skysight-inc/HackerNews huggingface dataset:
The winner here might actually be the majority of NSFW content makers on OF who are mortgaging their future reputations for very small payouts.

(not a judgment on what they do but the reality of the situation
> 1. What's the point? In end-to-end encryption situations usually the concern is around data storage (perhaps), but for just sending messages typically TLS is enough (or seems it, anyway, from my perspective as a non-security engineer)

One use case I've used e2e for is password storage.

Assuming something like:

Browser -> nginx -> Web API -> Auth Service -> DB

This is a pretty common way to set up something like password auth, but a cleartext password will be exposed to nginx and your web api, for no reason, if you just use TLS. It's not uncommon for passwords to end up in request logs or that sort of thing in a system like this.

You could use ZKP, which gets you slightly stronger guarantees than e2e, but imo e2e is a really good sweet spot for solving this - the plaintext password will only be decrypted within a single function (the one that hashes it) in your secret server.
This seems vanishingly unlikely to me.

It would be far too easy for people to confirm that it was happening, and the PR hit - even to Uber - would be way more damaging than any financial benefit they would get from implementing this.
Horse accidents are quite scary things. Way more deaths per mile than cars I'm sure.
Boiling doesn't help with cyanotoxins.

https://www.epa.gov/sites/default/files/2016-11/documents/ha...

> CAN I BOIL MY WATER TO MAKE IT SAFE TO DRINK?

> No, boiling water will not remove cyanotoxins and may increase toxin levels.
I don’t mean to be rude but this is hopelessly naive. This isn’t MasterCard engaging in a marketplace-of-ideas good faith debate. This is using whichever tactics work to score points against whatever you’re trying to defeat. Thus the junk about CP, trafficking etc.

I would hesitate to even describe this as politics 101, it’s more like what students understand before they walk in the door of politics 101.

If someone says “your mom is so fat she sits around the house”, you don’t retort with an accurate measure of your mother’s BMI paired with a series of astute points about how it’s impossible to compare an adipose human body with the size of a dwelling. Like... seriously
> I find exceedingly difficult to imagine that one of the most sophisticated companies in the world, with some of brightest minds out there, did not consider and calculate this precisely; that there is any way any of this has come as a surprise to Apple

After having read a lot of internal Apple emails between executives[0], I find it extremely easy to imagine that they were completely dumbfounded that the rest of the world did not see things the same way they did.

[0] https://twitter.com/TechEmails
Apache Fineract – Platform for Digital Financial Services
wikileaks the terrorists who hate me and their entire contribution to journalism is "did you know people die in wars??? or did i blow your mind please give me more money" give me a break.
> You only need one development database. You do not need one per dev. That's just wasteful of computing resources.

Ideally, every developer would be able to have separate dev environments per branch in which they can work independently. And, yes, that means a suitable dev database which you can create and destroy at will.

The benefits of this are independent of whether one uses Docker. Scripting/automating this kind of thing may be a fixed cost initially, but even with a solo developer, it is likely to be very quickly amortized given the freedom to experiment.
I understand those arguments but find them unconvincing. These authoritarian governments could also just insist on seeing the cloud data and do not need to bother with such a roundabout way of getting it.
how is onlyfans prostitution?
There's no known way at present to regulate sex work in a way that keeps traffickers from coercing their victims to work for their benefit. Many countries outside the U.S. have tried and failed to do this. Maybe you can make the case for a teeny tiny niche of specialty services, too specialized to ever appeal to the traffickers; but even if that was in fact viable it's extremely hard politically to argue for such a thing.
The government could spend less and tax more, but this is politically and socially unpopular, so unlikely to happen.

But its not like its not possible. Some countries have fiscal surpluses. Canada had a surplus in 2018 [1].

I don't see what I'm arguing, and none of it is hypothetical, this is just basic economic theory. It is possible for government spending to be financed by borrowing rather than money creation, resulting in no change in the monetary base. Those mechanics I'm less educated about.

[1] https://www150.statcan.gc.ca/n1/daily-quotidien/201118/dq201...
tldr:

Diverting streams to go into different places increases the dwell time of the water by 45 days. when you have a rigid dry season, keeping the streams running for an extra 45 days is absolutely fucking huge. The clever part is that over the years the locals have managed to find the best place to divert water so it goes into springs that feed streams.

its a similar idea to a Johad, https://en.wikipedia.org/wiki/Johad which traps water for a number of days, increasing the dwell time and making the place wetter. The issue with Johads is that they can be a magnet for mosquitos. Johads differ in that they force the water into the soil rather than aquifers.

In LA, everything is done to make sure the water yeets into the sea as quick as possible. That water that would have hung around is replaced with the water from the LA aqueduct and the like. THe place gets drier, and hotter. I would wager, but can't assert that this water mismanagement is causing a large part of the drought in that area.
> To test the allegation, they used two phones with different battery levels

n=2 is only very slightly better than n=1, and still nothing close to a "debunking". Neither the original claim in the tweet nor the alleged debunking provide anything substantial, and nobody should be claiming anything until they do something at least semi-rigorous (n>10, control group, actual sampling of Uber prices and then statistical analysis).

I couldn't do this, as none of the people in my friend circle have the Uber app, but I'm not in SV - seems like there should be a few HN denizens who could pull off something like this relatively easily and put the question to rest.
Yeah, same. Life in prison just doesn't make sense to me, it's worthless at best and torture at worst. Just put a bullet in my head and be done with it.

Also, is it possible that Breivik for example was wrongfully convicted? Something tells me the answer is "no".
Ask HN: How is your supply chain dealing with soaring shipping container costs?
The cost of shipping by container has been soaring in 2021, with no end in sight. For those businesses that rely on container shipping, as tech clearly does with its colossal quantities of hardware originating in Asia, how have the supply chain plans of your business, whether big or small, been affected, and what steps can/should be taken to address it?

Some background links:

"Rising consumer demand and constrained supply of containers is causing disruption on the seas":

https://www.economist.com/graphic-detail/2021/02/11/container-shipping-costs-have-surged-in-recent-months

"Container rates are continuing to climb driving carriers’ profits while shippers continue to struggle with the ever-increasing costs. All major trade corridors have seen rate growth during the first five months of 2021 and fresh records continue to bet (sic) set.":

https://maritime-executive.com/article/container-rates-continue-to-set-new-highs-in-2021

"Last year we were paying $1,500-$2,000 a container from China and right now it's $10,500":

https://www.cbc.ca/news/canada/british-columbia/shipping-container-price-increase-1.6146496

Smith Corona even calles it "chaos":

https://www.smithcorona.com/blog/2021-supply-chain-chaos/
Whose to say drawn images won't get flagged? I mean a particular genre that exists but in all essence...it's not illegal not real. Creepy, weird, and disturbing, but not nearly as bad as the former.
Even worse, some browsers expose this too: https://developer.mozilla.org/en-US/docs/Web/API/Battery_Sta...
It's worse than that. The body doesn't like to lose supplies, so any calories burnt by exercise will be reclaimed by the body, which means that in any case (exercise or not) you'll need to eat less than what your body asks of you.

For some people this is cancelled by the virtuous side-effects of exercising, most notably sleep quality and low stress levels, as sleep and stress are the two most important levers on hunger/self-indulgence. For some others this is compounded by a conscious decision to allow oneself to eat sizable portions (or snack) to make for the effort, which immediatly cancels the calories deficit induced by exercice, most probably with compensation, considering how few calories are burnt by standard exercise durations.
You're assuming the police are nice and quickly announce when
they haven't found anything.
The more likely outcome is that it takes several months until the case is dropped silently.
FWIW... related article: The Rise and Decline of Vector Graphic : Management Mistakes and IBM Crush Couple’s Computer Venture (1985) https://www.latimes.com/archives/la-xpm-1985-08-20-fi-2173-s...
IP assignments and NDAs for dev shops and employees?
Anywhere I can find boiler plate, IP assignments and NDAs? I am hiring a dev shop and need them to sign off that they don't own any IP etc.. Also I have a few interns I need to sign it as well.
Then it seems like all punishment is unethical.
It's literally been all over the news, with journalists and analysts directly linking the column with the changes at both PornHub in December and at MasterCard in April -- and these are the people who follow this professionally. You can Google it yourself trivially, you don't need to ask someone on HN to get it.

But if you somehow don't trust that and you're asking for someone to report on the confidential goings-on of internal meetings at MasterCard and nothing else will satisfy you, you're not going to get that here on HN.
Go out of your way to show your work and progress regularly, just don't stay heads down all the time. Keep in constant communication with whoever would be interested in seeing it... bosses... users... etc
Funny, ancient Egypt has the same issue!
That's the first leap in logic, the second is this:

> The new MasterCard rules are a direct result of this, which basically means an overwrought Christian anti-sex fever dream is now dictating sexual content online.

That's right, the state of everything was "dictated" by a guy writing an article.
You don’t have to like it to love it, where money is involved.

“The live CUMROCKET price today is $0.053191 USD with a 24-hour trading volume of $4,789,810 USD. CUMROCKET is up 61.03% in the last 24 hours.”
Make the link expire after a certain period of time and not after first click.
You only need to eat less Calories, you don't necessarily need to eat less food.

Filling your stomach with the right foods can leave you feeling full while still losing weight.

Foods packed with fibre, mainly.

Which, surprise surprise, are mostly vegetables, beans, nuts, and whole grains.

Everybody knows those foods are healthy and will keep you trim, but hardly anybody eats them exclusively.
> Mickelwait, however, says there was a “fatal flaw in that they put a download button on every video.” Under current law, any site that transfers pornographic content is responsible for verifying the age of the people in it.

> “Because they had a download button that actually transfers from their servers onto the devices of millions — I think it was up to 130 million a day in 2020 — of visitors to the site, they have been responsible this whole time for record keeping. So what that means is they violated the criminal code of the United States millions of times, tens of millions of times,” she says.

Is this actually true? How is streaming not transferring under the law?

Edit: This article is also interesting in that it characterizes Mickelwait as a "human rights activist" without mentioning Mickelwait basically being the COO of Exodus Cry, which is an anti-gay/abortion/LGBTQ group among other things.
> These rules will basically require that OnlyFans (and every other site that accepts MasterCard payments) not only fully verify every user and every person who appears in every adult video, but review all posted content before publication, including real-time review of livestreams

It became extremely difficult to prove that there are not naked children on our platform. So we've decided to take our money and run.
They remain a duopoly rather than a monopoly only because they're already the subject of massive (though still inadequate) antitrust action. An economic modelling result I saw once suggested that a competitive market requires that the top four competitors own no more than a combined 60% of the market.
An ongoing collection of dog poop bags
I understand the thread, but if Kristof's reporting is accurate, then you can hardly blame him. He's not responsible if payment providers decide to freak out over potential liability. Or that OF can't figure out how to verify their creators.
"We sent people on round trips to the moon 50 years ago, so a one way ticket to Mars now isn't really that hard."

IDK, man, life support systems for such a long trip are much more demanding than for a jaunt to Moon and back.
If true, then gross. If not, well, it isn't hard to believe.

When MBAs say "don't leave money on the table" everybody else should hear "the MBAs are going to gouge us at every possible opportunity".
You found a dog poop bag that’s not part of the collection and would like to donate it? Please send a picture of the bag to mail@simonfreund.com for further instructions
YouTube is the only "social network" that I can defend. I honestly think it's the very best thing to ever come out of the Web. The key to it though is using it without a Google login and with cookies disabled. This gives you the default algorithm free experience and forces you to engage your brain to think about what you want to see, rather than being spoon fed down a rabbit hole.
Never gonna happen. Controlling the money flow is basically how power has always worked. Unless you have nukes, you can't enforce it
That's always the excuse why the payment processors don't like it (payment networks will ban them if their customers cause to many chargebacks), but the payment networks themselves clearly have control over those rules and can put requirements in place to compensate (e.g. require insurance, delay payouts, ...) without full-on banning business types.
Can you tell me what censored means in this context?
True.

But I'll point out their technical summary[1] explictly talks about attaching decryption keys to positive matches, which you don't need to do if there is no end-to-end encryption.

[1] https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
> How is a perceptual hash sophisticated and impressive given that it can be abused by governments demanding Apple scan for political content, etc?

It's pretty sophisticated when you look at everything implemented and also consider the infrastructure / review pipelines that are required. See the link below:

https://www.apple.com/child-safety/pdf/Security_Threat_Model...

It's based on perceptual hashing, but the whole end-to-end system is clearly sophisticated when operating on Apple's scale.
This book [1] argues that average IQ has been significantly increasing over the past century, and supports the claim with a wide variety of evidence.

However the author also posits that whether intelligence is increasing is still controversial and difficult to prove conclusively.

[1] Are We Getting Smarter?: Rising IQ in the Twenty-First Century
https://books.google.com/books?id=Z_-ykOVpRccC
I was in this exact situation last weekend. 3% battery, lost a couple drivers to cancellation (going Marina to Marin), and thought I was done for. Would’ve paid any price, but what they were quoting me felt incredibly reasonable the entire time, and around bar closing time on a Friday, no less. ($60 to San Anselmo)
Because the real concern isn’t that; it’s something like Apple vs FBI where the fact that Apple didn’t have a capability built have them a legal edge against a government with stronger rule of law.
I appreciate the reply. How did you get a background in toolpath generation? I am curious because I have a background in both software dev and machining, but haven't combined them much. Was this something you became familiar with in school or only when working at those companies? Any resources you would recommend?
As I remember it, one could be silent and still be together.
And yet after a whatsapp call I'll be advertised things I'd never mentioned by any other medium. It is striking.
There are some hurdles for sure, but for most of their history cars did not have chips in them, so we must have found a way.
The letter this article is about was discussed several times already:

Policy groups ask Apple to drop plans to inspect messages, scan for abuse images - https://news.ycombinator.com/item?id=28230248 - 284 points, 1 day ago, 190 comments

Policy Groups Urge Apple to Abandon Building Surveillance Capabilities - https://news.ycombinator.com/item?id=28232068
- 92 points, 1 day ago, 25 comments

Policy groups ask Apple to drop plans to inspect iMessages scan for abuse images - https://news.ycombinator.com/item?id=28231094 - 33 points, 1 day ago, 3 comments
This is a country where it's practically illegal to hire 13 year olds to work in flower shops, which is the sort of gig apt to teach a whole lot of commercially useful stuff. This is with or without parental consent. Maybe that is the sort of freedom people should get worked up over first?
OIC. Yeah, in general the JSON representation is really just for cases where some tool can't handle the binary. Think of it as an escape hatch more than a core feature.

If you're using Avro as a way to do JSON, that's definitely a bad choice. That's why I found the notion of Avro as a way to work with JSON documents as really... odd. (https://news.ycombinator.com/item?id=28222491) It's a decent way to manage data transfers (and I continue to argue a much better one that CSV or JSON), but as a "lossless alternate encoding of what's canonically a JSON document", it's a bad fit.
I used to torture Vendors, but then became one
How to eat less (Eat Meals)
>It's ok...

>thinking aloud

He's a CEO and is legally bound to not lie or mislead the investors though. For example Skreli is in part serving a federal sentence for lying to the investors who didn't lose any money.
"Apple said that there is a one in one trillion chance of a false positive"

https://techcrunch.com/2021/08/05/apple-icloud-photos-scanni...

Versus:

https://blog.roboflow.com/nerualhash-collision/

Along with:

https://github.com/anishathalye/neural-hash-collider

Demonstrates blatant incompetence on the part of Apple's design. At this point, trust is broken. That's the end of credibility regarding any other claim made about the security or base function of the system.

As for a simple example of one of many potential attack vectors (search HN for "neuralhash" and read the comments for countless examples), here is a basic attack:

As Apple's hash algorithm is entirely broken and useless, a malicious actor can easily craft a NSFW, but otherwise legal image, that has a hash matching one in the CSAM database, that is visually ambiguous in that context (for example, a close-up). Targeted attacks could be launched on unsuspecting victims as simply as sending them an image.

If their app is configured to auto-save to iCloud - as some are by default, and as many are configurable to be - the image will then get automatically flagged as a match, and may well potentially pass a human review - because the image may indeed look just like CP - and an innocent person, who may not even be aware of the presence of the image in their iCloud library at this point, may get visited by the police.

That in itself is bad enough.

However it gets worse - do bear in mind that "the police" is not an equivalent concept across nations, yet iPhones are ubiquitously used across the world. In certain countries, a "visit from the police" over such automatically-flagged content could well result in presumption of guilt to the point of immediately administered punishment and a destroyed innocent life.

In China for example, conviction rates are routinely 99.99% - being accused of a crime there is equivalent to being convicted, and that's just one major country containing well over 100 million iphone users.

Apple is demonstrating not only gross incompetence in this design of this "system", but vagrant disregard for human rights, along with utterly destroying their own long-cultivated pro-privacy stance.

It's a disaster for them and their customers in every possible way it could be.
Me too. I have ~20 members of my immediate and extended family that are iOS users. Since 2009, I've evangelized Apple devices to them, but if Apple pushes this through, I'm done. I'll find either a de-Google Android or feature phone to use and start encouraging them move off of iOS.
I've had a position for a while that we need to rethink our databases such that privacy is a first class citizen to minimize the potential space to "hook into" sensitive information.

Databases have access control mechanisms that scale to an organization, but web scale demands access control for the world which means that every developer working with a DB must invent their own access control to the data on behalf of their users. This basically means the database is open to all developers in a company.

Given the emerging regulatory environment, I suspect there is room to launch new database technology such that access control is an atomic feature built in.

I've experimented with this using my programming language for board games, and it is surprisingly amazing. I can model data schema and privacy at the same time, and I love it. http://www.adama-lang.org/
Got to love the cuckery of HN commenters when it comes to attacks on the VC wonder-childs.

Now that Uber/Lyft have monopolized the market on the back of years of VC funded revenue deficits, they will inevitably begin to raise prices. You are aware that Uber continues to lose ~$1B/year yeah? The entire model is VC-fuelled predatory behavior with the goal of reaching industry monopoly.

Taxis are already cheaper than Uber in many locations. Ironically I think that will become the ultimate outcome when all is said and done.

And yeah I know this will be downvoted. HN is very predictable in their parochial memes.

Edit: yep flagged and downvoted. Do you people want a world ruled by monopolies? You want only one choice? Very anti-capitalist of you.
Ok, well for those of us that didn't read the exact same set of articles you did, you sound like a guy making stuff up...so send some links.
It's really sad that the US is still not treating China as the threat it is to American IP and sovereignty.
What about magic links? :)
If that's the case why can't OF impose these requirements on their creators?
> 1. Photos (and other documents) are currently uploaded to iCloud un-encrypted

No, they are encrypted, just not e2e. Apple holds the encryption key, though.

> 2. These photos are already scanned for CSAM after upload

No, they are not.

> 3. Because the photos are not encrypted, at any point, any government can file a court order to release those photos.

Not because they are unencrypted, but because Apple can decrypt them on demand, since they gold the key(s).
How to Reload the Page with JavaScript
I might be wrong but I don't think boiling would work for chemical toxins ether. Unless it's life and death you should avoid collecting drinking water from stagnant sources always look for flowing water. If you have to collect water try and collect it from deep bellow the surface and far from the bottom.