Hacker Newsnew | past | comments | ask | show | jobs | submit | procrastinatus's commentslogin

Bridgestone - Shojiro Ishibashi (Ishibashi is spelled with the characters “stone” and “bridge”)


I wonder what the folks at graphite.dev think about this announcement.


they seem more focused on the code review part of the process, while this is more of a platform level change.


How does this compare with Stripe Treasury (banking as a service)? https://stripe.com/treasury


Engineer at Column here! The difference between us and ALL banking as a service companies (Stripe Treasury, Unit, etc) is that we are the actual underlying bank in the transaction. BaaS companies usually wrap one or several banks (like us) to provide their API's.


But what is the practical difference to the API user? This seems like caring that about how the API is implemented, which is usually not a concern for a SaaS consumer.


Could I create a bank account for personal use that has api access? Or is the product only for businesses that issue cards and accounts to others?


Yup. You can sign up today for sandbox access, and then contact us once you are ready to go live and move real money.

Truth is, we probably aren't great as a personal checking account, and thats not really the intended use case. But you are welcome to try us out and see what you can build!


Daniel Lemire’s simdjson probably belongs in this discussion and I would be surprised if it is not the fastest tool by some margin.

https://github.com/simdjson/simdjson


For some specific cases simdjson might be the fastest but it does fare as well in other cases as seen here: https://github.com/ohler55/compare-go-json or here: https://github.com/ohler55/ojc/blob/master/misc/compete.md. Parsing the JSON file is only part of the solution though. There needs to be an efficient and easy way to extract the data of interest. OjG (https://github.com/ohler55/ojg) has a JSONPath implementation for that. Written in go is a high performer.


Wow, I will check it out, thanks!!


Do analogous tools exist for GCP and Azure?


Not sure. I did uncover a ridiculously destructive approach to abusing Azure Service Principals in CI/CD pipelines that deploy infrastructure in Azure (Confused Deputy problem): https://kmcquade.com/2020/11/nuking-all-azure-resource-group...

for sub in `az account list | jq -r '.[].id'`; do \ for rg in `az group list --subscription $sub | jq -r '.[].name'`; do \ az group delete --name ${rg} --subscription $sub --no-wait --yes; \ done; done;


>I did uncover a ridiculously destructive approach to abusing Azure Service Principals in CI/CD pipelines that deploy infrastructure in Azure (Confused Deputy problem):

> for sub in `az account list | jq -r '.[].id'`; do \ for rg in `az group list --subscription $sub | jq -r '.[].name'`; do \ az group delete --name ${rg} --subscription $sub --no-wait --yes; \ done; done;

The CI provider giving you an over-privileged SP to play with needs to fix that, sure. SPs start with zero role assignments, so it's particularly egregious that they gave it unnecessary permissions.

(Though, for the CI providers I'm familiar with, you the user would be the one creating the SP and providing it to the pipeline. So making it over-privileged would be your mistake.)

But it's not a Confused Deputy problem when you have a service principal with delete access to all resource groups in all subscription and tell it delete those resource groups. Confused Deputy involves a higher-privileged server forgetting to downgrade its privileges on behalf of a low-prvivilege client. The SP is the client in this case - it was created with high privileges in the first place.


One thing I haven’t seen much mention of is getting things to run on the M1’s neural engine instead of the GPU - it seems like the neural engine has ~3x more compute capacity and is specifically optimized for this type of computation.

Has anyone spotted any work allowing a mainstream tensor library (e.g. jax, tf, pytorch) to run on the neural engine?


George hotz got his "for play" tensor library[a] to run on the Apple Neural Engine (ANE). The results were somewhat dissapointing, however, and currently it only does relu.

[a]: https://github.com/geohot/tinygrad


Who is the Matt Levine of other fields (e.g. law, medicine, etc.)?

I believe there was a thread on twitter about this, but can't find it anymore.


I’m surprised no one has mentioned what I see as the biggest failings of notebooks: poor handling of connection loss / re-connection. The kernel will continue to run, but a connection hiccup will often make the notebook UI stop updating (and lose any kernel output).


This is superb!


Thank you! I've written a follow-up article: https://news.ycombinator.com/item?id=21484016


Differential privacy seems like a pretty good approach to this problem. https://machinelearning.apple.com/2017/12/06/learning-with-p...


K-anonymity is the other thing i've come across:

https://www.privitar.com/listing/k-anonymity-an-introduction


Differential privacy is basically a buzzword. Don't believe the hype.


It seems to me that diffpriv is a nascent area of research that has not yet been bastardized by the business community. The complete opposite of a buzzword.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: