skysight-inc/HackerNews huggingface dataset:
Would this work as an attack?

1. Get a pornographic picture involving young though legal actors and actresses.

2. Encode a nonce into the image. Hash it checking for CSAM collisions. If you've found a collision go on to the next step, if not update the nonce and try again.

3. You now have an image that, to visual inspection will appear plausibly like CSAM, and to automated detection will appear like CSAM. Though, presumably, it is not illegal for you to have this image as it is, in fact, legal pornography. You can now text this to anyone with an iPhone who will be referred by Apple to law enforcement.
> While people in other countries may be used to always having to carry identification, this is rather provocative in a city and state which does not require identification, among other situations, when you register to vote or vote. It is also deputizing museum workers, gym owners, restaurant waitstaff as identity checkers.

Restaurant waitstaff are already regularly “deputized” that way by alcoholic beverage control laws.
Too much complexity without any benefit (when adjusted for new failure cases and cost of additional components and complexity).

Electronics is mostly KISS, not only motivated by the financial factor but also reliability, manufacturing, etc.

So far micro controllers are too expensive, too sensitive to unstable power supply, too complex in general (requiring some support components in some cases, have an additional prefabrication step for flashing firmware by the chip vendor, and cost a lot more.

There is no clear advantage to the approach you mentioned.
Apple does say something[1] to that effect:

> This program is ambitious, and protecting children is an important responsibility. These efforts will evolve and expand over time.

[1] https://www.apple.com/child-safety/
one vector you can use to skip step 3 is to send on WhatsApp. I believe images sent via WhatsApp are auto saved by default last I recalled.
Cite?

* There are different levels of "humungous." In Soviet-style countries, party members were "rich" in the sense of having a few times the resources of a typical citizen (e.g. 5x). In the US, the rich might have $100B, while the poor might have $20k in assets (non-liquid -- counting things like a car and a TV). That's 5,000,000x times richer.

* There are a few directions of causality. The CCP might be corrupt, leading to leaders becoming rich. The CCP might be recruiting rich people. People becoming rich might have joined the CCP since it makes live easier. Etc.

I'm not disputing your facts, but I would like to understand them better. There's a lot of nuance there.
Hmm, I think The Frame 32" was about $500 and the Nvidia Xavier NX costed as much (including import taxes etc). The other stuff (cable channels, screws, MDF etc) was probably around $50. So a total of around ~$1050.
Sounds like hipster T-shirts with hash collision images.
FWIW, the Seattle rate you've cited is for people 12 or older, while the 56% NYC rate is for everyone in the city. NYC's vaccination rate for those over 12 is closer to 75%.
I absolutely agree.

I love being made to think during a movie. I despise the movie ending without an ending.

It's incredibly easy to set up a scenario that could have multiple endings, but it's hard to see what the ending actually is before it happens.

It's a lot more entertaining and satisfying to view that scenario to the end and then have the tale end in a satisfying way.

Any idiot can come up with an ending to those tales. (And they do, because you'll find them posted on the internet afterwards, even if the movie already has one!) Only good writers can come up with good endings.
Elasticsearch has nothing to fix - the product does precisely what the config tells it to. Maintainers of various distros ES packages are largely responsible for any [mis]configuration there.

If you'd like to read how you can secure ES, go do that: https://www.elastic.co/what-is/open-x-pack

PS: x-pack is the piece that adds authorization/authentication to ES.
There are two different "features" being implemented - Messages scanning for minors on a family plan (which can be turned off) and iCloud Photo scanning (which can't be turned off, as far as I know). So no, you can't just turn it off.
Then why not wait until that actual issue comes up. The look is so bad / awkward with this big protest over something that many people are not going to find at all objectionable.

Do you really think Apple's brand has been "destroyed" over this?
The "Lost" miniseries is enjoyable only once you accept that it simply doesn't make any sense. Just enjoy the moments.

Though "Lost" was on to something with the dialog "it's a snowglobe!" They could have followed up on that, leading to a satisfying conclusion, but as with everything else, it just went nowhere.
It's not moving the goalposts, it's describing the scale of the problem. If fusion won't be addressing a significant fraction of the CO2 problem, it will be because it's inferior to the non-fossil energy sources that are. In which case, why is it even needed?

Nuclear fission looks unable to compete with renewables at current prices in almost all the world. There's a zone around Poland where it does the best. But even those zones go away as renewables and storage proceed down their experience curves. If there are very minor niche uses, fission would work just fine vs. fusion, particularly in high latitude countries that are already members of the nuclear club.
Technical nitpick: the hashes are not hashed (again), but rather cryptographically blinded. This is not reversible, so seems like a hash, but computations can be done on it which result can in some cases be seen by the server. This is actually all very clever, and described in a paper by Apple, linked from the technical summary article.
I scraped them from various art websites.
I don't remember enough about Welles' life and career without checking to be sure, but there's a good chance that the flaws are the result of welles' running out of money or having control of the film taken away by other producers due to his inability to meet deadlines.
Tesla making superchargers available as well to cars made by other manufacturers could become an interesting development, at least during the early days.

Having read during the past months/years that Tesla's chargers are very reliable (not buggy nor just "offline" for some weird reason - e.g. just this afternoon I wanted to charge my hybrid at a specific parking garage in Zurich/Switzerland but the whole floor where the chargers are located was closed), a lot of car owners might want to use them => Tesla owners might get angry seeing that "their" chargers are all busy by non-Tesla cars => advantage of owning a Tesla would suffer.

On the other hand Tesla might get more (stable) earnings through this and the company might play with the charging cost, e.g. increasing the charging/parking cost for non-Tesla owners or at least taking more into consideration involving the cost the charging rate of the non-Tesla-car being charged and/or the time during which the charging station was busy.

I guess that the worst/most-expensive combination would be "non-tesla" + "big empty battery" + "low charging throughput"?
Wow awesome work, didn't know there was a program out there that was free and open source that could do this! Definitely checking it out.

One small thing, it looks like the slash screen image on the page is fixed width and makes the viewport for mobile devices like 3 times the size it should be. Other than that, good work!
> periodic batch [] real-time detection network

What's the realistic difference here between "my phone scans the photo on upload to iCloud Photos" and "iCloud Photos scans the photo when it's uploaded"?

Latency of upload doesn't come into play here because the scan results are part of the uploaded photo metadata; they're not submitted distinctly according to Apple's technical description.

(And given the threshold needed before you can decrypt any of the tagged photos with the client side system, the server side scanning would be much more "real-time" in this case, no?)
I love how you can buy it on Steam/Windows Store/Epic. It's a great way to support the project, really more FOSS should do that (putting a paid version in stores). Yes it's literally the same but still some people just like to have everything in one library.

https://www.microsoft.com/en-us/p/krita/9n6x57zgrw96

https://www.epicgames.com/store/en-US/p/krita

https://store.steampowered.com/app/280680/Krita/
BigCos, take note: you’re better off doing nefarious shit without telling anyone. Because, if you come clean, you’ll only invite an endless parade of bloggers who will misconstrue your technology to make you look bad.
folklore.org has some interesting bits on the evolution of the Lisa interface:

1. Hertzfeld says that Steve Jobs saw Smalltalk rather than the Alto or Star GUI:

https://www.folklore.org/StoryView.py?story=On_Xerox,_Apple_...

Larry Tesler and others moving from Xerox to Apple is perhaps a more direct path for technology transfer. And of course the Star actually shipped two years before the Lisa.

2. The evolution of the GUI itself is particularly interesting, showing the appearance of the menu bar/pulldown menus and Mac-style scroll bars:

https://www.folklore.org/StoryView.py?story=Busy_Being_Born....

Apparently Jobs gets credit for the extensive use of rounded rectangles:

https://www.folklore.org/StoryView.py?story=Round_Rects_Are_...

3. Apparently Bill Atkinson was inspired by MIT's Dataland to implement a spatial layout based Lisa Filer

https://www.folklore.org/StoryView.py?story=Rosings_Rascals....
He's not talking about the wealthy, he's talking about scientists, most of whom are not rich, or at least not "super-elite" level rich.
Well, we are already banning numbers (see: DeCSS), what’s the big difference?

In some countries even discussing the application of certain numbers is unlawful.
> great production quality and no pressure so I can take my time

Exactly that, plus immersiveness.
Show HN: Rekex – parser generator that derives grammar from parse tree datatypes
The real prize was not gas or minerals, but all the enemies they made along the way.
>If the government doesn't have the authority to mandate vaccinations

The government absolutely has the right to mandate vaccinations, they just have chosen not to. I've heard this repeated more than once and I don't know where people got it from. On top of the supreme court ruling, just about every state has a state-level law giving the governor the right to enforce vaccinations as well.

https://mtsu.edu/first-amendment/article/1824/jacobson-v-mas...
They are almost the opposite. The programs create different hashes (though very similar) depending on platform you run on even with SAME input. No crypto hash works even close to this.
I understand this desire especially today. Less driven by lack of equal rights/access to education.

But more that I think we've lost a lot of community and the built in 'family' that LGBTQ people build together, often because of rejection from biological family which is becoming far less common.

With the mainstreaming of gay culture we've lost gayborhoods and our spaces have been opened up. Plus with more acceptance non-queer spaces are more accommodating too.

I personally think increasingly appropriated & co-opted. by straight white women in particular e.g. obnoxious bachelorette parties who treat our spaces as zoos and us as animals: honnnnney yasss queen vomiting on drag queens without tipping behavior lol.

Lesbian spaces have basically disappeared even in NYC there are only a couple left.
Krita is very cool, but I see the download instructions for Mac read "Note: if you use macOS Sierra or High Sierra, please check this video to learn how to enable starting developer-signed binaries, instead of just Apple Store binaries." Since we're three, almost four release of the OS since HS, that should probably be updated...
Kernel code and custom operators are only allowed under elm/ and elm-explorations/, so only 7 core packages can use them. The core developers cannot use those features in projects like everyone else.
Helloo!! I found a bug which I can replicate as many as I want.

Steps:
1. Share screen
2. Change cameras videos to the big option (Out of the 3 options available)
3. Click on draw

Result: You are not able to click elsewhere on the screen, you just keep drawing.

Great tool though :D
Erosion of privacy and freedom always starts with "but think of the children"
Is no one going to talk about how Apple is implementing this?

If Apple is training a neural network to detect this kind of imagery, I would imagine there to be thousands, if not millions of child pornography images on Apple's servers that are being used by their own engineers to train this system
There’s no difference - all cloud services that aren’t encrypting your data is subject to the same thing. Dropbox could do the same thing tomorrow. If we’re talking about hypotheticals any vendor that handles your unencrypted files can do this now.
Early computers weren't mass produced objects, they were huge, expensive, custom built machines. It's like where was the first city to have two skyscrapers or who was the first person to fly to space twice. The records would be there unless they were deliberately hiding them (as many national intelligence agencies do).
Remember when Google Chrome used to embed itself in unrelated installers? https://imgur.com/gallery/WWZxj

Now that Edge is Chromium based, it's just like using Chrome minus all the tracking and data-mining...
> The “Lost” miniseries

Is this different than the Lost series of 6 seasons and 121 episodes?

Or is this just an unusual use of the prefix “mini-”?
> Are you actually arguing in good faith here at all?

Are you? Because you just seemed to claim that it could match against innocent pictures of your naked children, but this tells me that you don’t understand that this system looks for known pictures, not for something that looks like naked children.

Edit: if you do, apologies, but then I’d say that Apple has suggested that it’s a low resolution version of the picture. This should be contrasted with server side scanning, where the server accesses all pictures fully.
0% of those people will agree that both "Biden has perfect cognitive ability" and "Trump had the election stolen from him" are true
> What's shocking to me is how little Apple management understood of what their actions looked like. Really stunning.

Maybe because they underestimated people's ignorance.

I think they saw (and still do see) it as a better, more privacy preserving technique than what everyone else is doing.
If the tropics threaten to become uninhabitable countries like India will go ahead with direct climate engineering by dispersing fine particles in the stratosphere to reflect sunlight. This need not be at all expensive, even for them. No credible threat from other countries would deter them, as they'd face mass destruction otherwise.
CSV is the embodiment of worse is better axiom.

Anyone that has dealt with more than 1 CSV is aware of many of the aspects of their horrible nature.

The more interesting reason is why they're so damn successful.

1: network effect - not supporting CSV in a product is practically silly. everyone can do it why can't you?

2: ease of producing / consuming (not saying that you do it correctly in all cases :))

3: data is transparent (or feels transparent)

4: accessible - if you can write language X you can parse or generate reasonable CSV in a mater of minutes. No knowledge of any libraries or tech required

That said it's horrible - but it will always be with us.
Next promise to stop spying on me through my tv. I doubt they get much money from that, but it's supremely irritating to have to work to defeat these things by trying to block their communication, block ads on the tv.

There must be a small fraction of the market that cares, but making your customer have more privacy has worked for apple, at least marketing wise.
If you're manually generating your own CSV files, you probably know what kind of data you are generating and consequently whether your data is going to contain commas. If commas and newlines don't exist in your data, then you can safely ignore quoting rules when generating CSV files. I know that I've generated CSVs in the past and rather than figuring out the correct way to quote the strings, I just removed any inconvenient characters without any loss to the data at all. Obviously this is not "correct" but you don't have to implement cases if you know they won't show up.
This has technically been proven false:

> Microsoft says that the "PhotoDNA hash is not reversible". That's not true. PhotoDNA hashes can be projected into a 26x26 grayscale image that is only a little blurry. 26x26 is larger than most desktop icons; it's enough detail to recognize people and objects. Reversing a PhotoDNA hash is no more complicated than solving a 26x26 Sudoku puzzle; a task well-suited for computers.

https://www.hackerfactor.com/blog/index.php?/archives/929-On...
What a hilariously broad take
It's not a neural network. It's not AI. It's not trying to interpret image content. It's trying to identify known specific images, but is using a fuzzy fingerprinting match.
I can restate what I said again for you: I can generate noise that makes the Hamming distance or whatever metric you prefer arbitrarily large without changing the contents noticeably.
They usually are, Québec is borderline hated in Canada for various legitimate and illegitimate reasons and unfortunately that usually makes it hard for people to have an opinion on hydro-québec that is not rooted in their own biases.
Yes, exactly. This is honestly nothing new.
Human brain organoids assemble functionally integrated bilateral optic vesicles
"During embryogenesis, optic vesicles develop from the diencephalon via a complex process of organogenesis. Using iPSC-derived human brain organoids, we attempted to simplify the complexities and demonstrate the formation of forebrain-associated bilateral optic vesicles, cellular diversity, and functionality. Around day thirty, brain organoids could assemble optic vesicles, which progressively develop as visible structures within sixty days. These optic vesicle-containing brain organoids (OVB-Organoids) constitute a developing optic vesicle's cellular components, including the primitive cornea and lens-like cells, developing photoreceptors, retinal pigment epithelia, axon-like projections, and electrically active neuronal networks."

PDF: https://www.researchgate.net/publication/350509283_Human_bra...
And the falsehood that government only puts people with right-wing beliefs on watchlists.
CSV is far from perfect, but it's nice that I can easily work with them without needing any libraries. All I need is file I/O and the ability to split strings. It doesn't get much simpler.

I'll admit though that "import JSON" and then being able to essentially convert the entire file into a dictionary is nice if the data has more structure to it.
I'm really surprised LOST still has that reputation years after release. Having seen the entire thing, I think the plot makes sense and there aren't very many holes. The writers omit a lot early on but I felt like it gets answered by the end as you learn more about the island. In the moment as it was being released year by year I can see how it was seen as confusing when you'd wait for a while to get an explanation, but these days you could binge the entire thing.
Great to hear. Krita is absolutely great. Even though it's designed for painting it still has an absolutely great UI and UX and I do much of my basic editing. Personally I find the UX way better than GIMP despite it not being designed for editing.

I sort of hope that they also make the photo editing features better to compete with GIMP and Photoshop.
I've worked with these (Azure Kinect), and they are quite nice, but they are much bigger and heavier and require a lot more power.
That is amazing!! I actually looked into buying an E-ink screen for this project, but decided not to due to the cost and the lack of compatibility.

Was the E-ink screen simple to work with?
> dumped who knows where

Lol, maybe there’s a spot in the desert. A brown spot. Probably visible from space.
Before switching ICs became ubiquitous it was common to roll your own with an 8-bit micro. It isn't cost effective now because of the additional external components, board area, and NRE you'd need vs the single chip solution.
My bias is the opposite, probably because I've worked at an Elm shop. But I know zero people with wordpress experience, in my circles I'm the only one I know of with professional php experience at all. But I need more than my hands to count all elm programmers I know.
It's possible that she's nice and wrong and he's right but a dick about it.

It's also possible that there's more nuance to this than that.
I'm kinda amazed.

I mentioned I was thinking of moving from an Android phone to Apple soon, somewhat privacy related.

My friends lectured me on "they're scanning your photos" ... meanwhile they share their google photos albums with me and marvel about how easy they are to search ...

Maybe we (humans) only get outraged based on more specific narratives and not so much the general topics / issues?

I don't know but they didn't seem to notice the conflict.
> I'm pretty sure pedophiles can figure out what a watermark or a gaussian blur in paint net is, or it's imprecise and actually detects things which is the very thing that makes it dangerous to the public

Or better yet, they can just not store their stuff on an iPhone. While meanwhile, millions of innocent people are have their photos scanned and risking being reported as a pedophile.
The other companies didn't advertise and pride themselves on being privacy focused. Part of the appeal of Apple was that you could avoid that issue and they touted it regularly. Now they're telling their customers to go fuck themselves (so long as they're 18 or older).
Netflix now rolling out Spatial Audio support on iPhone and iPad
I'm really surprised to see a fellow HN poster making such a stark failure to generalize.

You see that they can do this with pictures of dogs. What makes you think they can't do exactly the same with pictures of crotches?

Presumably you don't believe there is some kind inherent dog-nature that makes dog images more likely to undermine the hash. :) People are using pictures of dogs because they are a tasteful safe-for-work example, not because anyone actually imagines using images of dogs.

An actual attack would use ordinary nude images, probably ones selected so that if you were primed to expect child porn you'd believe it if you didn't spend a while studying the image.

> where the same attack could not be performed more easily and causing more damage by actually using real CSAM images?

Actual child porn images are more likely to get deleted by the target and/or reported by the target. The attacker also takes on some additional risk that their possession of the images is a strict liability crime. This means that if the planting party gets found with the real child porn they'll be in trouble vs with the hash-matching-legal-images they'll only be in trouble if they get caught planting it (and potentially only exposed to a civil lawsuit, rather than a felony, depending on how they were planting it).

Personally, I agree that the second-preimage-images are not the most interesting attack! But they are a weakness that makes the system even more dangerous. We could debate how much more dangerous they make it.
> Each SAGE Direction Center (DC) housed an FSQ-7 which occupied an entire floor, approximately 22,000 square feet (2,000 m2) not including supporting equipment. The FSQ-7 was actually two computers, "A" side and "B" side.

If one computer takes more than 10000sqft, then it's should be rare enough and verifiable. For comparison, a large California house with 5+ bedrooms are around 3000sqft.