skysight-inc/HackerNews huggingface dataset:
Ask HN: How do you test the security of your API?
Hi friends - I am looking for some guidance on what are the best tools and practices for testing the security of your API?

I don’t mean things like OWASP ZAP which are mostly focused on web application scans but tooling for auditing e.g. REST API backends of mobile apps or headless pages.

Any practical tips are welcome.
5 thermostats in the right comfiguration can be a universal computer. Approximation, in the computational sense, is relative to some well defined function, which gives the approximation an ontology. The feasability of approximation is not disputed, but the content and nature of the ontology is a battlefield of motivated rhetoric.

Yes, this is arguing semantics but in this particular case, semantics is the whole point.
The Stonehenge of PC design, Xerox' Alto, appeared 50 years ago this month
Anecdotally, giving our baby Bamba was actually how we discovered his peanut allergy, which was later confirmed by a traditional allergen skin test administered by a doctor. (We noticed puffy redness around his lips after his first piece of Bamba.)
One step closer to Jackalopes!
Try asking it if a previous move was legal. Or why it decided to do the move.

The problem is not a failure to understand the rules. It is just not very good at maintaining the state.
Driving at all is specifically and overtly considered a privilege and not a right by the law. We are told that more than once on our way to getting a license.

I would be in favor of governments taking that more seriously.
If you don’t actively use it, it’s hard for it to get better
While I agree in the long run, I suspect we may run into limitations in generative AI at some point this decade. GPT-4 is incapable of any form of genuine discernment about the veracity of any statement that it makes. This "hallucination" problem might be more difficult to solve, as critical thinking skills are still the exclusive domain of evolved sentinent beings.
> which is on the other hand prohibitively expensive.

It's expensive, it's not prohibitive unless you're not willing to increase education funding at all. Which implies that what we're spending now "should be enough." I don't think we've ever done the basic homework here.

54.5 million school aged children in the US. Average $50,000/yr tutor salary. Total cost per year would be 2.7 trillion.

National Defense is 767 billion. Education is already 677 billion. Net interest is 475 billion. We're already more than half way there, inside of a nation with $25 trillion GDP.

I fail to see anything "prohibitive" about this.
Most of the existing power structures that exist today have very little democratic control over them. The concentration of wealth has effectively zero democratic control, and wealthy people overwhelmingly control the entirety of how the planet operates. Even in the American election system, the primary elections of our two party structure are extremely undemocratic, and we're only allowed to viably vote on candidates that are chosen in their very undemocratic way. The problem compounds itself too when factoring in that voting decisions are overwhelmingly determined by media coverage, and media coverage is dictated entirely by billionaires.
At least with GPT-4, you can use [input from https://www.example.com] to feed it input to analyze, if you do it twice it will automatically compare both sources. You can then even say "compare in a table". So, maybe not curl but definitely doing requests.
No offense to the creators and not to discourage them, but the whole process already looks so arduous and antique. We're not there yet but I bet that with GPT-x-video-diffusion we get similar results with MUCH less work rather soon. BTW Google just released the other way: a new video-to-text model today.
Yes, we rely a lot on openTelemetry for this. They have really good support for most libraries in Java, node and are progressing quickly in others. We are also contributing to it by extending support for other languages, which we'll be open sourcing soon.
ReMarkable's Type Folio keyboard cover prompts thoughts on distraction-free tech
I was taken involuntarily to a hospital.

I was immediately presumed guilty and cursed at by nurses. Looked down upon by cops. Laughed at when I asked for a signed warrant or consent before acting.

Oh yeah, I wasn't there for a mental health hold. A cop claimed there were drugs up my ass. Literally.

They found nothing. Never got an apology. Just a bunch of judgemental assholes that assume if you're being evaluated for something it must be true. Even when discharged they marked "overdose" on my paperwork.... I was stone cold sober and was only there because some officer apparently thought I fit the profile of a drug smuggler. The medical workers didn't want to admit they were wrong so they just marked it as an overdose when absolutely nothing was found, including never performing a tox screen (it would have been negative). On the way out the doctor bragged about how he was monitoring closely to try and find a way to hold me longer, with the implied threat being he had hoped since whatever preconceived notion he had about me being a drug smuggler had no evidence that he could punish me instead by involuntarily committing me.
That in turn implies that there always is interesting work in startups, doesn't it? On the flip side, there is "interesting work" that only happens in large companies. If you want to orient yourself towards that, you have to join one. In my experience, strong enough motivation and starting to work with the right teams can get you there. This begins with applying for the right positions. But even then I'm not talking about any "grand plan", just about naturally gravitating towards the work that interests you over time. It may take a while, but by the time you're fully there, you've got experience (and de facto worked on it) already.
My son will be interested in this for sure.
What? That does not follow at all.
Ask it to evaluate moves and explain why they are or are not good
hmm... Vice might be incorporated.
I'm an urbanite with no need for a car.

I don't currently have one, but I want to buy an efficient pickup truck or unibody pickup truck when I do buy one.

In the rare occasions that I do want a car, a truck is really helpful. I don't really see another solution other than cheap and convenient pickup truck rentals.
And it's not just news a lot of other media is producing negative or outright toxic content, and it's super hard to break out because drama and gossip are captivating, because satire can be fun even if disperse in a negative sea and because there is quite some selection bias from our own frustration in selecting the content that relates to us.

Let's not forget we went trough four "once in a lifetime disaster" by now. Or more depending how you count.

Today I make a conscious effort to check a channel content before consuming any drama in it. If the channel is 100% drama I pass, regardless of how captivating the original link was,to try and break out of the algorithm.
I can't resist, because this is the perfect opportunity... RTFM
Nothing gives you confidence in your system than testing on high variance sample of last 4 months of production traffic.

Especially for rewrites or code refactorings.

I've built this system at many companies myself. Never thought of doing this as a service for others.
I think https://en.wikipedia.org/wiki/Michael_Crichton#GellMannAmnes... is applicable here.
The difference I'm pointing out is that an artist can have an idea of such things without reference images of them. Or what historically accurate could mean without having to be explicit about the Hollywoodness of existing images.
GPT-4 CareerCoaching Chatbot
Just threw together this chatbot for life coaching / career coaching
1) We could, yes! It just hasn't been a priority yet
2) If the docs are open source you just need to provide the url to the github repo where they're stored and we will be able to ingest them. Submitting PRs to update the docs will be more difficult though
A lot of top indie games like Cuphead, Hollow Knight, and Neon White are all Unity too.
I doubt there is a concrete answer. Many bacteria produce amyloids as a normal part of their body. Amyloids are just one specific type of protein fold stacking on each other, and it is so, so common.

Same thing with SCFAs, they are normally part of the metabolic cycle of many bacteria. Tracking down one of them is nearly impossible from something as complex as the gut microbiome.
It depends on the context. When I’m cruising HN, I have no interest in watching a video. When I’m watching TV, the same video might be perfect.
The link doesn’t actually cover all the material listed, only the first 27 minutes. It looks like the relevant stuff came later.

Was that higher fraction compared to equally drastic calorie reduction in other methods in a RCT?
Urban buses spend almost all their driving time on roads with pedestrians.

The statistic needs to be vehicle type in accidents in urban areas.
I use bc all the time :)
Please do realize that according to your own web site (https://www.brandons.me/) you're a javascript developer having opinions on why Godot is supposedly catching up with Unreal Engine to the point that it's becoming a threat.
I've noticed other projects stopped shipping when GPLv2 became GPLv3

Also, I noticed they've been technically in violation of the GPL for years with bash - they never shipped source for rootless.h/etc
The khan academy approach is right imo. You just tell the models that they should help you through the problem rather than answer it for you.
I expect Australia will never see them, or at least not until they are technologically obselete.

Im already scrounging my pennies for some flavour of Aya.
There's nothing ambiguous when the epoch is known and the previous one is long gone. So you're confused about restarting a timer every 50 years, ok.

It's not true that it's much simpler to work with two 32bit words for a date than working with simply restarted clock. Basic arithmetics cannot be used reliably so every operation must go through a library like i.e. bigint used to require. This complicates the system and the goal of having a reliable 32bit date format in the future is for simplicity.
In 2023 don't write java but kotlin code.
We're thinking about attending this year's conference, so maybe we'll see you there :)
If you need a truck to do truck things, no. If you use a truck as a regular passenger vehicle, maybe.
GNU `bc` is a command-line arbitrary-precision calculator language [1]. It seems the parent comment's author implemented an alternative version that is now shipping in macOS, presumably because Apple doesn't like the GNU licenses.

[1] https://www.gnu.org/software/bc/manual/html_mono/bc.html
Anstream: Simplifying Terminal Styling
Yes, but there isn't that much of a point to it. For fields where the terminal degree is a Masters (e.g. Master of Fine Arts, Master of Business Administration), there's usually some jobs that will require them. For fields where the terminal degrees is a PhD (e.g. STEM fields), there isn't much you can do with a Masters that you couldn't have done with a Bachelors.
You have confused "metaphorical truth" with "heuristic". You can actually verify that a specific gun is not loaded and thus know for certain that not all guns are loaded, this (among several other things) means it really isn't metaphysics at all..

Metaphysics are u
The 7B model brought up rape on my 3rd try out on an innocuous prompt.
which Api precisely ?
GPUs have implemented tessellation shaders for a long time now, and they can be used to implement what you describe. The Xbox 360 already had them, but it was too slow at the time so not used much. If I'm not mistaken, later generations have used them extensively.
Not 20 years of turmoil, only about 4 or 5 at most.

If anything, Linux has a lot to thank SCOG for. It answered once and for all that Linux was a free and open 'UNIX-like' implementation that was 'clean' and available for use by all industry.

Since then, Linux has become ubiquitous, even if it's not readily discernible that it's the underlying digital foundation. 80% of the world's mobile phones (hundreds of billions) have Linux under-the-hood, as do billions of smart-TVs, billions of domestic wifi-routers all over the planet, and in millions of motor vehicles.

If anything, Microsoft which was all-powerful back in 2002, and bankrolled SCOG behind the scenes, has declined and is now 'just another software company' whose Windows and Office subsidiaries are not the all-important cash-cows that they once were.
https://archive.is/MMGLw
It's basically a semantic issue but I don't think the negation of an undefined proposition is true, I think it is undefined. (Thankfully the universe does not run in JavaScript, where !undefined is true.)
Oh, wow. Your API story just described how I spent eight months of 2022.

I thought I was going crazy.

Now I'm sad that this is just how it is in tech these days.
1400 FIDE !=. high level blindfolded player.
Show HN: UrRong: A place for gratuitous disagreement
Sounds like Rupert Sheldrake[1] is finally getting through to people,

1. [A New Science of Life](https://www.sheldrake.org/books-by-rupert-sheldrake/a-new-sc...)
Rights don’t come from the constitution. They just are. If someone is not causing harm, then there is no harm being done. Doing (or threatening) violence against people you may think will cause harm using “the government” seems to be more and more popular every day.

Edit since I can’t reply further down: “Reproductive rights” as you call them are also something that doesn’t come from laws or the constitution, whether the constitution protects it or not. Regardless of one’s moral standing, it is never up to other people to decide what is right or wrong for me. That is for me to decide. My rights end when I cause harm to another being, as as defined by the other being who claims to be harmed. No government or papers are needed.
Poor creatures. The link is very NSFW and is not for the faint of heart.
You can also tell it to restrict how it answers so it asks you questions rather than giving you the result.

https://blog.khanacademy.org/harnessing-ai-so-that-all-stude...
Not sure how large you mean, but for <=3 kids: walking, metro, bus, cargo bike, taxi. I'm in NYC, and I'll take a 10 minute walk to the supermarket with my kids over a 10 minute drive any day.
> If you exceed this then get a truck.

Which he just said he did...
I was surfing market analyses one day, and stumbled on this: in the US, the largest personal care product category was shampoo, but in India, it was skin lightening products. And then I found a multinational doing shampoo to be beautiful ads in the US, was doing whiter is better ad campaigns in India. Which long-term gave the former a rather different taste.
So if you don’t like or want to help people or have the patience to do so, why do you use a website like stack overflow? Not everyone is as smart or at the same level as you.
Life reduces local entropy.
I feel like this is a silly connection to make. Literally any technology is useful for killing people, it's just a matter of how much it's useful only for killing people. Common sense understanding has world changing applications.
I just had an amusing daydream about routers adding GPS to handle this. And having to ask my grandma to go outside and hold her router up to the sun for a few minutes.
Typical American went to France/Nice for a week. It is astonishing how many more small cars can fit and move around roads than a bunch of SUVs.

The "personal space" of an SUV is gigantic, while driving around in small cars you have a vastly better sense of the road and people around you. If everyone is driving cars, your visibility of the road and traffic is far better because you can see through the windshields of cars in front of you.

AND THOSE GODDAMN HEADLIGHTS.

When the human race was first getting mainstream education on global warming in the late 1990s, the United States of America collectively decided to basically double the weight of its vehicles, and squander engineering wonders that vastly increased the fuel economy of vehicles.

If the demand and desire for these is really so great, slap a $10,000 surcharge + $1,000/year fee on their ownership and redirect all of it to BEVs and alt energy.
Savers Pile Money into Bank CDs as Rates Top%
How overusing social media affects your dopamine levels
I think it's important to understand the why behind people buying these cars. One can bullshit on how terrible (light-)trucks are all day long, but that won't change a thing. The market exists and it's not going to shrink anytime soon.

I'm thinking of getting an SUV. Why? Well, because my family is growing and at some point we won't fit into a regular 5-seater.

I would love to live in a city primarily designed for walking, but such cities are overpacked and have crazy high real-estate prices.

Before bullshitting on SUVs, maybe it's worth looking into a core issue - start investing into a smaller cities, incentivize corporations to leave New York, San Francisco, etc. - spread them all out across the US and create the smaller versions of Manhattan.

I could be wrong though, but that's my take on it.
What's the threshold where me owning a truck is okay to you? 10% "truck" things? 50%?
This seems like a bad idea. But hey, to our congress that has no concept of money or anything, of course it seems like an amazing idea.
It's not wrong to like trucks, and not wrong to dislike them, by the same token.

I'd like to learn more about electric trucks around you. The only electric sorta-truck I see arond here in NYC is the new Amazon delivery van, which has low bumpers and excellent forward visibility. All other electric vehicles are cars, scooters, and even smaller devices.
Congress standing up for the interests of the little guy with more than $250k deposit.
Macron uses special powers to force through plan to raise pension age – France
I wrote the above article, and I wrote this, too:

https://www.theregister.com/2022/07/11/raspberry_pi_desktop_...

RasPi Desktop is the x86 version of Raspbian. It's exceptionally lightweight, uses just 200MB of RAM at idle, and yet it's just Debian and will run any Debian tool or app.

It uses about 1/3 to 1/4 of the RAM of any Ubuntu flavour, and I've tested them all and published the results:

https://www.theregister.com/2022/08/18/ubuntu_remixes/

Some Redditor did the same for Debian with comparable results:

https://www.reddit.com/r/debian/comments/qmbizl/real_measure...

Raspbian PC's usage is lighter than stock Debian + LXDE, and it comes nicely preconfigured.

It's easier than Debian, smaller, and uses less resources. What's not to like?
Would you mind explaining why the car seat makes the difference here?

(I'm unfamiliar with modern American trucks, it's a long time since my last visit.)
But of course, that misses the nuance. Lots of US-based readers come from Ukraine, have friends or family in Ukraine, or friends or family in Russia or another neighbouring country. Of course, that might be fine if your media hypothetical outlet is just one of many. But then people will probably just still end up the ones with categories #2 and #3 regardless.
Why would you think telling it to play a perfect game, predicting all next possible moves, would help?

That definitely made it worse.
This is a long article and the first bits comes off fairly condescending so I stopped reading…but one thing caught my eye:

“If you are a programmer, try to find an answer by reading the source code”

This is basically a superpower at any large tech co if only because few people do it, even though we’re literally all capable of it. When I inherit or start interfacing with a new service, the first thing I do is checkout the code and peruse through it. Even just 30-45 minutes, for an experienced engineer, is enough to get a feel for the layout of things. Then when you have a question about “How does X service handle Y scenario” you can just go read the code and know the answer exactly.

I can’t tell you how many times I’ve had the answer to a question and get something like “dang rco8786 how do you know so much about how everything works” and invariably my answer is just “I read the code”.
I can't wait to be in an ambulance that doesn't cost me $3,000 per mile and crashes less than humans
What makes you think that rights come from “the law”? Do you think that because some people you never met wrote something on a piece of paper, it becomes right or wrong? What if those people that wrote it believe that killing babies is good for the environment? Is it okay now?
Your (non-technical) clients want to query the company's data, which is stored in who-knows-what way (Redis + Mongo + Postgres + Kafka + hdf5 + network filesystems with Apache Parquet files, whatever wakes you up at night). They just want to write filters in a trivial `some_field > 3 and otherField * 5 < thirdField` way. You implement this, but they keep asking for more functionality and syntax to this little DSL. The obvious answer is writing a parser, what the parser generates is dependent on the backend. Maybe you generate a lambda filter for the collection, maybe you generate an intermediary AST which you then traverse to generate a query for some DB or multiple of them. I've had similar requests in both medical and finance fields.

Your predecessors had zero regard for C programming best practices, leaving you with a pile of supremely brittle code that just barely works, but you have to tiptoe around it in silk gloves whenever you want to modify it in any way, because of unreasonable standards on ownership, calling conventions, concurrency, whatever. They might have had a reason in the beginning, but now it took over creating a monster that no regular programmer can work on. They didn't think that the code will ever need to be multithreaded. This is no environment for a sane person. A young, inexperienced fool would suggest to rewrite it from scratch. You know better. The whole business logic of a working, profitable business is imprisoned in this pile of shit, and yet it's too far gone to continue forward with it. Nobody understands all the silly rules of engagement with the codebase. You decide to: 1) break everything into chunks, 2) write extensive unit tests, 3) use automated tools to fix the whole codebase yourself to some sane standard. Some of the automation can be just grep + xargs + sed, some is much more complex. Regex replacements are unreasonably efficient, but not omnipotent. The only sane way to fix 40k LOC at a time is to write tools that operate on the AST, find toxic patterns and smartly replace them. This takes dozens of iterations, but you can always roll back with git. You're not transforming the code incrementally, you're writing a transformer. Eventually, your fixers are good enough that they fix 95% of the issues, you fix the rest manually. Your company can now hire any old mediocre C dev off the street, and this dev can productively contribute to the rejuvinated codebase. The company no longer needs psychics, regular C devs will do. If they stray from the path, the newly set up CI with dozens of custom clang-tidy plugins swiftly puts them back in their place.

Your company is in a highly regulated space that has insane coding standards. There are (shitty) compliance tools that cost >$100k a year for your team. You're able to replicate 80% of the functionality of the tools, fix some issues and generate compliance reports from the code on this in ~8 months. Slap on some CI, and the bean counters don't even have to do anything but download the latest PDF report.
This idea of time's relation to entropy is pretty iffy. I recommend this book https://news.berkeley.edu/2016/09/20/new-book-links-flow-of-....