skysight-inc/HackerNews huggingface dataset:
"While it’s good for Apple to scan on its systems (iCloud) like Facebook, Google and other companies do on their servers, it’s inappropriate to do it on individual devices"

I would even challenge the justification to do this on servers, unless the data is public. If it's behind a personal login, you might as well consider it personal property/data. I find the distinction of where data is stored not very meaningful.

Allowing things to be searched for criminal content just because it's not in your immediate physical sphere makes no sense. It doesn't work like that in the physical world either. When I send a letter, and it leaves my house, no authority has the right to check its contents without a legitimate reason. Likewise, if I put stuff in a storage box in some warehouse, no authority can search it without a warrant.

Note that I'm talking about personal storage (iCloud, Gmail), not public social networks like Facebook.
Banking apps &c. work fine on CalyxOS
As long as there is disagreement, it's difficult to move forward. Managers could help show where/how value is created by collecting and sharing information.

To understand, explain and illuminate how value is created should be one of the first basic tasks for managers. Part of the purpose is to eliminate as much disagreement with and among "reports".
You also have companies however that only give raises based on what your title is so if you don't "progress" you never get a raise.
This could be the perfect base for a decently low-cost but performant HA hashicorp cluster!

Get 3 of these boards, each with 3-4 modules:

* CM4: Consul server
* CM4: Nomad server
* CM4: Vault server
* any: Whatever else you require (LDAP/victoriametrics/grafana/wireguard/nomad worker/DNS/storage/etc)

Optionally add router board(s) (think PCEngines APU or similar) for load balancer/bastion hosts/gateways.

Extend with any kind of machines for additional Nomad workers.
> Contractors maintained our bombers and our attack and transport aircraft throughout the war. By July, most of the 17,000 support contractors had left. A technical issue now meant an aircraft — a Black Hawk helicopter, a C-130 transport, a surveillance drone — would be grounded.

> The contractors also took proprietary software and weapons systems with them. They physically removed our helicopter missile-defense system. Access to the software that we relied on to track our vehicles, weapons and personnel also disappeared. Real-time intelligence on targets went out the window, too.
As constructive as this is, perhaps you could elaborate on what the problem is that keeps millions of people in a situation where they earn _exactly_ as much as they need to survive, year in and year out?

Of course I can not expect a private lecture from you, being a mere random commenter, but perhaps you could point me to some of your existing lectures or writings that explain why I am so wrong?

According to your profile, you are a software developer in Switzerland that likes to figure skate. Maybe it's my prejudice, but it doesn't sound like you would have much personal experience of third world poverty either.
I was a self-taught programmer for about a decade before I went back for my degree. Mostly to satisfy my own curiosity rather than to help my career.

I was rather shocked by the amount of gaps I uncovered in my understanding. Sure there were some boring classes, but developing an understanding of the whole system from the logic gate up was hugely beneficial. Being forced to work through the details of operating systems, compilers, automata, and algorithms, as well as the history, theory, and formal structures of all the major families of programming languages, gave me very nice framework to build on over the years. Even studying the academic side of software engineering was more useful than I thought it would be.

I also learned a lot more than I would have had I done my degree when I was 18. If it were more practical, I'd recommend everyone take a few years working as an apprentice programmer before immersing yourself in the theory.

There's nothing magical about a degree. You can learn everything I did by reading, watching youtube videos, and practicing. But I never would have, and I clearly didn't in nearly 10 years of working at it. Having access to professors, TAs, and a peer group studying the exact same thing you are is a huge force multiplier. The tight feedback loop kept my understanding from straying off course and let me build accurate mental models much quicker than I could on my own.

I've known many engineers who were smarter and probably better programmers than me who didn't have CS degrees. The best engineer at my current company doesn't have a CS degree, but I'm almost completely certain that if he had a stronger theoretical background, that he'd be even better.
My thoughts exactly. The author must be running for public office or something
Apple's history as a supplier of server hardware isn't so good. (Cough, gag, XServe.) But they could have a few crack chip designers working on bigger brothers to the M1, may have noticed how many $Billions are being spent annually on servers for data centers, and might even act as if they actually want to be successful in that market segment, this time around.

Or - probably more likely - Microsoft, Intel, etc. want to keep that ~90% worldwide market share of theirs from shrinking.
You can now buy relative cheaper portable pizza ovens (such as the ooni), which make this pretty easy.
"Extreme safety" and "extreme flexibility" seem direct opposites of each other: safety comes from having something set in stone, while flexibility comes from being able to change something.
I think the biggest differentiator here is direct access to the PCIe bus and SATA that doesn't go via USB - that's something you can't get on a normal Rpi.
>>3. The network requires an easily-blocked protocol to send large amounts of data on a continuous basis

No, you only need to be able to receive/transmit the data relating to your own addresses when using a light client. The full nodes can sit outside of any censored country.

>>The next point on the sales pitch is usually “use a tumbler” or “use separate wallets for everything”. These are impractical on a regular basis, guaranteeing that people will be compromised by mistakes and again have their full public transaction history linked, and there's a huge trust problem

I agree that that is true with Bitcoin, and that is why I don't promote Bitcoin.

>>It doesn't help anyone if, say, someone comes up with a great anonymous coin system but the local government is actively promoting exchanges and apps which are compromised

Good point.
You also get around many paywalls by activating reader mode.
In a similar vein, they can cover vaccine injury victims as well, might make people consider vaccine injuries seriously as well..But no. Watch this comment getting downvoted, if not flagged before that..

https://www.youtube.com/watch?v=6mxqC9SiRh8
For anyone interested, my hacker news app HACK does both reader node as well as read text to speech. It's brand new so any feedback is welcome:

https://play.google.com/store/apps/details?id=com.pranapps.h...

It's available on iOS too which uses the built in reader mode of safari.
I dunno, sounds very ‘I am very smart’ to me. They may be right or they may not, but both solutions sound workable to me.

Don’t let perfect be the enemy of good, and all that. There’s enough utter garbage around to shit on.
I was a big fan of his show in the 00s, but in hindsight I think Colbert did a great disservice to the media landscape in this country by normalizing this kind of sarcastic mimicry. It gives the far-right plausible deniability so they can say “lol it’s just a joke I don’t actually think that” when it doesn’t go over well.
Math not your strong suit or typo?
Assume (as manager) instead that it is the 'default' rational attitude in a high entropy state, and work on ways of changing the circumstances to move out of that state.
Hello. I wrote a multitasking graphical user interface for x86 DOS operating systems and a TCP/IP stack and an HTTP server for it. I'm also writing my own DOS kernel.
The cited source does not support the stated proposition. Your link says 335,000 civilians, and it counts all deaths, not just those caused by the U.S.

I was directly involved in U.S. CIVCAS mitigation measures in a Daesh convoy engagement by U.S. air power in the summer of 2016. I cannot comment on anything that transpired within the classified space. However, there was substantial reporting on the discrepancy between the measures implemented by U.S. drone strikes during the engagement, and measures implemented by Iraqi helicopters during the engagement. I encourage you to think about what that discrepancy might mean, if true, about how you're using those numbers.
So your threat model here is that the person at Apple tasked to check for Child Porn is an actual Paedophile and might accidentally see a false positive of your child's naked photo?

You do know that they don't see the whole photo at full megapixel resolution? They're just given "a visual derivative" of the photo for checking.

Also, you really think that the persons tasked with this process are just randos off the street and not vetted specifically?
Until the end, I thought this is a lesson to spot fishing mails. I thought I knew it when some of those screens showed no SSL encryption.
Sadly Tridactyl (vim keybindings for Firefox) doesn't work in reader mode, which really breaks the flow of my usual scrolling/tab-switching with vim keys. This, and the pdf reader tabs kill me because of it
CodeApprove is a better code review tool for teams on GitHub: https://codeapprove.com

The frontend is Vue 2.0 and TailwindCSS. No other major libraries besides the Vue standards (router, store, etc).

The site is delivered by Firebase Hosting and the backend is all Firebase (Firestore, Auth, Storage and Cloud Functions)

I absolutely love this stack. It’s so simple to run and requires no maintenance. Plus the fixed cost is $0. To deploy I use manually-triggered GitHub Actions workflows.

The best part of the whole thing is the local dev experience. With the Vue CLI and the Firebase Emulators I can run my entire stack locally with hot reload across frontend and backend. When I push to production I am confident.
I've observed the opposite: larger and higher-skill engineering departments are more likely to have the expertise and perspective to scale RDBMSes and use them in advanced ways.

It's smaller or lower-skill/fad-chasing orgs that end up doubling down on non relational systems for as the primary data store, lured in money-for-free promises of "no schema needed" and "scales automatically".

Nonrelational datastores have a place, of course, but they tend to be much more niche/purpose specific in functional engineering orgs in my experience--to the point that an engineering group's ideas around relational databases (what can they be used for? Should they be the default option for new use cases? How far can they scale?) are an effective proxy for that group's skill level.
Theres not even a need to do that, upload the encrypted image and its neuralhash.
If that’s a valid reason to steal electricity and compute resources from your customers, then why not go the whole way and use all the Mac’s as storage and compute for iCloud?
You can turn it on globally by selecting:

Preferences > Websites > Reader > When visiting other websites: On
On FF, is there an extension that automatically turns on reader mode when you are reading an article?
I mean, you could send them actual illegal content too.

And human reviewers are in the process. If you've got 30 matches and they are all pictures of bridges or whatever do you think the FBI is going to show up at your house?
I would hope that these new rules apply to Samsung as well.
But he still has a point.

Do we attribute the Mona Lisa to Da Vinci or his client?
Huawei Inside: How Huawei Finds Salvation in China’s Automotive IoT
Batteries are already there. We can get them at $100/kWh now. Also generally these wind turbines cost a million US$ per MW, so this turbine is around US$16 million. A day of storage at 50% capacity factor for this would then cost US$ 19 million.
OnlyFans drops planned porn ban
Here's Dropbox's goodbye post:

https://blog.dropbox.com/topics/company/thank-you--guido

To summarize:

* Having THE language creator (dropbox was majority Python) around is super useful, especially from a soft-technical standpoint. Imagine the confidence boost a junior gets from that.

* Worked on mypy
AFAIK apple runs background tasks on slow cores which is supposed to free fast cores for foreground tasks.

I still don't understand why is it necessary in an OS which can juggle threads hundreds times per second using priority system. At least ignoring power efficiency aspect and concentrating only on performance or perceived performance aspects.
Nice. So -1.0*(4 - 4)=-0.0 but -4 + 4=0.0
The title is maybe a little misleading? TL;DR - you can overcome so frustrating cookie permission popups and some invasive visual elements by using reader mode.

However if we focus on the title,
Reader Mode is a great feature (and I’m pretty sure many others followed by this title agree with that observation).

I use it mostly on my mobile devices and it can greatly improve readability of something by controlling the text-formatting.

Having said that, still many times (at least for me) it can resolve wrong translation for the content due to:

* ignoring some divs in the page
* in-ability to move to next pages (eg. hyperlinks)
* bad RTL support

I wish I would be able to use it more often. :)
So I’ve encountered this in real life.

The human driver detects the pedestrian, laughs at the fall, then get worried and wait for them to get up, because a human knows someone fell and didn’t magically disappear.
I've noticed the same thing. Nowadays I quickly check the end of the article before switching to reader mode, to make sure it's still there.
I use it from time to time but I would probably use it more often if reader mode was automatically restored on websites where I used it a first time (and didn't switch back).

If the page is "good enough" when blocking ads (and I also have JS disabled by default), I won't bother using reader mode.
It depends where you are.

I've travelled in Europe and had good service just googling the number of a local taxi firm, and speaking to them.

I used Uber once, and they decided not to take my fare; they never showed up.
> This site isn't currently available in the EU

but i'm in the UK!!1ones
I think before a criminal investigation, or any investigation at all is pursued, a human verifying the images would dismiss the false positive.

I would think surreptitiously placing actual child porn on a rival's phone/computer would be much, much more effective.

Cybercriminals could likely do all this remotely. Phish for apple account login, upload images. Done.
Is This Food Healthy? New Packaging Labels Would Tell You
> The Internet is often described as a global network of networks, but if this network is truly global, why is it nearly impossible to have an email address in a non-Latin script like Chinese, Arabic, or Hindi? This is not just true for applications, but also for the protocols, programming languages, routers, and pretty much every part of the Internet’s foundation.

My big compliant about different languages in UTF-8 is homglyph attacks are easy-peasy to do.

And the way non-ASCII (7 bit) character sets were done makes it nigh impossible to tell the difference between in-character set and outside of.

There are hacky ways to show some homoglyph attacks, like punycode. Browsers do this... However using homoglyphs in Outlook works as intended and shows the look-alike characters without expansion - *but* the Outlook web access does expand the utf-8 chars to punycode.

My recommendation being an infosec professional is to determine if you have a need for allowing punycode usernames or domainnames. If you don't, I suggest to ban them at your gateways.

I also recognize the non-english centrism in doing this block. But when hese ranges of attacks are possible, I see this as yet another layer of defense against a really obnoxious attack type that is tremendously hard to discern.
Because Apple is the one company that actively tries not to know anything about you.

FB and Google will exhaustively analyse every single facet of your online presence and use your pictures to train their ML models for face detection and object detection.

Apple, on the other hand, even explicitly splits Map directions to segments so that they can't know where you left from and where you are going to.
Actual combatants have been estimated closer to 150,000 (the only numbers we have are DOD numbers which have been shown to be highly suspect whenever things have been leaked from people like Chelsea Manning).
Android phones run real Linux kernel with real multitasking. How multitasking exposed in UI is a different question.
very popular service in latam (colombia,peru,mexico,venezuela)
> I can understand that monetisation and user well-being can be at odds sometimes (e.g. with free apps and services)

This is also the case in paid services, who are not known to be more user/privacy-friendly.

> This is why I tend to buy things that use generic, open standards. I don't trust something that needs an app to work to last long.

Same here. Unfortunately, it's becoming increasingly harder! Fortunately the second-hand market is inundated with hardware that has proved its reliability thus far... I feel definitely more at risk when i have to buy new hardware.
He has retaken the picture several times, on anniversaries of the album's release. He seemed to think it was cool and opened doors for him five years ago but I guess he's changed his mind since then.
I might be the minority here, but this is why I use Edge on Windows. It's, basically, Chrome with a reader mode.
So, the presumed attack (not against individuals, but to defeat the system) is

1. Identify some innocuous pictures that many many people have (memes, Beyoncé, whatever).

2. Produce CSAM.

3. Mangle it such that it is still CSAM visually, but NeuralHash-collides with the innocuous pictures from step 1.

4. Distribute.

5. Wait until they are (via some other mechanism) a) identified as CSAM, b) added to the NCMEC database, c) added to the Apple on-device database of blinded hashes in some iOS update.

6. Millions of people are suddenly incorrectly flagged for exceeding the threshold by NeuralHash (since they have the innocuous pictures in their library), and the review teams are flooded and can't pick out the small number of actual CSAM holders.

That is not without a certain elegance. However, it seems to me that

A) it is predicated on the assumption that you can easily mangle pictures to NeuralHash-collide with a desired target picture (out of a set of widely circulating innocuous pictures) without deteriorating the visual content too much.

B) it would be quickly defeated by amending the 2nd tier algorithm (between NeuralHash and human review), though, as you highlight, that might be tricky given that the team working on this presumably only has access to the innocuous false positive collision image, not the (purposefully mangled) CSAM.
YMMV:

I find Act cool in principle, but whenever I try to use it locally on my Windows machine for any open source repository I haven't authored, it just doesn't work.

That is to say, the repo authors use features like "sudo" in their jobs, which fails in Act (weirdly even using the larger base images - after those cloned for >1h), or they otherwise rely on the fact that the Github runners run natively on Linux.

It's a real shame, too.
Would be nice to have more communities dedicated to bloat-free, user-respecting UX... that are not complete pro-hitler neonazis like the suckless clique. I'm all ears for links and suggestions!
My (negative) experience dealing with Microsoft in the old Windows Phone times
Clearly this is not a cryptographic hash, and hence it's known hashes are not uniformly distributed.

Apple explained in their technical summary [0] that they'll only consider this an offence if a certain number of hashes match. They estimated the likelihood of false positives there (they don't explain which dataset was used, but it was non-CSAM naturally) is 1 out of a trillion [1]

In the very unlikely event where that 1 in a trillion occurrence happens, they have manual operators to check each of these photos. They also have a private model (unavailable to the public) to double-check these perceptual hashes which also used before alerting authorities.

[0] https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
[1] https://www.zdnet.com/article/apple-to-tune-csam-system-to-k...
Yes, absolutely. It's technically possible to find SHA256 collisions accidentally, but it's so unlikely, that if you found one, it would merit serious investigation. People would not believe your statement that you found them accidentally, and "oh, I guess mlajtos really just found the colliding pair by chance" wouldn't be declared until after a very thorough investigation. In the meantime, major stakeholders (e.g. Bitcoin) would probably move away to another hash function, just in case.

Dwyer calculated 1431168 NeuralHashes and found two collisions. Humanity collectively calculates over 120000000000000000000 SHA-256 hashes every second. Still, we're reasonably sure that this immense brute-force search will not lead to any collisions in any reasonable amount of time.
GrownMD CBD Gummies Pain Relief Product
GrownMD CBD Gummies back discomfort, pay awareness of your posture; this is even true when you are sitting reduce. Back injuries are not only a result from exhausting activities. Poor GrownMD CBD Gummies for extended periods of time can end in cumulative harm to the muscles in your back.

https://groups.google.com/g/grownmdcbdgummiesreviews/c/Idf0ZhSzcak

https://grownmdcbdgummiesingredients.tumblr.com/

https://groups.google.com/g/grownmd-cbd-gummies-ingredients/c/3M5Sj_h4X80

https://www.homify.in/projects/1018830/grownmd-cbd-gummies-get-the-shocking-results-with-grownmd-cbd-gummies

https://grownmdcbdgummiesprice.company.site/

https://influence.co/grownmdcbdgummiesbuy

https://www.inkitt.com/grownmdcbdgummiesprice

https://kit.co/grownmdcbdgummiebuy

https://kit.co/amirwski/grownmd-cbd-gummies-ingreidients

https://www.stageit.com/grownmdcbdgummie

https://twitter.com/grownmdcbdgumm

https://www.instagram.com/grownmdcbdgummiesprice/

https://www.pinterest.com/pin/958070520699457410/

https://www.linkedin.com/in/grownmdcbd-gummies-625a5621a/

https://www.crunchbase.com/organization/grownmd-cbd-gummies-ingredients

https://www.surveymonkey.com/r/GNGR3WL

https://promosimple.com/ps/11f91/grownmd-cbd-gummies

https://www.spreaker.com/show/grownmd-cbd-gummies-ingredients

https://dribbble.com/grownmdcbdgummiesreview

https://gocrowdera.com/US/self/grownmdcbdgummiesingredients/

https://groups.google.com/g/ignite-cbd-oil-buy/c/9-cwHKknqEM

https://sites.google.com/view/grownmdcbdgummiespills/

https://twitter.com/grownmdcbdgum

https://kit.co/grownmdcbdgum/grownmd-cbd-gummies-ingredients

https://grownmdcbdgummiespill.tumblr.com/

https://www.homify.in/projects/1018810/grownmd-cbd-gummies-reviews-100-natural-safe-and-effective-does-it-really-work

https://www.crunchbase.com/event/grownmd-cbd-gummies-95d2

https://promosimple.com/ps/11f8d/grownmdcbdgummies

https://groups.google.com/g/grownmdcbdgummie/c/E-2RdCZaEbA

https://caramellaapp.com/grownmdcbdgum/U1DtPLFst/grownmd-cbd-gummies

https://www.bulbapp.com/u/grownmd-cbd-gummies-natural-safe-and-effective
> My dough was very, very wet;

This is the secret, combined with stretching the gluten without tearing the dough, and giving the dough enough time to slowly rise (e.g in a fridge overnight).

(Basically make Pan Cristal dough for your pizza )
Also a neat way to scrape some sites, big love for readability.