skysight-inc/HackerNews huggingface dataset:
Yes, but then really coal and probably either oil or natural gas are the fuels. Hydrogen is then an intermediate product, a bit like running your electric car on electricity made with a coal or a gas plant. The real fuel is coal or gas, not hydrogen.

Of course in the most abstract form of the argument all but nuclear fission is ultimately derived from fusion, but I think you get what I mean.
What sort of Android? Normal Google-provided Android, which contains closed-source components? Or do you have an open-source alternative in mind?

Where do I self-host NextCloud?
The practical difference is that with on-device scanning, the system is just a few bit flips away from scanning every photo on your device, instead of just the ones that are about to be uploaded. With server-side scanning, the separation is clear—what's on Apple's server can be scanned, and what's only on your phone cannot.

This all plays so perfectly into my long-time fears about the locked down nature of the iPhone. Sure, it's more secure if Apple is a good steward, but no one outside of Apple can inspect or audit what it's doing!
> Does someone who just wants to experiment with a little bit of web-dev really need to have version control right away?

To explain: She wants to eventually work as a developer and has a project in mind guiding her. I started her with the simplest possible steps and she's been learning html & css for a few weeks now with some great progress. She got the the point where she was starting to have multiple projects she was building for learning. In addition, she was starting to feel the pain of "this project is on my desktop, but I am going to be away from home for a week and will only have my laptop." For those reasons (as well as the benefit of introducing GitHub as a place of collaboration), we took some a few hours to cover git and the terminal.

It didn't seem like we jumped to it too early and after those three hours she had the basics which is good enough to ensure her projects are safely replicated to GitHub and available for her no matter which machine she is on.
In America, if there's no law against it you can do it.

In France, if there's no law allowing it, you can't do it.
From a skim through the article, it seems to require soldering onto the power line between the voltage regulator and the processor to trigger the voltage drop. I don't believe the VR circuitry could be caused to glitch in the desired way by software / easily accessible physical components (i.e. plugging into USB).

Someone might be able to develop a method of causing this to occur by targeting a draw elsewhere, but this will likely by motherboard specific (or even entire platform specific).

It definitely means that SEV isn't going to save you if your vendors conspire against you, but unless your dealing with a determined state level actor, I doubt there is much risk to most of us. Internal actors (rogue staff) are likely to compromise in a simpler way.

However this is great research, I imagine in CPU designs that are being planned now, there will be some work to ensure the Secure processor is protected, likely by making the processor fault when SP input voltage drops. Alternatively they might be able to move some power regulation onto the processor package providing buffering against voltage manipulation.
> In the world of computer security this technology has a name, it’s called “a backdoor.” A well-documented and well-intended backdoor, but still a backdoor. Installed and enabled by default on millions of devices around the world.

Sorry, but that backdoor has already existed for a long time. It exists in every IoT gadget, smart car, smart speaker, smart home and other connected device that phones home to its vendor and can receive arbitrary firmware updates. It exists for every app and every desktop software that will automatically update itself in the name of "evergreen software".

This is just the first time someone is publicly making use of the backdoor.
> When you take a picture of your penis to send to your doctor and it accidentally syncs to iCloud and trips the CSAM alarms, will you get a warning before police appear?

You would have to have not one, but N perceptual hash collisions with existing CSAM (where N is chosen such that the overall probability of that happening is vanishingly small). Then, there'd be human review. But no, presumably there won't be a warning.

> Will there be a whitelist to allow certain people to "opt-out for (national) security reasons" that regular people won't have access to or be able to confirm?

Everyone can opt out (for now at least) by disabling iCloud syncing. (You could sync to another cloud service, but chances are that then they're scanned there.)

Beyond that, it would be good if Apple built it verifiably identically across jurisdictions. (If you think that Apple creates malicious iOS updates targeting specific people, then you have more to worry about than this new feature.)

> How can we know this won't be used against journalists and opponents of those in power, like every other invasive system that purports to provide "authorized governments with technology that helps them combat terror and crime[1]".

By ensuring that a) the used hash database is verifiably identical across jurisdictions, and b) notifications go only to that US NGO. Would be nice if Apple could open source that part of the iOS, but unless one could somehow verify that that's what's running on the device, I don't see how that would alleviate the concerns.
There were BASIC extensions you could get that added renumber. The C128 had renumber as a builtin.
I mean it's not as if the Turing test is immensely complicated. For VR you can just make people compare a rendering with the view of a real camera and see if people can tell the difference.
Thank you for being humble and describing the ways you use GitHub!

I'm the same, and it's reassuring to know that I'm not the only one just using it as a free web host for personal projects.

Until starting a new job in January 2021, I "knew git" to the extent of git pull, git add, git commit -m, and git push. For everything else I just made a copy of the repo. Now I've learned a little more about branches and merge requests, but I still make a copy of the repo and copy my changes over when things go wrong. https://xkcd.com/1597/

Like you, I got some password-related warnings on GitHub, and honestly it's scaring me away. I know it'll take an hour or so to figure out what went wrong, regenerate a ton of SSH keys for every computer I own and link them to my account, disable 2FA because my phone number is in another country... I'd rather just upload a file, thanks.

The increased overhead means I'd rather just use FTP to upload some files to an HTTP server, but I don't think that such free FTP web hosts exist any more. At least, not ones with a domain that people recognise. That said, peterburk.github.com is no longer accessible, only peterburk.github.io, so maybe it is time for me to go looking for a free .com subdomain.

I'm grateful for GitHub hosting all the junk I decide to share, and I'm obviously not their target market if I'm not paying. I just wish there were a place I could drag & drop to upload content publicly.
Partner with SpaceX.
Provide internet only plan with unlimited usage to begin with
Then don't need them to rewrite history? That's kind of on you and your own OCD at that point. If you are making them use a PR workflow anyway, become friends with git options like using --first-parent to shallowly traverse the DAG and let git's tools give you a clean view. (Or use GitHub's PR Squash options, if you really must rewrite history.)
So you want to build an open source tool/library as a grad student
We don't have any direct evidence of this, or any way of proving this, but it is suspicious
I meant to say is it hard to switch an Deleware LLC to a Deleware C-corp ? I had it reversed. Apologies guys. Reason for the change is because I want to start boot strapped and then eventually raise money but I dont think I am going to raise money for at least a year maybe 1 1/2 years.
who in turn reports to the government?
I don't know about the suggestion that it's the government of China pushing for the feature itself, but the fact the feature now exists and WILL be used by authoritarian regimes to scan for political content is clearly understood by Apple employees. From the article:

> Apple employees have flooded an Apple internal Slack channel with more than 800 messages on the plan announced a week ago, workers who asked not to be identified told Reuters. Many expressed worries that the feature could be exploited by repressive governments looking to find other material for censorship or arrests, according to workers who saw the days-long thread.
I'd like to point out that the government (and by proxy Apple, companies care even less) doesn't give a shit about children. They are advocating a policy of mass infection, they didn't give a crap about children in Flint drinking toxic water, etc. If they cared about kids, they would care a lot about thinks that physically hurt and kill them. This means we don't have to take their stated reasons for this at all seriously.

Apple, if you care about children, you'll pay more than your legally owed taxes and push for improved access to education, nutrition, and free child care. They're only interested in the avenue that coincidentally dramatically increases their surveillance powers and the powers of the government.

Weird, can't figure that one out.
Frankly the distinction seems arbitrary to me.

This is a policy issue in both cases - policy can change (for the worse) in both cases.

The comparison is about unencrypted photos in iCloud or this other method that reveals less user information by running some parts of it client side (only if iCloud photos are enabled) and could allow for e2e encryption on the server.

The argument of "but they could change it to be worse!" applies to any implementation and any policy. That's why the specifics matter imo. Apple controls the OS and distribution, governments control the legislation (which is hopefully correlated with the public interest). The existing 'megacorp' model doesn't have a non-policy defense to this kind of thing so it's always an argument about policy. In this specific implementation I think the policy is fine. That may not hold if they try to use it for something else (at which point it's worth fighting against whatever that bad policy is).

Apple's good solutions to the CSAM problem (which I think thread the needle for a decent compromise) could prevent worse policy from the government later (attempts to ban encryption or require key escrow like in the 90s).

Basically what I said here: https://news.ycombinator.com/item?id=28162418

This implementation as it stands reveals less information about end users and could allow them to enable e2ee for photos on their servers - that's a better outcome than the current state (imo).
For those of you in SF - if anyone gives you trouble please contact Harmeet Dhillon - https://www.dhillonlaw.com/ .

You have full protection under the 5th amendment from these COCK-SUCKING NAZIS.

This is most assuredly going to hit the supreme court but it might take a year or so to do so, unfortunately.

In the mean time - sue the ever living shit out of their ass!

... and to you liberal mods - kiss my ass - there's 4.29B ipv4 addresses in the world - gotta catch em all!
Speaking as someone who really doesn't know how long these things take, is this accurate?

> https://www.youtube.com/watch?v=gT59YOdch8M

> Typically this type of project would take a team months to complete and weeks to render.
Apple previously stored photo backups in their cloud in cleartext. The door was always open. At some point if you are providing your personal images for Apple to store, you have to exercise a modicum of trust in the company. If you don't trust Apple, I suggest you don't use an iPhone.
> I am in my mid thirties.

So young!

> Nothing like chronic disease or criminal stuff or drugs.

or family thing?

Then you're probably fine.

Go clean your room.

> I hate to see my life go to waste.

Then stop wasting it.

> I have so far not found a therapist, friend, or mentor who is of any help.

Keep trying.
I'd strongly recommend Lem's Cyberiad. It rivals Douglas Adams in humor.
How do you know there aren’t bad actors working at the NCMEC? If I know that adding a hash to a list will get it flagged, and I could conveniently arrest or discredit anyone I wanted, I would certainly send people to work there.

How will Apple know whether a hash is for non-CSAM content? Spoiler alert: they won’t.

And Apple claims it will be reviewed by a human. Sure, just like YouTube copyright claims? Or will it get automated in the near future? And what about in China? Or Saudi Arabia or other countries with less human rights?

The point is that it is completely an easy way to get tagged by a government or bad actors as a pedophile. It’s sickening that Apple would let this “technology” into their products.
It takes 1 minutes on TOR to find enough to get anyone thrown in jail don't make it sound harder than it really is. As for photos vs printing taking a photo reports it for you so you're never involved.
So... here's a wrinkle for you... unless you are a megacorp, a lender is generally going to want you to purchase in your name anyway, as that way your personal assets are on the line. At a minimum if you are purchasing through an LLC, your terms are not going to be as good as what you would get personally. This leaves out cash transactions though, where there's no lender involved who would have a KYC requirement. In my state of residence, there is actually a clause whereby you can purchase a property in your personal name and transfer it into the name of an LLC - because there are a whole slew of additional (legitimate) reasons as a landlord or commercial owner why you would want the property not in your personal name.
They're basically doing exactly that. It's launching on Ethereum, scaled with Arbitrum.

See the post by the reddit admin below.

https://www.reddit.com/community-points

https://reddit.com/r/ethereum/comments/opi5rg/scaling_reddit...
you can self-host NextCloud on your laptop or desktop.

you can use whichever flavor of Android you'd like - a lot of people like GrapheneOS
youtube is filled with left-wing authoritarians
If it's ok with you I will point some investors in your direction that are doing deals in this space.
I thought that phytoplankton was responsible for most of the Oxygen production, this is heartening new, but what about the phytoplankton?
> I know that isn't how you should look at it, but that's still how it feels.

Why do you think you know that? You didn't say. It seems like that is how you should see it since they are using your processing power on your device potentially against you.
Do you have any data to suggest that a more frustrating viewing experience boosts engagement? Intuitively it should do the opposite.
This is a bit of a weird one. Sometimes VR is super obviously rendered in a certain game engine, but sometimes, even on my now aging Vive it just looks absolutely astonishing.

I have a photogrammetry scan of some guys room as my VR home on Steam and it's genuinely eery how I have to do a double take sometimes.
To be clear these side-effects are likely caused by the host immunological response to the SARS-CoV-2 virus, as opposed to "bad" or contaminated vaccines.

One reason children may be more prone to side effects such as heart inflammation is because they are likely to already have naturally acquired immunity, thus the immune response induced by a highly effective vaccine may be 'overwhelming' [5].

> More than half of the cases reported to the U.S. Vaccine Adverse Event Reporting System (VAERS) after people had received their second dose of either the Pfizer/BioNTech or Moderna vaccines were in people between the ages of 12 and 24, the CDC said. Those age groups accounted for less than 9% of doses administered. [1]

> In this small case series study, myocarditis was diagnosed in 15 children after COVID-19 vaccination, most commonly in boys after the second dose. In this case series, in short-term follow-up, patients were mildly affected. The long-term risks associated with postvaccination myocarditis remain unknown. [2]

> Acute myocarditis with intense systemic inflammation and atypical Kawasaki disease is an emerging severe pediatric disease following SARS-CoV-2 infection. A delayed and inappropriate host immunological response is suspected. [3]

> It should be appreciated that myocardial inflammation alone by macrophages and T cells can be seen in noninfectious deaths and COVID-19 cases, but the extent of each is different, and in neither case do such findings represent clinically relevant myocarditis. [4]

[1] https://www.reuters.com/world/us/cdc-heart-inflammation-case...

[2] Association of Myocarditis With BNT162b2 Messenger RNA COVID-19 Vaccine in a Case Series of Children
https://jamanetwork.com/journals/jamacardiology/fullarticle/...

[3] Acute myocarditis and multisystem inflammatory emerging disease following SARS-CoV-2 infection in critically ill children
https://annalsofintensivecare.springeropen.com/articles/10.1...

[4] Pathological Evidence for SARS-CoV-2 as a Cause of Myocarditis
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7816957/

[5] Antibody responses to the BNT162b2 mRNA vaccine in individuals previously infected with SARS-CoV-2
https://www.nature.com/articles/s41591-021-01325-6
Yes, but this is what happens when you make the 4th amendment in to Swiss cheese with exception after exception

you do not want criminals to escape justice to do you???? /s
your quote contradicts your statement. it seems like the employees are worried that it could be exploited, not that it necessarily will be.
It’s silly to think the US government hasn’t been twisting their arm to do this for years.
I'm not sure I can but it seems tautological. If the US is at war with the country that supplies us oil, I doubt any amount of money is going to get them to sell it.

Conversely, any country we import oil from during war time becomes a target to the supply line.
In fairness, this is literally happening on Chinese messenger services today so I wouldn't call it either of those
Yes, but that has always been the case. It can upload to iCloud, it could also upload to the CIA. What has changed?
It isn't about the vaccine. It is about the authoritarian "you do what I say" 'mandates'.

I don't know if you were born in the US or not but it is 100% against our bill of rights - as in it is illegal.
Regarding smartphones, I wonder if we’ve just lost a grip on what it means to have privacy. Even our expectations for privacy have degraded and eroded over time. We just carry this device with our life encoded in a flash chip with keys to cloud access. Life. Everything from emails to our walking gait, photos, text, history, health records, etc is stored on this one device. Dictators of the past would have a field day with this infrastructure.

“Wouldn’t it be wonderful if the people of future would willingly carry a surveillance device that they depend on everyday to communicate to others and carry with them everywhere?”

We need to move towards OSS and OSH phones with extreme urgency. We also need to get more people involved in Ham Radio.
No, these hashes can’t be reversed to an image. They’re not CSAM and therefore not illegal. That blog is not very good, either from a tech standpoint or a legal one.
Coming from biomedical research, I take your point but am cynical about those options as well. Academics is rife with problems of their own and although I see "do research" as important, I'm skeptical that any given bit of research, especially one going against the status quo, will receive much more open consideration than what an authoritarian-minded licensing board would do. Peer review is broken.

In any event, there's still the issue that if you have an expert who reads the research, and concludes that it is flawed, why shouldn't they be able to exercise their judgment at the level of recommendations? Why should they have to have their opinion peer reviewed? Does every perspective and act of free speech need a stamp of approval by an editorial board or governmental body to be deemed "legitimate"?

I'm playing devil's advocate but I'm also very jaded by scientific-medical-academic-political authority at the moment.

At the outbreak of the pandemic, this sort of authority via the CDC (the same one this pediatrican cannot criticize) bungled mass testing for at least a month, contributing to a sense of fear and helplessness about even knowing if you were infected.

These same boards are currently somehow claiming that even if a booster shot has been shown to be effective and safe, you cannot get one unless they decide it's necessary? Why are they making a decision about what's necessary for me? Is the CDC and FDA now usurping my and my provider's ability to make healthcare decisions about a safe and effective treatment because it's in their best interest?

What about discussions about the origins of SARS-CoV-2 to begin with?

I guess what I'm saying is that even though I think it's absurd to steer children away from vaccines (isn't that what the CDC is doing now anyway?), if a pediatrician in their expert opinion comes to some "crazy" opinion, it seems dangerous to start policing it, as opposed to educating about it. I think there's some point where something becomes malpractice, but that isn't it imho.

I guess I just believe this kind of authoritarian approach (such as by the licensing board or FDA) is fueling these conspiracies.
What are long term side effects only time can and will tell.
> It might get it right some of the time, but it will be necessarily wrong some of the time

Yes, but the proof of the halting problem relies on diagonalization - i.e. a very exotic and carefully crafted input.

I would also like to note that, analogously, modern SAT solvers can solve most instances of NP-hard problems in polynomial time. Even though there exist hard cases they cannot solve in polynomial time (well, assuming P != NP), in practice these polynomial algorithms are exceedingly useful.

> It's also very possible that for many (possibly even most) TMs, the most efficient algorithm for predicting the output is that TM itself.

That could very well be true, but might still not hold for the subset of inputs (i.e. programs) that we actually care about in practice.

Relatedly, Kolmogorov complexity makes for some very interesting further reading (which essentially formalizes the problem we're discussing here): https://en.wikipedia.org/wiki/Kolmogorov_complexity
> So you wouldn't be "heading to the recruitment stalls" for any of those companies except potentially Microsoft.

Late '91 I was graduating soon and I did go to the university recruiting stalls of Sun and IBM and Motorola. DEC was a presence but I loved SunOS and didn't like VMS so didn't talk to them. Never considered Microsoft since I hated them so much already back then.

Ended going in a different direction due to a graduate degree scholarship but thinking back maybe should've joined Sun directly back then. I did later end up at Sun a few years later, roughly same timeframe as you.
> an old saw that says taxation is worse for the poor

Is there one? Consumption taxes on are of course worse for the poor, but taxes on fiefdoms?
For those on Windows who would like to have a MIDI routing utility with a GUI, check out Midi Yoke / Midi Ox[1]

It's been reliably working for me since NT 4.0 days.

[1]http://www.midiox.com
How do we know the database itself does not have any false positives?
Apple isn't being pressured from China, but criticizing the CCP as the brutal dictatorship it is is not racist (and that idea is done verbatim CCP propaganda).
> No, the Fourth Amendment applies to private actors acting on behalf of the government.

It applies to private actors acting as agents of the government, it doesn't apply to private actors who for private reasons not directed by the government conduct searches and report suspicious results to the government (other property and privacy laws might, though.)