skysight-inc/HackerNews huggingface dataset:
Oh, wow I didn't realize that. I'm a little surprised it's a common thing. Stripe's secret key is the "keys to kingdom" so to speak. This means someone with the key can get up to all kinds of funny stuff.

Stripe also says not to do it:

> Your API keys give you access to Stripe’s systems and a global financial network. That access is what card testers want to exploit, so it’s important to keep your keys safe and put safeguards around the functionality those keys provide to prevent fraud and other malicious activity.

https://stripe.com/docs/card-testing#stripe-mitigations

> Your secret API key can be used to make any API call on behalf of your account, such as creating charges or performing refunds. Treat your secret API key as you would any other password. Grant access only to those who need it. Ensure it is kept out of any version control system you may be using.

https://stripe.com/docs/keys#keeping-your-keys-safe
How do I look that up?
This is how progressive taxation works. For some reason, US people happily pay for police, firemen, infrastructure or the military as a necessity of a functioning society but have serious problems considering healthcare in the same group.
Having hospitals compete on price will bring healthcare costs down.

Just like how we can choose between generics and name brands.

Great job!
There's a whole cottage industry of journalism based on criticism of "technology" that's predicated on the idea that "technology" == Silicon-Valley-based software/apps.

Of course, that has the downside of overlooking the fact that most problems are actually solved by technology, technology being what humans create to solve their problems.

Somehow, mRNA vaccines, which are to a large extent more high tech than most CRUD software developed in SV, isn't considered "technology".
That's true, it doesn't make it obvious.

We handle security in a few ways;

- Clients are initialised with Key & ID - We advocate for keys to not be hardcoded

- The key is used for request encryption and are never sent to the server. Request hashes are also used to make sure Man In the Middle Attacks are avoided

- Custom Auth Tokens can be sent with requests - On the server side we use your provided auth callback to ensure it is valid

What do you think about the steps we take? Tokens are really important because they offer another layer of protection
This seems very desirable. Though at the moment, when the self-attention got popular for the first time, it was already available in PyTorch. Python seems to have the edge just because there are lots of people using it. Maybe it is just a matter of time and users. Probably I will wait until the ecosystem gets larger, and then switch to it. (Yes, I am a lazy person to implement a transformer from scratch)
I don't think it's justified for bugs either. At least it should be opt-in per bug. It can hide especially sinister bugs that happen only in an uncommon case.

This assumes a list of bugs that are actually reproductible bugs not an unfiltered feedback from the clients.
Astroturfing HEY
Vietnam created a technosolutionist fix, it was also implemented widely with government backing. It did also work.

And now its being used by police to crack down on specific groups and individuals that the government doesn't particularly like, even after that same government assured the Vietnamese people that this data wouldn't be used in such a way.

> The US instead attempted to implement "proven measures" that "relied on the public . . . to adhere to them." This also did not work, for the reason technosolutionists said it wouldn't: the public didn't adhere to them.

It didn't work because America is advanced freedom. Not freedom in the sense of, "You're free to eat sushi or have a burger instead," but freedom in the sense of, "You're free to make a cornucopia of bad choices... but you're going to be free to suffer from them too."

The best quote I've ever heard in regards to this: "The true price of freedom is having to endure what other people do with it."
Near as I can tell, reforming the political system and changing government policy are intertwined to the point where they amount to the same thing.
Just get a dog. For 50 bucks a month in food you get the best little friend you could imagine.
My comment might be pedantic nitpicking, but what the heck, we've come this far...

> Hence I started out saying "sounds like" to signal my uncertainty

Yes, your original comment "sounds like X happened" was fine. I replied to that comment with "The article does not make such claims", to clarify that -- although X may have happened -- the article does not claim it did. At this point you said "Depends on interpretation", as if the article could be interpreted to claim that X happened. You explained that one might interpret "secured area" to mean area accessible only to staff. That's a plausible interpretation, I guess.

> I considered "secured area" to be non public areas as opposed to "place people wait to board flights after security"

Nitpicks:

The place where people wait to board flights after security is a non public area (it is restricted from the public; you can not enter that area unless you have a special permission to be in that area).

The area where this man lived was apparently the arrivals area (not the departure area that you're talking about). The arrivals area is also a non public area.
Seriously?!? Julia has no hope of overtaking Python in numerical computing by 2032, expecting movement by 2022 is just delusional. Here is a better prediction: by 2022 people using Python for numerical computing who started doing so in the previous year will exceed the number of people who have ever downloaded Julia since it was first released.
There was massive amount of in space infrastructure and lots of people. Even though they did space mining there is no way they would be able to put all that in place without RLVs. IIRC they even show them a couple times, basically big NASP like SSTO aerospaceplanes.

They also have regular transcontinental flights going through space, even though its IIRC not clear if its sub orbital ballistic trajectories or FOBS like partial orbit ones.

Still, many would-be hard SF films get this completely wrong - huge space stations and/or interplanetary spaceships yet they launch it all on rather dated looking expandable boosters!

Already The Martian it's pushing is pushing it with using basically improved EELVs (launched by ULA, none the less!) yet having hundreds if not thousands of tons of equipment and propelant in place.

Interstellar or Ad Astra is bad shit insane - dinky ELVs and multiple interplanetary colonization attempts and humongous space ship in the former and KFC & artillery fireballs on the Moon in the former. And Ad Astra even has booster stages being dropped when launching from Mars because hey, why not waste even more resources!
"-Can you answer side questions, like how calm the sea was, were you looking towards the land or the horizon, were there any birds in the sky, and so on? Some people can, because they were visualizing the scene, some people won't unless prompted, since they were constructing the scene."

- this is exactly it. I seem to be unable to visualize things in my mind. If someone asks me to visualize a beach, I can create a description of a beach and know what exists on the beach, I am able to give an verbal explanation of it. However I do not at any moment see it, nor do I have insight into the beach that I didn't construct. I don't notice that there is a hotel in the distance, but I can think about it and add it in the description. I feel this is very different to what apparently majority of people can do.
On HN, we are supposed to respond to the strongest interpretation of a comment.

CNC machines add capabilities that are not possible by hand. In these shops, you might see deburring done as an extension of the machine cycle where labor cost is high, but by hand where it is low.

GP is right that automation is a huge commitment in design and manufacture. If there are any finicky parts, it's likely that humans will have to do or correct the robot's job, and now you have an idle robot and an engaged human.
Don’t confuse 5k rioters with 74M voters
>My basic understanding is the U.S. replaced mental health asylums and orphanages with homelessness and prisons.

To be clear, that was not the motivation. There were lots of reasons why things changed and institutionalization fell out of favor (and not just in the US, but across the West). For example, right now, in most states, you couldn't forcibly institutionalize, say, a schizophrenic homeless individual legally, even if the request came from the individual's family. And if you try, municipal and state governments, bolstered by activists and rights organizations will fight you.
Very cool. IIRC some VNC distributions for Windows came with a virtual screen driver that was useful for avoiding the need for a dummy plug.
Spreading lies that could lead to an insurrection?
Customers want it, so we build it. Its mostly that simple.

I respect any company that runs itself with that attitude. That doesn't necessarily mean that I want to spend my days working on it.
I have, though I've mostly stuck with the plain PyPlot.jl package due to the familiar syntax and interactivity. Perhaps things have changed, but I just recall being frustrated at the inability to zoom in/out, and again save interactive figs. Perhaps it was just due to the particular backend I was using. I'll give the VS Code experience another try!
I think the idea is that the poster wants people aware that at least once in his administration Trump has done something remotely correct.

Of course the fact that he did this after spending 3 years trying his damndest to gut our already mediocre public healthcare system makes it a bit of a eye roller, but you know, even a broken clock is right and all that.
That makes a big assumption we can't remove the junk before the density is high enough
I mean, I see it being aimed at people like myself to start with (just because I kind of know I have this problem). So that would be people just above the beginner stage but below the professional stage. Hobbyist/amateur.

I have a feeling that student musicians would get a lot of value out of it as there's quite a big step change in how you should practice. i.e. at a student/pro level you learn to practice with a lot more structure and intention.

Thanks for that lead on Tonara! Which aspects where you thinking of?
That’s a terrible source, $150k is laughable for the US. Maybe for a part time doctor working 2 or 3 days a week.

This is more accurate:

https://www.medscape.com/slideshow/2020-compensation-overvie...
Also interesting: https://observablehq.com/@mbostock/best-first-search, a visual display of A*
That's a little unfair. CNC are a type of machine that do something every machine shop would need to do. Manufacturing and assembly typically require very specific automation that would be useless to anything else...hence why it only makes sense with volume.
That calculation is simplistic as it is based on the current steady-state. The oxygen catastrophe was a massive change away from the previous equilibrium state which first had to deplete all the buffers. That's how we got iron ore veins, by oxidizing most of the iron out of the oceans. And there are other sinks besides iron.
I maintain _Redux_, not React.

Sure, I'm obviously biased on the topic in that sense, but I'm an expert in this domain and I did my best to cover this as objectively as possible:

- I stated the background, purposes, use cases, and capabilities of Context and Redux

- I defined what "state management" is, provided supporting evidence, and showed why Context does not match that definition

- I provided concrete guidance for when it makes sense to use each of these tools, and then offered my personal opinion (clearly labeled as such) for when I would prefer to use Redux in some situations.
Ask HN: Best applied statistics books aimed at machine learning practitioners
I have the impression that statistics is a very special subject in the way learning resources are distributed in terms of complexity and rigor.

There are plenty of elementary books where mathematics is also non-existent as such and there is just plenty of hand-waving.

On the other hand, there is the upper-division category where there is plenty of math, derivations, proofs and rigor, but intuition and practicality are lacking.

What I am looking for is at the intersection of those. Something with a modern exposure to applied statistics aimed at people with a decent knowledge of mathematics who want to understand how statistics is used in modern machine learning.

I have seen a lot of job postings where statistics is required, as well understanding hypothesis testing, A/B testing, etc.

So the question is, which learning resources you could recommend as a great balance between being practical and moderately strict at the same time.

Please, recommend the books you personally have experience with or otherwise this could become just a thread with multiple references to popular books very few people really read.

The popular ISLR and ESL are definitely decent books, but I would say that the coverage of statistics there is quite unstructured whereas I need something focused and well-organized.
> This seems to rest on the premise that doing something is always better than doing nothing

Not always, just often. Typically, smart people trying hard to help end up helping. This is my point: you're saying "stop trying to help if you're not capable of totally solving the problem." Giving one piece of a super complicated puzzle is a legit contribution.

Imagine I build "Uber for Food Banks." Instead of a physical food bank, you punch in that app "I need help this month" and someone delivers food to you for free. Imagine it takes off and triples the amount of food aid in the US.

This technosolution completely, 100% ignores the "complex, social political, economic, cultural etc." components of food insecurity. It won't solve the problem.

A valid critique is: "Because social services beyond food are serendipitously delivered through traditional food bank infra, you need to help sustain the traditional infra while expanding the delivery, even if the infra may look different (e.g., transform into medical clinics)."

A bad critique is: "Because social services beyond food are serendipitously delivered through traditional food bank infra, you shouldn't build Uber for Food Banks."

Rich people don't get to look at a problem and say "the only solution is a perfect solution." Help how you can, dude.
As I read the article, I had the impression that what the author was describing was the kind of activities that they would batch, for example, reviewing pull requests.

That sounds more like part of the work involved in manufacturing software than what you refer to as problem solving / analysis.

What if the author decided to batch the processing of pull requests so that they processed all of their outstanding PRs once per week?

Would that be a good thing for the rest of the team? What if you're trying to deliver an important fix and your PR is stuck in queue waiting for Friday to roll around before the author gets around to review it?

The late Colonel John Boyd made important observations as to the competitive advantages that accrue to organizations that can move quickly and well-enough to accomplish the mission.

I certainly could be wrong, but batching everything, as the author seems to be suggesting, sounds like a recipe for an organization that is slow as molasses in January, but also populated with people who see themselves as being highly efficient.

What am I not seeing?
Not very clear on what you think the theory to 'conspire' might be here and who the participants are?

I have just stated political facts about California politics (where I have lived for 30 years). I have never voted Republican in my life (or tory in the UK where I come from).
TLDR - https://github.com/ElrondNetwork

I've been following Elrond's progress for a few months now, with great interest. Some key core features:
- Their blockchain application itself id written in Go

- the Smart Contracts VM can run any language that compiles to WASM

- They have an extensive Smart Contracts Rust framework

- Elrond Standard Digital Token is also live on their Testnet and will also be launched in a few weeks, an equivalent to Etereum's ERC-20

- Also, their mainnet is capable at 16k TPS in current config, but it can scale to at least 263k TPS (figure from their pre-launch public scaling tests) which is waaay more than any other blockchain can do, including estimated throughput figures for ETH2

The two most recent features they plan to introduce in the next few weeks are SC formal verifications as well as meta-transactions:

https://elrond.com/blog/technical/

However, I find most interesting about Elrond is they are planning to launch Maiar on the 31st Jan, a non-custodial wallet to make interraction with cryotos easy for the common folk and enable the onboarding of many millions new users.

https://maiar.com/
Show HN: My personal knowledge base for interview
I think you are confusing 1995 with 2005. Perl was in decline by 2000 and by 2005 it was terminal; you could probably count the number of perl shops of any consequence in that year on the fingers of one hand.
You may find Michael Ossmann's SDR course [1] helpful - it builds the knowledge from the groud up and uses GRC for implementation.

[1] https://greatscottgadgets.com/sdr/
A 'key' line for me in his speech was -

...They didn’t stop anyone from charging her 169% interest on a loan either...

I thought you could only get charged like this if you went to loan sharks or some 'underground' or informal lender. Is it actually legal for a government registered entity to charge such a high interest rate?
This article doesn't present a thoughtful definition on what technology, and by extension technosolutionism, is. This is what we get:

> Technosolutionism is a way of understanding the world that assigns priority to engineered solutions to human problems. Its first principle is the notion that an app, a machine, a software program, or an algorithm offers the best solution to any complicated problem.

As a clear example, the article proposes that contract tracing apps are ineffective unless we are also testing the population at risk. Okay, where does testing come from? Testing is also a technological solution. A human does not look at your sample with a pen and pad and make a decision on whether you have covid. The sample doesn't speak to us and admit actually it does have covid.

Testing is technology. Vaccination is technology. I'll even argue that washing your hands is technology, in the sense that >99% of us interpret the message as to use mass-produced soap with water delivered to your sink through plumbing.

---

Technology usually makes life easier in some way of convenience. Although it can be unclear if it really makes life easier, as technology will often come at the cost of maintaining it. The invention of cars probably looked like a huge convenience, and out of it birthed an entire industry where people made their livelihoods, and now we've moved on to hating ourselves for inventing cars and ruining the environment, creating another industry that creates technology to make the use of energy have less of an effect on the environment. One day, we'll have a problem with that too.

My biggest issue with this article isn't that it's against technosolutionism, it's that it tries to draw some ARBITRARY line in the sand where the procession of technological progress must end. Sending kids to school over Zoom is where we draw the line? What about the problem where public schools closely model the idea of working at an industrial factory?
There is some controversy regarding multiple personality disorded. From what I remember, the amount of multiple personality disorders diagnoses exploded in the 70s and 80s in the USA while the same disorder is rare in the rest of the world.

If people are able to generate Tulpas, it might mean that these multiple personality disorders were in fact generated by the psychiatrists treating these people. This could explain why there was such an increase in the USA while at the same time do not require large number of patients lying about what they are experiencing.
This, the article comes off as very cynical and bitter to me. Yes, there are some managers and executives who are just jerks. And there are a few perverse incentives around that are worth keeping in mind. But if you go into a job with this level of bitterness, you're likely to just create the same situation that you were complaining about.

If you assume starting out that all managers are corrupt fools who only care about promoting themselves and their executive golf buddies, that comes through in every interaction you have with them. They're certainly not more likely to be your partner in advancing your own career and growing the business through delivering genuine value to customers when you're carrying that big of a chip on your shoulder.
How to Audit a PostgreSQL Database
This is a great comment.

I love bringing this up when HN discusses consciousness and the theory that we are all zombies.

In a chat environment like this, it’s impossible to know whether everyone else is a figment of our imagination.
For some time I'm wondering if chemical air scrubbing is actually better - economically - than cooling air until CO2 drops solid. There is at least one company, which does that for some specific air cleaning cases - https://sesinnovation.com/ - but to have a good comparison would be nice...
Ask HN: What do you think about the team building activities
So we are a small start up of 10. Our boss is trying to push a Hackathon for a product we can potentially monetize as a team building activity. We did Marshmallow challenge last year as a team, and I thought it was the most wasteful mornings of my life. I think I agree with the person here: https://maskofreason.wordpress.com/2012/02/01/refuting-the-marshmallow-challenge/

What are your opinions about such activities? Do you folks do any?
In a nutshell, companies and institutions alike have come to realize that Bitcoin really is the world's hardest money, and a much better store of value than any fiat money.

Proof:

https://bitcointreasuries.org/

And that's just the tip of the iceberg.
You'd possibly find many people with similar opinions on instances like FreeSpeechExtremist, Gameliberty.club, Shitposter.club, Smuglo.li, etc.

There's massive diversity of political opinions on Fedi.
The attitude is often quite strange. Like on Twitter I saw a few days ago that many were riled up about the fact that a prof would ask how to solve Ax=b (linear algebra) for a deep learning / computer vision PhD position. People were calling this unnecessary gatekeeping... I'm like that's just a warm-up question to get comfortable... But apparently the loud online hive mind opinion is that all that should count is soft skills and that everyone is equally able. People are even calling out professors on Twitter (who then engage, for some reason) for saying they are looking for "outstanding" PhD candidates. Because this is apparently too exclusionary language, everyone is equally outstanding or something...
Mad science meetup – Past talks
OP and blog post author here: I have no relationship to HEY or any of the websites mentioned in my post! Just a happy user.
I hope the judge in my trial will be as charitable in their interpretation of my words, as you are to Reza Aslan's.
Why do you get an annual physical?

I'm also an American with good health insurance (PPO not HMO if that makes a difference). My GP is at Stanford, although she only seems to practice once a week or something (it can be hard to get an appointment).

I go to the doctor when something's bothering me, but that's about it. It's never been suggested that I go regularly. (I'm not quite 40 yet, so maybe that's the difference?)

My dentist on the other hand, sends me a postcard every 6mo.. :)
I've never heard of HTTPS being described as security theater.

What are the issues with TLS 1.3 that make it insecure or ineffectual?