skysight-inc/HackerNews huggingface dataset:
Due to the one child policy, China is going to experience a demographic collapse this decade as more people retire than are available to replace them in the workforce. So the 2020s is the pivotal decade as China nears the height of its power. The CCP is aware of this and knows that if they are ever going to take Taiwan, it would ideally be this decade. Politically, it will also need a victory as the Chinese economy inevitably slows down due to the demographic collapse.

I fear that if the CCP manages to take Kinmen island without a devastating US response then it will be the Austria moment of our century. Obviously, a strong US response would be damaging to both countries, but the only way to deter an attack on Taiwan is to make the cost of attacking so high for the CCP that it is not worth it. While it will be difficult to justify in the short term, the US must push back strongly when China is "testing the waters" or else it will only escalate from there. If there is only a weak US response, it will embolden the CCP to continue pushing the boundaries until they do something that requires either full scale war or surrender (such as invasion of Taiwan main island).
It also is an issue we have a lot of time to solve. It isn't like humans are going anywhere soon. It also isn't like there's that much waste. Honestly it probably won't happen until there is enough waste that local storage becomes a problem. Which at this rate would take a few hundred more years.
World would've been a better place.
Great post. I work in the space and am coming up to speed on some of the security issues.

Comments:

* this is a great read about security and OAuth: https://tools.ietf.org/html/draft-ietf-oauth-security-topics... written by experienced folks.

* don't use the implicit grant, please. Use the authorization code grant with PKCE. Here's an example (from a doc I helped write, talking about how bad the implicit grant is: https://fusionauth.io/learn/expert-advice/oauth/modern-guide...

* State can be used for CSRF protection but I've also seen it used to convey, well, state that needs to be carried over. That's legitimate, but make sure you append a random value as suggested.

* The well known endpoints will only be present if the OAuth server supports RFC 8414: https://tools.ietf.org/html/rfc8414 but you can always check the documentation. Most OAuth servers have plenty of public documentation to make their usage easier.

* Re "Flawed redirect_uri validation", the OAuth 2.1 spec has tightened this up some and wants exact URI matching. We have some customers who want wildcard matching, but the redirect_uri check is a fundamental part of the OAuth security architecture, so we've resisted that request.

* "However, by stealing an OAuth code or token, the attacker can gain access to the user's account in their own browser." is a good reminder that you should keep your token lifetimes short. We recommend minutes; use a refresh token to renew the token.

All in all, thought provoking article. There's a reason why more and more teams are outsourcing auth; there's a lot of flexibility in the specs and it's easy to make mistakes. Even when you do it right the first time, there's ongoing maintenance. You should run a bug bounty program and/or regularly pentest your system.
Ok, i'll bite. You know nothing about the operational details of power grid infrastructure in Texas and what lead to the problems encountered.

Here is a good video explaining what happened: https://www.youtube.com/watch?v=08mwXICY4JM

Just FYI, Grady from Practical Engineering channel who made the video is a civil engineer. I also recommend his entire series about power grid (well, actually all his videos are great).
)
Fun fact: satellite photos of China's largest military base show that it contains a detailed, lifesize replica of a part of downtown Taipei including the presidential palace.

I wonder what the soldiers on that base might be training for?
“A lot of terrorists”? In Germany? I’m not saying it is perfect, but you might want to balance a bit your news sources.
Most busses and taxis in Sweden run on it, so there’s that
Well, it's good that you're transparent. People should abandon their homes because of your policy.

Which energy sources that emit less co2/kWh than nuclear power should be used to heat houses in that case?

> (In cold climates people have well insulated houses that are relatively affordable to heat, and mostly use non electricity heating, like thus far)

What are talking about? What kind of non-electricity heating? Let's burn some coal or what?

I'm in Sweden. It gets cold. Houses are well insulated and typically heated via quite efficient electric air-to-air or air-to-water heat pumps. Our electricity has been like 98% co2 neutral since the 70s because of a 50/50 mix of hydro and nuclear as a base load.

Now, ironically, the leftist politicians (including the green party) here are dismantling all of this because they and the journalists don't understand the concept of base power, because they don't understand the difference between power and energy. Their solution is to build lots and lots of wind power plants.
>Reddit is decent at catching bots

I don't know about that so much. I'm seeing a lot more straight up spam on reddit that looks easy to spot, but I think reddit gave up or something...
Death toll from Egypt building collapse climbs to 18
Lifecycle emissions of wind, solar, and nuclear are well known to be very low carbon. Lifecycle includes the cement used in their production [1]. When you're job isn't to turn immense flows of carbon + oxygen into CO₂ and energy (like fossil and biofuel do), it's easy to be low carbon.

[1] https://www.carbonbrief.org/solar-wind-nuclear-amazingly-low...
Two questions, if you don’t mind:

1) what kind (make, model, year, style) of motorcycle is good to start, that is also easy to repair.

2) how did you learn how to repair them? YouTube, manuals, some class...?
If you're so rural you can't access a library, how were you using a pre-internet service in the first place?

Internet services becomes more of a win if you're remote, not less so, espescially with things like Starlink coming online.
Thank you! I've seen this language/extension/library pop up a few times and I don't see, even remotely, how it could displace the Python data science stack. The biggest competitor to Python in this space, IMO, is Julia. Go+ seems light-years behind, and heading in the wrong direction entirely.
For Olkiluoto 3 TVO got the original 3.2 billion from its owners and some loans. And it was a fixed price contract but TVO has given into Areva a bit and is now projecting that it will cost them 5 billion. Areva at the moment projects the total price to be 8.5 billion so they will be taking a loss on it (who is going to pay what part of the overruns was in some courts at one point haven't really followed up if there was some verdict and what it was)

Funnily enough most of these loans are from German banks and various export agencies backed by the French government. Even still all these loans were given at market rates so EU would not kill the project (Greenpeace etc did make a complaint to EU and a investigation was done)

This kind of seller arranging some part of the loans is very normal in large infrastructure projects like these.

The other new project I mentioned is Hanhiviki in which Rosatom won the bidding. Areva and Toshiba also left their bids but as I understand it Areva was thrown out due to their failure to deliver Olkiluoto 3 in time/budget and Toshibas bid was not competetive. Though this Hanhikivi plant is still waiting for permits and there has been some obvious issues with it being built by Rosatom and the Russian sanctions going around. It also has some American and UK interests as Rosatom contracted the turbines to some GE subsidiary and Rolls Royce.

https://en.wikipedia.org/wiki/Hanhikivi_Nuclear_Power_Plant
Our designers are on Figma right now (they seem to switch every 12-18 months) but I kind of wish they’d switch to Framer, I’ve heard great things about the React export. We’ve been using Framer Motion, their animation library, for years and it is just phenomenal.
There is a pretty big generational divide among the Taiwanese with the older generation still identifying as Chinese while the younger generation is adamantly identifying as Taiwanese. It's hard to imagine how a peaceful reunification can happen as more time goes on. Culturally the divide is becoming starker over time.
OK, I'll bite. :-)

In particular, dynamic linking is suggested by many as being a bad thing, for example...

https://www.google.com/search?q=dynamic+linking+is+bad

http://users.eecs.northwestern.edu/~kch479/docs/khale_rtld_2...

http://harmful.cat-v.org/software/dynamic-linking/

In general, as Alan Kay said in his 1997 OOPSLA talk [1] (which was not about Unix, but Smalltalk) "Think of how you can obsolete the damn thing". The Unix wars of the 1990s led (perhaps ironically) to Unix becoming and remaining a local maxima, and not obsoleted by something radically new and different, and better [2] in some dimension. This is perhaps a "meta-answer" to your question.

You may wish to study the features of both DEC OpenVMS (released in 1977, a few years after Unix's initial release in 1969) and "Plan 9 from Bell Labs" [3] (released in 1992) for some contrasting approaches.

[1] https://www.youtube.com/watch?v=oKg1hTOQXoY

[2] the word "better" only suggests one dimension of analysis or measurement

[3] yes, that's its full name
Am I the only person who thinks we're just going to be sending nuclear waste into space/storing it on moons with SpaceX Starships/whatever comes next?

Can somebody tell me why this won't be a viable option? Seems simple enough, and it's not like we've not done worse.
Well, that's why I was asking. Thx!
Well, that's kind of the point right? Keeping user secrets out of the trusting system.
Not sure if you're only ever worked alone, but there's an awful lot of value to teams in being able to collectively review designs before committing to them, which you can't do if you have to code everything up just to generate the design. There's also the fact that, in a lot of enterprise and government environments, a design needs to be approved before you can implement it, so you need a way of expressing a design that doesn't require you to implement it first. This isn't approval by managers, but by the customers and owners of the environment you're going to be installing software into.

Of course, once you have an implementation, documenting the as-built configuration using automated tools that generate from your actual code and runtime system is the way to go.
I agree with the general sentiment, but I'm suspicious of moderators and who runs the site to. I think I've seen an extreme bias against anything other than neoliberal capitalism for the most part.
Thanks, no the order differs in Spanish as well. That’s why it’s going to take me a while as I’m going over the Spanish and English translations and trying to make it work. I will try to honor the Spanish order more than the English, even if that makes the English sound weird. The idea is you know English, so it doesn’t have to be very understandable on the English side. Just enough to give you the context.
Yep, Go program does allocating/deallocating in the loop, while the equivalent Rust program does not. Moreover, Rust program compiled with O3, LTO, and PGO. Go version: 75 us, Rust: 15 us.
Alder Lake is still only 8+8 big+small cores, while you can already get 16 big cores in 5950X with hopefully Zen3 Threadrippers in the pipeline coming soon now that Milan is out. Feels like Intel has little to offer in competition.
I think it depends on the type of Oracle product that you are implementing. Having implemented Oracle packaged products for a long time (ERP, OBIEE etc.), there are hundreds of known bugs in each of the modules. In fact, many times, new clients comb through the bug reports before implementing a new module to check if a listed feature has a bug.
This increasingly aggressive posturing makes me question China’s strength and its government’s political longevity. The difficult thing and the great thing about democracy is the stability that comes from a constant transition of power. China doesn’t have that tradition and Xi doesn’t have an “heir”. I suspect what’s really happening here is that Xi has a mandate to reunify China, which if forced, may ironically destroy China’s political ambitions.
WHO statement on masks was misleading but I didn't see it as wrong (only wrong in the sense that they should focus on people's perception of their statements). They said that there was no evidence that masks help. Which was true at the time. They paired that statement with suggestions use a variety of prevention methods.

The statement from Dr. Maria Van Kerkhove that symptomatic patients being "very rare" was definitely wrong. But she back tracked the next day and said it only possible they are rare and was aware of the 40% models which have now come out to be much closer to the truth.
> Amazon's profit went up by 84% in 2020. Why shouldn't workers seek for their wages to go up 84% instead?

Amazon’s moneymaker is AWS, not the warehouse. At least in my city, AWS salaries have went up a fair amount in the last year or two, which makes sense given that AWS generates lots of profit.

The warehouse on the other hand has much thinner margins and if they largely increased warehouse worker salaries they might not be profitable.

Amazon is made into separate business units, so increasing salaries in one business unit which isn’t very profitable because the other business unit is profitable is just bad business.
> We are talking about time frames that are many times longer than the existence of modern humans as a species.

No, we absolutely are not.

"Long half-life" = "less radioactive". By definition.

Do you know what the half life of CO2 is? Infinity.
What do you mean by "pro-China"?

If it means that Taiwan is indeed a province of 'China' then probably. If it means supporting the People's Republic of China and Communist Party then I'm very doubtful.
China's economic growth has been fueled by demographics such as a young labor force. Due to the one child policy and low birth rates, they are facing a demographic collapse in the next few decades [1] as more people retire that are replaced by younger workers. If China is ever going to take over Taiwan, they would want to do so when they will be strongest which will be within the next ten years or so.

[1] https://www.dw.com/en/global-population-decline-will-hit-chi...
I don't see a scenario where China gets anything more than a smoldering crater in terms of industry if they manage to take Taiwan by force.
Your Own Movie Streaming Service
I made a movie streaming service. It is easy to install via docker and you can download, manage and watch your favorite movies from your pc or phone. You can install this on your server and use it as your own streaming service.
My contributions to Benchmark Game for Rust are accepted. ;-)
What Does It Mean to Be ‘Lucky to Be Here’?
It's both cheaper and more likely to remain isolated from the biosphere in stable geologic formations like crystalline bedrock than going through the trouble of (relatively unreliably) getting into (and out of) orbit.

Current nuclear waste solutions are perfectly sufficient and appropriate [1].

[1] https://whatisnuclear.com/waste.html
This is probably gonna get messy once the top of CCP see this.
And the guy is clearly a real scholar: https://scholar.google.com/citations?user=0g9Hm1cAAAAJ&hl=en...
Are you aware that Dubai imports sand? It's not communism they've got there, though. More a sort of feudalism, I think.

Anyway, government is only inefficient if you want it to be. If you keep voting for corrupt grifters that waste money, that's what you get. There are plenty of examples of government being fairly efficient.

In the US, the Republican Party has been preaching the evils of government for decades, and when in power, they've made sure that they were correct about it. They made it a self-fulfilling prophesy.
> Some of the work should have been spotted by plagiarism checkers

I've been in postgraduate academia and industry, and been involved in multiple conferences at different levels. I'm not aware of anyone ever running a plagiarism detector on any submitted work at all. Do other people do this? Should the people I work with have been doing it?
The anti-China rhetoric and propaganda in the USA has been steadily ramping up over the last 3-5 years as well, for better or worse. I don't think this is an accident or happenstance.

If China decided to take Taiwan in a small and local (and, let's be honest: extremely quick) action, there would be broad domestic support in the US for the US interfering.
The density of uranium is secondary to just how unbelievably energetic (per unit mass of fuel) fission is.
The other common approach here (for non-generative images) is to store the Sha3 hash of an image and then simply require that someone, somewhere has the actual data. You could also pass the image as a LOG message which is significantly cheaper (3 gas per byte, versus 20,000 gas per 32-bytes to store data) which means if you can read older chain blocks, you can ensure you have the underlying data.
Well they say imitation is the sincerest form of flattery (that mediocrity can pay to greatness). I wonder what this imposter thinks every time he looks down at the tattoos on his hands that will remind him of what he's done for quite a while, if not forever.
Well: Reminds me of something I experienced on HN and Reddit, though my case was a far less significant level. I posted a comment on HN in response to some article about Emacs. Later that day I saw someone had copied my comment word for word in reply to the same article on Reddit. I still have no idea why someone would do that. I thought at first it was some kind of karma farming operation but the post history of the Reddit user didn't really fit that profile. Plus,it seems like r/emacs would be a really poor choice for that. I've always been curious to know why someone would do something like this. It's interesting to read about it happening on a way larger scale.
ADVICEment – Automate your documents and win clients
It's hard to think of anything. Unix has stood the test of time. It's been the default OS for servers for as long as the word "server" has existed in a computing context.

However, one area that it's failed is the desktop/laptop/workstation. Unix is simply too complex for daily use. It's like going from a toyota prius to a semi truck. Sure, the semi truck may have better torque and carrying capacity, but you also have to manually shift through 15 gears to drive it. It's just inefficient in a home or business context.

Attempts have been made to paper over the semi truck with a toyota prius-like wrapper, but because most of these are volunteer efforts with limited resources (donations and pull requests very welcome!), it's a very leaky abstraction. You still sometimes need to work those 15 gears.

Another emerging area that Unix could perhaps fail is the server world. In the cloud, where everything is in a hypervisor, an "Operating System" just gets in the way. I think that soon smart companies will realize that they can save a few dollars a month by swapping out Alpine Linux with an even thinner application wrapper that runs directly on the metal.
Python Cowsay Alternative
> we will sit here and watch

I think there will be very significant economic escalation. US + EU and probably some local countries (India, Vietnam Indonesia) will just ban all Chinese trade, maybe force Japan and SK do the same. China may get some Taiwanese fabs, but it's only single cell in supply chain, and may be rendered useless without integration into global economy.
Conferinta de presa si echipa Romaniei cu Germania 28 martie 2021
The biggest hurdle for Go in this realm is honestly the Go—>C FFI latency. It severely limits acceleration
I'm talking about 0 MWh for the entire grid, which includes all of the distributed generators. So, by definition, shutting down each and every piece of electric equipment connected to the entire grid. You truly believe that is a tenable position?

If not, than you must accept there exists some necessary base load. That can be provided from base production like it is today, or it could theoretically be provided from storage and over-production in a hypothetical renweables-only grid.
All the American companies that choose to censor the word Taiwan and call it part of China are directly complicit with this. No rational person in a position of responsibility could have thought that this wasn’t the long term intention
Taiwan is far more strategically important than Crimea. I'd hope at a minimum we'd raze TSMC facilities and get key personnel out of the country.
No, because components implies inputs (props), and things like conditional rendering, or slots (props.children), or even life cycle hooks. You'd have to make code style decisions like what kind of code style to use (functional vs class in react e.g.).

Even if somebody did do all of this, merging the file from the app into a real project would be difficult. There'd have to be rules about merging, and diffing, and command line tools, etc. Maintaining and documenting all of this would be an absolute nightmare. And that's not even getting into engineering or marketing difficulties because you'll have people confused about the product identity, or say that it's too complex, or that it's buggy because it has so many more features now. And all this for pretty much nothing.

Because figma already has css exports (even if it's iffy, they're working on it). You export the styles, the padding, the colors, and that's what people really want to get from their figma files. So you get most of the way there for a much, much smaller fraction of effort.
This is highly debatable. There are places on Earth with natural radiation fields greater than large swaths of the evacuation zone around Fukushima. For Chernobyl, see [1].

https://thoughtscapism.com/2019/05/08/what-about-radioactive...
Energy storage is not a problem in the long term. Making sure that polluting power plants only run 10% of the time is a short term problem that has a solution today.
Just like you won't see any trump supporters, pun intended, right?
Yes my bad, not cement, it's not mortar but concrete, 150-300m^3 of concrete per 2MW windmill.
Show HN: HaikuBot, a script to procedurally generate original haikus
China has been slowly biding their time and consolidating their soft and firm power throughout the world. They’re taking over institutions, and I wouldn’t be surprised if they’re not actively cultivating power here in the USA among elected officials. The tip of the iceberg?

We (the USA) does this sort of stuff all of the time. When we will stop pretending that China doesn’t?

https://www.mercurynews.com/2018/08/10/thiessen-sen-dianne-f...

https://spectator.us/topic/eric-swalwell-honeypot-china-ccp-...

https://www.nytimes.com/2019/08/27/world/asia/china-linkedin...
Open source projects disclaim all warranties because the authors have no control over how the software might be used. It seems like there are similar issues for code written for a business? It would be foolish to take liability when you can’t stop the business from continuing to use the software and causing more damage.
People are not moving away from React.
"An invasion of Taiwan, the self-governed island claimed by Beijing, would force the U.S. to decide whether to go to war with China to defend an implicit ally."

The U.S. and its allies have two choices:

1. Officially recognize Taiwan as a country and make it an explicit ally.

2. Give Xi the green light to annex Taiwan.

I don't see any middle ground here. Failure to do #1 is functionally the same as #2.