skysight-inc/HackerNews huggingface dataset:
Even worse, D+ streams 4k HDR at no extra cost. And, subjectively, seems to have a higher bitrate or better compression than other popular services. (Looking at you and your garbage compression, Netflix!)
In the car analogy that would be more like all the trim levels and hardware addons being hugely overpriced... but that's definitely not a new thing in the car world.
Please, have a look on Haiku OS' icons.
> Police believe that when James Rogers got into the vehicle, a cable became loose and cut off the power to the operate the horn and locks. Rogers did not know how to manually unlock the vehicle and became trapped inside

> the 2007 Corvette has a manual release located on the floorboard by the driver's seat

Having random cables cut doesn't help the situation, but the issue was not knowing how to manually release the latch and not having an emergency window breaker.
Ransomware operations rarely request cash payments, to note one example.

If your M.O. is to commit crime at a distance, cryptocurrency is ... gold.
My Nissan Versa has manual locks that do not unlock when the door handle is pulled from the inside, to include front doors (not a child safety lever issue). Granted, they’re manual so it’s easy to just unlock but from a human factors perspective I can see people panicking and just yanking on the door handle in a critical emergency like a fire.

I’ve always considered this a serious safety design flaw.
Anyone between the site and the user can inject any content to the site.
I practice "シアノアクリレート継ぎ", which is the same thing but using cyanoacrylate adhesives instead of gold. I'm not sure how food safe it is though.
both send emails and both allow user email creation (with mailgun it was virtual email forwarded to personal email).

I had to switch to gsuite because hubspot doenst allow external smtp server to send out emails and we couldnt use mailgun.
I have the one with the seat belt cutting blade in the handle hanging on a loop on my truck dashboard.
Separately I think all cars should be required to have manual door locks (as well as electric locks if it's a luxury car). I also think all BEVS should have a manual battery ungang lever for trapped energy emergencies.
I suspect the NGO in question simply has no idea of how many people were using their news-feed. If it’s not in the Google Analytics report, it’s not being used.

Many modern website managers (unlike the “webmasters” of two decades ago) are either unaware that web server logs exist and can provide useful information about web requests (in a privacy-respecting manner) – or they might not have access to them.
It's entirely possible and it's still so early that we're still guessing. But so far some companies have come out to say that they've seen exploitation only as early as a few weeks ago.

Companies likely only started IR in the last week. Breach notifications, which only a minority of companies will bother to send out, will be a few weeks away at the earliest.
I think they lowered it quite substantially, at least now mine is around $40, which is much more reasonable.
It was pointed out to me above that the 2.5 hour figure is spurious. (Cliff Mass apparently didn’t account for the fact that time stamps on tweets display the time of the tweet in the reader’s local time zone, not in the OP’s—or OT’s in this case.) So, NWS Paducah tweeted that alert at 9:03 CST, effectively contemporaneous with their issuance of the PDS warning. Still a pretty good lead time for a TOR warning, but nothing like hours of notice. In any case, I stand corrected on that.
Spaniard here. If the most powerful country in the world can't manage that at federal level, then the US is broken from its roots.
What you're witnessing, and participating in, is the epistemic and rhetorical battle over that future.
> Despite the incident in 2018, Mailgun appears to be giving an excessive level of access to customer data to employees who do not need it in 2020: Joe had access to specific customer domain information, and didn't hesitate to use it purely to try to sell me something. From this, I infer that it is likely routine that sales staff examine customer data without any kind of control or approval. I don't think this is acceptable.

Same thing happened with me on GoDaddy. I used GoDaddy's domain purchase system to negotiate and buy a domain, and transferred it to Cloudflare. A few years later, a GoDaddy buyer contacted me about buying the domain. The only way they could have gotten my email is to trawl through their past purchase records since the domain wasn't using any GoDaddy systems (DNS, email, etc) after it was transferred out.

I sent a very unhappy email back to them and I've been transferring my domains out to other registrars. I no longer recommend GoDaddy.
I've seen very similar ones with GDPR regulation posted on twitter, claiming to live from a country from outside the EU. So far most people think it's an attempt to check if the email address is valid and if a real human responds.

My personal theory is that somebody want to collect URLs to build an auto-submission tool for data erasure requests (like something saymine.com does though they send emails on behalf of users).
Ah, I missed that, thanks.
Financial support is absolutely a must-have. If the furnace/boiler goes out, most people can't "afford it", but do what they must to make do. So proactively replacing their equipment is not really viable without financial support. And to make matters worse, proactive replacement is really the only option. If the furnace/boiler goes out, you must fix/replace ASAP and that leaves no time for installing PV or a heat pump.
This is quite a bit of infrastructure for an app that hasn't launched yet. If it's not too late, consider simplifying by removing RabbitMQ or Redis. Perhaps even getting rid of both, and only using MySQL. Maybe your workers could become cron-jobs or threads.

For hosting, consider Heroku and Heroku add-ons for MySQL, Redis, and RabbitMQ. You could run workers in Heroku as well.

It would be possible to run this entirely in a VPS as well and fairly straightforward. I've also had success running the web app (with postgres and redis) in Heroku but the workers on a VPS.
That's just always what I was taught, but I suspect in general if you're in a car without nearby access to a building, you're in bad shape no matter what you do. FWIW:

https://www.cdc.gov/disasters/tornadoes/during.html

"If you’re in a vehicle, Do NOT try to outrun a tornado

* Don’t try to outrun a tornado. Drive to the closest shelter. The least desirable place to be during a tornado is in a motor vehicle. Cars, buses, and trucks are easily tossed by tornado winds.

* If you’re unable to make it to a safe shelter, either get down in your vehicle and cover your head and neck or leave your vehicle and seek shelter in a low-lying area such as a ditch or ravine.

* Stay away from highway overpasses and bridges."

None of the other scenarios, such as being in a mobile home, mention anything about getting in a car.
Actually we specifically bought green hydrogen for political reasons. The extra cost was tiny compare with the entire cost of the project.
Children are a vector for spreading the virus, this really isn’t complicated.

The psychological “trauma” of wearing a mask is nothing compared to what these kids will feel when they give grandma covid over Christmas.

It’s not about them.
How is it configured? Electronically or through a switch on on the door jamb?
I don't have much data here that's public. That said, Intel's AVX instructions generally give big advantages to range scans and other analytical workloads (as well as ML inference), while they don't help much for transaction processing. It depends on the DB and the workload. I would expect transactional benchmarks to look good for Graviton.
This is really cool. I've worked in the Emergency Management space for a decade, and this is a clear win - great idea well executed, so kudos. Even if people never look at them, the process of creating them and thinking through personal disaster responses is hugely valuable (plans are nothing, planning is everything). Well done.

It's scope creep for sure, but I'd love have a version of this for international travel that populates local consulate/embassy offices, visa numbers, airline, hotel numbers, and personal emergency medical info in the local language. I had a coworker that would make international travel wallet cards for folks traveling abroad - it was pretty cool.
Ask HN: Few Ideas for a Dating App
I have no interest in making this app, i just want to know if you think this would make online dating more functioning with better experience, or did i just listed a series of awful ideas?

1.in order to have a decent dating app, you should make the guys pay monthly fee. (to keep a good ration between men and women)

2.have a very solid sign up process for both men and women, tie their actual identity to their profile. name, picture, job, income, background check etc

3.have a filter system based on age, race, height, weight, job, IQ etc (options for this filter is limitless to a point where even same genders can use it to find friends.)

4.profits for this app only comes from subscriptions. no need for a hungry algorithm that encourages compulsive swiping.
This has been a very intense debate in lebanon over the last two years.

A technocratic gov will still have to make political decisions. And those decisions will often reflect the interests of whoever’s hired them.

But in a way it will shield the political class from criticism since they are not the ones implementing the decisions directly.
Not really, because log4j now restricts JNDI-LDAP queries to localhost by default, or to an explicitly configured list of hosts. An attacker would have to have access to the application configuration or start script.
Apple Releases Nudity Detection in Texting in iOS 15.2
The first book is fantastic, in that it makes a very good portrayal of extremely intelligent children, and how their lack of wisdom and experience allows them to be manipulated.

The movie completely missed this point.
> I’m paying a lot of money to live here, but for what?

The weather. The high cost of living in the bay area and California is largely about the weather. People come to California for the dream and stay for the sun.
Interesting, I find that I spend a day or two getting everything 'right' for me, which tends to end up in this exact state where it's both boring and pleasant to look at. I also use a solid black background.

example: https://files.catbox.moe/fr6hq9.png
Cost is part of the preference, I agree. I think though that we're not accurately capturing the true cost. The suburbs appear to be cheaper and they very well may be on an individual level, but are they cheaper for civilization? How do we price in your commute, for example? Or the cost of roads or the government building a new power plant? I don't think we have great market mechanics for this which makes the cost comparison a little difficult to do to begin with.

But to the point of the person you are replying to, the price of a house in almost any reasonable case I can think of reflects desirability for one reason or another. If you see that suburban homes are cheaper than a mixed-use, medium density neighborhood (the kind that everybody visits and take pictures of) that would indicate that the preference is for that. Though I guess you can argue that due to lack of supply that the cost is increased.
It would be interesting to have some insight into how much UX / UI goes into macOS and Windows releases, especially if things are tested with representative, non-technical users and then sent back for changes. My cynical take aligns with yours, for every clever small touch there seems to be a half-dozen awkward design choices to work around.
Yeah, brand absolutely matters unless you're in the cycle of never ending car leases. Then I suppose it doesn't really matter since you're likely to get a new car again before longterm maintenance ever becomes a problem.

For those who buy CPO's or with cash, longevity and maintenance are the prime factors for budget car purchasers.
They are not photorealistic?
But also not necessarily very good icons, to me (not quite representative, at least in some cases), so I'm not sure what point you're trying to make...

https://github.com/darealshinji/haiku-icons/blob/master/png/...

https://github.com/darealshinji/haiku-icons/blob/master/png/...

https://github.com/darealshinji/haiku-icons/blob/master/png/...
The infrastructure is completely paid for. Automotive companies extensively monetize telematics data even for cars which do not have telematics purchased. Where you go and when - and things like air temperature, whether the wipers are on, etc - is all sold. It wouldn't surprise me if they pass along data from the infotainment system as well.

Ford offers a bunch of free telematics services for fleet operators. You can pay them and get more functionality, but they'll track your fuel economy, odometers, fault codes, etc - with a really slick web UI.
Then as an educator you are doing your students a disservice and allowing your personal bias to impact their future.
Some hashes are.

There are non-cryptographic hashing functions.

https://dadario.com.br/cryptographic-and-non-cryptographic-h...
Reading those comments, there is little sympathy for RMS.
> Based on what I've read about the timeframe of tornadoes, I think a corporate policy of having people leave the building and go to their cars is a recipe for a mass casualty event in the parking lot.

I was originally talking about emergencies in general. Not to specifically evacuate during a tornado.
Yeah, this sort of conversion is pretty common for the core of arithmetic/range decoders, and I definitely don't expect a compiler to be capable of the sort of transformations needed to convert the branchy form to branchless.

Though I'd expect compilers to be at least 90% as good with the ternary equivalent to the asm, e.g.:

tmp = code < bound ? ~0 : 0;
range = code < bound ? bound : range;

compiles tmp to xor -> setl -> neg (clang) or setge -> movzx -> sub (gcc) instead of sbb, but on arm64 they use just one csetm (clang) or csinv (gcc) which is basically optimal, and in all cases the comparison is reused for the cmov.

https://godbolt.org/z/jPbo3qc1Y
Your "your" was unclear: I also at first read it as "your, the FOSS devevlopers', problem".
That still seems like an extremely small window of time to remain on the good side of "responsible disclosure" for a vulnerability of this magnitude. The fix was only released 3 days before public disclosure.
The first paragraph:

> When the Space Shuttle retired in 2011, stranding the USA without access to orbit, it took a retirement tour around the country. As it was carted from city to city the images played out nation-wide in funereal Americana. Despite the uplifting rhetoric and crowds, it was clear on TV we were watching a casket be carried out, and it seemed then inevitable my generation would be Earth-bound our whole lives.

The Space Shuttle was a metaphorical casket, because in 135 missions, it failed twice, killing all on board.

Are people nostalgic about the original de Havilland Comet? Were they disappointed the Boeing 737 MAX was grounded until it was redesigned?
Well, it's partially because police salaries are based on the rate of solved cases, no? Surely there is underreporting. And the homicide rate in Canada (which includes unintentional manslaughter) isn't much higher than the reported rate in China and we're fairly well armed by international standards:

https://en.wikipedia.org/wiki/Estimated_number_of_civilian_g...
John Wilson, the Genius Behind the Weirdest Show on TV
> Have you considered hosting the APK on your own website? You would need to build your own update function, but it could be a periodic fetch of a version file, and if the version is newer, download the apk and when done prompt the user to upgrade, opening the (already downloaded) apk in the system installer if they agree.

Apart from vending on F-Droid, this is what we do as our app is pretty much under perennial threat of a PlayStore ban.

1. We plonk the apk in a not us-east-1 Lightsail Object Store [0]. Smaller sized apks (if less than 25MB) can be instead stored in Workers KV, which comes with a generous free-tier. Or one can split larger apks (if less than 100MB) and join them in a single buffer in Workers before sending out.

2. Front it with Cloudflare Workers, and use their free-to-use Cache API [1] to avoid hitting the relatively expensive Lightsail endpoint often.

3. The app-update api-endpoint is also on Workers. Latest app version-code is stored in a Workers env-variable. The origin Lightsail path in a bucket is a hash(versioncode+salt).

This setup costs less than $1/mo and we drive multiple TB traffic, with only ~5GB hitting Lightsail.

Fly.io also has a neat CDN-esque solution for this [2], whilst GitHub's also a viable alternative [3]

[0] https://lightsail.aws.amazon.com/ls/docs/en_us/articles/buck...

[1] https://developers.cloudflare.com/workers/runtime-apis/cache

[2] https://community.fly.io/t/first-look-static-asset-caching/

[3] https://docs.github.com/en/repositories/releasing-projects-o...
https://archive.ph/EguKg
See the description here for the rationale why JNDI support was added: https://issues.apache.org/jira/plugins/servlet/mobile#issue/...

Nobody there seemed to be aware that the log message text itself is also subject to lookup syntax interpretation and that this would be dangerous given that JNDI also allows remote code-base download and execution from the specified URL.
Comprehensive means going from networking to configuring NGINX as a load balancer. And everything in-between.

But to provide more value I chose certain language runtimes and databases, because writing only in general is not as useful and tangible. What it means is that a chapter on application servers goes through some options you want to look for, and after that discusses configuration of Puma and Gunicorn as examples.

So if you are running Node.js, I don't have (currently) specific configuration directives listed, but you would know what to look for.

I might add more to the current list, but obviously I can never cover everything.
Never watched them, but two new seasons were produced recently.
When I contemplate buying something, I care about the value it delivers to me, not the cost required to provide it.

If I get $8 of value from something, it doesn't reduce my willingness to pay if I suddenly learned that it cost $0 or $1 to provide it rather than $5 or $6. Likewise, if I learned that it cost $10 to provide it, that doesn't make me suddenly willing to trade away $10 or $11 for something that's worth $8 to me. (In a negotiation, I might negotiate differently if I knew the other side's cost structure, but in a "take it or leave it" sale, I decide based on the value to me not the cost to the other party.)
Stellantis (the current owner of Chrysler/Jeep/Dodge/etc) has announced that they hope to get $22 billion a year from their customers through post-sale service charges.[1]

“Software will improve our business model, disconnecting hardware from software ... shifting the center of gravity of our business,” Stellantis CEO Carlos Tavares said Tuesday during the company’s “Software Day.” Tavares said profit margins for those services are expected to be more comparable to those of a technology company rather than a traditional automaker. The additional revenue stream could potentially double what the automaker makes today, CFO Richard Palmer said.

[1] https://www.cnbc.com/2021/12/07/stellantis-plans-to-generate...
Well - maybe if ads in the linear feed were not treated like every other kind of "information" and actually did not allow "Likes, Comments & Shares", I could agree with you a little more.
Gasping for air as a crack in the radiation shielding compromised the living quarters…

Err, hmm…
> Your previous comment indicates you would try and leave, which is ultimately your choice but also goes against all the expert advice of what to do in a tornado.

I was not specifically speaking about a tornado but emergencies in general where evacuation is necessary (such as a fire).
> Renting cars has always been a bad experience. Terrible websites where you don't know what car you're going to get. You arrive and they try to upsell you on a car. The employee spends 10 minutes filling out forms...

Join their frequent renter programs (no need to be a frequent renter). Then you can generally just walk to the lot, pick a car and go.
Does this routing happen before or after log4j would be exploitable? Like if log4j is still running its parser and doing all the crazy stuff, but then routes to some other logger, it doesn't matter.
Wait until they put in eSIMs. Those you can probably disable as well but with a different level of expertise. Or you can damage the antenna or just stick aluminium foil tape onto it.
In general, contracting something out can be useful if you have some specific task to perform. We use a bunch of agencies and other outside firms. But it's almost always for something specific like running a webinar series on $X or providing social media tooling or other things like that.

Marketing also covers a very wide spectrum. For a small operation, the person you might hire to create content and/or messaging for a product is probably different from the one you would hire to create a digital demand generation program.
I agree it's possible, but their services offerings are all paid, and there are enough of them now that a discount bundle exists[1]. And then there's the App Store / iTunes / iTunes Match. Even checking out to buy hardware tries to upsell you AppleCare+ service.

There are many reasons it's done this way, but I can see the reasons people might compare it to being turned upside down and shaken for loose change like a piggy bank.

[1]: https://www.apple.com/apple-one/
It is such a good feeling. One time I showed my ID to get a hotel room and the receptionist politely told me my boyfriend had to actually be here, I couldn't just use his ID. He got so awkward when I explained we were the same person, it was delightful!
I thought AHK on Windows was awesome but was disappointed when I moved permanently to Linux and found it was not ported. Autokey is doing an ok stand-in job. I suspect Hammerspoon is good. I've never been on a Mac, maybe some day when I sell the mare.
From what I read the patch is public and when someone saw it figured it out and publicly shared it.
When did an active software engineer last get elected to use their skills as a politician in your electorate?
You can get a car that doesn't run on gas.
Log4J version 1.x met end-of-life in 2015 [1]. Of course, that's only 6 years ago, so there are still projects out there running it. It would look for -Dlog4j.format... and would not know about -Dlog4j2.format... or, hypothetically, -Dlog4j3LTS.format...

Environment variables targeting Log4J version 2.x should get the prefix "log4j2.*" [2] so the latter is correct.

In the end it doesn't really matter if you declare an environment variable that's never read, so you could define both if you're not sure which version of Log4J is used in your stack.

[1] https://logging.apache.org/log4j/1.2/

[2] https://logging.apache.org/log4j/2.x/
I have remote start on my Subaru and I think it's essentially this:

https://www.subarupartspros.com/sku/h001sfl300.html

On that page it says:

> This Genuine Subaru Accessory is an alternative for customers who do not enroll in STARLINK Safety and Security Plus.
Two Western technocrats were Margaret Thatcher and Jimmy Carter. Neither had a good legacy, though for different reasons.

Interestingly enough, they are also both from different ends of the political spectrum.
> and never will

don’t humans continue evolving?
How long will it take to produce a collections robot? Bounty hunters are expensive.