Hacker Newsnew | past | comments | ask | show | jobs | submit | annamargot's commentslogin

Latitude matters though. The farther north you are the more time in the sun you’d need. In some far north places, the sun you do get is not strong enough to get any Vit D.

http://web.archive.org/web/20210302053343/https://jaoa.org/a...

https://www.grassrootshealth.net/document/sunshine-calendar/


Indeed, the UK which is further north than the majority of Canada's population has effective vitamin D from the Sun only from March to September. Spring Equinox to autumn equinox basically. The sun is too low even though it might be much warmer than lower latitudes!


Yurp. I live in the south of England and even here I take vit D for pretty much that time period or I end up with little to no energy. I always make sure to go outside as much as I can, but when the sun is coming up at 8am and has gone down by 6pm it's pretty hard to get enough daylight and also work.


Worse in Edinburgh. Sunset is at 4pm for god's sake.


Greetings from Reykjavík Iceland


In the Southern Hemisphere (yes, people do live south of the equator) this advice is complicated by the ozone hole causing the risk of skin cancer to be much higher than in the northern hemisphere.


Your fun fact is hilarious from an American perspective. It’s the biggest day for bars and pubs in the US and it’s not close.

It’s funny how Irish culture in America seems so different from its motherland counterpart. Same or more so for Italian. No judgements either way. Just interesting how diaspora cultures evolve


This “fact” isn’t a fact. Pubs aren’t anywhere near closed in Ireland on St. Patrick’s day.

It’s probably the busiest day of the year for them.


So, this was true until the 30's or so.

So it's possible that this was passed down the generations as fact. It's not true any more though.


Only a guess but this would likely have been because St. Patrick’s Day is a “holy day”. People attend church (lots still do although in the last couple of decades it’s declined massively) and closing pubs would be in line with how some other “holy days” are treated. An example of this is Easter in Northern Ireland. There are still some relatively strict licensing laws over the Easter weekend (although these are about to modernise) with pubs shit for large parts of it.


> Your fun fact is hilarious from an American perspective. It’s the biggest day for bars and pubs in the US and it’s not close.

Must be a regional thing. Its not like that where I live, and a quick search suggests both New Years Eve and Thanksgiving Eve are busier days (which matches my experience).


Well, just because the pubs are closed it doesn't mean they don't drink.

I'm unsure if it's true, but I've been told one reason racing is popular on St Pats is because the tracks serve alcohol.


This whole thing is nonsense - pubs aren’t closed. And most people aren’t anywhere near a race track on St. Patricks’s Day. Unless they’re in Cheltenham, which is in a different country.


The most obvious difference is that it seems to be called St Patty's Day in the US, for some reason. Nobody in Ireland calls it that.


And people call it St Patrick's day in the US as well.


Self-awareness is how I look at it. And it is finally taking hold with age :)

I can better manage my emotions by simply being able to recognize them almost from an outsider’s perspective. My inner monologue switches to 3rd person

“Yeah you’re feeling super irritable right now, you better go chill out somewhere before you say something you don’t mean and then create a whole big thing for no reason”

Younger me would have started some shit and created unnecessary problems


This is similar to how I approach cognitive biases; I cannot prevent them, as they are innate to human nature. But I posit that if I try to make myself aware of the influence of bias, it might be more managable/less impactful when it affects me.


Or photos of your own children.

We have a Tumblr set up for family to view pics of the kids. Several photos and videos of our kids when they were under 2 were taken down either temporarily or permanently by their CP algo.

These were a pic or video of kids in the bath or without a shirt. In none of them could you see bum or bits. Just a semi naked baby.

Algorithms like this get things wrong all the time


This is not the kind of algorithm that Apple is be using. That one only scans for already known CSAM in NCMEC's database.


Quite funnily and disturbingly, one the databases of "known CSAM" hashes also apparently includes a picture of a clothed man holding a monkey[1]

[1]: https://www.hackerfactor.com/blog/index.php?/archives/929-On...


That was just a MD5 collision - an image that has same MD5 hash as some other image (in this case some CP). This is uncommon yet possible thing - see this example[0].

[0] https://natmchugh.blogspot.com/2014/11/three-way-md5-collisi...


I think a flawed process where the monkey image ended up in the database is more likely than a random unintentional hash collision.


Not really. MD5 is thoroughly and completely broken, and has been for years. You can modify an image to be an MD5 collision for another image.


No you cannot. A collision requires the attacker to create both images.

What you are describing is a second preimage attack-- creating a second input with the same hash as a target.

There is no currently known tractable way to create second preimages for MD5.


Yeah, vaguely talking about MD5 as "broken" is common and misleading. There are very particular known attacks.

Obviously nobody should be using MD5, but it can be useful to understand there are circumstances where it's basically reliable unless you have an extremely sophisticated attacker.


That would be an intentional collision. An unintentional collision remains unlikely for a cryptographic hash.


Not just unlikely but astronomically unlikely.


Yes, hash collisions definitely occur. There is no such thing as collision-free hashes, and MD5 is definitely broken.

Even though the author says they were 3 million MD5 hashes the second time, the first one he calls them SHA1 and MD5 hashes (even though SHA1 is considered weak too).

I wonder what kind of hashes Apple is planning to use. Will it be whatever is made available to them or will they only accept (what is now considered) secure standards?


Which may contain the hashes of their photos, because they've been taken down in the past, which means they probably have been added to certain blacklists that may have been integrated into the blackbox of NCMEC's database.


Photographs of your naked child in the bath are not illegal, are not CSAM, and are not going to be in the NCMEC's database.


NCMEC's CSAM database already includes images that are not necessarily illegal. If _your particular_ photos have been flagged in the past, they may well be part of the database.


> NCMEC's CSAM database already includes images that are not necessarily illegal.

How could this be the case? If it's been determined to be CSAM then it is, by definition, illegal.

If it were true that the database is likely to contain legal material, how would we possibly know about it, given that the contents of the database are secret?


> How could this be the case? If it's been determined to be CSAM then it is, by definition, illegal.

Certain images are CSAM by _context_. They do not necessarily require those within the image to be abused, but rather that the image at one time or another was traded alongside other CSAM.

> If it were true that the database is likely to contain legal material, how would we possibly know about it, given that the contents of the database are secret?

Tools like Spotlight [0] make use of the database, so certain well-known images are known to flag. Such as Nirvana's controversial cover for Nevermind.

[0] https://www.wired.com/story/how-facial-recognition-fighting-...


> Certain images are CSAM by _context_. They do not necessarily require those within the image to be abused, but rather that the image at one time or another was traded alongside other CSAM.

At the risk of sounding like a broken record, how can we know this is actually true? Every description of the NCMEC database's contents that I've seen is incredibly vague, and as of 2019 it seems like there were fewer than[1] 4 million total hashes available. I would think that if it genuinely did include innocent photos of people's kids, the number would be much higher.

> ...certain well-known images are known to flag. Such as Nirvana's controversial cover for Nevermind.

I've heard this multiples times now, but I've never been able to find any evidence of it actually happening. The only instance I could find was one where Facebook removed[2] that Nirvana cover once for containing nudity.

1. https://inews.co.uk/news/technology/uk-us-collaborate-crack-...

2. https://www.theguardian.com/music/2011/jul/28/facebook-nirva...


Interesting random data point, I just checked Apple Music and the Nevermind cover art is not censored.


If you're sending other people photos of your children that are explicit enough to prompt someone bring them to the attention of child safety groups like NCMEC, and they look at it and agree it's worth their time to investigate, the first you hear of it isn't likely to be after it eventually comes full circle through Apple's CSAM processes.

Remember, this isn't a porn detector strapped to a child detector.


Step 1: Get copies of pictures of targets kid in bath from phone/SNS

Step 2: Manipulate pictures so that hash collides with CSAM

Step 3: Get pictures back on targets phone so they get scanned.

I don't have the skills or understanding of how the hashes are created but would this be possible?


Hypothetically that's possible, although all three steps you listed are exceedingly non-trivial. The notion that an attacker could pull off two of those steps let alone three is borderline fanciful. In addition, their target must also qualifies with the necessary prerequisites:

• has an iPhone;

• has children;

• took photos of their children which could be mistaken for CSAM by a sloppy reviewer;

• is of sufficiently high importance to justify the effort.

And after that insane effort, all you've done is inconvenience your target for a little while until child safety people investigate your family situation and discover that the photos which got flagged were not actually CSAM.

Immediately after the investigation process discovers the hash fraud, Apple will immediately start delving into exactly how their hash algorithm failed in this instance, improving it to mitigate this exploit. So this target better be worth it!

If this was a plausible exploit, surely it would have already happened to people with Android phones since Google has been doing pretty much the exact same scanning of customer images for over five years. (The only difference with what Apple is now doing is where the hashing is performed—but this makes no functional difference to the viability of your hypothetical exploit.)


This isn't an ML algorithm. It's a hash. It only matches already known material.


It is a hash created with ML. So it’s both. But yes, it only matches already known material.


I haven't seen anyone claim that any of this algorithm was "created with ML". I'm interested in learning more so do you have a citation for that?

Regardless, it's not both. Setting aside how the algorithm was created, it's incorrect to say that an algorithm "created with ML" is itself an ML algorithm.

NeuralHash was so named because it was optimised to run on the Apple Neural Engine for the sake of speed and power efficiency.


It’s both because it’s a multi-step process.

The image is not fed directly into the hashing function, like taking an MD5 hash of a file or something.

Rather, the image is first evaluated by a neural net that looks at specific visual details, and has been trained to match even if the image has been cropped or anything like that. The results of the neural net evaluation are what is then input for the hashing function.

This is explained in detail in Apple’s documentation they released with the announcement.


Potentially? Seems to me that potential is already being realized.


I don't know how we can possibly know that. There are just too many confounding factors right now.

We had this unprecedented crash that clogged up global supply chains and caused a huge shift in what people are buying. We have massive government spending increases. I don't think it's possible to work out what impact QE is having on inflation right now or whether it will indeed be transitory as the Fed believes.


But please don’t subject your children to commercials.

They don’t need temptation to eat/get garbage thrust upon them by high production value propaganda from giant corporations

/rant


Seriously, I don’t pay for YouTube premium but I absolutely would if I had children. That plus PiHole and a browser ad blocker.


Youtube premium with kids pays for itself in the reduced spending/whining for things they saw on ads. Embedded advertising is another thing entirely. SponsorBlock is the way to go there.


Let’s not forget, though, that parents can be mouthpieces of propaganda too—religion, bigoted views, even preference for certain brands produced by giant corporations.


Yes so lets hand our kids over to advertisers and the state, that's always worked out wonderfully.


My bet is that it would decrease the amount done.

If it’s free why not sign up, maybe someday I’ll use it. Maybe not

Edit: decrease the amount done as a percentage of signups. Perhaps the growth in signups would make up for the percentage drop in aggregate terms. Ie flood the gym with memberships and only find one more person actually working out


We use Tumblr in a custom domain + custom theme and I’m really pleased with the setup.

My wife and I can easily post from the tumblr app on our phones. Password protected site so only family can see it. Easy backups to Wordpress just in case.

It’s easy for family to check the site whenever they want rather than putting it on social media. We turned off commenting so there’s never pressure for anyone to leave a comment and we don’t have any sense of needing affirmation for every picture we put up. It’s all just there if family wants to see it. Grandparents living far away especially appreciate it.

For our own usage, it has been invaluable too. I made some theme updates so we can go back in time and look at specific months easily. It’s been a great asset of curated family photos we can go through to see the kids at different stages. They’re 7 & 4 now.

I’d be happy to share my custom Tumblr theme with anyone who’s interested.


For me, Peterson has a message/messenger dissonance. I like a lot of his thoughts on self improvement and psychology, but find his delivery and tone off putting at times. He can come off patronizing and condescending and in interviews often seems a little too emotional when challenged or asked about arguments critical to his.

I prefer reading articles like this where I can get the message without the messenger.


I find his delivery to be so verbose that you get lost in an almost waterfall-like wall of words bashing you over the head. Maybe he is smart, but it’s odd to me that so many people find him popular when he is so long winded.


That's an interesting point you bring up - the message / messenger piece.

Now that you say that, I think it is true that for MOST general ideas that he shares when he is not in the limelight, people tend to connect with what he is saying. But when you get him into the political settings and people want to harsh how things like gender differences or government structures, that is where people get super polarized.

I hear a lot of people actually also enjoy the way he presents information. Out of curiosity, do you think the emotion comes from a feeling of "having gotten caught? Meaning he is sharing ideas but is going too far away from his domain, and thus is getting challenged by those who know more? I've noticed the same thing, but can't tell why it happens?


Feel obliged to mention the Dyslexia Debate. Scientists who believe it’s a meaningless and imprecise term.

https://www.dur.ac.uk/news/newsitem/?itemno=20285


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: