skysight-inc/HackerNews huggingface dataset:
> Yesterday we saw OnlyFans exit the adult industry. Two weeks ago we saw Apple exit the privacy industry.

One of those two statements I disagree with.

Apple exiting the privacy industry would look like this to me: "we've decided from now on that, like almost all other cloud providers, we'll give ourselves access to your stuff for (ahem) legitimate purposes".

Not like this: "we'll implement a neuralhash on the client device rather than on the servers, and then do a cryptographic private-set-intersection protocol with them on the server".

That's a lot of cost and effort to prevent themselves, as a company, misusing the CSAM detector for other purposes. If there are government agencies involved, Apple is also making sure that they can't just use this as a backdoor to get access to everyone's files, it's as if the government said "we need to prevent child abuse, give us a backdoor" and Apple went "ok we'll give you a small backdoor that's ok at detecting abuse images and nothing more" - if the government was expecting to use the backdoor for more than this, they'll be disappointed.

(I'm pretty sure they have other backdoors already, by the way. My guess would be a zero-day on the baseband processor firmware.)

I'm not saying I agree or disagree with Apple's latest move, but "exit the privacy industry" feels a bit a strong statement to me. You have less privacy than you did three weeks ago, and an option on even less privacy in the future (but then again Apple could just change the T&C), but you're still better off than with competitors that offer similar functionality.
> Is it worth continuing to push sex workers into illegality

If that's the price to pay in order to rescue vulnerable people who are being exploited and trafficked, very much so. Sex work is a decadent luxury at best; human freedom and agency are worth so much more.

> thereby putting them in danger?

There's no proof that legitimate sex workers are being "put in danger". They might be de-facto forbidden from engaging in that line of work, but there's a solid rationale for such a policy; it might just be the best we can do given our broader circumstances.
USDT is printed out of thin air (which is why I didn't mention it). USDC is a bit better and more transparent. DAI is decentralized and backed by collateral.

There's been a lot of talks of regulating stablecoins to ensure backing, which I don't think is a terrible idea.
In the launch podcast, the question was asked about specific features. They didn't mention the ones you listed, but the response was that it was 100% compatible with v6, so I suspect so.

https://aws.amazon.com/podcasts/467-introducing-amazon-memor...
MVG gets a lot of info wrong though https://news.ycombinator.com/item?id=26222361
I think many at Apple really are surprised by this, and I put it down to a failure of elite consensus.

I think that a number of folks at high levels in the SV executive suite have accepted a manufactured consensus along with their peers in Washington, and that consensus is something like: "people don't care about the privacy of what's on their device and they'll put up with anything to stop CSAM, even if it means scanning personal backups and local files (as opposed to shared files.)"

This seems like a reasonable thing to believe, since server-side scanning of (mostly shared) files has been going on for years and nobody has pushed back very hard on it. But what I think the consensus missed is that the reason for this lack-of-pushback is that nobody in the wider world had really been asked to weigh in on it before. It was something that a few elite tech busybodies were aware of, and most people accepted the idea that providers needed to check out photos that lived (unencrypted) on their servers. Apple accepted this logic and extended it unthinkingly beyond shared photos to unshared private photo libraries on the user's personal device (even if they are staged for backup as part of the iCloud Photos synchronization service, which is just a policy choice.) This was a second mistake because it assumed that because users mostly ignored the scanning of shared server-hosted files, they had somehow given consent to having their private files searched on their device. I don't think they had.

Overall, this announcement is the first time anyone has attempted to have an actual public debate to see how real users feel about this kind of surveillance, particularly automated surveillance of private photos (and an automated system with potential flaws.) Apple's mistake here was to assume that their user base had already given consent -- when they'd just never been asked. It's a very human mistake to make, frankly. The question is whether Apple will listen to their users or if they'll double down and push this through against their users' pushback. I can forgive Apple for misunderstanding their users once, but continuing down this path will be a lot harder to understand.

ETA: To illustrate how much more pervasive Apple's surveillance is than the standard (ignoring the PSI protocols), consider this quote from an EU Parliament briefing: "Others, such as Dropbox, Google and Microsoft perform scans for illegal images, but 'only when someone shares them, not when they are uploaded'." (I can only trust that this is factually true.) In this sense, Apple's move to scan all photos in your library is a significant functional escalation.) https://www.europarl.europa.eu/RegData/etudes/BRIE/2020/6593...
Musk is a fraudster who has consistently lied to investors and the public about timelines and features - FSD, SolarWinds solar tiles, the robotaxis, "founding" Tesla, "founding" PayPal, the Vegas "loop", cheaper tunnels, hyperloop, NeuraLink brain-computer videogames, flying cars, the cave submarine, turbines on cars, "more efficient" batteries and on and on and on. There are a few lies that have not yet been proven lies - the 40k satellites or the Mars settlement or the $2M rocket, for example - but I have faith that they will also prove to be lies in time.

His only contributions have been early investment in Tesla and hiring the right people for SpaceX to achieve some decent cost savings and vertical landing on Earth. It's definitely not nothing, but it really shouldn't make anyone believe 99% of what he says, or consider him some kind of genius.
Sorry, I’d forgotten about that! But the community obliged!
What use is all that goodwill if a solution which attempts to thread some incredibly complex trade offs in a way that innovates on the status quo in every possible way is met with skepticism that is rooted in mistrust of government and not Apple (ignoring the even greater numbers of ignorant or false concerns that have been posted)?
Genuine question: are the payment processors legally exposed because of the purpose of transactions going on in their system? If so, this seems to be the main problem --I mean if social media platforms can absolve responsibility for content, Mastercard/Visa absolutely should as well....
Yeah, by growing them to 1bn users! That'll show them.

Personally, I think there's a much stronger case for the cloning of Snapchat rather than the acquisition of IG.

The Whatsapp acquisition should probably be unwound though.
I don't see how these can be separated, considering he was the Chief Engineer and created most of the products too. [2]

It's pretty easy to separate them. You just write an article about one part of the story. Not every article or story on a subject is required to be 100% comprehensive.
That is the point. People who claim any repository organization scheme is better are wrong because they can't touch on the real problems.
> How do you get from 'opinion piece in a newspaper' to 'gigantic transnational financial infrastructure company changes its rules'? In my experience, huge companies do not make changes like this purely on the basis of newspaper columns.

The amounts are minor as far as payment processors are concerned, but those payment processors want to avoid governments getting up their grill.

By acting "proactively" on anything which smells of controversial or bad PR (and nothing does that more than accusations of child trafficking, not even actual child trafficking), regulators see "self regulation" and go look at something else.
Thank you! :) I updated the article with a note on privileged containers.

Evaluating user code inside privileged containers is indeed a security nightmare. Fortunately, --privileged is not enabled by default, which is why I think that containers are quite secure by default.
Another good thread explaining the leverage Visa/MC and banking generally have in companies, and impact of vague FOSTA/SESTA legislation in the US.

Puritanical and evangelical lobby groups pushed these laws through Congress, and now they are reaping the rewards. It's unfortunate that the rest of the world has to suffer for this failure.

https://twitter.com/rahaeli/status/1428442523001831425?s=19
> It's like a virus scanner that you voluntarily installed

Not really. Virus scanners don't snitch on users to governments.
> You're in for a rough ride if you change entire platforms and ecosystems every time someone disappoints you.

As an aside, this entirely explains US politics.
Animals changed by proximity to humans
Most places which accept Bitcoin don't plan on holding it as cryptocurrency; it's converted quickly to USD (or whatever). They would do the same with ETH or USDC, convert directly to USD, or Bitcoin then USD. In short most USDC purchases would probably be fiat -> ETH -> USDC -> ETH -> fiat anyway. But fiat -> BTC -> fiat is a more established channel, and with lower txn fees at the moment.
They keep on finding new investors who believe true self-driving AI is just behind the corner
I find exercise sets the tone for what and how much I eat. After a week of working out every day, I feel better and have more energy for eating well. Eating well, in turn, makes me feel even better, and I'm able to keep the whole thing going for longer. In the end, it's a game of willpower and finding what helps you maintain your willpower.

Not to mention, lifting weights increases strength and adds muscle.
Yes, we had this same scenario play out 16 years ago, and it seems that many modern web developers have forgotten its lessons:

https://blog.moertel.com/posts/2005-05-06-google-web-acceler...
> I do not care about companies. If it helps people I’m for it.

I suspect you completely missed my point.
This loose allowance is going away. Current BRs allow using 3.2.2.4.18 and 3.2.2.4.19 (Agreed upon change to Website) for wildcards until December 2021. After that:

> For Certificates issued on or after 2021‐12‐01, the CA MUST NOT issue Certificates for other FQDNs that end with all the labels of the validated FQDN unless the CA performs a separate validation for that FQDN using an authorized method. This method is NOT suitable for validating Wildcard Domain Names.

Let's Encrypt are just ahead of the curve here, this was always unsafe because it means if your corporate site https://big-corp.example/ is on some bulk host that bulk host can get (even though presumably they wouldn't) wildcard certificates that will also match mail.big-corp.example and db2.big-corp.example and auth.big-corp.example and vpn.big-corp.example ...
>This is most annoying when the site wants me to type in my email address to unsubscribe.

I've become increasingly suspicious of this practice

if my email address is in the URL, why don't you autofill that email box for me? if it's not in the URL, why aren't you fetching it from your database using my unique hash in the URL? do you even keep any records of email subscription preferences? am I just signing up for more shitty spam by giving you my email, again? am I just being marked as 'active' i.e. fresh meat, somewhere in the spammiverse?

these questions become more poignant and the suspicion more fiery when, low and behold, it turns out you are still subscribed

I don't fill them in any more, I just block the sender

don't get me started on the "it may take up to 28 days for our systems to register your desertion" bollocks -- I'm not working a contractual notice period, or running a lap of dishonour. it's a bitflip to 'false' in the 'is_pesterable' column, else a respectful deletion. it takes microseconds, not weeks!
Integrate often enough that nothing has diverged enough for that to be a problem. Short lived branches are good, long lived branches get into the problem you speak of.
I think a few topics are conflated here. The part of the code that draws pixels into a canvas (or tells webgl to draw) should always be called from RAF - there's never a reason to do that more often than the screen refreshes. And since TFA does basically nothing except set canvas pixels, RAF is clearly the thing to use.

OTOH whether you want your animation to advance in real time is a separate issue, regardless of whether the animation is interpolated. If you do want real-time animations, and you're using an interpolated physics engine or similar, there really aren't any good options besides decoupling the interpolation from the rendering. And if you've done that, then it doesn't matter much whether the interpolation is called from RAF or setInterval (personally I use both, so that physics ticks can happen between RAF events if the CPU load is heavy).

But as a footnote, setInterval definitely does not give you a "constant" interval. Besides the normal variance, browsers will throttle the events (e.g. if the document is in a background tab).
At least this explains why normal porn sites keep living on perfectly well using MasterCard and Visa. They already have to follow regulatory requirements to demonstrate they are complying with age and consent laws, each video includes a front-matter frame saying where you can get the documentation of their compliance, and many include behind-the-scenes extra content showing all of the performers presenting government-issued IDs and signing consent forms.

This brings this conflict out of the realm of adult entertainment and into a broader conflict between incumbent central providers that are held to regulatory standards and apps providing a platform for individual contractors that don't follow those requirements. It's in the same field as people arguing AirBNB is only able to exist because it's allowing people to operate hotels without having to comply with hotel regulations, and Uber allows people to operate taxi services without complying with taxi regulations. OnlyFans was giving individuals a way to produce adult films without having to comply with adult film regulations related to age and consent verification of the performers.
Is it really the case that most OnlyFans girls would turn to more dangerous things like prostitution?

It kinda feels like OnlyFans has somewhat normalized/popularized young women going from Instagram 'influencer' (sometimes starting underage unfortunately, HS kids use it) to pornstar, for young women who otherwise probably wouldn't have entered the world of porn if it weren't for the fact that the hot Instagram girl -> monetize IG popularity via OnlyFans porn pipeline hasn't become so normalized.
There are APIs for this.

iOS: https://developer.apple.com/documentation/uikit/uidevice/162...

Android: https://developer.android.com/reference/android/os/BatteryMa...
Specifically the how is covered here.

https://markets.businessinsider.com/news/stocks/bill-ackman-...
Maybe Apple already built the tool and was like "let's use this tool we already have but just targets specific child porn images". That actually makes them sound more reasonable.. kinda.
It looks pretty useful to me (for tests).

But, with software..... Build it and they will use it! :)
FBI to tech industry: China, Russia are blackmailing your employees into spying
The lost fossil meteorites carrying the secrets of Earth’s past
The list is only updated with new versions of iOS. So if that's a concern wait until new versions are compared against old prior to updating.

Downloading the list outside an iOS update would be a new 'feature' just for China. If we're in that mode, then Apple could also have just added scanning for only China.

Finally, the list is an intersection from at least two jurisdictions.

I think there is plenty of good debate to have around this feature, but I also think it's important to start with the discussing the feature as is today.
I’m not sure I see any similarities. Could you elaborate on why you think this is similar to the aether theory?
Sure, having a few monopolies is bad. Let's nationalize them all under one single monopoly.
> FP is absolutely way more time-efficient for most kinds of projects, if you know what you’re doing.

That may or may not be true, but most programmers don't and aren't really all that interested in learning. Most know what they are doing in a handful of Algol-derived mostly-imperative OO-ish languages and aren't comfortable goony much afield from that.
I'm talking about Instagram the company, which is what the FTC cares about -- competition. FB eliminated Instagram as a competing company when they purchased them. Buying up competitors to keep dominant control of a market is absolutely an antitrust violation.
Conduit: Efficient Video Compression for Live VR Streaming
. . . the main emission in steel comes from mining.
Now that most guis support them, submodules actually work pretty well.

The only major issue I face with git novices is making sure everyone on the team sets their machines to pull recursively.
> sometimes they really do know what's best--that is their job afterall

In order for somebody to know what is "best", they must have the information, the processing skills and intellectual maturity, and a definition of """best""" which, non-trivially, leans towards objective, collective and universal goals instead of subjective, particular and contingent ones.

Until the times in which carrers will have ceased being a priority by necessity, it would not really change much if you wrote that in the job description.
Saying that the evangelists are anti-Semitic is laughable. If it wasn't for the evangelists in America, Israel would not have the billions in military aid they get from the US every year and the country wouldn't exist today. Not to mention how insane it is to bring up anti-Semitism for absolutely no reason at all. Being "against sex" may be stupid, but... anti-Semitic?
If the framework is based on pure functions and no external state, what is the point of calling the entire subtree again and again?
I don't get it, they note that while playing chess that they burn extra calories "Robert Sapolsky, who studies stress in primates at Stanford University, says a chess player can burn up to 6,000 calories a day while playing in a tournament, three times what an average person consumes in a day. "

Why would playing chess burn more calories than say watching a football game?
For what it’s worth, WPF and WinUI are owned by the Windows team not .NET.

I suspect it’s less “not a priority” and more “building a good cross-platform UI framework is a colossal amount of work”.
That could have literally been the command from above - "I want over a million robo-taxis on the road" - and then that trickles down into the company.
Very long winded. The actual technique is only described about 2/3s the way through. They're using canals to divert water into well draining soil.

"They use water canals called amunas – a Quechua word meaning "to retain" – to divert wet-season flows from mountain streams and route them to natural infiltration basins."

"Because the water moves more slowly underground as it travels through gravel and soil, it emerges downslope from springs months later, when the comuneros collect it to water their crops."
If you only have one definition of your data atructure and that definition encodes the endianness you're done, and you cannot misuse it.
I completely agree.

For what it's worth, Apple has nothing to gain with this much of a privacy stir, especially when they're accomplishing the same level of detection that other companies accomplish with the simple cloud scanning.

While it's possible that something nefarious is going on with Apple and the U.S. government, it's more likely that Apple got really 'big-brained' about this, had a lot of talks of "we want to retain privacy" and the iCloud team pushing against scanning, and so they ended up with this as a "more private" solution.
This is a bad take, given that questioning the “elite consensus” is most likely how Apple arrived at this solution. Their proposed system doesn’t take for granted a whole host of assumptions made by every incumbent CSAM detection framework.

Next, it claims that consent is ambiguous when in reality the system doesn’t exist and users who don’t consent have a means and plenty of time to opt out.

Finally, there are people who argue the exact opposite: Alex Stamos has claimed one issue with Apple is that they didn’t engage the industry and academics like him enough when developing this solution.
It seems that a large part of why OnlyFans is destroying itself is an attempt to comply with some incredibly onerous requirements that MasterCard added in April: https://www.xbiz.com/news/258606/heres-what-the-new-masterca...

Especially “all content must be reviewed for child porn before publishing, or in real time if streaming”.

It now seems not at all implausible that Apple’s half-baked attempt to scan everything for child porn is due to this too.
There might still be Japanese gaming arcades that are still quite popular, especially for people who crave recreation and fun time with their friends and families.
If anything it gives scope for smart and talented people to work on something that if fails they can easily spin multiple startups from in various attempts to find a route to success.

This happens all over the place and we should be thankful people are either dumb/smart enough to take these risks on big ideas.
Just stop eating. It works just fine

https://en.wikipedia.org/wiki/Angus_Barbieri%27s_fast
I just wish FaceTime on macOS would let me use virtual webcams and not do weird things to audio inputs if you you keep also using them in other apps. I have a Blackmagic converter that works to bring a high quality external camera into other software, but FaceTime won’t let me use it (it just doesn’t show up in the list, and neither does the OBS virtual camera). That and the weird stuff it seems to do to the audio subsystem on Mac (this is all in 10.14 so maybe this isn’t the case in later versions?). We were trying to use it as a back channel for podcasting/streaming but trying to send audio to FaceTime somehow messed with the input in a way I’ve never seen with any other application, and broke it in Logic and OBS. It was almost as if audio processing was happening outside the app for some reason, so you get really weird results (messed up levels etc.) in other apps sharing the audio device inputs… Goes away when you start an audio app without FaceTime active.

We found a free app Sonobus that works really well for low latency audio for what we were doing in the end. FaceTime is great for just calling the family on the iPad though.
The root of money as a medium of exchange is trust.

Most people don't even know what USDC or USDT are, so there's no trust there. Among those who do, there's concern that they're too unproven; there may be not-yet-identified attack vectors on the stack of technologies they depend upon that could some day allow one attacker to crash the coin. BTC has withstood a test of time that lets people who can't walk all the way through the implementation details to sanity-check them for themselves trust it.

Money is a lot more like a social network than a standalone technology.
While it is true that exercise itself does not make you spend much energy, doesn't strength training build additional muscle which in turn makes you need more energy to maintain that muscle, so you increase your basal metabolic rate? Sounds like it'd be more effective for losing weight than cardio on principle.
The GeGeek Tech Toolkit