Hacker Newsnew | past | comments | ask | show | jobs | submit | gred's commentslogin

Three years too late, in my case. I've moved on.

> Practicality beats enthusiasm for 95% of car use.

About two years ago I rented an electric car for a few days. I felt like I wasted a ton of time finding a charging station, jumping through phone app hoops to get the charging process started, and then waiting for the car to charge. I've stayed away from electric rentals since, even though they're often cheaper.


Comparing renting a new type of car when you have to figure everything out for 2 days then return it, to owning a car, where you also have to figure everything out, but only for the first days, not the 600 days afterwards, is not really comparable.

Also, when you own a car you charge it at home and work, so you don't really wait for the car to charge very often.

And the next time you rent a car, it will be a bit simpler as you have done it once before. And even quicker/simpler the time after that etc.


It is 100% compatible when your basis is just finding a local gas station to fill up. 600 days later, you may know where a charging station is, but not any more convenient... yet.


You don't need a charging station for 99 per cent of your rides. You can charge daily at home and forget about recharging except when making a long trip.

If you usually make trips that are over the battery life, that's a different thing though. But most people don't have that problem.


That makes it even more realistic. I have the charger in my garage, I happened to need a charger to get home on my last trip (120 mile round trip, the car claimed 220 miles of charge but that didn't account for the cold winter), but I had to open an app and such just to use it. (at least I had the app and an account - but my credit card was expired so I had to type numbers to get it activated). I had to search for that charger - there was exactly one charger within 30 miles (only 7kw, but it gave me enough range to get home while I ate lunch).

Meanwhile I passed half a dozen gas stations. No app/account needed at any of them, just tap/swipe my credit card and fill.

Most people don't have the charging problem often, but when you make a mistake you sometimes will need it. The system doesn't work. There needs to be chargers all over, and they need to be quick/easy. I don't want to download an app for a charger I will likely never visit again in my life.


Under Biden we had laws requiring chargers to meet reliability requirements, use an open standard, take credit card payments without requiring an app, and build more in rural areas to close the coverage gap. Most of that has been scrapped by the current administration, going as far as removing chargers that were already installed.


This is the equivalent of setting up a developer environment for charging a car. Once you have a car that's working, and you know how to connect to the app and charge it, almost all these problems go away. If you're in a place that has a lot of public chargers near your destination that you're already going to, then it's even easier, and it just becomes trivial.

That being said, I don't think I would want to rent a car that didn't have a place to charge it or a very easy-to-use fast charger nearby.


Until NACS and plug and go are uniquitous, going on a trip not in a Tesla is a gamble of having the right app on your phone, and that you will be able to reach working chargers.

I think we are still a couple of years away from other manufacturers catching up to Tesla and making road trips for most people useful.


> jumping through phone app hoops

The very idea you effectively need a mobile phone to charge your car is mind boggling. The mess of proprietary charging networks and registrations is needless complexity that puts people off hiring (and ownership) of EVs.


I have little RFID cards from 2 charging companies that I can tap to their chargers to charge.

Also, many chargers support tapping a credit card on them to charge.


The credit card tapping option should be required by law. This registering apps and fobs flow is the worst ux imaginable. And while we are at it the car should hold the payment info. Plugging it in should be enough. I know it’s all coming.


I agree but I'd go further: Cash should be required by law, we shouldn't require people to have a bank account just to buy electricity.


Your comment is proving my point!

(Proprietary networks are a mess, and ordinary debit/credit card payments for EV charging are far from universal)


For rentals I get that. We own 2 EVs and a charger at home. Easiest driving experience ever. We just plug it in.


I’m terms of upgrading your daily life, never going to a petrol station is a great upgrade.

Haven’t quite made it in our house, we went once or twice last year to charge on a long trip. Didn’t go in.


Where are you based?

Here is a different narrative: https://www.reddit.com/r/technology/comments/1qh5kdg/us_pres...


Madrid, Spain. It's theoretically very EV-friendly. These days I tend to rent hybrids. I don't even care if the battery actually works. They check the "green" legal checkbox which allows you to go downtown without getting a ticket, and you can rely on the ICE engine to get you where you need to go.


I remember when /r/technology was more about technology, now it is /r/politics with a microchip hat. I ignored that sub long ago.


> It's the Supreme Court that has expanded the powers of the President

Sort of, but Congress also wrote a bunch of pretty broad, vague laws, delegating a significant amount of power to the executive via agency rulemaking, and it turns out the agencies are part of the executive branch and have to do what the head of the executive branch says they have to do (within the limits of those broad, vague laws). If Congress can't get back to smaller, simpler, more specific laws, and they continue to pass the burden of this complexity over to the executive branch to figure out, the executive branch will continue to wield outsize power.


> AbstractCommandlineParserFactoryBeanServicePatternFactory

...Locator


Many Catholics believe that Mary was born without sin (immaculate conception), never died (assumption into heaven), can advocate to Jesus for believers (intercession) and has been crowned the Queen of Heaven. This goes well beyond "admiring" or "honoring". To complicate matters, many of these dogmas were only formalized by the Catholic church in the past 200 years. Quite a hard sell for the "sola scriptura" contingent.


> To complicate matters, many of these dogmas were only formalized by the Catholic church in the past 200 years. Quite a hard sell for the "sola scriptura" contingent.

There are only four things on that list, and only two of them are dogmas (and there are a whole two more Marian dogmas that aren’t on your list), so I am not sure where the “many of these dogmas” comes from; also, the various Protestant positions on the role of scripture (prima scriptura, sola scriptura, and nuda scriptura, in ascending order of how far they differ from the Catholic [or, for that matter, Eastern Orthodox] position) were themselves formalized not much less recently.


It's a little ironic to label a call to "stop adding new things" as a "new thing" itself, no?


> Many Catholics believe that Mary was born without sin (immaculate conception), never died (assumption into heaven), can advocate to Jesus for believers (intercession) and has been crowned the Queen of Heaven.

So do the Orthodox churches. And both have roots going back way longer that 'just' two hundred years:

> Mary as Queen of Heaven is praised in the Salve Regina ("Hail Queen"), which is sung in the time from Trinity Sunday until the Saturday before the first Sunday of Advent. It is attributed to a German Benedictine monk, Hermann of Reichenau (1013–1054). Traditionally it has been sung in Latin, though many translations exist. In the Middle Ages, Salve Regina offices were held every Saturday.[21]

* https://en.wikipedia.org/wiki/Queen_of_Heaven#Salve_Regina

> "Majestic and Heavenly Maid, Lady, Queen, protect and keep me under your wing lest Satan the sower of destruction glory over me, lest my wicked foe be victorious against me." St. Ephrem the Syrian (4th Century)

* http://theorthodoxfaith.com/article/mary-as-the-queen-of-hea...

* https://en.wikipedia.org/wiki/Ephrem_the_Syrian

And if we're going to with potentially troublesome dogmas, I would think the Real Presence would be much higher on the list:

* https://en.wikipedia.org/wiki/Real_presence_of_Christ_in_the...


Thanks for the links.

Regarding "real presence", and speaking only for myself as a Christian who doesn't believe this -- my attitude to this is similar to my attitude to disagreements on creation in 6 days vs 6 eras, disagreements over where the end-of-times millennium will fall in the overall sequence of events of Christ's return, and disagreements on how or whether to celebrate Christmas.

For all of these topics I have a belief, and I'll argue it happily, but I also know that none of these are central to salvation. I'm not so sure about Mariology, which seems to veer dangerously close to idolatry and appears to cloud Jesus' central (and exclusive) role in salvation.


> I have a few really good hardware ideas, but I don't believe I could ever market them fast enough and far enough to make it worth spending the R&D to make them happen.

Isn't this why patents exist?


Yes, but China or one of the many other countries that don't respect US patents could care less.


If the telephone replaces errand boys, should it also pay taxes?


> Linux's DRM Panic "Screen of Death"

> "There is no particular reason to do it in rust, I just wanted to learn rust, and see if it can work in the kernel."

https://www.phoronix.com/news/Linux-DRM-Panic-QR-Codes


We certainly don’t want the BSOD to crash. So that’s a reason.


Women: surgery to extract eggs

Men: wanking into a tube


A Dixie cup probably


I'm starting to think the person who handed me a bread bowl for this wasn't a doctor.


NPM has about 4 million packages, Maven Central has about 3 million packages.

If this were true, wouldn't there have been at least one Maven attack by now, considering the number of NPM attacks that we've seen?


Been a while since I looked into this, but afaik Maven Central is run by Sonatype, which happens to be one of the major players for systems related to Supply Chain Security.

From what I remember (a few years old, things may have changed) they required devs to stage packages to a specific test env, packages were inspected not only for malware but also vulnerabilities before being released to the public.

NPM on the other hand... Write a package -> publish. Npm might scan for malware, they might do a few additional checks, but at least back when I looked into it nothing happened proactively.


npm is run by github / microsoft now, which also sells security products...


There were. They're just not as popular here. For example https://www.sonatype.com/blog/malware-removed-from-maven-cen...

Maven is also a bit more complex than npm and had an issue in the system itself https://arxiv.org/html/2407.18760v4


As of 2024, Maven had 1.5 trillion requests annually vs npm's 4.5 trillion - regardless of package count, 3x more downloads in total does make it a very big target (numbers from https://www.sonatype.com/state-of-the-software-supply-chain/...).


No. Having many packages might not be the only reason to start an attack. This post shows it is/was possible in the Maven ecosystem: https://blog.oversecured.com/Introducing-MavenGate-a-supply-...


One speculation would be is that most Java apps in the wild use way older Java versions (say 17/11, while the latest will LTS is 21).


Okay then, explain to me why this is only possible with NPM? Does it have a hidden "pwn" button that I don't know about?



>Does it have a hidden "pwn" button that I don't know about?

Perhaps its package owners do.


NPM executes packages as you download them.


Make no mistake, Maven Central does get multiple malware components uploaded each year, though not nearly to the same extent as npm or pypi. Sonatype (my former employer) just doesn't report on these publicly each time it happens. It's not an isolated problem but certainly harder to do with maven.


I assume you're talking about malware uploaded to new artifact coordinates (possibly named so as to try to confuse users), not hijacking of existing artifact coordinates (group ID, artifact ID)?


generally yes, although hijacking can and has happened on Central with expired maintainer domains reclaimed by threat actor who can then republish malicious versions of a previously legit group/artifact ID. there's also the problem of mirrors or copies of hijacked npm being replicated on Central -https://x.com/SocketSecurity/status/1993389518247149907


Hoe many daily downloads does Maven have?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: