skysight-inc/HackerNews huggingface dataset:
Being discussed at https://news.ycombinator.com/item?id=28174201
I don't think that was confusion either, because there were discussion and articles on how a hash collision is possible in the scenario you mention due to the way perceptual hashes work.
The web is a public square.

Hacker news, Facebook, Twitter, Reddit etc. are private properties surrounding the public square.

You can do what you like (within the bounds of the law, because even public squares have rules) with your own property on the web, but you also have to follow the rules of any other establishment if you enter.
> What does that have to do with the CSAM mechanism? It seems like an unrelated fear.

He CSAM mechanism proves that Apple can and will go this route, even if users are against that.
If it is encrypted, the data storage provider has no chance to know what it is.

Which is exactly why these policies are so dim witted.

Dragnet violation of everyone’s privacy while anyone even remotely sophisticated can easily evade it by just encrypting the data upfront.
https://www.cvedetails.com/cve/CVE-2007-5037/
This becomes a bad faith argument the moment you start trying to browbeat people over "being comfortable hosting kiddie porn."

Let's pretend you didn't just do that... you're talking about PR risk, but here we're seeing that risk blow up into a full blown scandal on the other side.

Apple already was the most friendly hoster to CSAM, and the bad PR from it was quantifiable and minimal compared to the current PR they're getting.

This isn't a new thing, encryption helps bad guys too. The same reason Apple was the most "friendly to CSAM" is the same reason any E2EE platform would be.
> There are several issues about this that Apple does not address. A big one for me is the indignity and humiliation of them force scanning my phone for CP.

Are you okay (conceptually, assuming a perfect database and hashing function) with them scanning pictures uploaded to iCloud for this material if the scanning happens on their servers? Or is this a complete "these pictures should never be scanned, regardless of where it happens" position?

If the former, I personally don't feel a distinction between "a photo is scanned immediately before upload" and "a photo is scanned immediately after upload" is very meaningful. I'd be more concerned if there wasn't a clear way to opt-out. I acknowledge that there's room to disagree on this, and maybe I'm unusual in drawing my boundaries where I do.

If the latter... I think that ship has sailed. Near as I can tell, all the major cloud platforms are scanning for this stuff post-upload, and Apple was a bit of an outlier in how little they were doing before this.
Back up with a fix: https://twitter.com/DOStatus
A growing area of high-hazard clearcuts and plantations are fueling forest fires
> But according to this article you can avoid this by not uploading photos to Apple’s service.

...for now.
> It might work better if they searched on first-indexed date, rather than server modification timestamp headers or dates embedded within the page.

But that assumes they index things in a timely matter, which is likely not true a huge amount of the time.

And I don't think that would help in this case, because in many of the cases it appears they got the article date right, but the article page is dynamic and now includes snippets of stuff that post-dates the article.
I’m sure we will. I’m sure the toll was heavy then, and will be heavy again.
Iraqi researchers get to do their work on a 4k year-old tablet, while I'm stuck with a 1080p flat screen from 2016? I should change career!
> The power to do that is unnecessary for most programs that are written.

Ok. So don't use that power then. Or use references instead, which are conceptually the same thing.

> Did I ever say otherwise?

You quite clearly stated their purpose was very niche. I think you took my statement a bit to literally, as what I meant to convey was: no, they are not niche.

Edit: after reading your edit, I would like to remind you we were discussing the needs of learning the concept of pointers. While what you mention may not be literal C pointers, that is besides the point (haha) because they (methods of indirection) are conceptually equal.
I'm definitely on the side of rebase being much better in most cases. https://blog.carbonfive.com/always-squash-and-rebase-your-gi...
> Even an acquaintance who does construction was venting to me about how bad apple's policy is

I overheard a group of women on the marketing team at my company talking about how creepy it is and I’ve started having a lot people ask me about it - it doesn’t seem contained to just techie at this point but it is concentrated there. I do think it will continue to grow though, apple has lost control of the narrative around their brand.
I recall when IBM left Boca Raton, Florida (where the PC was invented) in the mid-90s. About a year after they left, a few friends and I roamed the abandoned IBM facility [1] and it was odd seeing empty computer rooms sans the raised floors. Some of the resulting pits were six feet deep (2m). Crazy.

[1] https://goo.gl/maps/CKrEbTkRDwWQNc2d8 Yes, it's a huge hexagon shaped building.
Scanning iCloud is far less privacy preserving. That means Apple “knows” about all of your photos.

With what Apple is proposing, Apple knows nothing about any of your photos unless you reach a threshold of about 30 CSAM images through the use of cryptographic safety vouchers uploaded with each image.

That is, if through cryptography, about 30 of the images can be proven to be a subset of a combination of CSAM images from multiple databases is the only time when anyone other than the user can learn anything about the photos.
Science fiction becomes reality

https://en.wikipedia.org/wiki/Is_There_in_Truth_No_Beauty%3F

https://memory-alpha.fandom.com/wiki/Miranda_Jones
The whole COVID "skeptic" circus is full of quacks with irrelevant credentials, like urologists and orthodontists. As a prominent example, I give you Rand Paul. If you take advice on infectious diseases from an ophthalmologist, you're going to have a bad time.
I'm on Linux and on a keyboard layout that already uses AltGr for a lot of symbols. What key do you use for the compose key? I certainly don't have a physical compose key on my keyboards.
I think there was a misunderstanding: I wasn't saying that you don't have to trust them to use their cloud services but rather that it would be a surprise to me if they were _not_ already scanning iCloud Photos (i.e. is this a change from “scanned after upload” to “scanned before upload” or from “not scanned” to “scanned”?). I've always assumed that they do scan your hosted files, just like Dropbox, Google, etc. do.
I think I didn't make it obvious that I've also done this professionally for years, just not specifically React, but everyone else in the same market started with React years ago professionally and now I'm competing with them because everyone also bet on React. My last dev job did have me bringing in around 110k CAD which I'm perfectly happy with.

Grats on putting yourself in a great position my friend :)
If there's a direct redistribution of sorts, then the poor can be protected from costs.

But any policy without an explicit redistribution scheme will raise the cost of business, and thus, raise the cost to consumers (as businesses pass these on).

e.g. for demonstration, imagine you sell apples for a 10 cent profit. Government enacts a 10 cent tax on apples. Now you must raise your price to consumers by at least 10 cents to stay in business. Consumer feels the effect of the tax

Market based solutions are still best, though.
Yes, I'm aware that all-time high prices are pretty normal, like anyone who's spent more than a couple of years investing. The current highs aren't just in nominal price terms, though, but also in a lot of normalized metrics, and that's not so normal.
Apple software chief Craig Federighi's only regret appears to be that their users are too dumb to grasp how Apple is enhancing user privacy by exposing their data.
My theory is that they want to do e2e and this is the only way that they wouldn't be punished by the USG for doing so.

This also means that if you get big enough, you lose your 1A rights in the USA because the feds will punish you extralegally if you do things they don't like or that make life harder for them.

Sad state of affairs in the USA.
I had assumed it was European. I put it next to Qualcomm.

Now that I fact check myself, Qualcomm isn't based in Scandinavia like I thought, but rather San Diego. I guess I just mix all hot-hardware companies of the '90s in with Ericsson!

What next??
> March adds that these findings, however, actually have one positive outcome — an easy solution. “Ignore them, rather than giving them the satisfaction of an angry reaction.

They found out hat you shouldn' feed the troll. well done :)
Nobody's confused about that.

> HN is a tech forum and I still saw plenty of people here worried about how they would get in trouble for having innocent photos of their own children on their phone.

They're confused about this. NeuralHash doesn't look for pictures of naked kids. It looks for pictures that are identical to the ones they've put in their signatures list.

The problem is that Apple claims that the signatures in their list are all pictures of sexually-abused kids, but we have no way of verifying that. Heck, they don't even have any way of verifying that. Everyone just has to take NCMEC's word for it.
> First of all -- app stores need to make money or at least break even.

No, they don't. The moment google and apple designed their phone os to favor the official app store over 3rd party, they lost the ability to make this argument.

> They cost a lot of money to run. So app stores take a cut of all transactions. If they let developers implement their own payment mechanisms, either in-app or with a single link, then developers will make every app free, with a link to their own payment, and the app store now becomes unsustainable and we're back to the same malware problems that plagued early versions of Windows.

They could make the dev pay for this directly, rather then take a cut. cost per-download plus cost per-review and failed appeal could cut this down dramatically.

They also don't get to push their business decisions on to devs that want access to device users.

Google decided to make the phone favor their app store, google decided to drive more users to only use and trust their app store. Google decided to use restricted apis to do this. Google decided to have google play protect trigger virus warnings on any 3rd party installed app. They made the business decision to do those things to the phone OS to disfavor 3rd party app stores, and i think the moment they did so, they stopped having a right to run the play store at a profit or even at break even, and they definitely stopped having a right to demand a cut on all of an apps profits.
I agree it is likely not malicious at all.
It’s the result of koolaid in an echo chamber. And inertia at this point.

However, I also think this is the poster child of the proverb that the road to hell is paved with good intentions.

Now Apple needs to cancel this misguided initiative and never speak of it again, if they want to salvage some of their reputation.
People who sincerely believe this is accidentally possible should be constantly freaked out that iCloud Backups is “accidentally” uploading all their photos to a warrant accessible database.
It's pretty close with Clojure & Obj-C interop: https://github.com/phronmophobic/mobiletest/blob/main/exampl...
It’s worse because it blurs what was a previously clear line. If the photos weren’t in iCloud, they couldn’t be scanned. In this new implementation Apple will only scan photos destined for iCloud, but they now have the capability to scan photos on your device and all that’s holding them back is corporate policy.
They have said that the system won't be triggered on a single image. You would need to have multiple photos on your phone experience this hash collision which drops the odds of false positives considerably.

EDIT: It has now come out that you need to trigger the system 30 times before Apple acts on it. I can't imagine the odds for someone to have 30 hash collisions.
So you are saying the hash values can never result in a collision? That in fact there is literally zero chance that two different images could result in the same hash?

Because that doesn’t sound correct to me…
A 300 million dollar yacht is a luxury good for me.
Nearly everything you've said was bullshit.

Google has never restricted sideloading. Android 12 even enables sideloading further by allowing third party app stores to auto update.

AOSP exists. Third party roms exist. All of the devices sold by Google can be unlocked to install third party roms.

LineageOS doesn't exist because 'a complete and unassailable monopoly' allows them to.
This is absolutely something you can do with ASCII dot-matrix printers, and it's not even malformed! It was common to end a line with a CR rather than a CRLF in order to overstrike some characters three times for bold, or overstrike them with _ for underlining; somewhat less common was to overstrike several different characters to get a solid block (such as 0, #, and *). (Accented characters were likewise achieved by overstriking `, ', and ~, but usually using backspace rather than CR.) With a normal amount of ink on the ribbon, you would punch through the paper after less than ten overstrikes.

I understand that line printers (those that printed a line at a time rather than a character at a time) also supported overstrike sequences, but I never punched through the paper on one. Likewise, presumably the same approach would work with a daisy-wheel or typeball printer, but I can't testify.
Who doesn't like progress? Or responsible disclosure?
“Confusion”

“Misunderstanding”

“The screeching voices of the minority”
Suit Seeks to Turn Arbitrations Against a Top Customer Service Provider
See, your talking but saying nothing.

Most of us understand what "zeal" is and being condescending isn't doing you any favors.

"A is A" has no value. It's not an axiom, it's a tautology. It is true by virtue of being itself. You're saying "zealots are zealots". Which, ok. But it doesn't tell us what zealots are. Or what you think they are.

That's what makes your logic bad. You've replaced it with tautologies. Bad is bad. Good is good. Zealots are zealots.

And it's not a logical error. It's what you did with your edit. If not all who downvoted you and him are zealots, then you can't use the fact that you were downvoted as proof of zealotry. Which you did. Downvotes only go to like -4 around here. So it's not like it takes a lot. Unless you honestly believe you and him were being upvoted way more. Which you have no evidence for. Besides your claim that "the zealots are after you". Of which the only proof we have of their supposed zealotry is downvoting you and the other guy. So is that what being a climate zealot means to you? It's someone who downvotes you on message boards?

You do not discuss in good faith. And the evidence is in your posts. You think using words like axiom and pragmatic means you're making good points. You're not. Because you apparently don't know what they mean.
Oddly enough it's the inverse for me: I can hardly read the light theme one.
Step 1. Page to Text (Eg. Mozilla readability.js)

Step 2. Text to Speech (eg. Mozilla DeepVoice)

Both libraries open-source and free.
OTOH, no one has found the zoonotic origin for ebola people looking for literally decades. That's also the case for a few other diseases as well. Just because the origin for MERS and SARS was found quickly, it doesn't follow that covid investigations will be as quick
yah the cumbersome part is for real; for the longest I never itemized groceries, just lump sums spent. I've been slowly automating more of the process. For online purchases I write some chrome extensions that scrape the order pages and downloads a Json file for me. Works for the most part and I'm looking to extend to a few more vendors:
https://github.com/jxramos/webOrders.

All the data captured over the years omits very fine detail for the most part; things like weights and volumes and stuff. The data is fairly messy but there should have some signal within it however. This motivates me to revisit what sort of receipt OCR stuff is out there, it's been a TODO for a long time. I'm looking for mainly partially automated stuff, fully automate the frequent vendors, manual entry the rest: https://gist.github.com/jxramos/db8195d1972b6d7f7eb0e97be51d...
If you are using your roads to do gps pathfinding, then you are indeed doing it wrong.
Do not do in infrastructure what can be done in code. You can't version control your infrastructure, but you can version control your code.

And with cloud instances and VMs providing abstractions that don't map 1:1 to the hardware they're running on, all your infrastructure becomes code to create reproducible deployments, or serverless execution.

You don't build your roads immediately before you start driving, and destroy them after you're done, and build only as many miles of road as you need each time you go for a ride. They're not a great analogy to what we do with computers.
Did you post the wrong link? The doctors in that clip don't actually mention the UV light thing, although they are clear in their opposition to injecting disinfectant.
There was zero confusion. Apple's new feature was universally rejected and if it cone to market will cause a severe loss of market share.
A shared database with permissions and forms covers most of the task in the article. Airtable also now has an event/workflow system and a ton of integrations and plugins for doing stuff like sending email.

https://www.airtable.com/product/views
https://www.airtable.com/product/automations
https://www.airtable.com/integrations

It's getting to the point where it can handle most of the internal software needs of a small-medium company and also has a ton of javascript hooks for covering that last 20%.
This stuff is always so much easier in the Navy. Just find a gay sailor who has a copy of The Anarchist’s Cookbook.

Re: USS Iowa Turret Explosion
Bull. That's not what he meant, and I think you know it. You just saw a chance to grind your axe.

There is nothing in your rant that looks remotely like a "synthesis culture", and a bunch of it happens after Adam Smith. So, while it's a semi-decent rant (you missed sexism and oppression of LGBTQ+), it doesn't answer my question at all, despite pretending to.
I also use dual layouts and found that switching between US (for coding) and US international (typing with diacritics) is the most comfortable setup for me. Both in Win and Mac switching between both modes is just pressing Ctrl+Space and the US international layout allows me to type all diacritics I use (Catalan) with an US keyboard.

Maybe I’m just stating the obvious and everybody already knows and is moving aware from that, so I won’t explain the details. But if someone is interested just let me know
Wow pretty good :)
> some sort of hash matching so photos you took yourself would not trigger the system.

This is ignorance in extreme.
People using "donations" to refer to tips on free services is an old practice and not one you should be arguing is the same as a non-profit.

Mincing words to make your argument is kinda frown upon here.
Sounds like the screen reader dependencies
Hydroxychloroquine has a mountain of side effects worse than COVID for most people, and very little (if any) positive effect.

Maybe UV could help in some way, but was this ever going to be a real solution? I highly doubt Aytu BioPharma was in a position to deliver anything meaningful at the volume and time-scale required.

Trump simply had no clue what a workable solution looked like. He broadcast to the world as the American President the ideas of the most recent crazy to have his ear (or one that he read on Twitter), and then got a bruised ego and doubled down when shown his ideas were worthless.

No propaganda there.
This is in essence the problem with the new on-device initiative from Apple (calling it a tool is rather misleading).

If allowed to go forward, it is only a matter of time before the capability is expanded.

So it's a big no to the scanning capability, you would think that Apple had gotten the message by now.

And the other initiative is also open for abuse, by allowing the device administrator to spy on the user. Admittedly not as bad as the on-device scanning.
I'm totally on board with applying the principles of judo, such as Seiryoku-Zenyo (the efficiency principle you mentioned), more widely than throwing people into a mat while wearing a particularly sturdy bathrobe.

But I'm not going to lie, seeing it used like this makes me cringe.
"Confusion", yeah right. As an Apple user I was always realistic about this and I am pretty sure things like those are being done for years, but now Apple just decided to go public about it.

Nothing confusing about it however. When you use a closed platform, things like these are literally the endgame for those corporations -- namely being able to not only have access to all that goes through the devices but to profile you and, in one bright and an ever-so-close future, censor and police you.

I've a made the conscious choice of using Apple because I value my time and energy more than the 0.01% chance of me being wrongfully flagged. Their products are robust and convenient. But with these news I have partially revisited my stance and I'll start pulling some of my erotic photography collections to a private NAS / home cloud server. I wish them luck breaking through my router and several layers of Linux virtualization and containerization.

I really have nothing illegal to hide but the slippery slope of "for the children!" can be used for anything and everything. I won't be a part of their game.

In a few weeks/months it will be "your move, corpos".

----------------------

SIDE NOTE / OFF-TOPIC:

I wonder at what point we'll get to the trope of "non-approved Internet traffic is a crime"? Hopefully not in my lifetime but I believe we're bound to get there eventually.
They want to be as much like a bank as possible but without any of the regulation.
No offense, but are you mentally retarded? Can you not figure out how to click a slider? My 95 year old grandmother, who was schooled to the age of 14, has figured it out.
GNU nano is my editor of choice
You'd probably want to use active control systems to move the box around to follow the black hole, with rockets when necessary. However, by lanna's reasoning below from the shell theorem, if the box were a spherical shell, it wouldn't be an unstable equilibrium like a ringworld, so your active control system could be pretty sluggish.

Such a box can definitely be built if you make it much larger than a dishwasher.
Well... they did have the "Windows Tax" ( https://en.wikipedia.org/wiki/Bundling_of_Microsoft_Windows ).
Assuming US keyboard, you can use US International as a secondary layout. That would make typing “single quote” then the letter an acute accented letter.

So ‘ then a would become á
The conspiratorial explanation is that freon was cheap to make & not patented, while new more atmosphere friendly replacements were patented. The new refrigerants were also fairly drop-in.
Agreed - even if Apple doesn’t back down, giving them hell would make other companies less likely to follow suit. This is a very important line in the sand that they have crossed
I meant to be a little more specific with my language, such that it's not entirely that I'm not passing the tests, but even if I do, companies are now not even seemingly thinking about me as a candidate until I pass that stage completely. So maybe I'll pass all test cases, submit it, and they'll send me an automated rejection.
Does anyone remember the U.S. housing financial crisis?

"Homes are a place to live, not an investment"

The more things change, the more they stay the same.