skysight-inc/HackerNews huggingface dataset:
Indeed, if they're proposing to only decrypt select images the client needs to know pass/fail at some point. Whether that's before or after sending the hashes to Apple's server really doesn't matter as bulk checks will likely be a part of API anyways. We'll have to wait for further reverse engineering to get full details here though.
Very neat! Though I notice a particular pet peeve of mine . . .

Under https://steampipe.io/docs/reference/config-files you put everything into ~/.steampipe
I'm not a fan of random apps putting a random directory there. I prefer things to use the correct directory for the platform. Example
https://specifications.freedesktop.org/basedir-spec/basedir-...
> This is not true and a harmful generalization. There are dumb people of every type.

That's purely specious, and you say it as if I ever asserted there aren't "dumb people of every type.", which I didn't say.

Yes, there are dumb people of every "type". Are there as many intelligent people as those of low intelligence who struggle to think abstractly, struggle to read and write, have poor motor control, rely heavily on dogma for a moral compass, or have trouble with impulse control?

If you think there are as many people with a high IQ as a low IQ with those traits, I don't think you're being honest.

Here's some data for you:

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4478390/

https://pubmed.ncbi.nlm.nih.gov/14744183/

https://pubmed.ncbi.nlm.nih.gov/961457/

https://www.dw.com/en/scientists-find-brain-differences-in-p...

https://sci-hubtw.hkvisa.net/10.1023/a:1018754004962

https://www.livescience.com/4671-study-pedophiles-tend-short...

https://pubmed.ncbi.nlm.nih.gov/29625377/

Are most pedophiles of low intelligence overall? It's doubtful, but there's room for more study.

Are the pedophiles that are offenders of low intelligence? Significantly more offending pedophiles are of low intelligence than the general population. Yes, the factors at play may also apply to other forms of crime. But when you factor out non-offending pedophiles, those we aren't as concerned with in regards to CSAM, the ones that are caught aren't exactly the cream of the crop.

Furthermore, I've met a handful of pedophiles, both convicted and not. Every one of them either was clearly mentally retarded or bordering on retardedness, or they had a severe personality disorder. Yes, it's a small sample size, but the ones that were caught did so doing the dumbest of shit (putting aside the horrific nature of child exploitation in the first place). This even includes a female pedophile, who was both stupid and psychopathic, and I find it funny that one of those studies questions the very existence of female pedophiles.

There are many pedophiles that are of above-average intelligence. Most may not even be considered "dumb". But to imply that there's no difference in distribution of, frankly, dumb people to smart people between different behaviors is absurd in that it ignores any sort of relation implication that intelligence has on said behaviors.

As a group, the data does not suggest that pedophiles are exceptionally intelligent, but rather the opposite.

So yes, while I believe there is a privacy concern (I said earlier I would not want such software or hardware running on my own compuer), I stand by my conclusion that CSAM detection would catch a significant number of pedophiles and probably continue to do so for some time. The point of such systems isn't to be a superweapon to catch every pedophile. The ones that it might catch happen to be the ones who are most likely to offend. If you play the stupid game of uploading CSAM to Apple iCloud, you win the stupid prize of getting convicted, and it just so happens that a ton of pedophiles are likely to do something that boneheaded.
Is the G'Mic mentioned in the blog post, same as the one you get in Gimp? Or are any of the plugins left out to be compatible with Krita?
Yes, but it’s much easier to just ignore that and proclaim how weak Apple’a system is.
(Into the standard library, not into Rust itself. Anyone can write this, you don't need to patch Rust first just to call some functions.)
What if I tell someone unrelated to me to make the trade. Insider trading can work and has worked in the past, you just never hear about the guys who don't get caught cause they don't just do it as stupidly as you are assuming
The Spectre Salt Edge API does the same. I thought I could use this in Firefly III to automcatically pull my banking data, until I found out they are screen scraping. This is a no go. Unfortunately, the official FinTS APIs available by most banks are incredibly flawed, too. Firstly, a lot of information is not available. Secondly, there is no way to have a "read-only" API key/connection. Why is that? I have no idea. There is an Open Banking project in Europe, but it it is far from being ready.
Manipulation, passive aggression, telling you that your jobs on the line, … the chapter plays through a few realistic dialogues in the context of a developer providing an estimate the manager doesn’t like and the ways the manager tries to persuade the developer that they’ve guesstimated wrong.

He rounds out the short chapter with an appeal to professionalism.
It's not weird at all in the context of metadata (phone #).
I’m not as convinced as you are that perceptual grasp of relative object size is innate. See recent research in Molyneux’s problem: https://en.m.wikipedia.org/wiki/Molyneux%27s_problem
https://vodpub2.v.news.cn/publish/20210721/XxjfyxE007098_202...

They color corrected his over saturated video, but also went ahead and removed green from the trees. Sure looks like like someone at BBC playing propaganda.
Machine Learning Model Serving
where does 5.3 number come from?
You don’t need to have the weights. “Transfer attack” is a thing.
The DoTP isn't necessarily supposed to be centralized state authority. Marx based his DoTP off the Paris Commune, which was the furthest thing from authoritarian.
Yes, because isn’t a weakness in the design. There is nothing scary fast about it. It was obvious and anticipated in the threat model.
The fog of war is largely in the realm of post-puberty minors, photos of which are not being included in Apple's corpus of hashes. I find it difficult to believe that anyone could mistake or otherwise "fog of war" a photograph of an adult and a prepubescent minor.

And that's assuming someone develops a hash collision which doesn't substantially mangle the photograph like the example offered on Github.

Specifically, only images categorised as "A1" are being included in the hash set on iOS. The category definitions are:

A = prepubescent minor
B = pubescent minor
1 = sex act
2 = "lascivious exhibition"

The categories are described in further detail (ugh) in this PDF, page 22: https://www.prosecutingattorneys.org/wp-content/uploads/Pres...
Part of my point is that people's ability to make an algorithm to react quickly is unequal, even if the opportunity to do so is equalised under insider trading regs. The profit will flow towards those with the ability, which the regulations favour.
Tuple's done a good job of their minimalist UI (it's largely modeled after Screenhero).

With Pop, you can minimize the control panel with 1 click. We'll soon also be adding the ability to remove the border around your shared screen entirely (some users have told us it gives them anxiety to not see something that clearly shows them that they're sharing their screen, but we've now heard the opposite perspective from enough people to realize we need to support both preferences).
Kenora is a two hours drive from Winnipeg, it's not nearly as inaccessible as you're making it out to be.

However, with that said, I saw numbers saying that laying one mile of fiber costs to the tune of $30k, so just connecting Winnipeg to Kenora would cost some $4M. Kenora itself has an area of 80 sq mi and a population of 15k people (though mostly concentrated near Lake of Woods). It's not nothing, but also not exactly a gold mine for telecoms, to be sure.

Timmins might be a better example. It's more than 400 miles north of Toronto, and has some 40k people. Sudbury is half way there and has some 160k people, but still some 250 miles away from Toronto. To give a sense of scale, the distance from Timmins to Toronto is bigger than the distance from Amsterdam (Netherlands) to Berlin (Germany). 200k potential customers is a pretty decent size market (that's a quarter of San Francisco's population, for example), but covering 400 miles w/ fiber at $30k/mile just to reach it comes out to a cool $12M upfront investment. Don't forget this is just to connect two points, there's still last mile coverage and ongoing maintenance which is going to add quite a bit of cost on top. If a single competitor is there, that can cut into the profits pretty deeply.

That's the sort of math that telecoms need to deal with when doing ROI analyses on these markets.
Hi! I work at Plaid wanted to share that the Consumer Financial Production Bureau addressed the fact that a financial institution cannot waive liability responsibilities in a recent Compliance Aid. FAQ 4 says that instititutions cannot rely on an agreement with the consumer that waives the liability protections under Regulation E if a consumer has shared their account information with a third party because those are protections provided under the Electronic Funds Transfer Act.

Source: https://www.consumerfinance.gov/compliance/compliance-resour...
Shameless self promotion, I'm a co-founder of Chronoptics and we design bespoke iToF depth cameras, have been thinking we should release a module to fill up the gap in the market caused by Intel's move.
>> Phrenology

> Pseudoscience which involves the measurement of bumps on the skull to predict mental traits.

Funny story (for us who live a century later):

I heard Norwegian phrenologists traveled around Norway to measure Norwegian skulls and how it related to personal traits and their conclusions were that there were broadly two kinds of Norwegians:

- "long-skulls" in the eastern part: these were friendly, generous, open-minded and intelligent.

- "short-skulls" on the western coast: these were dumb, stingy and distrustful

Wonder were those researchers came from ;-)
please read history, while there were the 160 years of civil war there, they were not a cavemen society you Westerners imply them being.
Not resembles. The adversarial image has to match a private perceptual hash function of the same CSAM image that the NeuralHash function matched before a human reviewer ever looks at it.
How did this pass code review though?
Why wild foxes led you to treasure in Skyrim
I find Dan Bricklin's apparent attitude toward software patents infuriating:

http://danbricklin.com/patenting.htm

http://danbricklin.com/patentsandsoftware.htm

On the one hand he acknowledges the benefits of programming in a software-patent-free environment:

"At that time in history, and before, few fundamental programming concepts were patented. We all borrowed from each other. Just a few examples of concepts where patents played no role in those days: word wrapping, cut and paste, the word processing ruler, sorting and compression algorithms, hypertext linking, and compiler techniques."

On the other hand, he seems to have developed an opportunistically pro-software-patent stance since then:

"That said, I also feel that no matter how much you might feel that patents don't work for the software industry, and how much you may take up the torch to change the law, it is the law today and a fact of programming life..."

"Nevertheless, patenting software is encouraged by law, and I find it my duty to the shareholders of the companies I've been working for to take advantage of this protection."

I could only wish that someone like him, with his presumable level of influence would promote the abolition of software patents. Instead, it sounds like he acknowledges that they're bad, but then makes no effort to use his influence against them, and becomes yet another stockpiler in the software-patent arms race. He himself walked through an open door of intellectual freedom, but seems to have made little effort in making sure that door stayed open for others behind him, or in reopening that now-closed door. He benefitted from the door being open and is now benefitting from it being closed, after he crossed it.
New Boston Dynamics video released
If you're based in Europe or UK, Nordigen has a completely free API do exactly what you described (I'm one of the cofounders).

We're connected to 1,500 EU/UK banks and you can connect your bank account to your script/app without any license, certificates or any fees. We don't charge for accessing banking data, we only charge for complimentary data enrichment services like transaction categorisation.

https://nordigen.com/
The C++11 is still common enough that if you want a large usage group it's the target. However, it's parsing to a DOM and doesn't use features like PMR, so the language features needed won't be more than std containers and stuff.
Here's a scenario, VP behind edge demands increase in Microsofts browser usage, directors below set it as an objective to their product managers who want to get their bonus or promotion end of the quarter. They come up with ideas on how to achieve it. Some are quite stupid, probably way worse than any that see the light of day (like the ones described here). Then some just make it through and here we are.
To reiterate what you said, enabling SMS can make your security much worse on some services. It's counterintuitive. Someone taking control of your phone number can make your excellent password irrelevant.

If you must provide a phone number, another tip is to call customer service on your cellular service provider and ask them to put a "port out block" or "port protect" on your account. Before anyone can do a sim swap on your account, they'd have to call the cellular service provider and give a password or PIN. (It's amazing that this isn't the default.)
Roughly thirty images is the threshold for the system to activate, but would they need to review all thirty images to pass it on or would they just need to verify one image looks visually like CSAM in order to pass it along?

It seems unlikely in the event that there was anything that they verified as CSAM they wouldn't pass it on just because they found a false positive in those thumbnails.
i mean in this case it's an influence campaign to educate people on some of the tools bbc uses to push propaganda.

It's no secret that color grading is used to invoke mood from the viewer and bbc takes it into overdrive whenever it reports stuff on china.

also it's bbc.. pretty much one state media against another...
>We are perfectly capable of synthesizing concepts that do not exist in our experience of reality.

I am not sure exactly what this means, but I don't think I asserted anything to the contrary.

An automaton or a parrot can place words next to each other without "synthesizing concepts". Can an intelligent being not do that too?

As another application of my original point, "synthesizing concepts" would not mean anything unless it was possible (and I think it is) to not synthesize a concept when a string of symbols is put together.

It's not that we have to have a caring universe to imagine one, it's that we have to at least imagine one in order to say the universe is not caring.

One way to look at the universe we live in is that it seems to be faithful. Every atom follows physical law perfectly, at least we assume. Maybe that's not exactly proven, but it's the conventional faith today, and we certainly can imagine the world otherwise, with lots of miracles.
>Sure looks like like someone at BBC playing propaganda.

Or, maybe, it could be as simple as whoever color-corrected the over-saturation just did a shitty job.
Senators Call for Investigation of Tesla’s Marketing Claims, 'Full Self-Driving'
Similar discussion here: https://news.ycombinator.com/item?id=28224881

In short: when you need to see anything outside the IDE (e.g. a debugger, or even just seeing the running app alongside the IDE), a tool like Pop is very helpful. But you can also use it in conjunction with those IDE features, as Elijah in the above thread said he does.
That bit you quoted seems to be actually correct. It does not mention visual derivatives at all.

That said I think your statement is a bit too strong, but generally true. A hash collision is not going to inherently be visually confusing. However you claim that it is impossible for an image to be both visually confusing and a hash collision, which seems unlikely. The real question is going to be how much more effort it takes to do both.
Except intelligence is clustered with other pathologies such as poor impulse control. Knowledge of the law is not the end-all-be-all of human behavior. Both the intelligent and unintelligent are capable of poor impulse control, but the unintelligent are statistically much more likely to exhibit a lack of impulse control, among other things such as difficulty in long-term reasoning and connecting one's actions with adverse effects.
We're happy you're happy! Please try out the product and let us know if there's anything we can do to improve.
In some ways, you can start to see the value in Apple’s system which lets the device user inspect what is stored in the associated data for later review.
About half of my 'Activity Feed' is "unfollowing" this attention-grabbing crap. It's not even really clickbait, just a video to stare at for 45 seconds. I think Facebook just uses these to pump their time-spent-on-site metrics.

This week I've "unfollowed": Viral Hog, Crafty Panda, Crafty Panda How, Kids Crafts, 5 Minute Crafts, America's Funniest Home Videos, LAD Bible, and LAD Bible Australia.

I put unfollowed in quotes because that's what facebook calls it when I click "Stop seeing posts from this page" on suggested content.
No, it doesn't begin with that. It begins with not allowing your parents or grandparents to attend college or otherwise get good educations.
I work at Plaid, and I responded to this on the parent, but because this is pretty highly upvoted I figured I'd respond here too for visibility: the Consumer Financial Production Bureau addressed the fact that a financial institution cannot waive liability responsibilities in a recent Compliance Aid. FAQ 4 says that institutions cannot rely on an agreement with the consumer that waives the liability protections under Regulation E if a consumer has shared their account information with a third party because those are protections provided under the Electronic Funds Transfer Act.

Source: https://www.consumerfinance.gov/compliance/compliance-resour...
The key is in the name, mobility. Being able to look at a map on the web on your home computer is nice, being able to look at map anyplace your phone works is the so much better.
For context here is a pastebin of a comment on the situation from the Current Affairs editor in chief who fired these people. He disputes the motives behind the firings.

This was originally posted on his Facebook. I'm posting the plain text because I think Facebook requires an account to see it, but you can see the post by searching for his Facebook account "Nathan J. Robinson" and finding his most recent post there.

https://pastebin.com/LnpVPCma
You can template/customize the job view quite a lot in jenkins with HTML. We found it an OK compromise.

It has prometheus plugins for monitoring
What are all these hypothetical humans doing with CSV files? I've worked with them a lot, and the only time I read one manually is to find out why it isn't parsing properly. I'm not writing them by hand. I'm not extracting data from them by hand. What are other people doing?
Those quizzes/surveys are making a comeback in some demographics on facebook, too.
is it just me or there is something off about The Guardian website? The 4 stripes borders that they have everywhere in their design, they look ugly and, as a webdev, creates the impression of a css bug, even though they're not.
A completely fair point ... and one we debated at length.

Ultimately we decided that the convenience for users and documentation of a single location outweighed the benefits of following the basedir spec, particularly when deployed across operating systems. We looked at other tools, including terraform [1], in reaching a final decision. FWIW, we do let you customize the location of the "install dir" [2].

Hopefully the benefits of Steampipe outweigh the "peeve" factor in this case <grin>

1 - https://www.terraform.io/docs/cli/config/config-file.html
2 - https://steampipe.io/docs/reference/env-vars#steampipe_insta...
What in the US Constitution is preventing Congress from passing a law establishing national identity tokens? I’d figure that would be done under Congress’s power “To establish a uniform Rule of Naturalization.”
And as a third possibility, color correction can be difficult when trying to achieve "white-balance" (usually involves tweaking green & magenta) that looks appropriate on a wide variety of displays and monitors.

Still, ideally everyone in the modern era should be aware of basic techniques to manipulate the look and feel of photos and videos - from color correction and filters to lighting and camera angles.
> You could be duped thinking you downloaded an image of a beautiful sunset

If it was anything like the image used to demonstrate this technique on Github, it's unlikely that anyone would describe that sunset as "beautiful". They'd be more likely to describe it as "bugger, this JPEG file is corrupted."
Cool project. Others may also be interested in simdjson which parses at about 4GB/sec.

https://github.com/simdjson/simdjson/blob/master/doc/basics....
Apple's reviewers don't have access to the original CSAM to know if it's a match or not. That stays with NCMEC. If they see some legal porn that looks like it could be illegal, they'd likely flag it as a match.
Modern Compiler Front End Course – Aleksey Kladov
I've gone through a few compiler courses over the summer and this is among the best resources I've found (UPenn, CMU & Siek's "Essentials of Compilation"). It has a unique approach among them, it is the first lecture series that assumes a modern approach, that is, it ties compiler frontend to developer experience and IDE.

Highly recommended to anyone who wants to deepen their knowledge about compilers and/or make their own language IDE/LSP friendly.
That’s not how Apple’s system works. It’s not an image classifier. Only actual images that are derivatives of known CSAM images (a database of 250k images) will match. Random images of kids will not match those at any greater frequency than any other image.
Really fun!
This is basically what I do too:

Tmux, vim, and some tmux-fu to enable copy-on-select with the mouse.
The EU has been moving in this direction with PSD2 and it’s been pretty good. Downside is there’s no defacto standard for APIs and each bank's development skills vary widely.
New Law Firm in Rockhampton
Slater and Gordon have opened a new legal office in Rockhampton for their local lawyers
Not everyone has the option of rejecting it, though. Sometimes you need that data and have no control over how it's being generated.
Before they make it to human review, photos in decrypted vouchers have to pass the CSAM match against a second classifier that Apple keeps to itself.
> If someone can demonstrate that a legal NSFW image (eg. regular old-fashioned pornography), can be collided with a legal, completely 100% SFW image then I'll be concerned.

Look at this other collision: https://twitter.com/SarahJamieLewis/status/14282060881181491... An attacker can send you an innocent looking picture that embbed some CSA material and you get swatted the next day.
A lot of excels and csvs are made by people other than programming crafters.
They explicitly explain this to the user and apparently even encourage that you instead manually export files and upload them but also provide direct login as a feature.

Yes its not perfect security which you may find scary but I struggle to find what about it is shady when they are very open about what happens.