skysight-inc/HackerNews huggingface dataset:
Since we're weighing in with anecdotes; I recently had a terrible experience with Cloudflare due to a payment issue (not as bad as OP's Godaddy experience).

My card on file expired, and I missed the emails CF sent due to not being well for a few days.

5 days after the first payment issue, my whole (long time paid-for) Cloudflare account was downgraded to the free version and any configuration for features only available on the paid version were irretrievably reset and lost.

The auto-downgrade is somewhat understandable, though I still think 5 days is not much notice for removing a chunk of security measures from my site.

But what really annoyed me is that after sorting the payment issue, there was absolutely no way to restore my account configuration to how it was before. Every single feature that I had configured as part of my paid plan (ie. features not available in the free plan) had been turned off and/or reset to defaults.

So though I'd solved the payment issue, the configuration of my account was totally messed up, and security features were changed all over the place. I was told by the usual copy+paste canned response from "support" that there is no way around this.

I'm kind of appalled by this. This resetting of my security configuration combined with the really short 5 day period is very aggressive. One or the other would be annoying. Both together is just unacceptable.

I know, I should have the configuration stored as code somewhere. I will be doing that moving forwards (if I stick with Cloudflare at all which is now in question).

This is a $20/month account (one of multiple that I pay for) but I've also brought Cloudflare a significant amount of business over the years. Across multiple paid accounts at various levels, and numerous referrals. I'm now seriously reconsidering my heavy adoption of their services across all my client projects. (For this, and a few other reasons).
I thought maybe ‘ereader’ could show increased usage as the market has expanded, but It has even flatter trend line.

https://trends.google.com/trends/explore?date=all&q=kindle,e...
The problem of reading those comments is, everyone defends with their feelings, doesn't necessarily means they are angry or whatever. It's definitely not ideal for a lot of people, including myself. You can be angry at anything, doesn't mean it changes the outcome to your desired intent, infact it can be worse, in case of incels, the more angrier they get the more they get ostracized.

Sure, the most intolerant minority and the most vocal minority pushes the change. This is how the feminist movement started and that gave way to women being liberated. They focused their energies/anger into the right direction.

Promiscuity is something of a completely different topic.

The truth is women don't need men anymore. Men can be dead tomorrow collectively and women will not even notice. And this is the state of affairs we are dealing with. That's why women say they want a "high quality" man. Do what you want with that information, it's certainly not an easy thing to digest for a lot of men, because they themselves would not put themselves in the "high quality" man box.
One can learn the kana in a few weeks to a month, depending on how diligently one studies. It's akin to learning a new alphabet (although with quite a few more characters), but it's almost fully phonetic. Know the sounds the mora make, and you can (basically) pronounce the word, and certainly be able to look up the meaning in a dictionary. It's the first step to learning the written language without actually knowing what anything means, and lets you bootstrap Kanji learning as well.

Learning Japanese through immersion doesn't necessarily mean getting thrown in the deep end watching TV, reading newspapers, etc. A just-starting beginner would understand none of that.

This other key to language acquisition is comprehensible input, meaning you're just barely pushing the boundaries of what you're reading / hearing. Adult learners have decades of context to lean on from their native language, and so a good language learning resource will leverage that knowledge as well. みんなの日本語 starts with the very basics and builds from there. Same with Pimsleur (for the spoken language) which contains minimal English.
>worker shortage

Which industries? Not software, right? Because then I'll read about some 300+ applications per job vacancy, 8 flaming hoops to jump through if the Lady Fortuna grants you an interview, and an absence of courtesy because of how many other grunts are lined up - who has the time to email back an applicant anyway?

My head is spinning, I don't know what to make of it all.
I’d like verification of that behavior from CF.

I have an email from them forwarded by a third party reporting phishing on a CF-DNS-hosted site where Cloudflare denied they had any responsibility whatsoever as “they host no content”.

Of course, it requires a subpoena to discover who DOES host the content, as they are the only ones who know.
That's not how it works. Bug bounties work like this.

Somebody sets up a bounty program and defines a framework for deciding how much to pay out. Security is complicated as hell and you cannot possibly devise a framework that accounts for all possible things so this framework is necessarily brittle. For example, you might reasonably decide that the highest payouts require very minimal attacker capabilities (fully remote unauthenticated attacks being the top payouts). This makes sense since those are the easiest attacks to mount.

So now a bounty comes in. It goes to a triage person or, at best, a small group. They refer to the framework. Your bug doesn't really match any of the categories but it kind of looks like this thing over here so it gets bucketed as such. Maybe there is some discussion. Ultimately, the rules say "max payout requires unauthenticated remote attacks" so the payout ends up lower, even if the attack is exciting. Maybe somebody managing the system takes a note to update the framework and policy moving forward. The community then rages about how this bug is actually a big deal and deserves a lot of reward.

In my experience, the people managing these programs get rewarded based on the amount they pay out going up, not down. But you need a payment framework otherwise each bug is paid out on somebody's whim (and trust me, the security researchers will complain to high heaven if they perceive inconsistency in bounty sizes). So you end up with novel bug structures that aren't handled well by the framework and get treated weirdly.
> The "npm:" import does not appear to have even started development, although it has been planned for a long time: https://github.com/denoland/deno/issues/13703

The development is well under way, we expect to ship first iteration of this feature in the next release (v1.25) in the coming weeks.
This is a great writeup, thanks. It will be very useful if y'all could add a post comparing neon with citusdb in terms of functionality, performance and operations.
> So I have to wonder what sort of crap they're seeing elsewhere

Professionals who know the code to the letter will happily build a rats nest that meets the code to the letter and rightfully tell the inspector to F-off if they get uppity.

Homeowners try to make their stuff look nice because they are dependent on the inspectors good graces because they do not have the requisite knowledge to argue with them so they try to stack the deck in their favor by making the inspector's job easy. (And they know the next person dealing with the panel will probably be them so they have another incentive to make it clean).
It's easy but can be expensive as hell. Currently paying $1300/mo in premiums for 4 people on a bronze plan with a 10k deductible and 30% co-insurance.

Yay.
> always

Not from what I remember. They were well thought of / recommend many many years ago.
Which happens to be substantially the reason I don't have a natural gas standby generator (in this case, the gatekeeping/protectionism of electricians by my state, as enforced at the end by the permitting process).
yeah i think its a noteworthy attack and defn worth more than 10K. also google should be more open about how bug bounties are evaluated
Not much else we can do considering the guy’s ready to use nukes. Also western europe, except the uk, isn't much got the power its used to. Northern europe is more open considering they are under threat, else they wouldn't be much involved as they also lack power. South europe is too weak financially, politically or militarily to matter.

So the only powers that could do something are the us, the uk, and east eu, and they cant get engaged into more active support given the threat. Conflicts in east europe have serious impact over pretty much the rest of the world and aren't easy to tackle. Its not like invading unprepared countries. It can make or break the world order if one is not careful and with long lasting effects.
Do not ever, and I mean EVER, host anything on GoDaddy. They're a terrible business and they don't give a damn about you. Use a more personal provider like Porkbun, they're amazing and easy to reach. They also don't charge you for late payment on an expiring domain. GoDaddy is ruining WordPress as well, by buying out all even remotely profitable companies and sticking the GD logo on them. This creates a massive monopoly - just like they had for YEARS on domain registration. GD is too big to care, move out now!
p8g 0.6.0 – 2D graphics library for C, C++ and Java
Also learned from MNN. It's worth pointing out that there are companion books that explain the grammar points in English (also many other languages - different books for different languages). Here's a link to eBay for the companion book for the first volume in English (couldn't find it on amazon, for whatever reason):

https://www.ebay.com/itm/ha0793-Minna-no-Nihongo-1-English-T...

The grammar note books are invaluable...MNN can be a little challenging if you don't think like a Japanese person, or have a native teacher to help decipher the content. But they're also dangerous, because you can spend too much time in them at the expense of the actual textbook (I know this from direct experience).

MNN is not my favorite (I recommend Genki for native English speakers), but I agree 100% with OP about learning Japanese from an English-language book. It is a waste of time. Learn hiragana and katakana (you can do this in a couple weeks) and dive into full grammatical immersion. There is no other way.
I'm not sure what you're talking about with loopholes comment.

This, "there's nothing to gain with this discussion and you did not provide a single proof", and yet you continue trying to right an obvious wrong.

Also, please stop with personal attacks, language barrier, etc. I responded to something which was wrong and didn't belong here, and you're attacking me. Please stop.
Yeah, the idiomatic (and fast) chi router does this (https://github.com/go-chi/chi#url-parameters, https://github.com/go-chi/chi/blob/v1.5.4/context.go#L10). Routing information in stored within a chi Context (https://github.com/go-chi/chi/blob/c9e87efe9691a63d6a89de8bb...) within the request context, simply because there isn't any other way of transmitting data across http handlers.

Echo and Gin have their own Context structs, except instead of http.Request wrapping their Context struct, their Context struct wraps http.Request (thereby rendering it incompatible with the stdlib). It's not a far stretch to have these frameworks retrieve their Context from the http.Request. Instead of

// echo Handler
func(c *echo.Context) {
}

they could do

// standard Go handler
func(w http.ResponseWriter, r *http.Request) {
c := echo.GetContext(r)
}
I moved all of my domains to NameSilo.com many years ago (about 8 years ago?). Originally I had all of my domains in Godaddy and Namecheap but I wasn't happy with them.
This is a cool demo, but note the author doesn’t actually show the rewritten headlines are better in any way but spot-checking. The conclusion here isn’t that GPT-3 can optimize titles on its own, but that it generates ideas that, when reviewed by a human, can be usefully cherry-picked for inspiration. The task of ensuring, e.g., that the headline is factually accurate is left to the human.
On Epiphanies and Lost Ideas
Google domains is great. I hate to feed the monopoly but they do everything right. Auto-renews every year, lots of reminders.
Do you run any type of ad network on your site? The hijacking can be rather targeted (geo, device, time of day, etc..) such that you could never recreate on your own.

I still see this occasionally on otherwise innocuous sites.

Other 3rd party JS can still cause it, but ad networks are the most common.
A fully licensed general contractor moved our compressors to the second-story of our house on a beautiful painted small deck to open up our yard/reduce the noise. Quality, sturdy work. Rated for 3000lbs, got it in writing!

3mo later the “quality and sturdy” deck collapsed 5-10min after my infant daughter and her grandmother (my MIL) were playing outside under it. The units were dangling from the side of our house.

I looked at the collapsed deck: only nails. Let me repeat that, it was only secured with nails. Just dozens of them all over the place.

Never underestimate who will cut corners and how they’ll do it. I’ll never understand how he allowed this to happen. It was utterly baffling.
The military forum Army-2022: “robodog” is a Russian drone with a grenade
Wait, what about medical insurance etc. You typically do not have those benefits if you do part-time?

Many work for the sake of medical insurance. I have seen 4 software engineers un-retired recently(all in their early 70s), some of them felt retirement boring, some just need either benefit or more money, the latter one bothered me, supposedly software engineers are paid relatively well and shall retire with nice financials.
Why would I want advertisements when I paid £1000+ for my phone? I can semi understand when you are on a paid schedule with Apple or a mobile provider but when I paid cash at the Apple Store?
Does this mean that the story about PCDOS 1.0 containing a Gary Kildall Easter egg is not exactly true?
Linux NetworkManager and Anti-Privacy Default Settings: Call for Action
I disagree with lumping chat in with e-mail. The whole reason for chat is that it's closer to being synchronous.

On the spectrum:

Very asynchronous: Letter, E-mail

In between: Slack/Teams Chat, Text messages

Very synchronous: Call/video call, In-person meeting
Lawrence is nice, I lived near downtown for cheap, was able to walk most of the time. There was a very active music scene- I was an in-house engineer at one of the recording studios there.

Columbia is also nice, but a little more spread out. Ames IA, Tulsa, Champaign-Urbana, Ann Arbor…
At this point we can safely conclude that there was election interference, only it was done by Qanons, and that the election wasn't stolen despite that interference.
If part-time means $320k, hell yes, Sign me up. That's 5x my income (before taxes). But that's not the future. The future is full-time and more. The age structure of the population pyramid doesn't leave much choice.

That's in most of the Western world, of course. There are parts in the world where it looks different, but in those parts $320k is enough to retire.
> What I would like to see is for Matrix Decentralized Identity to be able to be used as a SSO for other sites.

We haven’t figured out how P2P Matrix will work with authentication yet - it’s kinda ironic that for normal Matrix we are moving to OpenID Connect (ie shifting SSO to normal OIDC providers)… but at the same time P2P Matrix identity is inevitably linked to owning a private key.

The solution may to be ensure that OIDC itself has a way to log people in based on presenting a private key - be that your P2P Matrix identity or something else :)
The apps really destroyed online dating. I used to meet people on OKCupid... until they made it more Tinder-like. You can't even search or browse these days.

Craigslist Personals was also fun. Until it got taken down.

The late 90's through early 2000's internet was way better for meeting people online.
I saw in your HN profile that you teach math. Is that why you prefer hard copy submissions? Must be hard to deal with sheaves of paper.

My wife is a assistant prof as well. I built her an e-mail bucketing system where her students email assignments to different email addresses (like assignment1@her-domain.com OR mid-term@her-domain.com) and it sits inside different buckets with the same name as the email address.

That’s why I was curious about how other profs handle this situation.

Edit_1: what’s the issue with Blackboard?
I've not heard the term, yet I feel like I know exactly what that GP means by it. And, it's hard to summarize, it has less/nothing to do with software development and more so just the politics involved in corporate culture. It's like the real ethos of the company (not the projected version) and how to be successful within it, the merits of your work as a software developer will not always be the most important deciding factor and you need to be aware of the various politics within the company. It differs by company but with enough experience you see common themes.
They'd lose because they have no case.

I do not recommend anyone ever use lastpass or 1password, so I am absolutely no fan or apologist, but this is not a case of them doing anything wrong.

This story doesn't deserve any attention at all.
Release 0.6.0

* add functions to load custom fonts and display text
I guess the parent means the tendency of people to report things more positively to the management than they really are and the behavior of some to try to make a good impression to management by telling them exactly what they want to hear. Both might help the individual but typically not the organization
All manufacturers recommend reduced charging, but the range on the Leaf and i3 was too short for that to be practical.
Military Intervention Project: A Dataset on US Military Interventions, 1776–2019
Ask HN: Can small teams maintain Electron apps?
We're a small dev team maintaining a niche Electron app that has about three dozen direct dependencies and hundreds of indirect dependencies. Dependabot warns us weekly about vulnerable Node modules, while Electron has frequent major releases, sometimes with breaking changes that have a major impact.

We have to update dependencies in this codebase much more frequently than in our Ruby and Go codebases. The result is a huge time suck, especially when we run into breaking changes and poor documentation (which is often).

Do other small teams feel this pain? Do large teams have staff dedicated to keeping Node/Electron dependencies up to date?
Ah, fair enough.

These articles tend to be generous with interpretations of their poorly cited sources. Still, without knowing where the early PV systems are in the US, it's a difficult claim to back up. There is also survivorship bias and the fact that quality control on small batches of any product is usually better than on mass market stuff.

After the section you referred to, the article goes on to claim that poor regulatory oversight is responsible for the short lifespan of Australian PV systems... again, a questionable claim.
Depends on how you interpret "primarily affected". Like, yeah, it always had an outsized impact on the elderly and immunocompromised - but the vaccine and changes in the virus have lead to a pretty decent decrease in risk for younger people.

And no I'm not going to go do your reading for you. Vaccine effectiveness stats are easily googled. Reports on omicron's reduced severity are also easily googled.
sdwire lacks one thing - a way to find out which usb-storage device belongs to which sdwire hardware (in case of having many sdwire devices connected to one pc). For wifi card there is fysetc wifi adapter but it is slow one in uploading to it over wifi (like 300KB/s).

Would be nice if your projects were published on github, so more people could benefit.
> According to MIP, the US has undertaken almost 400 military interventions since 1776, with half of these operations undertaken between 1950 and 2019. Over 25% of them have occurred in the post-Cold War period.
Wait, we are going to replace plants that consume carbon with solar panels that do not consume carbon in order to reduce carbon in the atmosphere and save us from global warming? Why does none of this make sense?
I don’t think I’ve ever heard the expression outside of the title of that one movie.
Honestly my linux desktop (Ubuntu 22.04) is where I run into the fewest issues regarding my bluetooth headphones. I've never had an issue connecting to them.
I had this guy as a professor and he was great.
>There's something to like about most pubs.

all i'm trying to say is the idea of "this is my local now, i'd better like it" isn't the way you have to think in a city. it's not a big deal to some people, but it is to others. all the trade-offs don't have to be a problem, it's all easy to work around, but if you're used to the convenience of a city then just the whole idea of having to work around inconvenience can be a larger adjustment than you think. for somebody considering moving out of a city it's good to be aware of that.
1. Hiragana/katakana can be learned in a week or two using flash cards and spaced repetition. It can be mastered through reading Japanese text for a few months to the point where you stop thinking about it. You don't need a $77 book to learn this, its just brute force memorization. I didn't know any other Japanese going in besides this.

2. Full immersion while ideal is impractical for most people interested in studying this language. You can still give yourself full immersion while learning anywhere in the world by using Japanese learning resources and limiting your English use to the minimum necessary (dictionary lookups, explanations for particularly troublesome concepts).

By the end of MNN 1 going into MNN 2 I swapped from a JP -> EN dictionary to a JP only dictionary. If I didn't understand a word from context in the book I would look it up in the dictionary, if I didn't know a word in the definition I would look that up and so on until I understood using only Japanese.
Card issuers will not automatically update merchants with changed card numbers. Card issues will identify automatic charges and alert you too update them.

Merchants can have an agreement with issuers to access your account but this is 100% opt-in mechanic and can't be accidentally tripped over. I haven't looked on my Amazon account but I've never been offered that option as they have no reason to access my credit card account.
Having said all that, BLE is an amazing technology and is improving slowly.

You can track your dog or purse or car anywhere in the world, all using a CR2032 coin cell battery that will last for years.

It provides your phone with an easy extension into the real world, which has thousands of use cases.
single rates have increased regardless of gender, but at a faster pace for men; In 1990, a woman was more likely to be single than a man, now a man is more likely to be single than a woman
https://www.pewresearch.org/social-trends/2021/10/05/rising-...
China's internet regulator details algorithms used by local Big Tech players