skysight-inc/HackerNews huggingface dataset:
Please quote correctly. I said:

> this is rather provocative in a city and state which does not require identification, among other situations, when you register to vote or vote.
> Just insert a known CSAM image on target's device. Done.

You don't even need to go that far. You just need to generate 31 false positive images and send them to an innocent user.
That's too bad. I have the 2020 model and was able to upgrade RAM to 40GB and add a second NVMe drive.
Seriously?

What are you are hiring using y=mx + b?

I suppose you also assumed that all employees are mass-less, friction-less, perfect spheres as well?

If you are gonna oversimplify, why not just say "Hire for integral"?

I can't even.
It would be more charitable to say that current ML/NLP approaches have orders of magnitude less understanding than humans. The ML/NLP process just jumps straight to the correlated answer, which a human would do, but then use higher order reasoning - "wait mars? that wasn't where he set foot".

This to me is similar to current autonomous driving limitations. The cars can only respond to situations they have seen before. Any novel elements lead to failure, where a human can fall back on higher order reasoning: "That is a stoplight yes, but it is on the back of a truck, ignore it" (real example)
> I still call this a significant risk given the 5% fatality rate.

The infection fatality rate is not remotely close to 5%. It's remarkable that we are now over 18 months into this pandemic and so much of the public is still in the thrall of the fearmongering and misinformation about the real magnitude of the threat SARS-CoV-2 poses -- especially to them personally, if they are not in a high-risk group.
> but not ambiguity about the basic facts of a story.

Really?? The "unreliably narrator" is a classic literary device that introduces ambiguity about the basic facts of many well loved stories. See "Wuthering Heights" as an almost 200 year old example, or "The Handmaid's Tale" as an extreme example of factual ambiguity from about 40 years ago.
Did the font break on my device, or is everything just in bold? I cannot read it like that.
That is not quite a CSV replacement. I use it for things with objects and stuff all the time. To be a CSV replacement you really need to add that each line must be a JSON array, and that it can only have scalars in it (no sub-arrays or objects). That would be a decent enough replacement for CSV itself. Not perfect, but the CSV "standard" is already a nightmare at the edge anyhow and honestly a lot of it can't be fixed anyway, so, this is probably as good as it could get.
I suppose it depends on the state. If you’re in Texas or California good luck.
Totally missed the point. The direction of scanning everyone's phone for 'prohibited content', pushed on them by various governments. Be it political, fine in one country but not in another (adult homosexual), etc. And a future where the content scanning applies AI and reports you for doing such things such as taking pictures of police or protests.

It's a cop in your phone.
EDIT: Parent edited his comment to clarify. I understand the point now. I'm wrong about similar images needing to have "similar" hashes. Those hashes either need to match exactly, or else not be considered at all.

IGNORE THIS: I think that's the parent comment's point. These are definitely not cryptographic hashes, since they—by design and necessity—need to mirror hash similarity to the perceptual similarity of the input images.
I wouldn't say "less different" with at the time (the already mentioned) FPS one, EvolutionRTS, the Gundam one, the WW2 one, the StarWars one, P.U.R.E. (?), Kernel Panic and more... all very different from the TA "clones" !
The US has a long history of these sorts of movements. See the entire state of Utah for the most successful one.
I remember watching it (I'd seen it before) with an audience of stoner undergrads at St. Andrews University (not the brightest of people - I was at Edinburgh) and having to explain what exactly was going on, not helped by being somewhat stoned myself.

But do films (or any art) have to "make sense"? For example, I've never really worked out what the original "Solaris" is about, but it doesn't stop it from being both scary and moving.
If you guys can build a Vanta for GSA etc you’d probably mint money.
> "...the most important problems in this space: the graft, turf building/protectionism, and corruption. Tech isn't going to solve those."

rather than the byzantine prescriptive requirements we have now, the simple, straightforward solution to all of these is to disallow consolidation in procurement, making the contract sizes much smaller in most cases. it's much easier to hide significant graft in a billion dollar contract vs. a multi-thousand dollar one. the federal government tries to use size as its leverage over price, but we should be using competition instead. make contractors compete each time for smaller bites of the apple, rather than giving them the whole orchard in a single go, which often leads to complacency and corruption.
I blame rampant corruption, self dealing, and identity politics. Americans have massive distrust in their leadership for very good reasons. That trust is really important for these exact situations. We all know all of our politicians are dishonest fuckheads - why believe them about COVID or vaccines?

I am pro vaccine and I am vaccinated - just explaining that I understand people's reluctance to believe anything they hear.
This seems like speculation with no evidence. The government cares about more than just CSAM, they care about terrorism, human and drug trafficking, organized crime, gangs, fraud, drug manufacturing etc.

This would only make sense if Apple intends to expand their CSAM detection and reporting system to detect and report those other things, as well.
Elasticsearch is like the security breach gift that keeps on giving...
Thanks! Here's that one and another:

T-Mobile Confirms It Was Hacked - https://news.ycombinator.com/item?id=28202399 - Aug 2021 (248 comments)

T-Mobile investigating claims of 100M customer data breach - https://news.ycombinator.com/item?id=28192423 - Aug 2021 (191 comments)
Back when this first came out I pondered whether I could use it as a replacement for the comment section on technical docs. E.g. rather than putting a Disqus on the bottom of your doc, create a Discussion, and put a link to the Discussion at the bottom of your doc instructing readers to leave comments there.
I feel the author's pain. I have written a CSV parser from scratch and despaired at the lack of a decent standard for line endings, escaping, encoding etc (Excel and Numbers don't even agree on how to import the same CSV file). But CSVs aren't going away any time soon and I think the author is naive to suggest vendors should stop supporting CSV.

For a start, think about it from a game theory perspective. If I keep CSV import/export in my Easy Data Transform product, while all my competitors with data transformation software (Alteryx, Knime etc) remove it from theirs, it gives me a big sales advantage. What advantage do I get for removing already working CSV import/export code? Nothing.
I'm not saying it with irony. We actively don't hang out with vaccinated people, because of their spike protein shedding. It has caused things like missed periods, and cuts where the blood won't clot. Why would I ever take the first thing the government has ever tried to not make money on? It's not a goodwill gesture.
Sounds like a fun weekend project.
"Misconfigured Elasticsearch cluster"

Doubly so. No passwords _and_ it was exposed. There's no real reason to ever directly expose a database to the internet for 0.0.0.0/0. Heck, there's no reason to expose to any routable address.

Yeah sure zero trust or whatever. Still, why even risk it? Layers.
In what scenario would somebody target you for CSAM framing, and not tip off the police that there was CP on your phone themselves?

The apple technology only adds passive detection. In the event of a framing, passive detection is not necessary.

This technology doesn't enable any new attacks.
Offer him an executive position.
This is how our lives could soon look. Take a peak at the future
> How is an unvaccinated person a danger to a vaccinated person? If they are then what is the purpose of getting the vaccination?

Given the Enormous Volume of professional discussion on these matters, what's the purpose of rehashing that question here? Do you expect an expert viral epidemiologist to jump in and provide a new angle on the discussion?
Wow. As irony would have it, during a procrastinatory fit today, I wandered onto HN for the first time in weeks. Saw this, and it seems like it's exactly what I've been looking for lately! I've been intensely struggling with staying productive at my new startup - to the point where I'm looking to hire someone to basically look over my shoulder (via video) to keep me on task. Seriously, I'm interviewing someone tomorrow for this. The fact that there's a company devoted to this is astounding (it's not just me!). Can't wait until my invite is accepted so I can try this out!
No it’s not. The client hashes against a blinded set, and doesn’t know whether or not the hash is a hit or miss.
Is he wealthy?

Oh, I just googled it, and the answer is yes.

It's a curious thing, wealth accumulation.
I didn't say they said that. It's also not my whole comment. Not sure what you're getting at.
>A government often does need to monitor the communication of foreign agents / spies or suspected terrorists to protect the nation.

Sorry but it's not really working like that anymore...the metadata here is much more important then the call itself. And humint is getting more and more important too...again
If enough people pool in, you could underwrite your own clinical trial.

Why not? People have pooled-in to try drugs that are in development and not generally available yet. I can recall numerous instances: pitolisant, rintalimod, hyper immune IG, etc

Some went well, some were disasters, it’s the same as any other clinical trial.
I had a general understanding of the company before interning there, just not to nearly the same depth as the article explained it because it was never necessary for my job
> One reason foreign donors inflate their own importance in Afghanistan is that they do not understand the informal economy, and the vast amounts of hidden money in the war zone

Informal economy is a reality in every developing/under-developed country, so I doubt the foreign donors aren't aware of it. Being aware of something and talking about it openly are two different things. By definition, the donors can't do anything about the informal economy without having boots on the ground, so why talk about something you have no control over?
I was thinking the other day how odd that these people aren't all up in arms about being required by law to wear a seatbelt. In my opinion that's much more controlling than requiring a vaccine.
I didn't know they existed, but now I do, and am wondering the same thing!
At least it's not an Electron app. :D

I believe that animations are partially responsible for the slowdown, and Windows is not the only offender here, iOS and Android are just as much guilty of this. In most cases, animations when opening apps, switching screens, etc. don't add anything to the UX.
Except when you're not measuring the similarity you think you are, because NeuralNets are f&#@ing weird.

You know, let me put it this way. Yiu know that one really weird family member I'm pretty sure everyone either has or is?

Guess what? They're a neural net too.

This is what Apple is asking you to trust.
Yes but I think he means that these people were the first to have two computers: https://en.wikipedia.org/wiki/Semi-Automatic_Ground_Environm...
Several months ago, I started reading every new article. This is the first comment I have left in a few weeks.

Your posts are fantastic, not only do we get a peek inside, but we learn about how electronics work, and why designers make choices.

Thanks!!!
> a civil court cannot prohibit a party from having legal representation, which is what your comment seems to suggest.

> https://www.law.cornell.edu/rules/frcp

This is a good point for federal cases, but I meant my comment to cover civil action in state courts too. These are the courts that are most likely to affect someone's life. For instance in California small claims courts you are not allowed to be represented.
The EARN IT Act would have basically legally mandated a backdoor in all services, with shifting recommendations, in the name of preventing the spread of CSAM. Sound familiar?

Also, there is another reason why there is the CSAM Detecting and Reporting system. With Apple CSAM Scan, that big "excuse" Congress was planning to use through EARN IT to ban E2E is diffused, meaning now Apple has the potential to add E2E to their iCloud service before Congress can figure out a different excuse.
I wonder how much of "smart" is due to his power, and how much of it is due to his intellect.

I say this not because I don't believe he doesn't have an impressive intellect, but because, well, what if someone had his intellect, but worked in an Amazon warehouse due to circumstances outside of their control?
Windows 10 Home, the one most people are on, is free. They need to make back that money.

I don't particularly like it but MS is doing what every other free app is doing. The user needs to be tricked.
How to convince a NIMBY to build more housing
Yep, that's me. I'm afraid, because of mental and physical health problems, and family troubles I have stopped supporting it. Also, when bitbucket stopped supporting Mercurial I simply could not be arsed porting it to git. Not that I have anything against git.
It doesn't really work at the city level. You have to control a county. Most Americans really have no idea just how powerful a county sheriff is within their county. They are only 2 levels of command in the executive branch removed from the President.
You've obviously never stepped on broken glass from a bottle carelessly tossed away.
I agree, I'm just talking about the difference between cryptographic hashes and other types of hashes.
Any chance to release another batch of invites? I think I've just missed mine :) the page says "invalid invite code" after I've filled in the email and password...
Wow, thanks for sharing, and for the detailed write up! Please keep the feedback coming (I'm j@pop.com if you'd like to keep in touch in the future).

I do agree Screenhero should have had a more generous free tier. With Pop, we will likely have a free usage tier when we start charging. We haven't mentioned it on the pricing page just yet since everything is currently free and it would complicate the story.

I love the analogy you've made with Adobe Acrobat Reader! We definitely want Pop to become the default tool you'll use when you want to work remotely with someone on a task together on your computer (pair programming today, but a whole lot more in the future). And I agree that keeping a generous free tier will help us enable that, beyond just the ability to join calls started by paid users.
I'm kind of curious, did you use "123..." and they didn't care/notice, or did you give a random number?
Lots of people with power shut down people who are smarter than them for being annoying, I guess is what I'm getting at.
And yet every government in the world has forced their citizens into places far worse than home to save far fewer lives.
But not mandatory. You don’t need to get a passport unless you want to travel internationally.

The question is whether the U.S. federal government can require all U.S. residents to get, carry, and provide a national form of identification. To my knowledge it cannot, but I’m not handy with a case citation to prove it. Watching the rest of this thread to see what people turn up.

Note that Social Security numbers are explicitly not intended to be such IDs, although many services do use SSN as a key to distinguish people from one another.
I really never got the point of AMP being anything else than a set of recommendations for lighter mobile pages. A sort of remnant of the time where you got redirected to another version of the website you were visiting if you were doing so from a mobile device.
Presumably, someone on the internet will download a dump _actual_ CP and run it through NeuralHash, then post the resulting hashes to GitHub. Doing so will be illegal for them because they are downloading CP, but it should be perfectly legal for you to then download the hashes they posted, randomly select one, and generate an innocuous image that matches it. The fact that Apple isn't posting hashes doesn't actually make it all that hard to get your hands on them.
>the fact that both of its separators (newlines and commas) can appear as-is inside column values, with a different meaning, if those column-values are quoted, means that there's no way to parallelize CSV processing, because there's no way to read-ahead and "chunk" a CSV purely lexically

Yes, this is a major pain. It can be avoided by using Tab separated value (TSV) files, which don't use escaping. But then you can't store Tabs or carriage returns in your data. Also there is no way to store metadata in TSV.

JSON is far from ideal for storing 2D data tables as it is a tree. This means it is much more verbose than it needs to be. The same is also true for XML.
> People need to get to work, so they drive.

This is not an immediate conclusion. There exist multiple alternatives to driving, but it's also up to cities to provide them.
IDK, it probably comes out the same. Feels like the "one horse sized duck, or a hundred duck sized horses" argument.
I’ve yet to see someone use it, so clearly one of us is in a bubble.
> Just insert a known CSAM image on target's device. Done.

What do you mean “just”? That’s not usually very simple. It needs to go into the actual photo library. Also, you need like 30 of them inserted.

> I presume this could be used against a rival political party

Yes, but it’s not much different from now, since most cloud photo providers scan for this cloud-side. So that’s more an argument against scanning all together.
CSAM scanning is only one type of scanning which is performed at the behest of governments and corporations around the world. This alone will not allow for end-to-end encryption of items in the cloud.

There would need to be end-device scanning for arbitrary objects, including full text search for strings including 'Taiwan', 'Tiananmen Square', '09 F9', and so forth to even begin looking at e2e encryption of your items in the cloud.

At which point… what's the point?
I've never actually looked up what the "quadrants" are in Star Trek. Apparently just our one galaxy divided into four. 6% of the universe is indeed an unfathomably large amount of space.
> Anti-Child Abuse Imagery Tech

Room for improvement in the headline.
Guerrilla Public Service Redux (2017) - https://news.ycombinator.com/item?id=23325319 - May 2020 (110 comments)

The Fake Freeway Sign that Became a Real Public Service - https://news.ycombinator.com/item?id=1047054 - Jan 2010 (40 comments)
submissions may be problematic, the response may be as well.
HN doesnt like to be a gladitorium or a platform for ideologies. it carries much more wieght to discuss the facts rather than how ones perception of the facts elicits visceral response.

its not about you having done something its about other users and the optics, you may notice those have been moderated as well
Worth noting that this guy's channel is overly dismissive of everyone, sometimes strawmanning, and a bit nihilist. That said, Dubai turned to an unmitigated disaster of a real estate excess which will disintegrate in the sand from which it came unless its owners do something completely drastic. Covid-19 put the tombstone in the plans to build the Las Vegas of middle east
I've done 4 Flow Club sessions and have really enjoyed it.

I get the folks saying they'd be distracted and I thought the camera would throw me off (and you can turn it off if you want), but I got used to it right away and have been pretty productive during my sessions.

I'm working solo from home, so having others there has been energizing.

The people in my sessions seem to most commonly use Flow Club to get through work that they don't want to do or something they've been putting off.
Guide on becoming an Software Architect
> There are cases spanning a century across several creative legislative attempts by the US Congress to create a de facto mandatory national identity system.

Then it should be easy to present one, preferably the most applicable one to modern proposals.

> This information is not difficult to find.

Its not easy to find the arguments of the people opposed to national ID, and its not easy to verify that the cases they cite are not about national IDs.

> All of them tried to workaround the fact that States can create mandatory identity systems but the Federal government cannot

None of the national ID debates have been about a mandatory ID (a mandatory-for-specific-purposes ID, yes, but the feds already issue a number of those.)

> (It is one of the reasons SSN cards go out of their way to assert they are not to be used as an ID.)

No, social security cards say that because they aren’t designed to validate identity, since all they contain is a name and a number and no way other than possession (which is extremely problematic) to associate that with a particular person.

> Past attempts included things like withholding tax disbursements to non-compliant States

[citation needed]

> but the US Supreme Court deemed that coercive and therefore illegal.

[citation needed]

> The Real ID Act is the latest attempt

Real ID is not a mandatory ID, but a required-for-enumerated purposes ID. The enumerated purposes are ones for which the federal government already establishes acceptable ID standards without any Constitutional challenge, under various Article I, Sec. 8 powers, Real ID is just a change to the standards. And all phases of it but for Phase 4 involving (notably) the mandated to use Real ID for commercial air travel have already gone into effect. Starting in 2014.

but it has been delayed for many years by State non-compliance and general unwillingness to share their identity databases with the Federal government.
Awk will eat that for breakfast no problem.

The usual problem is when you discover that what you thought was a value is in fact a record of its own, with internal structure.

The problem isn't the CSV. The problem is that data parsing is actually a Hard Problem.

The author of TFA is ... naive and misguided.
But how will you do that without access to the non-blinded hash table? Then you need access to that first.

Also, “sending” them to a user isn’t enough; they need to be stored in the photo library, and iCloud Photo Library needs to be enabled.
It expired already.
I think you missed the "and analyze and categorize the targets. This will catch all of the spammy, shady and sometimes even purposefully opionion-bending things posted under thousands of separate domains, etc." part.
The enjoyment of figuring out what's going on in something like Mulholland Drive is rather similar to the enjoyment of debugging a complex bug. There's a frustration about it not immediately making sense, but there's also a pleasure to working it out.

Primer on the other hand, I think all you can really do is accept that there are big unexplained gaps in the story, and no amount of debugging is going to help. I personally take that as a fun hint of a larger story you're not seeing.

Never seen The Big Sleep so not sure which it's more like.