skysight-inc/HackerNews huggingface dataset:
NextDNS works really nicely on OS/Apps. Also blocks ad/tracking content in iOS. It's actually quite easy to roll this yourself, which I intend to: wireguard+pihole.
> For mathematicians, a tensor is a function F. We pass the function an ordered tuple of N vectors and M covectors (or, to keep things simple, N column vectors and M row vectors), and the function returns a scalar. The function F needs to be linear in each of the N vectors and M covectors. In this view, a matrix is a tensor with N=1, M=1. The operations used by machine learning types arise naturally once you crank the mathematical handle a little bit.

As with almost all non-technical statements one can make about math (including my amendment—recursive nerd-sniping away), this is neither quite true nor quite false.

A tensor is an element of a tensor product—that's it. (But what tensor product? There are a lot of notions. I'll use the bare tensor product of non-topologised vector spaces.)

One kind of thing you can tensor is copies of a single vector space, and/or its dual. This is the sort of tensor product you likely have in mind. Tensoring copies of the dual allows you to feed in elements of the original vector space. Tensoring copies of the vector space allows you to feed in elements of the dual vector space (there is mathematically no intrinsic difference between a vector and a co-vector; having a favourite vector space in mind, you can talk about the elements of that vector space or of its dual, and—which is where the vector vs. co-vector terminology in physics comes from—about how coefficient vectors change when you change the basis of V), although, importantly, if your original vector space is infinite dimensional then the natural embedding into its double dual is not an isomorphism.

Which is to say, yes, the objects you describe all arise as mathematical tensors; but mathematical tensors can also describe much more.
Bloody hell, if thats the amount needed, then yeh I'm a long way off.

I don't even think I'm badly paid, but 300k a year is silly money
He would've have been aware of the conditions that would have led to such activities.
I love the idea, and I love strong visions, but why not something closer to Motif/CDE? In my mind at least, when I think of 90s workstations, I don't think of Windows 95.
You might need multiple people sue as a group. In this case it’s kinda lucky that on of the misidentified people is a pastor. She’s the one who needs to sue Google. OP in this case should do nothing, it’s terrible advise, but she isn’t actually harmed, she’s just a good person that doesn’t want to see other people harmed.

Help the pastor sue Google, she’s less likely to be tempted by a large amount of money and settle out of court.
Why Teslas Keep Striking Parked Firetrucks and Police Cars
Why is this meaningfully different than, say, what Google Photos has been doing for years?

If you can get rooting malware on the target device then you could

1. Produce actual CSAM rather than a hash collision

2. Produce lots of it

3. Sync it with Google Photos

This attack has been available for many years and does not need convoluted steps like hash collisions if you have the means to control somebody's phone with a RAT.
Nowadays it's very common to run RS-232 over RJ-45 connectors. The weirdest I have seen was one cheap NAS that ran the SATA data and power cables over a PCIe connector.
Huh? In what way has the accusations against Assange been disproven? Is this one of the "if he didn't jump someone random it isn't rape"-arguments?
I'm going to give two pieces of advice, one practical and one more "correct" in a moral sense.

The practical one is to choose an image (abstract icon, conceptual photo, artistic silhouette that could be considered representative of you but is not you) and put it on your personal website as your photo, along with any other social media presences you have. Knowledge Base isn't wired, at a very fundamental level of its design, to understand the notion that somebody would have no photos of themselves online and be known by people at the same time. The system is "thirsty" to fill that gap in data, and will continue to do so, forever, no matter how many times Google intervenes to manually break the link. If you feed it something intentionally to fill that gap, it will be satisfied (the system can understand a concept like the artist Sia not revealing her face in public as part of her aesthetic... It doesn't understand somebody who has no photo whatsoever).

The alternative is to tell your story to media outlets and be very loud about this problem. You are not the only one in the world who wants to be online without providing a photo, and it's not "okay" that Google doesn't understand your use case and is building products that don't understand your use case. A public discourse about this issue is the only way that Google will be incentivized to change the fundamental design of Knowledge Base and similar products. The bad news is that will be an uphill climb and take a long time (and, to be perfectly level, isn't guaranteed to bear fruit... There's no guarantee enough people care about this problem to make a big enough noise for the problem to be addressed :( ).
Idiots.

There's no deficit, labor participation is pathetic and socialism and central banks are to blame.
Why Weren't Cars Electric to Begin With?
Working on OSS and working for high tech companies are two things that are diametrically opposite. The latter is not a reward for the former, unless you were only ever writing OSS to pad your resume.
You can also just send your enemies CSAM, it is more effective at imprisoning them.
China regulator says livestreaming sales stars should speak Mandarin, dress well
Depends very much on the process Apple uses to make the "visual derivative", though. Also, defence by producing the original innocuous image (and showing that it triggers both parts of Apple's process, NeuralHash and human review of the visual derivative) should be possible, though a lot of damage might've been done by then.
I highly suggest you dig into Marx and economic leftist thought (Richard Wolff is a very clear modern source and a well respected Marxist economist) because this kind of exploitation has long been identified by those critical of capitalism as endemic to capitalism. Roughly, a key line of Marxist thought suggests that Capitalism is designed to alienate the worker so that they are more easily exploited by the capital owning class. People now want to live “outside society” because capitalist incentives necessarily eliminate the ability of people to even build a community or society in their own interest because nearly everything they must do to subsist robs them of the opportunity (long working hours, long commutes, a distinct lack of agency in life under exploitative management, and so on).

I could never do it justice here, but you might find it valuable knowing how and when people have very legitimately been making the same point (roughly) that you’re saying here for generations.
T-Mobile says hackers steal about 7.8 mln postpaid customers' personal data
> The main problem with most introductions to the topic are that they deal with coordinate systems where the basis vectors are orthogonal, so the covariant and contravariant components are the same. You need to deal with non-orthogonal basis vectors, because then you realize that naturally there are two ways of defining basis vectors at a given point in space.

Or, preferably, not with basis vectors at all, but that notion seems to do violence to a physicist's way of thinking about linear algebra—I've never quite understood why the physical approach to the subject is so bound up in co-ordinates, when it seems like physicists would be one of the groups most likely to benefit from fully grokking a co-ordinate-free approach.
How long did it take now to make the Apple algorithm ultimately useless or even harmful?

Apple announcement of neural hashing: 5.8.2021.

Generic algorithm to generate a different matching image: 8.8.2021.

one script was already released 10 days ago here https://gist.github.com/unrealwill/c480371c3a4bf3abb29856c29...
The on-prem requirement; probably most paying users with that requirement are not very price sensitive, since it's a regulatory requirement on them, or similar. They're also probably typically large orgs (so it doesn't look so expensive per user, if they would even consider it in those terms), and resistant to switching providers due to other requirements/processes anyway.
The reviewer may not be looking at the original image. But rather the visual derivative created during the hashing process and sent as part of the safety voucher.

In this scenario you could create an image that looks like anything, but where it’s visual derivative is CSAM material.

Currently iCloud isn’t encrypted, so Apple could just look at the original image. But in future is iCloud becomes encrypted, then the reporting will be don’t entirely based on the visual derivative.

Although Apple could change this by include a unique crypto key for each uploaded images within their inner safety voucher, allowing them to decrypt images that match for the review process.
All the major firewalls have GUIs. But try this with some of your non tech family, and tell me how difficult it was. Then imagine this on a global scale. Then imagine how many people are gonna disable said firewall to allow them to play some game or because something asked them too.
(being discussed here https://github.com/jashkenas/coffeescript/issues/5307)
The secondary market for any asset, whether housing or equity, is what allows the primary market to raise large amounts of capital, so no, speculation is not bad at all. It indirectly leads to more investment in housing construction.
Don’t Blink or You’ll Miss the 5k-HP Devel Sixteen Hypercar’s Test Video
You’re aware that people sleep at night, and phones for the most part don’t, right?
Unless they have a way of doing licens checks, displaying the images must be a copyright violation.
The past, present and future of image formats
NN classifiers work differently than perceptual hashes and the mechanism to do this sort of attack is entirely different, though they seem superficially similar.
Just a side point, a single WhatsApp message can contain up to 30 images. 30 is the literal max of a single message. So ONE MESSAGE could theoretically contain enough images to trip this threshold.
I remember reading the evil handyman story (link 2) a while ago and it scared me into using FDE. (Of course, FDE doesn't solve malware and things like that.)
This is a red herring. It wouldn't need to happen on device then, because iCloud Photos are not end to end encrypted and Apple can scan them on the server side today and achieve the same result.

The only reason to scan clientside for a cloud service is to scan files that are not uploaded, or are end to end encrypted.

Apple already maintains an e2e backdoor (in the form of non e2e iCloud Backup) for the FBI and US intelligence agencies. It is extremely unlikely that they will e2e encrypt iCloud Photos.
IANAL, and if you are I apologize for talking over you.

... But I doubt there are grounds for a lawsuit. Google is not impersonating the OP... They are stating an untrue fact in a public fact directory. I don't know of any precedent for suing the phone book for misreporting somebody's phone number. The back stop against such errors has traditionally been in the marketplace itself... A source of "facts" that is consistently wrong grows a bad reputation and is no longer trusted or used by the common person. At the broadest stretch of the imagination, they might be guilty of libel, but the victim would have to prove damages (if the damages are sufficiently egregious, libel can be proven without intent, but that usually involves statements "vicious of malice," and I think you'd be hard-pressed to fit "we think this is a photo of the individual in question" into that category without blazing a hell of a lot of new precedent).

I suspect a lawsuit in the space would be a lot of money thrown at no beneficial outcome.
Reading this, I was struck by a similarity in the strength of the distinctiveness (obviously not the content) between the Hasidim and the Amish.
I encourage anyone to look at the code. It's clean C++, you can get into it pretty easily. The author encourage code clarity and the fact that the whole OS (kernel, libraries, userland) is all in the same repo makes it easy to navigate and understand.

I think the objective of the author is not to make the most complete, fastest, shiniest OS ever, but have something that works, that's usable, fun to work on and educational to look at.
I think you may have misread my comment: I did not mean that the similarity of hashes invalidates any claims.
The percentage of housing sitting empty is quite low, and well within the range for any asset. 100% utilization is not a realistic expectation and would not be a healthy situation. Markets need the flexibility of owners being able to wait before committing a resource to a particular usage.

But there is artificial scarcity in housing, and that's almost solely down to regulatory restrictions that suppress private property rights, whether that's rent control that make it less profitable than it should be to invest in housing, onerous permitting processes for building a new house, or zoning restrictions limiting the density of a new housing development. Economists have chronicled the problems created by these interventions, in detail.
There's not a strict religious group in the world that seems to be happy.
We had a ton of them at a company I worked at. They consided themselves a start-up (or "we have a start-up culture" which means "we don't bother doing things correctly and everyone works their asses off"). The number of ways you could pwn them from inside and out absolutely astonished me when I first joined. I had come from a stuffy company that had boring stuff like change control, technical architects, project plans etc. I wasn't sure how exactly to get stuck into the workload because there was so much wrong, and so much new stuff to build on top of the wrongness. So I decided to deploy a general discovery script that ran ps/lsof stuff. The results: lots and lots of stuff running as root, listening on various ports. Next step: running `curl icanhazip.com` (yeah, EC2 classic FTW!) and then hitting the IPs with nmap from outside the network to see what could be reached directly. Maybe nobody did this before, or maybe they did, and they found a lot of scary stuff that they didn't have bandwidth to fix and simply ignored it. But right away I had a bunch of SEVs on my hands. Worst case was a provisioning system that was hooked up to AWS, served to the world over port 80, using a super-duper lame password. We also had a very junior professional services team who would implement garbage-fires all over the place based on customer requirements. That whole team was a joke. The real engineering team didn't consider them "engineers". There was little communication between them. Some of the solutions they built were simply horrendous. One implemented a web-based form that allowed the customer... any customer... actually anybody... to stop/start a particularly broken part of our product. Kinda like self-service problem resolution for customers, instead of just fixing the cause of the issue. If you discovered this webpage by accident who knows what else you could have done with it before we closed it down. There were other major issues. At one point a mysql server was exposed to the world with root/root.

Did that company fail? Nope. IPO'd for billions. And most of the people who put out fires like those for years while the founders told us to our faces that we'd all be rich... got sod-all.
> Consider that a table has 10^verylargenumber of "spherical" atoms

That "verylargenumber" exponent is not actually a large number. It's probably close to 28.

E.g. for a rough estimate, pretend that the table has a mass of 120kg and is made of only carbon atoms. 120000 gram / (12 gram/mol) = 10000 mol = 6x10^27 < 10^28.

On a related note, the estimated number of atoms in the visible universe is around 10^80.
> […] it does borrow a couple of concepts from FreeBSD—its license (2-clause BSD), and a "ports tree" software management system similar to FreeBSD's.

If anyone wants a third-party software repository for their OS project, it's worth checking out NetBSD's pkgsrc:

* https://en.wikipedia.org/wiki/Pkgsrc

It's multi-platform (Linux, BSD, macOS, Solaris, AIX, QNX, etc), and so has a lot of infrastructure for portability already set up:

* https://www.pkgsrc.org/#index4h1
I think that tensors have a much more broad meaning to mathematicians. At least in pure mathematics and algebra, there is much more of a focus on the tensor product operation, a way of taking two (or more) vector spaces and producing a new vector space: their tensor product. Tensors are elements of this new space. In particular they don’t need to be multilinear functions on a product of vector spaces (for finite dimensional spaces there is not much difference, but for infinite-dimensional spaces there is a real difference between these two things).

Tensor products in this generality don’t need to have an (n, m) rank in the sense you’re describing, since they might be put together from completely different spaces. For example it’s perfectly fine to form the tensor product of a 2-dimensional space with a 5-dimensional space, yielding a 10-dimensional space.
When POWER 7 moved to LE, little endian essentially won [edit: for CPUs, not for network protocols]. The only CPU architecture we support that is still big endian is s/390.
Did the Covid era of lockdowns and Zoom day-to-day make a dent?
The key takeaway for me from that thread was gtirloni's comment:

> I need very clearly defined units of work to work efficiently

> This 1000x. I try to keep a pool of those kind of tasks when I can't concentrate on my main task so I still feel like I'm making some progress. It's helped a lot.
> “ Is it possible that one day the market for SSNs and other private data will become so saturated that exfiltrating such data becomes unprofitable?”

Not before the bevy of PII data points can be integrated into larger and larger datasets describing _individuals_.

Right now if you breach one database, you have one ‘snapshot’ of the elephant. Add more and more data, and soon you can make connections between private and public information.

What then? You could model a lot of information.

What street were you born on? First school? Early childhood friend?

Sound familiar?
Hashes are generally a part of the signature generation used with certificates. See for example "What role do hashes play in TLS/SSL certificate validation?" -> https://security.stackexchange.com/questions/67512/what-role...

In certificates, md5 - and sha1 - was used quite some time after it was known to be weak, I suspect OP was thinking of that.

This article seems to give a good summary what happened with sha1, mentions md5 in passing and links the related chromium issue: https://konklone.com/post/why-google-is-hurrying-the-web-to-...
Capturing all the jews here
Hoarding != Consumption
Yeah, last year they bought all the CNET group stuff, which included all the CBS Interactive gaming stuff—Metacritic, Gamespot, GameFAQs, Giant Bomb etc.
The capacity limits were not an issue in the summertime when people could hang out outdoors, especially with the loosening of public drinking laws.

The masks? they made everything worse. They're incredibly bothersome to wear when its hot and humid, they induce psychological pressure on you via the feeling of being "smothered," and make every social interaction much harder to understand making each interaction more tiring to be a part of. It's equivalent to being in a Zoom conversation where you can't read all the subtleties of somebody else.

That's not even mentioning the blue collar labor force which has to wear these for 40 hours a week. My friends who work as waiters, bar staff, etc. still have to wear them during the day. The last thing they want to do when they get off work is to continue wearing them.

(all of this is relative to NYC, which had a ~31% closure rate for small businesses)

I understand some people here, such as yourself, don't think the masks are a big deal. But to the vast majority of the populace, they are a burden so bad its worth _moving cities and states to avoid_.
I would help the committee.
Never is a very, very long time.
AWS infrastructure monitoring using third-party tools
> Also, defence by producing the original innocuous image

At this point you’re already inside the guts of the justice system, and have been accused of distributing CSAM. Indeed depending on how diligent the prosecutor is, you might need to wait till trial before you can defend yourself.

At that point you’re life as you know is already fucked. The only thing proving your innocence (and the need to do so is itself a complete miscarriage of justice) will save you from is a prison sentence.
Jitsi: https://jitsi.org/e2ee-in-jitsi/
Ah I think you're on to something there - I almost said (and this would explain why) that Bloomberg is the only publication I read that I notice/can think of that does this.

It just has click-bait/spam associations to me since that's where I generally see it: I don't like the look of the title, so I look at the URL, if it's 'amazingwownewsdaily.com' or something I move on; if it's 'bloomberg.com' or something recognisable (-ly good) I think 'oh ok, ugh, but ok' and open it.
COVID-19 spreads via the air, not through physical contact.
Google’s Fuchsia OS is rolling out to every first-gen Nest Hub
They probably would not hold onto them and also now you have a paper trail of sending CSAM to people. But if you were to alter some innocent looking photos and send them to someone, they might store those.
I have seen it suggested that everyone should flood the system with flagged images to overwhelm it in protest to this move by apple.

Sounds pretty stupid to me to fill your phone with kiddie porn in protest, but you do you internet people.
Taliban seized U.S. military biometrics devices that could identify Afghans
..And it's not all about the money.
I don't get it.
Original title is: "The Golden Age of the Electric Vehicle (the first one)"
exactly because first cars were electric.
Simply turn off Javascript and watch instantly all inaccessible pages become accessible with all ads and popups gone. The magic. The 90s HTML page.
NAT prevents an external host from making arbitrary connections to a host behind the NAT without further configuration. This is something your average person doesn’t need to know or really care about. But once every device they have is globally routable they will have to care and ensure their machines are secure and behind a firewall. And if that firewall should fail then you’re sitting on the public network with your pants down.

Your other part is security through obscurity, and I can think of at least 2 ways to scan the entire address space in a short amount of time. So nope doesn’t count either.
HireArt (YC W12) Is Hiring a Senior Full-Stack Software Engineer
Show HN: I made a Safari Extension that enables dark mode for Hacker News
Don't go.

My young friend went on contract for a year, doing fishery research. After a few months they said "We aren't going to pay you any more. You can't leave because the boat won't come back until {whenever}. And if you say anything, we won't give you the recommendation you need as a young researcher doing a PhD."

She had to stay for months working for nothing. It's slavery, and they know it, and that's how it works.

Don't go.
Spark on MR3 – A New Way to Run Apache Spark
Both of those do not consistently work across a large organisation (1k+ users) without perfectly homogenous hardware. That means they're effectively unusable.
I didn’t get that impression from the title, but I also knew they were referring to Corellium before clicking the link. I interpreted it as, “Apple says researchers can vet its CSAM tools despite aggressively suing the one company that makes such research feasible.”