skysight-inc/HackerNews huggingface dataset:
Here's a good example: The article's author is actually the security team chair of a lightweight Linux distro called Alpine Linux. A base installation of Alpine includes BusyBox vi but no nano.
"Security theatre" generally refers to the TSA and airport screening. That's the first-paragraph description of the Wikipedia entry:

https://en.wikipedia.org/wiki/Security_theater

Its visiblity and intrusiveness is precisely the point. Not its effectiveness.
Adventures in Scale: Google Is Tech’s Lewis and Clark
Please don't blame "white supremacy" for this
I think the flagging mechanism is rife for abuse. There are clearly more people interested in low information reactions than substantive discussion. If all you act on is reports, you will be biased towards whatever they care about. That is not a good way to moderate for nuance. I’m sure you may have considered this, but I don’t think it’s coming through in the discussion of this important topic which has been mostly hysterical.
> Severe loss of marketshare? It wouldn't even register.

Disagree.

Something this ludicrously intrusive, over-reaching, reckless and trust-destroying is a dealbreaker for exactly the demographic of technology enthusiasts who influence others purchasing. It may not be instantaneous, but it would certainly propagate.

It's anecdotal, but I know zero people who are NOT reconsidering even lifelong loyalty to Apple over this.

It's just too crazy big a wrong, it's like the company just had a nuke go off inside it and is trying to pretend nothing happened.

They may as well have announced a partnership with Trump to put MAGA engravings on all future products, and then in the ensuing furore say they "regret the confusion", whilst carrying on with it regardless.

Though I suppose in that scenario they'd at least be targeting a significant market.

The same can't be said for the size of "sign me up for software-automated police raids" market. A market whose naiveity-induced initial "size" would rapidly shrink after the first few innocents went down, as they absolutely would.

I mean depending on the targets chat software preferences, could a malicious actor potentially ruin an Apple iOS users life just by sending them an image?

There are many troubling scenarios one could imagine. In fact, there is nothing but troubling scenarios.

It's not a can of worms so much as a wormhole, blasting an endless stream of worms at the speed of light.

I'm left not just questioning Apple's leadership, but - honestly - their mental faculties. Really.

No innocent person wants to walk around with an automated snitch in their pocket - I mean, hacking? Bugs? Oversights? Just the overall preponderance of fear that every millisecond you walk around with this thing, it - and its parent corporation and all the depersonalised machinations that go along with it - could be busy organising a blithely mistaken police raid on your family?

Say, because someone you've never met, sent you a message on that new chat app you forgot you installed, that autosaves all media to your iCloud? Or because someone stole the spare phone you keep in a drawer at work, used it for God-knows what and you didn't even notice it was gone? Or, maybe your teenage son got sent something from his teenage girlfriend who unbeknownst to any of them had her phones images uploaded and subsequently catalogued and flagged? Or any number of other entirely plausible scenarios that provide the very reason we have law enforcement protocols and procedures for reporting crimes and that are complex, nuanced and have evolved over hundreds of years and mountains of cases into a massive structure that exists primarily to protect the innocent from exactly this kind of freaking crazy shit?

And Apple expects people to pay them to carry the weight of all that around with them?
The natural state of these things is one where someone is abusing it, whether carriers or someone else.

I don't actually disagree with your assessment of what happened, but i don't have the hope people here do.
I have watched the ebb and flow too many times, and lived in DC too long :)

I also think the hope is amazingly misplaced.
Rarely, if ever, do complex systems like this change in the desired way as a result of trying to "fix them" directly. Sometimes they change, sometimes the inertia keeps them in the same state.
But it rarely, if ever, does this kind of change have the intended effect.

They even teach this in complex system theory.
NASA Probe Finds Higher Chance of Asteroid Bennu Striking Earth
Let's talk about a nanny state called Finland for a moment

> the Finnish National Bureau of Investigation (NBI), had compiled a secret blacklist of websites that it deemed to contain child pornography and sent it to Finnish Internet service providers.

> Analyzing the address list, Nikki also noted that the first three Google search results for "gay porn" are censored. Electronic Frontier Finland (EFFI) have noticed that the blacklist includes non-pornographic websites also, including a Windows advice forum, a computer repair service and the Internet Initiative Japan server nn.iij4u.or.jp that, among others, hosts websites for a violin factory, a doll store and a hearing aid manufacturer.

from https://en.wikipedia.org/wiki/Lapsiporno.info
If you will believe anything a company says I have a bridge to sell.
I put LineageOS on an S5 a while back (with gApps, but there are non-Google alternatives) and it went pretty smoothly. Works with several more modern phones.
This I think is a bit of HN myopia.

I've talked around and nobody I know is even aware of this, when I brought it up, they didn't care about the issue.

It's not news in the commons, it's not on CNN, Fox or MSNBC right now as a headline.

It's one of those tertiary concerns that frustrates some groups, but most people are not aware and would only marginally maligned, and a good 2/3 of people really don't care. I suspect most people would have a difficult time with the 'slippery slope' issue and would accept the 'it's for the children' terms at face value.

It is what it is, but it's worth understanding how regular people think about these issues.
> It would be a perfectly logical order from the power structures Snowden exposed.

Snowden exposed that Apple was actively part[1] of the PRISM data collection and surveillance program targeting Americans.

Apple also voluntarily gives up customer's data when requested by the US government for about 120,000 individuals a year[2]. They also hand over the data for over 31,000 users/accounts in response to FISA and NSL requests[2] in a six month period.

> eta: It makes way more sense to me than Apple actually thinking this was a good idea.

Based on the company's own messaging, they simply seem proud of the project and find it ambitious[3]. They're also excited about the project's expansion and evolution[3].

[1] https://en.wikipedia.org/wiki/PRISM_(surveillance_program)#/...

[2] https://www.apple.com/legal/transparency/us.html

[3] https://www.apple.com/child-safety/
Reports are not all we act on. We read the threads too. No one can read all of them though.

Discussion on this topic has certainly been mixed, but "mostly hysterical" sounds like an exaggeration to me. People's reactions to these things are conditioned by the cognitive bias that causes us to weight the things we dislike much more strongly than the things we agree with (https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...).
> For many years, we have used encryption to protect our customers’ personal data because we believe it’s the only way to keep their information safe. We have even put that data out of our own reach, because we believe the contents of your iPhone are none of our business.

How ironic of you, Apple
This actually enables Apple to apply end-to-end encryption, while still complying with US CSAM laws. Users' content is scanned for CSAM, and is encrypted before leaving their phone. Whether one considers E2E encryption worth it if the content is still scanned before being encrypted is an exercise left to the reader.

This potentially means all of iCloud, not just photos, could start to use E2E encryption as well - which is fantastic.
Bagram could be expanded, and deployments could be shortened. None of the problems you list are hard to surmount.
Is this just a rebranding of digger?

https://news.ycombinator.com/item?id=27905922
They are scanning the images stored on the device, IF the images are going to be uploaded to iCloud Photo Library. But the actual scanning happens on device.

FWIW, I had assumed iCloud Photo Library images were already scanned since they are stored on Apple’s servers and are accessible to law enforcement with a warrant, as are iCloud backups. Apparently this was not the case.

The only way for your data to be safe from authorities’ surveillance on iOS is to exclusively back up to iTunes on a local PC or Mac, and not use iCloud.
> In the real world we signal our approval of a conversation by either engaging or walking away. Other people sense our liking of it by seeing our engagement, not a cheap binary sticker we throw up.

So, is that what your ranking is based on for Sqwok? Clicks and comments? Is it having the effect you'd hoped?
Well, at least they explain everything wrong in the very first line of the article:

"A construction site safety manager in Queens said that as a Black man, he was more worried about the prospect of being stopped by the police than he was about getting Covid-19."

Humans are truly horrible at assessing risk. So many cognitive biases, where do you even start.
Could someone tell me how that inspection works? Are there researchers who are given the source code?

It doesn't (with the exception of an exclusive program[0]). Not only do they generally make security work on their devices difficult – they have a history of suing companies that facilitate it [1].

[0]: https://developer.apple.com/programs/security-research-devic...

[1]: https://www.theverge.com/2021/8/11/22620014/apple-corellium-...
Apple actually gives special devices to Security Researchers that allow them further access into the device than a normal consumer device: https://developer.apple.com/programs/security-research-devic...

In this way, third party security researchers can verify their claims. It actually works out pretty well for them since third party security researchers often find pretty severe vulnerabilities through this program.
100k (India's) Villages Get Tap Water Connections Under Jal Jeevan Mission
Yes, but it's Apple we're talking about, so I'm moving past this part of the conversation. As a dev, you should want the least resistance to getting users running your code. If that means playing by the OS vendor's rules to get something signed that says "I'm not a crook", then that's what it takes. Should it? That's valid but beyond the scope of my comment and thought exercise.
Meditation is about quieting ones mind to ultimate stillness. This is where the ego disolves which is not exactly in alignment with the culturally dominant materialism that we find surrounding us (i.e. the quest for money power and status) all things that rely on an inflated ego.

Using meditation to improve in moving up in society is like using wood logs to put out a fire.
That statement is correct. Why are you confused?

https://www.npr.org/2021/02/10/966396848/read-trumps-jan-6-s...
There are additional restrictions for flight around DC after 9/11, but most are SFRA (Special Flight Rules Area) or FRZ (Flight Restriction Zone) and very little of it is a Prohibited Area or Restricted Area (P- and active R- areas being what most would understand to be “no-fly zones”)

I’ve gotten cleared to land in the “DC-3” airports and have landed at College Park (inside the FRZ) and Fort Meade (inside the SFRA) many times in light aircraft.

There are restrictions, but they’re quite far from being “no-fly zones”.
From my working experience in Spain, "error" is a more generic term. The word "bug" is commonly used to specify an error in the software.
"Spreading lies" is a perjorative way of referring to speech. "Lies" implies intent to deceive and excludes the possibility of a simple mistake.

You may not have intended to impute intentional deception to someone, but that is what you did, and it's offensive.
what's app installs got to do with meditation? i guess that's your point though.
NSA agent 1: So we need Apple to scan this image on all phones but they won’t do it because only we need it.

GHCQ agent 2: No worries we got you covered we’ll add it to our list as well.
Despite having 7 years of back end experience, I've never learned vim. Is there any other editor that hits these requirement (being able to login to any server to edit text) or does every server engineer need to learn vim?

(I mostly use a mix of sublime, intellij, and vscode to edit text)
There is definitely something to be said about having minimalistic container images for security and smaller sizes...

But not having a basic text editor that is probably a few hundred KB feels a bit silly, especially given how many environment dependencies usually get packaged into containers anyways.

That's like not including any sort of a shell in your container and wondering why people are having troubles with debugging.

Personally, i think that just basing container images on something like Alpine, Debian or even Ubuntu images is good enough because those are stripped down enough already for the most part.
There's nothing questionable about the statement you quoted.
> I doubt heat related deaths will be a large factor in the next decade. More people than ever have access to AC and clean water.

Won't air conditioners stop working altogether above certain temperatures? If the ambient air outside is too hot, then the heat exchanger in your AC will start absorbing heat from the outside air rather than dissipating it. On top of that, air conditioners are most efficient when the temperature differential between the outside air and the heat exchanger is large, meaning that ACs become increasingly less efficient as the temperature rises, disproportionately increasing energy usage, which exacerbates fossil fuel consumption and the risk of brownouts (at the worst possible time, no less).
Very cool, thanks! It's closer than I thought, yet just too far to see it unless it's causing things to happen around it. I suppose if it would crash (slowly :p) into the earth and you were at 67 kilometers you'd see some crazy things.
Please do not take HN threads into religious flamewar. We wish to avoid that version of hell here.

https://news.ycombinator.com/newsguidelines.html
> "On September 20, 2019, at around 2:30 PM CDT, a man drove a black first generation (2001-2008) Chevrolet TrailBlazer LT through an entrance door of Sears and began driving through the store and into the main concourse of the mall, crashing into kiosks, Clarks, International Diamond Company, and multiple other stores, seemingly targeting Forever 21 and other adjacent stores.[40][41] The driver was taken into custody by responding police near the center of the mall's first level without further incident. The identity of the suspect was not immediately released. No injuries were reported, but the mall was temporarily on lockdown due to the incident as well as concurrent, but unfounded, reports of an active shooter.[42][43] The mall was evacuated about one hour after the incident.[44]

The man, later identified as Javier Garcia of Palatine, Illinois, was charged with terrorism as a result of the incident; he appeared in court on September 29, 2019, and was denied bond. He appeared in court again on October 1, 2019, and was due back in court on January 27, 2020.[45][46][47][48][49] Garcia's family spoke out arguing that Javier is not a terrorist and that he has schizophrenia, though a police investigation shows evidence that Garcia's attack was premeditated, with investigators releasing – in part – that Garcia "searched 'Woodfield mall,' the aerial view of the mall and mall premises 124 times between 9/19/19 at 14:38 and 9/20/19 at 12:55."[50] Garcia has since also been charged with an unrelated arson case from September 8, 2019, in his hometown of Palatine.[51]"

https://en.wikipedia.org/wiki/Woodfield_Mall#Car_incident
Ask HN: Why does Reddit remove the account of a mass murderer?
The answer may seem obvious from the title but I wondered who calls that shot?

1. Is it social Voldemort? "He who must not be named cannot have an identity"?
2. Is it companies (in this case reddit) who want to distance themselves from the individual?
3. Is there a law (given US Reddit = UK reader) and some kind of interpol pulls the strings?

I am just morbidly interested in the profile of someone. I believe as an individual, I could learn something, like alarm bells based on his post history.

- Event: https://www.bbc.co.uk/news/uk-england-devon-58197414
- Reddit: https://www.reddit.com/user/Jake3572/
- Example Post: https://www.reddit.com/r/virgin/comments/ogqglu/why_are_virgins_so_negative_on_this_subreddit/h4ky77u/
- Capture: https://archive.org/details/jakeuu_202108/Post_1.png
We've banned this account for using HN for religious flamewar. That's not what this site is for, regardless of which religion you're for or against.

https://news.ycombinator.com/newsguidelines.html
Multiple nations? USA+Canada? China+HongKong? Russia+Belarus? In practice, this statement means nothing good.

It does mean that Apple is able and willing to manage country-specific blacklists.
It's based on realtime activity and time decay so far, with ideas for enhancing it as the site grows. So far the reception has been positive and people appreciate that it's just focused on conversation.

Def aware that scaling it past a small user base may be challenging, but I also see opportunities to experiment in that regard.

Then again, I could find out that the majority of people prefer to simply "like" something.
Consulente SEO SEM
I’m saying it doesn’t matter to me because I’ve moved out of their ecosystem. I’m done.
I did not intend to suggest that. My point is that without changing folks opinions greater change is not possible - and a large number of people do not think climate change is something important to combat.

Getting mad at coal plants won't help either, it will just give that segment of the population something to rally behind (coal power).
>This is a strawman. Identifying novel CSAM is a very hard problem to do accurately - the reason they can't flip the switch is because they don't have the technical capability. All of the other things people are concerned about are things that apple does have the capability to do.

You just used this as an argument against this system. Why do you fear this if you don't think Apple can even accomplish this technologically?

>It seems the vast majority of people in this thread disagree that this line is arbitrary.

I would argue that people who believe that this decision crossed that line were being naïve to not have always known this was a possibility. I don't think this move brings us any closer to Apple scanning our devices for anti-government memes or whatever the fear is because what was stopping that was always more policy than technology.

Also to go back to your earlier comment, in the time since you posted it has now been revealed that this system needs to trigger 30 times before any action is taken. The odds of 30+ false positives is likely verging on impossible.
Go fuck yourself.

4 month old account while I have been on both HN and Reddit for more than a decade? Sure -- I am just someone who doesnt know what the fuck I am talking about because I disagree with you?
Google, Microsoft and a bunch of other services already scan for CSAM materials, yet this hasn’t been an issue so far. In fact I can’t really find a single case when someone was framed like this, despite how easy it is to fill someone’s account with CSAM and call the cops/wait.

I don’t like the privacy and property rights issues of this but the whole someone will use this to frame someone is quite BS.
How is that not already the case for Google, Facebook, Dropbox, Microsoft, and I'm sure countless others? Or are you just suggesting that now Apple gets added to this existing long list, and that's particularly notable?
Does your utility have a battery install incentive (Powerwall, LG Chem, etc) [1]? That’s typically what’s attempting to solve for the evening duck curve ramp in CA [2], enough storage to carry through from sunset to evening demand drop off.

[1] https://www.cpuc.ca.gov/industries-and-topics/electrical-ene...

[2] https://www.caiso.com/documents/flexibleresourceshelprenewab...
The US has been a stoppable juggernaut since Korea. Vietnam certainly didn't help. In the 1970s, the country was unable to secure its own embassy or fly helicopters successfully, at least in public perception.

What the US can do is project power with precision (if not always accuracy), where that's politically and strategically possible, though bouncing rocks with cruise missiles and JDAMS may not actually achieve much after the nightly-news phosphers fade. The US is rather more hamstrung dealing with larger, or nuclear-armed, threats: Russia, China, North Korea. Iran have been taking notes.
I think the fact that no technical document has lasted on the front page but various rumors have is a strong point for my view. An article about internal dissent at Apple has hung on for most of the day, yet almost no comments on it engage with any of the key concepts in the article: what does it mean for an 800 post slack thread to exist? Why does it matter that the security employees don’t seem against the idea on the thread?

Similarly, I doubt anyone would be able to reliably match the comments section of any of the dozen articles about this announcement that have reached the front page in the last 8 days with the actual article content.

These are all bad signs about the healthiness of discussion.
> Apple will publish a Knowledge Base article containing a root hash of the encrypted CSAM hash database included with each version of every Apple operating system that supports the feature. Additionally, users will be able to inspect the root hash of the en- crypted database present on their device, and compare it to the expected root hash in the Knowledge Base article.

This is just security theater, they already sign the operating system images where the database reside. And there is no way to audit that the database is what they claim it is, doesn't contain multiple databases that can be activated under certain conditions, etc.

> This feature runs exclusively as part of the cloud storage pipeline for images being up- loaded to iCloud Photos and cannot act on any other image content on the device

Until a 1-line code change happens that hooks it into UIImage.
Could you please elaborate more on the dangers of meditation?
Truly, 1984. Siri now gives you suggestions if you have dangerous thoughts.

"Anonymous helplines and guidance exist for adults with at-risk thoughts and behavior" - "Learn more and get help."

Now a fake AI on your phone that knows your actions and behaviors can sleep and wait for specific triggers and give you feedback and alert.
That was a decade ago when there was no real way for the loony opposition to come together.
I understand not wanting to deal with it, but that's quite literally how we got to this situation in the first place - everyone has a smartphone because everyone has a smartphone.

What if your phone was too old to run the app (which looks like a steaming pile, based on reviews)?

Unless there was something in the application documentation about "owning a modern smartphone and being willing to install random applications as required by the university," I would have plopped right down, pulled out a laptop, and started making phone calls to figure it out.

But, again, I'm at a point in my life where I can be a thorny pain in the ass about stuff like this without any real consequences.