skysight-inc/HackerNews huggingface dataset:
Not really.

For example, here is Stripe's script tag:

<script src="https://js.stripe.com/v3/"></script>

SRI only works for static files whose contents never change. In this example, it would mean that Stripe could never push minor bug fixes to the SDK.

The workaround would be to use static versioned files instead of a generic script URL (or self-host the script), so that the value of the SRI checksum never changes.

Edit: In the case of Twilio, their docs say "By linking directly to our CDN in production, any patch-level (non-breaking) changes made to the SDK will automatically be applied [...]" meaning that if you link to Twilio's CDN, you can't expect the file to be static, and therefore can't use SRI.
(Restatement from a comment I posted previously[0] in a related thread.)

My go-to reference is

Attachment Disturbances in Adults: Treatment for Comprehensive Repair by Daniel P. Brown PhD & David S. Elliott PhD. [1]

[0] https://news.ycombinator.com/item?id=21739622

[1] https://www.amazon.com/Attachment-Disturbances-Adults-Treatm...
> Can you crowdsource the moderation task[...]?

I highly doubt that. These reported posts might contain private data or highly shocking content; putting that on a public platform, especially associated with the name of Facebook, is very unlikely to happen.
It's ok, because now it's cool to be a woke brand.. until it's not.
Dropping your starter attack and defend cards after getting better alternatives is a good tip for new players, but the number one factor in winning in my experience is selecting the right card combos and synergies. Identify possible combos early and pick future cards to build on those strategies. If a card doesn't fit in your deck skip it. Sometimes you'll pick a combo card early and not come across any synergistic cards and lose or have to pivot strategies, it just happens. Having a smaller deck with only the cards you want will usually help though.
If the headers being sent by the server are correct, then the software being used should actually support TLS 1.2. Why they continue to persist in not allowing it is beyond me.
To add another data point, consider this email Twilio sent, announcing that they are now forcing all users to use 2FA by October 12th:

> [...] a 2FA verification code sent to your phone (via a call, SMS message, or an authentication app like Authy).

PSTN-based 2FA in 2020 is not a vote of confidence in the security team's competence.
Cognitive Behavioral Therapy as a Treatment for Insomnia
According to https://www.datanyze.com/market-share/office-suites--370 Google holds more marketshare with G Suite with 59.91%, compared to Microsoft Office 365 with 39.96%
I believe that the fundamental core issue in this never ending debate is that neither side knows the truth, but realizing that one does not know something is not only difficult, but counter to human nature (so it seems to me, based on observing human behavior across domains). I wonder what difference it would make in the world if more people became able to realize that a massive amount of the things they (and we, broader mankind) believe they know to be true, are actually unknown. Would there perhaps be less polarization and conflict, and more understanding and harmony?
With cryptocoins trading you can earn money or loose money. Remember: "Never invest more than you can afford to lose."
Man... Diversity for the sake of diversity won't make anybody richer, just the opposite. The root of the 'diversity' movement is barbaric socialism, marxism. Marx, Lenin, Mao, Pol Pot all fought for disadvantaged working class; today's marxists fight for socioeconomically disadvantaged people, and they will gladly fake 'disadvantage' and attribute them to random group of people. The result of such fights will be similar to those achieved by Lenin, Mao, Pol Pot.

What has to be ensured is an equal opportunity for everyone regardless of color, sex, religion etc. As of today, we have it in this country and in the most civilized capitalist world.
https://news.ycombinator.com/item?id=23916314
>I have an old memory from my childhood, in Romania during communism I went with my grandma to buy oil(or something like that) and if we wanted to buy that we were also forced to buy some other crap like pencils so the shop would get rid of old stock

bundling of physical goods with bundling of digital goods isn't really comparable because the latter doesn't have any marginal cost. If you don't use it, nothing's being wasted.

>So bundling feels to me dirty, I get forced into something I might not like.

That's not really a problem with bundling per se. If I get amazon prime for free/fast shipping and it includes free prime video and twitch prime, I don't feel "forced" into using those services. What's happening in this case though, is that microsoft was apparently auto-installing teams, which is questionable but not something intrinsic with bundling.

>Maybe the actual problem is that big companies have a lot of money that they can spend on this products and offer them for free then make it impossible to create a fair competition.

Can't you make the same argument about any free service offered by a company? eg. free cloudflare making it harder for paid cdns to compete, or free git hosting by github/gitlab making ti hard for a paid service to compete?
Yeah, it seems to be the natural evolution of anything that starts out small and obscure, then becomes famous and cool.

I have no doubt that there's some obscure, ramshackle accelerator out there that will someday be as prestigious as YC, just like there is some small, tight knit festival that will eventually become as huge as Burning Man.

But taking part early also means foregoing the prestige factor, and accepting that this obscure accelerator/festival will most likely never get big or cool. You can't have it both ways.
> found it interesting that the general consensus seems to be that Sweden failed, and yet NY state was just hailed as "doing it correctly" by Dr. Fauci [0]

You should read the sources you quote. Dr. Fauci's comments are on NY's approach on "how to successfully bring down cases of coronavirus." It says nothing about what enabled the epidemic to spread like wildfire, which is Sweden's case.

Taken right from your own source:

"Again, we have a problem. We need to admit it and own it. But we have got to do the things that are very clear that we need to do to turn this around, remembering we can do it," Fauci said."
Unfortunately during a state of alarm is when you need your rights the most.
Thanks for the peer review!

It can be easily shown that entropy in the universe is finite. Thus, at some point mathematicians will not be able to continue trying to prove the prime number theorem. qed.
Seemed like an odd issue to be outstanding. I assume if this was a real issue it would be a much bigger story.
Hey! I recently started to learn LISP, and was looking for a way to try everything I've been learning, so I created this package (which can be installed with ql [0]) to draw fractals in a typical L-system form. You can see some of the cool fractals created in the examples of the project [1]

[0] (ql:quickload "cl-aristid")

[1] https://github.com/FdelMazo/cl-aristid/blob/master/examples/...
Google Cloud Recommendations AI: Personalization Solution for Retailers
This is a good question. It's funny, I'm the technical co-founder at my startup, so I hadn't thought to make the distinction between high and low visibility work. I guess we're small enough that I think about it as high impact/cost and low impact/cost. My non-technical co-founder will praise an engineer for their work when the product metrics are moved, which has happened for mundane tasks, too. I tend to notice the craftsmanship more, but I think it's right for attention to be given to the impact.

I have also been at a larger company, so you bring up a good point about fighting for work. I also think this is right.

1. If you win the fight for high visibility work, that's a good sign that you're the right person for the job. It wouldn't make sense for the company to have you work on something for your own benefit over the company.

2. You may opt not to fight and discover other problems to work on that have strong potential for being high visibility. Maybe that's something relegated to PMs or eng management, where the engineer might feel helpless to the given assignments, but that's more of a culture problem. I think politics increases when there's less work/budget/praise than there are people, which is more situational than cultural, in my opinion.
Teams replaces Lync/Skype for Business which are gonna reach EOL soon.

I’m guessing that’s what they mean by it being forced upon their users.
I absolutely agree. Thanks for your comment.
My immediate thought was about their Authy Desktop app - looks and feels like a web app in a container. If someone gets access to that then boom, all your 2FA tokens are stolen.

Time to find an alternative.
I'm aware it's contextual and there are different strategies for winning, and there's a reason for each card being in the game. But I wasn't aware of how some cards combo together, or some situations/battles where they might be stronger than others, etc.

And there are plenty of discussions online for pretty much every card on how strong or weak people think the cards are overall (like is it worth picking it up if it's offered to you late in a run because the payoff might not be worth it, or if you see you're getting a specific boss that act, etc), and most of the cards have been buffed or nerfed multiple times since the game has come out, so clearly the developers have been convinced that some strong may end up stronger than others on average too (and are trying to keep things pretty even as much as possible, I assume).
Once this technique gets enough attention, a detector for it will be built. Even if the face cannot be recognized, a profile with such picture may be flagged for more scrutiny. This reminds me of using TOR that hides what you visit, and yet likely puts you into a watchlist for surveillance.

I think that a simpler and more robust strategy to achieve good privacy is avoid posting personal information online and social media altogether.
i had thought myself reasonably well informed on the Reddit story but this is surprising. you're saying if they had their 7% of the ~1-2b it wouldve paid for every YC startup since? but its not liquid...
It wouldn't have gone through the year + process of becoming a product without this discussion and being over-ruled. Plenty of documentation out there on how lego selects a theme / item, designs, plans production, and releases a product. It passed theses rigors, but not the "mob".
I once encountered a take on this that rang quite true to me, though I can't for the life of me find where I read it.

The observation was that good object-oriented design is inherently unstable. With even slight perturbations, they can quickly spiral away into a mess. And those perturbations tend to happen almost constantly in real life, because writing SOLID code requires vastly more skill, knowledge and effort than not writing SOLID code. So keeping the code clean requires a constant, almost aggressive effort by some (probably self-) designated caretaker who understands and can defend the design. The social factors there are terrible, though, because now you've got a person on the team whose very job is more-or-less to nitpick and have arguments with the rest of the team. Frankly, it might be better to let the code be messy than it is to risk creating that kind of work environment.
I saw it once at an air show in Pretoria, along with some other cool planes like the Sukhoi SU-35. The Russians actually loaded up all their other planes into the Antonov, and flew it straight from Moscow to Pretoria in one shot!
I wonder how many great ideas have been missed out on because our most basic filter / mental models that allow us to just choose basic candidates for options are ... wrong.

"Wait no you can't do that, let's look into this other thing."
Apple releases study defending App Store's 30% cut ahead of testimony
(TimescaleDB engineer here) Some of the comments here sound technically off.

We've never seen a backup take down a machine. The backups we use are the same as Postgres which are used by millions of companies without a problem (and can be streaming incremental backups like pgBackrest, WAL-E, etc. or whole-database backups like pg_dump). As with any DB you do have to size and configure your database correctly (which these days isn't hard).

We've never seen anybody claim that ClickHouse offers significantly better compression than we do overall. Obviously compression depends heavily on data distribution and I'm sure you could make up a dataset where clickhouse does better (just as you could where TimescaleDB does better). But on real distributions we don't see this at all, we do pretty advanced columnar compression on a per-datatype basis [1], and see median space reduction of 95% from compression across users.

Large queries is a weird claim to make since Postgres has more different types of indexes than Clickhouse and has support for multiple indexes. If you are processing all of your data for all your queries then yes, click house sequential scans may be better. But that's less common, and also where TimescaleDB continuous aggregates come in.

We've seen customers successfully use our single-node version with 100s of billions of rows so claiming that we are just for small use-cases is simply untrue, and especially with the launch of multi-node TimescaleDB.

I understand people may have different preferences and experiences, but some of these felt a bit off to me.

[1] https://blog.timescale.com/blog/building-columnar-compressio...
This test is a screening test and thus can never be used to diagnose someone. Only a diagnostic test can be used to diagnose someone.

Screening tests like these will represent a paradigm shift in cancer surveillance and as such will require those administering the test, most likely a pcp, to properly educate each patient about what the test results mean and what steps should be taken next.
“The Book” is the hypothetical collection of “best” proofs for each theorem. “God’s favorite proofs” if you will.
I have seen a lot of these threads over the years on HN. Most give your two options, with an occasional "read pg, do a startup" type advice thrown in. Things I have considered:

- Switching careers to work closer to where the money is. For example, working for a douchey hedge fund that can pay half a mil a year if things are going well.

- Putting together a pitch deck, flying out to CA and pitching it to every VC who will listen. I have a decent idea for a dating app that solves a lot of the problems with the current crop of dating apps. A VC paying my salary for a year while I develop something like that would work well for me.

- Networking my way up until I am rubbing elbows with the ultra rich and looking for opportunities to help them spend their money.

- Playing the lotto until I'm broke.
Google Docs/Sheets?

I wouldn’t be surprised if there are more google docs/sheets created on certain days of the year than there are Word/Excel documents.
There are many people (the vast majority of people, in fact) who could not deal with risk for reasons entirely unrelated to having kids. A person's risk profile (particularly if they are young) has much more to with their family background than choices they made (or didn't make).

I'd rather not have new ideas for businesses filtered through "can afford zero income for N months".
Not that it would change my opinion much given the Osprey was developed for military purposes, by contractors for the military and is used almost entirely by the military, keeping in mind the Coast Goard is a branch of the "armed forces" - though I get, they aren't out in front-line battles these days... that said, I don't see any reference to the coast guard for this on Wikipedia - I assume it operates in a support role via the Marines who probably are working with the Coast Guard.
BBC Basic Console Mode
Mine was in information security (undergrad was CS). It was generally my experience that it didn't weigh much in the minds of hiring managers, at least not as much as real world experience. It does however seem to buy you a higher initial slotting/pay band than you would otherwise have if you were given an offer. I did learn quite a bit of useful things, qualitatively, which I can most definitely apply to my work. In my experience certs and experience tend to weigh more heavily for job accessibility.
The average 18 year old just starting college doesn't have a job or has a low paying hourly job, has no savings and is still very much dependent on their parents for at least some financial support. For many parents delaying the time their children enter the work force can represent a significant financial burden. I am all for saving up and taking time off between jobs, sabbaticals, extended vacations and traveling the world, but doing it on mommy and daddy's dime is a fairly selfish pursuit.
It's tempting to dismiss that write-up due to its incendiary style, but I find that many of its "factory floor" level insights ring true to me.

As an experimentalist, I would agree with the sentiment that the potential future applications of Quantum computing probably receive too much media attention, given the maturity level of existing technology.

The technical arguments as to why building a useful QC will be impossible are a bit more shaky.

First, the post seems to imply that the calibration effort scales with the number of gates in the algorithm. This is false. In reality, the number of interactions that need individual calibration is basically the number of qubit-qubit pairs exposed by the gate library. The most mainstream approach to error-corrected QC only uses nearest-neighbor interactions, and hence the scaling is linear.

Second, it is not clear to me why the number of computational basis states (2^N) is relevant to the engineering at all. Following this line of thinking, the recent Quantum supremacy result by Google already amounted to a mastery of 2^53 ~ 10^16 degrees of freedom.

Third, an argument is made that large-scale error correction will not work because of correlated errors, of unspecified nature. I think a claim like this should come with a mention of at least one concrete source of such errors, so that we could estimate its magnitude and potential severity. Note that such calculations are almost the essence of day-to-day work of a physicist.

In the absence of more detail, I can make a generic counterargument: Any phenomenon causing such correlated errors by definition affects multiple physical qubits at once, and will tend to be more macroscopic in nature. This is in contrast with the processes that limit the fidelity of one- and two-qubit operations, which is what the error-correcting code will take care of. Macroscopic disturbances are exactly the ones that we can attempt to shield against with clever engineering.
We can't honestly have any practical discussion about the concept of a Great Filter until we get to the point that our observational capability would be sufficient to reliably detect another civilization at a similar level of development to our own within a sufficient size search space: within our own galaxy for instance. Considering that 68% of the universe's energy and 27% of its mass is still basically unaccounted for, it's clear we have a very long way to go before this idea is worth bringing out of the halls of existential philosophy.

Let's say for the sake of argument that a civilization exists in our nearest neighbor system, Proxima Centauri. Let's assume that it has developed with a similar impact to their system as humans have had to our own -- radio emissions, a handful of interplanetary and interstellar space probes, nuclear tests, etc. Could we detect them? Everything I have read concludes that we currently could not. The concept of being able to receive interstellar TV transmissions is such a sci-fi trope I don't think very many people consider that it is essentially impossible.
How will Pulumi fix the issues you mentioned?
Hi, you can use api via http://api-v1.exchangerate.host
> Using an SCM tool isn’t going to cause additional problems except for reminding yourself of all the dumb mistakes you made last week.

You haven't worked at a shop that mandated Team Foundation Server, have you? ;)
No, according to https://www.datanyze.com/market-share/office-suites--370 Google holds more marketshare with G Suite with 59.91%, compared to Microsoft Office 365 with 39.96%
Your comment doesn't make any sense. Could you elaborate on that in case you've just left out any key detail?
I used Azure for a year on a project and they did seem to have a pretty big focus on UI/UX. Without having previously done any cloud management work directly, I found it fairly straightforward.
Jorbs (a popular STS streamer) has said something like:

If random shuffling of your deck can cause you to take 40 damage from Lagavaulin, and the game is still 100% winnable, then that 40 damage doesn’t matter at all. At which point the game is just not interesting, because most of the time you don’t take the 40 damage and the rest of the game is way too easy and low risk. With procedural generation, in order for most games to be challenging and interesting, you have to have games in which the game just stomps you.
Python Packages: Five Real Python Favorites
FWIW, that's a redirector and not a skimmer.
Umesh Vazirani has a quantum computation MOOC. I did an older version of it, and enjoyed it. I believe it has been updated and moved to Edx.
I felt the version which I followed was a good distillation of challenging concepts, as curated by an established expert.
I have external partners who provide their own principal and I provision a subset of bucket access at the bucket policy level. Is there a better way to do this that's more manageable? The end users are using software or python code where they need to gain access via [access, secret, bucket, prefix/key].
You can kill the heart? I thought that was just kind of like a fun thing you can see at the end of a win where it shows how much damage everyone has done with it, kind of like a communal scoreboard. There's more to it than that? Note: I've only played standard runs and daily challenges so far.
> I found zen modes to be not really effective, as they shut off everything and ultimately you end up removing them for one reason or the other.

I agree, which is why I argue that it should be an OS concern, not an application concern. Screen time in iOS provides some of this functionality, but it’s still not powerful enough to restrict access to certain sites, and there are ways to get around the parental control modes.

The problem is that a phone is necessary in many jobs. I tried switching to a “dumb” phone a few years ago and had to revert because I needed app-based 2FA for work.

I would pay good money for a solid iOS screen time app that allows me to set profiles for work time, free time, personal focus time, etc. that only provides access to apps I truly need in a given moment and cannot be worked around. That would be such a game changer
I work regularly on "real issues", i've spent a lot of time in Northern Africa working on these issues, notably human traffic and slave trade. Have you? I'm a consenting adult that purchases lego as an outlet. In fact, the largest group purchasing these sets are AFOL.

They didn't chose to draw a line, they let a mob draw it for them.
I think the money needs to cover your rent. It should not be enough to hire technical people to build the product - that was supposed to be the founders thing.

In that light, SF is the wrong place because the rents are so high.
Obtaining a Broker-Dealer License
I’m failing to understand the playing field Slack is wanting to compete in. Is it the Office 365 playing field?

Like do they want to be an optional add on into O365?
I'm not perfectly ordinary I guess
The best move now would be for Slack, Zoom to merge, buy Airtable and Webflow, quickly try to build a moat. No one will get this opportunity again. But they might just build the next Google/Facebook/Apple this way.