue admin to inspect or modify anything in the VM.
Native speaker here: yes, “primary” does not mean the same as “master”, and in this case I would argue that the distinction is relevant.

I agree with your assessment. “primary” — to me — implies one of many equally-important passwords. “master” implies a password that protects/overrides/controls all other passwords, which is what Thunderbird’s master password actually is.
I had very good and reliable experience with Box.
i switched from lastpass to bitwarden for about a year or so and its what i recommend to most people.

i would be still using it myself but i also wanted to login to desktop applications so ive been using keepassXC since.

keepass's auto-type feature is also a great way of autofilling passwords without having to give your browser access to your password vault
Isn’t that the point though, when you access a bank api you have signed a contract in order to access it that states what is allowed and what’s not, the api code is not the contract but a way to access what you are allowed. With smart contracts the code is that contract so if the code allows it then it should be allowed.
I skimmed the original paper. It surprised me that the vaccine hesitant percentage for PhDs remained unchanged (in fact, even increased a tiny bit) throughout Jan - May 2021, while the % for all other groups are steady decreasing.
You joke, but blacklist and whitelist are in the process of being cancelled.
Counterpoint: it is my impression that experienced embedded software/hardware engineers are arguably hard to find, yet they aren't the most well paid.
It seems like this system was designed specifically so that this would be impossible, and such a feature would go against what seem to be design goals of this system.

They went through the trouble of making this whole “private set” matching so that the client does the matching but doesn’t know the result of the matching. Only the server can (once enough matches are made that the key is available).
Back in university, some students (or was it only one?) put lots of effort into making a thing of the "Rautavistic University of Eschweilerhof". At that time, Eschweilerhof in Germany had only a population of 70 (now, its more like 71) and definitely had nothing that resembled a physical university. However, they wanted to come as close as possible to a real university and obviously having a web page was part of it: http://www.uni-eschweilerhof.de/ (in German).

I have just visited this URL for the first time in 20 years and it's gorgeous.
> I'm surprised so many people are so angry about the pay cut.

I think that's because many people think (rightly so, IMHO) that this is just exploitation by companies that sense they can squeeze a bit more out of employees because employees will likely accept (partly for the reason you mention).
Any word touched by evil men becomes automatically evil, hence they will control our thoughts and have already won...

that's why I am on team Lighbringer... go Luci, go!
Apple implemented a system where they sent to their server on an insecure protocol information that identified what applications you are opening. This shows everyone how much Apple cares or is capable of implementing privacy.

Emails reveal during the Apple vs Epic trial revealed that Apple store apps were infected, then Apple prepared an email for the users to inform them but Timmy decided that informing the users about possible security or privacy problems is bad for PR. We need to keep reminding or informing people about the reality and not the myth of Apple.

Yes I know you use Apple because Google shit is probably worse but Apple shit is still shit, Apple hypocrisy is still hypocrisy and Apple greed is still greed.
> They're not upstreaming all their optimisations

That's quite reassuring for users of LLVM on non-Intel hardware, where ICC "optimisations" turn into pessimisations.
I’ve personally setup about 5 registered to Buckingham Palace. I wonder how many are registered to prominent UK addresses?

I don’t live in the UK, but she is my head of state, so I have found a use for my queen.
> Also: if icc is going to go with LLVM as a backend, then what is the point of using icc at all? Why not just use clang?

From the blog post:

"Not all our optimization techniques get upstreamed—sometimes because they are too new, sometimes because they are very specific for Intel architecture. This is to be expected and is consistent with other compilers that have adopted LLVM."

I don't see any good technical reason in this marketing language though, tbh:

- "Our optimizations are too new" -> So put them behind a feature flag when upstreaming? And why inflict them on icx customers if they are "too new"? What does that even mean?

- "Our optimizations are architecture specific" -> ...yes? Emitting good architecture-specific code is the whole point of an optimizing compiler? How is that an argument against upstreaming?

- "Other compilers also don't upstream everything" -> That's a non-argument.

I get it, there's no money to be made in just implementing all your optimizations in clang directly. But these reasons (together with the repeated emphasis of how they do contribute to LLVM) seem silly. To be clear, I'm all for Intel helping improve LLVM, but the technical arguments for maintaining a separate commercial version don't convince me at all.
Seems to be the deliberate choice to delay automatic update for now. From the release notes:

> Thunderbird version 91.0 is only offered as direct download from thunderbird.net and not as an upgrade from Thunderbird version 78 or earlier. *A future release will provide updates from earlier versions.*
> Internet file sharing was/is illegal when it first started.

Internet file sharing is older than you think. Together with remote terminal access (TELNET), file transfer (FTP) is one of the oldest Internet protocols. When file transfer over the Internet first started, that is, when the Internet itself started, it was not "illegal".
A war crime is what USA UK and EU did to Libya
Even I have trouble motivating the investment in a ground source pump in a really cold climate in Sweden. My regular air-water pump is around £4-7k and has a thermal efficiency (COP) of over 4 (so 1kw electricity is more than 4kw heat) and that’s with no digging or expensive installation.

I get that there is no way Central Europe will switch to ground source, but regular heat pumps should be cheap enough to subsidize.
Gross salaries for juniors is usually in the range of 20k annually, in certain companies or software (slave) houses even less. For seniors it should be around 40k. For lead or principals, even managers, around 60k. Consider that net salaries might reach 60% of gross for certain amounts and above (e.g. 60 gross is 36 net). And of course, these are anecdotal data, probably covering 99% of local companies.

My current salary which is close to 6 figures for a tech lead job would be an instant disqualification in probably every local company. To be honest, a few years back it would be a dream for me, unless i had to relocate somewhere. But now and for the next few years, i really cannot see how i can work onsite again in my country.
Cynic mode: Putting sighash in things you shouldn't is incredible common cargo culting in cryptobro areas, it's much more likely that the people involved didn't even understand its implications.
I mean Singapore has 4 official languages, 3 major ethnic groups (Chinese, Malay and Indian), and ~50% of the population are foreigners.

And yes, you a white person can be Singaporean. There aren't many, but there are Singaporean politicians who are white but Singaporean by birth.
In that case please tell me where this "external pressure" is going to come from.
Yet another case of an organisation giving in to pressure from a vocal minority of activists.

Master does not mean the same as Primary. Master does not mean the same as Main. Efforts to replace Master with alternative, less precise words make it harder to understand what things are actually meant to be doing.
I find that one can invert pretty much every opinion that Gosling holds on a technical matter and be better off. It boggles the mind that people listen to him.
I think a comparison to Tailwind would be helpful, since it seems to target a similar audience.
> Spielberg also pushes making her explicitly the instigator, perhaps also as a way of mitigating the “abusive creep” impression.

That doesn’t have a good ring to it either as pedophiles often claim they were in fact seduced by their victims.
Use the domain of the website itself.
The most vaccine-hesitant group of all when grouped by education level. This may seem nitpicky, but the paper finds much higher vaccine hesitancy in many other groupings by age or ethnicity.

One interesting feature of the data in the paper is that the level of vaccine hesitancy in more educated people seems to have been much flatter over time than that of less educated people [0]. It's as if more educated people were more likely to have made up their minds from the start. Unfortunately, I don't think the paper provides any information on how training in different academic subjects correlates with vaccine hesitancy—a PhD can be in molecular biology just as much as it can be in comparative linguistics.

[0] Page 27: https://www.medrxiv.org/content/10.1101/2021.07.20.21260795v...
Thanks for the very comprehensive info. I think external wall insulation would be a hard one to get all the tenants to sign up for, but we're definitely due replacement windows in the next few years, so I'll push for triple glazing. Good luck with your retrofit!
The five stages of grief: denial, anger, bargaining, depression and acceptance... so depression is not bad, many are still in denial phase.
I look all those facts in a different way - not as a source of fear, but more in the way when you know facts that is it. I mean after acceptance, we can start thinking how can we improve things a bit, and maybe something good can come out of it.

I do not know, maybe like a cancer patient, they can choose not to know or to know, and then either do something about it or nothing about it. And only very narrow path can lead to recovery, but only, and only if they have a will to live.
Streaming probably ruined that forever
Yeah, I guess LLVM is preferred mostly because license.

Companies can keep their optimizations in secrets. Just like why Playststion's OS is based on BSD.
Might be just me but I'm way more scared of the CCP then of the FB board of directors. The latter hasn't really used online data for genocide purposes yet...
See also: niggardly [1]

1: https://en.wikipedia.org/wiki/Controversies_about_the_word_n...
The survey this report is based on asked if you would take the vaccine today. Your point about being forced is irrelevant to this question. What it’s finding is people with phds aren’t making that argument - they don’t want to take it themselves. Also you say you know the vaccine is efficient to stop the disease, but it’s close to useless “for many young people” but then you spend a paragraph arguing it isn’t.
There is. You may accomplish preventing any memory leaks or buffer overflows but there always exist a bug in your code.
There is another information leak that I have not seen mentioned in any news report. If an image hash matches the CSAM database, then it is sent to Apple, encrypted and with the “safety voucher”. Apple can decrypt the image only if they receive enough vouchers, and so they claim that they do not have any information about the user in case the number of vouchers is lower than the threshold.

But actually they do have information: they know that a user has a specific number of images which are perceptually similar to known CSAM material. This information is not conclusive, but it’s also not nothing. For example, could a court order Apple to release the unencrypted iCloud backups of all users who had at least one match?
I'm not sure I would want to manage that. I mean imagine your 2 year search finds the Typescript and Rust DevOps engineer with six sigma black belt who uses Vue is familiar OracleDB and Azure and disagrees with your team's consensus on where one should work? Do they accept the job and get to cause a revote? Are key members of the team now paying more attention to how they might vote than anything else?
And in the same way a human resembles a butterfly. didn't you learn from the case where algorithms matched white noise with some copyright material? There are many iPhones and many images in each iPhones, there will be false matches. Add on top of that that the database of hashes is secret, that it can be updated in secret, that the algorithm is secret and the "threshold" is also secret and you have a lot of suspicion from people.
"I'm looking for a co-founder, MUST be female, not willing to consider males. Please avoid gender bias on my thread, though - thanks".

You are sexist, dress it up however you want to.
Perhaps those least likely to take the vaccine are most likely to claim fake qualifications?
> only offered as direct download from thunderbird.net

No, it still isn't.
To be fair, even if all the software would be open source, one can not simply have both time and mastery level required to improve the programs one uses.
MSVC does not use EDG for the frontend as far as I'm aware. IntelliSense does, though.
> You will be surprised how much support Apple's initiative has in the broad public.

I wouldn't be, but that's not the issue, the broad public is gullible, the overwhelming majority probably still believe that Iraq had WMDs before invasion.
You just don't enter private thoughts into such systems. The line is pretty clear. The only problem is that if you want to WfH, it becomes nearly mandatory to establish side-channels for unofficial, non-company discussion between co-workers to replace neutral spaces in the office like the break room or cafeteria.