skysight-inc/HackerNews huggingface dataset:
This part is legit though: governments around the world could pressure Apple to add other forms of surveillance. Be it hashes of non-CSAM, or simply pressure NEMEC or other hash providers, or extending its capabilities to all messages or photos on device.

In my opinion, this is the biggest concern, not the technology. Before, Apple could simply refuse by saying we don't have the capabilities. But now, that excuse is gone. Apple's promise to human review content and only report CSAM is the weakest link.
If you don’t send your photos this doesn’t affect you in any way.
Despite its name, that same extension does exactly that, I believe.

Actually, it has a switcher that lets you choose to darken or enlighten the webpages you read.

Honestly, I never understood why they had that option, but now I get it.
Anyone got a link to the full-text (or can at least cite the conclusion/discussion)?

The publicly available abstract just states "In this study, we discuss whether building a Dyson sphere around a black hole is effective." but no statements as to what they arrive at.
Better link: https://arxiv.org/abs/2106.15181

The results are fairly obvious: CMB and Hawking radiation provide almost zero power output, while an accretion disk and relativistic jets can provide a lot of power.
1) Some dev team at Apple is writing the on device scanning code.
2) Some dev team at Apple is writing a "sendMessagePolice()" API.
3) Some QA team at Apple is testing both systems.

I would personally quit if asked to work on any of these teams.

If you were the QA team lead for this, how would you test it? I can't imagine anyone would do day-to-day testing with actual illegal images.

It would not surprise me if the dev and QA teams at Apple already have hash colliding images to run their tests?

This is all awful. Steve Jobs must be rolling over in his grave.
Is rethinkDB still in active development? Has it been taken up by a community and potentially become like `The PostgreSQL Global Development Group`?

Asking because I'm a new dev and find RethinkDB fascinating, but fear my investments in learning will be in vain.
> It's it though?

Yes. Your phone is your private property, just like your house or your car. Searching your private property requires a warrant or reasonable suspicion, otherwise it's a 4th Amendment violation.

This twitter thread is worth a read.

https://twitter.com/pwnallthethings/status/14248736290037022...
That's how it's supposed to work, but frankly, once the capability exists client-side, I don't trust that it will continue to work that way.
> The Perseid Filament is a ribbon of dust inside the broader Perseid debris zone. Comet 109P/Swift-Tuttle supplies the raw material. The comet loops around the sun every 133 years, shedding dust as it goes. Over time, much of Swift-Tuttle’s dust is perturbed by the gravity of Jupiter, helping scatter it into the diffuse cloud that we experience every year as the Perseid meteor shower. But there is a part of the comet’s orbit in a “mean motion resonance” with Jupiter where dust can accumulate instead of dispersing. This is the Perseid Filament.

> Forecasters still can’t predict when the Perseid Filament will return. It came for many years in a row around 1993, and it may have grazed Earth again, slightly, in 2018, 2019 and 2020. No one predicted a direct hit in 2021.

I find it amazing that over 4 decades ago humanity launched Voyager 1 on a trajectory that led it out of the solar system - yet today we're being startled by unforeseen and intense meteor showers from our own planetary neighborhood. Don't get me wrong, the small scale of these objects and the complex dynamics governing their motion does seem like a hard problem to solve. But the whole situation leaves me with a feeling of awe - both for what we have achieved and what we have yet to understand.
My initial response was that maybe that's why Apples software development has gone down in quality so much in the recent years. But then again he's been leading it since 2009 so maybe not. But it's definitely around the same time that they started removing programmability from the core os.

https://www.apple.com/leadership/craig-federighi/
Recently I saw it stated that people may need one in about 8 months.

For the general population, I don't think that's going to be much before January.
Yah... I ran NetBSD-1.1 and then followed current for awhile from source on little machines-- first a 486, then a Pentium and a SPARC 1+. It was clean and wonderful.

I just dug the Pentium of my late childhood out of the closet and figured I'd play DOS games and install recent NetBSD. But GENERIC is too big even with the reasonable maximum 64MB of RAM (most Pentiums cannot cache more than 64MB) to do anything but crawl, and compiling a kernel takes about 15 hours on a Pentium 120... and sure, I could build on another machine, but is it even Unix anymore if it's not self-hosting?
The part about the naming conventions (https://rust-lang.github.io/api-guidelines/naming.html#ad-ho...) reminds me of Elixir's size and length (https://hexdocs.pm/elixir/naming-conventions.html#length-and...). I wonder if there is a way to enforce those conventions with a compiler/linter?
Marc looks more and more like Professor Hubert J. Farnsworth the older he gets
I did it in my late 40s, I don't think age is an impediment but finances might be. I have 3 children, two adult aged, one at high school and one still semi-dependent at University. Lucky my wife has a well paying job and is tolerating my low pay while we bumble along. Not sure I'm really waiting for the "high compensation at exit" though, more just really wanted to scratch an itch and do something for myself.
It’s not necessarily about the hiding as much as it controlling the narrative. If you publish reports but leave out one or two things here and there you can paint an entirely different picture. You don’t get to paint that picture if someone else is telling it.
In some incredibly pedantic sense, sure. But the difference is that every computer comes with what a human needs to read a CSV file. That's not true of an SQLite database.
Windows 11’s Default Browser Situation Is So Messed Up, Firefox Hacked It
A requirements management tool alongside source code in version control
It's true that the 6,000 banks in Europe have different standards, but the fact that the APIs exist and work and that the regulator is enforcing the use of real APIs (as opposed to screen scraping) is worth the effort to integrate each of the banks.

I work at Nordigen and we integrated with 1,500+ banks in less than 8 months. Some APIs took hours to integrate, some took a few weeks, but the fact that it was possible at all is IMO gamechanging.
That’s the point; you can’t identify that an image is CSAM just by looking at it.
That isn't how device drivers are used in NetBSD though, it is a different way of compiling them for other targets.
From [0]

> Tesla’s marketing has repeatedly overstated the capabilities of its vehicles, and these statements increasingly pose a threat to motorists and other users of the road. Accordingly, we urge you to open an investigation into potentially deceptive and unfair practices in Tesla’s advertising and marketing of its driving automation systems and take appropriate enforcement action to ensure the safety of all drivers on the road.

So even several US Senators believe that Tesla's deceptive advertising of the FSD capabilities is worth investigating and poses a threat to other drivers on the road. The same argument I have made weeks ago [1] and [2].

I don't think there is any defense in this sort of advertising, as the term 'Full Self Driving' is obviously misleading and the system is still incomplete, still in beta and is unreliable itself.

[0] https://www.blumenthal.senate.gov/imo/media/doc/2021.08.18%2...

[1] https://news.ycombinator.com/item?id=28053883

[2] https://news.ycombinator.com/item?id=28000436
Ask HN: Do virus mutations break the laws of thermodynamics?
How does a non-living thing like a virus mutate?

I have heard virologists liken viruses to seeds but seeds have cells, metabolisms, water and other energy stores and active running processes — seeds are alive.
How could you say that? You have to apply Occam’s razor here, which would say that Apple comically misstepped and nothing more.
> I can't imagine anyone would do day-to-day testing with actual illegal images.

You select any random image as your test image, marking that image as CP in the backend and then try to upload that image from your test phone.
Nobody expects Google and Facebook to care about privacy. Apple was the one running TV ads about how they were the privacy company. If Apple was really planning E2EE they would have announced it at the same time, because it would have been the perfect time to do it. Disarm the critics of E2EE with CP scanning and disarm the critics of CP scanning with E2EE.
Having to login to Twitter to read a thread is really annoying.
So, what does a person do if they do not consent to this search? Tough?

You can't realistically avoid the iOS update. Apple has effectively given consent on your behalf... How will that fly?
The CSAM detection system supposes people save actual child porn to their personal photo libraries.
The API side of this library is pretty good. I've generally avoided it due to the compile time, and preferred rapidjson due to both better performance and compile time if I wanted a C++ API, or cJSON if a C API is fine and I really just want an extremely low compile time (lately I've been playing with a live coding C++ context for a game engine, as a side project, I use cJSON there; rapidjson on main project though) (cJSON's tradeoff is it sticks with a single global allocator that you can only customize in one location, and also seems to perf slightly lower on parse).

The cJSON's C API or rapidjson's somewhat less ergonomic API has felt fine because I usually have read / write be reflective and don't write that much manual JSON code.

Specifically for the case where compile time doesn't matter and I need expressive JSON object mutation in C++ (or some tradeoff thereof), I think this library seems good.

Another big feature (which I feel like it could be louder about -- it really is a big one!) is that you can also generate binary data in a bunch of formats (BSON, CBOR, MessagePack and UJBJSON) that have a node structure similar to JSON's -- from the same in-memory instances of this library's data type. That sort of thing is something I've desired for various reasons (smaller file types with potentially better network send time for asynchronous sending / downloads (for real-time multiplayer you still basically want to encode to something that doesn't embed field string names)). I do think I may end up doing it at one layer above in the engine level and just have a different backend other than cJSON etc. too though...
> Craig's interview in and of itself was the biggest indictment of technology companies one could ever hope for. Dude literally stumbles as he says "multi-step algorithm"

Anybody a link?
https://www.no-fly-list.com/
Not sure if it is a fake or real.
i imagine they are doing this to comply with some law that requires they scan images in iCloud, and they don't want to start storing those un-encrypted. Does anyone know if there is such a law?
You understate your point. Many advances were 'known' in advance to be crap.
Sure. And the police only have your house under constant surveillance in case you sell heroin out of the garage. Don't worry, comrade, there is no reason to worry if you have nothing to hide.
Nice point. I also understand age factor is a myth in determining business success, as presented by Ali Tamaseb in his book Super Founders. About finance, I am thinking to continue working hard and as employee while saving aggressively, have family time and start some idea experimentation part-time. Once the children older, then only will start something more focusely.
> This program is ambitious, and protecting children is an important responsibility. These efforts will evolve and expand over time.

"Think of the children" is the most recognizable trope in TV and film. They couldn't have phrased that to be more Orwellian.
According to that line of thought, we wouldn't have speed cameras because they can't be used to detect e.g. drunk driving.

It's fair IMO to use fit for purpose technology to target specific crimes.

Though I agree this is bad technology, not fit for purpose, and they should yank it.
As much as I hate to say it, but VScode is a testimony of how performante election can be
Well, actuuuuaaallly…

Everything you said is already being collected about you. Cellphone towers can log where you are. Cameras around your city can recognize you. All they have to do is link all the feeds into one database that can be searched. The only place you can escape the watchful eye is your end to end encrypted stuff… which ain’t your SMS. And even there, you are just taking their word for it since it’s a closed source product.
I agree. The claims that E2EE are right around the corner are getting really tiring. If it was coming, Apple should have announced it alongside this "feature" and not expected everyone to trust them.
I read the parent post as asking whether emulators can be networked together.
Even if I grant all of the above, I don't see how any of that is impacted by the distinction between on-cloud scanning and on-device scanning of photos which are being uploaded to the cloud.

Surveillance is surveillance. It's a bit more obnoxious that a CPU which I paid money for is being used to compute the hashes instead of some CPU in a server farm somewhere (which I indirectly paid for) but the outcome is the same. The risk of being SWAT-ed is the same.
Have worked with InQTel in the past. Same premise, lots of work on their part to couple your tech to a mission, and are accountable to congress. Good group.
The most awful format ever; A chain of tweets interspersed with memes. This should be a blog post, but I guess that's too 1999 for the author.

So why do foxes lead you to treasure? Answer: They pathfind away from player not by euclidian "distance", but simply by number of navmesh polygons. The game world has uneven navmesh density, with points of interest (locations often housing treasure) having a higher number of polygons, so the foxes tend to pathfind their escape path into them.
That document is over six years old. It has nothing to do with Apple.
Sure, but that's a case of "we're prohibited from providing end-to-end encryption and preserving user privacy so we can scan for prohibited content as mandated by authorities", not "we are keeping children safe while still preserving user privacy"

Legal terms such as "murder", "fraud" and "rape" do change as effect of regulatory changes. "Encryption" and "privacy" do not.

There's a limit to how much you can bend semantics in your PR before it breaks and you get backlash.
Yes, until they add local scanning to macOS / iOS / iPad OS.
iCloud photos already has E2EE.
Understood that that is how you test in the early stages. But at some point you have to run tests against the actual deployed perceptual hash database.
Don't benchmark yourself against other Electron apps. Just promise yourself you'll eventually quit Electron. Electron is nothing more than a deal you make with the devil, selling potential for velocity, only the others are too far gone to even know where they are anymore.

When you develop for Electron, you're lured in with an attractive proposition, shipping more & sooner than you otherwise could, at the expense of ever being able to make the best version of your app. As a tradeoff, that's not too bad. You can at least, with just the few of you, get the product out the door sooner rather than later and pick up your first users. You keep going with Electron, because it has the least friction, allowing you to introduce new features and fix bugs at pace you otherwise couldn't sustain.

At some point you've listened to the silver tongue'd serpent for a little too long and you've got a slick app with all the value-adds you could want. Also, a giant user base. And that user base consists of people who all have a vague distaste for the app, but they use it anyway, because that's the game, that's how they get work done. Dragging everyone a little closer to hell if only by the amount of heat of their laptop CPU is putting out.

But hey, at least your app is still not as bad as Teams, right?
It's so bizarre how hard they're pushing this, even though they don't really gain much from it. This is especially weird because Apple has always pushed for user privacy. I just don't get it.
iPhone defaults and settings have a strong history of resetting themselves to values you didn't pick.
Why would you assume companies are more likely to be unable to think two steps ahead?
I'm saying freedom of speech should not have unwanted consequences, and in that sense it cuts far beyond what anyone considers reasonable. However, that doesn't make the definition wrong; it just means we better get comfortable with balancing conflicting interests.
Unrolled to avoid login requirement: https://threadreaderapp.com/thread/1428008043556622336.html
I think there's three different potential points/statements:

* a) The main overall productivity issue
* b) Making a more general point that they don't seem very bright, at least compared to former colleagues
* c) Specifically mentioning IQ score

Yes even though the main topic is (a)... b/c is just extra context.

I think OP's goal was to make point b/c to give some further context on their perception of the situation (whether it's true or not doesn't matter, the point is explaining what they think).

Sure both (b) + (c) especially can make you look like a dick, but I don't think making the (b) point is totally irrelevant to the overall post. It at least gives us more insight into what OP thinks, even if they're wrong.

So perhaps going the (c) route (rather than b) was just an attempt at trying to be slightly more objective (even though there's obviously no evidence at all). (b) is vaguer than (c), so I don't see that (c) was completely irrelevant, even though it comes across arrogant.
Can't they just make a new one and recompute the 2nd secret hash on the whole data set fairly easily?

Also, the whole point is that it's fairly easy to create a fake image that collides with one hash, but doing it for 2 is exponentially harder. It's hard to see how you could have an image that collides with both hashes (of the same image mind you).
On the one hand, a blatant cash grab. (IMHO)

On the other hand, finally I'll have a domain to rival Robert Elz.
Agreed. The author completely gets everything backward.

Why should his child care about how long America has existed unless it's on a test?

If you don't give someone a reason for why something is relevant, you won't get anywhere. If you don't try to make it interesting, to boot, you have no hope.
Check if your logo measures up to the best industry standards
If you do not consent to having your photos scanned for CSAM, turn off iCloud Photo Library. Same as how you opt out of CSAM scanning of your photo library on Android.

If you're concerned about other forms of scanning compelled by the Government, you never consented to the search. So even if Apple complied, the search is invalid and cannot be used to prosecute you.
Right here.. Founder in 40s..

Don't sweat.. If there are systems and processes you will be able to manage after an initial period of grind
Yeah I still remember Scott Forstall being pushed out over the Apple Maps failures. And that is how Jony Ive came to take over both hardware and software design, leading to the end of skeumorphic design that Jobs loved so much - and made the iPhone so unique.

Now Apple’s just a follower…
For many even using RAII, which even Turbo Vision for MS-DOS made use of, is already "modern".
Disney syndrome. Disney benefited from The Brothers Grimm, yet when it is their turn to return works to the robust public commons, they work hard to deny others the same opportunity.
Alameda and Cumberland?
Also, that's US regulations. The article is about Canada.
I don’t actually share your low opinion of trades people current or of yore - and even the most unethical plumber isn’t financially ruining people by the tens of thousands. All the to say this profession can be MUCH worse than the tradespeople of yore
Specially among the C+ community groups.
Match the first classifier, and your file gets uploaded unencrypted to Apple. Which is fine if it's probable CSAM. But what if they switch efforts to combat, say, piracy?
Because companies are lead by people and people make mistakes.
> Linus was at a free public university with free healthcare and the state supporting his living expenses when he created Linux. About as far from capitalism as you can get.

That's a pretty hard stretch there. The university did not finance Linux, it financed his education. Linus could just as well have partied instead. Free healthcare is nice, but for the vast majority of 20 year olds, very little healthcare is needed.
This is the library I settled on for a project a couple of years ago. Although I was intrigued by the magic of expression templates, my usage is actually pretty straightforward and boring. One thing it has that some of the other libraries I evaluated lack is the ability to parse numeric strings yourself, which I wanted for a decimal floating-point type.

There are lots of other libraries, and surely some faster ones, but I haven't felt any need to change. I was nervous when I got an inexplicable overload ambiguity in xlclang++ for AIX, but it went away when I grabbed a newer version of the library.
What kind of attitude is that? Why shouldn't someone be proud of themselves, when they manage to implement a crypto library? It's not like they're asking you or anyone else to use it with sensitive data and they're not pretending it's secure or on par with others.

The whole OS is a learning process for almost everyone involved and they have every right to feel proud of every little step they take. Like do you think the best in class crypto libraries out there just popped into existence or their authors wrote the perfect code on their first try? All of them were inferior wheels at one point, and all of them made mistakes and learned from them.
Apple also ran ads about this:

https://m.youtube.com/watch?v=Af0gtsjfy7E

What’s your point? Apple said RISC was better and faster than Intel, until the day they adopted Intel, and then they said the complete opposite. They acted like they invented the Omnibox for Safari and so forth. It’s for marketing.
That's the approach Sedeewick of the (in?)famous textbook takes. He also has one neat tweak that simplifies rebalancing: when traversing a B-tree for insertion, preemptively split any full nodes as you visit them. This ensures there will always been room in a parent node if child nodes force keys up.
I would add word processing, the GUI, email, the telephone (even if the computer you were using was a 3B2 in a windowless data center downtown), text chat, Hypercard, MacPaint, video streaming, CAD, GPS, engine control units (which you use every time you drive a car made in the last 40 years), and the GENESYS animation program.
Hah, I use the join function when I write them. Can you elaborate upon why that’s bad?
I’m starting to wonder if this is Apple’s strategy all along. They’ve had pressure for years from law enforcement to abuse their monopoly power to invade people's privacy. So they implement it in a relatively naive approach and sell in a hamfisted way, so that everyone turns against them for a little while. Apple backs off, and every time after this they point law enforcement to this debacle. See, we can’t help you, our customers wouldn’t tolerate it!

Not sure if it’s true or not, but we shouldn’t assume companies always intend their public plans to succeed. Maybe they actually want a high profile retreat — it could certainly save them development time down the road by not implementing government misfeatures.
Making mistakes is one thing

Thinking two steps ahead can be done even when you make mistakes