skysight-inc/HackerNews huggingface dataset:
Data has always been encrypted by a key, which Apple held in a HSM (hardware security module, a special “black box” for encryption keys in this case). Previously Apple could take those keys, decrypt your data, and hand it to law enforcement. A hacker, too, could sign into your account and access everything if they found a vulnerability.

Now, if you opt-in to this, the key will be deleted from the HSM and stored on your devices only. New keys will be used for newly added data, but the old data will be encrypted with the same key (imagine the computational load of suddenly re-encrypting all those files, not to mention that you’d need to temporarily give Apple the new key or re-do it all locally). You will always need your Apple ID password (or a recovery key/“contact”) to decrypt your data now, and Apple won’t have the key to decrypt your data and give to law enforcement, nor will hackers be able to access it if they find a vulnerability in iCloud.

If you trust Apple not to implement a backdoor, you no longer need to trust them in any other regard to keep this data private.

Exit: upon further reading, it seems the encryption key is stored on your device, and you’ll need one of the recovery methods if you lose all your devices. This is much better as it means a weak iCloud password cannot be used to compromise your key.
iOS doesn't have local-only photos. You either put all photos in iCloud, or none (bar iCloud being full).
This year, Washington, DC, renamed Wilson High School to Jackson-Reed High School.
You gave it just the program as a prompt?
He was also the one doing all the hiring and firing. Holmes was literally a figurehead who are barely in her office, busy keeping the press and investors happy so the money kept coming in.
The language has definitely evolved a lot from then. But so have the major frameworks. While not perfect, building a web app in spring boot is a whole world better than doing the same using Java-6 era frameworks.
The Python Software Foundation did a survey (in partnership with JetBrains) and found that 66% of Python developers use VSCode or PyCharm.

https://lp.jetbrains.com/python-developers-survey-2021/#Deve...

State of JS doesn't seem to include the question any more, but it found in 2019 that about 70% used one of the two (mostly VSCode).

https://2019.stateofjs.com/other-tools/

VSCode may not be a full IDE without extra plugins enabled, but it's a far cry from a plain text editor.
Ask HN: Is anyone else seeing Google Cloud Platform IAM issues?
We're seeing some really, really strange behavior right now, including service accounts losing permissions that have been present for 2+ years.

Anyone else seeing anything similar?

Driving us a little bit nuts, as perms are added back, then are disappearing again.

Maybe someone is playing a terrible prank?
I love Julia, for reasons mainly covered in this post. The functional features are also fantastic.
> On-device scanning is desirable

What are the benefits? It would tell Apple (and hence law enforcement) who had copies of existing, known CSAM. I guess that would help catch such people. But such individuals would also have strong incentive to simply turn of iCloud to completely avoid detection.

What are the risks? Apple employees rummaging through your photos (after 30 NeuraHash matches, a human reviewer would go in and check your photos, and as some analysts pointed out, hash matches can be spurious, that is, completely different photos can have the same hash by coincidence).

Over time, would the program expand beyond CSAM? Consider the intersection of countries in which Apple sells iPhones and countries that criminalise being LGBTQ [1]

[1] https://www.humandignitytrust.org/lgbt-the-law/map-of-crimin...
"P.S. Craig Wright is Satoshi Nakamoto."

Up until that point, you weren't an idiot and just a frustrated developer.
I had the same reaction, I think it might have to do with the many rectangular holes along the top. It gives me a slightly trypophobic reaction.
I've done this multiple times in my career.
>I’d need to think a bit more to come up with a signed version.

Invert the high bits, turning two's complement into biased format (0 = lowest negative number, 0xFF...F = highest positive number). Then do the add+rotate and convert the result back.
You are thinking about it all wrong. Any effort to create deep fakes would be a waste of effort for the con artists.

They already know that (1) they want to avoid any type of verification attempts by the victim and (2) the relationship with each victim has a timer.

The attractive picture is just a lure (like in fishing). It only matters for the initial hook. All effort after the initial contact is directed towards building a story/narrative of the profile and latching onto the victim's emotions.

Deepfakes aren't needed. Until the con saturates the supply of victims, these cons don't need to evolve.
You are right, but by local-only photos I meant "not using iCloud photos" - e.g. "none".

The point is, I think if Apple decided to scan your photos for CSAM even if you weren't using iCloud, that this would be a distinctly different situation to scanning only the ones uploaded to iCloud.
Too many engineers getting caught up in the engineering of it and not the problem solving of it.

I love the concept of Docker, but I hate working with it any time I need to work with it. It's extremely opaque and unnecessarily hard to do basic things.
One of the solutions I came up with back in the day, without googling was this:

int avg(int a, int b) {
if ((a < 0) != (b < 0)) // not the same sign?
return (a + b) / 2;
else
return a + (b - a) / 2;
}
Lol? this is a widely understood perspective.
Scanning in the cloud can be just as problematic.

Google is not just scanning for known examples of kiddie porn, they are scanning for images of naked children, and reporting parents to the police.

for instance, they tried to get a parent arrested for using their Android phone to get medical assistance for their child during lockdown.

>With help from the photos, the doctor diagnosed the issue and prescribed antibiotics, which quickly cleared it up. But the episode left Mark with a much larger problem, one that would cost him more than a decade of contacts, emails and photos, and make him the target of a police investigation.

“I knew that these companies were watching and that privacy is not what we would hope it to be,” Mark said. “But I haven’t done anything wrong.”

The police agreed. Google did not.

https://www.nytimes.com/2022/08/21/technology/google-surveil...
What languages do you normally use? And what editor/IDE? It might help to have points of reference for comparison.
As a houdini user the blender nodes make me quite jealous, things like the coupling of the nodes with real time rendering in eevee and basically instant rendering with cycles is something I could only dream of even after spending some good cash on redshift

Do the blender nodes have got an equivalent of vex in houdini? Or variables? Does blender just use raw-ish Python instead?
> anyone at this point advocating for any other phone/os/service out there besides apple is really going out of their way to swim up river.

Did Apple ever implement the ability to run software without first phoning home and asking for permission? The last time I checked they had not followed through on their promise to do so.

https://www.howtogeek.com/701176/does-apple-track-every-mac-...

https://mjtsai.com/blog/2022/06/16/apple-reneged-on-ocsp-pri...
yeah the old analysis thing about

aggression turned outwards --> anger

aggression turned inwards --> depression

i wish some of these super smart people weren't so afraid of the harmless 'woo' that costs next to nothing, like read some old 70s book on primal scream into a pillow or try a radical keto meat diet or weird mental re-framings from people who are total quacks

The internet is full of 60 plus years of this stuff since the 60s, books and lectures and diy reprogramming you can find for free.

random 'outdated' books where 80 percent is fluff i've stumbled on one page of a random client story that just cut through time and space to reach me at that moment. I can't even remember the book title but I still remember the page layout, reading a paragraph at 2am and started bawling after feeling numb all year.

I've pieced together little bits of insight this way and each feel like growth and knowing some secret unconscious part of myself better. You never know what will crack the ice and get thru to you.

like who cares about evidence when that has gotten you nowhere in matters of the mind?

Hell, you can build a life going from placebo insight to insight if that's what it takes to keep on, why would that even be different than the lives on 'normal' people chasing hollow consumer goods?

it's still a life of trying things out to better know yourself and your world, which is plenty meaningful
We are in the early phases of decoupling. Teenagers are not an appropriate barometer for what is about to come.
If I'm ever a multi- billionaire, I will invest in a stand-by exfiltratiom team that is ready to get me out of whatever I get into and take me to a friendly place. If guys like Musk and Gates don't have this, their priorities are all wrong. I assume Peter Thiel does.
> You don't raise more money by hiring more people.

Actually you do. VCs in Silicon Valley often look for "growth" ie seeing that you're hiring more people. If you raise 10 million yet keep the same 2 or 3 person team, they'll start asking questions and it's harder to raise your next round.
I feel like this is going to be to kotlin's disadvantage going forwards as languages features are slowly added into Java, they will be more 'complete'.
As far as I can tell from Google Searches, Google already offers end-to-end encrypted backups for Android, from 2018.

https://security.googleblog.com/2018/10/google-and-android-h...

Google Workspace also apparently supports client-side encryption/decryption.

https://support.google.com/docs/answer/10519333?hl=en
Nuclear is 2% of world energy, and only an insignificant fraction is reprocessed right now. You're pushing it as a complete fossil fuel replacement, not electrical generation. Then there's the rest of the world that don't have access to enough energy yet.

So you're saying releasing 10PBq of Cs137 per year which is the lower bound on what la hague did in the 90s for reprocessing 1000t of fuel is completely fine and can be scaled up to the level required to generate world primary energy?
Usually though, macros in lispy languages are evaluated not at runtime, but before that, at read time or macro expansion time.

There are perfectly valid use cases for these things, which do not make it harder to understand the code. Properly done, they might even make the code easier to understand. One example is writing a "timing function" (a macro). WHy a macro? Well, because you cannot call (time expr ...) when time is a normal function, because of order of evaluation. You could put the expressions into lambda and reduce readability that way, or you could make time a macro and get rid of the lambda wrapping of the expressions.
> I find it strange that someone in the UK can argue that requiring bicycle helmets is the best way forward, or even one of the ten best things to do, when two neighbouring countries have had massively more success than the UK, and and those two don't require helmets, or even use helmets very much.

I think it's because these arguments generally are bad-faith attempts to distract from doing things that would be effective. Most of these people aren't interested in more or safer cycling.
Science doesn't apply to anything outside the universe (since we cannot observe it), so the question of who/why is a philosophical one. In fact, "why are we here" is one of the functions of religion, although not all attempt to answer it. For instance, the Jewish and Christian answer is we are God's children. But the only way we can know is if whatever is beyond the universe (if anything) communicates with us. Then there is the question of how and what form can such a being communicate with us. Any such communication would, by definition, be super-natural, but once the communication happens (via an experience of some sort or as an artifact) it necessarily becomes part of the natural world, either as part of our neurons that record the experience or as the physical artifact. So we cannot see the super-natural part (which is sort of obvious), and if any such being has communicated with us, we will need some sort of faith to accept it the physical experience/artifact as from the outside, especially if we did not personally receive the communication.
> When I hear people talk about doing what you can to not have mass layoffs I don't think what they mean is that the company has an obligation to the employees that overrides their obligations to their shareholders

Depends on who's talking/the situation. When you hear people talking about not closing a profitable factory instead of laying people off to delocalize, that's pretty much what they mean.
No doubt it was a great movie. But my question was more around whether it was worth it. In an age when an imax ticket costs $25+ or you don’t have an imax theater nearby, but watching a movie still costs $20, how many people do you expect will go to watch the movie.

(Rotten tomatoes suggests that the audience liked the movie, there are no questions about it)
Adobe, Doma and Plaid cut hundreds of workers
Soil in Midwestern US is eroding 10 to 1k times faster than it forms
They counted 103% of users and couldn’t find a single one using emacs!!! /s
> The unknowing probably think we will be in some kind Star Trek future in a few years.

Who counts as the unknowing? The people who thought we were going to have hit the singularity by now spent a lot of time reading up on this stuff. They just came to some insane conclusions.
You want to separate iMessage and iCloud and say that it doesn't matter that iCloud is less secure than iMessage by default because it's separate. You'll still call iMessage end-to-end encrypted separately from iCloud Backup by defining the "end" as before iCloud Backup runs, and blame users for making insecure choices when they enable iCloud Backup.

This argument makes no sense for two reasons. First, iMessage and iCloud Backup are not simply apps that you can replace with other services as you choose. "For your own protection" against malware or whatever, Apple restrictions prohibit anyone from offering an SMS-integrated messaging app or a cloud backup app in competition with iMessage or iCloud Backup. iMessage and iCloud Backup are not separate; they are part and parcel of the larger piece of software called iOS. Apple can't play dumb and blame users for making insecure choices when Apple is the one limiting them to insecure options.

Second, even if they were separate apps and replaceable, they are made by the same company. The service provider the end-to-end encryption is supposed to protect against is the same one making the non-E2EE backup. If Facebook started making a phone backup app that was "separate" from WhatsApp but made non-E2EE backups of WhatsApp messages to Facebook servers, and it was used by a large fraction of WhatsApp users, and the FBI was sending subpoenas for WhatsApp messages to Facebook and routinely getting decrypted messages back, would you really be defending Facebook for marketing WhatsApp as end-to-end encrypted? If so, I guarantee you would be in an extreme minority.
This will create a ton of friction with law enforcement. Expect Washington and London to freak the f out.
If Apple were to calculate the perceptual hash client-side but only do the actual hash comparison server-side following an upload, it would preserve the 'no keys on iCloud' policy while also preserving the 'no local scanning' policy most of us want.

That the server may know the hash is IMHO much less a problem (it shouldn't be reversible anyway) than the legitimization of on-device scanning.
duc!

use a cronjob for `duc index`, then you can use `duc ui` to see the index. it doesn’t immediately update on change so it’s not quite what you’re looking for, but it might be the closest thing.
If compile time is a major bottleneck and you want to use Julia, I highly recommend using -O1. Julia uses -O2 by default which is faster, but has a quite notable compile time impact (often 2x or so).
Someone in the know should enlighten us whether these measures have any benefit after years and years of practice? Meaning the mentioned companies already got what they were after. I mean humans rarely change, they got the behavioural patterns needed and now they don't want anyone else to get this data and these restrictions are actually helping big tech or this data quickly deteriorates and fresh data on humans is needed all the time, so it's useful after all for Europeans.
Scanning on iCloud means that Apple can see the content of all your scannable data in iCloud. Scanning on-device is compatible with Apple never having access to your data in an unencrypted format. If Apple has a legal obligation to ensure that iCloud does not store CSAM/etc. then either you have to scan on device before upload _or_ you have to store iCloud data without E2E encryption. From a privacy perspective, on-device scanning before upload is obviously better.
Sure, from a technical perspective, it is a nice solution to a set of problems.

But there are many serious problems with it. I'll isolate one: an on-device content surveillance mechanism is a slippery slope to a bad, bad place.

As the saying from the 90s goes, "child porn [CSAM] is the root password to the US Constitution." It is bad enough that people are willing to suspend their better judgement to do something about it.

But after you already have the mechanism accepted an in place, it is far easier to add to it. Pick your boogeyman: you're giving all of them a lovely tool to address their desires. Dissent suppression and Winnie-the-Poo detection for Xi, Erdogan gets to sniff out Golem memes, and choose-your-own horror for the coming dictator of the US.

It is far harder to tell a sovereign, "we could easily do that, but will not" than "we don't have a mechanism to do that." And pretending that it won't happen doesn't pass the laugh test - we have seen this show many, many times. But if you want to argue, start by explaining how Apple's jumping to implement the 10-minute-max sharing limit shows how they'd stand up to China about this.
No problem =)

Finally had somewhere to post this obscure project, haha
All of your concerns are valid for "should Apple do CSAM scanning at all" and I share those.

However my argument is specfically to the OPs point that they should just scan the photos "in the cloud" and not "on your device". But the reality is they were only scanning photos that were being uploaded to the cloud, they were just doing it on your device so that Apple doesn't need to have a server that can decrypt your photos to do it in the cloud. Which is what most others (including Google) do.
I get the concern, but is there any evidence to suggest technology based solutions by themselves lead to any of those obviously bad false positive outcomes? Has anybody ever been send to prison, placed on a sex offender list, or even been charged based purely on the output of an automated evaluation that you posses CSAM or some other illegal material? One can certainly imagine the dystopian horror of such a scenario, but whatever the specific technology in question, it's difficult to imagine it playing out in the current legal system of any of country that isn't already based around just semi-randomly throwing people in jail.
5a. Some of those caught will likely be non-technological false positives: images of their own children[1] or CSAM images uploaded by hostile actors attempting to frame the person[2].

[1] https://www.nytimes.com/2022/08/21/technology/google-surveil...

[2] https://www.huffpost.com/entry/wife-framed-husband-child-sex...

The second one is particularly worrisome. In that case the wife was utterly and totally stupid and was therefore caught. How many times has that happened already and the person who did it wasn't caught?
>Overall, services across the board seem to be worse than they were 10 years ago.

Do you live in the US? The pathetic state of telecoms in the US is a US problem, not a global problem. In many other places, our internet and cellular service is fast and cheap. But you guys don't like regulation or competition, so this is what you get.
A large reason why these are aimed for scientific missions is because the single photon detectors utilized for receiving these transmissions are still incredibly expensive. They are basically liquid-helium cooled arrays of nanowires (SNSPDs) which act like micro balometers - pretty sweet tech, but not commercial grade just yet.
Just fyi, you can also bootstrap with that cash, you don't have to raise (and indeed in this macroeconomic climate, raising is harder than it has been). Check out the IndieHackers podcast (also a website/forum like Reddit but I found the podcast more useful) [0], YC Startup School on Youtube [1], read the Mom Test, Lean Startup, and so on.

[0] https://podcasts.google.com/feed/aHR0cHM6Ly9mZWVkcy50cmFuc2l...

[1] https://www.youtube.com/@ycombinator/videos

If you have an email or other means of contact, I'm available to discuss further.
Curious bystander here. Is there a cult follower on HN who can speak to the benefits of multiple dispatch, practically and compared to other languages? I know the sales pitch but I’m curious in particular about which practical coding problems and abstractions become obsolete with MD.

It looks really promising, like “the way things were always supposed to be”, but I haven’t yet developed a full and intuitive understanding of what it means.
This will be the last one produced, but there a plenty of companies still using 747. I can't find a good source, but it look like their lifespan is 20 years or more, so you will be able to fly in one of them if you have enough money and time and do some research. Take a look at https://en.wikipedia.org/wiki/List_of_Boeing_747_operators
MEMS and additive manufacturing are at photon scale. This is the next step.
With their plans to encrypt icloud contents by the the end of the year they would not be able to scan anyways if i user has that enabled anyways right?
Well, I meant today's portable 4TB hard drives, using rocket and lander tech from the late 60s.
If our physics is actually deterministic,

Then

- how do you measure with sufficient accuracy to (well) beyond the Heisenberg limit, everything within a relativistic radius in order to counter chaotic turbulence

and, then, once you have done so,

- how do you compute forward the rather large number of "grains" just measured in the fine time steps required to counter chaotic turbulence?

Leaving aside just how difficult (against the scale of the universe) such exercises are, let's return to the mathematical certainty of proof by both Lorentz and Smale ... any tiny deviation, even magnitudes of order finer than Heisenberg will eventually bite any claim to the certainity of determinism hard in the arse.
I didn’t say it’s good that intelligence agencies hypothetically could spy on this data by having Apple push malicious software.

What is absolutely good is that they have e2ee now, and the only way they could even hypothetically open a back door would be one that was completely secret, for the government, which definitionally closes off a whole class of government use of the data, for example in domestic prosecutions of citizens.

This may not be perfect (it’s not open source etc) but it’s a vast improvement over non encrypted data that was openly routinely given to the government.
This sounds like a dream come true. Are you running into any issues with existing dependencies or this a new application?
They sold a grand total of 17,000 copies and this with original essays by noted writers. You have to sell at much higher volumes for something like this to be sustainable, as those writers and artists don't work for free.
And yet it's unknowable.