skysight-inc/HackerNews huggingface dataset:
Seriously, I haven't worked at a company with a QA team in almost 10 years. Do these actually exist anymore? It would certainly be nice to have.
I don't really understand the argument that was thrown out by many people: "Attackers will frame people by planting hash collisions on their phones!"

So...

a) a bad actor is going to target someone, and have the resources to generate enough collisions that(b) look like CP, but aren't CP? but are close enough (c) to pass human review and cause an investigation so (d) they need the hash collisions to look like CP, but not be real CP? or ????

If a bad actor wants to frame someone, it's easy to do this today - hack their system or home network, open it to the internet, place the photos, call the FBI and report an anonymous tip, with the URL where it is hosted and open to the internet. Don't need hash collisions.

Hacking someone's iPhone (How do you get the photos on there without forensic logs that they were added?) or iCloud so that you can place hash collisions that look like crap and fail to pass the review doesn't make sense and leaves too much of a trail. Oh? And someone won't notice thousands of photos just added to their phone?

A bigger threat would be deepfake CP. When that becomes a reality, it will be a mess, because an attacker could theoretically generate an unlimited amount of it, and it will be extremely difficult to tell if it is authentic. Those hashes wouldn't be in the CSAM database, but if the attacker put them out on a server to be taken down, they would get added eventually and then show up in a scan elsewhere.

But I'd be pretty horrified (and definitely call my attorney, Apple, and local FBI field office) if thousands of CSAM images just showed up in my iPhone photo stream.

Edit: Downvotes are fine, and I completely understand other arguments against this, but this one has just not made sense to me...
I had the misfortune of working with a vendor that did work in sprints. I couldn't see it as anything other than an awful way to work that caused things to take longer than they needed to because priorities couldn't be shifted on the fly and anything other than break fixes couldn't be released mid-sprint.

That fixed release cycle might make certain things easier, but it also causes a forced lag on all changes and encourages shipping code that isn't actually complete so you don't have to tell people to wait another 2 weeks for the change.
See, I don't really agree here.

Containers solve a different problem than vms. The biggest issues (at least for me) are

1. The second a dev starts using that VM, it's no longer reproducible. The goal of docker is that a developer can create reproducible images as a part of normal development.

2. I won't be running that QEMU vm in production, but I might very well be running the exact same container image in both development and production.
it's entirely possible that my experience just doesn't mean anything in a big org, i should add: the different groups at microsoft or whatever seem to basically be different companies entirely, so at that scale i have no idea what i'd think about this.
Wouldn't people just collect UBI AND steal? The article explicitly mentions that most of the people doing this are also receiving state and feral unemployment benefits
Slightly adjacent, fighting credit card disputes feels the same way. A company can prove without a doubt that it's a legitimate charge, only to have the case go to pre-arbitration; which in many cases is too costly to fight without certainty of winning.
Thank you for saying this. Yes, it doesn't cut it for the average user.

Have you thought about donating to open source projects to support them along?

Linux is the only viable option. It must improve.
I’m a contractor working for a consultancy who is working for a tobacco company, I was told it would be a retail client and I feel bad, not bad enough to quit immediately as i do genuinely need the money right now but I’ll leave when I can.

(I tried passive aggressively quitting by insisting they put my day rate up expecting them to say no but they did)
Benefits of Dependencies in Software Projects as a Function of Effort (2017)
fair play, which only solidifies the point further
If it meant not having to worry about whose toes I'm stepping on while I communicate, I'd totally put money into that pile.

It seems similar to the retroactive public goods DAO that the Ethereum people are working on
Animal Attacks and Human Survival
CEOs can change the class of their own shares, this happened even with Google. I wouldn't think of this as any guarantee.
What version of pop os? My PC wouldn't even work with Ubuntu 20 because the kernel drivers were not there yet until 21.04.
Isn't there any incentive for your claim on your theft insurance?
I get the sentiment, but I think it's a fundamental error to equate "verbose" with "clear"/"simple"/"readable"/etc. and "compact" with "clever"/"fast"/"difficult"/etc.

I see this so often that I wrote a blog post about it http://chriswarbo.net/blog/2020-02-08-clever_code.html

tl;dr trying to make things smaller isn't "clever", it's code golf; often, "clever" solutions just-so-happen to end up small. Likewise, spreading logic over many lines can lose abstraction; we can end up lost in a tangle of bools, ints, etc. without seeing the bigger picture.
Yeah, if they implement it in the future, the whole cycle of news coverage repeats.

I think/hope they'll just move to the simple compromise of scanning stuff on iCloud like everybody else, which is far less of an intrusion.
A better title might be:

> Staggering US wealth inequality heaps long-term harm on to low-income children, minorities most affected

It would say everything there is to say without throwing non-minority low-income children under the bus. IMO, children are a bit too young and malleable for racial-identity profiling. They have insane amounts of potential for change, and putting them in racial boxes seems in poor taste.
> But it will not be enough if we close our eyes on the work yet to be done.

I very much agree with your sentiment, but I simply don't have any issues with BT headphones on Linux desktops specifically I could work on today.

Bluetooth is a very a complex set of standards - I work as a system architect for a well-known celestial car brand, and implementing Bluetooth and BLE is the bane of our existence; truly disastrous technology - and I'm sure things to improve are aplenty, though. In terms of desktop biz logic, the roll-out and maturation of the PipeWire stack is one ongoing effort to watch for.
Make sense. If you want to grow and your company doesn't give you any opportunities it's best to look elsewhere, so not surprised by this.
Purely out of curiosity, have you done any testing to see if the better fonts lead to better results?
This is why teams should be cross-functional and product-organized, divided, if further is necessary, by product component not function, instead of function-organized.

Function-organized teams encourage knowledge siloes, and its-some-othrler-teams-problem-ism.
I think hiring externally is often over valued in many organizations today.

There is a number of reasons for this, but one is that if you hire someone external they are more under your control than an internal hire who already has ideas of how things should work and relationships and therefore has their own amount of political clout. A new hire has no reputation to lean on so must be a bit more cautious at first.

Another reason is that there is a “grass is greener” mentality. You know what you like and don’t like about an internal hire. You don’t know what you like or dislike about the external hire yet, not really. Additionally, someone from outside may have the silver bullet to solve X,Y, or, Z problem that no one else can seem to solve. You know your internal candidates don’t have the quick easy solution you want, but maybe this new person will!*

* hint: They don’t.
You should always negotiate - agree there. But you should negotiate cash specifically because the value of it goes down over time. More now is good because you need to pay rent and buy food. Additionally cash comp becomes the basis of: 401k match, bonus, some other benefits (life insurance some times) and more importanty future raises.
Sure Arm didn’t test alternative approaches before launching a brand new 64 bit architecture. Sounds entirely reasonable. (Actually I have a video somewhere of Richard Grisenthwaite discussing this precise decision).

And Aarch32 compatibility made it impossible to design a variable width decoder for Arm64. Of course.

You’re making performance claims on the basis of a back of an envelope analysis with no actual evidence to back it up. As I said RISC-V is great but claims like this need to be backed up with actual evidence.
Translation: You did an anecdotal survey of a handful of morgues in your area, and used that as confirmation of your pre-existing biases. What you say you did proves nothing about the scope of the pandemic beyond that the few morgues you specifically called hadn't buried more people.

Also, no one was digging mass graves in Central Park. But they were utilizing existing mass graves at a much accelerated rate on Hart Island, which has been used as a public cemetery for over 150 years, burying unclaimed people and those whose loved ones can’t afford private burials.

From an excerpt last summer:

> There are usually about 25 burials on the island each week ... that number has climbed to nearly 25 each day. ... Bodies are ordinarily held at the city’s morgues anywhere from 30 to 60 days ... But to make room for the influx of deceased individuals during the pandemic, the city’s medical examiner’s office announced a new policy of holding unclaimed bodies for only up to 15 days before they are transferred to the island.

I know it probably doesn't matter if for the specific poster this is in response to, but for anyone else reading this, more reading:
https://www.nationalgeographic.com/science/article/will-we-e...
https://www.vestd.com/blog/how-equity-dilution-affects-your-...
same with me. Tried mac once 7 years ago, didnt work out so I sold my macbook pro. 4 years later, my new workplace gave me mac and topd me windows laptop is moatly only for QA. Then I realized its actually a good thing and I learnt a lot by just using mac and get myself familiar with linux as well.
Use a distro that adopted Pipewire for good BT headset support.

In my experience, if a Chromebook can fit a user's use case, than so can desktop Linux.
They're not using an AI for that purpose. They're just sending a hash of the image and sending it along with iCloud uploads. The hashes are of images that have been identified by humans as containing child pornography.
I for one can't wait for explorer.exe to be entirely replaced by Electron
The restrictions were uniformly unenforced throughout the USA. Enough people ignored them without consequence, so the pandemic effects were similar to states without restrictions. I live in CA, notorious for their "strict" stay-at-home orders and mask mandates. If I wanted to, I could have easily gotten in my car, violated those orders by driving around, found a restaurant violating those orders, sat down and eaten there, totally unmasked. If this was the situation in one of the "more locked down" states, then it's no surprise that the virus spread similarly to states where there were few restrictions.
Except Marx was wrong for most of the time after he predicted this as there was a steady rise in wages during most of the 20th century.

Further Marx predicted that the first nations to fall to communism would be the most capitalist ones, but in fact the opposite occurred and the least capitalist countries fell to communism, meanwhile the capitalist countries have not.

That's just one example there are plenty of other others that can be provided, from how is theory of dialectical materialism was wrong on all counts when it came to any scientific power, to history.

In fact the most impressive part of Marx is how truly wrong he managed to be without actually being original as the majority of his work is derivative from Hiegel.
Kind of amazing - i didn't realize anyone was using this HTTP code just yet.
Prices are rising in California too, so an exodus can’t be the explanation, probably inflation and investors driving prices up?
They could add an opt-in flag for this per process. So developers could just turn on some "moderngui" flag in their win32 apps and with some little adjustements most of the apps could be modernized.
Well, the one I'd be selling doesn't have a warranty either. And if someone is okay with that, they can just import it themselves and cut out my profit share. If I were to order enough to get a bulk price and potentially undercut ordering it oneself, there's likely an expectation of a warranty of some kind being available.
The thread following this is a great example of Linux’s fatal issue. 5 different people have 5 different user stories.

Public uptake requires ease of use and consistency.
If your distribution offers synaptic it helps immensely as a gateway drug to apt/rpm.

https://www.nongnu.org/synaptic/

But to install it you still need the cli. After that you get a GUI interface to search and install packages
Blame manufacturers.
When I had towers or pizza boxes I pretty much never touched them once it became normal to leave them on all the time, which was as soon as they were always downloading from the internet at 3.3 kbps.

If the case was locked in a cage I wouldn’t notice until I needed to put access the tower to plug in a usb, which might not be for weeks these days.
Thanks for stating this, I think it's exactly what a DevOps oriented org should ultimately achieve. Or at least try to.
It's a Linux + bluetooth problem, not a computer vendor problem. Bluetooth microphones are basically impossible to get working on Linux. That's what I was told by vendor support as well, just get a wired mic as bluetooth headphones+mic are unreliable.

I was attempting to use Sony XM3s.

Glad to hear you have some headphones that work, what model?
From the original link:

> In practice this would simply mean hacking into a major firewall manufacturer’s poorly-secured source code repository, changing 32 bytes of data, and then waiting for the windfall when a huge number of VPN connections suddenly became easy to decrypt. And that’s what happened. 10/

I would definitely not describe replacing 32 bytes as "replacing an entire door."
Fair Warning: It's not uncommon for a company to get bought for the price it costs to pay back preferred stock (investors) and essentially 0 out the common stock and/or offer new equity options (and new vesting period) at the new company as "payment" for your common stock holdings. It's happened to me twice. Common stock is last money out. So even if you're successful in that you grow the company until it's gets purchased - even that doesn't mean you're paying off any mortgages.

That said, it depends on seniority and what number employee you are. A very early employee (first 5) can get 1.5-3% that starts to drop pretty quickly where even if you're a senior level employee but employee number 50 after a series A or something you're likely at less than 1% no matter how valuable you are.

A good move is to go on angel.co job boards and see what other similar sized companies are offering for equity for similar positions and make a move from there. And to talk in percentage terms of common stock (because 100/10,000 is better than 1,000/1,000,000).
Have your wheels fallen off yet :)
I have a list of FOSS projects I rotate and donate to regularly, including Ubuntu and the FSF. So many projects need help, VLC, libreoffice, firefox, python, ublock origin...

It's not just about the money, it's also a way for devs to feel that their work matters.
Wait a sec - this wasn’t a ‘small press release’, it was a huge one, made several months in advance of the feature launching, accompanied by a bunch of interviews with execs.

If you look at the tone of all of it, they also honestly felt this was the most privacy preserving way to do CSAM scanning - likely so they can enable E2EE on everything iCloud.

What they got very very wrong was the public reaction to it.
Part of what helps me with having saved more than I will reasonably read is being okay with missing out. I generally accept that I will die, which is liberating. I’m not yet to the point of not saving the article in the first place, as I hold out hope/plans for setting up a way to easily search all I’ve saved. I use Anki for phone numbers and addresses and language and other things, and I let that slide sometimes, too, and focus on positive reinforcement whenever I practice whatever I find valuable (per BJ Fogg’s Tiny Habits).
Seems to me the focus on "Files" is more of an excuse to discuss the broader data architecture of mobile devices, in particular how they store and make accessible private data to ML type applications.

Not sure they are (or ever will be) the core issue preventing this future. Linux desktops are file based, in principle one could envisage intelligent open souce PIM applications that integrate all the personal data securely and privately, but nothing of the sort exists...
Other professions have professional organizations that have strict rules about maintaining the public trust in the profession. Challenging each other’s competence publicly is really discouraged. By contrast, many trades people can criticize each other and do so endlessly… even though those trades have a higher bar for being allowed to practice than software does. It’s harder to make a spaghetti mess that somebody else has to build on because of standards and physical constraints too
There's a link to the original press release.

https://news.uchicago.edu/story/rna-breakthrough-crops-grow-...

And the actual article.

https://www.nature.com/articles/s41587-021-00982-9
> Point 3, at least in my shop, you're just wrong. I don't know anything about what you're writing. I probably don't even know what problem it is supposed to solve. You are mistaking the highway road crew for mechanics.

I don’t follow this. Developers are responsible for learning what kind of environment their application runs in, but ops is not responsible for having some clue about what they’re running? That cuts both ways, and it’ll help everyone out.

> Developers are responsible for knowing if their stuff is going to fall outside of those, and come to us to work something out.

I find this attitude fairly common amongst ops people. They just build something that is totally inappropriate for actual usage, and then dump the responsibility for figuring that out on the developers.
Doesn’t take many rounds to jpeg the living pixel out of anything, and still spread it as fake news, with a baity text.
off topic but post-pandemic my Bronco still doesn't have a build date, this chip shortage is out of hand
> - Linux doesn't support bluetooth headphones well

FTFY: "Everyone except macOS doesn't support bluetooth well".

The Windows situation is a horrid mess - it was with w7 and at least three different commercial stacks, and my s/o can't use her brand new Sony headphones on her three year old w10 Lenovo laptop as it ends up in stuttering audio. Linux isn't better. Audio stacks are a mess (even independent of Bluetooth), BTLE is an even worse mess, and I have no idea why Android is relentlessly buggy. And the Nintendo Switch doesn't support anything except compatible controllers, you need an external, third party adapter that blocks the docking port for decent wireless capability.

The only ones who have managed something decent with Bluetooth are Apple, where everything you ordinarily need (headphones, mice, keyboards) just works (tm).

The core problem is that Bluetooth itself is an old, ugly, grown standard with lots of different stuff bolted on, not much in terms of interoperability testing and closed binary blobs everywhere.
> "And learned-from-history actors think of all the previous "think of the kids" campaigns, and their subsequent scope creep:"

You say, and then go on to give as examples /things which haven't happened, but you fantasised might happen/. That isn't learning from history.
That is not the issue. AV scans files, you might be able to actually configure what kind, but the matching is done based on whatever the AV company decides is worth matching.

No one in their right mind thinks this scanning has not been abused by others.

But now that (you know) images are being scanned the world's ablaze.

It is still silly, proof me wrong.
You do not mention salary. Is the startup also paying more than your current position? I would put a lot of weight on the real money you are receiving now. Especially if you like your current team. I've had stock options pay out OK for a relatively small exit but it amounted to a really good bonus, not retirement and pay off the mortgage money.
As long as there are platforms with enough market cap, there will be a need for cross-platform. And the easiest path wins. ElectronJS is the easiest path. My company relies on it.
Right. While I appreciate the author's skepticism and diction (there is a lot of misleading terminology thrown around by the ML community), his points don't land.

In particular, he argues that there's no learning going on, but then says that there is "absorption" of statistical patterns going on. That's just nitpicking over semantics—to people in the field, the two phrases mean the same thing. The only difference is whether you anthropomorphize a piece of software.

The second place the author stumbles is that he makes the (quite grave) mistake you pointed out. The title insinuates that the network contains the "source dataset" itself. He has shown nothing of the sort by including the training logs in his "decompilation". That's like suggesting you have a Swift decompiler that can recover the exact source code from an optimized binary, but you actually require access to the pre-optimized LLVM IR.
Any info on the CY7C4096D chip?

Edit: it appears to be a Cypress Electronics FIFO chip.
very nice gesture :-) greetings from kiel <3
That’s very possible. UK was 94% for adults back in July and they’re rising again. Children weren’t include but I figure they’re over 90% with antibodies now.
Thanks for saying this, it gets to the root of the problem being Bluetooth.

What should we support instead? Is there another wireless standard?

I've noticed there are models that use some kind of non-Bluetooth USB dongle for example.
As I mentioned in the other thread [1] the Sept 1 charge (shutting down pay discussion channel in slack) is right on a current battleground for labour rights in the US. With new pro-labour NLRB chair and general council its highly likely they are going to push hard on this charge to try and reinforce rights to organize in company spaces.

[1] https://news.ycombinator.com/item?id=28372867