skysight-inc/HackerNews huggingface dataset:
From the article:

> Dietz said the interior of the shells were coated with "antibodies specific for the hepatitis-B virus. You can think of the shells as a generic platform; depending on your selection of inner coatings, you can 'program' them to be specific for a user-defined target virus."
I don't think "All user data on device and in the cloud is not scannable for CSAM or retrievable with a warrant" is a tenable position in the current US political landscape, and even less so in other countries.

And my point is that if the government wanted a dragnet they could just legislate or secretly order one. Just like they have done in various forms over the last 20 years. And Apple might not even be allowed to tell us it is happening.
Do you know how many billions of pictures of guns and drugs have ever been taken?
On a macro scale this is happening in every field in America.

Any knowledge worker job that doesn't need to be done in person can be outsourced to the billions of people in the rest of the world. Radiologist, Accounting, Law, Animation, etc.

What is the value of a U.S. Hacker News moderator in the valley, for example, over a smart Croatian or Latin American person who will work for a fraction of the price?

Many peoples advantage is geography and connections, not talent or skill, which there is no shortage of amongst billions of people.

The ultimate result in my opinion, when no job is safe from outsourcing, is going to be the decline of wages and the middle class in America.
I don't know enough yet whether to care about the CSAM issue, but I recently switched away from apple for a more ergonomic-but-portable setup where I can use a computer without wearing eyeglasses and save my neck from looking down without dealing with secondary keyboards, second monitors, etc.

This led to finding a combination of:

- An intel tablet - specifically HP makes one called the Elite X2 G4 (now G8) which has a 3k2k 13" display. Running Ubuntu which isn't perfect but tolerable - I keep a list of workflows replacements (primarily from mac to linux) here: https://docs.google.com/spreadsheets/d/148zTJUwfVv9xfDcpSoH3...

- A 'tiny tower stand', which allows one to prop the tablet close to the face. Other stands (e.g. roost) don't enable this. It's been sold out this year but hoping they come back.

- A nutype f1 keyboard (wired usb-c or wireless), and an apple trackpad (wired lightning or wireless). The combination still fits within the footprint of the tablet, eventually want to make a case for it for easy carry.

Again the motivation is finding something more ergonomic and portable enough to use at another desk. Do I recommend it? Depends on your intentions and time available. Mine are just around exploring ergonomics.
> The operation of the gas pump itself pollutes the air with toxic fumes, to the point where CA already bans their installation 300 ft from sensitive uses (e.g. schools and playgrounds) and even that may not be sufficient to actually prevent health hazards.

That's another result of fuel consumption, not the construction of new gas stations. The toxic fumes aren't reduced because a driver goes an extra couple minutes out of their way to use one of the existing stations.

The goal is to reduce automotive emissions. Gas stations don't incentivize automotive emissions - it's the other way around.
In theory? Yes. In practice against a large company like Google? No, not without several years and tens of thousands of dollars (at minimum) to sink into it.
I think they have zip-tie restraints for wrists and ankles, but I don't know if they have anything available for muzzling.
People have been saying this for 40 years and we have seen time and time again, as engineering gets “easier” by 1 click it makes each individual engineer 5x more effective, but it only expands the total pool of people available to do the work by 20%. The effect that dominates is that by making work more efficient/productive, there are many many more places where engineers can be a net value add to business metrics. It’s a textbook case of jevons paradox applied to labor markets.
In the US having access to a car is much more of a necessity for work, shopping, and travel than it is in Europe due to suburban sprawl and lack of public transportation. I can't say it's a right, but it is a need for practically everyone outside of dense urban centers.

The average EV costs $19k more than the average gas-powered car. This gap is closing but for the time being only upper-middle to upper class Americans can switch to EVs, so making gas artificially scarce/expensive will disproportionately affect those who can't afford to make the switch.
One thing nobody brings to the front about salaries difference:

Eastern Europe is, well, in Europe, and there are a lot of engineers willing to immigrate there.

Good English is not as much of a critical requirement in EU, and, in general, more big companies there are ok hiring foreign workers using their own language at the workplace.

Once a person is in EU, he becomes mobile withing a few years.

EU tech sector has a wider, more homogenous, and liquid labour market, despite the national differences.
I think you should do this as a BytesIO wrapper with transparent encryption during read/write operations, not an in-memory image encryptor.

And by "I think you should do" what I mean is "IO encryption already exists so you shouldn't need to do anything" (see https://developers.google.com/tink/encrypt-large-files-or-da... for one example). But if you really like making things yourself, it would be very easy to just not use PIL and numpy and read blocks from a stream into a small R/W buffer.

1) Encryption has nothing to do with images. If you encrypt arbitrary data from the file system then you don't need PIL or numpy.

2) Right now if your decompressed image doesn't fit in RAM, then your code dies horribly.

Using the same system interfaces and same encryption without the reliance on numpy or PIL, you could accomplish the same feat but safer, faster, and more universally en/decrypting raw data from a chunked IO stream instead of treating images as special somehow. It will work against all files and will never overflow available resources. PIL can't even decode all image formats.

Leave the image decoding part to the code that actually does something with images.
That's true, one way to put it is that traditionally non-cryptographic hashes are supposed to prevent accidental collisions, while cryptographic ones should prevent even collisions on purpose.

But hashing is used in many places that could be vulnerable to an attack, so I think the distinction is blurry. People used MD5 for lots of things but are moving away for this reason, even though they're not in cryptographic settings.
> The NFT, which was auctioned over the course of three days, included digital collectibles packaged as a 'loot box' that were created in partnership with developer Tafi, a creator of custom 3D content for avatar and emoji systems.

Ok, so a new money laundering system has been used to make loot boxes move outside of video games, where this was all for a donation to the Special Olympics on its face, but really as a package to be split up on a secondary market.

I want off this stupid ride.
When are we going to stand up and start treating Russia as an openly hostile belligerent nation engaged in clandestine warfare against us?
Having taken SSRI's before, and experienced their withdrawal symptoms, I'd almost rather have COVID.
for my understanding its the combination of shell size and coating which does the targeting.
The OP might also want to avoid a curt case to protect their privacy.
Sure, I get that salaries are higher in the US. Overall quality of life though? I'd take europe, personally.

My salary is 50% lower than my SF-based colleagues but my quality of life is amazing. Large house, green open spaces, my taxes pay for high-quality healthcare and a _relatively_ equal society.

I'm far richer here, in many ways, than I would be if my bank account were a bit larger.
That’s ridiculous. You don’t need to believe yourself “judge jury and executioner” to say that someone who sends (death?) threats to innocent rape victims is responsible for the consequences. If you feel otherwise, fine, but if you can’t blame them for lack of being judge jury and executioner then you certainly can’t blame Google either
How do you know that a program does this, without running the binary? I'd say that requires expert knowledge not available to most people.
From what I understand, a true addiction is defined by if it's pathological or not, and the thing is no one is out on the street prostituting themselves for coffee, cigarettes, or candy... but they are for crack, heroin, meth, etc.
The could, but in general you would prefer to wire them in parallel so that nobody notices when one burns out - it just gets a little dimmer.
Those crew members were heroes.
So some underpaid contractor reviewing "visual derivatives" that may or may not be CSAM completely prevents governments from misusing this in your mind?
> use the items aboard flights designed to keep flyers at their seats

> there are designated items onboard that may be used

Burying the lead here. What are these items?
In France (and probably in other European countries), private health insurances from employers are complementary to the government health care and don't replace it. That's why it is much cheaper. And so even highly paid professionals still use the government paid health care.
Moreover, if it wasn't the case it would make the national health care system a lot less efficient.
What else are you supposed to do with such people? There are a certain number of problem people in the human population who will need forcible containment at some point.

They exist. Some people will pretend they don't for political and marketing reasons, but they exist.
I've got your point already before and I think it's valid.

That's why I've formulated my "definition" carefully:

> the validity of an email address when someone shows you one

It's of course not a "definition" someone could write down into a spec. But It's by far the best "informal validity check" in practice. It checks whether an email address is currently valid. You practically can't do more anyway!

The "formal validity" of an email address changes with time nowadays as I've pointed out: It depends directly on the formal validity of the host name part which can change over time given the fact that the list of TLDs changes over time (which wasn't the case at the time those specs have been written; fun fact: there is more than one spec, and they're contradicting each other).

To add on that there are two more important aspects: Firstly an email address you can't send mail to is mostly worthless in practice as it can't be used for its primary purpose. Secondly even perfectly "valid" addresses (by the spec) aren't accepted by a lot of parties that claim to handle email addresses! I guess a lot of systems would for example refuse an address looking like "-@-", wouldn't they? But it's perfectly valid!

http://sphinx.mythic-beasts.com/~pdw/cgi-bin/emailvalidate

http://www.ex-parrot.com/~pdw/Mail-RFC822-Address.html

https://stackoverflow.com/questions/5090272/can-anyone-expla...

We're moving in circles by now…

My initial argument was that claiming that it's "easy" to validated email addresses is wrong in multiple dimensions. In fact it's one of the more complicated questions out there (given the tragedy of the specs).
Yes. You will be force-fed antidepressants. /s
Google has been scanning photos for CSAM for... what, almost a decade now?

Also, as an iPhone user, contrary to the recent Hacker News fight, I actually view this CSAM scanning with a sign of hope, because this hints that we could get end-to-end encryption on iCloud Storage. The CSAM scanning is rumored to be just a prerequisite to get the government to shut up with their biggest critique of E2E, so that Apple can then turn it on.

If I can get E2E storage from iCloud but accept CSAM scanning on my device to satisfy the law... I'm OK with that choice. You might not, in which case, Android (and I'll probably buy a backup Android phone "just in case").
It didn't even last a week.

Introducing the people asking us to trust them with the responsibility of mass, automated crime accusations.
The world is so crazy, I'm just grateful that the passengers were not arrested for assault, or some other bullshit charge, simply for taking their fate in their own hands and restraining that asshole with available materials.
I suppose you can argue that these knowledge panels are uniquely bad. But any uncommon name that you share with someone who is plausibly you on cursory examination has the same problem--regardless of search provider. If a potential employer or date turns up "your" criminal history, especially for the "right" age range and location, a lot of people will close the browser and move on.

I'm not sure how you fix that.
> Powered by a higher-level (than C++) language preferably.

Yet C++ allowed them to write literally all that OS in a ridiculously small amount of time.

Anyways, with Qt support (https://github.com/SerenityOS/serenity/pull/9362) you can likely soon use Qt Creator for your RAD needs.
12V has been standard in auto/marine for quite some time. There are plenty of consumer items that already run on 12V.

Power hogs like refrigerators, window-AC units would no doubt still run on 110/220.

But I already have mixed voltage AC in my home: otherwise 110V but purpose-placed 220V for electric stove/oven (in kitchen) and electric clothes dryer (in garage).

In my perfect future only those high-current outlets would remain — the rest of the house would have 12V plugs and lighting.
This isn’t a zero-sum game where 1 remote job gained equals 1 local job lost, though. Demand for good engineers still exceeds the available supply, in my experience.

Rather, I see remote work as a sort of leveling of the playing field. As the location advantage is diminished when it comes to compensation, the pressure starts to gently push everyone’s comp toward the median. Highly paid people might see some downward pressure but the underpaid people will start to see some upward pressure.

Silicon Valley jobs aren’t going away, though. In-person will always be in demand.
Probably not.

Geopolitical naming of maladies carries unnecessary political baggage that can be unhelpful in root-causing a disease.

(Perhaps more importantly, they often prove historically inaccurate in hindsight. Spanish Flu didn't originate in Spain; Spain was the first place where news was able to report on the disease because they weren't under a wartime press embargo).
Many of us have been at the sharp end of a large company's supposed "human review" process when it comes to account lockouts, invalid abuse reports and invalid accusations of breach of terms of service. It simply does not work for too many and leaves us with little or no redress; it is a completely untenable fallback.

When you're promised that this will never happen to you because there are humans in the process remember that they're one or more of underpaid, poorly-trained, poorly-treated, under-resourced or just flat-out terrible at their job.

This may well happen to you and you'll have no way back.
This looks interesting and as a non-native English speaker, I'd be open to pay for it if it fulfills it promises.

However, the fact that it is a mobile app only is quite annoying. Why can't I just use this on my laptop? Some of us are actually phone-less :)
macOS has been announced to scan just like iOS
First, an ack that I am almost certainly not touching all of your points. My apologies on that.

I think I am going to lean in on our arguments. I would rather change mine from "why not" to "why this isn't worth forcing".

That is, on the logic and aims, I fully agree with you. It is more that in practice, I have seen this fail too many times. I expect and look forward to it succeeding some day, but I still caution against jumping all in.

I should also ack that I am pretty happy with how common lisp does this. By mixing in read time and evaluation time, you can actually get a lot of this. I'm on my phone right now, but (format nil "~{") will not evaluate in sbcl. Instead, it will indicate an error in the format string. This is similar to how c will fail the build with Wall and Werror on similar bad format strings. Difference is that in lisp, you can add such evaluation time checks as a user.

As for why we do so much at runtime, my assertion is we check at runtime that which is determined at runtime. When getting data from outside the static program, there is little help the static type system can offer. So, deep in your system, get things out of strings and primitives as soon as you can. Don't pass a string username, pass a username. This gets you essentially what you want, but flags where the invalid value could have come from, as well as where it could have been used. And lets you add on other validations. AuthenticatedUsername and UnauthenticatedUsername, for example.

I get that you called those out as another category of error, but types are explicitly for that, as well.

And finally, in somewhat reverse form, I agree that arguments on specifics as a proxy for general are frustrating. For my part, apologies on adding to it.
Do they actually need to muzzle people?
FWIW, they won't send the images. Even in the pursuit of knocking back CSAM, there are strict restrictions on the transmission and viewing of CSAM - in some cases even the defendant's lawyers don't usually see the images themselves in preparation for a trial, just a description of the contents. Apple employees or contractors will likely not look at the images themselves, only visual hashes.

They will instead contact the police and say "Person X has Y images that are on list Z," and let the police get a warrant based off that information and execute it to check for actual CSAM.
I don't know. I don't know what other systems use, I just know what I've read recently about Apple's.
I was under the impression that the hashes were the only thing transferred, as the source image is encrypted. (Edit: On second thought, manual reviewing needs the source image.)

Anyhow, adversarial attacks transfer reasonably well across models so you could create attacks on models you think Apple would use internally.

I’d imagine the first think Apple would do is put attack spammers on an ignore list. However, that would only work until the images start propagating on the wider internet via forums and social media.
> The UK is small and ancient. We literally don't have the land necessary for building big houses in cities.

British cities like London would have plenty more space if they built up, even slightly. Comparable European cities have 4-8 story apartment buildings in the inner city; London quickly becomes single houses.

> There wasn't much land to start with, and changing the use of land that's had buildings on it for 1000 years is incredibly hard.

Most of London is much, much younger than that. London expanded in the late 19th century, as railways and metro lines were built.
It’s interesting how ever within the US, there seem to be worlds of difference.

> grunt-level unsexy corporate IT technologists are also in short supply

This describes my work experience, and I don’t think I could even get six figures, or would barely break that.
android is no where near competitive with apple’s user XP. i was a long term android user until 3ish years ago. i’ll never go back to a fragmented device ecosystem again if i can help it.
At a previous employer, every time there was an 'honest' review from someone (something I could confirm happened, and usually recognized who it was), it would quickly be drowned out by 5-10 fake reviews that were somehow placed there by HR and their recruiting team. I'm not sure if they paid people to leave fake ones, or if they used some sort of service.

I have given up on using glassdoor, I put its ratings somewhere between Amazon and Ebay Seller ratings
This came out of the Together Trial project which has been looking at hundreds of existing drugs to see if any will work for COVID19:

https://www.togethertrial.com/

I'm going to be skeptical until the paper comes out. There was a lot of initial data on Hydroxychloroquine that looked good and it ended up being only noise (and bad study designs).
is there a good way to "short" this industry of bullshit artists, via options or something
Pizza Dough Rise Times: 1 to 72 Hours (What Works Best)
Senior Data Scientist Amsterdam: $101,064
Lead Data Scientist Amsterdam: $77,726

Better avoid getting promoted in Amsterdam.
> I am yet to hear of any such cases, when it comes to tracing apps based on the google/apple tracing API.

data leaks in the api itself will come to light, rest assured. but as you said, the problems with everyting besides the vendor-api have already caused a lot of privacy havoc.

> ou might get a false positive with a neighbor, by placing your phone next to a wall, but that's really an edge case.

in a literal sense; yes :D but let me assure you that ppl putting their phone near a wall is absolutely not uncommon.

> Plain false. Apps based on the API do not have users location data

again you seem to willfully misconstrue the allegation. let me tell you that just because the tracing app itself does not have precise location data, the problem of creating yet another record on your phone, attesting your behaviour, is not going away.

i take it you are not (yet?) critical of privacy implications of your $dayjob, but try to respect the concerns of ppl that are unilaterly affected by them.
It should be obvious that anyone who says “I’m concerned about privacy, so I’m going to switch to using Google products!” is not a serious person.

If you’re actually going to switch to using open source hardware phones and whatnot, then good luck I guess. I can see where more progress in that area would lead to general improvements, so it’s not entirely tilting at windmills.
I guess they’re worried about the optics, but honestly if the passengers are being a problem, I don’t really care what happens to them.

Maybe what we really need is in-flight executions to permanently eliminate the threat on this and all future flights.
Surely you could've expressed your concerns in a more constructive way?

In any case, according to their GitHub page, they use libtls, which is also apparently associated with OpenBSD.
I think that's the wrong take, personally.

The draw of hiring remote is that you will get access to great engineers that would otherwise never want to move to the Bay Area. You get to compete for their talent if you're offering full remote, but so do other companies that pay "Bay Area salaries".

I think it's great for software engineers everywhere, but not great for the Bay Area itself since the incentive to move there becomes lower (salary is not the only reason people move to the Bay Area, but it's definitely a big pull). Although if you live there that means less pressure on real estate ;)
I hadn’t heard about these. Obviously they don’t actually explode in any degree of detonation or even deflagration. But are we talking more than a capacitor popping?