skysight-inc/HackerNews huggingface dataset:
Have you tried disabling various iCloud features? Disabling iCloud is incredibly buggy.

I tried disabling iCloud keychain and it just flips back on. Sometimes it asks for a login first. Sometimes it shows a cancel/continue modal. Either way, it magically flips back on. No error message.

I tried backing up my device to my hard drive (with Photos already on iCloud) and it kept complaining that there wasn’t enough space. It throws error message after warning message that your content will be deleted. It created additional copies of my photos each time my phone synced.

To properly back up, I had to copy the photos directory to an external hard drive, delete the original, mark the external hard drive one as the system one and then finally free up enough space to back up. iCloud and the device backup weren’t smart enough to free up space for my backup. In fact, I first backed up all my photos to iCloud first because they said that it would free up space on my hard drive as necessary. LOL.

BTW, iCloud keychain is still on for me. Fuck Apple.
Why wait? Just send them the pictures on Facebook Messenger or Gmail or Dropbox today.
> In which case, why is it even needed?

Circling back to my original post, it’s clearly not needed any time soon. I think it’s worth doing in much the same way building the ISS was worth doing. That said, I was trying to avoid being dismissive of possible upsides which seem unlikely but still possible.

Whatever the opposite of devils advocate is.
To be fair, in 1990 a game made in 1982 was positively ancient...
I remember a presentation by the head of security of an Internet-only bank years ago, about banking malware.

The latest malware was a man-in-the-browser style one: it intercepted your input and changed what you saw on-screen. This was used to defeat extra authentication: the malware inserted a (fake) deposit (something like "yearly subscription mr. X" for $2134.56) into your on-screen total and phoned home. The victim was then called by a mr. X who claimed to have accidentally swapped two digits in a transfer, and that the bank had said they can't fix it because the target account was a valid account. All they could do was exceptionally give out the phone number of the receiving side. Would you be so kind to rectify the situation?

Since mr. X had all the details correct (amount, statement on transaction), the victim would initiate and authenticate a transfer. No way for the bank to detect, as this wouls be a genuine transfer order by the account owner.

To be clear: the attack requires a victim whose browser is hacked and an associated phone number. That seemed like a tall order to me, but apparently not tall enough to stop this attack from being integrated into multi-banking malware.

In short: read-only access is good, but not sufficient to prevent all attacks.
The sender would of course be charged with wasting police efforts, defamation attempts+++. In the case of false positives the receiver of course wouldn't be charged, it's more about the fact that this system can be manipulated with too much ease. Even if you're not charged, an investigation takes time away from already limited law enforcement resources. I'm also not interested in buying products from a company that blatantly spies on me. Today it's CSAM, but as others have pointed out, the hashes can be changed to look for anything.
None needed. You could just send a photo to the target through WhatsApp, and the photo would be automatically synced with iCloud.
All criminal accusations need to be treated as unproven, of course, could not agree more. Also, all those accused of a crime (and those not!) need to be treated as innocent until they are proven guilty.
Also it's rare that an album folder even has all the songs from the actual album. I wish they'd just have an "all songs by artist" list.
I've worked on, and am working on projects that are dying because the libraries that were added are now out of date.

It gets really hard to maintain after 10 - 15 years. I wish we had rolled our own libraries for some of the simpler functions. Even in PHP this would have made life so much better.
If you want critical thought, you respond to the point that renewables take longer to develop (the infra not the tech), and that nuclear "buys us time".

> There is not a carbon-free grid model out there that uses nuclear

and in what timescale can these carbon-free models be developed? We probably need a carbon-negative model to reverse existing CO2 damage.

> Nuclear will not be the backbone of any future grid for at least 50 years

France has declared it will wants to cut nuclear to 50% of the grid by 2035, it's current share is 70%. So what does this statement mean?

> Floating wind is falling cost all the time. Nuclear's cost is going up all the time.

The cost of energy production, or the total cost of infra?

Part of the reason nuclear is growing is lack of funding. Turns out, you need to keep building nuclear power stations for people to think a degree in nuclear engineering is a good idea. And you need to keep building them to keep power-plant-building corps in business and innovating/improving efficiency.
What if those searches were conducted by another country? Say another five-eye nation?
There’s nothing stopping governments from banning E2EE, but in the absence of such bans, no one is under any obligation to build systems that empower them to spy on their users.
Privacy is preserved by a team of humans looking at your private photos. Sounds like a good deal. What are we preserving again?
It couldn't run on my "bring your own ISO" VPS provider. which did manage to run OpenBSD and FreeBSD.

(Very possible I made some noob mistake)
Nah that's so 2020, 2021 is all about low resolution legitimate porn being transformed to match CSAM. Get with the times!
I have some issues with the wording in this article (I work at Plaid and I don't think everything it says about us is accurate) but the report is a good thing. Right now we really are dependent on screen scraping at many banks and we'd much rather use API-based connections to power our services, but so many banks just don't provide APIs. I'm optimistic for an open banking future in Canada and who knows, maybe even the US some day...
But none of that matters because most artists only upload a small number of songs from each album anyways.
And have the spare resources on hand to be able to survive repeated failures, for that matter. And not be dealing with ADHD or other mental issues.

In the back of my head I want to tease out how much of Beso's success is due to aptitude, how much is due to work, how much is due to privilege, and how much is due to luck, and how much is due to ruthlessness.

This might be a futile exercise, all told, but I do think all of those factors have played into his success.

And I wonder how his success and the other factors compound in the perception people have of him.
I'll happily take xml over csv any day, but my coworkers and our customers won't!
Are there really new projects stretching the limits of CSV out in production?

Everyone knows it’s not capable of storing anything more than table data. It was never meant to be much more.

It doesn’t really store objects well. To write the values of a composite object would require following some format order. It would go past human readability and just be a bloated way of writing bytes with readable characters.
'... we should be advocating for people who are not at risk to go out and aggressively live life.'

I have thought the same since the first numbers showing children as a group are at minimal risk. For the healthy, get it and be done with it.

For the first year I was deemed a worker in 'critical infrastructure' so I worked on the road. I got laid off and then got the virus and recovered on my own at home. I'm going to keep living it and the screaming Karens can shut themselves in for as long as they want.
Green Dam Youth Escort
Can someone explain me what isn neural hash?
Apple Base Station and related firmwares (e.g. Extreme) ran NetBSD.

BSD-based products are more common than believed, but because of the liberal licensing they seem to mostly fly under the radar, not unlike various proprietary options like VxWorks and TRON.
I think banning it is bad. If it turns out to be correct you lose so much trust in institutions (which is thin already as “experts” continue to be exposed as frauds, just look at Afghanistan)

However, if it is false (most likely) then banning it puts in a dark place away from sunlight where it can grow and mutate and spread. Streisand effect comes into effect here.
Not to mention when the language you are using updates and you have to update the code. If the 3rd party library is no longer maintained you have to upgrade the library yourself.
It's much nicer if it's a small bit of code you wrote with only the use cases you need.
Going by what some people on Reddit say, it seems to be the case. https://old.reddit.com/r/datahoarder/search?q=porn&restrict_...

Probably not the weird image I posted, which looks obviously suspicious. But maybe someone will make a program to find "cleaner" hash collisions that don't look suspicious.
Beyond Black Mirror – China's Social Credit System (2019)
If some commenters can be believed about their experience with the database, there are a bunch of completely innocuous images in it because they're from the same photosets or distributed alongside CSAM.

Is that enough to cause an investigation? Maybe, maybe not, but I wouldn't want it to be a risk.
Is it like other stories I hear on HN where one guy or team is trying to get a promotion so keeps pushing their project? And people were afraid to oppose it? I’m baffled how this kept going up to implementation even in the birthplace of the reality distortion field.
Exactly. It would be trivial for anyone to compile a list of possible known CSAM hashes. It would be illegal to do so, but only one person has to do it, and then the list of probably positive hashes can be distributed legally around the web.
Quạt ly tâm hút khóI
> It is very easy to overlook edge cases in CSV.

That was not a criticism from the original article, and isn't even true.

If you have newlines in your original data, and you "overlooked" this "edge case", then neither JSON nor YAML nor any other format will save you. The same fix applies to them all.

This is really a very poor criticism.
Time Management for System Administrators (2005)
Really naive question. What's to stop apple from using two distinct and separate visual hashing algorithms? Wouldn't the collision likelihood decrease drastically in that scenario?

Again, really naive but it seems like if you have two distinct multi-dimensional hashes it would be much harder to solve the gradient descent problem.
Hooray for New Math! New-hoo-hoo Math! It won't do you a bit of good to review math! It's so simple, so very simple, that only a child can do it!
The scenario is far more like this

3. The home builder installs a TSA scanner in all newly built homes. The scanners will scan all items as they are put away into drawers and cupboards, attempting to detect the presence of banned items.

Then the TSA Agents say they won't report you until at least 30 banned items are detected, even though you haven't flown in 10 years and don't have banned materials. As the TSA Agents walk back to their car, you overhear words like warrant, trouble, and tap amidst their chuckles. What could go wrong with that?
That sounds like a good reason not to create a virtual SWATing vector then.
Yes I agree it can be scary, but it seems like this is the way a lot of companies have to do things if they want regulation to change at any reasonable pace.

Just look at Uber and AirBnB as examples. Most cities they started in they were operating in kinda grey areas or even breaking laws. But they could afford to eat any fines and continue on anyway. It forced governments to put regulations in place to support these systems.

Especially when it comes to banking, it moves at such a snails pace for anything to ever evolve. The two banks I am with in Canada only just recently finally added support for 2FA. But it's not even the type where you can use your own authenticator app. You have to use SMS, Phone Call, or their app. My one bank has my "password" being restricted to 6 characters. It's basically got to be a 6 digit pin. It's incredibly insecure already, Plaid doesn't make it much worse.

Now with 2FA finally there I feel a lot more secure using Plaid. Because now everytime I want to import my transactions in YNAB I have to enter my 2FA code before it can pull things.
Cynicism from a generation that weathered two massive downturns / recessions with almost no real consequences for those responsible is to be expected.
As another HNer responded: cred screens are given the appearance of being your financial institution, so I assumed an api auth token being issued after “logging in” with the institution. Still, shame on me for not inspecting more closely.
Those will trip up 2020’s systems as well!
I appreciate you engaging with me on this. You might enjoy a book called “The Revolt of the Public and the Crisis of Authority in the New Millennium”
Well according to reports that are generally the source of these collisions, the hashing code has been on the device since around December 2020 (14.3)

https://old.reddit.com/r/MachineLearning/comments/p6hsoh/p_a...

If Apple hasn't been honest about WHEN it was built into and added to their code base, why would anyone take their word for HOW its being used, or many of the other statements they are putting in their documents as of yet, at least until they are verified
Given the tech savvy HN user base I'm surprised at all the "I'm surprised these 3rd party services are just impersonating me".

I'd love it if there were API's to access my banking data directly, but failing that I rely on the meager "txn download via csv" my Canadian banks offer (at least).
Probably not? The suit was dismissed. Sorry for the paywall but I can't find a better source: https://news.bloomberglaw.com/banking-law/td-bank-plaid-sett...

[full disclosure: I work at Plaid]
As a developer in Canadian Banking, I wonder how this will affect us.

I work for a major bank relevant to this story, and I've honestly not heard anything about it internally.
Pretty incredible work. As soon as I heard Homer talk, I got a rush of nostalgia for the original game.
- calyxos on pixel5

- pop_os linux on my pc

- idrive for backups/photos

- magic earth / organic maps for maps

- k9 email for gmail

- protonmail

- all backups to idrive
The legal system may have problems but that is about implementation, the fundamental principles of presumption of innocence, that no harm should come to the innocent, that all are equal before the law, and that truth comes before all other concerns; these are fine principles and I would say that problems with the legal system mostly stem from straying from these principles. Perhaps you disagree?
CaptureMyMeeting
Tired of taking meeting notes? Wish there were a way for you to automatically search through the contents of your meetings? Introducing, CaptureMyMeeting!

CaptureMyMeeting is a smart, collaborative web conferencing application that records your online meetings and allows you to search through the audio contents and written contents of the meetings (e.g., text written on a whiteboard during the meeting).

We envision our app to be used by anyone who is interested in holding, saving, and indexing online meetings, such as working individuals in a conference room or at home, or students and teachers in a classroom or at home. Our goal is to make online meetings noteless and easy, from anywhere.

Check out a recorded demo of how users can use our application: https://www.youtube.com/watch?v=yhIXHJOLcIo
It doesn't necessarily mean that it will stop them from being a target, because Apple says this[1]:

> This program is ambitious, and protecting children is an important responsibility. These efforts will evolve and expand over time.

[1] https://www.apple.com/child-safety/
If you're successful, the ideal scenario might be that the government acquires you to use your system instead. They couldn't just hire you since the end result would be the end of your business, at least as it pertains to the federal government.

There are other cumbersome procurement "markets" at the state and local level, but each of those would probably be essentially a new product, each designed to the idiosyncracies of each jurisdiction. However, that also could be an opportunity to be an aggregating middleman rather than a 1-to-1 middleman with like with the Feds. Any regional or national company too small to have clout & an insider track would probably kill for the ability to use a single portal as a one-stop-shop for dealing with state, county, and city municipalities.

That's where your value as a true positive middleman is hidden. Because even if they all fixed their cumbersome opaque systems (which is unlikely) there is still enormous value in aggregating them all in one place for contractors.

I know, it might look like your current plan is a "platform" but it's really kind of just middleware. Aggregation makes you a platform.

That also keeps you from trying to compete directly with something like Workday Finance/Procurement and their portals for suppliers and contract fulfillment: this has helped a decent amount in streamlining procurement even in places trying to map unnecessarily cumbersome practices derived from legacy systems onto it. If you're merely aggregating, you don't have to compete with that.

As a caveat to all of this, while I'm a well informed outsider, I'm still an outside observer of the tech startup scene and might be speculating above my pay grade here.
While weird schemas are an implementation-specific issue, the fact remains that most XML that I've seen in commercial settings is exactly as unreadable as I described. It's harder to go against the grain of the status quo when very few people accompany you on the journey.
You've assumed an awful lot about my use cases. The data I deal with in .CSV form is always pre-processed and doesn't have any of the minefield occurrences you've mentioned. There can't be a newline or anything like that in an input. In my decade of using .CSV files daily, I've only had one tertiary system where that is a problem.

Also, when doing interactive work, it's a bit different than writing production IT software.
Blackout periods have no SEC standing. They're purely a construction by your employer to avoid the appearance of trading on MNPI. Standing order trades (e.g., rule 105b-1) can execute at any time relative to earnings.
N-Back
F# solves many of these problems with it's ability to pull in C# libraries. When looking for a functional language to learn I settled on F# and am loving it so far. I'm not sure if I'd ever use it in production as it is still very niche.

What Evan is doing with Elm is awesome, he has a small closed set of features to make a language that is aimed at doing one thing. He has very tight control to make sure there is zero cruft in the language. It's an amazing project. The cost is that it's very hard for outsiders to have any input into the language. So the ecosystem will never take off.
> The goal should be to create a system where you couldn’t do so even of you wanted to (or the state demanded it).

You can still do secure backups of your phone without using iCloud, but there isn’t a way for Apple to do end to end encryption of backups transparently like you can with real time communication. The only way end to end encryption of backups works is to require people keep a separate secure key(s) to avoid losing their data, which means a universal implementation has real direct risk for users.

As long as Apple has access to these files the FBI can legally require them to do these searches. From a pure PR perspective they should have communicated what was already going on before releasing this system because people assume something significant changed.
I knew a Mexican citizen with a green card who was always having trouble reentering the US and never knew why. I looked at the most wanted list and saw there was a fugitive with the same first and middle name, albeit no resemblance and different family name. Didn't matter. He would have to be interviewed for 30 minutes to verify identity.
But who would want that?

We all want privacy but it seems odd to try to DoS this, with high risk for yourself and very little to gain.

Might be useful when the system turns into mass political surveillance tho.
For some places it was... EDS (Ross Perots company) did it. I want to say IBM did it as well ?

Though - to give Perot his due, when his employees got trapped in Iran...EDS planned and executed a military style raid on a foreign country to get them back. You don't see that kind of loyalty from employers any more.
Story of how air traffic controllers used social DMs to help rescue in Kabul
Considering it's budgeted to run at a cost of $1.5 billion a year and it actually runs at $2.5 billion a year, a toilet flushing problem that costs a couple million a year doesn't really seem notable beyond "lol poop". I hate how our government spends and manages money so poorly.
Up to 11 cases now, and traced the originating case.
Finding the root causes of mental illness.

it's like protesting overmedication of type two diabetes patients by pointing out that surgery isn't very effective. I agree, it isn't, but we know why the patient has type 2 and how he could cure himself!
I do want to note that decrypting the low-res images would have to happen before step 2.
Will the high-resolution images be collected and used as evidence? Or just the visual derivatives? That's not clear.
Ask HN: What are the startup-kind of apps to look for nontechnical cofounders?
I like to know when I see an app just says "funded startup" after tooling around on bigger, established sites. However when it comes to scouting business persons, I don't seem to have the vocabulary to find the right source. I think I'd have to give the role a partnership or C-title, which means incorporating. I've gotten here before. All I had to do was find a real business person. Please advise.
I got fairly heavily downvoted last week for trying to point out that Facebook's "Suggested for you" stories were almost certainly paid content via some path (even if not "advertising"), given that they're uniformly awful clickbait garbage that Facebook knows I don't interact with. Folks really didn't want to hear that theory and insisted it was just random clustering or whatever.

Arguments like the linked article make it pretty clear that that's not the case. Facebook is either being scammed badly by players exploiting their algorithm to throw clickbait spam in front of their users...

... or they're on the take. I think it's pretty clear Facebook is too smart to be scammed like that.
I just tried disabling iCloud for Game Center. It flips itself back on. No error message. Fuck Apple.
Yeh I was talking in hyperbole, but the possible attack vectors this system enables are so powerful I felt it warranted. Under this system you are able to artificially ddos organizations that verify if CP is sent by sending legitimate, low-res porn whose hash has been modified. You can trigger legitimate investigations by sending CSAM through WhatsApp or through social engineering. You can also fuck with Apple by sending obvious spam.

* With regard to the legislative branch, they can even mandate changes to this system they aren't allowed to disclose. Once this system is in place, what is stopping governments from forcing other sets of hashes for matching.
https://www.google.com/search?q=material+non+public+informat...

You can't trade on specific information, but you can definitely trade on sentiment, which is what the rest of the market trades on.
Uh? So his if statement is true?
Quitting doesn't have to be "wrong". Sometimes it's just not a right fit and leaving doesn't have to be dramatic, and you can still leave on good terms. If you frame it positively and have a good attitude about it, it will be fine. It's a FAANG company, everyone is just a cog anyway.