skysight-inc/HackerNews huggingface dataset:
This reminds me of "interstate crosscheck", in which a "Tyrone E. Brown" voting in Pennsylvania was enough to kick a "Tyrone M. Brown" off the voting rolls in Kansas.

https://www.gregpalast.com/interstate-crosscheck-on-the-verg...
can you do the equivalent for mobile phones? what was the "killer app" for iphone?
Null is basically non-existent in idiomatic Scala. So technically you're right but besides calling Java libs there is only an infinitesimal small chance to get NPEs form Scala code. (Scala's NPE is the MatchException ;-)).

For Scala 3 there are improvements. It's "null safe" as long as you opt-in (modulo Java libs, and of course doing stupid things like casting a null to some other type).

https://docs.scala-lang.org/scala3/reference/other-new-featu...
I just implemented one in go, working on the repl now. I plan to eventually write it in C++ for a real database, but I’m doing this for my team to teach them the difference between LSM trees and Btrees. I’m hoping to show that a specialized concurrent btree, though harder to write, performs better than LSM trees for the same data. Maybe I’ll make a blog post about it.

EDIT: For more context, this is for time series metrics, so super specialized data.
> This isn’t true at all.

> If the creation of fakes is as easy as claimed, Neuralhash evidence alone will become inadmissible.

Okay. https://github.com/anishathalye/neural-hash-collider
Most cameras nowadays can easily take a burst of 30 visually very similar images in a second.

Lots of people leave their cameras in burst mode.
At least very few humans type that into their spreadsheet cell.
Honestly, I don't expect antitrust to trigger here. With Apple's treatment of browsers on their phones being considered perfectly acceptable somehow (and the same can be said about pretty much every type of app store category, to be honest), I don't think there are any government bodies that even care about this type of antitrust anymore.

The fight for free access to app stores has replaced the fight for browser bundling.
Congressman: Yes, We Did in Fact Lose Afghanistan Because of Big Tech
I'm familiar with both quotes, but I think we're barking up the wrong tree by trying to intepret them literally.

"Based on a true story" is not what makes a film plausible to us... We instinctively engage in a willing suspension of disbelief when we're prompted by literature, even when we directly know that the story is false.

Fargo includes that text because the film is an homage to the hardboiled crime fiction genre, which frequently featured that style of blurb on book covers as a marketing tool. But people consume books & films, near universally where we have the means to do so, with or without claims that the stories within are factual.

You've misunderstood what Nicola Morgan is talking about, in that quote. In context, "believable" means that the author's job is to reduce obstacles that get in the way of our willing suspension of disbelief... Empathy, context, proportionality, etc.

See my other comments, re: the David Lynch quote. His meaning needs to be taken in context of some film theory.
Any thoughts how this compares to Tuple?
What I want is the Aero ALT-TAB behavior from Windows 7 in Windows 10. My daily driver is a laptop w/ a touchpad, and I end up using the keyboard a lot. I can switch between programs so quickly and easily using ALT-TAB / ALT-arrows. As far as I can see the functionality just doesn't exist in Windows 10 and it's maddening. I have so much muscle memory built up from that interface and switching between programs via the keyboard is so much clunkier on Windows 10.
You can extract the hashes with a few hours spent on the darknet. Doing that is certainly illegal and not to mention VERY morally wrong, but criminals exist and criminals won't hesitate to abuse this as a mechanism for framing, extortion, or ransom.

It's also possible for someone (Attacker A) to go on the darknet and get a list of 96-bit neural hashes, and then publish or sell this list somewhere to another party, Attacker B. The second party would never have to interact with CSAM.

Imagine Ransomware v2: We have inserted 29 photos of CSAM-matching material into your photo library. Pay X monero to this address in 30 minutes, or we will insert 2 additional photos, which will cross the threshold and may result in serious and life-changing consequences to you[1].

The difference here (versus the status quo) is that an easily-broken perceptual hashing enables the attacker to never send or possess any CSAM images[2]. From my experiences with being victims of various hackers, I know a lot of them won't touch CSAM because they know it's wrong, but they'll salivate at an opportunity to weaponise automated CSAM scanning.

[1]: If you think Apple's human review will mitigate this attack, you can permute legal pornography to match CSAM signatures. If Apple's reviewers see 30 CSAM matches and the visual derivatives look like porn, they will be legally required to report to to NCMEC (a statutory quasi-government agency staffed by the FBI), even if all the photos are actually consensual adults.

[2]: If you never possess nor touch CSAM, it might be harder for you to get charged with CP charges. You might be looking at CFAA, blackmail or extortion charges; while your victim faces child pornography charges. This is basically an "amplification attack" on the real world judicial system.
I’m sorry I just don’t buy that. Every bar in old town Scottsdale cards. Most of the places I’ve been in Detroit do.

San Fran, can you name one that doesn’t? You aren’t getting into the madrone without an ID unless you’re about 50.
I have no idea what I expected but 16,000 photos feels… disgustingly high and ridiculously low at the same time.
? Quite the contrary. It's more, "all the ones that any craftsman should be using".
How is that enforced? What is the technical basis that enforces read-only access using user/password auth? Especially since that user/password auth is used by an end user to do "write"-type actions?
Stereo Recording with a Jecklin Disk
Your website says 200+ data sources. How the heck did you generate so many? This project does not look very old.
Is it, though? I’ve given Plaid the user name and password to my bank account. The same set of credentials that I use to log in, to pay bills, transfer money, etc. Plaid stores this information for future use in some sort of reversible encryption. So now we trust Plaid to keep both their data set of user names and encrypted passwords secure, and also to keep their decryption keys secure. Forget that noise. Like the previous commenter , they’re one breach away from exposing millions of bank account credentials. It doesn’t matter if the Plaid API is read only for the integration side - somebody has MY credentials, and that’s not read only.
Is this anything more than a box with some text in it and a bunch of graphics? I can't see anything else on the entire page. This is somewhat insulting to how weird (in a fun way) the early web was to me.
Where would you get the CSAM hashes?
There is no reason to think that Bob Diachenko is such a person. He didn't take part in the authoritarian project that generated these lists.
I still like the distribution of power to those who wouldn't have had a chance otherwise.
The real important part of AMP that isn't open source is this, from the AMP HTML Specification[1]:

Required markup
AMP HTML documents MUST
...(some deleted)
- contain a <script async src="https://cdn.ampproject.org/v0.js"></script> tag inside their head tag.

That's the magic that allows google to inject the AMP header onto the top of your page, hijack the back button / left-right swipe on your page, etc, when someone visits your page from the carousel.
It's hard to call something open source when the spec says "You must include this javascript url (and therefore, code) that you don't control". And the validator does seem to make sure it's there.

[1] https://amp.dev/documentation/guides-and-tutorials/learn/spe...
Holes have lower mobilty than electrons, so P-doped areas must be larger for the same equivalent resistance.
I was working overseas once, and a cousin I’ve never met coincidentally purchased some stock in my employer. It wasn’t a huge order, and there was nothing especially strange about the transaction (no massive gains or anything). But their local version of the SEC investigated it and got in touch with my company about it.

I’d be surprised if the SEC wasn’t proactively monitoring this sort of thing on some level.
Now that duct tape is not allowed, choking is a valid option. Blame it on the airline for exposing the unruly kids to worse off option of restraining. We are post 9-11. There are children in some conflict-torn regions that kill and rape more than the worse serial killers in America.
I'm pretty salty about this. It's totally unethical, they knew it wasn't legal, and yet... they're going to be OK outside the fine?

Why do we bother being ethical when nobody besides us gives a shit outside a slap on the wrist?

You know how many people thought of Plaid before it was a thing, then rightfully wrote it off as "don't attempt"? What kind of sick precedent does this set?

Why do I even bother caring.
I guess the introduction to 3rd party apps aka App Store.
In this hypothetical scenario, the NSL would have to go to Apple the corporation, not to any individual. There isn't any individual at Apple that could implement the demand. There probably isn't even a group of ten individuals at Apple that could do it without other employees finding out. And as smart as you think the US Government is, there's no way they could possibly know who those ten people were.

So the letter goes to Apple. They have ample time and resources to push back indefinitely. Demanding that Apple implement a Government dragnet across tens of millions of private devices is so far beyond unconstitutional that complying wouldn't even be fleetingly contemplated as an option. In fact, Apple is the sort of company that would move heaven and earth to ensure that this unconstitutional NSL becomes public. If nothing else, their defiance of it would be fantastic PR.

Therefore it would be a massively stupid-ass move for the Government to try. They would have zero prospect of a positive outcome and they know it.
I'm not conflicted on it at all. Plaid might need to do this for them to work, but there's nothing that makes Plaid required for anything you do with your banking. People keep mistaking convenience for necessity, and that's how we keep ending up with hacked-together services that leak everyone's info and worse.

I'd rather have no convenience than a convenience that hands off the keys to my life behind my back. And so should the rest of us.
We are Number One. All others are Number Two. Or lower. —The Sphinx.
I know a few ppl in compliance at different exchanges, they move pretty quickly if they think it’s a one off, if it looks like it’s part of a larger game they’ll be more methodical. But this sounds pretty standard, it looked odd but not too odd so just warranted a quick call.
Try Core Data with Swift and you will see that happening. Lazy objects (vaults) are mapped from objc into Swift and will happily crash on something like a = b where both are not optional.
You just need a sample of something that is evidently so pervasive we're building a nation wide dragnet to stop.
Cryptodiagnosis of “Kryptos K4”
Any back end stack that can provide APIs, we're using .NET.
Even the FBI dislikes them. Both Waco and Ruby Ridge started as botched ATF operations that the FBI had to take over.
Ontology of psychiatric conditions: dynamical systems – Scott Alexander
Not quite. Most executives and board members have standing orders for their own company (usually sell x amount every y days), this way they can’t be accused of doing something illicit.
No one is more aware of the ambiguity of reality than someone whose job it is to explain it to a machine.
The linked article doesn't say anything about native Americans, and in terms of substantive data it seems to jump in history from the 4th century prevalence of Roman bathhouses, to 16th century local bans on swimming, filling in the gaps (which account for the entire premise of the article) with speculation about bridges and mermaids.

It immediately follows the description of those swimming bans with other 16th century examples of Tudor scholars endorsing and writing guides on swimming, resulting in an article that's an interesting read but with a poorly supported thesis.
You already know the answer. Ask forgiveness not permission, move fast and break things.
I'll never get the time back I wasted hoping that this article had something useful to say
Based on my experience as a PhD student (Machine Learning Algorithms for Brain-Computer Interfaces), I would say that useless papers are far more of a problem than wrong ones.

I didn't see a lot of evidence of outright fraud, but a lot of mundane and irrelevant research ("This algorithm happens to work well on this one particular test dataset well") presented as if it were a breakthrough that was important to the field.

"Publish or perish" is a helluva drug.
Read-only access is not possible. By handing over the credentials you are handing over write access. You are correct.
Hi! I work at Plaid. We’re strong advocates for API-based connectivity -- our goal is for 75% of our traffic to be committed to APIs by the end of the year. As part of that, we've actually converted our integration with Capital One to be 100% API-based and use OAuth for authentication. You can read more here: https://www.capitalone.com/about/newsroom/data-sharing-agree...
Wait, wasn't all the hullabaloo over this scanning not requiring an upload to iCloud anymore?

They're scanning anything you upload to iCloud (and have been for some time) but now also scan everything on your device too.
Nicely done. Thank you for sharing.

I'd like to share the following paper for anyone else who may be interested. It is about watermarking rather than a preimage attack.

"Adversarial Embedding: A robust and elusive Steganography and Watermarking technique" https://arxiv.org/abs/1912.01487

Unfortunately, the existence of invisible watermarking demonstrates a separate attack on the hash. Instead of a preimage attack, this might be able to change the hash of an image that is suspected of already being a match. A true-positive would be changed into a false-negative.
Under many scenarios it's not currently possible. As one example, I use SQL Developer extensively, and neither its XML or JSON exports include metadata,
So that's no more useful than CSV. Excel is a no-go for anything with > 1M rows. Exporting large datasets leaves me with CSV since it's easier for recipients to parse than XML or JSON without additional work. And querying Oracle from within Python or R suffers a big performance hit over doing it directly from SQL developer, so for one-off projects I don't bother building a pipeline. (Repeat projects I'll build and schedule for downtime, or on a different PC.)
I've never seen an article say so little in so many words.
>Recently I tried to help my son with his seventh grade math homework. I couldn’t do it.

This is not a ringing endorsement of the author's own problem-solving skills.
Confession: when I say “completely new to JavaScript”, I mean that I once used it to make badly-animated pages as a kid in the 90s. It’s completely different now, so I say I’m a complete beginner.
The fact that they netted 3 million bucks indicates it's not as easy as you think.
I'm not sure what you mean by Avro records "must" be ordered. If you mean that the serialization format specifies the ordering of the fields, then yes, that is true, but that's an advantage in terms of compactness and processing efficiency (https://avro.apache.org/docs/current/spec.html#order). If you don't like it though, there are other formats like protobuf and thrift that have no such requirement, at the cost of ~3 bits per field, which can be a comparatively efficient trade off.
Then it sounds like you should be arguing for for a repeal of CP laws. A controversial stance.
Eh, it’s herd security. Hackers with credentials may pick off a few people’s accounts, but the odds of you being hit are low since it’s a hard problem to scale and there’s so many targets.
What you did was wrong and you all knew it.

It seems to have paid off though, so congratulations. Nobody with half a brain would trust you.
I've heard the tooling and general ecosystem are not great (similar to Haskell), though I don't know firsthand
> I'm a software engineer, interested in crypto, and not that involved in traditional markets

As you learn more about crypto and traditional finance, it'll be fun to compare the two. Your confusion about the role of an exchange in traditional finance might be because you see the crypto world, where a single entity often performs the roles that many entities perform in traditional finance (exchange, clearing firm, broker, etc.).

> I do think the exchanges in traditional finance shouldn't have required HFTs in the first place (i.e. it's an antiquated technology)

I'm not quite sure what this means, but it's important to understand that HFTs exist in the crypto space as well. Capital markets don't function particularly well without marker makers, and absent some rule explicitly preventing high speed trading, marker makers will tend towards being the fastest traders in any market.
Cloud backups are the default on iOS, so you rather have to opt out. And that doesn't even account for apps that can do the same.
Honestly it seems like a win-win. Anyone trading on the information is likely to be caught and I doubt they want someone in a position of power who would commit that sort of crime.

As far as I can tell the company isn’t legally or financially liable so I don’t see a downside?
Does it matter? Unless they're going to totally change the technology I don't see how they can do anything but buy time until it's reverse engineered. After all, the code runs locally.

If Apple wants to defend this they should try to explain how the system will work even if generating adversarial images is trivial.
My takeaway from Primer (perhaps my favorite movie) is that the confusion is the message of the movie. If a time machine existed, and was used repeatedly, it would become impossible even for the persons involved to maintain a clear understanding of what had happened and what was happening.
>>Hard to see in any universe how wearing a mask at school for a couple months is more of an inconvenience than working full time for a year.

That's not an appropriate comparison, because we're not trading wearing a mask for a couple months, for a 5% longer lifespan. We're trading wearing a mask for life, for a 5% longer lifespan. The percentage added or removed is from the duration that they're wearing a mask, so you reduce 5% from the two months of mask-wearing, not 5% from their whole life. And yes, I think many people would rather work one year longer, than have to wear a mask every day all day at work.

Going back to the previous logical exercise:

If someone would be willing to give up 5% of their lifespan, to forego wearing a mask for life, then they'd be willing to up 5% of a year of life, i.e. 18.25 days, to not have to wear a mask for a year, and 1.52 days of lifespan, to not have to wear a mask for a month.

If wearing a mask is 100% effective at preventing covid infection, then not wearing a mask all month reduces their risk-adjusted lifespan by 0.016425 days (0.0000006 risk of death × 75 years lost if they die * 365 days / year), which is nearly 100X less than what they lose in quality of life (1.52 days).

>>You've still failed to demonstrate masks do any harm more than being a minor inconvenience.

You're not answering my question, which was the following hypothetical:

But for the sake of argument, if we polled people, and found the value was indeed 5%, then would you agree that masking children does massively more harm than good? I just want to know if you hold the same logical axioms as I do, or else this exercise is pointless.

You're being evasive..
I don't know where I saw the limit change - maybe I got that part confused.

The patriot act did expand the bank secrecy act.

https://complyadvantage.com/knowledgebase/usa-patriot-act/
This is not a good thing for consumers. Some anecdotes:

"Exploding Power Supplies: Gigabyte & Newegg Dumping Unsellable Product" https://youtu.be/aACtT_rzToI?t=545 Wuxi NCE Power and Jilin Sino-Microelectronics transistors exploding

https://goughlui.com/2021/03/27/note-linear-regulator-woes-w... https://goughlui.com/2021/04/09/tested-stmicroelectronics-ld...
This is just getting wilder and wilder by the day, how spectacularly this move has backfired. As others have commented, at this point all you need is someone willing to sell you the CSAM hashes on the darknet, and this system is transparently broken.

Until that day, just send known CSAM to any person you'd like to get in trouble (make sure they have icloud sync enabled), be it your neighbour or a political figure, and start a PR campaign accusing the person of being investigated for it. The whole concept is so inherently flawed it's crazy they haven't been sued yet.
The E-Myth Revisited, M. Gerber, has some good examples of why it's like that. The thing is when you blur roles, you also blur responsibility.

Organizational charts are like software architecture. In fact, architecture is a subset of org charts. It shows what you're optimizing for. Are you an e-commerce company? Your org chart will have a lot more focus on logistics and payment than a SaaS. Whereas a SaaS will focus more on security and software infrastructure.

You can have a person in multiple roles, e.g. Bob is responsible for HR, finance, and is the mobile lead.

At the seed stage, your goal is to find the business model. So you can have blurry "co-founder" roles for everyone. However someone has to be responsible for fundraising, audits, legal, pitching. Everyone should be able to pitch but someone has to be rehearsing/rewriting the pitch 4 hours/day. So you probably need a CEO.

If you're above seed stage, you are scaling. If you're scaling, you have a business model. If you have a business model that you're committing in stone, you need an org chart. This can be modified later, but well, you should know how much of your resources go into marketing and how much goes into engineering.

Maybe you guys are really responsible and close friends and can distribute that properly. I hear Airbnb was like that. But just be aware why it's a red flag.

Even in games, the positions are demarcated. Some people play forward. Someone in the guild handles research. Someone plays the sniper, not the whole team. So the other worry is that everyone is breaking position and doing engineering and nobody is paying the bills.
I'd like to know as well. There could very well be some auditing requirement that forces them to explicitly generate the tokens sent to users, and the people enforcing the requirement have sticks up their asses. It wouldn't be the first time that the auditors foul up something because despite working as well or better than what they want, it's not what they know.
I don't see how.

They're hashing on feature space (so trivial cropping and such doesn't defeat this) but they have two totally separate methods of matching those hashes? Doesn't sound right to me...
And how does one authenticate themselves with a credit company without an id?
The book "The Art of Analog Design" discusses the layouts of components in detail. It says (p280) that theoretically you could make a PNP transistor like an NPN transistor in reverse, but the characteristics of the dopants don't work well for this. Boron diffuses rapidly so it doesn't work well for a buried P layer. And boron only has 1/3 of the solid solubility of phosphorus. The other issue is that the mobility of holes is only 1/3 that of electrons in silicon, so there's an inherent disadvantage for PNP.

I'm kind of guessing that the substrate silicon is P-type since that seems to be more common. As for the colors, each IC is different. There are charts relating colors to thickness, but that doesn't really help me.