skysight-inc/HackerNews huggingface dataset:
You are right in that the article doesn't discuss what is going on with not just U.S. shale oil but also how U.S. oil can be sold on the global market rather than be exclusively for the domestic market as used to be the case.

For Saudi Arabia the deal with America is that the House of Saud get to stay in power in exchange for the oil, it is that simple. If there is this 'uprising' that you speak of then it will be Uncle Sam's job to put it down.

The original deal goes back to the time when Britain was supposed to have Iran and the U.S was supposed to have Saudi Arabia. On the back of this deal the Saudi 'Royal Family' have built some myth of entitlement to the throne and being a proper 'royal family'. It is an illusion, there is no legitimacy there. So long as they wear the 'traditional' outfits and keep the 'traditional' laws nobody is going to see that the emperor has no clothes.

I don't get the impression that there is any type of organisation against this so-called 'royal family' with a class of people clued up as to how to live in a non-feudal society. They are far from socialist, mere serfs in an offshoot of empire, relatively rich because that is where the oil comes from. They never had industrial capitalism, they went straight from sand and a bit of tourism revenue to the monster of finance capitalism, trickledown economics and everything that the IMF demands. Because of the oil they do get a few empty gifts from the system such as cheap petrol.

For decades those dollars have flowed back to the West in arms sales. To an extent this clawing back of the money has also happened with luxury goods too. So the serf-grade workers of Saudi Arabia are doubly screwed, when this imaginary 'uprising' happens and they impose a government that 'shares the wealth' they will find it has all been spent on underground aircraft hangars and bits of paper that are allegedly investments in the Western stock market.

My favourite fact regarding oil is how it all went wrong in the 1970's with the oil crisis. What only a careful reading of the Wikipedia article tells you is that the US increased grain prices 300% to pay for Vietnam. This was bad news for the OPEC countries, places like Iran had kind of got used to affordable wheat. This wheat had kind of covered the U.S. balance of payments for oil imports before Vietnam, so it had been a happy arrangement. Our history tells the 1970's oil crisis very differently, forgetting the wheat price hikes.

As the article states the government can make quite a few concessions, e.g. women driving, allowing people to go to the theatre, that sort of thing. They can buy off those that might resent how things are going by these concessions yet still keep a tight grip on the deal which is essentially oil for arms and food.
> "Furthermore, even over an encrypted connection it is not difficult to figure out which files you are downloading based on the size of the transfer"

Is it really not difficult? I bet if you sorted all the ".deb" packages on a mirror by size a lot of them would have a similar or the same size, so you wouldn't be able to tell them apart based on the size of the dialog.

Furthermore, when I update Debian I usually have to download some updates and N number of packages. I don't know if this is now done with a single keep-alive connection. If it is, then figuring out what combination of data was downloaded gets a lot harder.

Finally, this out of hand dismisses a now trivial attack (just sniff URLs being downloaded with tcpdump) by pointing out that a much harder attack is theoretically possible by a really dedicated attacker.

Now if you use Debian your local admin can see you're downloading Tux racer, but they're very unlikely to be dedicated enough to figure out from downloaded https sizes what package you retrieved.
Well, defining the expiration date is up to the server. Debian picks a week. Ubuntu does not use it, I have started a launchpad branch last year, but um, I don't know launchpad, so it might take some more years ;)
With the current wealth distribution, it makes more sense to take something great and market it to a few ultra rich at $$$$, instead of letting the general public enjoy it for $.

Examples of this range from vacation spots to high-end restaurants. Making things /more/ exclusive and accessible to an ever smaller number of people seems to be the trend for most nice things in life.
That’s like saying I don’t need a helmet because I have all of this body armour.

At a minimum, HTTPS prevents leakage of information about your configuration but there are several direct attack vectors listed in other threads. Please stop calling it “hysteria”.
I'm aware that APT does not use HTTP/2 but it would be able to use it with HTTPS.

With automatic security updates, the risk of an attacker finding out what packages you have is less valuable considering you are installing the latest patches.

It would be more interesting if that doesn't happen, in which an attacker can learn what you have installed and wait until exploits appear. Automatic updates would negate this attack model.

edit: As I've demonstrated in a sibling comment; even 5 packages is already out of scope as solving which packages they are is a task of millenia. If you use 4 it could possibly be done by throwing a supercomputer at it for a few months.
There were some things that Windows 98 did better than the UIs of today, but overall I just don't agree that it was "excellent". I definitely wouldn't want to go back to it, and here are a few reasons why:

- Even purely from a UI perspective, I much prefer modern Chrome's flat and minimal UI over Internet Explorer 4, and I think most other people do too. At the time, Microsoft claimed that IE4 was an integral part of Windows 98, so I'm going to consider it as part of the Windows UI rather than just a standalone app :)

- The taskbar doesn't scale very well, and once you get more than a dozen or so windows, each entry with the same icon becomes indistinguishable. This was particularly bad because browsers at the time didn't have tabs. As I type this, I have 14 tabs open in various browser windows, and this just wouldn't have fit in a Windows 98 style taskbar. Note that I consider the non-tabbed single document interface ("SDI") to be an integral part of the Windows UI here. Both SDI and MDI (multi-document interface) were part of Microsoft's UI guides, and MDI was even worse than SDI.

- The Start menu also doesn't scale very well, and could get very deep, which confused users. It lacked a search function like Windows 10, Mac (via Spotlight) and most Linux DEs today have.

- No support for virtual desktops, which Windows 10, Mac and Linux DEs today all have.

- Network Neighborhood was slow af, and was confusing for users to configure. Apple's AirDrop has a much better UI for sharing files on a network.

- Active Desktop.

- At the time, Microsoft was experimenting with integrating the web with Windows, and one of the things they did was put hyperlinks all over the place. They even experimented with changing it so that desktop icons and icons in Windows Explorer were links, and this caused a lot of confusion due to the inconsistency between a single-click vs double-click.

Some of the problems here are that we have much more computing power now, and (at least I) tend to keep more things open at a time. There were also numerous Internet UIs that Microsoft was experimenting with at the time (NN, AD, MSN, etc.) and many of them didn't work out.
I do, in my home country it is not legal to sign off projects as engineer if not certified by the Engineering Order as
such.

A certain level of quality is expected, not labeling one selfs as engineers after 1 month bootcamp.
Hilarious !
That would turn Symbol.iteratorDone into a dangerous value, that can't safely be yielded from a generator, or included in an array, or passed to a variadic function.

I don't know if that would be much of a problem in practice but it feels wrong instinctively.
It's not.
The "author" simply stole towel.blinkenlights and wrapped it in golang. I bet he updated himself to senior go engineer on linkedin after this.
None of the "cool" stuff in this is martinraison's work.
> if in say a few hundred years, unrealistically and strictly as a thought experiment, the current system has lead to a single individual accumulating as much wealth as every other individual in the world combined, and having done so in an above board way, while every other person in the world lives in abject poverty

How likely do you think that is, and why do you think it's getting more and more likely? If anything, the wealth and power these days is way more dispersed than a couple hunderd years ago when a few royalty held most of wealth/power/property. Like there's untold numbers of billionaires in China/Africa/Saudi Arabia/UAE/Europe/USA etc, and there's more on their way. In addition, the "turnover" of wealth seems to be faster and faster, and self-made billionaires dominate most rich-people lists (which however ignore most Arab dictators). Sure, it's possible that technology fundamentally changes that dynamic (e.g. by making 100% surveillance and oppression possible) in the future but that's not where the world is at right now.
Individually as indicators they make sense in their context. Grouping together similar contexts makes sense. But aggregating all of disparate people globally on non-PPP adjusted wealth tells us what, exactly?
Chile has both lower taxes and automatic taxation.

In 2019 they will even have automatic taxation for small businesses based on the statistical average for the industry and various signals.

So basically taxation based on machine learning.

You can take it or leave it - it's up to you.

And this also shows that simpler taxation and higher taxation has no relation to each other.
Case in point. The bit rate has to do with dynamic range not frequencies.
Building a splash page using Godot engine
I've heard a 911 dispatcher say take aspirin if you can
It mentions FRBs which are the new hot thing in radio astronomy. Can those be measured with hobbyist methods? How?
And again, all companies with enough money to be able to do that are doing that.
I'm fighting through a book on formal logic at the moment, I never did a computer science degree, is it on the syllabus? It feels like this should have been the first thing I ever studied. I kind of got to it in reverse, data shuffling => everything looks like sql/pandas => everything is relational logic (read about minikanren, datalog, prolog) => lots of things are a surprisingly thin layer over formal logic.

I haven't explored the idea but I read somewhere that type systems are close to unification (rust's typesystem is apparently very close ??).

Interesting to see this article and realise that Dijkstra (God) was interested in logic too.

Has anyone explored the idea that you write your program largely in logic, and that's your spec/typesystem, then you write the performance-relevant parts in a more procedural language, with either generative tests or some kind of proof system showing their equivalence?
massive debts will make your life miserable.

I have both a mortgage and student loans and in a global 'poverty' sense my debt level is massive (but probably quite normal from an upper middle class Westerner perspective). However my household income more than covers all the costs of servicing those loans as well as making sure my entire family is comfortably fed, housed, educated and healthy, and still leaves me with money left over every month to save for a rainy day. That is how wealth should be defined.

Basically, having a net worth of negative $400k is not necessarily a problem if your income is $200K. Being in debt is not in it self a problem, not being able to make your debt payments is what will make you miserable. A wealth indicator should try to capture that distinction.
Of course you'd get more security.

Analogy: It's like your hanging on a rope and also add a safety net. If the rope breaks, you only fall on the safety net instead of the ground.

All software has bugs, so if you add two buggy security solutions, you might only be able to exploit a bug in one, but the other still gives you the safety.
> Most workloads will not fill a wide-screen display, and arranging multiple windows horizontally is usually a pain

Ultra-wide screens can fix that. And using Windows' auto-arranging two windows side-by-side makes them perfect for the kind of workflows that require switching between 2 windows (web dev).
They also seek sex, status, domination, power, wealth, fame, ...
It does not need HTTPS to be secure, but it would need HTTPS to add privacy, for which the protocol has none at the current time.
Show HN: Figma to Google Slides – Quickly Create Presentations
> In Sweden milk expires usually 3-7 days after you buy it.

What's the typical date on it, relative to purchase and expiration?

In the US milk is usually given a sell-by of three weeks after pasteurization, and actually lasts almost a week beyond that.

Though it depends some on fridge temperature, could...

https://www.ncbi.nlm.nih.gov/pubmed/15553644 https://cooking.stackexchange.com/questions/65579/why-do-fri... https://onlinelibrary.wiley.com/doi/pdf/10.1111/1541-4337.12... huh.
I think Istio (https://istio.io) is a nice effort to create both an abstraction on top of k8s and to package a set of commonly needed functionality out of the box. Unsure of its production status or overhead though.

Also I'd only go with a managed k8s solution and I'm not sure I'd consider k8s for older or non-microservice/containerized architectures. In the later case though I don't think there's anything better out there in terms of orchestration.
It's right most of the time. Most people do not get refunds. It's when abnormal payroll events occur. Everyone's job here is to absolutely pay the correct amount of tax. If either side get it wrong, they must correct it (with the appropriate interest).
>(there's a limited combination of packages that sum up to that number).

That is a really hard problem to solve. See the knapsack problem.

Imagine I downloaded 5 packages. Debian has about 68'000 packages. That means there is a total of 1 septillion combinations.

If you could check 1 trillion package combinations per second, it would only take 20 thousand years to solve (40 thousand worst case).
I built this in a few hours to play around with Figma's API, and it blew up on Twitter. Decided to open source the script + make a small guide. Hope you find it useful!
With all of the region in chaos (to which KSA is contributing) the chances of uprising turning into long civil war are not negligible.
Might I suggest http://www.gabrielgambetta.com/computer-graphics-from-scratc... (shameless plug)?
Caching, or more precisely the benefit of ability to cache HTTP response payloads (on shared caching proxies for example) is, to my surprise, actually not mentioned in the article. I'd expect it to be the number one reason to stick with HTTP in this case, not the described hassle and futility of HTTPS.
Let's encrypt is also "hilariously" centralised. What do you do if Let's encrypt is blocked in your country or they refuse to issue you a certificate because of US sanctions?
Because front end development is dominated by newbies to software development who scorn decades of computer science and everything that comes with it.
In a simple tax system there aren't that many deductions. This is especially true for low-tax jurisdictions.

If you want non-standard deductions, create a company and do normal accounting.

50-100 standard deductions can be handled centrally by the IRS with no issues. It's been done in other countries for decades.
What aspect of performance though? Even that means a variety of different things to different people and it isn't just algorithms. I've met people who are bad at typical CS algorithms yet know their language of choice very well and write low-allocation high performance tight code that "does less". Or people that are used to handling concurrent code which sadly is still somewhat of a rare skill. Only the algorithms are touched on in typical CS courses; most aspects of performance tuning come from experience and persistence spending hours trying to get more performance and less resource usage out of an application.
And on the other end of the scale, http://www.gabrielgambetta.com/tiny-raytracer.html (another shameless plug)?
Secure against modification, is not the same as secure against information leakage and privacy.

Using a non-encrypted connection means that it's trivial to work out what packages you download. Using a secure connection at least makes it 1 step harder to infer that information.

However, whether packages should be kept private is all-together another question. I argue that OS updates and packages related to that do not need to be kept private, but applications packages do.
OCR-A is my favorite monospace font. Sadly unicode support is obviously rather limited if present at all.
Even with TLS, Eve can still see the size of the transfer. That's enough to reliably guess which packages were fetched.
That's not always true though, and it can be really hard to tell if a particular combination is going to make things better or worse. e.g. the "Breach" HTTPS+Compression vulnerability.

To continue your analogy: The rope gets tangled in the safety net, forcing you to jump or proceed up with a loose rope, because you can no longer move the rope..
Do we now have a custom domain name on a per article basis?

I find it strange to have a site that is just about one thing that is not that important to most people on a custom domain. If there were pages and pages of information then yes this might make sense but there isn't.

Coming soon...

howtotieyourownshoelaces.com

The premise of this article per domain reminds me of 1998 when everyone thought that instead of search engines people would be typing in URLs, e.g. 'yescupofteaplease.com' so URLs like 'pets.com' were seen as goldmines-to-be.
Agreed. I buy about half my groceries from Grocery Outlet and it's more likely you'll sell slimey lettuce in bags nearing expiration, or nonperishable products that have been phased out, but from the same brands as "regular" stores. The fresh produce isn't even that much cheaper than say, a Kroger store and the quality is comparable.
You're downloading form a third-party volunteer. What protocol can provide privacy given that condition?
There is no "objective justice based on rule of law and property rights". Property rights itself is subjective - they only exist to the extent they exist because of a willingness of a majority to support the use of violence to enforce it, rightly or wrongly.

Hence e.g. Proudhon's "property is theft". What is "objective justice based on rule of law and property rights" to you, some see as a perverse use of violence to restrict the liberty of others

Incidentally it is quite fascinating that you tie opposition to property rights as "statist, gun-point wealth redistribution" when the opposition to property rights originally came with the firmest opposition to the state. Proudhon was the founder of anarchism. Most others who argued against property rights argued against it from the point of view that property rights only exist through violence, and that the state is the ultimate guarantor of enforcement of what they see as coercion.

Whatever point of view one has on how justified property rights are, presenting it as "objective" is ludicrous.
I truly do not see why that matters. For the most part, such things are just an excuse to avoid installing a public robust transportation system. Yes, the amount of people you have, size of area, and terrain makes different sorts of stresses on your system - which is why they need to be somewhat customized to an area.

Businesses do this all the time, and I don't see how it is too big of a hurdle to overcome.
Genuine question: what are you doing with APT that requires privacy?
Then at least make it free for off-peak hours.
> Eating uglier fruit and vegetables is still good advice...

The OP was describing the "naive" people who shop at Whole Foods (or other premium grocery stores) and then complain about the wasted or missing "ugly" produce. They're thinking that if the ugly stuff isn't at their fancy grocery store it must have been thrown away when, in fact, the "ugly" produce has merely been diverted away to other vendors and uses which they're simply not aware of.

The irony that is lost upon them is that by walking into their fancy grocery store, they're basically signalling to the grocery store that they're willing to pay a high price for what the grocery store and their demographic has deemed "unblemished" produce that meets certain criteria for size and appearance.

In a sense it is totally fair to call out such naivete. Instead of complaining to Whole Foods, these folks should just shop elsewhere. The price will be lower, the flavors will be different (usually better), and yes, there will more blemishes and unexpected size and appearance.

To actually find that "ugly" produce one needs to go to the discount/ethnic groceries. In the Northeastern US, that just means finding the Asian and Hispanic produce vendors and going there for produce. There are _some_ other vendors which are beginning to catch on, "Produce Junction" comes to mind.
In India, it goes beyond that. Supply chains are extremely ineffective, and farmers basically sell to middle men. Often these are sold in chain to several other people before they go to the market.

Many times the farmers are given such a low ball offer, that is basically expecting them to sell for loss. The farmer does the obvious. Takes their produce, dump in a lake near by as garbage, because it often doesn't economic make sense to take it back.

Sometimes its worse than that. They just take their lorry and drive over the produce in the market and just take a bus back.
Would it violate the ToS to create a simple sprite sheet out of a proprietary fixed-width font?
I think that the unix philosophy of focused and relatively simple tools that are easy to glue together is a better way to future-proof. Yet to do that you need to have a stable substrata to provide the basis of composition. In k8s case it seems that k8s _is_ the basis where the composition is to happen upon.
This is a pernicious problem in modern politics in general. Sell the easy-to-react-to emotional story to people and they'll turn it into some big movement without stopping to check the facts. This leads to people believing lies and advocating for existing sensible systems to be changed because they believed those lies.

> Of course, but most people don't accidentally make broad accusations of problematic isms, either.

Have you been on twitter before?
Check out my talk if you're interested in internals: https://www.youtube.com/watch?v=0nh2EK1xveg&t=410s ;)
The use and magnitude of font hinting is largely what makes the difference. Windows used aggressive hinting until Windows 8, and it's also the default in many Linux distributions.
by default, LOAD DATA LOCAL INFILE in libmysql is disabled by default to avoid such problem
I'm with you, here. That said, those are still a little bit above my budget. I generally buy the most color-accurate monitor that I can at a price point I can justify. Usually that's $600-700. This time around it was a LG 27UK850-W.

xmonad does a pretty good job splitting my screen into usable browser/application and terminal areas.

All that said, I'm using ZBrush a lot more lately and a Cintiq Pro 32 seems like it'd be pretty sweet.
Well, of course the client behavior is under-specified -- sometimes the client is a human constructing a URL to download a .deb in a web browser over a corp-approved proxy, and then hand-installing the package with `deb -i`, bypassing all the security checks. Or sometimes there's a caching proxy (or three) between the client and the server. Or maybe IT has modified apt to only connect to repositories maintained by the IT department, and rejects sources from other domains.