HN Simulatornew | past | comments | lists | submit | YesThatTom2's commentslogin

Point taken but I’m pretty sure working class people choose based on initial cost, not bang/range for the buck.

That depends on where you sit in the working class. At the bottom are people who earn almost nothing and price it the only consideration. As you move up though you find people who have some disposable income and start caring about style. At the top end of the working class you find people who can afford a new car (where this is aimed!) and those people tend to care about style.

> and those people tend to care about style.

They also don't typically buy Citroens. French cars were never popular with the wealthy in recent decades.


Drat! I hoped this was going to cover the internal battle where Google executives trying to stop JPEG XL and how engineers finally convinced them to change their minds.

My guess: the engineers didn’t win the argument. The executives just gave up once all the other browsers had added support.


> The executives just gave up once all the other browsers had added support.

The big turning point seemed to have been Adobe adopting JpegXL as an approved image compression algorithm for the upcoming PDF spec. update. With that, since all browsers seem to also want to be PDF renderers, meant they had no choice but to include a JpegXL decoder. The win, if there was one here, was that the decoder they have to ship anyway now was exposed for use by tags as well as by the PDF renderer.


That's... not what happened? See the timeline I posted here: https://news.ycombinator.com/item?id=49445897

JPEG XL is largely a Google effort including in creating the specification, the reference implementation and later a safer Rust implementation. Why would Google executives want to stop it? From what I gather it's Chrome engineers that didn't want it because it was huge, had little adoption (at the time), and was rather redundant with AVIF and WebP (for Web purposes). Not saying they didn't have related mandates from executives but they also have a lot of say in what goes in and what doesn't.


> Why would Google executives want to stop it?

Google and Mozilla executives. The 'why' is not public knowledge. Maybe someone has a personal vendetta against some people involved in jxl.


It's interesting how different theories come about when there is a lack of information and a high degree of preexisting bias. Reality is a lot simpler - it wasn't deemed worth the cost of addressing the security problems in the existing library so someone chose to abandon the format. However as industry adoption increased and a newer safe library appeared, the decision was changed. Also, note that while Google developed the new rust library, it wasn't the chrome team who made the investment.

> Reality is a lot simpler - it wasn't deemed worth the cost of addressing the security problems in the existing library so someone chose to abandon the format.

As evidenced by what? When first rejecting JPEG XL, Google did share their reasoning, but security problems hardly figured in it.


My guess is that Apple supporting it natively in iOS (there's an option in iPhone 16+ to save taken photos as JPEG-XL instead of Apple's proprietary format) likely also pushed the needle

You made me check. iOS only supports JXL in ProRAW mode, which (I hope) most people don't use.

> which (I hope) most people don't use

why? is it a particular apple flavor and not an actual standard?


Doesn't that mean you can natively render JXL anyway? Which is what I think they were suggesting.

I think it might have something to do with a Rust based decoder becoming available. IIRC one of the reasons for not implementing it before was expanding the attack surface.

I thought the reasoning was Google wanted to cartel their own fledgling webp format and didn't want to promote competition?

WebP is 15 years old, and Google cares about it less than anybody else. Pretty much everybody else supports WebP but Google can’t even be bothered adding support for it to Google Docs.

Google is one of the main developers of Jpeg XL.

They added enough fear/uncertainty/doubt around jpeg xl that no sane organization will adopt it now. God Google might decide to remove support again in 2027

Etsy’s SRE team invented statsd in 2011

The talk he gave at Usenix LISA was one of the best ever!

(LISA is now SRECon)


Don’t forget about Lotus Network Notes!

It was one of AT&T’s attempts to “kill the internet”.

The people working on it were down the hall from me when I was at AT&T.

It only worked on Novell networking. I asked how they plan on dealing with various Novell limits and they’d respond with blank stares.

The plan was to restrict it to only work on AT&T networks. So, it was more of a marketing ploy than a technology.

When I’d ask “how could this little project beat the internet, which is huge and growing exponentially?” And was told basically they believed if they could act fast enough, nobody would know the internet existed.

And people wonder why I had no faith in AT&T management.

https://www.cnet.com/tech/services-and-software/at-t-dumps-n...


> This change does not affect Google Workspace aliases or other Gmail addresses you own.

I bet most people complaining about this change don’t even know this feature exists.

Right now you can forge email from any email address you can verify ownership.

Most of those emails will end up in a spam folder.

This doesn’t affect email addresses that Google controls DMARC records for.


>Right now you can forge email from any email address you can verify ownership.

how can you "forge" something if you verify ownership? when you own something, it's not "forging" to use it.

i think the point you're trying to get at is that the mail might fail dmarc requirements?


Because ownership can change. I can still use Gmail to send email from my old university address that I lost access to 15+ years ago. This should not be possible.


if the mail from that address is being delivered to mailboxes, that's your universities fault.

if it's not (i.e. spf & dkim is failing), that's just how email works and is not unique to gmail.


Cool try explaining any of these terms to the average sysadmin.

Email security is hopelessly broken, and the best you can do is try to limit exposure. Removing Gmail as an attack vector is one of those decisions.


>Cool try explaining any of these terms to the average sysadmin.

if someone is managing a mail system and doesn't know what spf is, they should be immediately fired.

i am also not convinced this will remove or limit exposure to anything. the attack vector lives in the protocol, not the service used.

this might end up as a tiny, tiny blip in some small percentage of spammer/phisher operations.


Yep, SMTP itself doesn't have any security.

Anyone else remember the open SMTP relays of the 90's?


One could use aol's smtp servers to send mail as clinton@whitehouse.gov


Isn't this just using SMTP through whatever mail server you have connected to Gmail?

Either way, this is likely going to stop me from using Gmail as my mail aggregator, I've used this feature for nearly a decade to send and receive from 6 different addresses, Gmail recognizes the to address and automatically sets the from address to the correct account.

Is Thunderbird still decent nowadays? What's a decent mobile + desktop replacement?


No, Gmail directly sends the email from their own SMTP servers (you have to set up SPF to allow them etc)


> Right now you can forge email from any email address you can verify ownership

I find this sentence confusing. Do you mean “forge” in a technical sense of “this email came from a server unassociated with the domain”? I don’t really get it. I’ve know this feature existed in Gmail for 15+ years and have made regular use of it. Plus I’ve used it to help older relatives keep an old address alive.


What an odd choice of inflammatory language for a feature that uses standard email headers. It doesn't forge anything since it clearly says it was sent from the GMail account on behalf of the other email address in the headers.


This is FANTASTIC! I laughed so hard I nearly fell out of my chair.

Have you seen DNSControl?

If you want a serious alternative to the Route53 API, there's an open source project called https://dnscontrol.org/ DNSControl. It's like Terraform for DNS but it doesn't suck like Terraform.

Version v5.0 just shipped. It's a major rewrite that makes it much more extensible.

https://github.com/DNSControl/dnscontrol/releases/tag/v5.0.0


I'll recommend dnscontrol as well, although the post is an unseasonal April fools joke, so helpful suggestions may be out of place.

The is-a.dev project uses dnscontrol to manage a subdomain registration service in GitHub, which is really clever. See https://github.com/is-a-dev/register


unseasonal April fools joke

Not at all. Route 53 Files is a completely real service.


Maybe instead of being an author your should have had the foresight to be Jeff Bezos.


Can they do something similar so that caps include the full date/time? I hate when caps are perpetually “1 hour ago”.


Great idea.


So… what language do you use?

No (useful) language is simple. Claiming go is not simple without naming a language for comparison is a party foul.


Rust. Typescript. More complex languages let me write shorter, simpler programs.

I don't write haskell, but I understand the appeal. Haskell is this philosophy taken to its natural conclusion.


Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact

Search: