skysight-inc/HackerNews huggingface dataset:
A curious outcome of the scrutiny that the system design is receiving is that it will make it less effective at the task of catching actual collections of CSAM.

Page eleven promises something I haven’t seen before: that Apple will publish the match threshold for each version. Meaning, even if after all this, there are abusers still using iCloud photos to manage their illegal collection of CSAM, they can check back to know what number of images is safe to keep.

A twisted version of the Streisand effect.
I might be reading between the lines here, but you know that Thinkpads are made in China, by a Chinese company, Lenovo.
this is pretty cool. Moore's law, I can't wait what it will be like in 18 months.
> I didn't really think sugar causing obesity (and in turn causing diabetes) was open to debate

There is no debate that there is a correlation, but that's not a causation.

Also, what is it now, sugar or obesity? Because if it is obesity, then shouldn't we (by your logic) tax everything that leads to obesity and not just sugar?

> People gain weight because they consume too many calories and then eventually overweight people develop diabetes.

But why do they consume too many calories?

There was a post here on HN not long ago that claimed that the micro-nutritions (like minerals) of many vegetables have declined over the years. Maybe that contributes much more to "eating too much" than anything else. That's something to research first, before taxing stuff based on our gutfeeling imho.
None of the laws do yet. My observation isn't about the laws as they necessarily exist now, just as the worry about how this could be abused isn't about Apple's policy as it exists now.

If we trust US courts to stop law enforcement agencies from demanding everything they want from companies, they they can stop law enforcement agencies from demanding Apple add non-CSAM data to the NeuralHash set. If we don't trust the courts to do that, then we're kind of back at square one, right?
Because 'you' is statistical and vaccine induced immunity is lower risk to acquire.
Death isn't the only thing that comes from the virus. You're also ignoring all of the younger people who are immunocompromised or otherwise susceptible to the effects of the disease. Alternative suggestion: everyone just get their shots just like they do their flu shot and we can all move forward with our lives.
why even ask the question " What more did you expect from them?" if you didn't care about the answer?

I gave a pretty obvious and clear answer to that, and apparently you didn't care about the question in the first place, and have now misdirected to something else.

I am also not sure what possible definition of "privacy" that you could be using, that would not include things such as on device photo scanning, for the purpose of reporting people to the police.

Like, lets say it wasn't Apple doing this. Lets say it was the government. As in, the government required every computer that you own, to be monitored for certain photos, at which point the info would be sent to them, and they would arrest you.

Without a warrant.

Surely, you'd agree that this violates people's privacy? The only difference in this case, is that the government now gets to side step 4th amendment protections, by having a company do it instead.
Calling reserve alone is huge. vector has shrink_to_fit, so one can return memory, but doing a blanket 1-4kb reservation gets around a large number of the early reallocations and can result in significant improvements(in JSON parsing to user data stuctures I was seeing 25% from that alone). The cost is in the allocation call.

The unfortunate part, if I were to design a vector now for a standard, it would be std::pmr::vector or someting like it. The cost of a single allocation can be a little higher(extra pointer indirection) but the allocator is type erased. So that one can use a bump allocator or something else without changing the interfaces.

The real win for vector would be to use a local allocation or memory resource that calls into std::allocator after it is ehausted. I saw upwards of 50% improvement in some task with that. This was prior to reserving up front.
Every "booster" vaccination going into the arm of a low risk population is a vaccination that is being withheld from a vulnerable population in a less "privileged" country.

The WHO specifically recommended to hold off on boosters because developing nations still have not vaccinated their vulnerable populations yet.
Moreover, the kernel generally takes the entire top half, so you actually only get 47 bits.
At the time people were showing the effect by gripping the bottom of the phone in such a way that wrapped their entire hand tightly around it.

It wasn’t “one of the most widely accepted and ergonomic grips people use”.

The entire thing was a non-scandal, it wasn’t a real issue. In a lot of ways this is similar.
Err. What does that last one mean?
libc++ uses 4kb
Appreciate the details of how you took action on this.

In terms of an OS for your Pixel, I'm curious about this myself. Were there any other options you considered, and how did you evaluate them?

And regarding Pinephone and Librem, though you won't be a customer is there any other way you can support? These options seem like the long term solution, anything else just falls short.
I agree with parent. Speaker is a famous technical expert making public comments, people are gonna take him seriously. He should check that what he's saying is true.
People generally operate on relative (social) position rather than absolute condition. If the world is going down, it's better to remain ahead of the herd while it does so. I'm not saying this is in any way right, but rather it's what will happen just like Covid.

There's also a coordination problem - if an individual rich person decides to slow down climate collapse (and many of them are, albeit possibly ineffectually), they're making their current life worse while not appreciably heading off the disaster.
I will go as far as to say that if you are repeatedly solving merge conflicts with new code you need to seriously revisit your version control choices. Merge conflicts are a tool to help you collaborate, they should not be an impediment.
Turns out that evil bastards also have no sense of beauty or proper data formatting.
Oldest Honey
My take is that "enlightenment" is a real state the brain can be in, and it can be invoked by meditation, or even spontaneously in some cases. But that this state may not actually have the level of impact on human behavior as many think it should.

In the west we seem to correlate "enlightenment" with some level of "perfection", but I think that's actually pretty far removed from what many eastern traditions consider it. This results in us having weird expectations about how somebody who is "enlightened" should behave.

I think it's totally possible that Culadasa has had the experience of "enlightenment" (a certain state the brain can exist in). But it seems like this state may actually be morally neutral.

There's a reason the Eightfold Path in Buddhism isn't just "meditate really good until you reach enlightenment".
Drawings are prosecutable in many countries including Canada, the UK, and Australia. Also, iCloud sync is enabled by default when you set up your device, whereas the Facebook app at least is sandboxed and you have to choose to upload your photos.
> Since the scanning doesn't happen on iCloud, this distinction is irrelevant.

It’s really not irrelevant. A third party photo library that avoids using the PhotoKit library would not be touched by the CSAM detector. There are many of these on the App Store.

One step further and store the photos encrypted, with a custom renderer that decrypts the content on the heap, and that would take some tremendous performance-hitting detection abilities it’s extremely unlikely to ever happen.
Characteristics of the 3 different types of Data Scientists
Why can't just take the cultural lessons of the past for what they are and not believe them literally or completely dismiss them?
I see.. What is being said is that vaccinated immunity is "less damaging" to acquire than natural immunity.
https://archive.ph/pM683
To me "pythonic" is as far as you can go on the easy side of simple vs easy in the Rich Hickey sense. Where Clojure prioritizes simple and attempts to make simple easy, Python eschews all else and prioritizes easy.

From the Zen of Python: complex is better than complicated.
If you have a 105 key (EU, tall return) layout, consider changing to a layout with the ` as dead key. For example, the Irish layout is pretty much just the UK layout with dead key functionality + euro sign. `e will then type è while AltGr+e will type é.

If you have a 104 key (US, wide return) keyboard layout, you can try the US international layout. In that case, shift-~ will get you ` and you can use the same compose rules as above.
I have heard of some success with mental exercises helping cold hand/feet syndrome. That is a fairly common condition for people in the winter.
That’s different. The FBI can legally require Apple or any other US company to search for specific files it has access to on it’s own servers because nothing currently shields backup providers. They could and did force Apple to aid in unlocking iPhones when Apple had that capacity. What they couldn’t do was “These orders would compel Apple to write new software that would let the government bypass these devices' security and unlock the phones.”

Forcing companies to create back doors in their own is legally a very different situation. As to why iCloud is accessible by Apple, the point is to backup a phone someone lost. Forcing people to keep some sort of key fob with a secure private key safe in order to actually have access to their backups simply isn’t tenable.
> We invited our US panel to express their views on three separate issues related to the wealth tax: […]

And how was the criteria for this panel chosen? What would a random sampling of, say, NBER affiliated scholars give?

Given previous surveys from Chicago Booth were done, it seems that there's an ideological slant to those they ask for advice:

* https://krugman.blogs.nytimes.com/2013/01/05/ideology-and-ec...

Further, given how wrong the Chicago school has been on macroeconomics for the last few decades, I would question anything coming out of there. Fama and French for example have done good work on markets, but they are and were wrong on deficit spending and stimulus since 2009.
A Chicken Farm Guide
Black Hat USA 2021 Review
As a user of a keyboard driven browser, I hate it. I hope this trend of rendering the whole page on html canvas never catches on.
Amazon will monitor workers' keystrokes to 'combat data theft'
An excellent comment. Terms of service still tend to be mostly words but they matter a lot.
They have dozens of terms for states of mind and brain activity. Many are more precise than in western science.
Learning from cell biology to improve web funnel
> And then you can say, "But I'm using encryption," and the government mandates that they have a back door into all encrypted traffic that goes through their borders.

And then one can compromise and infect millions of such backdoored devices and start feeding (much cheaper than the government enforcement implementation) spoofed data into these systems at scale on these backdoored devices that act like "swatting as a service" and completely nullify any meaning they could get from doing this.

I'm personally really interested in router level malware + 0days on devices as distribution vectors rather than the typical c&c setup.

> They'll go after people hosting it.

Not too hard to imagine one being able to distribute such things across millions of ephemeral devices that are networked and incentivized to host it, all across the world, regardless of illegality in any particular jurisdiction. Technology enables this, without such, it wont be possible.

> I think hackers and engineers really, really want to believe that math trumps policy, but it doesn't

I don't think that at all, I think it comes down to incentives. I was listening to a talk the other day where someone mentioned that for the longest time (since at least wwII), governments pretty much had a monopoly on cryptographers and now there are lots of places/systems that are willing to pay more to apply cutting edge research.

> but let's also fight for government policy that supports it, rather than assuming encryption and open source is a guarantee we can circumvent bad policy.

Much more cheaper for an individual, with more immediate feedback mechanisms doing one vs another. One can also scale a lot faster than another esp since one is very much divorced from implementation.
I just need a jelly donut. A lemon one. I think my blood sugar is low.
They did to a certain degree even on iPhones too. Remember how Verizon used to cripple hotspots?
If you knew about the existence of this program and were determined to keep a collection of CSAM on your phone I don't understand why someone would choose to dance around specific thresholds rather than just disable iCloud sync.
My question was directed at someone who claimed their privacy was violated, and I asked them to explain how they would’ve liked their service provider to handle a difference in opinion about what to build in the future. I don’t think your comment clarifies that.
https://makepad.dev/
Unfortunately scoop stopped being maintained. See https://github.com/lukesampson/scoop/issues/2609#issuecommen...
If you have a west coast home it’s probably worth at least half a mil in any Major metro close to 1 for anything decent sized.

People who pay subsidized rates will be throttled but will still be colder than 10 years ago before ac was widely available, they will have to suffer at 80-85f while you crank it down to 68 and pay market rate for the privilege . That’s just how capitalism works and it’s not a bad thing
Unsurprising, since the creator of rust, Graydon Hoare now works for apple on swift[0] in "a non-leadership position".

[0] https://old.reddit.com/r/rust/comments/7qels2/i_wonder_why_g...
The system isn't entirely on-device, but relies on uploading data to Apple's servers. Hence, why I said that it's not an arbitrary limitation that it only scans photos uploaded to iCloud. The system literally has to upload enough images with triggering "safety vouchers" to Apple to pass the reporting threshold, and critical parts of that calculation are happening on the server side.

I think what you're arguing is that Apple could still change what's being scanned for, and, well, yes: but that doesn't really affect my original point, which is that this is a policy/legal issue. If you assume governments are bad actors, then yes, they could pressure Apple to change this technology to scan for other things -- but if this technology didn't exist, they could just as easily pressure Apple to do it all on the servers. I think a lot of the anger comes from they shouldn't be able to do any part of this work on my device, and emotionally, I get that -- but technologically, it's hard for me not to shake the impression that "what amount happens on device vs. what amount happens on server" is a form of bikeshedding.
> The voucher generation is actually exactly what enables us not to have to begin processing all users’ content on our servers, which we’ve never done for iCloud Photos.

I really dislike this statement. It's likely designed to be "technically true". But it's been reported elsewhere that they do scan iCloud content:

https://nakedsecurity.sophos.com/2020/01/09/apples-scanning-...

Perhaps they scan as the data is being ingested. Perhaps it's scanned on a third party server. But it seems clear that it is being scanned.
Really interesting technique. Similar to dendrochronology, but using tusks and strontium isotope concentration rather than tree trunks and annual ring spacing.
> Maybe not everyone’s experience mimics mine but I felt like people looked down at me a bit when I was 16 for using nano on the command line.

Just say "nano is Linus Torvald's editor of choice" (which is true and will instantly shut down the debate)
Swift and Rust have a very similar feel to them, and I love both of them. There is no doubt that there is a lot of cross pollination between the two. And at least one person that was involved in creating Rust now works on developing the Swift language.
Yes the President of The United States of America is the ONLY person with ANY power. Not the companies who spend billions of dollars lobbying to pass laws only in their own interest. Not the media moguls or tv personalities who can manipulate public perception on any issue. Not the lawmakers, the community leaders, people who directly affect other people's lives.

No, I can't imagine anybody would like it if folks were dim and complacent and just generally easy to fuck over
Even the specifics there of what subset of materials gets you to making chips without disposal issues would be super interesting to me. It's a complex space to navigate, and shrouded a bit in mystery and trade secrets.
Hmm. I should perhaps have said "contrarian view," although I'm not sure it's actually even super contrarian in retrospect. Maybe more "maybe we're not asking the right questions."
we all know they only care about dcma 2.0

yall aint gonna be censored for being trumpian nut jobs, but if you sharing trump ip, you better pay up chub
Just think of the healthcare Costs that will eventually have to be paid by Medicare and Medicaid for hospital visits and it’s a steal
That's what absl::InlinedVector does. It has internal space for N and if needed it reallocates. Brilliant if you can arrive at a reasonable N.

https://github.com/abseil/abseil-cpp/blob/master/absl/contai...
I could be wrong but imagine buying cheap server space from multiple providers like ovh, linode and plonking minio. That way you get distributed storage without being stuck with one provider like aws or b2. That's it I think, or as you said selfhosting
Trolls are graded on the inverse of the ratio of characters they type vs. characters typed back at them. If you can get people to type novels back at your poorly spelled, no caps, no punctuation incomplete sentence, you win.
Amazing works! Yeah, such nostalgia. What if Eve didn't close? For example, VCs invested 20M in a case.
> Without a randomized controlled trial, they have nothing but speculation as to what is effective or not.

Like this one? https://www.medrxiv.org/content/10.1101/2021.05.31.21258081v...
Or you can go find one of the 21 others FLCCC cites (excluding Elgazzar's).

I hope you didn't bury those goalposts too deep as you'll need to move them again.

Meanwhile the meta-review you cite is the one that managed to "find" only 18 trials and those somehow just happened to be the ones showing neutral results; no one has yet figured out how they somehow accidentally missed all the studies with positive findings cited by the FLCCC. Maybe in a few years there will be a peer-reviewed RCT explaining this apparent selective blindness, which is the most alarming epidemic happening right now.

Look, I don't know what to make of all the conflicting evidence. But I sure as hell know what to make of all the people lying about the evidence.
The behavioural expectations are explicit in all the Buddhist traditions. You're also mixing up a temporary state with what's supposed to be an irreversible permanent change of nature. Of course, the notion that the rigors of virtue are just part of 'social conditioning' that a meditator will slough off is deliciously tempting to people want to have their cake and eat it too. "Freedom from desire but oh, should one happen to come up - hey why not act on it - not because I want to, just, randomly? haha. because nothing has essence right? no harm done haha."
The headline is kind of confusing. Blizzard is going to make all multiplayer go through their battle.net servers, rather than letting players connect directly to each other.
I'm not sure if the author of this blog visits hacker news to read this, but your code blocks are unreadable without javascript. They're black highlighted black text.
BlackBerry phones were smartphones, not feature phones. They were the smartphone to beat when Apple's iPhone and the various Android phones started coming out. They were just business oriented smartphones instead of consumer oriented smartphones (like iPhoneOS and Android devices).
What about trust-but-verify ?

If the OS was open source and supported reproducible builds, you would not have to trust them, you could verify what it actually does & make sure the signed binaries they ship you actually correspond to the source code.

Once kinda wonders what they want to hide if they talks so much about user privacy yet don't provide any means for users to verify their claims.
Cost cutting & latency reduction on AWS S3. There is also abstraction where you're interfacing with MinIO and don't care if it is GPC, Oracle, Azure, AWS, etc behind it. Granted k8s has been making progress with this as well.
Congratulations, You Are Now Hackable Animals
You could look for regularity of transactions and build a pattern. It would be like a Tor timing attack. You also can look and probably get intel that the BTC is coming from large Monero transactions and get AML heat on you.
> This makes direct comparisons to early-20th-century airships difficult,

This is exactly my point. It's unwise to assume they are worse. If anything, to a first estimation, you can have the passenger cabin disconnect and glide to a controlled crash as we do for planes in certain scenarios.

I'm not seeing how a slower moving, less energetic vehicle is less safe. It's a complete subversion of engineering acumen.
My wife just told me she was going to bed.

It’s true. There’s no feasible way for me to prove it. Even if she were to record a statement saying that, indeed, she said that…she could be lying for some reason.

Most of what we experience in life every day isn’t provable. That doesn’t make it any less true. It’s just exposes a weakness in what a person is willing to consider as truth, which is that it depends entirely on your willingness to trust the source and very little to do with actual truth.
What an amazingly detailed write up, thanks for sharing. For web libraries or frameworks, what are your preferred options and why?
I'm missing the point too. If an app gets unjustly removed from GApp store, then it will get removed from here too?
i'll give it a try later. thanks! <3
FWIW, many (aka, enough) scientists now believe that life may have originated at the bottom of the ocean, and so we have slowly been evolving "up and out"... maybe in another million years or so something will finally figure out how to live in the stratosphere ;P.
This guy is annoying even when filtered through an article summarizing him. Although “MinIO is Hotel California without strings” is so audaciously insane a statement, it has my respect. (Because the strings-you can check in but never leave-are just about the sum total Hotel California’s identity)
Hacksmith vs. Mandalorian Hacklorian Finale (Short Film)
Right, and in the interview linked [1] above they state:

> The voucher generation is actually exactly what enables us not to have to begin processing all users’ content on our servers, which we’ve never done for iCloud Photos.

But they do appear to do "something" server-side. It's possible that all data in scanned as it is ingested for example. I dislike this statement, because it's probably technically correct but doesn't help clarify the situation in a helpful way. It makes me trust Apple less.

[1] https://techcrunch.com/2021/08/10/interview-apples-head-of-p...
It's a bit strange how difficult it is for these populations to just not ingest stuff.

We have too much time and temptations around. When you're busy and can only have veggies fruits and a bit of meat/fish the whole problem evaporates. Bonus point if your daily activity involves good physical exercise and relaxed relations.
My understanding based on piecing together the various poorly cited news stories is that Apple used to scan iCloud Mail for this material, and that’s it.
Efficiently managing the supply and demand on Uber’s Big Data Platform