skysight-inc/HackerNews huggingface dataset:
I don't think it's reductionist at all. It strikes at the core issue. One thing the study says is that immigrants and natives take different jobs. Sort of the "someone has to mow our grass" argument. But someone would have to mow the grass either way and it's people who cannot find other work who would fill those jobs. That's why the low-skilled immigrants are taking them. That and the apparent willingness to accept lower wages.

The US isn't simply two groups of people: low skilled people from Central America and rich-ish middle class people. We have all types of people native born. We have our own legion of low skilled people who need work.

I'm extremely skeptical of any studies purporting otherwise because it smacks in the face of what we've been seeing, let alone the obvious outcome we'd expect. These sorts of "don't believe your lying eyes" studies that suggest, no no, keep going along this path because it's having no impact on your life hold no water with me because it's quite obvious that reality is not matching up with what they're suggesting.
how were these mini brains made?
> They rejected it for (allegedly) requiring it.

Yes. You are allowed to use this API, but it is a very risky API, and people will not feel comfortable allowing it. Apple wants people to feel comfortable and safe using their device, and if apps can randomly force you to turn on unsafe APIs, that is ruined. Therefore, you are not allowed to require accesses to protected services to function.

It is a very good rule for users.
Multiplying two 32-bit numbers yields a 64-bit result down on the CPU instruction level, so the type conversion is basically built in, details may differ by CPU, but here's the vanilla x86 multiply which spreads the results over two registers:

https://c9x.me/x86/html/file_module_x86_id_210.html

...so the compiler could even drop the right-shift and instead just use the register where the upper half of the result is stored.
How can you use it for targeted attacks?

This is what would need to happen:

1. Attacker generates images that collide with known CSAM material in the database (the NeuralHashes of which, unless I'm mistaken, are not available)

2. Attacker sends that to innocent person

3. Innocent person accepts and stores the picture

4. Actually, need to run step 1-3 at least 30 times

5. Innocent person has iCloud syncing enabled

6. Apple's CSAM detection then flags these, and they're manually reviewed

7. Apple reviewer confuses a featureless blob of gray with CSAM material, several times

Note that other cloud providers have been scanning uploaded photos for years. What has changed wrt targeted attacks against innocent people?
It's artifically scarce in North America. Houses are being used as investments and are often sitting empty as, for instnace, the owners (or the foreclosing bank) don't want to deal with renters.

https://www.huffingtonpost.ca/2017/02/11/empty-homes-canada-...

https://247wallst.com/housing/2019/09/30/there-are-over-17-m...
Isn't it weird how it is weaponized against political enemies but the one person everyone knows did engage in exploitation was protected for decades?
Agreed. This attack still has consequences for people but they will not run into any legal trouble as far as I'm aware.
Isn't it "five and sixty thousand five hunderd six and thirty"? At least that's how it is said in Dutch, and I believe German works the same way...
Millions of Web Camera and Baby Monitor Feeds Are Exposed
I think you overestimate how much companies care about their existing employees. If firing 90% of them is significantly more profitable that’s what their going to do. Solar is so cheap largely because it needs very few workers per GWh so they can fire people.

I personally doubt Fusion will be significantly cheaper than Fission let alone coal any time soon. But, if it happens their not going to care about their workforce. That said, fission > fusion isn’t going to require more training for most of the workers. In many locations they would both have identical cooling towers for example.
Web Scraping with Selenium and Python
The human reviewer would be able to check against the exact image that generated the hash in the first place. Taking another completely unrelated image and perturbing it would be immediately obvious.
You're holding the iPhone in your hand. You can inspect everything it does, the only thing that varies is the level of difficulty of inspecting it. Obfuscation doesn't work.
More like "quit work" as in quit a regular '9-5' permanent employment. I've known (single, child-less) people who have managed to go a long time by repeatedly working intently a few month at whatever temporary job shows up (fishing industry, bar/restaurant work, construction, warehouse work etc.) and then taking several month off to do whatever.
I totally hate people who repeat a phone number back to you, but with different digit grouping. How the hell am I supposed to know if that's the same number!? Just repeat it as I said it already...
Pumpers, Dumpers, and Shills: The Skycoin Saga
You are insane.

1. Dumping iOS ecosystem and pick what? You think Android is better and won't have this? iOS is the strongest mobile system in terms of privacy protection available to this date. Hell, the FBI doesn't even need to ask Google to decrypt an Android.

2. Theoretically you can target attacks against anyone. It is just a matter of efforts. If you are a political target, they can already implant spywares around you to track and monitor you. They don't even need to break your phone.

3. If you are not possessing CSAM materials and not one of those targets, then you are not worth the efforts to be attacked or monitored. They don't care. And to be honest, this is the best(might be the only real) way to stay private.
Do you have access to darknet child pornography trading networks? I don't.
So there’s an office somewhere with computers full of illegal child porn that people are staring at and comparing your photos to?

There’s some irony in that.
Have you tried induction stove? It loses almost no heat to outside of pot and that makes palpable difference.
Funny, with the rise of MFA various Authenticator apps are installed on our phones. Some applications (I'm looking at you, Outlook) will randomly shit themselves and request I hit a button in the app a few times per day, otherwise I'll not receive emails or meeting requests. I can easily see this completely defeating the purpose of MFA by numbing people into automatically accepting these notifications.
In real life, would you also respond to a trivial personal anecdote with moral chastising?
Does the discussion have to take a form of geopolitical virtue signalling anytimes it grazes a big 'bad' event like a war?
Is it ok to talk about mundane things, even in the shadow of the colossal international storms that surround us, without having to make a performance of fighting their shadows at all times?
Chapter 2 “saying no” of “the clean coder” book has the best treatment of this topic i’ve read. It’s just the most realistic based on my experience.

He also addresses the common push backs - e.g. “you don’t understand, i can’t say no in this position right now”
as an example of successful capture of governmental power by private individuals - a city which is basically a fiefdom run by one family and their friends. They had population of something like 50 people, and new people who tried to settle there were actively not welcomed (by the city police). According to wikipedia it looks like some changes were forced upon the city very recently though (if i remember in response to this city scandals CA was mulling 150 people cut-off for incorporation or something like this):

https://en.wikipedia.org/wiki/Vernon,_California#Recent_hist...

"In an effort to modernize the city and stave off the potential threat of disincorporation in the future, for the first time in the city's history Vernon has opened its doors to new residents from the general public."
I hope there's nothing a lawyer can do. It should be legal to publish public pictures of people next to the titles of books they didn't write. Maybe if it was defamation but I don't think that's her concern here - that people will treat her badly because they think she's black or religious or American. Not publishing a book with your real name would be a good start to not having uncomfortable things about your book or name shown on Google.
"It happens relatively rarely. Nowhere near enough for this to be a concern."

You are too dismissive. Not every fire is created equal and putting out battery fires is much harder than putting out gas/diesel fires.

Also, EVs sometimes go up in flames when at rest, which, short of deliberate arson, is not a failure mode in ICE cars. ICE cars will generally catch fire underway, far enough from other cars, thus limiting the damage to one car. (A deadly exception might happen in a tunnel.)

You might have seen this video from China.

https://www.scmp.com/video/china/3136069/electric-bus-bursts...

If something like that happened in a car park full of EVs, for example, underneath a shopping mall, the consequences would be pretty bad.
Dog ticks?
Company Is Selling $4M of Product per Month with Zero Ad Spend
Well you would still need to learn Pytorch/tensorflow and define your network there, you then export it to ONNX format for deployment.
How so? Most people wouldn't claim it's "unethical" to be addressed by a clerc in context of what they looked at in a store - only in that case you are actually required to interact.
This is an interesting point. I haven't really thought about the connection between intuitionistic logic and three-valued logic before.

They are different logics in general though. 3-value logic is more like the A is True, False or None/Unknown.

Another interpretation one can put on intuitionistic logic is game semantics. Here a statement is true if the verifier has a winning strategy to prove the proposition. It's false if the falsifier has a winning strategy. Then intuitionistic logic corresponds roughly to the idea that some games don't have a winning strategy for either player.

So here (and in the proofs example I gave above) is that we get an idea of "neither true nor false" that is represented by the lack of an explicit rule for concluding truth or falsity in some cases.

In contrast, 3-valued logic gets at the idea of "neither true or false" by introducing another symbol (e.g. "None" or "-1") together with new operators that operate on sentences with that symbol.

So we get one from classical logic by deleting something (namely the law of the excluded middle) and the other by adding something.
It's clear from the post.
Ah right. My mistake. It would be five and sixty thousand ... Yuck!

I guess this is exactly what we're talking about---mistakes because you are not natively familiar with a particular system, and then you miss the non-base case. For me, I got the tens digit right but not the ten thousands digit.

In the memory case, it's knowing to change a pointer location because an address to a 32-bit value will start or end at a different address than a 64-bit value.
JMAP is a server protocol, so that the account's email server should provide JMAP endpoint instead of (or in addition to) IMAP, SMTP or ActiveSync. JMAP has almost no support at all, so if you are connecting to an email server there is a great chance that the server supports IMAP, fewer servers support Exchange ActiveSync and almost no server (except Fastmail and maybe some others) support JMAP.

EmailEngine on the other hand is not an email server but more like a reverse proxy, it takes REST commands from the client and sends IMAP/SMTP commands to the account's email server. So for the email server it looks like that the client is speaking IMAP/SMTP and for the client it seems that the server is speaking REST/JSON.

Additionally EmailEngine performs tasks that are hard to do when dealing with a regular IMAP server. For example it tracks changes on the account, so if something is added or deleted, then EmailEngine sends a webhook notification for it.

If you are interacting with an IMAP server directly then usually you see that a folder has fewer emails stored in it than during the previous check but there is no indication which messages were actually deleted.
Yes, and so does every other major cloud service provider. The working conditions of these people are notoriously difficult and should be the subject of attention.
> 7. Apple reviewer confuses a featureless blob of gray with CSAM material, several times

A better collision won't be a grey blob, it'll take some photoshopped and downscaled picture of a kid and massage the least significant bits until it is a collision.

https://openai.com/blog/adversarial-example-research/
It is, and what a wonderful example of how endianness can cause mistakes.
Thank you for clarification!
This happened to me also. Google's knowledge graph was conflating me with two other Tim McNamaras. I was surprised that they've actually fixed it.
Is it communism where workers rule, or are there any other - unknown until now - means to ensure rights for unprivileged?
Maybe the best idea is for a sufficient number of people to replicate the hashes with collisions from the CSAM database and make copies of photos with nothing in them like this one and just let Apple deal with it. Maybe it can have text too.
I completely agree with you.

Actually, after replying to the post above, I have searched the Wiesel report. While I did not have the time to study it now, the causes of death among those sent to concentration camps are listed as "typhus, hunger and cold".

It is also said that most of these occurred during the first year, after which there was an increased supervision of the camps, which caused an improvement in the living conditions.

Of course this is criminal negligence and it should have been predictable and preventable.

However, it is not really a case of "deliberate policies", because the primary purpose of the criminals was not to kill the deportees, but to become rich, regardless whether this required making other humans to suffer or even causing their death.
&LOL;

The early mastery of swearing I picked up between backseat driving (that is, listening to my Scottish mother's running commentary on other drivers) and my spongelike absorption of Canadian broadcast media, earned my parents a stern reproach from the ultra-bourgeois kindergarten they sent me off.
They have been scanning Gmail for a while using this, as nearly every provider does : https://en.wikipedia.org/wiki/PhotoDNA
Nonsense comment, there's plenty of evidence and it's all public.
Hello! I made a few videos that explain how incremental Reading works:

1 Topics: https://youtu.be/1ZNsn8IL-TM
2 Incremental Reading core analogy: https://youtu.be/Wme2RLm1jWY
3 How Incremental Reading makes micro learning easy: https://youtu.be/piqq1kwYL5s

Spoiler alert: basically incremental reading is like using save states when playing a game with an emulator. As one might save their game state before and after a challenging section in a game, when you find a difficult to understand/explain idea, incremental reading makes it easy to pause and synthesize that idea before moving on. Yes at the end also it’s good to summarize the ideas to yourself and simplify that explanation, and then use SuperMemo to memorize that explanation. Incremental reading is hard to explain why it is so useful, I’ve been using SuperMemo every day for 15 years and I still feel like I am learning new things
Not quite.

Children born in France only get French citizenship from birth if at least one parent either is a French citizen or was born in France. Otherwise, there are various processes for them to acquire citizenship later in life if they spend enough of their childhood in France.

In contrast, almost any child born in the US, regardless of the nationality or immigration status of the parents, is a citizen automatically from birth. The only exceptions are children of foreign diplomats and (hypothetically) children of members of an invading army. Even if the parents are visiting as tourists and the child leaves two weeks after birth and never returns, it's still a citizen.

British law is somewhere in between the two- a child born in the UK is a citizen if at least one parent has "settled status" (in other words is a citizen, permanent resident, or otherwise has an unrestricted right to live in the UK).
You:

> the hashes are on the device I understand and it’s not going to be that difficult to extract them.

----

A Review of the Cryptography Behind the Apple PSI System, Benny Pinkas, Dept. of Computer Science, Bar-Ilan University:

> Do users learn the CSAM database? No user receives any CSAM photo, not even in encrypted form. Users receive a data structure of blinded fingerprints of photos in the CSAM database. Users cannot recover these fingerprints and therefore cannot use them to identify which photos are in the CSAM database.

https://www.apple.com/child-safety/pdf/Technical_Assessment_...

----

The Apple PSI Protocol, Mihir Bellare, Department of Computer Science and Engineering University of California, San Diego:

> users do not learn the contents of the CSAM database.

https://www.apple.com/child-safety/pdf/Technical_Assessment_...

----

A Concrete-Security Analysis of the Apple PSI Protocol, Mihir Bellare, Department of Computer Science and Engineering University of California, San Diego:

> the database of CSAM photos should not be made public or become known to the user.
Apple has found a way to detect and report CSAM offenders while respecting these privacy constraints.

https://www.apple.com/child-safety/pdf/Alternative_Security_...
If you're in close physical contact with a person (like at a job) you just wait for them to put their phone down while unlocked, and do all this.
It feels like double-counting to me:

> pay all my healthcare contributions for a year up front

Is fine by itself, at least assuming you then get a discount on the PAYE taxes that you’re essentially pre-paying here.

> If I lose my job I have a few weeks to find a new employer (who will have to be willing to pay for a visa transfer) or I have to leave the country.

Paying to transfer the visa seems a bit strange to me (though I’m conscious of my own naïveté), but otherwise this is also fine by itself.

Both together? Not so much.
This is so overblown. Scanning images for CSAM seems to be a requirement followed by Facebook, Google, Insta and Snap already [1]:

> To put this in perspective, in 2019 Facebook reported 65 million instances of CSAM on its platform, according to The New York Times. Google reported 3.5 million photos and videos, while Twitter and Snap reported “more than 100,000,” Apple, on the other hand, reported 3,000 photos.

ALL of those services are already scanning all your photos server side implying complete access to the photo for other purposes.

Apple went above and beyond what anyone else does and moved the scanning to be client side! I can't believe they are getting shit for this. They are doing MORE than anyone else to protect your privacy, while still complying with federal laws. If you object to this, you should object to all cloud based photo storage services, and with the federal laws. Apple not only made it more private, but also transparently announced what they do and they are getting shit for it.

[1] https://www.engadget.com/apple-child-safety-csam-detection-e...
I don't think that is far away either. I won't be surprised if that is achieved within the day, if not sooner.

Also, generating images that look the same as the original and yet produce a different hash.
More par for the course, I’d say.
Since it concerns iCloud, it probably depends on your Apple ID region. But I don't think Apple has stated anything conclusive.
Is this counts?

https://www.cbsnews.com/news/tip-from-google-leads-to-texas-...
It could, but IMO it's a very low odds bet. There are fundamental physical reasons why fusion reactors will struggle to compete. Fusion is a technology that IMO persists on cultural momentum, a meme technology that is part of the future because that's a story that we've been told since the 1950s. I think the most likely end will be that controlled fusion will go into a similar niche as dirigibles and vacuum tubes as a retrofuturistic anachronism. It will be recognized as something that used to be part of the future, but no longer is.
It's possible that some people think Google will hire them this way. They probably hear about the great salaries and benefits that programmers get, and think they can get it too if they just try hard enough.
Remains to be shown whether that is possible, though.
> 6. Apple's CSAM detection then flags these, and they're manually reviewed

Is the process actually documented anywhere? Afaik they are just saying that they are verifying a match. This could of course just be a person looking at the hash itself.
Top Enterprise Content Management Trends in 2021
Yes. That is called NCMEC in the US and it is a core aspect of how this whole process works.

If you don’t understand the details of this, I’ll recommend this podcast episode which sums it up and discusses the implications https://atp.fm/443
> - even if the child tried to analyse it rationally, what % of prospective college students have the financial literacy to do that successfully?

One of the MANY reasons I find that federally backed student loans should be stopped asap.
> 7. Apple reviewer confuses a featureless blob of gray with CSAM material, several times

Just because the PoC used a meaningless blob doesn't mean that collisions have to be those. Plenty of examples of adversarial attacks on image recognition perturb real images to get the network to misidentify them, but to a human eye the image is unchanged.
Why is this unethical? If you go into a shop, can’t the shop keeper see what you’re looking at and talk to you about that item specifically? Do shops not have surveillance cameras that record your every moment?

I start to see ethical problems when they start selling or sharing the personalized data they collect with other parties, or start tracking you when you’re not on their site.
I'd love to visit all of the British Overseas Territories at some point, although I doubt I'll cross all of them off my list as a few of them are effectively off-limits to civilians.
Of course the database is public, it's on every iPhone!
something that can easily be avoided

How? Just working in my garden for an hour or two and I have a a good 1 in 4 chance of getting a tick bite.
Linked Data Uptake
Off topic but I respect that you answered your own question, even when the answer didn't fully line up with your previous conjecture.
From what I can tell, Google engineers would actually write `isObjectDisplayed("Human")`
It's been done for image classification.
Data grabbing for the general public, "intensely private" for others:

https://bits.blogs.nytimes.com/2007/09/13/tracking-the-googl...
I don't think that's weird.

Those people are not political enemies, they're allies for whatever regime and their support is important.

Better to keep someone powerful in your pocket than to oust them and let someone uncorruptible or uncompromising assume the power vacuum.
Then, with all due respect, the attacker could just download actual CSAM.

> If your adversary is the Mossad, YOU’RE GONNA DIE AND THERE’S NOTHING THAT YOU CAN DO ABOUT IT. The Mossad is not intimidated by the fact that you employ https://. If the Mossad wants your data, they’re going to use a drone to replace your cellphone with a piece of uranium that’s shaped like a cellphone, and when you die of tumors filled with tumors, they’re going to hold a press conference and say “It wasn’t us” as they wear t-shirts that say “IT WAS DEFINITELY US,” and then they’re going to buy all of your stuff at your estate sale so that they can directly look at the photos of your vacation instead of reading your insipid emails about them.

https://www.usenix.org/system/files/1401_08-12_mickens.pdf