skysight-inc/HackerNews huggingface dataset:
To be more specific, it was a direct competitor to Patreon, but patreon banned porn and onlyfans didn’t, thus the market differentiation.
On ThePornDude, there is a section called "free OnlyFans leaks sites", which is an excellent example of actual content.
If you take "random" components, there is a very high change that they are Windows certified but not Linux-certified. In this sense, you are right. But if you chose hardware working with Linux, you will have no problems with running it.
Keep in mind that Apple's claimed false positive rate (one in a trillion chance of an account being flagged innocently), and the collision rate determined by Dwyer in the article, are both derived without any adversarial assumptions. Given that NeuralHash collider and similar tools already exist, the false positive rate is expected to be much much higher.

Imagine that you play a game of craps against an online casino. The casino throws a virtual six-sided die, secretly generated using Microsoft Excel's random number generator. Your job is to predict the result. If you manage to predict the result 100 times in a row, you win and the casino will pay you $1000000000000 (one trillion dollars). If you ever fail to predict the result of a throw, the game is over, you lose and you pay the casino $1 (one dollar).

In an ordinary, non-adversarial context, the probability that you win the game is much less than one in one trillion, so this game is very safe for the casino. But this number is very misleading: it's based on naive assumptions that are completely meaningless in an adversarial context. If your adversary has a decent knowledge of mathematics at the high school level, the serial correlation in Excel's generator comes into play, and the relevant probability is no longer one in one trillion. The relevant number is 1/216 instead! When faced with a class of adversarial math majors, a casino that offers this game will promptly go bankrupt. With Apple's CSAM detection, you get to be that casino.
What does this have to do with forcing corporations’ hands?
Yes, free up your mental space for creativity. For instance, I don't need lunch to be a free-wheeling creative enterprise. I can just grab something simple, easy, and available that I know I don't dislike.

Now that I don't have to think about lunch, I can spend that mental energy thinking about other things. With enough ritual and routine, I can even dedicate that mental energy while I do those things.

Ritual and routine don't stifle creativity, they give it the space to function.
Why is everyone worried about all that junk? It's reaction mass for getting out of orbit or getting back to earth. It's mostly aluminum which melts easy. Just build a solar furnace in space that has a big 'catcher'. Make aluminum ingots. And shoot them off a spaceship which has a giant electromagnet. As you know, pulsing the electromagnet creates eddy current in the aluminum. This force has been used to weld metal

https://www.tandfonline.com/doi/abs/10.1080/0950711980945202...

The ingots fly back to earth and burn up in the atmosphere.
Sounds like the brogrammer of the devOps
> Apple's NeuralHash perceptual hash function performs its job better than I expected and the false-positive rate on pairs of ImageNet images is plausibly similar to what Apple found between their 100M test images and the unknown number of NCMEC CSAM hashes.
While we're at it, why is LSD in the same tier as heroin? It's far safer than that, or even cocaine, and it has therapeutic uses.
> Is there actually any evidence at all that gender is a notable factor? It just seems like speculation. From the original numbers, it seems like deletions are roughly equal to representation.

I've also seen studies (I can't find them but I recall them) where they looked at Open Source contributors and the authors defaulted to male if there was no gender information available.
Can you provide integrations with other videoconferencing suites? This would be great when I'm stuck reserving a huge conference room and can't reach the controls from where I'm sitting, but there's no way in heck I'm convincing my employer to switch from $EnterpriseVideoconferencingSuite to your startup's offering. However, since said enterprise videoconferencing suite does have a webapp, said webapp is happy to communicate with browser extensions, and you're doing everything with image recognition, I bet you could do most of this stuff on my laptop so I could use your UI without having to convince my employer to switch to your servers/software/codecs/security/auditing.
This was targeted illegally by the administration under Operation Choke Point, and I would hazard to guess something similar is happening again now.
> Public companies aren’t going to use exploits to break the sandbox.

Exploits tend to leak...
Gotta stop them before they run out of the owners' money!
Because it's Visa and Mastercard saying no, not the banks.
It doesn't seem like it; check out the adversarially constructed images here. They don't look anything like the original despite perfectly matching the NeuralHash: https://github.com/AsuharietYgvar/AppleNeuralHash2ONNX/issue...
There's cooking videos, yoga, gardening and other benign stuff on OF, believe it or not.
I don't understand who appointed the banks became the keepers of puritanical propriety. They're terrified someone might see a boob or buy some weed, and the weight of the world rests on the banks to prevent that from happening.
> Not even the FBI are allowed to do that.

The FBI was given clearance to take over a website serving CSAM in order to catch more users of the site. As such, the FBI has technically distributed CSAM in the past.

https://www.dallasnews.com/news/crime/2017/01/17/the-fbi-ran...
I believe this was deprecated in favor of Webassembly.
Why doesn't Nyxt browser stand as a counterexample?
> The company will prohibit users from posting any sexually explicit conduct, starting in October. Creators will still be allowed to post nude photos and videos, provided they’re consistent with OnlyFans’ policy, the company said Thursday.

This paragraph contradicts itself:

- The company will prohibit users from posting any sexually explicit

Versus

- Creators will still be allowed to post nude photos and videos

What is this article trying to say?
Right - similar boat. I haven't posted in a year or two plus? I used to work with kids when it was basically the be all end all of everything. For me the endless politics just was a turn off - keep friends updated other ways (icloud shared albums are fun!).
>(like a foreign government)

It seems like it wouldn't take that. If you can generate a colliding pair of images, you could probably create a pair where one of the images might get attention with child porn groups and thus, shared around enough to end up in the CSAM database. And where the other was innocuous.
It's probably not fraud so much as it is chargebacks from guys whose wives are asking "wtf is this OnlyFans charge?!?"

"Ah shit, honey. Somebody must have stolen my card."
>And there’s nothing to stop them from scanning all images on a device.

All images on your device have been scanned for years by ML models to detect things all sorts of things and make your photo library searchable regardless of whether you use an Android or Apple device. That's how you can go and search "dog", "revolver", "wife", etc and get relevant photos popping up.
If you're into this kind of stuff, you might like dwitter.net
The funny part is that we are already at the critical shortage point. The current human population is unsustainable. So whether or not population growth slows down isn't really material anymore...we've already proven that we'll multiply until we start killing our host.
"Those" people find it much easier to bully low status people like "programmers".
Isn't their whole business model "explicit"? I don't get how this will work out for them.

Based on the Indie Hackers interview with two active Only Fans content makers, it also sounds like their app is kinda shitty and slow.

Seems like they're opening the door wide open to a new competitor.
Yeah I'm saying you'd have a service that does that for you, moves the money from credit (OF sub) to crypto back to fiat for the user (OF creator). I also realize about costs too... but like with CBP if you transact a lot of volume the fees go down so you could build it up.

Well... I guess ultimately you still need that thing between the credit card and the service eg. stripe... idk if the porn thing is like a blanket protection against CP or something?
Assuming you are American — where do you think your iCloud keys are stored? You do know Apple cooperates with US LE and intelligence? This is a nothing hamburger.
Hungarian Notation – Microsoft Docs
Sounds like great progress. One thing I wonder about is the idea of many small files instead of a single package, for the benefit of better caching. When you have an app how often do you update it? When you do it makes sense that users would need to download the whole new version of the app. Not too much of a performance penaalty I would think.

Whereas with many small modules, we are getting close to the situation like "DLL Hell" where every small piece is updated independently but which then might not work so great together. Isn't this also the reason we have 'package-lock.json' for npm? Ensure that the parts don't independently "move" but only "move" as a single well-verified combination?
They didn't "switch" they just _also_ used those apps, which meant they were competing for people's time.
Seems to me he intends to talk about the page table, not the TLB.
> If the CCP says "put these hashes in your database or we will halt all iPhone sales in China", what do you think Apple is going to do?

Or maybe China already said "put in this CSAM check or you can't make or sell phones in China".

Since Apple's position is contrary to their previous privacy policy and doesn't seem to make a lot of sense, it's quite possible extortion already happened (and not necessarily by China).
With a few minor exceptions, the responsive view looks great to me. The issues mentioned in this thread seem less to do with imba's architecture and more to do with rushed, last-minute marketing decisions (e.g. adding in the "we're hiring" chip; which, by the way, is fixed now). No excuses, of course, although as someone who painstakingly builds nice mobile views for complex web apps, no matter how good the library is (I was using Theme-ui), the process is still like building a house on-top of jello.
It's definitely possible to prove beyond a reasonable doubt that he knew; he has access to all the relevant information, is the 'product architect' for Tesla, and presents himself successfully as knowledgeable on this topic.

Either he lied deliberately, or he deliberately chose to ignore all relevant information to his work and field as a whole and still make the claim (even more dishonest, and would make many of his other, seemingly innocuous claims also lies). There's no other option that holds together.

This was not an understandable mistake or oversight. It's not something he could have genuinely believed. It's a wild, wild claim that is obviously nonsense to anyone with even a little knowledge of this field, similar to his claim about language becoming obsolete [1].

As much as we know anything at all, we know that Elon Musk deliberately made this claim in the knowledge that it was false.

[1] https://www.independent.co.uk/life-style/gadgets-and-tech/ne...
> Even more worrisome is the plan to replace an algebra-centered curriculum with one emphasizing data science, described as “21st century math.”

I've taught all sorts of subjects ranging from Linear/Nonlinear Programming to Stats to Economic Theory at levels ranging from Intro to Ph.D.

I have no idea how one does "data science" (something like very basic Intro Stats at this level, I presume) without a good grounding in algebra in a way that has any meaning.

Sure, it is possible to teach the students to add 10 numbers and divide by 10 on a calculator and say they did "Data Schmeince" or some such. Or maybe they look at pictures and try to discern associations.

Does anyone know what this "data science" approach entails?

Update: Drafts are here in Word format: https://www.cde.ca.gov/ci/ma/cf/

- High School 52

- Data Science for Equity and Inclusion 53

- Data for All Students: Living in a World Overloaded with Information 56

- Advanced high school data science 66

- Content Learning Outcomes 74

- Sample Courses 79

- High School Tools and Resources 81

Where's the math?
Where do you think your iCloud keys are stored? Switzerland?
The answers are probably the same. What different is how hard it is to discover.
Facebook Kids Messenger is decent (for all the reasons you mentioned), however, I am pessimistic about it being genuinely appealing to kids. It's staying alive because middle-aged parents are forcing it on their children - they are the consume and decision-maker. My experience is once kids are allowed to make their own decisions they quickly move away from it.
Would have been a hilarious entry in the "Who is Hiring" thread for September.
Indeed, you think that - and that's greatly to their benefit. If they can screw you over without risk that the next person to come along has a different opinion then they will - and if they do screw you over what are you going to do... take them to court? Unless you can hire a private army to reclaim your funds there is no recourse for betrayal - you're dealing with blind faith.
I have a suggestion for Apple. Maybe they could use this technique in a way that benefits all their customers by finally solving the problem of duplicate image imports in Photos.app. I have a couple of hundred duplicate images in my Library because of problems during local import from my iPhone into Photos.
Cratering agricultural prices so margins are so thin small farmers are driven out of business in favor of huge conglomerates, mind-boggling levels of food wastage on the order of billions of pounds sitting in warehouses until they rot.

https://reason.com/2019/03/02/thanks-to-decades-of-governmen...
If it's in relation to scoping work or how long it will take to do something, it may be the "time blindness" that typically accompanies ADHD. This typically leads to optimistic estimates of how much work can get done within a certain timeframe.
Well, not quite, since it still comes with a bunch of federal restrictions like that 10 oz limit. Letting the states decide would mean that feds get out of the game entirely on this.
I have created a flashcard system
Open source flashcard system for learning foreign words (.NET + Blazor)
And if it is a problem, not doing this doesn't resolve the problem.

If it were to become a problem in the future, it could become a problem regardless of whether or not the scanning is done at the time of upload on device or at the time of upload on server.
Ask HN: API Authentication Using Passport.js
Hello everyone. I am trying to implement API authentication in my nodejs, reactjs application using passport.js github authentication and need to clarify some confusion.

First of all, I want to authenticate my API endpoints via JWT tokens ( and not by session cookies ).
So, I disabled the default `session: false`.

I created all routes `/auth/github` and `/auth/github/callback` and attached them with my react frontend.

So, it works. I am prompted with github sign-in. And github gives me my user information, access token. refresh token etc.

Now my questions are

what should I have to do next?

What informations do I need to store in my database?

Do the `accesstoken` provided by github enough for me to secure the API routes or Do I have to generate *JWT* token (with the payload provided by github) and then follow the common JWT authentication procedure?

Thank you for your time to listen to my question. I am confused about passport.js and integration between frontend and backend.
This question isn't necessarily directed to you but your comment made me wonder: How do other cam sites handle payments and what makes them different than OF?
Why hasn't someone started a bank and/or payment processor without these puritanical moral qualms about adult content? Seems like the real golden goose, waiting to be had.
please dont feed the trolls
> The difference is the ease with which they can demur.

If Apple can be cowed by China into adding fake CSAM hashes by threat of banning iPhone sales, they could be cowed to surveil Chinese citizens in the search for subversive material. It's no skin off China's back if it's harder for Apple -- they'll either make the demand or they won't. This changes basically nothing.
Do you have clients using this for CI/CD? It looks very interesting, if a bit more general-purpose.
It would call APIs directly. For example, I have a lot of release automation that integrates with AWS. Rather than requiring AWS specific actions, I could import the AWS sdk via node and make the calls myself.

A good exercise is to look at a simple but nontrivial build/test/release automation:

- on pull requests build & test, on tags build/test and release, and once a day release a nightly build.

- cache dependencies globally and build artifacts on each branch for incremental builds

- once daily, clear out artifacts on deleted branches or merged PRs

A script to do this would be around 100 lines and be readable/maintainable (if build/test or release change, it is shared by the different cases!). The script can have a main entrypoint that will dispatch to the runners as needed.

I know it sounds a lot like jenkins, but node has a much better ecosystem than groovy.
Here's one concern -- Neural Hash is finding false positives with images that look very similar. What if an underage girl takes a selfie (or over-age girl) and the pose or background features are similar enough to trigger a false collision. Then Apple is going to a manual step where they are able to look at a low-res version of somebody's private photos as I understand it.

In my opinion that last step is not okay. I suppose the 30-image threshhold is a mitigating factor, really imo Apple is making their problem into my problem. I want to purchase from a company that offers me the peace of mind not to even have to think about such concerns, price isn't an obstacle. If Apple can't cater to my needs I hope another company will.
Yes but if somebody says "drop your OF" is not talking about gardening. Mostly it is known for sexual material.
I assume this will lead to Onlyfans's effective death, much as Tumblr's porn ban seems to have led to, or hastened, its death.

Reddit seems to have resisted whatever calls it must be getting to eliminate porn. So far at least. It will ban or quarantine some heretical ideas, but porn is still there.
Except for the web. Which seems to get slower and slower due to bloat and overload, no matter your computer or internet speed.
The article says

> Creators will still be allowed to post nude photos and videos, provided they’re consistent with OnlyFans’ policy, the company said Thursday.

So I am guessing the distinction is nudes vs sex acts?
Pretty sure that content is not what is bringing in the monies.
The winner here might actually be the majority of NSFW content makers on OF who are mortgaging their future reputations for very small payouts.

(not a judgment on what they do but the reality of the situation)
The numbers don't matter.

The fact that it will converge towards an asymptote is qualitative, not quantitative because the structure of the system is wrong for the problem.

If the people who were doing this research were physicists you could excuse them, but they are computer scientists and should know better.

It's a basic problem that GPT-x allocates the same amount of resources despite the complexity of the problem. Some problems in programming and language understanding have a SAT/SMT-like structure (e.g. for each pronoun solve for what the pronoun refers to, figure out what the subject/objects of all the verbs are, etc.) which scales in a certain way. Other problems in "understanding" require necessarily that you try one interpretation, work through the consequences of that interpretation until you find a dead end, back up to the place where you failed, try something else, test it until done.

Some of these problems that you might want to "solve" with GPT-x might really be problems that can't be solved in a finite amount of time.

Something like GPT-x with some extra structural features might be able to rise to some of these challenges but we are not hearing about that, we are hearing that adding more nodes and more training data and training for longer is the way to salvation.

(So far as "diminishing returns" matter the question is "does the system ever get good enough that it can be let off the leash?" and my answer is no.)
Really weird that they are kicking off a large portion of their user base for inclusive reasons.
The traffic arteries had multiple uses, which also included movement of soldiers (as was the case for the Eisenhower interstate system as well).
Let us not forget, the Netherlands practically invented financial capitalism in the 16th through 18th century. Apart from the well known markets and exchanges they invented the permanently capitalized enterprise with tradeable shares of ownership distinct from management duties. (And colonies in North and South America, Africa and Asia to boot.)
Related to your question is a radio programme/podcast I listened to recently about the workplace philosophy of Tony Hsieh. Hsieh is the founder of Zappos. He tragically died in 2020 at the age of 46.

Hsieh believed in no hierarchy and no job titles in the workplace. He wanted to create a different corporate culture to help employees thrive.

This is what is discussed in the programme/podcast - it's a fascinating listen:

No boss, no problems - the workplace philosophy of Tony Hsieh (18 mins): https://www.bbc.co.uk/programmes/w3ct1j0k

Below is a link to a summary of the programme posted in another thread. The essential point at the end of the programme is that many people prefer some type of hierarchy, structure, and boundaries in the workplace (the sort of things you mention in your post):

https://news.ycombinator.com/item?id=28225969
The point is to proliferate any decisions taken by Apple because Apple = God and thefore such decisions are beyond human understanding.

You cant reason your way out of Apple being right _always_.
Because many criminals, businessmen and politicians will find this tool very useful for them?
0 out of 0.5 million vs. 3 out of 100 million does not imply with any reasonable confidence that the incidence in porn is lower.

You'd expect the same result even if the incidence in porn was 10x higher than in typical images (30 in 100 million = 0.15 in 0.5 million).
The hashes sent to the client are cryptographically blinded, making it impossible for the client to determine the original CSAM hashes.
You can use Sequin anywhere Visa is accepted (online, offline, etc). A cool feature is, you can actually set your daily limit on the card which protects against fraud - over traditional debit and even credit.
New ‘Jeopardy ’ host made bad remarks about women/Jewish/Haiti ppl on podcast
nude is not the same thing as sexually explicit.
TLDR: garbage in; garbage out
A realistic dyson sphere is not a single structure held up by mechanical forces. Instead it's an incredibly large number of independent, sail-like panels where the radiative pressure pushing the panel away from the star is equal to the gravitaional pull towards the star, allowing the panel to sustainably "hover." Panels would need some method of active positioning for initial alignment and dealing with variations in radiative pressure, so they can potentially move out of the way of debris. Alternatively, since you have the infrastructure in place for making truly mind boggling numbers of these, you just let them get destroyed and replace them.
A new competitor will face the exact same problem, unless they try and do something like accepting cryptocurrency.