skysight-inc/HackerNews huggingface dataset:
Looks like Current Affairs maybe?

https://twitter.com/lyta_gold/status/1428011761635143681
This isn't reddit. Not only will this go over the heads of many HN users here, it's against the site's guidelines.
But "getting" Big Tech shouldn't become their focus. Protecting consumers should come first.
Could you elaborate the benefit of doing it that way?
If the problem is that customers are contesting payments or other fraud-related issues, the standard remedy is to bump fees, not revoke service.
I'd think the attack would be done in reverse:

1. Get a photo that the target already has.

2. Generate an objectionable image with the same hash as the target's photo. (This is obviously illegal.)

3. Submit the objectionable image to the government database.

Now the target's photo will be flagged until manually reviewed.

This doesn't sound impossible as a targeted attack, and if done on a handful of images that millions of people might have saved (popular memes?) it might even grind the manual reviews to a halt. But maybe I'm not understanding something in this (very bad idea) system.
Yup viruses are here to stay. They are billions years old.
People who are still comparing equity (a legal contract representing ownership in a centralized US company) to cryptocurrency (a novel class of commodities that has no central authority or legal structure) are comparing apples to gold bars.
You'd have a darn good case for suing your landlord if they started going through your drawers, though. The inspection is for condition of the building and fixtures.
Sure, but on the consumer side there was basically nothing. I imagine the person you're replying to was referring to things like Caller ID, Call Waiting, Three-way calling, etc.
Bumble blocked me for working at PayPal
Today I sent EUR to someone by Bank (N26) and they had it in their account within a minute, no fee. A while back I sent a BTC transaction, $50 fee, and it took around 20 hours to confirm.

Fast, reliable transfers are valuable, but hardly a property of crypto alone.
This comment makes it seem like you're using extremely motivated reasoning, and that any conclusions cannot be trusted.
It is still the inverse of an appeal to authority. Both "Agree about X because Y agreed" and "Disagree about X because Y agreed" are faulty logic.

Replacing skepticism and critical analysis isn't doing anyone any favors, and it doesn't make the matter at hand an issue of church or state.
Why does the CCP even need to talk to Apple? They have a database of CSAM, and can modify an image in this set to collide with a special image they're looking for on people's phones. They then share their new modified cache of CSAM with other countries ("hey, China is helping us! that's great!") and it gets added to Apple's database for the next iOS release, because it looks to humans like CSAM. Only the CCP knows that it collides with something special they're looking for.

Now that we know that collisions are not just easy -- but happen by themselves with no human input (as evidenced by the Imagenet collisions), we know this system can't work. Apple has two remaining safeguards: a second set of hashes (they say), and human reviewers.

The human reviewers are likely trained to prefer false-positives when unsure, and so while a thorough human review would clearly indicate "not CSAM" for the images the malicious collisions match, it doesn't feel like much of a safeguard to me. (Remember the leaked memo from the US's organization -- they called our objections "screeching voices". I'm sure the actual reviewers think similarly.)

I assume the people reviewing CSAM for the CCP will be in China, so they can be in on the whole scheme. (In the US, we have slightly better checks and balances. Eventually the image will be in front of a court and a jury of your peers, and it's not illegal to have photos that embarrass the CCP, so you'll personally be fine modulo the stress of a criminal investigation. But that dissident in China, probably not going to get a fair trial -- despite the image not being CSAM, it's still illegal. And Apple handed it directly to the government for you.)

I don't know, I just find this thing exceedingly worrying. When faced with a government-level adversary, this doesn't sound like a very good system. I think if we're okay with this, we might as well mandate CCTV in everyone's home, so we can catch real child abusers in the act.
Subreply – No ads, no tracking social network
I simultaneously agree and disagree with you :)

I can attest to the fact that established processes can be really great to deter obnoxious behavior and shut people up that are annoyingly trying to just push their own agenda on you. "there's a process for this, use it and stop bothering me".

Processes can also help with repeating tasks that benefit from being done the same way over and over but that can't be fully automated. Like a release process (not the very automatable parts of it, those should just be fully automated obviously).

Having a non changeable process in changing situations is horrible. Especially if the process actively works against you or how you do your work best. The process needs to be flexible. People and interactions over processes and tools.
Breathing Better
> With the rise of AirBnB, however, houses became valued based on the income-generating-potential of the house, favoring investors while shunning regular homeowners.

Highly doubt AirBnB is a big contributing factor to housing prices.

Rentals? Sure.

But considering travel (the use case for AirBnB) has been locked down and housing prices continued to soar makes this pretty dubious.

And tons of condo buildings don't even allow you to use the unit for AirBnB anyway.
Ionic Framework – explained in 60 seconds
People like to hand wave airbnb as a boogeyman for real estate demand increases, but when you dive into actual numbers you find out it's less than %1 of units in the vast majority of cases. And buying houses to rent them out as 'revenue properties' has been around for a very long time, similar with airbnb style services in the 1800s.

If a %1 demand increase causes big price distortions in a RE market, you have much bigger problems in your city than airbnb, which is usually linked to supply control via restrictive and often corrupt planning boards putting up large barriers that you have to 'pay to win' to get past under the table, as has been shown recently in SF.
I understand why it’s opt in though, not a clear win in all cases.
Before iptables there was ipchains, and before ipchains there was ipfwadm.

I don't think you can still use all of them.
Cuttlefish can form crystal-clear memories even in their final weeks
They added a feature which is off by default and allows a user to select a supported installed app to use as a spam reporting app.

IMHO this is great, I wish more countries would enable this feature. Something like 95% of my phone calls are spam, to the point where I just don't answer the phone anymore unless they're in my contacts list. Users being able to actually report them as spam might actually result in this BS finally stopping.
This comes back to "picking the right tool for the job". If you're ingesting csvs/tsvs, you're expecting a given format anyway. If you expect the wrong delimiter, the worst thing that happens is you detect that the file has the wrong number of columns and fail out. Even if you're using a more structured format, if you ingest a file containing the wrong dataset, your process will still fail because the correct fields aren't there. No matter what your format is, you can't recover from somebody sending you the wrong file.
Do whatever you want but if you pollute the atmosphere you'll pay for it. Communism doesn't work. User pays
I agree with everything you said, but I don't think they just need to stoke fear, and I don't think the . Those white-collar workers and retirees want their maids and caretakers, their kids watched, their groceries bagged. And they want it cheap. Rising wages mean a direct increase in costs for this middle class.

They want to say they don't want to pay their maids more without saying that their maids don't deserve more money.
For defense lawyers faced with Shotspotter:

1. Find an acoustics professor.

2. Arrange for for a firing of the putative firearm (or similar acoustic event) at the same time of day at the putative location.

3. Subpoena Shotspotter data for days of putative and test firing. Be aware that preannouncement of test firing may allow Shotspotter and/or police to manipulate data.

4. Have acoustics prof compare data of the two events.

Sound propagation in urban environments is heavily influenced by configuration of built structure. I seriously doubt that Shotspotter adjusts for this. It would take a time consuming calibration effort over a 24 hour period to also allow for background noise.
I always wondered when single-click unsubscribe was going to be a problem because of exactly this. I mean, how do you expect to give a URL to Google and have them just never crawl it?
> Imagine if they said, 'SV company pricing is causing inflation' or 'wages in SV are causing inflation'.

Not sure I follow where you’re going with this — are you suggesting SV salaries aren’t causing inflation in the local area? They absolutely have kicked off an inflationary feedback loop in SV real estate.

* Pay tech workers more to attract them to SV.

* Housing prices rise.

* Pay tech workers more to compensate for higher real estate prices.

* Repeat.

Suddenly you find yourself in a situation where $400k in total compensation for a single FAANG employee isn’t out of the ordinary. Great for them, terrible for everyone making normal amounts of money — houses cost $1M+.
I built a small Go web app to do some security testing. When a user registers for an account, I generate a 128-bit secure token and email it to the address they provided (as a URL). Token URLs look like this:

/validate/email/1d00a5c2648c211befd33f5a8a7cbfab

The token is cryptographically strong and disappears after access. It can't be guessed and no one but the email account holder should click it, but I am seeing the URL accessed multiple times from multiple IPs, so I investigated.

Turns out, if the user provides a Gmail or Gsuite email account during registration, Google clicks the link. I was curious if others on HN had encountered this and how they dealt with it.
For people down in this well: have to find a rule you will not break, and then apply it. It doesn't matter what the rule is, it just has to be sacrosanct. You establish that it is possible for you to stick to something - anything - and then you start ramping up to rules that are harder but more valuable.

Later on, - and this is the important part - when you have a number of different successful habits, you can give yourself permission to skip one of them once in a while without fear of starting a slippery slope. One of my things I was still doing > 85% of the time. It was very hard to give myself permission to not go sometimes, but because it wasn't my One Thing, it worked out fine. Right up until the pandemic hit and every day for the last month or two I can feel how the other things I do aren't making up the difference and I need to get back into it. Except now here comes Delta variant...
and then companies will start hiring outside intelligence to probe employees emails to see if anyone falls for it, so they can fire them or entrap them before they actually take the hacker bait.
There are already headsets with eye tracking on the market, like some of the new Pico models, for example.
What's the basis for saying they're "crickets" on such scams? Those shady operators tend to be much smaller and less newsworthy than Facebook, so you don't read about them, but that doesn't mean it's not happening.

I interned with the FTC's consumer protection division in Los Angeles during law school. My job was calling up people who had filed Better Business Bureau complaints and helping them to provide affidavits against the companies that scammed them. At the time we were focused on prepaid debit card scams.

Have you complained to the FTC about the company with the 1k/yr subscription? Made a BBB complaint? Filed a small claims court suit?
Wait until you find out how many cryptocurrencies there are!
It becomes their job when you ask them to host your images on their property. If you don’t, then there’s nothing happening.
> I swapped the spinner for an SSD and OH MY GOD THE DIFFERENCE.

FWIW, that difference isn't nearly as noticeable under Linux. It's so lightweight on RAM and so good at caching frequently-accessed data that it can be incredibly snappy even when using spinning rust. SSDs mostly speed up your boot process and the rare IO-heavy workload. Though it wasn't until the late 2000s-early 2010s that RAM began to be truly abundant on out-of-the-box configs, and that was the same timeframe as the switch to SSD's.
Europa Universalis 4: Great Game, Zero Stars
This thread has 1300+ comments; to see the rest, click More at the bottom of the page, or like this:

https://news.ycombinator.com/item?id=28237274&p=2

https://news.ycombinator.com/item?id=28237274&p=3

https://news.ycombinator.com/item?id=28237274&p=4

(Comments like this will go away when we turn off pagination. Sorry for the annoyance.)
Good, so we have shown that we can make a difference. That means the defeatist argument ("we can't, so what's the point") does not hold, and we can proceed to actually do something. Patting ourselves on the shoulder that something has been done in the past will not help.
Danny DeVito was unverified on Twitter after supporting union strike
Pick an area you would imagine or dream of traveling to. (Coastal)
There are "cruising guides" of almost everywhere in the world. They are usually hand written compilations of many years of knowledge from many sources. They are wonderful to read, even if just to dream. Where to anchor, how deep, under what weather. Where to land your dinghy, and go to they local store, cafe, diner, market. What to buy, who to talk with, what to see. They are great escapes while being practical solutions.
https://archive.is/rLzQF

https://ghostarchive.org/archive/gxGnS?kreymer=false
> not more than 120 days in advance

Are such clauses binding, or can you send your cancellation by registered mail now and do a chargeback if they try to bill you beyond that?
There is no 'rest of CSAM monitoring'. The CSAM stuff is totally separate from the iMessage stuff we're discussing here.

> And nice that you abuse your karma to downvote people who don't agree with you.

I did not downvote you; not that you be able to tell if I did, anyway.
This is a good feature in my opinion. Why should I let the sender know when I click on tracking links or view the email? If you really want to, just filter out clicks from AS15169.
If you like consistency, then you'll like this bill. It sets the legal age of buying cannabis to 21, the same as alcohol.
> The main take away here is find an alternate backup cloud spot or host your own

Every cloud provider has been scanning for CSAM all along. If you're rolling your own on a major hosting company they're probably doing it as well.

> most people are complaining about apple turning their device into a government 4th amendment free zone.

Apple is a large company but they're not the government, so the 4th amendment has nothing to do with this. It's like saying a hotel that doesn't let you bring crates of assault rifles up to your room is violating your 2nd amendment rights.
I am saying that state isnt involved in the sense that the state isn't compelling payment processors to make these decisions through regulation. Church isn't involved because there is no establishment of religion. I have presented, in several places, non-theological reasons why payment processors may be making the decisions they are.

If you want to count "choosing to not support a business that enables rapists and child porn" as exclusively an old conservative idea, I guess you are missing the mark by quite a lot.
I think the headline is misleading.

The point of the article is that the algorithm that Apple is using works as well as Apple says it does, and the headline implies that it doesn't.
In real life, a few years ago, people at work fired up a 20 host cluster on AWS to do something that I later replaced with a script and GNU parallel (at the time a perl script), running on my 2013 Macbook pro i7, beating it by 10X.

Sure, I'll admit it may not be fair to compare, considering the AWS host type, copying the data out and in, and all the other overhead.

That said, the project sure looked like it was resume driven 'big data'.
Or “click this link to verify your e-mail address”…
Directores Y Profesores De Teatro: Federico Herrero Y Nicolás Francisco Herrero
Dell ships laptops with tons of Dell software, as well as tons of third-party software. Do you really think that, if they wanted to, they couldn't just update one of those pieces of software to enable remote installs?

Hell, Dell has shipped more than one bug that allowed attackers administrator-level access or worse, I wouldn't put it past them to come up with some kind of asinine feature that not only lets them push new software/drivers/whatever to the machine, but lets attackers do so as well.
All URLs sent to any major email provider are "clicked" because they are scanning the page to see if it is phishing or otherwise malicious (desktop antivirus and other things will also prescan URLs). It also protects privacy by defeating click tracking on marketing emails.

Google will also pre-load all the images in your email too.

You shouldn't take any write action to your database just based on a URL being visited. Take them to the verification page and ask them to sign in or submit a form with the token pre-filled.
This is great, but he could have gotten all of this memoization for free if he hadn’t switched from class based to function based components.

Still, very helpful to introduce people to all the important concepts for hook based React.
Especially if you consider that you could just web search for free iPhones, ask your friends older brother to go buy some iPhones for you from the corner store, or work on your appearance and conversational skills and go get someone to give you a free iPhone IRL.

I never understood this subscriber minded concept of "Porn as a Service". Back in my day we'd just steal our dad's iPhone and share it among friends (assuming everyone took care of the iPhone and didn't spill any liquids on it). Even in the 80s and 90s you could just throw a rock and there was a 50% chance it'd land on an iPhone. It's even easier now, there's entire websites dedicated to hoarding images and videos of iPhones on various hosting sites. From an access-to-iPhone perspective, this is non-news. From a "MUH RIGHTS" perspective, I get why people are upset, but you also gotta see it from the billing perspective. It's their payment processing and they'll do with it what they want. But I mean ccBill exists and offers rates of 10-15%.. just earn less, I guess.
This is for all the mind readers who think using different fonts is a sign of something... seriously???? What research do you have for backing this up? Different fonts-- happens when folks start to write something on one device and then move to another or use transcription software and then go back to add and subtract later. I think he has some sort of serious hand injury from his burns (he talked about it in some interview I saw ages back) so using his hands is painful... So yeah, he likely dictated some and wrote some.... or perhaps someone copy edited it for him and he signed later with a new device and therefore with different font. WHO CARES? I suspect this is a case of taking on so much that he lost quality control. I get that this is not good and that he messed up, but the font change does not mean all these scary things. BTW I use dictation software myself (so I can multitask), and I often go back and correct things afterwards, and the things I add often come in a different font. It is not because I am a fraud. it is because I use multiple devices and programs to write. The psychic mind readers and tarot card interpreters here may want to find a citation for research showing that font changes are a sign of something sinister.... Seriously, if you are turning random things into "evidence" of fraud, it only weakens the rest of your argument.
don't they already get most of that with Chrome already?
NHS Covid app 'pings' fall after changes
I would say that for most meetings, the current state of VR is not worth it. So no to your question.

But I would also disagree with "quite a lot of people can get quite a lot done with just audio or audio+video meetings" at least to the extent that I would say people who will enjoy this work culture long-term are in the minority. I truly don't believe most people are meant to work in a room alone for hours everyday (even though some thrive on it!).
It is the same problem that Voat had. If you are are a platform that prioritizes minimal moderation in a market dominated by someone who doesn't, the primary reason to use your platform is because that content isn't allowed on the market leader.

Voat only became "Reddit for white supremacists" because Reddit was pushing many of those users off their platform. Only Fans only became "Patreon for sex work" because Patreon didn't want those users on their platform. Anyone who wasn't one of those groups was better off just sticking with Reddit and Patreon and that only became truer as the reputation became more and more ingrained with the platform's brand.
>TFA:

>> OnlyFans is getting out of the pornography business.

>HN:

> s/of the pornography //.

…is getting out business?
Well, ycombinator is a place to change the world by incentivizing profit for doing so. Get some creative actuaries to run the numbers, sell satellite collision insurance, and fund a for-profit orbital janitorial service to improve profit margin on premiums.
You don’t even need an anonymous account as much as you just need an account: they have plausible deniability.

Chaturbate had this issue some years ago where entrepreneurial individuals would just go direct to the model for a cut.
Apparently the solar panels destroy the "look" of the neighborhood.
> All along these people thought algorithms and protocols (e.g. bitcoin and TCP/IP) would somehow be a powerful force that would cause governments to fall on their knees and let people evade government control. After all, it's distributed! You can't stop it!

The internet and its design and associated protocols were designed to work around external forces - a nuclear attack or natural disaster. It was never designed to be government-proof. People who thought that would be the case were being idealistic and naive.

If you want real change in the world, as you said, you have to affect the political world, which is an option available to any citizen or corporation who can spend millions on lobbyists.
Yay.

I learned ipfw. Then ipchains. Then iptables. I got quite good with handcrafting firewalls with all of those at some point. The machines they ran on (for me) range from 80486 to date.

This laptop has a ... (fumbles with various commands and searches) ...

$ sudo nft list rules

firewalld and its GUI generates a nftables based firewall.

I generally use ufw on servers because it is easy for a simple host based firewall and that is iptables based still. A server host based firewall is generally all about ingress filtering. Egress can be covered more effectively at the edge and at switches/internal routers.

My laptop needs a far more complicated setup and the ruleset that is dumped by nft is almost legible in the first read. I do use a GUI but it's nice to think that I can sit down and spend some time and decide whether my stated policy is what I get at the firewall itself.

I don't yet use nft at the edge but it feels as though it might do nicely.

Your firewalling choice is not something that happens overnight. I'll mull over it for at least two more years.
Yep, 50% of the price is taxes.
Congrats on launching. I appreciate the mission you're on and bonus points for keeping it open to everyone!