skysight-inc/HackerNews huggingface dataset:
Mint and Quicken are end user applications, Plaid is not. Plaid is an API provider to access financial information from multiple institutions.
The worst I've seen is CSV in which some of the fields contain CSV.
I wonder how many of the participants in the Jan 6th insurrection are on it.
Sadly I read that as "Other tools do their own thing so we decided to do our own thing too" :(

Though admittedly, "convenience for users" is a rather tricky thing to define, as you really need to define "which users". I imagine ~/.projectname is easier getting started out, but the long term management is why we (try) to have standard locations for things.
Or perhaps it is our systems that are pathetic? Laws, regulations and enforcement thereof has always been a bureaucratic effort.

As an early career engineer, who works at a highly bureaucratic company, I always asked for permission for access to things I needed for my job. The gate keepers would ignore me. Worst example was when my management asked me to start version controlling a project I created. I had to work with the change management department, it took them six months to create a repo on a server just because no one knew the person who knew how to do that, and they had to be the ones to make it, not me.

Then I moved up in the company and got direct communication with the customer. The gate keepers come to me, not the other way around. Repos get created in a day now.

The problem with every bureaucracy is the incentives are never aligned with the organizations stated mission. When you say “version control” what you really mean is version control for employees who directly bring money to the company, for which we’ll dedicate significant parts of our budget to employ people for a function that can be automated as some sort of make-work scheme. The incentives are messed up.

Bureaucrats only win when they don’t get fired, and they don’t get fired when they follow the policies and procedures. And policies and procedures are there for the well trodden happy path. If you are innovating, there will, by definition, be no happy path, you have to make it, and if you ask a bureaucrat for help, they’ll seize up because there is no procedure to follow. At best they’ll direct you to someone else, who will also seize up and direct you back to the same person who sent you.

I discovered that the best way around that is to make seizing up a more likely way to visibly fail. I need you to help me get this build out to the customer TODAY if failure to do that will result in higher consequences than failing to follow procedures, they will make the build.

So moving fast and breaking things can get you to that high consequence state that bureaucrats seem to budge on. If you have a successful startup that breaks the law, you can please your users, and afford lawyers to defend you in court and afford PR firms that can convince the media to harass your regulators on your behalf.
I didn’t claim it was impossible, just that hash collisions won’t match both.

Also, the information needed to create a full match simply is not available.
No, there’s another private hash function that also has to match the known CSAM image for an image to be considered a match.

That one can’t be figured out through this technique.
Let’s replace them with sqlite dbs.
Is it the norm here? If not, then I suggest the principle should apply here.
I’m not too familiar with the intricacies of each major orbital tranche beyond their name: LEO, GEO, NEO etc. Similar to how the FCC in the USA divides bands on the spectrum for wireless devices can we not sub-divide tranches like LEO into N components and majorly fine those whose satellites deviate?

I suspect its a lot more complicated than that but if anyone knows anything please share.
I understand why things like Citrix and Awingu need to exist, but I hate using them. Applications just don't work well with that much latency between the keyboard and the display.

Unfortunately, once a company has something like this, they use it like a crutch to solve problems that are better solved the right way.

I saw a setup where people were forced to develop software over Citrix because of some mumble/security/mumble reason. Meaning everything via Citrix: IDE, browsers, test tools,
terminal session, and so on. The productivity was atrocious.
Counter-question: At what point is child porn actually child porn, socially and statistically speaking?

If I share that picture of my child with my friends and loved ones on Facebook - at what "scale" is it considered to be added to that database as child porn?

1k shares? 10k? Who's the one eligible to decide that? The judicatives? I think this scenario is a constitutional crisis because there's no good solution to it in terms of law and order.
RawGitHub: Serve files directly from GitHub, running on Cloudflare Workers
> The author is not forced to use csvs.

But some people are. There are entire industries built around the exchange of CSV files, and the producers and consumers don't necessarily talk to each other.
T-Mobile Breach Notification
From the Steam blurb:

> The October labor lottery is complete. Your name was pulled. For immediate placement, report to the Ministry of Admission at Grestin Border Checkpoint. An apartment will be provided for you and your family in East Grestin. Expect a Class-8 dwelling.

Sounds pretty low on individual freedom to me.
Hug of death. Poor little server never had a chance.
GenF20 Plus Reviews: “2021” Does It Work?
One small step at a time rules to take genF20 plus
One pack of GenF20 Plus contains 120 tablets. That is useful for a one-month supply. As such, for most absurd outcomes, you might take 4 tablets in a day. Usually, you might gobble up two tablets twice reliably – two AM (before lunch) and another two PM (before supper).
Expected Side Effects genF20 plus
Different overhauls including HGH supplements regularly have coincidental effects. In any case, by prudence of GenF20 Plus Side Effects, it doesn't give you any damage. The entirety of the decorations included doesn't obviously initiate Human Growth Hormone. Considering everything, it engages the mind, explicitly the pituitary organ to become our body's HGH creation

Official Website:- https://ipsnews.net/business/2021/08/07/genf20-plus-reviews-update-2021-ingredients-negative-side-effects-or-real-benefits/

https://www.genf20.com/ct/621491

https://twitter.com/Genf20P/status/14243049111397539923

https://www.homify.com/projects/1009878/genf20-plus-reviews-2021-ingredients-how-does-it-work

https://news.ycombinator.com/item?id=28119329

https://www.reddit.com/user/genF20plusreview/comments/p0cb9p/genf20_plus_reviews_2021_ingredients_side_effect/

https://www.inkitt.com/genf20plus

https://www.styleforum.net/threads/genf20-plus-reviews-2021-ingredients-side-effect.688961/

https://www.reddit.com/user/genF20plusreview/comments/p0cb9p/genf20_plus_reviews_2021_ingredients_side_effect/
I believe being downvoted because this is thoroughly covered in the thread. Suggest you read it all again.
Why is the scanning done on the device in the first place? Photos uploaded to Icloud are not encrypted (because the US government was apparently opposed to that idea), so why not do what Google and Facebook does and do the scanning once the image reaches their servers. What is the benefit in running the scan on the device?
> Why were you surprised?

It's rare to see Korean names mentioned in the news, yet alone when it's related to crime.
Makes sense, if you have a product where you can make a profit on the manufacturing, why would you stop supply. Intel never broke out Realsense in any public finical data, I wonder if the R&D was not profitable, and is not a core part of Intel's business so the new CEO decided to shut it down.
I'm not sure if you're talking about modules or C++ itself.
I am with you but have to see the other side as well.

I am SUPER sensitive to latency. When things are slow, it just feels broken to me.

But, I worked at a really successful company where everything happened in an Amazon Workspace and despite the annoyances, the place was productive and in particular, transitioned seamlessly to WFH with Covid. Seen a lot of other places like that.

So yeah it's annoying but you can't just look at the cons without the pros.
There are plenty of other 3D depth cameras out there, just not with the brand recognition of Intel, and now the quick and easy purchase of one unit at $200USD.
Whether Ariely is honest or not, he is for sure not stupid; and it would be very stupid for him to fabricate data, let alone be so sloppy about it, make it public (which is rare) and then agree to a follow up paper about how the results did not replicate. Sorry, but a guy as smart as he is would cheat more effectively than that. That does not mean he is without fault. I suspect his lab is way too big. I also checked out his schedule once and he was speaking all over the world with a crazy travel schedule at the same time that he was managing that giant lab, coauthoring many papers, and employing way too many research assistants and post docs. Even if the folks on his team were 97% great, that still leaves room for a truly bad or at least very sloppy apple in the cart at that research center. No idea how anyone could do any thorough quality control with that many moving parts going on at once. I do suspect it was a mess created at the insurance company, or perhaps it was some new kid at the lab. Or perhaps Professor Plumb did it with the candlestick in the dining room. I don't have a "clue" (for those that remember the board game "Clue"). I just don't see Ariely doing such a sloppy job of fabricating data for a paper he did not need. I am not saying he would never cheat at all (again I don't have a clue), just that if he had cheated, he would have been smarter about it.

The bigger issue is that just about all these star researchers end up with MORE MORE MORE disease, which is taking over academia. People are working on more projects, giving more talks and writing more papers with more studies with more moderators and more mediators using more data sources and more research assistants and more post docs while also trying to write more books and give more talks to more audiences. Sorry, but a mess up is inevitable with that many things going on. Still, I hope this does not turn into a witch hunt after one guy, because the truth is that mistakes like this likely happen to all the star academics who have overextended themselves. How could they not?
But still. Terrible security model, right?
Attacks never get worse over time.

It was quite literally less than 24h from "Oh, hey, I can collide this grey blob with a dog!" to "Hey, this thing that looks like cat hashes to the same thing as this dog!"

You really think this is going to end at this proof of concept stage?
Not sure how it works now, but back with GPM, you could get access to all the songs by purchasing the album on Google play. Some tracks just can't be played unless you pay for them.
They just brought his skin back by bringing down the reds and greens…
Wise (formerly TransferWise) has different meanings for "debit" and "direct debit".

Their "debit" option works the way you think. You give only your bank card number, expiry date, and CVV.

However, their "direct debit" option requires you to enter your bank debit card number and bank password into Wise's web form. It is not a redirect to the bank website. The URL says "https://wise.com/..." when you're asked to enter that info. Wise definitely gets your bank credentials.

They have yet another option called "bill payment" in which you log into your bank account yourself and do a bill payment to Wise (and giving your Wise account number).

Both the "debit" and "bill payment" methods look secure and acceptable. But Wise charges a considerably higher fee than with their "direct debit" method. And it always seems to take a day or two for the funds to appear in your Wise account with those other methods. They really want to encourage their "direct debit" method in which they get your bank login info.
3M over years of insider trading?
Bravo SEC, bravo. Slow clap.
Pensions at a Glance (2019)
Apple did this in such a myopic, I want to say almost comically stupid manner. Craig's interview in and of itself was the biggest indictment of technology companies one could ever hope for. Dude literally stumbles as he says "multi-step algorithm" as if the world is being graced by his bountiful excellence.

Can't believe this dude is running software at Apple.

The headline for all of this should be "We know what it does and we don't want it"
> For example, good luck pivoting mid-career from software engineering to professional hockey.

I think part of it is due to professional hockey employing only the top X% of players, with X really low. So even if you're top 10% it doesn't matter, at all.
There is this alternative: don't create a service that does something like this.
Who would downvote this?
In South Korea (began in 2019):

> It is standardised and the standards are freely available

Same.

> you still need to have an official "blessing" to actually access a production API endpoint (even for your own account)

Same.

> you need a legal entity that has some highly specific and entirely meaningless certificates that are hard (and potentially expensive) to get

Same though not entirely meaningless.

> you'll still need to negotiate access with each bank individually.

Not same.
Sorry, this is not even wrong.

The visual derivative is just a resized, very-low-resolution version of the uploaded image. "Matching the visual derivative" is completely meaningless. The visual derivative is not matched against anything, and there is no "original" visual derivative to match against.

If enough signatures match, Apple employees can decrypt the visual derivatives, and see if these extremely low resolution images look to the naked eye like they could come from CSAM. If so, they alert the authorities.. Given a way to obtain hash collisions, generating non-CSAM images that pass the visual derivative inspection is completely trivial.
> Specifically, only images categorised as "A1" are being included in the hash set on iOS.

Do we know that for sure?

Apple has changed their mind enough times in the last week and a half that I'm convinced they're in full on defensive "wing it and say whatever will get people off our backs!" mode.

You can't read the threat modeling PDF and conclude that it was run through the normal Apple document review process. It reads nothing like a standard Apple document - it reads like a bunch of sleep deprived people were told to whip it up and publish it.
A crash course on our boundlessly bizarre universe
You forgot the (non-linear) increased risk of getting caught with each iteration.
thats a fucking nightmare haha
I agree CSAM isn't likely to be pervasive in the photo libraries on iOS devices.

Android does not do on-device scanning, but Google does scan photos after they are uploaded to their cloud photo service. It's not on-device scanning, but the effect is functionally identical: photos that are being uploaded to the cloud are being scanned for CSAM. The only real distinction is who owns the CPU which computes the hash.

I doubt it's the FBI pressuring Apple. My suspicion is it's fear of the US Congress passing worse, even more privacy-invading laws under the guise of combating CSAM. If Apple's lobbyists can show that iPhones are already searching for CSAM, arguments for such laws get weaker.
> Capitalism has delivered a free one that is arguably very, very good. Linux, if that's not obvious :-) Who could have predicted that?

Linus was at a free public university with free healthcare and the state supporting his living expenses when he created Linux. About as far from capitalism as you can get.

> Capitalism also produced very high quality software that goes with it, for free.

I like capitalism and defend it often, however I think that investment matters, regardless of whether it comes from the state or private sources.

> It's possible we would have had something better than the internet protocol.

Yes, or it’s possible we’d have a closed system run by a giant company.
Here's the link to the open letter from the policy group (PDF): https://cdt.org/wp-content/uploads/2021/08/CDT-Coalition-ltr...
another one was BLIT https://en.wikipedia.org/wiki/Blit_(computer_terminal) https://www.youtube.com/watch?v=Pr1XXvSaVUQ also mentioned in The History of Unix, by Rob Pike https://www.youtube.com/watch?v=_2NI6t2r_Hs

then there was Star
Agreed. Unfortunately requirements for long term management / large scale deployment aren't a priority until a tool is widely adopted, which is best achieved by keeping it simple. An interesting trade off...
They couldn't possibly be using the "other perceptual hash algorithm commonly used for this stuff," PhotoDNA, could they?

I mean, hopefully not, but at this point, it's reasonable to call just about everything into question on the topic.
This is basically the main reason why I built uFincs (https://ufincs.com/) without any sort of bank integration. As a Canadian myself, the privacy implications of letting a third party like Plaid take my bank password to get my data were, indeed, rather sketchy. I've been looking forward to the day that open banking gets pushed here, so this is definitely good news that uFincs (and every other personal finance app) nmight eventually get some secure bank integrations.

Although, knowing how these things usually go, I'm sure the "2023" target is a little optimistic...
> The CSV format itself is notoriously inconsistent

So what? The format is so simple that the inconsistencies doesn't even matter and hell the format can be inferred from the data and that can even be automated. Unlike JSON/XML, most software can automatically make sense of CSV; JSON needs a developer to understand it to transform it into workable data.

> CSVs often begin life as exported spreadsheets or table dumps from legacy databases, and often end life as a pile of undifferentiated files in a data lake, awaiting the restoration of their precious metadata so they can be organized and mined for insights.

CSVs are the de facto way to export spreadsheets and if you have to do this then the problem are that you are still using spreadsheets in your data flow, not CSVs. Same goes for legacy systems.

Also CSVs comes from places where having more sophisticated data serializers is near impossible and the time to code, compute, parse and analyze CSVs is trivial compared to any other format out there.

> I’ve spent many years battling CSVs in various capacities. As an engineer at Trifacta, a leading data preparation tool vendor, I saw numerous customers struggling under the burden of myriad CSVs that were the product of even more numerous Excel spreadsheet exports and legacy database dumps. As an engineering leader in biotech, my team struggled to ingest CSVs from research institutions and hospital networks who gave us sample data as CSVs more often than not.

Of course if you are working in biotech then you'll work with scientists (horrible coders most of the time) and legacy systems because it's a domain that's very adverse to change that might break stuff. And it's not the CSV format's fault if it's used as the wrong tool for the job.

> Another big drawback of CSV is its almost complete lack of metadata.

Again, emphasis on the right tool for the job. For simple tasks metada are not needed.
Oof that hurts

Have you considered using IBKR to do the same sort of automated order execution, but without the AUM fees?
I've been thinking about this quite a bit recently. I essenrially agree with you, software engineering culture/habits is nowhere close to actual "engineering". One suspicion I have is that this was largely enabled by the fact that software companies, in contrast to most hardware businesses could denounce liability for their products.

The thing is, because software companies have become the most successful businesses in the world, SE principles (move fast, break stuff) are now viewed as "being innovative" and necessary for success. So they are increasingly being applied to other engineering disciplines.
iCloud backups are not scanned.

Also, what apps are you talking about?
oops typo on prior comment. I meant to say I do NOT think he is blameless. Just not a fraud either.
He doesn’t like maglev either because it’s extremely expensive compared to high speed rail and cites the Shanghai airports operating loss as an example. It also has similar infrastructure requirements as a monorail: a more complex platform than traditional rail.
The best use I have seen for Citrix et al is in environments where multiple users will use the same computer during the day. Especially useful with RFid authentication.
> Android doesn't do on-device scanning, but Google does scan photos after they are uploaded to their cloud photo service.

So did Apple, and pretty much all cloud hosting providers.

This, on device, scanning is what's new, and very out of character for Apple.

> If Apple's lobbyists can show that iPhones are already searching for CSAM, arguments for such laws get weaker.

I'm not aware of any big anti-CSAM push being made by Congress. CSAM just isn't really a big issue in the US, the existing laws, and culture, are pretty effective already.
It is not common for people awaiting trials to be on social media nor is it common for most CEOs to do anything on social media other than bland press releases.

Do you even know which ones she deleted? I can't find a LinkedIn which I assume she was on. I doubt she ever had a Instagram as CEO in 2015.
Google Voice has stopped forwarding SMS
At the office c++ fans are using modules to fight back against the vast simplifications go, rust come with wrt to builds, dependency management. Alas modules are a step forward for c++ ... But ...

* It'll be decades before our existing c++ code base is converted to modules meaning same cmake, dpkg, and all manner of nonsense ...

* clibs used by c++ are not impacted

* Modules are unlikely to help for os headers

I'm trying to move to go when I can and pure rust otherwise. After many years of c++ build hell on top of legion internal c++ code .. building has become a cosmic pain in the butt.
For better or worse, opaque server-side CSAM models are the norm in the cloud photo hosting world. I imagine that the consequences would be roughly the same as if Google's, Facebook's or Microsoft's "secret classifiers" were leaked.
As a French, I'm really proud of my country. I don't know if everyone in the world could use nuclear power, but it seems to be worth the price, at least to reduce CO2 production.
Ahh true you didn’t write those words. I didn’t notice when you stepped in.

The person I originally replied to wrote those words. You just stepped in at some point to argue on their behalf.
An induction stove is pretty much the same thing as a kettle for heating water. The OP post is against kettles because they require AC power which their solar panel and battery can not sustain.

But somehow gas doesn't have to be accounted for and just comes for free.
Regulation E does not waive consumers' liability for unauthorized transactions; it merely limits the amount of liability. The liability limit increases sharply if the consumer does not report the fraud within 48 hours.
All the more reason to handle it sooner when its less painful to do the right thing.
The market for scientific software is a bit iffy. Scientific software also needs to be super super flexible since the users are, somewhat by definition, not doing something that's been done before. Hard market.
I actually do think a good solution would be to give people money - yes.

But I don't see how that is relevant to the study on food prices. People who are struggling economically would obviously benefit the most from lower food prices.
If voting changed anything, they'd make it illegal. <= Emma Goldman
She deleted her Facebook. There’s posts of her and her husband that are in articles that are new, but doesn’t say the source of where they came from.