skysight-inc/HackerNews huggingface dataset:
I find this discussion interesting, because there is no way to prove that Apple does not already do this, since their operating system source code is completely opaque, and the lenghts they go to to prevent you from viewing or modifying it.
I deeply hope that he gets pushed out because of this. The skeuomorphism guy was definitely horrible and obviously was the cause of many assaults upon the senses, but this CSAM spyware scandal was such an affront on all that democratic, enlightened society holds close to the chest.

There are so many more talented software development leaders out there (maybe scratch all the ones working on adtech), but he's clearly a cultural troglodyte and this is evidence that he is incapable of actually leading the future engineers and software workers of the world.

If I saw him in a social setting I would try to ask him how he lives with himself, actively enabling the potential future dystopia and being incapable of defending the actual impetus of his actions, much less the reaction to it. Truly unforgivable, especially in an age of increased social fragmentation.
The first couple paragraphs of the linked article lay out pretty clearly what they are hiding: the "facebooktop10" Twitter account publishes a list of the ten most shared posts every day, and it's always dominated by Dan Bongino, Ben Shapiro, and Tucker Carlson.

Facebook doesn't want to be seen as a platform for sharing bigotry and misinformation, so they are releasing this report to counter the data aggregated by facebooktop10.
Yes, you do need a citation, because I've not heard Apple (or anyone else) claim that iCloud Backups or iCloud Drive are being subject to CSAM scans.

From everything I've read, from Apple and other sources, if the photo is about to be uploaded to iCloud Photo Library then it is scanned for CSAM. If it's not, it isn't.
Is his work regarded well and/or studied in the more academic psychology circles?

I ask this as the usual line of “introvert - extrovert” never made intuitive sense to me, as it it was missing important details. For example I love talking with people and listening to their stories, and casual acquaintances would insist I’m an extrovert, but I tire quickly at social gatherings and recharge when I’m alone, and the pandemic lockdown was something I actually liked to some degree, which makes me feel like I’m actually a well adjusted introvert or something.

So when I first found Bartle’s taxonomy it all “clicked” I instantly knew where I was on the graph (explorer), and could easily place people I know, giving me more predictive clarity for mine and other people’s actions…

So was wondering if it is more generally known / accepted in psychology? Maybe it has some flaw that makes it not applicable to non gamers or something?
No, iCloud Photos are not currently end-to-end encrypted. Apple lists all of the items in iCloud that are covered by E2EE in the "End-to-end encrypted data" section after the table, and photos aren't on the list:

https://support.apple.com/en-us/HT202303
A Day in the Life of a Growth Hacker
The first comment algorithm choses to show me
contains substring
"and this system is transparently broken".
Isn't that a remark on the effectiveness
of the idea or I misread?

(In case you have problem with me saying "so many",
that I can fix.)
Imagine this: Apple's software is scanning for abuse images and finds a ton of false positives which are then manually inspected. Those false positives are... >>private photos of naked adult man and woman<<... and this is exactly what you want to hide from >>everybody<< on the planet... but no: they will be manually inspected... Good luck Apple fans! :-)
GR?
Saying Ben Shapiro is far-right is like comparing meat eaters to nazzis: he is of jewish descent … This is why I hate american discourse: all sides are wrong and it’s just a echo/yelling chamber where all sides scream at each other due to their unaddressed teenage complexes.
Oracle Cross-Region Autonomous Data Guard
> people love to complain

Do you find it unreasonable to point out that what's been advertised doesn't match what's being offered?
Propaganda 101: we have always been at war with Oceania.
One disillusioned employee that has access to the secret algorithm.
I like it a lot more than the even more common method of using videos. 'Sadly' there are many people on the internet with different preferences.
As someone who has an obsession with base64 encoding (as exemplified by my poorly written shell scripting here: https://miscdotgeek.com/curlytp-every-web-server-is-a-dead-d... ) I love this. It makes me wonder if some CSS and maybe even a highly compressed image or two could be added.
When in UK I always feel being watched thanks to CCTV warnings everywhere.

It is also the only country from all of those I have been in almost 50 years, where great care is taken to never park in an illegal way.

Sure you will see it, away from city centers where no cameras are around.
Mint also did screen scraping, powered by Yodlee [1], if that’s what you mean. So, yes, same risks as Plaid.

They later moved off of Yodlee to Intuit APIs, post acquisition, although those also do screen scraping [2], and thus carry the same risks.

[1] https://news.ycombinator.com/item?id=1537825

[2] https://money.cnn.com/2010/12/02/pf/mint_leaves_yodlee/
Remote work should be a permanent employee benefit
It was good, still is probably, but when the community is that small getting stuff done will always be harder than with React.
Something this major, company brand changing, would have required a lot of executive sign-offs, presumably even Cook's personal blessing.
I'm not surprised it works well for some. But, there are lots of variables around distance, client hardware, home user bandwidth, etc. I imagine it's a pretty rare setup to have most users happy.
The Wheel of Life
No, because the second hash is only performed after the first hash has already matched, and so, using the threshold secret sharing crypto, the server has learned the escrowed encryption key for the image. (Well, for its “visual derivative”, at any rate.)
Mental models to add to your toolbox
If you turn off iCloud, the hash list will never get downloaded on your phone. No scanning will take place in that case.
I see it fine logged out.
How does one choose individual photos to not upload?
I don’t know, author seems super concerned with “patriots” being censored or kept out of the marketplace while republishing a video of a conservative congressman on an incredibly conservative news network, literally the most popular cable news ever, the video hosted on YouTube, the largest video sharing site ever, whose algorithms instantly take conservative viewers into the far right fringe and gave far right talking heads not only a platform but a revenue model.

Feels like it takes a staunchly good-GOP vs evil-Dem approach when in reality both parties manufactured these immoral & insane wars. The only winners were the slimy politicians that won elections on the backs of the dead and the handful of soulless monsters selling “us” a trillion dollars worth of bombs & supplies.

Getting out is vital and the lesson should be that “America’s enemies” are the leaders that start these ridiculous wars.
Tried understanding Zettelkasten for a while, searched the internet, bought one/some books. But it was always too light on examples. I need full beefed out examples (like a 100 pages Zettelkasten) or let's say 10 pages. Of course you can say one doesn't need it, but isn't the value of any method to be benificial if done as designed?

This article seems to be the closest of having good examples.
I use CMake almost exclusively (even for Windows) and using "find_package(Boost REQUIRED)" works most of the time. A lot of common boost libraries (algorithm, geometry) are header only and are not much of a hassle to include.

IIRC, you would need to modify the statement to "find_package(Boost REQUIRED COMPONENTS filesystem)" if you want to use boost dependencies that need a separate .dll/.so (in this case boost::filesystem). However I rarely need to use these, so I may be wrong.
True.

We are essentially searching for civilizations that have no other forms of energy (from a star) and have to rely on Dyson spheres for their energy.

We are excluding all those civilizations that have successfully used a combination of solar, wind, fission & fusion energy to drive their society.

I strongly believe that no matter what civilization, no matter how they look, what they consume or what they are made of, the core tenet of "human psychology", or more correctly "conscious being psychology" would evolve in the same way as is for us.

If, let us say, we solve our energy issues, and we have built ourselves a world that is sustainable. Would we think about building dyson spheres? No, because there is only so much you can do with energy. You need materials, ores, deposits, etc to actually build something new.

I guess the most advanced civilizations would harness the power of the stars, fusion, and build themselves sustainable habitats that can be floated into the eons.
The word allegedly indicates the accused haven't been convicted of a crime, yet. Not using that word implies guilt, which the SEC hasn't proven, yet. It's pretty standard practice to see that word used like that.
Just to be clear vxworks is not bsd based that I could tell from Wikipedia. I work with Schneider electric plcs and sometimes vxworks errors bubble up.
Ah, makes sense. Thank you!
This is a cool project somebee. Interested to explore more.

On benchmarking:
I went through the same concerns and ended up building a little benchmarking tool for a simple reactive UI library I'm working on. It's not super user-friendly yet but doing a good job of profiling tasks.

You can write custom benchmarks by clearly separating pre-setup work than relying on ready-made benchmarks (a bit of a pain initially, but helps a lot to fine-tune at unit-level going forward).

It uses Chrome DevTools Protocol(CDP) through Puppeteer and allows to analyze execution durations separately (Scripting, Layout, Paint, etc). Plus, it saves raw JSON profiling data, so you could import & examine it visually on DevTools Performance Tab's Timeline.

Think it will be helpful: https://github.com/dumijay/pfreak
This is how the results look like: https://caldom.org/benchmark/
This is definitely happening in onboard power management for systems with batteries. I suspect it's just big generic PSUs that stick to old analog ASICs.

Not self-tuning, though, they have to be tuned and all that software written.

Dedicated PMIC chips will be mixed signal, with digital control and analog failsafes.
I tried hard to like this, i still have my “second brain” collection in onenote (which worked surprisingly well across linux, Windows & mac) but i don’t add to it anymore.

However PARA has just proven more ergonomic and far less time consuming for me. https://fortelabs.co/blog/para/

1. I don’t waste time trying to eek out atomic thoughts, PARA is a more pragmatic idea - if some bit of knowledge proves useful it will get incrementally refined

2. It works exceedingly well if your productivity system is based on GTD

3. I don’t waste time trying to link things sufficiently, instead i dump the folder of reference material in the active project using it. So simple, and quite a satisfying “cheat”

All this said, it’s like time management. I’m less convinced that there’s a “right” answer than i am that there is a wrong answer and the wrong answer is not to have a strategy and just let the tidal wave of digital artifacts wash over you.
CMake supports Boost out of the box, you just need to set BOOST_ROOT to your Boost install path.

With proper CI it's not a big deal
Shopify is the biggest Ruby company if you measure market value, they are currently worth 185 billion. It's not that far from Oracle's market value.
Human doesn't need to see the material. One can automate this by crawling websites with known bad material and compute hash of all images. Surely some of those hashes are CSAM, we don't know which. But it's still equally dangerous.
Apple follows "local laws" because it wants to make business everywhere in the world... Example: Apple in China.
I'm actually surprised Google hasn't killed Voice, given their current track record of killing niche products
Mega.io (from the same people as MegaUpload) has e2e file encryption with just usernames and passwords.

There is no reason the password can't be the encryption key, with backup keys stored with a trusted third party (eg: your credit union or bank) without notation as to what these backup keys are tied to.
OTOH, patents apparently did nothing to prevent Excel's rise to the top when there was Lotus 1-2-3 and in fact Visicalc before; MS Excel starting life on Mac OS, and MS only providing Multiplan on DOS (and CP/M?) which was seen as a budget alternative to 1-2-3.
What exactly makes Boost scary to ship? I understand that Boost requires some attention to build right across platforms (see zlib support in Windows) but other than this it's pretty straight forward to add a FindBoost statement to your code, and move onto other things.
The assumption comes from a general observation that most normal people don't tend to use their photo library to store legal porn (other than home made) and I haven't seen any argument for why CSAM aficionados are expected to be any less careful. There are surely plenty of apps out there for keeping separately encrypted vaults of files/photos, and I'm sure many are very easy to use.

You don't have to be particularly tech savvy to know it's a bad idea to co-mingle your deepest darkest secrets alongside photos of your mum and last night's dinner. Especially when discovering those secrets would lead to estrangement, or prison.

As for the few who might be doing it currently, that's likely to plummet quickly. If you think Apple's move caused waves in the Hacker News crowd, just imagine how much it has blown up in the CSAM community right now. I dare say it's probably all they've been talking about for the past two weeks.
It is definitely the case that the "moderate" position, politically, is the worst at generating viral content, which even encourages moderates to become more extreme to be heard. This is why the media under billionaire moguls like Hearst and Pulitzer may have been better - the content had to serve their owners' interests, but did not have to achieve maximum engagement with the reader.
I think you're missing what concerns people; what guarantee do we have that Apple will, always and forever, only use the "intersection of hashes provided by at least two child safety organizations operating in separate sovereign jurisdictions"?
What does his religion have to do with his ability to be far-right?
Typography, typography and tpygoarhpy – models of word cognition
> While it rightfully bans conspiracy theories and right-wing extremism

Wow I wish. Big tech gave both of these groups a megaphone and a cash machine.

Sure, people have to misspell covid when spreading antivax messaging on Facebook to avoid getting their posts deleted but hard right influencers are the majority of the top engaged pages on Facebook every week.
One common approach also it to have auto-sell, which will automatically sell your stock on a schedule which is set long in advance, so there's no suspicion of insider trading. Honestly I think that should be the only way to sell stocks of your own company, either that or schedule a sale at least a quarter in advance.
Maybe all this is just a PR message to everybody: "Your data is not safe! Don't store anything private on your phone!"
Do you think the reviewer will dismiss the alert if only 29 images look like CSAM and the last one looks like a Beagle? What if only 1 looks like CSAM and the other 29 are animal pictures? It's a safe bet that they will report your account for the 1 that looks like CSAM.
I suppose it's a case of looking for lost keys under the lamplight: it might not be there, but at least we'll see it.
I'm not sure about others who still use this service, but I learned about this the hard way when I missed some important messages. I thought others should know, since it seems Google hasn't issued any communication on this to customers.

EDIT: Seems they did send an email about 2 weeks before the change.
> average joe doesn't care about antitrust

Neither do they about privacy.
> More people than ever are medicated for mental illness, seems like the opposite of progress.

Maybe.

And maybe a bunch of those people were self-medicating with alcohol, nicotine, etc. and now are actually getting real treatment.

Don't get me wrong. I think we overly medicate people--especially school children. I think ADHD is hideously overdiagnosed.

However, I've also seen the flip side. People who were completely disconnected from reality who suddenly are back to their "normal" selves with just a small amount of medication.
What's the point though? I can think maybe of reduced latency, but then you usually have the DNS already cached locally. And that takes me to a second point, won't you run into problems delivering content updates, given that clients will most likely cache DNS entries?
Other people posting BS is a poor reason to post more BS. That only makes things worse.

Better options are (1) post something thoughtful and substantive, or (2) don't post.
Probably because of the sexual content.

IIRC Animal Farm was suggested to us, but not 1984.
> It is clear, however, that these companies’ continued treatment of American citizens as domestic enemies at the same time as they give America’s actual enemies what amounts to a free pass cannot go unanswered.

This is spot on. I can’t believe Twitter and others banned Trump
based on vague claims of incitement, quoting attendance of a ceremonial inauguration ceremony as proof (https://blog.twitter.com/en_us/topics/company/2020/suspensio...), while numerous organizations associated with domestic crimes (antifa, “youth liberation front” or other anarchist networks, some BLM affiliates, etc) and international extremists (like the Taliban’s spokesperson) are allowed to operate freely on their platform. These are illiberal monopolies abusing their power for political gain, and they need to be broken up or regulated.
Yes, it certainly depends on your use case and target clients.
Years ago, I used Google Voice to receive text messages. Then Twilio came along and I switched to them. Much better.
You should be able to build and include boost json as a standalone subproject in CMake if you are using C++17. (Or also possible to use as header only lib)

It gets far more complicated with C++11, since you also need a ton of other boost modules there.

For more Details you can read the Readme of it. https://github.com/boostorg/json
I did my best skimming comments the algorithm showed me,
including related posts' comments.
But man am I bad at reading comprehension.

If I miss anything then surely I am willing to be corrected.
But so far I don't see comments that show us
how to penetrate the four-layer system
(local hash check, semantic check by user,
on-server hash check, and human reviewer).
Agree. They had nothing to lose really....
Hmm, how will this differ from /e/os?
Because we think intelligent alien life has nothing better to do than destroy the natural beauty of star systems in order to power their crypto-coin mining rigs and video game cards. ;-)
Wow, I was wondering why my 2FA wasn't arriving, and I had to use phone call to get my code. Thanks for sharing, Google didn't even bother telling me.
UK court sets scene for $14B-plus class action against MasterCard
It's if it's higher than street expectations. They don't necessarily match analyst expectations, so it's a harder bet to make than you'd think. It's really only easy for a big beat or a big miss.
> No, they really do. But 99% isn't 100%.

Neither is 0. Python’s csv library does not handle any problem, it applies the separators / quoting / escapes it was given and that’s that. It gives the developer the opportunity to handle things, but if the developer isn’t aware nothing is handled.
Probably "because it's there".
They could have at least texted you about it!
They gain more than they lose by listening into our conversations to serve ads
Agree about Twitter not being suitable for this format, but this Q&A summary takes all the charm out of the story told there.
Thanks for sharing this. It is a good insight. WTF who cares, get the paycheck and whatever is an attitude far more common in industry than in academia.
If you use Apple devices, you are agreeing to their ToS which since 2019 give them the right to pre-screen your uploads for any potentially illegal (sic) content, not specifically CSAM imagery.

If Apple happens to use similar ToS in China (no idea if true), you bet CCP would be all over this clause.

A worst-case wild guess from the pessimist in me: they had to add this clause in 2019 to appease CCP, and then they got thinking if they could make use of it for the greater good (tm), too. Hopefully it’s very incorrect.
Glad to help. Hoping to save others my frustration.
Whats a good GV alternative? I dont mind paying for a service as well
It's clear that you have good reason to feel the way you do, but I'm sure you wouldn't jump straight to attacking another person in real life, just because they come from a different background and don't know anything about your experience.

You'd probably explain that the war looked very different from the other side, and give them information that helped them understand your point of view. You wouldn't overinterpret someone's simple comment about a trip they'd made as if it were some sort of political provocation. AlbertCory wasn't comparing his vacation anecdote with war deaths in any way.

If you had included the context you gave here ("if you were from Argentina you would know that war is still an open wound, that it happened during a de-facto government and that it was one of many atrocities that happened during that period") in your original reply, that already would have been enough to bridge the gap and create understanding. I think everyone here would benefit from learning more about the Argentinian experience.
You don't need to - I've just read it in incognito (firefox focus).

Agree on the terrible UI tho
Sometimes you get lucky with the D20.
Corollary is, spyware can use DNS to exfiltrate data [0]. Or, send out client-side metrics with cleverly drafted DNS requests [1], or use it as a 3p-cookie replacement [2].

[0] https://unit42.paloaltonetworks.com/dns-tunneling-how-dns-ca...

[1] https://github.com/Jigsaw-Code/choir (disclosure: I co-develop hard-forks of two other related Jigsaw-Code projects)

[2] http://dnscookie.com/
So the really frustrating issue here is that there's no functional replacement if Gmail is not your email provider: Google Voice completely ignores my email settings all over my Google account that send everything from Play receipts and Account notices to my actual email, and solely offers to send texts to my Gmail address which I haven't used since 2016.

I get freaking Stadia ads in my real inbox just because I opened that website while logged into my Google account once, but Voice has no way to recognize the email address that every single other Google service is capable of sending email to.

Voice is no longer my primary phone number for obvious reasons if you know me at all, but basically it no longer has SMS support for me, so my last major use of a Google service will end if they do not fix it.
Apple doesn't even have to know how their scanner will be used. It could simply be a requirement for selling phones in Country X, Apple must scan devices for hashes from DB-20210819-Illegal-Hashes-Country-X.zip. The hash file will be provided by Country X as will the messaging contacts for appropriate state security services.
Is this only for people using the "linked numbers" feature?

Edit: I guess that's actually the normal way of using GV! For weird personal reasons I'm using GV without a linked number, and I still receive SMSes at GV.
https://www.mozilla.org/en-US/firefox/facebookcontainer/