skysight-inc/HackerNews huggingface dataset:
The key generation routine for iCloud Keychain is shipped in iOS and tangled with your device passcode. Chinese iPhones have the same iOS builds as iPhones everywhere, so if some backdoor code was present to have them generate iCloud Keychain keys differently, someone would have found it.

Here’s what I think the article is trying to describe:

1. It is known that Apple houses Chinese iCloud user data in Chinese servers. Apple has said so: https://www.cnet.com/tech/services-and-software/apple-ceo-ti...

2. China refuses to support Thales’s HSMs, so Apple had to build their own, presumably based on the secure element: https://twitter.com/matthew_d_green/status/13943950780100526...

I think #2 is what the article characterizes as “discarding entire encryption system.” However, the encryption of iCloud Keychain isn’t dependent on HSMs in the same way the rest of iCloud data is.

As a result, E2E encrypted iCloud data for Chinese users is probably still safe in China. Given physical access and non-standard HSMs, non E2E encrypted data in iCloud probably is not.

It will be very interesting to track the consequences if and when iCloud moves more data into E2E encryption, since the majority of synced data is not: https://support.apple.com/en-us/HT202303
What does this have to do with reddit?
Going to be buried but I think I have been burned out for almost 3 years now. Started with working 80 / 90 hour weeks for 6? months. After that hours got better to maybe 50/60 hours a week for 18 months and then new job and back to 90 hour weeks for 4 months. First 2 years of that were in a terrible environment where everyone was stressed and feared being fired. I did not look for a new job because it was double the pay of my last job and I wanted to help set my family up and buy a house. I have trouble focusing on anything for longer than an hour. I have to work in heavy productivity periods of maybe 30 minutes, then I cant do anything for 2 hours. I get good reviews but the current job is pretty easy. I dont think I have really been happy in any aspect of my life for 2+ years. Which sucks, I don't even know what happy is right now, I just exist. Wish I could take a year off and just figure it out but financially not there. Very much burned out. Need to figure out a way to essentially strip everything away to 8 hours of work a day and then just relaxing and family.
One Billion Years of Time Are Missing in the Grand Canyon
spain morocco
There's an old(ish) tool by the name of NoteLiner, no longer maintained. If you can find a copy which isn't too buggy (3.3 is the best), I've never found a better outlining tool for methodically breaking down a task or concept. In particular, the use of CTRL+Space as a quick way to collapse/expand a tree is really efficient. NoteLiner is also less restrictive than most other outlining applications, as it's more of a blend of a text editor than something that imposes a rigid structure. Best used in conjunction with George Polya's "How to solve it" method :)

You can achieve a similar workflow in Visual Studio Code with markdown, but it takes a little more work.
Credit cards should be 30 days to invoice you, will be returned before that
Buried in the EULA, you give consent.
Well put. Perhaps it’s cynical, I think that’s true of any corporation of Apple’s size: their only true principle is to maximize shareholder value.

The best we can do as privacy-concerned mere-mortals is to take our business where those profit incentives align with our values. Apple’s put a lot of work into advertising that their profits are aligned with values of privacy, but some signs say otherwise.
China schools: 'Xi Jinping Thought' introduced into curriculum
If you genuinely believe that, then you should be campaigning for free child care for all.
Lets not forget Spotify podcasts has injected ads for premium users. Sorry, but that's a no-go.
I'm glad people like you weren't in charge in 1861 in the USA.

China is a slave country controlled by dictators against the will of the people, not just "a different culture".
Once again showing that a shitty interface isn't a problem if you can just advertise the right way.
The door has been opened for quite some time. What do you think spotlight is? It scans an indexes all your data.

What's prevented the government from saying "hey if you see Osama Bin Laden in a spotlight scan, you need to send us all that guys data."

The answer is, Apple can just say FU. And that's exactly what will happen here. In particular, the US DOJ needs to stay in Apple's good graces here and not be overly aggressive. If DOJ pulls any funny business, that's a pretty good reason for Apple to just say "OK, we're picking up our toys and going home. You get nothing now and we're turning on E2EE."
I can trace the start of my (reasonably prosperous) career in IT, to one off-hand comment at a Linux User Group meeting some 20 years ago. I was a student and mentioned to someone that I was looking for part-time work. Another fellow overheard and I was hired over the phone the next day.

Fair to say much of the way my life turned out is thanks to Linux and open source software.
Actor and singer seem just as pedestrian.
I just use my Commodore 128.

https://i.imgur.com/j8ppmNn.jpg
I mean, that’s also bad? But the CCP is not going to budge on this, and it doesn’t affect me as much as an American, so I feel like I can be upset about both and more upset about the one that affects me directly.
Of course, if you need to use a web browser or something the benefit disappears.

Nope.
Thanks for question. In all honesty, out of 14k nyc students not 1 complaint about the name so far :) Litnerd is kind of a known endearing name librarians and English/literacy majors use describe each other. And on the other hand, we play up the “lit” aspect for the older kids. Because dungeons and dragon themed choose your own adventure stories is exactly that: lit :) Either way, we just haven’t had students of schools hate the name as much as I think some on HN have (which is totally cool. Happy to hear different views).
I heard that 'personality' (whatever that means) is kinda set in stone by age three or four. Not 'set in stone' but it becomes much harder to change beyond that point. So we made sure that, right from scratch, our kids were disciplined as consistently as possible, so that their 'personality' boundaries at age three / four were pretty close to where we'd like them to be (this is all very vague, but, fundamentally, we'd done what we could to have them 'set in stone' from a good base).

This may just coincide with the age bracket at which kids make friends and start spending increasing amounts of time with other people and therefore having 'outside' influence. The lesson being: set them up to know good / bad / appropriate / inappropriate by this time.

Allowing some time to involve yourself in their interests (which equates to their friends' interests), rather than forcing them to conform with your own interests, should keep you somewhat more relevant in their eyes. This is much easier said than done - I've struggled with this the whole time, but Minecraft was a great phase :)

Learn to laugh at what they find funny, just to connect. Look at it through their naive eyes rather than your own broken-by-the-world cynical life experience.
One reason is that they weren't under antitrust scrutiny in 2016 when they fought the the government in court.

Their incentives have changed - they now have the real looming threat of being broken up by governments, so it is now in their interest to comply with anything else governments ask them to do.
Someone is wrong on the internet!

Not sure why in this particular instance this is newsworthy.

Because in this case the users who disagree belong to the same website that has 100s of millions of users?
What is at the end of the Universe if it isn't infinite?
I've installed Spotify only to discover that podcasts are not available in Russia at all.
On-Call Anti-Patterns
I vouched for the flagged and dead comment.

I read it as saying that it shouldn't need to be stated, ideally, that she is brilliant because of stigma around sex work and workers. That we have then freedom to do this as we please in the USA, it's legit work, and many people of all intelligence levels and circumstances may choose to do it.

It's a strongly worded opinion and with Afghanistan thrown in, but we all know the Taliban's history of repression soo.. I think it's worth everyone seeing.
They send a low res visual derivative. Which is worse than sending the actual photo in regards to false positives.
I am right there. Been burned out for years. But I just cannot see a way to get out of the rut. Sorry man.
AutoClick: create click-based CLIs using type annotations
This claim is often repeated but the only source for it I’ve found is reporting in Reuters citing anonymous sources. The user experience challenges of end to end encryption are immense, especially since iPhone is many users’ only iCloud client, and I find it hard to believe Apple was moments away from announcing a solution to them but the FBI pressured them out of it. That is not the extraordinary evidence such a claim needs. For example, Bloomberg reported an even better sourced story about supply chain compromises to Apple’s cloud services which has been more or less entirely debunked.

In addition, the emphasis on the on-device portion of this scanning project is evidence that Apple views losing access to iCloud data as part of its roadmap.
I think the op meant that as an analogy : in order for you to use their software, you pay 1000$ upfront for the hardware. So you can look at it as a one time payment/rent to use their environment. Since you need to upgrade iPhones quite often, I guess renting isn't a bad analogy.

> but there is nothing that stops you from modifying or hacking it to your heart's content if you are able to.

Are you sure? I haven't read the terms, but that might be quite against their rules. Rules that you probably adhere to by using their product, but I'm not a legal expert.
Some people have bought into the whole Apple ecosystem. Hard to extract yourself, and getting a usable phone like a OnePlus gets you thinking about foreign extraction of your data, bitter pill to swallow. Now it’s clear that all phones will suck, and always suck more in a future rev.

I use some Apple devices but not the ecosystem for exactly the reason of switching.
Never Trust a Scientist
> Without environmental impact reports it's likely that there would be nearly no natural land left in California.

I don't think we rely purely on impact statements for this, there's plenty of parks / nature reserves where building is simply not allowed. And of course zoning heavily restricts what can go on land where building is allowed.

I believe (and another comment mentions here) the California law is unusual because it allows private groups to request additional reviews in addition to the government environmental regulators. And as a result of this, groups that oppose projects for non-environmental reasons will take advantage of the complex environmental impact process to drag out anything they don't like. So a straightforward change would be to leave the environmental review to government agencies and not private groups.

To me it seems like it would make more sense to address these issues at a regional level - like apartment buildings can go here, houses can go here, and looking at the general impact that those developments would have - instead of doing a very protracted process on a per-project level. At least for common things like housing, maybe not chemical factories. Maybe someone who is more familiar with public policy around urban planning can weigh in on how other locations address these problems and if California's approach here makes any sense, or if it is just some unintended consequence of laws that were maybe a little too broadly-written.
In comparison to Teams, Discord is a godsend. I think the biggest problem in this space is a lack of quality competition.
The politics of it is very different, and that's where the danger lies:

https://news.ycombinator.com/item?id=28239506

I think that quite a few engineers are too focused on the technical aspects of it, and specifically on all those "barriers to misuse" that Apple claims to have in place. But it'll be much easier to remove the barriers once the system as a whole is in place.
>But what about free speech?, some might ask.

>"The Constitutional protection of free speech very specifically stops the Federal government from censoring your communications and doesn't actually apply to private entities," everyone should answer.

Hmmm... where did I hear this before?
The headline even says "or undergo weekly testing"
UK to Hang Up on Landline Phones in 2025
Thank you BizarroLand from The Internet for giving us all the final word on which opinions are valid.
To put a finer point on that, there is a difference between infection and disease. You are infected with the sars-cov-2 virus. Which can cause you to contract the disease (covid) if the viral infection gets out of hand.

Getting vaccinated gives your body a headstart in fighting off the virus so that it doesn't become covid. Since you have to become infected before your antibodies go to work, it doesn't totally prevent infection. But it likely keeps the virus tamped down so much so that you are much less likely to spread it. If the virus never really gets to take off, you won't be spreading it to others.
>Why is everyone so desperate for regulated discussion?

No one is desperate, but not everyone wants to be confronted with conspiracy theory nonsense and racist shitposting everywhere they go on the internet just because some people believe "freedom of speech" means every site on the internet has to be run like 4chan.

Every forum since the beginning of time has been policing content for reasons other then strict legality. You're on a forum that polices tone and quality, relentlessly downvotes and flags anything for any reason, considers all politics and mainstream content categorically off topic (even though, strictly speaking, it isn't) and treats humor like the plague.

Laissez-faire hands-off general discussion forums have their place, just not everywhere. That's not fascism, or tyranny, or Orwellian dystopia, it's simply the result of the fact that servers and websites are private property, oftentimes services granted to users under certain and specific terms. Like it or not, all discussion on the internet has always been regulated to some degree.
https://en.wikipedia.org/wiki/Four_Horsemen_of_the_Infocalyp...

(it's actually linked from the blog post)
Can someone recommend a truly self hosted solution? I too use pinboard but I would like to host on my raspi or something
> "Sex workers" is synonymous with prostitution.

Not generally; its typically used either more broadly (though not strictly more broadly, as nonconsensual acts wouldn't generally be included) than “prostitution”: https://en.m.wikipedia.org/wiki/Sex_work#Types

Or strictly more narrowly than prostitution, as in:

https://theconversation.com/who-are-we-talking-about-when-we...
Fun fact! Reader mode also sidesteps some paywalls on news sites.
Sure, Alex Jones is a crackpot but why should you, or anyone for that matter, be allowed to prevent others from speaking to an audience that has decided to listen?

What do you expect to happen when the balance of power, majority opinion, etc inevitably shifts and we find ourselves on the other side?
Snowflake (Slang)
That's a complaint I keep hearing. But the reason I switched to discord in the first place was because I loved the interface.
Both in terms of usability and aesthetics.
Makes me wonder why there is such a gap in how people rate their interface.
This is awesome guys! Congrats on the launch!
It’s confusing - alpha is not the original strain. It’s the original variant.

The vaccines are based on the original strain, not the alpha variant.
It doesn't have to.

But we have to look at what happens in reality. Financial turmoil is a leading cause of divorce. It is hard enough to pull yourself out of poverty, even harder with a child, even yet more difficult if you have a "dead-weight" partner no matter how much you love or care for them. The sad reality is a man who spirals into poverty is quite likely to lose his wife.

Also, it's a losing proposition to claim benifits while married. The government penalizes marriage in low income, benefits claiming couples [1]. And it's hard to look past the simple observation, born out by statistical analysis of divorce, that women simply choose to leave men who aren't able to provide.

"For example, a single mother with two children who earns $15,000 per year would generally receive around $5,200 per year of food stamp benefits. However, if she marries a father with the same earnings level, her food stamps would be cut to zero. A single mother receiving benefits from Section 8 or public housing would receive a subsidy worth on average around $11,000 per year if she was not employed, but if she marries a man earning $20,000 per year, these benefits would be cut nearly in half. Both food stamps and housing programs provide very real financial incentives for couples to remain separate and unmarried."

[1] https://www.heritage.org/welfare/report/how-welfare-undermin...
I wonder how these payments work? Does Apple just receive a wire transfer from Google of around a billion dollars each month?
Good but those two things aren't nearly enough. Then people wonder how we end up with HeartBleed bug, Elastic & Grafana moving to stricter licenses, Mozilla dying in favor of FAANG provided software.
the way you describe it sounds like the natural way is more resistant to mutations. And the low efficacy of the current vaccines against delta dovetails well to it.

>they'll tend to be specifically tailored to recognizing the surface spike

the situation is worse than that. Most of the current covid vaccines are targeting only a segment of the spike protein, and all those segments are largely overlap, ie. union of those segments of different vaccines isn't much bigger than their intersection, so just a couple of mutations (https://journals.plos.org/plosone/article?id=10.1371/journal...) is enough for the virus to escape almost all of those vaccines.
Wow, this is really cool! Thank you
How I Remade the Simpsons Hit and Run in a Week
> What I don't get is what prevented these things from happening last month? Apple controls the hardware, the software, and the cloud services...

Yes, proprietary black-box hardware and software is poor from a user privacy perspective. But, If Apple began on-device scanning of content, I'd imagine eventually someone would notice the suspicious activity and investigate.

With Apple's announcement, the scanning will just be something that Apple devices do. Nothing to worry about. And, no way for anyone to independently verify that the scope of the content being scanned has not been secretly increased.

As for icloud, if your content is not encrypted on the device in a manner where only you have the keys, any cloud storage is suspect for scanning / data mining. But, on-device scanning is a back door for e2e encryption-- even on device encryption with keys only you control is thwarted.
Contract implies meeting of the minds. I'd like to see the process by which I can line out or alter the terms of the agreement please.

I'll wait.

This is the other thing "digital natives" don't get, nor want to. Negotiation is normal. Ya know something else tgey don't get? Selling something with the damn manual, and enough system documentation to actually be able to sit down and learn something. Drives me nuts.
it is not impossible to make informed intelligent decisions regarding your behavior, or the situations you choose to become involved in. there are behavioral alternatives that will minimise your risk and others risk, these alternatives are not for everyone, the psychological challenge of social isolation is not bourne well by many people, however it was the best we had until vaccine production was sufficient to provide population scale administration.

please believe me, this is not fear mongering when i say that the >potential< risk posed if this virus generates omega strain variation [hypothetical doomsday strain] would be large and unmanagable.

this can happen if, long road taken variations accumulate over time as a result of unchecked transmission and incubation.

the short road is co-circulation of variants recombining genetic elements as a result of concurrent multivariant infection.

...and apology accepted, i see you are very passionate about your decision
How do you think will the lawyers be able to prove Apple is a monopoly when Android exists?
I have to admit that Apple ecosystem works really well. I have been fighting with different Linux distributions and other devices for years. Even wrote own client for Chromecast.
But something like AirPlay 2 just works, with high quality.
I like the idea - but does it support cloning from a remote? Or is the designed use-case to act on existing local repos
Disclaimer - I can't read the article; paywalled(and I don't care enough to bypass it).

That said, will discord lose those initial advocates - gamers - in the process? They're already cracking down on NSFW channels, and constantly making things less convenient and more locked down in their pursuit of the general public.
Some, but not all. And if you still have access to a Mac or iOS device which remains associated to this iCloud account, the amount that is lost can be even less.
I don't understand why it was necessary for this technology demonstration to be put in a "work from home is dangerous" context
If you believe this is true, why didn’t Apple also launch in the EU where antitrust scrutiny and case law are both more strongly against Apple?
I am well aware that other phones exist. But I used the word 'market' for a reason, because defining the market[1] is the first step in any analysis under competition law.

[1] https://en.wikipedia.org/wiki/Relevant_market
It's not a static image, so by "scanning" you can get a pretty good idea of the 3D landscape ahead of you. That's what your eyes do already.
Governments ultimately draw their authority from their ability to keep their citizens from overthrowing them... China is doing a good enough job right now, even if you don't think so, and even if there are some bad things happening there. But the reality is that even if they were to submit to internationally audited and monitored elections overnight, it'd still be subject to the flaws of a democractic system (private interest group, big money influence, etc) that would taint the ideal of a fair election. A democractic election is ultimately still a proxy of power distribution. You'll end up with more of the same most likely, but with less excuses to point fingures at when they commit unpopular acts (for example they may still imprison Uighurs, expand in the Indian ocean, and threaten Taiwan).

Rather than making such strong remarks telling Chinese people what they are, you can just go there and ask them yourself instead of armchair posturing.
:-) It's funny to hear after all those years that it was a buggy release anyway...
I built a SaaS starter kit (https://usegravity.app) and use the same kit in a few SaaS products. I'm obviously biased, but I would never start a new project from scratch for several reasons:

1. Building boilerplate code takes a long time to do things properly and is often never as simple as we may anticipate.

2. The time is better spent on building features for customers.

3. As you mentioned, it's painful to build this stuff.
How about there are people who make $200M a year on the platform. Outrageous.