skysight-inc/HackerNews huggingface dataset:
I went from mailgun to gsuite. costs went up 3x and almost all of my emails are going to spam folders even when the contact and I have been emailing each other for ages.

Would definitely recommend mailgun/sendgrid over gsuite for emails and not entirely agree with this blog post.
All of the commercial Unix vendors had as their fundamental technical goal user lock-in, while Linus had technical goal of performance + stability and maybe popularity.
I had to wait 2 months before my car was available that I just bought. The difference between a 2022 and a 2018, was $3k. So to prove your point, the used market is doing so well, they can sell them for basically MSRP if they aren't too old padded with a warranty you'll likely never use.
I'm talking about optional inputs, you're right that multi-return works for optional outputs.

How would you write a function that takes a string, but can use some default if none is provided?

Common way:

func f(s string) {
if s == "" {
s = "default"
}
...
}
Where can I read more on these organisers of miss information?
Here’s a collection of GIFs showcasing Evangelion’s UIs:

https://imgur.com/a/PF3oA

https://imgur.com/a/uDeBs
> You know how it's poor etiquette to start a chat message with "Hey, do you have a moment?"

I think this is the difference. For plenty of people, this is a NOT a widely held norm. It really IS ok to just start a chat or email with a "Hey, do you have a moment?"

That doesn't mean it should be ok. We probably all would be better off providing more context for more effective communication. But standards here seem to vary widely.
> other variants like leaking environment variables.

I'll google/search more about these. I assume if we say RCE is a 10 for risk, then maybe others are 5 or 3?
I'm leaving towards malice (through not caring so much for users) caused by big tech using this arena as a battleground.

I wish all cables were equal too, but c'est la vie
Ask HN: Is YouTube being flooded by Cake+Story Videos?
Hi, I guess this is just yet another instance of some content farm producing highly addictive videos. But go to Youtube (in private browsing mode) and search for Cake Stories, Cake Storytime or something similar. Hundreds of videos will appear that are all very similar. They are all timelaps videos of cakes/desserts being prepared while a young female voices tells a story about some high school drama, troubles with parents or some college incident. Has anybody else seen those and finds those troubling?
Remove the antenna, or break the wire trace antenna.
The movie was sorely disappointing, which was itself disappointing because Ender's Game isn't at all unfilmable (except that the main characters are all children in a really messed-up environment).

It really is similar to Neon Genesis Evangellion in many respects. If NGE had existed first as a novel, it's hard to think that the TV adaptation would be anywhere near as good as what was actually made.

I highly recommend the book, with almost no reservations. It's not very long, and a very stimulating read.

If you enjoy that one, and want to read more, then I'd recommend reading either one or both of the immediate sequels (Ender's Shadow and Speaker for the Dead). Iff you read either of those, and enjoyed it, and want to read more, then (and only then) should you concern yourself with the trails of sequels.
> The vulnerability was privately disclosed to Apache by Alibaba's Cloud Security Team on 24 November 2021 and publicly disclosed on 9 December 2021.

https://en.wikipedia.org/wiki/Log4Shell
I think scale matters, though. In the 1500s (through much of the 1900s, even), most people were still mainly exposed to the viewpoints of people and groups who were physically local to them. Your local newspaper and (more recently) local TV news was a product of local attitudes and opinions. Certainly all of those people were not a member of your "tribe", but many were, and there were limits as to how far off the beaten path you could go.

If you had some wacky, non-mainstream ideas, you self-moderated, because you knew most of the people around you didn't have those ideas, and you'd suffer social consequences if you kept bringing them up and shouting them from the rooftops. Even if you decided you'd still like to do some rooftop-shouting, your reach was incredibly limited, and most people would just ignore you.

Today you can be exposed to viewpoints from every culture and every walk of life, usually with limited enough context that you'll never get the full picture of what these other people are about. If you have crazy ideas, no matter how crazy, you can find a scattered, distributed group of people who think like you do, and that will teach you that it's ok to believe -- and scream about -- things that are false, because other people in the world agree with you. And the dominant media platforms on the internet know that controversy drives page views more than anything else, so they amplify this sort of thing.
People who want to commit murder might still find a way too but we still have laws, police, prosecutors, etc. Perfect should not be the enemy of good.
Some interesting quotes from the discussion section:

> this design should be interpreted as producing a “local average treatment effect” that might not generalize across the full educational range (Morgan & Winship, 2015, p. 305).

> the key assumption — that the age trend extrapolates — is difficult to test. Moreover, although this approach produced large effect-size estimates, we did not identify any studies that tested whether these effects persisted into adulthood.

> The finding of educational effects on intelligence raises a number of important questions that we could not fully address with our data. First, are the effects on intelligence additive across multiple years of education?

> Second, are there individual differences in the magnitude of the educational effect? One possibility is the Matthew effect (Stanovich, 1986), whereby children at greater initial cognitive (or socioeconomic) advantage benefit more from additional education than those at lower advantage.

> Third, why were the effects obtained from the control-prior-intelligence and policy-change designs ... still apparent in later life, when effects from targeted educational interventions, such as pre-school, have tended to show fade-out into early adulthood?

> Fourth, which cognitive abilities were impacted? It is important to consider whether specific skills ... or general abilities—such as the general g factor of intelligence—have been improved

> Fifth, how important are these effects? ... to our knowledge, no studies have explicitly tested whether the additional IQ points gained as a result of education themselves go on to improve these outcomes.

> Finally, what are the underlying psychological mechanisms of the educational effect on intelligence? Ceci (1991) outlined a number of promising pathways, including the teaching of material directly relevant to the tests, the training of thinking styles such as abstract reasoning, and the instilling of concentration and self-control.

The discussion section is well structured to emphasize the confidence is purely in the correlation between education and an improved score, but there are still a number of open questions about the psychological mechanism of education, the socioeconomic and long terms effects, if effects are additive, and whether or not a change in IQ is meaningful and improves real outcomes.
>"The solution is to vote with your wallet."

I don't think it is. I sense this might play out the same way it did with all the intrusive spyware on SmartTV's. Sure, I could try to vote with my wallet and find a TV that doesn't have all that bloat, but they are becoming vanishingly rare. The market has 'decided' that this is a standard feature now.
Thanks for the explanation. Sorry for the false alarm. My spidey senses started tingling but I should have held back a bit.

As you mentioned, I was flat-out wrong about the previews. Not sure if I scrolled straight past that section or what.

Wishing you the best with your book. And FWIW I like the bash-based approach; I agree with the philosophy of peeling away the abstraction layers.
Your comment reminded me of my old SGI Octane 2. I loved that computer.
I remember buying one in high school (1989 or 1990) for $15 from Digikey. It was in a clear package and put off barely any light, but it was a BLUE LED!
Cloud/SaaS providers could learn a lot from this practice
How much to do remotely is a big issue. A big problem with local rendering is that you need more bandwidth to the client than you'd need for video. A big advantage of cloud gaming is that you're in a data center, close to the asset servers with many gigabits of bandwidth.

The big problem with remote rendering is that it costs too much. "Cloud gaming" startups have appeared and disappeared for years now. If they charge too little, they go broke, and if they charge too much, users leave. NVidia cloud gaming is currently $10/month for 6 hour sessions. So is Stadia, now. That's not too bad, but it may be a loss leader. NVidia already doubled their price once. Startups with similar offerings are charging around $45/month.
Tracked on Mozilla’s end at:

https://bugzilla.mozilla.org/show_bug.cgi?id=966856#c8
The truth is that it took NYT contacting Instagram for anyone to respond at all. It’s a big deal - most people simply can’t escalate like that.
I have taken some flak over the years for rolling my own basics like logging, telemetry, tracing, authentication, session management, etc...

Incidents like this remind me that it is sometimes OK to ignore those who constantly order you to "vendor it out" over some notion of principled development excellence wherein one never reinvents a single hypothetical wheel. Arguably, writing text to a log file on disk is a simple thing you dont want to keep implementing over and over. But, it is also a simple thing that doesn't take a whole lot to do correctly in many use cases.

DIY (in aggregate) would represent one of the largest barriers to any attacker producing a wormable/DDOS exploit of this log4j-style vulnerability. Imagine ten thousand plus unique implementations for how to get a string to disk and I can almost assure you that not one of them would contain an attack vector like this. Even if one of them did, the other 99.999% of implementations would be unaffected and nothing would have made the headlines.

Depending on the code paths that others have developed is the biggest liability in all of software engineering. We are going to have to get better at evaluating this cost relative to the benefits. This doesnt stop with Log4j. There are other things more ubiquitous and more complicated out there still. IMO, the best we can do is to stop producing new software that is exposed in these ways.
Ask HN: Weird Support Tickets on CCPA
This is an example of some support tickets that are now starting to float around. Does anyone have the "Google Translate" on this? Examples of support tickets:

I am a resident of Alabama. I am curious about your process for responding to California Consumer Privacy Act data access requests:

1) What information do you provide in response to a CCPA data access request?

2) Do you process CCPA data access requests via email, a website, or telephone? If via a website, what is the URL I should go to?

3) Would you process a CCPA data access request from me even though I am not a resident of California?

4) What personal information do I have to submit for you to verify and process a CCPA data access request?

To be clear, I am not submitting a data access request at this time. My questions are about your process for when I do submit a request.

Thanks for your answers to these questions I have.

I look forward to your replies without undue delay and at most within 35 days of this email, as required by Section 1798.130 of the California Civil Code.
mostly dev dependencies, i guess you really pay the price for not having a compressed intermediate format like a JAR:
- storybook is 420MB (! will look into this one!)
- babel is 110MB
- sentry sdk is 92MB (?)
- aws-sdk is 63MB
- typescript 60MB
- react-native 51MB

.. on and on, 40MB..30MB..20MB.. hundreds of them just adds up! 147 dependencies over 1M. pretty incredible/wasteful really when you look at it.
There is an interesting thing related to the recent floods that happened in Begium, Germany and The Netherlands. The Netherlands spends quite a bit of effort estimating flood risks, and for more important water defenses tries to get the chance of disaster down to about one in 10000 years.

However, it seems that this calculation is only done for the lower parts of the country. The Meuse was only taken seriously after a couple of floods in the 1990s (and works were just far enough in The Netherlands that places along the Meuse were mostly fine).

However, for smaller rivers, nobody seems to care.
Predicting the Future Is Possible. These ‘Superforecasters’ Know How
That is absolutely false. They didn't try to coerce people to buy the new model. It's quite the contrary - they were extending the battery life of devices where the overdrawn power would cause them to shut down completely. They also communicated this in the patch notes but most people don't read those.

Your comment is completely ignorant.
There are humidity and bugs in Texas and Florida too, and even more so! If you're lucky, Texas will get another snow-pocalypse too if that tickles your fancy.
> You'll have noticed on the internet that there's a tendency to prioritise engaging with things you disagree with (hell, half of my HN comments are because I felt motivated to write something to disagree with some OP at some point - even this one).

It tends to be that platforms with more disagreement have healthier discourse. I think that actually the opposite is more harmful. Echo-chambers allow for extremist ideas to grow and encourage hostility towards those that don't go along with the echo chamber.
It’s still an issue with current JDKs in certain environments (e.g. Tomcat), see https://mbechler.github.io/2021/12/10/PSA_Log4Shell_JNDI_Inj... and https://www.veracode.com/blog/research/exploiting-jndi-injec....

Also, 8u121 was an incomplete fix, the complete fix (still with limitations as noted above) is in 8u191 (see second link above).
https://www.youtube.com/watch?v=cIZBkZKBrr0

not just abandoned homes, not just abandoned streets...entire neighborhoods

proportion of abandoned homes worse than Kabul

proportion of unsafe/structurally unsound properties worse than Port Au Prince after the earthquake
I think it will be more like this, as parts of what you say seem very unApple like:

The Apple car is electric, with two charging point, the batteries last a long time but the special Apple charge connection hub costs $1199, there is a part of it that is really smartly designed but somehow also more fragile than you would expect and as a consequence you replace these one per year because it breaks beyond repair.

The first year you replace it fine, and the cost is actually down to $1099.

The second year the old model is no longer available but the new model that will work with your car and the newer Apple cars both also will work to charge any apple device if you lay it on the Apple car dashboard while charging with the new model charger. It's some sort of clever design innovation that you're not sure why it couldn't work without the new charger but ok, anyway the new charger costs $1330.

You have 3 forms of heated seat pads, these are the simple at 199, the integrated at 499 that has a dedicated app to monitor optimal healthy sitting posture and maintain vitals connection to your Apple Watch, and the Pro at 1100 that allows you handle racing speed Gs.

You need to have the Pro to unlock the Racing Speed Gs because of safety features that would kick in without the Pro helping to handle that speed.

In the end of year 3 the next level Pro brings in massage capabilities at 1400, but you find that it uses up too much battery requiring more and longer charging unless you update to the new Charger Pro which costs also 1400.

Want Apple debug data for your car, you get extra data on your Apple iCloud, but not enough to actually make it usable in fact basically the car uses up the data you had so quickly that you have to pay for iCloud+ Andretti, which gives you a basic 3 TB storage, and a revolving time series data for car usage that can be used for diagnostics etc. $15 a month.

The Car camera array is really sweet but you find that road trip you made to the keys maxed out your iCloud, so you opt in for the iCloud+ Trixie account $20 dollars a month but with 7 TB, you figure that will probably last.

Most of the apps for the car are free, if you call advertising supported apps free, but there are a few ones you find essential that you pay for of course.

One of them is the top notch autonomous driving app AutoDRave which costs a basic $120 but if you want the continually updated road conditions and newest ML edge case determination routines you should really pay for the $25 a month subscription.

I think we all get the picture here....
> you were flying a 18.5 degree glide path (normal plane is 3 degrees), and there was no 2nd chance

Yeah, the Shuttle was such a bad glider that they trained pilots using a business jet with gear down and reverse thrust.

https://en.wikipedia.org/wiki/Shuttle_Training_Aircraft
They did notify people. It was just in the patch notes that most people don't read.
> You Still Need Third-Party Antivirus With Windows 11

At that point I stopped reading.

> PCMag security expert Neil Rubenking states that you still need third-party antivirus software.

Please stop suggesting snake oil software to the folks out there calling yourself an "expert".
It could be argued that the icloud etc costs were included as part of the purchase price. In which case the cost was estimated over the useful life of the product and then factored into the up-front price. That or the icloud service cost is covered another way as a form of marketing. Customer retention etc.
Could it be you already are on Java 8u121? They say it:

> protects against remote code execution by defaulting "com.sun.jndi.rmi.object.trustURLCodebase" and "com.sun.jndi.cosnaming.object.trustURLCodebase" to "false".
The PRC and the Soviet Union -- it'd be interesting with democratic countries too.

But what if, in democratic countries, it's more important to be good at making an impression (being a career politician), to win more votes
iCloud's free storage tier still being stuck at 5 GB as the base phone storage has grown to 128 GB is the main thing I'd criticize. You realistically can't use iCloud for photo storage or backups with that plan. I bet most people can blow through that just with Messages history if they have anyone sending them videos.

I think the upgrade prices are reasonable, $1/month for 50GB and $3/month for 200GB, but I can see characterizing that as nickel and diming. They should have bumped up the 5 GB base plan years ago.
If it's buried in the fine print, I wonder how long it'll be until a major class action suite forces Toyota to enable the fob.
This.

People who support these kinds of activities are youthful and arrogant enough to have any form of humility about things they once passionately believed to be true turning out to be incorrect.

In the 90's, eggs were thought to be as deadly as cigarettes. A bowl of cheerios was considered to be vastly superior nutrition wise to a plate of eggs. This is the opposite of what we know to be true today. If I had tried to argue against this with the current form of Facebook, I'd be censored. (They also thought avocados were bad for you in the 90s.)

The elevation of a collectively determined "objective" truth over the freedom of individuals to exchange ideas is the first step towards creating an environment for authoritarianism to flourish. Subjugation of the individual to the collective is the norm in most of history, and it's not an accident that our current prosperity emerged when in the times and places where it was lifted.
I'm pretty sure that wallpapers are something you put so that others can see.
Allan Savory and his colleagues shot 40k elephants to save the grasslands
Interview: “The Age of Unlimited Opportunity” with Austen Allred
Ethernet Over HDMI is used by newer AV receivers to support eARC (extended audio return channel). The older ARC spec would work with any HDMI cable, but bandwidth limitations only allowed compressed 5.1 surround sound. eARC uses the higher bandwidth from Ethernet Over HDMI, allowing uncompressed 7.1 surround and Dolby Atomos streams.

(If you're not familiar with ARC/eARC, this lets the TV send audio from its native inputs back to the AV receiver over an HDMI cable. Without ARC, you need to plug everything directly into the AV receiver.)
He is a well-known and reputable speaker at many local tech conferences, primarily on Java and security topics. He has also shown commitment in pointing out the numerous problems regarding the sorry state of Bulgarian electronic governance - no synchronisation of data between institutions, duplication of data, the need for getting paper verification notices from one institution to be admitted in another.

In case he sets up a good team of techies, I think he would be able to guide them in the right direction, because he is aware of the problems and has the technical competence for choosing the viable solutions.
Photorealistic icons [1] are much harder to parse, visually, than very simple ones [2]. In general, graphical UIs have gotten far more visually noisy in the past few decades. This has made computers much harder and more fatiguing to use. So often we seem to have “UX” designers changing things for the sake of change rather than undertaking the legitimately hard effort (UI studies) of trying to determine what will make the interface easier to use.

[1] https://1.bp.blogspot.com/_cTU5hVb22k0/R6u0lS9EFuI/AAAAAAAAB...

[2] http://cdn.cultofmac.com/wp-content/uploads/2011/04/Susan_Ka...
Dell sells a 55” conference room monitor at a decent price. That - or something like it - will be my next “TV”
When I worked in mortgages in a previous career, we had a presenter talk to us about Private Mortgage Insurance (PMI). Back in the day, banks by default would just tack it on as an extra insurance for them in case you were to default. You're basically paying insurance against yourself to cover the banks losses. Once it was added, it was basically permanent for the life of the loan.

Then one day, a senator I think from Utah was asking about his his costs after signing. The bank explained to him that it was PMI and he couldn't remove it.

Thanks to that situation, PMI cannot be enforced if the loan to value ratio is below a specified threshold and the banks cannot force it on you if you meet that threshold prior to closing or after you reach it.

In a nutshell, this is what needs to happen before a lawmaker bothers.
Subscription pricing for things which aren’t subscriptions is bullshit.
My local news used to offer an ad-free experience for about $10/mo. I happily paid it. One day they updated their site and starting nagging me to turn off my ad blocker. Wouldn't let me read anything. I canceled that day and told them why.

Now they get $0 a month from me. They keep begging me back with $5/mo offers. Nope. That bridge has been burned.
60% of Java projects that use Log4j are using it indirectly, based on Snyk data
Looks like we really need to consider sandboxing on the hardware component level.

The WiFi components shouldn't need to see anything that isn't about to be sent over the radio. DMA is important for performance but there are solutions restricting which devices can read and write memory.

Also we really need to sandbox SIM cards, the level of access that those have is terrifying.
I can't think of any situations where (1) would be insufficient, but I'm probably wrong. But I agree that setting an isValid bit for every object is overkill.
> It's capitalism.

Good thing they renamed "fraud". The old name got a bit of a bad reputation.