almostdigital

> Apple will publish a Knowledge Base article containing a root hash of the encrypted CSAM hash database included with each version of every Apple operating system that supports the feature. Additionally, users will be able to inspect the root hash of the en- crypted database present on their device, and compare it to the expected root hash in the Knowledge Base article.

This is just security theater, they already sign the operating system images where the database reside. And there is no way to audit that the database is what they claim it is, doesn't contain multiple databases that can be activated under certain conditions, etc.

> This feature runs exclusively as part of the cloud storage pipeline for images being up- loaded to iCloud Photos and cannot act on any other image content on the device

Until a 1-line code change happens that hooks it into UIImage.

I've been buying licenses since version 3 (2013) even after they started to hide the option.

Sad to see 1Password use dark patterns to push people towards subscriptions then twisting that into that people don't want licenses, at least be honest about it.

+1 customer lost.

> Apple has already been doing exactly this for years.

Is that an assumption made based on that "everyone is doing it" or is there some evidence?

> Apple makes the OS and doesn't need a fancy system to scan all the files on the device if that's what they want to do.

If the goal is to scan all the files on everyones device this system is exactly what they need. It's not like they could upload hashes of every file on every users phone continuously.

Not sure about the OCSP encryption but they did remove their VPN bypass in 11.2 (which was the bigger issue for me at least)

Last year Apple reacted after the outcry about MacOS tracking[1] so there is some hope. That was not a deliberate product and probably more of an unintended behavior though.

I'm really hoping this was just a team at Apple that got blinded by all the cool cryptography they came up with to solve a problem and that the higher ups will react if we screech loudly enough.

[1]: https://sneak.berlin/20201112/your-computer-isnt-yours/

It's disturbing because of how effective it could be.

It's at OS level, anything you have on your phone can be scanned. Even if an app tries to circumvent it by keeping files encrypted at rest it can scan them in-memory. And since it's all done client-side you'd never know it was happening until it found a match and sent it to Apple.

A system on my phone where it has a list of bad files and a threshold on how many of those files are allowed. If the threshold is reached Apple can read them. Both the bad files list and threshold is controlled by Apple and is explicitly designed to be un-auditable...

Honestly I would have been fine with Apple scanning my all photos after they are uploaded to iCloud but this is deeply disturbing

I've tinkered around a bit and found that with another dongle that uses displayport everything works fine. Changing volume and brightness from the keyboard not having to fiddle with monitor menus is a godsend :)

The dongle that's having problems is a "Selore&S-Global USB-C HDMI + DP" if that's something you want to keep on file.

Thanks for the detailed response and all your work making the app possible!

This seemed neat so I installed Lunar to try out on my M1 MacBook Air with a LG HDR display connected over HDMI.

After launching the app my system started freezing so bad I had a hard time closing the app, inputs unresponsive for 30 sec then active for 1 sec to become unresponsive again.

I figured I'd try to launch it with my monitor unplugged and worked fine, but after plugging in my monitor again it doesn't connect again.

I've tried closing the app, uninstalling it and rebooting my system. Nothing works and now I'm left with no external display. What the hell?!

EDIT: after unplugging my dongle from usb-c (i.e. un-powering it instead of just unplugging it from the laptop) everything works again! phew. I guess it put the dongle in some weird state?

Not really :) But it's mostly variants of stuff you can find on https://observablehq.com/@d3/gallery

I really wanted to like this, I've tried it several times but always end up with either having to pre-process my data to fit whatever vis I'm trying to create or just simply not being able to do it.

I recommend https://observablehq.com, once you get a hang of it and have a couple of templates setup for your workflows it's similar effort of this and you have a lot more flexibility.

I like it because it has lower a/v latency compared to many other apps, especially over long distances. I think many people don't realize how much it affects the feel of the call.

A fun way to test is counting to 10 by having one person say 1 and the other say 2 as soon as they hear the 1 and so on. You'd be surprised how long it can take to count to 10 on some apps

No, they want Bitcoin to be a "store of value", whatever that means. Poor people being able to run a full node on a low-end phone is pointless when a transaction fee due to the artificial block size limit is more than a months wages.

> Google has a computer that can hack the encryption

Citation needed

Not sure about how much is actually available but you can generate about 1000 keypairs before it starts to throw errors at you

Scaleway gives you a k8s cluster starting from 40 EUR per month

betty oh-bet

A decentralized Medium alternative

https://decentium.org

Same article on IPFS: https://ipfs.io/ipfs/QmRHaiCQF3USTXH8FrffCRaQUB9crUNXLkoXPBR...

Switched to Fork from GitX and couldn't be happier (and I won't miss the hunt for whatever GitX fork is the most up to date when reinstalling)

The interactive rebase is awesome and it even makes a backup tag for you.

Btw Dan I will gladly pay for a licence when/if you decide to make it a paid app.

Awesome project! Why does it shoot water from the nose though, shouldn't it be shooting from the back?

Great work!

And https://realtimebitcoin.info

And here we go, slipperiest of slopes

I made a similar thing couple of years ago http://www.makeitgo.ws/experiments/voronoi_painter/

(ignore the LAB color picker, no idea what I was thinking...)

Who's gonna be the first to launch KangarooCoin or KeccakCoin with a SHA-3 proof-of-work?

Agreed! once you start using it there's no going back (along with `util.promisify`)