skysight-inc/HackerNews huggingface dataset:
Hah nah, that just isn't true, look at history at any point. By enforcing regulations to ensure clean restaurants and food, that market has grown so much bigger because people trust eating out by default.Don't overestimate the power of trust in growing a platform. If AirBNB poisoned you every 6th stay, how long would you use them?

Sometimes I am stunned with how libertarian some of these comments are. Government is just us, and it is a amazing because it isn't free market. The free market only works when given strong bumer rails to stay between, otherwise it starts taking advantage of the system and causing environmental damage, damage to labor, etc...

The free market can't do a lot of things. It can't provide high quality health care, it can't provide economic protections, it doesn't provide protections for labor, so many things.
> No vendors are snooping your phone/computer browser cache

a) That you know of
b) Apple won't be doing this either

> Apple is building it.

No, they aren't.
The newspaper in a town where I went to high school has had an two sentence article up in their archive for 15 years that, in its vagueness, implies I was a drug addict and high school dropout in the 90s when I was 16.
If you dislike the state so much I might suggest you spend some time in Somalia and let me know how you like that.
> Westerners fail to understand tribalism, or any clannish attitudes.

We do, but that doesn’t mean we don’t have the same behaviours. Watching various western elections over the last few years has been a demonstration of tribalism rather than any particularly logical process.
Should this be called the left-pad moment of just-in-time?
Patreon made similar decisions about four years ago when they began to tighten their terms for NSFW creators.

https://www.engadget.com/2017-10-27-patreon-adult-content-cr...

Much of the pressure came from payment processing partners and banks, much like is described in this article.

https://www.vice.com/en/article/vbqwwj/patreon-suspension-of...

It seems like for any crowdsourced funding platform there is a volume cap for NSFW content imposed by the need of those platforms to seek wider audiences and funding sources.
Goodbye OnlyFans
To privacy or not to privacy is not the question; the question is privacy for whom.
The quantum needle of the avian magnetic compass
> Because they don't know who to arrest yet. The idea isn't to fabricate a charge, it's to locate people sharing politically sensitive images that the government hasn't already identified.

And maybe even identify avenues for sharing that they haven't already identified and monitored/controlled (e.g. some encrypted chat app they haven't blocked yet).
I think I have an answer. All photos of under 18's left in the database, will be used by Apple(and others), for their hashes.
If you don't want to click:

> Abstract. To perform a longitudinal investigation of web archives and detecting variations and changes replaying individual archived pages, or mementos, we created a sample of 16,627 mementos from 17 public web archives. Over the course of our 14-month study (November, 2017– January, 2019), we found that four web archives changed their baseURIs and did not leave a machine-readable method of locating their new base URIs, necessitating manual rediscovery. Of the 1,981 mementos in our sample from these four web archives, 537 were impacted: 517 mementos were rediscovered but with changes in their time of archiving(or Memento-Datetime), HTTP status code, or the string comprising their original URI (or URI-R), and 20 of the mementos could not be found at all.
Serve nature? Keep bio diversity and be a buffer for nature.
Great comment, thank you! Feels like cooking is a skill a lot like programming where you can be stuck in tutorial hell without ever actually learning anything. I'd like to get out of that and your about just trying things out and seeing how they taste helped me shift my mindset about it
It should be rewritten in Rust.
RIP: their biz model
Wells are still running dry, in spite of California's 7-year-old groundwater law
What about giving a censored version of the appropriate image? Like put a big black rectangle covering whatever awful thing is the subject, and just (e.g.) show some feet and hands and a background.

Then you could provide a proof that an image which is the same as the "censored", one except for the masked part, has the perceptual hash specified. I don't know if this is technically feasible (but I'd be happy for someone knowledgeable to opine). I also admit that there are secondary concerns, like the possibility of recognising the background image, and this being used by someone to identify the location, or tipping off a criminal.

Probably it would only be appropriate to do this in the case of someone being accused, and maybe then in a way where they couldn't relay the information, since apparently they don't want to make the hash database public.

Also, for the record, I'm spitballing here about infosec. This isn't me volunteering to draw black boxes or be called by anyone's defense.
I doubt it, all they need is this stuff and they can get a warrant to rummage through your stuff and take all your computers, usb drives, etc and also put your name on a watch list and your permanent record. Much like newspapers retracting mistakes if the story doesn't pan out, it goes on the back page. Plenty enough to wreck your life.
Unfortunately the price you might pay for this is getting locked out of your account. It happened to my brother. One verification step was supposed to be birthday.
> I'm not sure how to take this seriously. There are economically disadvantaged Asian students, but there is no evidence this change helped them. We have empirical evidence the change increased Black, Latino and White student counts; we also have evidence it reduced Asian student counts.

There are demo breakdowns. You can look at the intersection of asian american admits and free-and-reduced-lunch admits. You'll find that there are more economically disadvantaged asian american admits in the recent class than in prior years.

> That's not what I've found. Everything about the school looks extremely White. Being 'active in this discussion' is irrelevant and there is no data to support your assertion anyway.

Do you attend the FCPS meetings?
> there is still no guarantee that the hash list used can't be coopted for another purpose (eg; politically insensitive content).

That isn't a bug, it is a feature and will be the main use of this functionality.

The "preventing child pornography" reasoning was specifically chosen so that Apple could openly coordinate with governments to violate your privacy while avoiding criticism.
This addresses part of the problem. Don't forget the character encoding, null encodings, separator, quote and escape chars,...

No doubt, you can use csv in a well defined way if there is agreement and specs. The problem is there simply isn't any defacto standard and it won't be able to establish one in this domain...

Btw. : The python intake package allows you to specify metadata.
> Actual privacy would be proactively removing all images of under 18s from search.

But there are valid reasons for why you would want photographs of u18s in search results (e.g. student athletes, etc)
There's clearly some sort of opportunity here for an Audius like decentralized application/protocol (with the UI figured out), or just applications on Urbit when that stack is ready enough.

Centralized services like this will always fail eventually. We need better models than our current megacorp/client stack and the incentives that creates for most services.

In this case though it may be a factor of liability changes on high risk content: https://www.wired.com/story/how-a-controversial-new-sex-traf...

It's not so much the tech companies and payment processors that are making policy, but a reaction from them to changes in government policy that increases their exposure.
Agreed. If China can force Apple to do almost anything by threatening to ban iPhone sales, why bother with fake CSAM hashes? That just adds an extra step. It's not like the Chinese government needs to take pains to trick anyone about their attitude toward "subversive" material.
I read it very closely :)

The government doesn't just print money to pay for what it needs. It also takes money from it's citizens so that we all pay for what it provides us with.

Inflation isn't controlled by the government anyway, it is also psychological with consumers. There is no group in the government who can set inflation to x, there is a fed that tries to move it the right direction based on what smart people think.
CSS Drummer – proof that no new browsers will now ever be possible
Hmm how long before we start to see companies extracting money from ransomware gangs by deploying honeypots and selling access to them?

Imagine getting blacklisted by ransomware gangs for being an untrustworthy company.
By leaving your home and going out in public, you are implicitly consenting to being observed. So, no, that's not a violation of your privacy.

Apple's implementation is more like a stranger sneaking into your house if they suspect you're up to something bad. That would be equally unacceptable - we have warrants for a reason.
Because there is no run for commercial grade GPUs from miners or gamers stuck indoor.
Here in the United States I use the same debit card for sports betting and groceries.
Netflix, Uber, Amazon, PayPal, etc?

It's hard to exactly define "first to market." Was Google first to market because they were the first to have a search engine that functioned in the way theirs did, and should we put more primitive search engines in the same category?

Was Dropbox first to market? Did they win the market?

It often feels like a company is first to market, and then they win that market... and then maybe five or ten years later, an innovation comes along from a new company and they lose the market. That's just the way the market is supposed to work, and natural, but there's still an advantage to being first to market in having those years of market dominance.
Yeah, but if they tell us they're doing that, then it's pretty obvious what they're up to. And if they don't tell us they're doing that, but do it anyway - then they have to perpetually pay every developer involved in that upgrade enough money to keep their mouth shut indefinitely - knowing that the developers know that APPLE knows how much they'd lose in fines if they got caught. Which is an unreasonably large liability, IMO.
Except that there's a threshold involved. A single matching file doesn't trigger an investigation; it takes multiple (10+, maybe more?) matches to do that.
I wonder if Toyota was a little slower at starting to expedite, for having had a large buffer stock already in hand.
Well that’s a pretty orthogonal concern to the above comment that was worried about getting flagged for sharing pics of their own kids
Is your pay competitive with Facebook.

I know if I ever get an opportunity to work at a FAANG I'm selling my soul until my stock options vest and then I'll try to retire abroad.
1. You'd be surprised what kind of traffic scrapers can generate. I've seen scraping companies employing botnets to get around rate limiting that could easily cost enough in extra server fees to cause an "undue burden".

At a previous company we had the exact problem that we published all of our content as machine readable xml, but we had scrapers costing us money by insisting on using our search interface to access our content.

2. No one is going to jail for scraping a few thousand or even a few million pages, but just because low speed web crawlers are allowed to index the site, doesn't mean scraping for every possible use is permitted.
Potemkin Nation
I don't know. But if the answer is "we won't snoop your browser cache", then people will quickly learn to store offending material under browser caches. Then Apple will have to start scanning browser caches. There is no policy fix for this; pedophiles aren't stupid.
Basically when you modify an orbit with a single impulse - short rocket burn, bumping into something, etc - the resulting orbit will still intersect that point (unless you reach escape velocity). So those pieces should return to that piece of LEO, although they could still be spending large amounts of time far from there.
Employers that fail to compensate their employees in the agreed upon manner are incredibly scummy and you should run very fast in the other direction. That said if the person who runs payroll was suddenly sick for three days in a row getting your payment two days late is acceptable.

It's a question of the magnitude of lateness - if ever your employer says they'll "make sure you get double next pay period" it's a good sign to leave - and they're still obligated to pay you for the previous pay period regardless of how undiplomatically you exit.

You also need to realize that a lot of Americans work paycheck to paycheck so an employer failing their obligation can cause financial hardship and possibly force debt (with the accompanying interest) on their employee.
If your iCloud Photo library contains enough photos to trigger a manual review + FBI report, how does the scenario make no sense?

And as far as your point about "someone you trust trying to 'get you'"... have you ever dated? Ever exchanged naughty photos with somebody (I expect this is even more popular these days among 20-somethings since covid prevented a lot of in-person hookups)? This doesn't seem crazy for a variant of catfishing. I could easily see 4chan posters doing this for fun.
Either way more competition is good, and competition doesn't have to be across state lines. Right now it is possible to drive over to the next county with lower sales taxes/fees.

I can save $42.50 on my next iphone simply by buying it in the county where my job is, before I head home.
The birthday paradox and the algorithm are not related; the birthday paradox is simply the phenomenon that even though there are several orders of magnitude more hashes than images in ImageNet, it is still likely that collisions exist.

The algorithm sounds like a simple tree search algorithm. Let's consider the naive case: traverse all images, and keep a list of hashes you have already visited. For every extra image, you have to traverse all previous n hashes you have previously computed. Naively doing this check with a for loop would take O(n) time. You have to do this traversion for every image, therefore total time complexity is O(n^2).

Fortunately, there is a faster way to check whether you have found a hash before. Imagine sorting all the previous hashes and storing them in an ordered list. A smarter algorithm would check the middle of the list, and check whether this element is higher or lower than the target hash. When your own hash is higher than the middle hash, you know that if your hash is contained within the list, it is contained in the top half. In a single iteration you have halved the search space. By repeating this over and over you can figure out if your item is contained within this list in just log_2(n) steps. This is called binary search. Some of the details are more intricate (e.g. Red-Black trees [1], where you can skip the whole sorting step) but this is the gist of it.

This all sounds way more complicated than it is in practice. In practice you would simply `include <set>;` and all the tree calculations are done behind the scenes. The algorithm contained within the library is clever, but the program written by the author is probably <10 lines of code.

[1]: https://en.wikipedia.org/wiki/Red–black_tree
I would argue you are reversing it.

The people create government which creates a platform that creates greater wealth, which the government gets a percentage of through taxes to further improve the platform... repeat.. repeat...
What do you mean? Python comes pre-installed with every distro I know, virtual environment support is built in, alternative version packages are readily available on distros (but backwards compatibility is pretty good in Python anyways).

If anything, Python in Docker is more of a pain than bare-metal since the distro (usually alpine or debian) ships its own Python version and packages that are almost entirely disconnected from the one the image provides.
Exactly. Future of France over here.
C64 OS
It didn’t seem to take long for the weights for Apple’s network to be discovered. And I suppose they must send the banned hashes to the client for checking too. So I expect that list will be discovered and published soon too (unless they have some way to keep them secret?) I think one important question is: how reversible is Apple’s perceptual hash?

For example, my understanding of Microsoft’s PhotoDNA is that their perceptual hash has been reverse-engineered and that one could go backwards from a hash to a blurry image. But also it is very hard to get the list of PhotoDNA hashes for the NCMEC database. In other words, are Apple unintentionally releasing enough information to reconstruct a bunch of blurry CSAM?
If the CCP says “put this arbitrary software into your next iPhone software update or we will halt all iPhone sales in China,” what do you think Apple is going to do? Isn’t the answer to both questions the same?
Goodreads' Problem with Extortion Scams and Review Bombing
IIRC many totalitarian governments, historical and current, made/make their surveillance blatantly obvious, because the chilling effect deterring people is much more valuable than the added intelligence value from keeping people careless.

After all, they want to suppress dissent, and they can't catch and arrest everyone - it's much more effective if people don't even dare to voice their dissent.

This is also why you see people in situations like the Arab Spring use known-insecure/monitored means of communication, because they realize that the value and power that comes from communicating and finding other likeminded people is worth painting a target on yourself (because you can't succeed without it, and if you succeed, there will be too many to prosecute).
Hey Adrian - you're not wrong.

But it took me having a new experience and perspective to actually see some of that stuff clearly - and be able to say with more certainty that they apply to more than one situation.

Thanks for reading and the feedback!
Relevant: "Cool URIs Don't Change": https://www.w3.org/Provider/Style/URI
I think the initial purpose was similar to Patreon: allowing creators a way to monetize. It just became famous due to the pornographic content.
We do need more research, sure - but in the absence of such, the default stance should be permissive, not restrictive (in general, not just for cannabis).
Well, depending what it is you can also templatize, pass in lambdas, use inheritance, or whatever else you can think of.

#define definitely is not "modern". If nothing else it'll set you up for having problems modularizing it in the future.
Why can't these websites simply find other banks to do business with?

I mean also overseas, for sure the extra costs (if any) are better than basically killing the golden goose.

The odds of Onlyfans becoming the huge phenomenon that it is were so slim, it seems like a waste of luck to just throw it all away because of banking problems.
There is barely any popular sentiment behind keeping any age group's images off the internet. Quite the opposite actually, people want their images online and they'll gladly and enthusiastically hand them over if you give them a platform to do it.

The journey we're on with our lax attitudes towards privacy will finally be complete when Big Tech truly sinks its teeth into health/biology.

We will give them real time access to data on our bodies, our health and our diets and mint the first trillionaires in the process.

Interesting times are coming.
It is odd watching a bunch of people who effectively deal with rules all day try to predict behavior for a group of people who effectively ignore rules all day.

Why is a ransomware company going to follow the rules of common decorum when dealing with a collaborator if the whole point is to defraud a third party?

How do I know that they made the payout? Is the collaborator going to come forward and identify themselves? The only way you know that person got paid is if they don't get arrested. There are whole branches of organized crime than live and breathe in the space between 'got paid and lived happily ever after' and 'ended up on the front page of the NYT'. Just off the top of my head you have blackmail, extortion, and hiding the body.
How is this different from server side scanning, the policy de jour that Apple was trying to move away from?
How Text Messaging Works, a Love Story
Thanks to show that a little semantics can come a long way.
IMHO the point about .csv is that writing a parser is trivial so none of this matters.
Many writers bork on certain types of data.
No biggie.
Yes there are variants, no they are not complicated.
Trying to support _all_ variants of something that is not well-defined is a mugs game. Most of the differences are by mistake. Some of the differences can't be fixed in the parser.

If you need csv to work, pick any one interpretation that does work.
Once the code landed in iOS and is activated, it is too late.
Yeah, "incapacity" is the wrong term, since more learning should never decrease your capacity to do something.

He's against the overlearning of a skill in a classroom, especially since you won't really learn how to do most things until you close the books and just go do it.
Interesting. Does this means that there is a business to make companies like OnlyFan and Patreon for adult content and then dropping it once you get big, and start again?
> If you don't trust Apple then they could've already done what you're concerned about before they announced this.

Not without the risk of it being discovered (either through a leak or because someone analyzes the software on the phone), and then having a much bigger scandal on hand.
I'm not convinced by the conclusion, but the idea behind what to test and the data analysis is thought-provoking.

I am not convinced that the phenomenon seen is not an artefact of the choices made of the seven questions narrowed in on. To channel Andrew Gelman, this kind of study starts in the middle of the garden of forking paths.
Yes, alcohol has an effect on developing brains as well, although the brain is less malleable as you approach that age. https://www.bbc.com/news/magazine-24173194
A 5x reduction in RAM usage with Zoekt memory optimizations
Some members of Afghanistan's all-girls robotics team escape country
Tibetan Buddhist meditation practice makes it quite clear that you can (and are expected to, eventually) change which thoughts arise in the first place.
Depending on context of that question concepts and/or just SFINAE could help with that.

I'm not shitting on the library in general, I'm saying the second paragraph disproves the title.
In the interview Craig Federighi gave on Friday, he said 30.[1] I have no idea if he was just throwing a number out or if that's the actual threshold.

[1]: https://tidbits.com/2021/08/13/new-csam-detection-details-em...
> Why make this feature opt-in?

Because of support costs.

> Why exclude this feature from prepaid plans?

Because prepaid plans are not tied to IDs, so validating identity to "unlock" your prepaid account proves difficult.

> These are abysmal security practices.

As a T-Mobile prepaid customer, I agree. I have emailed their CEO and actually got a response back when I shared my feedback. They were helpful, but that was after I threatened a lawsuit, so YMMV.
Most folks will follow this approach - but it's not guaranteed. Some of the attackers will betray their victim and ride on the goodwill garnered by other attackers to make their strategy sustainable.
We still have a much different attitude toward that kind of data today. If some company leaked all its customers' names, addresses and phone numbers it would be considered a terrible scandal. In the 80s you would be upset if the phone company didn't print out that same data and give it to every customer for free.