skysight-inc/HackerNews huggingface dataset:
Interesting read. While the general consensus on the comments here so far are "why be so rude" -- I don't think this was rude at all.

I'd be similarly upset if I was treated this way by someone from marketing.

Edit: From a second read, I really don't see any of this as rude. You know how it's poor etiquette to start a chat message with "Hey, do you have a moment?", And it's much better to just write the question and wait for a response?

This is the email equivalent. "Request too vague, I don't want to meet. Please specify further, unless this is a sales pitch, in which case, preemptively not interested." It's not passive aggressive, it's just business.

If I had received, "You're right, this is a low effort sales pitch, and it works", I don't think I'd bother replying. That is an extremely passive aggressive response.
He's also #40 on the all time rank on Stack Overflow - https://stackexchange.com/leagues/1/alltime/stackoverflow/20...
> Want to update your car's computer? $199 per update

$210 after shipping for navigation updates in a GM vehicle. Welcome to the future!

https://gmnavdisc.navigation.com/product/Catalog/Catalog_Che...
The only thing questionable I see here is that random sales employees seem to have access to customer information. It's not clear to me that the information they have access to is actually all that sensitive, though. Delivery rates and whether or not they've purchased a dedicated IP address? Eh, not sure that's a big deal.

Of course, we have no idea what other customer information this sales guy might have access to. And it's concerning that the information he had access to was incorrect, or he was somehow very badly misinterpreting it. Or, worse, he was confused and actually looking at another customer's dashboard, which, if true, would be pretty concerning. These things are perhaps worrisome, but it's not clear what was actually going on here.

I agree that the sales guy was more pushy than he should have been, seems like he was poorly-trained and not good at his job, and I too hate vague requests for agenda-less meetings, but this whole thing seems like an overreaction.
The Typeface work in NGE it's amazing. Despite using the most common typefaces, you can recognize the card titles as the "Evangelion Art Style" despite only using fonts, copywriting and layout as design elements.

Plus I love how Evangelion falls into a middle of exaggerated UIs to have the "hacker look" of /r/itsaunixsystem/, and at the same an amazing level of detail that make sense in their own world.

Like when MAGI it's being hacked by the Computer Angel or SEELE, you can see they use a form of assembly and a Unix System to fight it.

And then, the MAGI system by itself it's an amazing use of redundant architecture with 3 computers that should have the same output. That a system that it's resistant to data corruption, but at the same time working as an GAN AI.

Amazing to think this it's from the 90s, and the most amazing part that those details are just 1% of what makes evangelion interesting.
I think I have had an aversion to it because I think that Orson Scott Card is a homophobic douchebag.

Honestly, though, if I'm going to judge the "art by the artist", I'm afraid that a majority of the music I like is off the table, so maybe I'm drawing a somewhat hypocritical line on that.
What monthly fees of this nature are required to use other Apple products?

OS updates are free. The basic version of iCloud is free. "Find My iPhone" is free. Apple Maps is free. The App Store is free. Hell, CarPlay is free on the Apple end of things; it's some car manufacturers who've been charging for it.

"Public will buy into it because the cost of the car is significantly less than their competition."

Are we talking about a different Apple entirely?
Packaging your applications as docker images from the beginning requires little extra effort, but gives you a number of deployment options and if you grow it will be easy to move to eg. k8s.

Setup your servers using ansible, puppet or similar to lower the requirements for redundancy and backups (if you cant take a little downtime in case of accident)

If you're Europe based, one suggestion is to get two ~$50 servers from Hetzner and run all services in plain docker. (i.e. two servers for redundancy)

Depending on your setup and requirements, it might even be enough to have one server + a cheap CDN and in that case you might even be able to run the server at home or a friends office.
Everyone here is talking about Evan's response, so I may be misunderstanding something, but... If I'm billed for a dedicated email for years and it hasn't been provisioned for me, isn't that a major problem with the service?
It's probably worth refining it to `log4j-core`. `log4j-api` or various bridges like `log4j-to-slf4j` are not affected, but will show up in nearly any spring boot app.
> Ideally, log4j should not have the ability to make "outgoing calls" right?

What is the intended scope of log4j? I spent some time looking over the source code and cannot fathom why something that logs information would need to become this complicated.
Zod looks super cool. I'll have to check it out in depth.
I'm not sure what you're even responding to here. How does it matter that there are areas with high gun ownership and low gun violence? It remains true that a gun gives the means to more easily kill someone, which is all that the analogy needs -- unless you're arguing that guns don't make it easier to kill, in which case I don't know why so many people bother using them.
That would help but it isn't enough. You can still load classes from your class path, and then those would make the calls instead. And log4j does have valid reasons to read/write to files, naturally.

But yes, I think a major issue here is a logging library packaging its own meta language that can trigger side effects.
> You can create a token which expires, useful for licensing.

Can you end the license before expiry? Because if you cannot, then it isn't useful. License holders like to know that they can revoke the license if terms are not met.

> You can create a token which pays royalties to an artist with every sale.

Can you end the royalties? Who gets the royalty when a dispute arises is frequently decided by the courts.

> You can create smart financial instruments which are technically NFTs and which skip the regulation put on the financial industry to perform more risky investments, and even automate functions like profit sharing or paying off a bond.

So, enable one to skip the laws? That doesn't sound very much like something society wants.

> You'd need to run a bank to get most of that and some of that is illegal on a global level so even as a bank you'd have to dip outside the law.

Using a tool or instrument to do something illegal doesn't make it okay to do that thing.
I would say the most dangerous are not the bad-faith actors, but those self-deceived ones who have genuine "good intention" but act out the "bad" consequence.

And everyone of us could be that self-deceived ones, including you and me.
This is exactly the type of commenter he's talking about. Contributing to Gell-Mann Amnesia.
BTF (BPF Type Format): A Practical Guide
There's a bit of racial cheating going on here by assuming the reasons that black/hispanic people are leaving cities are identical to the reasons wealthy whites are leaving cities, and that the trend started at the same time, follows the same lines, or ends up in the same suburbs. It's all glossed over by calling suburbs diverse by citing demographic percentages of all people who live in any suburb.

Black/Hispanic people have generally been priced out of cities by gentrification, and have been forced to move to places that are even farther from jobs and services than the previously neglected urban areas that they came from, and this started when millennials moved into the cities from the suburbs. Black people in particular have had a Southern migration because Northern black people are often only two or three generations from the South anyway, so they have family who can help with shared housing, childcare, and leads on employment.

This could be easily shown by showing rates of outmigration by group over time. Chicago's black population was dropping while its white population was rising. It would also be shown by individual attention to the suburbs that are being moved to, not only would you find that they were very segregated, but you might notice that plenty of them are hellish and poverty-ridden compared to the cities that people moved from.

I might as well quote the entire discussion of ethnicity, which occupied the body of a paragraph with nearly unrelated first, second, and final sentences. Maybe the word "urbanizing suburbs" in the context of an increase in amenities worked as a subconscious trigger to discuss black people moving to suburbs.

"The allure of suburbs has been a trend more than a half-century in the making, but covid-19 offered an additional boost. “Urbanising suburbs”, as Mr Clark them, are gaining amenities but keeping their characteristic sprawl. Contrary to the stereotype of identical white homes with white occupants, today’s suburbs are ethnically diverse. Wendell Cox of Demographia, a consultancy, estimates that 86% of the population of major metro areas live in the suburbs or exurbs. That includes 90% of whites, 83% of Latinos, 81% of Asians and 76% of African-Americans. Latinos, in particular, have been relocating to suburbs at greater rates in the past two decades: since 2000 their number has risen more than 50%, compared with a 20% rise for African-Americans and Asians and just 1.3% for whites. Ross Perot, Jr., a real-estate developer, says he’s “never seen as many people moving into Dallas. It’s shocking.” But far more people are going to the suburbs surrounding the city."

Note: a 20 year trend for non-whites, and a statistically insignificant blip for whites. Yet the article paints everyone as young upper middle class urban professionals trying to dodge taxes and city government.
>I'm curious why most people seem to think $1M is somehow not enough money to retire modestly on

>It's just obvious that you CAN live on 50% more than median wage. Yet at the same time, so many people seem to think this is some absurd proposition.

It is because they have a different definition of modest than you. I know I can live on even less than median wage. I grew up with far less. But my family did not have access to healthcare and good schools or being able to help out family members if they needed support. We were always 1 legal or health problem away from being ruined.

Is living 1 legal or health problem away from being ruined modest? That is a personal opinion. I aim to cover the legal and health risks for me and my family members, so $1M is nothing where I live. I also predict that I need quite a big buffer the way the population pyramid is shaping up, because labor is going to get more and more expensive, along with devaluation of the dollar.

I also think either me or at least my kids (years 2050 to 2100) is going to have to contend with problems due to climate change and access to clean water and air that have yet to materialize, so need buffer for that too.
There are many electric cars on the market that are just plain "old" cars: hyundai ioniq, renault zoe, peugeot e-208, etc... No subscription and they work quite well.
Judging by your comments, you seemed to have talked to the GNUstep maintainers, but they haven't been receptive to your ideas.

May I propose a fork? How about SiDESTEP ® for the project name?
I don't understand why non-apple customers feel that apple is this way. I have a Mac and an iphone and haven't paid Apple a penny since the purchase of the devices.
Globalization has created winners and losers.

The losers were ignored by the winners creating huge gaps in trust.

The winners used to utilize the few media institutes that they controlled to keep a lid on discontent.

Social media has complicated the situation.
With the caveat that I know nothing about mailgun, so may have misunderstood parts of the conversation, it sounds, to me, like the salesman did a few very helpful things...
1. Pointed out that the user had been spending money on a service which was not actually being provided. Presumably, mailgun would correct this error.
2. Exposed that the "mail success rate" which the user was seeing might not be the full story.
3. Showed the user that he was paying for suppressed emails, so could (presumably) save some coin by cleaning up his list. (Note that the cost of cleaning might be higher than the extra payments, but good to know that there's a cost to suppressed emails so that the user can make a judgement.)

This rep was honest ("it was a template"), gave a specific agenda when asked, and gave useful information. Complaining that your rep has access to your data when that's his entire job is ridiculous. Data security best practices are that data should be provided on a "need to know" basis. In order to provide the above 3 values, the rep needs access to that data.
If you look at the bottom of the page, in addition to "Guidelines" and "FAQ" (which you should read) there's a "Contact" link that allows you to contact the moderators. They're nice people, so if you can convince them that you'll use the site differently from now on (e.g. posting less of your own stuff, posting more of other people's stuff that you came across randomly and found interesting) they might decide to make your submissions visible again.

But if you don't want to change what you post about, it might be a better idea to look for some other place to post it.
It means that even if your Java project doesn't directly use log4j as a dependency, nor mention it explicitly, it will be very likely included as a transitive dependency via other libs (and even logging frameworks!) that you use.
The main design mistake in log4j is that it performs ${…} substitution on the complete log message by default. There’s no way for application code using the log4j front-end API to have input data containing such strings be logged verbatim, without nonstandard log4j back-end configuration (someone correct me if there’s actually a way). In principle, each application has to sanitize all strings to be logged by stripping/escaping all log4j substitution syntax from them, to prevent unexpected substitutions.
Some libs might shade log4j. You need to look for JndiLookup.class in all jars.
The murder rate seems a lot lower than the US. Also the "murderers aren't concerned about gun laws" line is specious; a criminal isn't concerned about laws by definition - that doesn't invalidate the reasoning behind passing a law.
I don’t think it is, at least not in my family. Cash is no more of a faux pas than a gift card, at least. I happen to think either is a pretty lame gift. Instead of a gift card to LUSH, for example, just buy me a bath bomb or whatever. Maybe I won’t like the scent you choose, maybe I’ll love it—that’s the nature of receiving a gift. Besides, gift cards are rarely enough to cover an actual purchase with taxes and etc added, so they often end up forcing the recipient to spend some of their own money (or they gather dust until they expire).

I know some people are “hard to buy for” but this might be an indication that you shouldn’t be giving them a gift. If you don’t know them well enough to have a gift idea, or don’t feel comfortable asking for ideas, are you really obligated to get them something?
Given all the gift card scams on the internet, I would think it would be pretty straightforward to convert a gift card into drugs but at a net loss in value.
https://sgi.neocities.org/index.html
I've been in several debates where I was written off being in "bad-faith", when in reality, I just didn't agree with with the popular opinion on a particular subject. It seems people are all too eager to justify their own position by labeling others as being in "bad-faith".
It also implies that money is worth more above all else. What happens when every car company decides to follow this model because it looks great on the short term? Am I suppose to vote with my wallet and start a new car company single handedly? Well no.

This is why we need to legislate these issues and concerns. Saying vote with your wallet is already a losing position, the corporations already have a much larger wallet better to act collectively and enforce legislation.
My Volvo has a remote start option, but it costs $200/year to subscribe to the Volvo On-Call service to be able to use it.
I don't think that this is a problem if it's marketed clearly upfront. The violation here is for Toyota to add this fee on without informing the user of this when they bought it.
It's still very early, we won't have breach notifications for a while since any attacks would have started in the last few weeks at the earliest, and most would have started last week.
Re: "Despite these reservations, It's Still an Excellent Operating System"

They had to say that to avoid pissing off Microsoft too much. Don't bite the hand that feeds you.

In general the changes are to push you toward Microsoft products and online services yet more, and do little for productivity itself. That anti-trust slaps of the past didn't appear to be painful enough for MS to remember them. The burn of the monopoly stove didn't sufficiently train the toddler, and now they are grabbing the stove again.
I am so glad someone else here on Hacker News gets it. I cannot believe that that thing that happened back then about the old restrictions were off limits for the restaurant that Gavin Newsom owned! I say we re-recall him!

Tammany Hall! Attila the Hun! Every tyrant ever! This City's parklet policy is clearly worse than all of that! But it goes even deeper. As we all well know, the Founders' first error was forgetting to give small businesses their own constitutional rights.

I say we are in a magna carta moment for small businesses in San Francisco! In fact, there should be a special mayor of this City who governs small businesses, and any other law shouldn't apply to them unless that special mayor approves. They should actually just run the city! And there should be reverse taxes. We should pay small businesses for gracing this City with their presence. I mean, what ever happened to the god-given right to realize compound interest tax free while benefitting from a City that spends billions of dollars on public infrastructure every year? What is this city, known for being left leaning or something?

Small businesses in this City need to rise as one and demand that every single municipal jurisdiction across the country regard them first and foremost. Especially small businesses that are new and were started by people who weren't born here. They have the MOST to teach this City. The most, that is, other than you, dear Hacker News commenter. I'm so glad you're here.
This is bullshit. I will never own a car that does that (or a car from a company that does that). I recommend everyone here also refuses to abide such behavior. Vote with your wallet. If you don’t fight back against the dystopia you hate, you’ll get it by default.
Before anyone gets too high or too low about this, it might be of interest to check out previous Time Magazine Persons/Men of the Year
Hhhhffhkktfkkg.xxtt
I'm not sure if I'm looking in the right place, but this [0] shows 5-year treasury bonds at 1.25% right now. You can get anywhere from 9% (blockfi, gemini, etc) up to 20 or 30% depending on where you look - much more than 2x.

[0] https://www.treasury.gov/resource-center/data-chart-center/i...
I'd recommend educative platform for your book (as a course).

I wrote my own book about Ruby for beginners https://leanpub.com/rubyisforfun, and converted it to a course, which is quite fun https://www.educative.io/courses/handbook-ruby-developers

Released 1-2 weeks ago, but it looks to me like a promising future - the new format of books that are more interactive. Website allows to run snippets, do interactive assessments, and so on.

The reading and learning is much more convenient.
> though not monthly(yet)

It's already available monthly ($199/mo), thankfully there's the one time purchase option still though ($10,000).
There's a fair bit of difference between being a line manager and a tech lead. You do have a noticeably different dynamic.
I've lived in a major us east coast city up until the pandemic. My tax dollars kept going down the drain dealing with homeless who by in large were not originally city residents. Your opinion that these people were enticed to the city is wholly unfounded and totally made up. Just another reason I've mentally checked out of the debate. Y'all have fun with that. I'll live in the burbs.
Well, if you read the exchange below, it might not be an insult after all. It definitely was low-effort: he started by saying that he admires Even's work, but then admitted it's just a formula and so on. Really, if the words you use have no meaning, why to use them? He is definitely not the worst of all salesmen I met, but not particularly bright, and the effort he put into the initial email wasn't really above average.
They contain (among many other things) a log4j copy with the vulnerability, so saying they might be affected isn't unreasonable.
Finished reading Ubik just the other night - the paying for every little thing was haunting, almost claustrophobic with this passage about the door (amongst other things - fantastic book though)
Have you considered hosting the APK on your own website?

You would need to build your own update function, but it could be a periodic fetch of a version file, and if the version is newer, download the apk and when done prompt the user to upgrade, opening the (already downloaded) apk in the system installer if they agree. You might need to carefully select the location where you download the apk, I don't know if you can install an APK with the system installer from app specific storage or if it needs to be in the 'external' storage. Relevant, ten year old, stack overflow answer. [1]

Google does put some scary warnings when you install an APK directly, but with 50 people, you can probably walk them through that.

[1] https://stackoverflow.com/a/6085670
They are listed.

Biggest one is probably the Minecraft client

> Minecraft users were using it to execute programs on the computers of other users by pasting a short message in a chat box.

https://www.ctvnews.ca/sci-tech/the-internet-s-on-fire-as-te...

Last night, we kept getting disconnected from HyPixel on Minecraft 18.1 client. I wonder if they check for the vulnerability and boots people? Although 18.1 should be fixed. When we added the log4j JVM flag mitigation, we stopped getting booted.
Ask HN: Why letter-spacing of small fonts is still rare on the web?
Increasing tracking of smaller fonts makes them much more legible. The modern web design uses a lot of white space, so there's rarely a penalty for doing this.

Go to a website, open developer tools, select a text which is smaller than body copy and add this style:

letter-spacing: 0.05em

(Or reduce to 0.02em if the font is on the larger side).

It makes a lot of difference! Especially applied to text set in all caps.

I've seen tracking used extensively on Apple websites, which I guess is not surprising given their design roots.
No, just like I wouldn't call one that only has 16% market share.
But isn't there also that when not using lazy? Instead of checking model equality, elm runtime now has to check shadow dom equality and calculate dom operations to apply. My thought is that my idea isn't obviously worse.
This seems way off base as a description of HN. The set of users here who are hiring personal protection staff with guns, or using offshore tax havens, surely has measure zero.

One of the most intriguing things about HN (to me) is what a big Rohrschach test it is. There are enough data points for people to read in whatever they choose to see for whatever reasons. I'm sure the rest of the internet is like this too, but when it's your job to focus hard and long on one corner of it, you become aware of this phenomenon much more acutely.