skysight-inc/HackerNews huggingface dataset:
Then hide it behind an option deep in the settings, and label it "only for advanced users, and if you lose it, all your data will forever be gone".

Apple even had this exact setting in the past! And they still have a similar thing for Mac disk encryption (the default is iCloud escrow, but a local-only recovery passphrase is also an option).
Yes, you just stand out to the VPN provider instead of your ISP. The VPN traffic itself makes you stand out to your ISP but in a different way.
me too ...

I felt the same for WhatsApp backups on Google Drive, which are addressed in the article.
I thought FB was advertising an encryption while letting some obvious backdoor for the NSA.

But the backups are encrypted, according to co-workers and to that post. Maybe I should enable backups now.
Ok, I think we'll change the URL to that from https://www.apple.com/newsroom/2022/12/apple-advances-user-s.... Thanks!

Is there a similar URL for the security key stuff? If so, we can factor that out of this thread, which is almost all about E2EE backups.
While not Tor, I browse I2P websites from time to time. tracker2.postman.i2p is a great torrent tracker if I want to easily get access to leaked material I read in the news about. And planet.i2p to see newly "registered" websites. Content on those websites vary, but I've stumbled upon a couple of blogs, ranging from the mundane, to conspiracy theory blogs, which are also fun to read. It really does give you that 90s internet feeling.
Germany Arrests 25 Suspected of Planning to Overthrow Government
"This is a brand problem and has nothing to do with technology. "

This I would question. Clearly btc was modeled on the production of a physical commodity. It was not designed to operate like money, but like a goldbug's fantasy of money. The result was not an accident, it was inevitable.
The only example I had previously ever heard of was "an hour" because the H isn't pronounced. As far as I've ever heard it spoken the H in both hypothesis and historical are well pronounced so "an hypothesis" sounds jarringly incorrect to me.
[choosealicense](https://choosealicense.com/licenses/apache-2.0/)
Of course, tire wear is greater on electric vehicles, owing to their greater mass. Cars in general are bad for air quality, EV are not really an improvement compared to mass transit.
Right... and for every range of height women are 10+cm shorter than men. In the US the difference is 12-14cm regardless of percentile [0].

While things became more and more adjustable recently, this has not always been the case. Even on bicycles I know plenty of women who had to look for non-standard sized parts because they can't comfortably reach the brake lever while holding the grips safely.

Just ask a few women who know about older cars. They can spot these issues because they had them themselves, just like you could spot why men want aggressive looking cars ;).

[0] https://dqydj.com/height-percentile-calculator-for-men-and-w...
Berger's been taking some heat on Twitter where he announced this [1]. Apparently he considers a public-interest lecture and a publicity tour equivalent to a preprint on something like SSRN. Can't say I agree, but it seems to have been effective in getting people to talk about it.

[1] https://twitter.com/LeeRberger/status/1599965297993129984?s=...
This has been the case for other iCloud features and they've historically done a good job communicating this to the user at the time they upgrade the service and when they attempt to access it from an old device. I would expect that to follow the same process here either refusing to enable it until your devices are updated or having the old device kicked out until it's updated.
> [Bluebell Capital Partners,] A UK activist investor with a history of taking on big companies has called on BlackRock founder Larry Fink to resign as chief executive over the “apparent hypocrisy” of the asset manager’s use of environmental, social and governance investment factors.

> Giuseppe Bivona and Marco Taricco, Bluebell’s co-chief investment officers, contended that BlackRock had changed positions several times on investing in thermal coal production while failing to live up to Fink’s widely publicised sustainability commitments.

> Shareholder data show Bluebell has about a 0.01 per cent stake in BlackRock, which has a market capitalisation of $107bn.

This seems like a not-issue that is being blown up by the media due to big names (BlackRock) and a controversial topic (ESG). Do firms generally listen to activist shareholders with 0.01% stakes?

My personal take is that ESG should either be aggressive, or removed. If a firm wants to avoid investing in Eg. Fossil Fuels due to the climate change implications, then great. Do it - and make it a uniform consideration. If they want to only focus on the “what makes money today” aspect, then do it, and ignore the non-monetary considerations all together. Wavering on tiny aspects of climate impact seems like it could eat at returns, but not meaningfully impact environmental protection. I would even be open to government regulations that change the nature of how companies consider “shareholder value” to broaden it to consider “environmental impact” - similar to a B-Corp today - but again, only if its uniformly applied and a true consideration and not a publicity stunt or afterthought.
Coinbase CEO expects revenue to plunge over 50% on battered crypto prices
Rounding error

https://news.ycombinator.com/item?id=33893153
Are there any exclusive features that Bun has, that are particularly well-suited for writing databases or other low-latency, high-throughput I/O applications?

Seems like being written in Zig might give it a good foot in the door here.
Have you tried pocketbase?
This reminds me of Eddie Murphy's reaction to some "dramatic moment with a look he gave" in Showgirls that everyone reacted to as great acting, and he was like -- "Did you not see me in the Nutty Professor where I was FIVE PEOPLE AT THE SAME TIME? That was harder."
Yes, people are using ipv6 for real deployments. See any large scale mobile network deployment. Funny thing is most people never realize because it all just works…
Windows supports SLAAC+RDNSS, as long as you're running Windows 10 or newer.
I really implore you to seek out the articles where people promoting modernism used nearly identical language to you when describing Victorian buildings.

It’s hard to see the air when it’s the environment we’ve lived in our entire lives.

https://www.abc.net.au/cm/lb/4285602/data/manifesto-of-futur...
> This does not prevent any of these threats, it does not even necessarily make them more difficult whatsoever. "Insiders" will still have access to the source code doing the encryption, and it is just not possible to protect against government overreach that can literally force you to do anything and keep quiet about it, even in otherwise relative sane countries. Search for NSA letter.

There you go again :)

You literally just said something that used to take a subpoena from any law enforcement now takes an NSA letter. And that an insider attack that used to mean retrieving a backup file now means inserting back doors in source code that go undetected.

And somehow those aren't even more difficult?

> Because I have literally used the same compiler I use for other platforms

https://www.awelm.com/posts/evil-compiler/

It is literally provable that Apple will never be able to satisfy you. For any mitigation they introduce, you can (rightfully) create a hole in that mitigation.

What you're missing is that the same flaws and attacks appear in all of your "it would be better if" solutions. Once you're invoking NSA letters and malicious source code, all bets are off... including for open source.

> It just can't academically work.

Yes, we agree on that. But it also doesn't work if you're protecting stuff from Alice by trusting Bob, who might be secretly an agent of Alice.
Regarding the identity, XOR is a kind of addition, without carry.

101
^ 011
-----
= 110

We added 1 + 1, to get 10. We put down a 0, but didn't carry the 1.

The carry is separately calculated using AND:

101
& 011
-----
001 <- carry out from LSB.

Of course the carry is carried so we have to shift it left: 010. We can just add the carry afterward (using regular addition which will propagate additional carries not calculated by the AND, like the one from the second digit.

Thus the identity:

(a+b) = (a^b) + 2*(a&b).
I suppose it might be more normal for C and C++ programmers to get in the habit of meticulous thinking through the code as we write it, since that's more a necessity than in most other languages. (If we're not careful, we risk having to pay with painful debugging sessions, and expensive correctness/stability/security problems.)

But meticulous coding is still useful for nontrivial code in any language that we want to work well. And it's not that hard; it's just something we practice and get better at over time.
Have you tried using DuckDuckGo's Cloud Save configuration feature when using start.duckduckgo.com? Click on the three-arrowed hamburger menu and you'll find it. Set up DuckDuckGo's options as you like, then apply a pass phrase to store them. I know it isn't a direct solution to thwarting that popup the first time you see it, but it prevents it in the future. Cloud Save is handy to know in order to propagate your settings across browsers regardless of platforms.

https://help.duckduckgo.com/settings/cloud-save/
So you actually think marcan gave Lina his streaming API key to pull off this April fools prank? Do you also think they conspired to use the same DE, editor, and tooling from the start to fool us all?
So they turned over the conversations but not emails. How does that not match? Meta data is widely used political a euphemism for this.
So you put banning the clothes you can wear because you want to be modest with female genital mutilation?
Someone else here made a suggestion to update colors, and did some tweaking. Can you see if it got better? Also, do you have examples of websites that did a good job with colorblindness? I am not sure how to test it , given that I can see colors alright.
Do you not use FaceID or TouchID or unlock with the Watch?

I switched my pin to alphanumeric because I’m not putting it in every time I pickup my phone. I can live with the inconvenience of putting the passcode in every couple of days or so.
Per sibling comments, you run strings on binaries, find out informally from Apple engineers, or dig through settings in the System Preferences and then use `defaults` to look for changes in output.
This seems like a poorly-researched conspiracy theory. Nobody is forced to use double-NAT, and if there was some secret policy which somehow has avoided leaking for a couple of decades, you'd think they'd have blocked IPv6 deployments, too.
If you don't define what finish means how will you ever get there or know when to stop?
The pH of human stomach acid is on par with that of many scavengers, such as vultures.

Anthropological evidence indicates that early hominids, as they began their transition to a more carnivorous diet, were feeding on the left overs from other carnivorous predators - which would explain the need for such an extremely acidic stomach
We changed the URL from https://www.apple.com/newsroom/2022/12/apple-advances-user-s... to the link that several users pointed out has the meatier details.

A small number of comments here are not about E2EE backups but rather the security key announcement. If there's a more detailed URL for that part of the story, we can factor it into its own thread.
Have you heard of the GDPR and seen how it’s made the web browsing experience worse?
I suggest you pick up a project and show us how easily this can be done.
Yes I have experience with rust
"E2EE" is probably more like it. I have no doubts there will be a data, picture, movie or some-such leak eventually that proves that the encryption keys were in the hands of Apple all along.
There are two schools of thought: those that think that beauty is in the eye of the beholder, and those that think, like Steve Jobs famously quipped, that some people just have no good taste.

There certainly aren't just two schools of thought. A third school would that a variety of aesthetics exist each serving a different purpose and each requiring some small or large amount of study to appreciate and each providing a somewhat different level of reward to those that study it - none of these are better or worse but learning none at is bad (like cuisines - even fast food can have its charms but fast food all the time is sad and unhealthy, etc). Some paintings are both immediately striking and can offer more as you study them but other might have just one or the other quality.

As far as the article goes, urban architecture has gone from traditional to high modernist to the present fair. The thing about, say, a building by one of the "great" modernist architects is it (usually) provides a fits organically with the environment quality while also providing more rewards and still offer a given place a "sense of place". Oppositely, a cheap contemporary building offers at best, only blending with the environment, it's only camouflage and some completely eliminates a sense of place from around the building. Ironically, the main way one can get a sense of place today through the truly bad examples of contemporary architecture, thing that fail as camouflage and stand out like a sort thumb.
Seems like a semantic quibble about the meaning of “technically feasible.” If you understand it as making claims about the system as it exists, it is true. If you understand it as making a claim about what Apple could theoretically do in all circumstances, then you have an absurd definition because everything is technically feasible.

I think the FAQ and letter both make clear that Apple could comply with the FBI request and their objection was over whether they should be forced to.
The Continuity of Splines
There is no requirement for HN submissions to be journalistic, so I don't know why you were expecting that.

What to Submit

On-Topic: Anything that good hackers would find interesting. That includes more than hacking and startups. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual curiosity.
It's all the rage in spacetech these days... Especially among American and Chinese startups.
How unethical does an action have to be before this rationalization no longer stands?
Europe has unmatched heritage, but I would argue the modern buildings in Italy suffer from the same problems described in the article. There is an Italo-French author called Phillipe Daverio, art critique but in reality polymath, who has discussed these problems in Italy at length.
> that a malicious actor who can access data storage can also necessarily access a silent mechanism to affect the security internals of a given iPhone?

A malicious actor who can access _already encrypted_ data storage where you cannot even associate files with a given account ID _without_ having already put a backdoor in the corresponding code may be able to actually put such backdoor in the software that is distributed to iPhones? Yes, I believe that.
Ok, we've changed the URL to that from https://www.apple.com/newsroom/2022/12/apple-advances-user-s.... Thanks!

(more at https://news.ycombinator.com/item?id=33899699)
I would use Jami, it is not self hosted, but it is p2p, and does not require phone number or email
Not relevant if you are interested in performance. This go only version is much slower than the cgo overhead. (At least it was a year ago, do your own benchmarks)
XTDB: https://xtdb.com/
What colour was the smog?
Yea… that’s what they’re changing. That is the point. They’re not going to be in control over the keys - which is a good thing to you, it seems.
The UK specifically has a disproportionate blindspot about transgender issues across the political spectrum.

In US, Canada, and much of the rest of the world, it's a mostly partisan issue.

> What's the association between LGBT and "Commie"? There is one.

Communists don't call themselves Commies. I'm not sure what usernames have to do with one's arguments, mr. "incomingpain"?
It was like that at Caltech. Caltech didn't admit people just for good grades and a high SAT score. That wasn't good enough. They were looking for people who were born scientists and engineers, people who would fearlessly look through the Gates of Hell if it would further their field.

For example, students would often do a double major, with the other one AY (Astronomy). Why sign up for all that extra work? Because AY was fun fun fun, but one couldn't get a job in it. Being around people like that is tremendously fun, I was never bored. We had Carl Sagan over for dinner once, and the entire conversation was about what would life based on silicon rather than oxygen be like. There was no class in this, no homework assignment, it was simply fun.

(Dr. Sagan went on to write about "silicon giraffes".)

Yep, we were all nerds.
Are we really at the level of hate for Facebook/Meta where people are justifying just making stuff up about them?

"The accusations are untrue, but I think they would have been true, so that's basically the same thing."

Complain about these ads being banned when it actually happens, not when Signal lies about it because you think that's what Facebook would have done.
I'm baffled how people can be so okay with letting their whole device being scanned always. I don't want it to be scanned no matter what the intention is, it's not the phone or Apple's business. Device ownership and to decide for my own what the device is doing with MY data is my liberty. If you want your device to scan your data always is maybe cool with you. But not cool with me.

I've read all the technical documentation too. However who says that the mechanism is implemented like intended forever? Maybe Apple or (local) law will change and voila: Your device scan report is reported to Apple and authorities because it is anyway already in place on your device.
Remarkably, it once was.

Cheap duplication of written data, conveying knowledge from one brain to another without requiring tedious manual transcription or oral explanation to each learner, started with the printing press in the 1400s and broke the monopoly of the literate elite on education, bringing book learning and literacy out of scarcity to the masses.

Even into the mid-20th century, academic publishing was primarily on paper and relied on expensive offset printing that only makes economic sense when printing runs of many thousands of copies, requiring a publishing industry to produce these documents.

Now, though, that "digital publishing" is available, this problem of scarcity no longer exists. The publishing industry requires scarcity to make their contribution valuable, and they can only create that scarcity artificially.
Don't be sad. I regularly read the bottom comments because I like their charm and I'm sure others do too.

That said more default sorting options would be nice (with collapsed threads by default)
2022 Time Magazine person of the year: Ukraine president V. Zelensky
I’m not sure what you mean by “holding themselves accountable for the data they hold”, but you began by implying data residency was compromising security at the behest of a government, but it does not itself do anything of that sort. Your technical claim is outright false.
I love ncdu and install it on all of my machines. But at the risk of sounding like a broken record - why isn’t its functionality baked into stock file managers on windows and Linux?

Why can’t either of these systems do what the Mac has been able to do since the 90s, and display the recursive size of a directory in bytes in the file manager, allowing one to sort directories by recursive size?

I am not exaggerating to say this is the single biggest roadblock to my permanent migration to Linux!

(I would love nothing more than to hear I’m wrong and “you fool, Dolphin can do that with flag: foo”!)
Accelerating ZK-SNARKs – MSM and NTT Algorithms on FPGAs with Hardcaml
Here's someone arguing that the armed (and potentially violent) strain of nuttery came in ~1970: https://www.splcenter.org/fighting-hate/intelligence-report/...

and 1930s tax revolt (16A is bogus!) crossed with 1950s bigotry (14A is bogus!) as broader roots here:
https://www.govinfo.gov/content/pkg/USCOURTS-ca4-16-04183/pd...
> "extra variables" are naturally present in every study

That's true, but it doesn't change the fact that if you ask people a second time to respond, that's an extra variable you created, not one that was naturally there already. It's not a good idea to create extra variables in the course of doing the study.

It's true that the people who respond to the survey without any further prompting are not necessarily going to be representative of the entire population. But that doesn't mean you can "fix" that by further prompting. What it actually means is that surveys are a tool with only limited usefulness. That's just an inherent, inconvenient truth about surveys.
Native BE speaker here, I've seen and heard "an historic" (like ahnistoric) from posher BE speakers than me, but never "an hypothesis" (ahnypothesis?) from whichever social class ... possibly I hang around with the wrong crowd?
> You literally just said something that used to take a subpoena from any law enforcement now takes an NSA letter

I didn't say that. You said "overreaching government".

> It is literally provable that Apple will never be able to satisfy you

Nothing _technical_, that is, which has exactly been my point.

> Once you're invoking NSA letters and malicious source code, all bets are off... including for open source.

That's not true at all. There's an entire world of difference where "oh the software is just hidden from my eyes, communicating constantly and opaquely with the mothership, changeable at any moment by the same mothership, and all of it running in the same hardware also made by the same mothership" versus "I have these separate components that are only communicating through these channels in these clearly specified ways". The first only allows useless technobabble fake solutions, the second system actually allows discussion about trust and is usually the very minimum expectation of any cryptosystem.

> But it also doesn't work if you're protecting stuff from Alice by trusting Bob, who might be secretly an agent of Alice.

I don't see that as necessarily true either. But anyway, I can now choose between multiple providers for encryption, which _finally_ goes towards measurably increasing trust. Remember, despite the accusations, I have never claimed it had to be 100% trusting trust perfect, I am just claiming this one proposal is 100% useless. If you didn't trust Apple backups before and you would now, I'd question your judgement.
Particulate pollution can also cause cooling that masks the overall warming trend.

https://e360.yale.edu/features/air-pollutions-upside-a-brake...
There is a lot of debate and disagreement between those that are Transgender and those that are NonBinary.

NB people will absolutely agree that rigorous gender norms are harmful, and Trans people are likely embracing and perpetuating an unnecessary binary. Meanwhile, Trans people will claim that the binary is real to them.

Both are likely valid to some degree. There are multiple axis to this conversation.