skysight-inc/HackerNews huggingface dataset:
"In the end it didn't really matter"
Great post: I found the problem/solution approach super helpful. I've used some of the more recent features, but have missed grouping sets, recursive CTEs, and MATCH_RECOGNIZE. hope to put these in application someday.
A-ha, so you meant that the device is scanning itself, and not Apple? Clever, very clever technicality.
I don't think the distinction matters.
If Craig tells me I’m misunderstanding this I distrust them further because I completely understand the full arena of possibilities and not just the narrow intent.
Talk to some trusted peers if you can. Solicitng important advice off niche internet communities is great, but you need to have an IRL conversation with someone that is highly experienced and can be trusted.
that's great. Whom has been impacted by this and how, in more detail? I would say Google Maps is far more impactful and good than any protein folding....
Startup idea: Airbnb for zombies. Buy up abandoned spaces like this, lease them to the undead horde. Payment might be a problem, as brains are not readily convertible to legal tender (perhaps BTC can help here?).

Zombnb.
Shocked I say.
I find it really grating to see David Mikkelson described as the "cofounder of Snopes", because snopes is Barbara Hamel (then Barbara Mikkelson), his ex-wife, the well-known poster to alt.folklore.urban. David Mikkelson is definitely not a founder of Barbara Hamel, just her ex-husband. The website is named after her because it was her site. But at this point she has been unrelated to the site for several years, similar to the case of Ernesto and Julio Gallo.
There's always going to be plenty of people commenting who didn't even bother to read the article at all. But by and large, from what I saw, people did understand the nuances of this and outlined how little stands in the way of expanding these policies' scope once the technology is in place
But if they find a few which have a high correlation, they will eagerly upload them to Apple’s police service and have them viewed by the entire floor.

Also, the matches are supposedly only to actual babyporn pictures. We have 0% way to verify that, as even employees of NEMSEC are not all allowed to view them. Such DBs are often full of unreviewed fluff, and why not unrelated photos entirely, cookware, computer cases, who knows, as long as “some degree of matching” with your photos allows Apple to send a .zip to the police.
I'm not a fluent German speaker, but my amateur sense is that word forms of "fault", "mistake", "failure" are used in German instead, e.g. fehl and Software-Fehler.
I'm constantly surprised how even people on HN are confused about this - read the white paper apple published. It very explicitly says that they are using a perceptual(similarity based) hash, and we(well, not me specifically, researchers) have demonstrated that it's trivial to produce a picture that isn't even remotely similar in theme but still produces the same perceptual hash.

Apple's solution to this problem is that their employee will actually verify the picture before sending it to authorities. Which again, is one of the problems people have with this system.
U.S. Embassy in Kabul Tells Staff to Destroy Sensitive Material and Evacuate
As a long-time Nightly build user as my main browser (since Phoenix 0.4 or so), I'm used to things breaking. So set my UA to this to see if anything happens:

> Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:93.0) Gecko/20100101 Firefox/1930.0

Edit: a blast from the past - an early Nightly Build post from Peter(6) on mozillazine - http://forums.mozillazine.org/viewtopic.php?t=102633
On windows you can use win+g which allows you to record videos of the current window. I think it’s for games but it works for everything else pretty well.
It's not exactly what you're looking for but maybe you can see if there exist any Golang Discord groups where you can get some guidance? I know they exist for Julia and Python and you can get help at any time of the day haha.
The neural bit doesn't do that.[1] Maybe you got it mixed up with the iMessage nudity detection.

[1] https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
In Russian, it’s the same word, transliterated as “баг". And the same is true for “feature”: it’s also transliterated directly to “фича".
How long have you used 5G?
That is true, there is no absolute freedom. But I also think instead of twisting their arms, feds simply give them enough incentive to do it. Imagine a company completely supported by the government. There is no shortage of money, no risk of getting bankrupt, big contracts between government bodies, even better infrastructure support. How much can they lose by doing this? I don't think much.
Slick cookie warning with a timer bar that just runs down. Genius. Transparent overlays. Proper line height. Who came up with this? This website is a pleasure.
I mean, give them one reason why they should be.
> If you are using user-agent for anything other than statistics, you are likely doing something wrong...

Except it is very common. Back before FF included DRM (optional) I couldn't get Netflix on Linux FF. But if I switched the UA string to FF Windows or Linux Chrome I could watch it. Contacted Netflix and they said "we don't use UA strings to block people." But it isn't just Netflix. I've seen this happen many times with many different websites (no problems since DRM is enabled on FF).

I don't disagree with you, but the amount of people doing "something wrong" is staggering. And it isn't just the little guys.

Also, Mozilla is what, 3.45%? I don't think people care unless you're Chrome or Safari (combined are ~85%).
If we had 100% incontrivertible evidence COVID came from a CHinese lab, I can 100% guarantee you nothing would happen to china.
> Previous SARS virus outbreaks showed a gradual evolution of a virus to progressively becoming more infectious to humans, and equivalent genetic changes in the virus that can be traced. This one started out as highly infectious, and until several months in, mutations weren't very significant.

Both of these statements are so inaccurate. It took many years before scientists were certain what the reservoir was for SARS, and there were already different lineages of the virus at the Wuhan market!

You are mad at the CCP for putting out misleading information. You are guilty of the same thing!
TV shows of 2021 so far
Apple already did scan photos on your device, though. They do a massive pass of ML classification over all photos on a pseudo-regular basis (I assume "whenever a new OS release includes a new ML classifier build") -- it's what makes things like searching for "cat" in Apple Photos work.

If Apple's willing to change the new system to do a full scan of all photos on-device and send notifications to them outside of the upload-to-iCloud-with-security-tickets mechanism, they could just as easily have done that with the old system.
My ophthalmologist requires masks and social distancing in his office. He also recommended against wearing contacts for the duration of the pandemic (he says glasses offer more protection.)

Why am I going to have a bad time for following his rules and advice?
User-base has no importance, dev-base is what matters here. If Mozilla sends a letter to developers, chances are those people already stumbled upon MDN multiple times when they looked for answers to web development related questions.
Snopes is a great resource if you want truthful articles with an extreme political bias.

I don't believe they'll ever tell an outright lie, but they'll go to extreme lengths to say only negative things about one side of the political spectrum and only positive things about the other side. It's an incredible way to control the narrative.

The only problem I find with Snopes is that it plays strongly to people's biases. They'll come to think only from one side of the scale, universally to their detriment.
I doubt that it was universal. Nothing ever is.

But I haven't seen any positive discussions about it, which is odd.
> I have no idea why they haven't done a 180 yet, this is a bigger failure than the butterfly keyboard.

Look at the stock. It barely moved (up).
TLDR: Glenn Greenwald outlines his new project, to establish a journalism presence on Rumble, encouraging uncensored heterodox journalism as an alternative to YouTube. Greenwald notes that this new video platform is an addition to his journalism via Substack, rather than a replacement. The content here will be "television-level quality" and will feature a number of journalists and voices, not just Greenwald. He has an initial video on Rumble that's worth watching: https://rumble.com/vl29vn-online-censorship-and-the-washingt...
Good suggestion. The latter is certainly what I'm hoping for, in the latest case the company did have a more general skill-set requirement, and I proceeded through the first two rounds without issue. They then issued me a test limited to 8 hours in React (which I really had no issue with technically), which I hesitantly started hoping to get it done quickly. It took me longer than I thought, simply because I wasn't expecting it to be in React and it had some finicky bits, but not terribly long. I ended up ending it at around 5/5 test cases on the first and 3/5 on the second due to time constraints. That was a week ago, they rejected me this morning after I prompted them. I get the sense nobody actually looked at it, or they had such a large funnel that they were able to pick some specific thing they didn't like.
That's like saying the there are infinite real numbers so the answers to equations are meaningless.

It is an objective truth that the Taliban partakes in the sexual abuse of children. Saying that the Taliban does not partake in the sexual abuse of children is making an objectively false statement an abhorrent one that stands to be correctly.

I appreciate the back and forth, but this entire experience has scared me. I'm not sure what to make of future discourse here.
As in Quincy, IL? I grew up there and the town still hasn't recovered from the closure.
Apple's claim is completely unverifiable. And people who worked with NCMEC's database said it contains non CSAM images.
> Yes, mastering programming, like anything, takes time, practice and patience. Yes, school sucks. Now what is your point? To dumb down everything about programming to the most common denominator so that 1 day old noobs may be equal to grand masters? Not gonna happen.

Ah yes, those stupid noobs, fuck them all. The objective is not to "dumb down" but to permit the expression of intent by people to achieve their own ends, without the need for intervention by members of the programming guild.

Not everyone needs to master programming, they need to achieve a goal. Just as someone can build a table without ever becoming a master carpenter (it's a saw, sandpaper, and a drill and screws or hammer and nails, done), many people have problems that could be solved with programming if only the manner of interfacing and directing a computer were not unnecessarily arcane.

> Guys. Shit takes time and effort. The freshmen will be fine.

Guy, it's not about the freshmen. It's about people who need to get shit done. It'll be fine if professional programmers aren't the only ones who can achieve their ends with programming tools.
> For money?

As opposed to what??? Free apple stickers??
That's the readme for WinCompose. I'm wondering about linux
What’s wrong with the cultural elite? (2017)
As someone who doesn’t work for Apple I wouldn’t work for Apple on principle even if they tripled my salary today. There are some lines that none of us should cross. There needs to be an ethical code for software engineering.
lol, I don't disagree...
Why would developers care about a browser that their users don't use?
Bharat biotech and Altimune have done phase one trials. Altimunes was disappointing and they gave up on their vaccine. Bharat have not published info yet.
My comment isn't unpolite in any way. On the other hand your patronizing comment is rude, so it would be good you start applying to yourself what you are preaching.
This is so cool! The Raspberry Pi comes alive when you put an SSD boot drive in, it becomes such a joy to use (for me it also offered a bit of a feeling of safety as I had multiple SD cards die on me in my networking Pi). If you compare running APT on an SD card and SSD you’ll never wanna go back.

As for the cable issue, I struggle with that myself, I designed a ‘tablety’ case for my Pi 4 with the 7” touchscreen and a 2.5 enclosure housing an SSD to run OctoPrint for my 3D printer and couldn’t find a better solution. Maybe Adafruit’s ribbon connector modules would’ve worked but I didn’t want to buy them with overseas shipping. I’m attempting to learn electronics to maybe one day be able to make my own boards to more elegantly integrate the Pi with other hardware within the same enclosure.
Any disclaimers? This opinion coming from a dev or an administrator?
With the current news cycle, I assumed this was cloudflare's tech peeps explaining how the apple csam scanning works. Sad/funny that any posting "the csam scanning tool" this week/month - I and maybe many others will assume it's about apple. Suggestion- change the title to "cloudflare's scanning / reporting of your internet traffic' - or something like that.

I gotta say - it would be good if someone could provide access to a lawyer via video conference, especially with this:

"You likely have an obligation to securely preserve certain information related to your report for at least 90 days in the case of an investigation. To ensure that access to the content is limited, take care not to store this information anywhere accessible to anyone but those within your organization responsible for legal requests. "

I mean - if you are located somewhere where this is required by law I guess you have to do it. But if you are somewhere where this it not required by law and you do it - then you are doing something that is very against the law (?)

If you all are going to reporting people and organizations for user generated content that could get the people and organization in some sort of double jeopardy with legal crap like this, I think it's time to start providing some legal counsel or something.

Is there a list of places that get into these requirements? countries? states? does it become a thing if you are hosted in place X and you have headquarters in place Y and you have staff working in place Z?

It's also not clear to me if the cloudflare auto-firewall blocking is set to block a url of a web page, or a whole web site, or the url that would be in an <img tag> or what exactly.

Suggest posting about false sense of security - as I think 'enabling this' via cloudflare some might feel they are protected from having thing posted.. but does this cover cartoons that are questionable for example? and from my understating these hash things would not cover newly created csam that has not been 'discovered and catalogued' by the nicmec, so it may be helpful, but it's not a blanket protection tool (right?)
> The whole point of "fact checkers" is to be used by people who are not expert on the subject

A fact checker is a (usually tertiary, like an encyclopedia, providing references to primary and secondary sources) source that is distinguished by focussing on current, controversial claims. There is nothing more a "fact checker" can be. That's not a failing, that's an inherent limitation given the nature of facts.
If it's on device, is it possible to reverse engineer the hashing algorithm? I'm assuming some clever people can then brute force some matching images with nonsense in them that test positive
Facebook's moat is a network not an app.
You must also think Apple invented the notch, fingerprint scanner, capacitive touchscreen phone, music playing device, the desktop GUI and mouse.
Whatever happens to Perl and Larry Wall they will always have a place in my heart. In many ways Larry was the ultimate hacker's hacker and I think programming culture was a little more colourful back in the 90s and early 2000s when Perl was popular. There's never been anything quite like Perl Monks.
One gets the sense that the ... intense ... interest in the origin of this virus, and whether it has any association this lab is not really driven by overwhelming scientific curiosity.

Is it worth knowing? Sure. Would a convincing answer to the question at any point between March 2020 and now changed the course of the pandemic in any way? No.
Walgreens Brings 122 Apps to the Cloud
I think "universally understood" is doing a lot of work to portray a much higher degree of certainty about each of those statements than is justified.

A lot of the contention wasn't about the specifics of their plan, but rather how subtle changes could vastly expand the scope of their plan.

"this would only apply to photos sent to iCloud." for now, until scope creeps.

"this was only looking for previously known CSAM." for now, until scope creeps.

"using some sort of hash matching so photos you took yourself would not trigger the system." well this one is immediately concerning even within claimed scope because there ARE going to be false positives that apple records some database. Millions of iphone users are going to have a non-zero "possible childporn" score.

They are building an engine for iphone users to self-incriminate. If they rigidly hold the scope to only what they announced and never expand, it could be argued that this is a reasonable concession to fight CSAM. However, in making the announcement, they boldly stepped past their existing hard line in privacy (local device content is private and not surveilled by apple), so it seems naive to expect that this announcement reflects the eventual scope of this self-incrimination engine for the next decade of apple updates.
Sorry for commenting on a comment, but it was so hauntingly offensive that it wrapped around to the poetic.
It reminds me of the when BMW designed their motorcycles to be so ugly they'd find beauty of their own, K1200R for example [0]

[0] https://ibb.co/zZMtqQk
Thank you for the clarification on what you meant by “myth”. The rate of population growth has been declining but not the growth of the population. There are far more people now than 60 years ago. There are around 8 billion people and global poverty is decreasing. This means consumption is correspondingly increasing. The pressure on the environment that this causes is enormous. Man made chemicals, plastics, etc. are all over the place. We are shitting on ourselves with our profligacy. The pollution and environmental destruction are getting worse. There are too many people as I see things.
https://archive.ph/mSw2d
> For example, I probably wouldn't 100% believe that hundreds of people can cross the sky in a metal tube (i.e., modern jet airplane) if I had only been told about it. But I've seen it myself.

By that reasoning, all the people who deny the moon landings happened are completely logical, no? And there should be a lot more of them, right? Hell, I've never even seen a rocket take off (outside of video broadcasts), let alone seen spacecraft in flight, so I shouldn't believe in the moon landings either, right?
"Look on my works, ye Mighty, and despair"
> "This is an exaggeration"
Ya think? Maybe when a big company is threatening a rube. If two big companies are making a deal, you can be damn sure that they use all available software to analyze each other's portfolios, and then read, manually, the ones that seem important. And get their legal counsels for the relevant divisions to read them, too, although they probably already know them.

Cross-licensing deals are immensely complicated. You have to think about indemnifying the partners, in particular. I actually sat in the Apple v. Samsung trial for one day, because Google was indemnifying Samsung, as they frequently do for Android partners.

A big problem with Motorola was: they actually make the hardware, so Google was being sued directly. The patent infringement suits are usually against the company that makes the device.
It's not just this. This is a major push, certainly, but... as we come up on about a decade of smartphones being more than "that weird nerd phone one person I know has" it's worth stepping back and looking at the benefits and costs.

Where you put these will depend on your view on a lot of the issues, certainly.

But, in the past decade:

- Every interaction with your primary device is now, by default, an opportunity for aggressive data collection, often in ways even the people who write the software don't know (because they rely on tons of other libraries and toolkits that are doing this quietly under the hood).

- The default is now that you use a smartphone for everything, with the desktop experience limited or turned into a crappy version of the smartphone version (Image! Video! Scroll, scroll, scroll, never stopping, always seeing more ads! Text, who cares about that ancient stuff?)

- The default has gone from "If you're alone in a social space, you talk to other people" to "You stare at your phone." Certainly was a trend before, with the Walkman/iPod/etc, but it accelerated dramatically.

- Everything has been turned into either a subscription service, or a "Free-to-play" world in which the goal is addiction and microtransactions.

There are plenty of benefits of smartphones, but culturally we're exceedingly bad at looking at the opportunity costs of new technology, and they're increasingly becoming harder to ignore.

If you can honestly evaluate the device and decide it's a net positive, great. But I know an increasing number of people, myself included, who are evaluating them and saying, "You know, never mind. They're not worth the downsides."
Case in point, I'm pretty apathetic about the whole thing
If you have an example of my lack of understanding, please show it to me. Also, your snark is below this forum.
They have explicitly said they don’t scan iCloud photos in their interview with Tech Crunch.
Thank you for the links! I wrote my own crappier helper to "stitch" a conflicted branch back up to date with upstream. These are great.

Stitching together individual conflicted commits makes it obvious whether a conflict is purely textual or there's a true semantic conflict. I think a lot of programmers have a panic reaction to merge conflicts, don't think about what the conflict actually is, then introduce bugs through mistaken merges.
So what was this whole war, its death toll (particularly in "collateral damage" i.e. civilian deaths), its costs good for? Is anyone being held accountable? Will we learn anything from it? Of course not. We need to keep the war machine well oiled so something has to come up.
I think this is actually motivated by upcoming EU legislation that would mandate CSAM filtering by cloud storage providers. They tried hard to engineer a solution that would provide some guarantees, but doing the processing client-side sets an even more damaging precedent. The same guarantees might have been doable purely server-side using homomorphic encryption but that tech is still very nascent and not deployed at the scale of iCloud.
That's generally how I felt in some of my previous positions. There was no point to the work, I never met the customers, but at least it was technically interesting. My manual labour job is much more rewarding honestly. Maybe if I land something I'll keep an extra part time gig around to keep me sane.
There is something called "company culture". I changed jobs just because of that before. Instead of 200k, make 120 and be much more happier somewhere else. Mental health is more important than money after certain amount of it.
> Apple decided to implement a similar process, but said it would do the image-matching on a user's iPhone or iPad, before it was uploaded to iCloud.

Is this list of hashes already public? If not, seems like adding it to every iPhone and iPad will make it public. I get the "privacy" angle of doing the checks client-side, but it's little like verifying your password client-side. I guess they aren't concerned about the bogeymen knowing with certainty which images will escape detection.