skysight-inc/HackerNews huggingface dataset:
(I'm going to agree with your first sentence by disagreeing with everything you said about market making)

> Look at market making (providing liquidity for other traders). There's an intrinsic demand for liquidity from funds which try to manage an index, hedgers, and speculators. The goal of market making is to provide liquidity to facilitate those other traders. And yes, there's a small premium for the service, but the fact that the premium is shrinking over time reflects a lower cost for the rest of society.

I think that's a very quaint view of market makers, maybe valid 20 years ago but it seems disconnected from modern circumstances. Market making has largely become synonymous with algorithmic trading, which now accounts for somewhere between 25%-75% of traded volume (obviously varying widely between markets, see http://ftalphaville.ft.com/blog/2011/03/04/505021/algo-tradi...).

A significant subset of the prop traders have been spiraling into a latency arms race, which has gotten to this absurd point where even millisecond-scale trading is considered slow.

Regular old market making (put orders on both sides of the book, make profits from the spread) only seems to work in the absence of significant competition. In reality, profitable firms are running all sorts of short-term speculations and even trying to prey on the trading behavior of people & other algorithms. There have been all sorts of algo-induced pricing anomalies documented at http://www.nanex.net/FlashCrash/FlashCrashAnalysis.html.

The supposed benefit of all this nuttiness is improved liquidity, but I wonder: Who needs liquidity at the millisecond scale? What business, other than algorithmic speculation, will suffer if they have to wait 1/2 a second to buy or sell something?

Also, I question whether the premium of modern prop trading is actually small-- there are a large number of prop trading firms that seem to be doing extremely well for themselves. I don't know the specifics, but I wouldn't be surprised if the sum of prop trading profits reach high into the billions.

Furthermore, these companies siphon off a large number of smart grad students, who would have likely otherwise done something actually socially productive with their time.
The prominent search button is excellent. My grandma would go banana's if it disappeared.
Title is incorrect, Array usage is about Javascript/JSON Hijacking not protection against CSRF.
Apache Extended Server Side Includes? Haven't seen XSSI before. What's the I?

I agree, this is not the attack I think of when somebody mentions CSRF. Well, the solution at least isn't. I would be very suspicious of anyone who claimed to solve their CSRF holes by not using arrays.
YouTube Sees 3 Billion Views per Day
I agree about the killer app, but was thinking of movie sharing instead, for mass appeal. Imagine if you could stream any DVD one of your neighbors has, for free.
You would need a frame rate 2x the fastest PWM cycle. Nyquist-Shannon and etc...
I'm not sure I fully understand -- what is the internet without the services that you use on it? If common sites like youtube and facebook aren't directly connected to this network, will this work? And if not, then what makes this the internet and not just an adhoc mesh network?
Ok. Then my question is "what is it that you are experimenting with?"

Is it something you are making to learn/improve your Arc skills? Or is it an experiment to measure your pull with the HN community?
Should you sell your startup? Four unconventional reasons
Those are good reasons, but the subtext of the parent post is how absolutely intractable IE's share has been for years, despite (once) poor performance and being appallingly behind the curve on new features (tabs, extensions, etc.). Google's own research showed that users didn't even understand the abstraction of a browser application - they were simply "ummm, on the internet".

Clearly, Google made headway on these issues, but I think you underestimate how profound consumers needed (and still need) to be educated that they even have a choice of web browsers and that choice impacts their daily web experience.
I don't think this idea has a real potential for several reasons.

You cannot connect the networks of America and Europe with a WiFi router, so you'll need some more serious hardware. This hardware should be maintained by somebody. And so you have the ISPs again.

In the moment only a geek can setup a Kleinrock router. Imagine your neighbor who can barely coupe with the simple task of opening "the Internet" (or "the blue E") setting up the router, installing and configuring a firewall.

I seriously doubt that home routers are enough for a bigger traffic than couple of computers. Just look what cheap pieces of shit the ISPs are giving now. Of course you can buy a better one, but that's not what the majority of people will do...
Didn't you notice? The piece was to promote the video. (Which you watched. So, yes, credit is due.)
It's pretty hard to dicipher the code, it's very entangled.
Yeah, the article got it right (CSRF was the previous section) but the submitter titled it wrong.
14 Years of Waiting Have Come to an End: Duke Nukem Forever
I thought there was pent up demand to access the HN community for job listings other than YC-companies and as a hiring manager I think there are better outlets than the current job boards. Figured I'd see what happens with an HN-focused job board.
Are there any Assembly programmers here? What is still done in ASM? Is it mostly for writing device drivers and such?

It's been YEARS since I've worked in it, and I used to use it for some practical things like controlling the Mouse cursor in DOS and some routines for buffering graphics, stuff I don't need it for at all anymore.

I'd love to also know some practical things I could use Assemble Language programming for in today's world.
RIM is run by a "good ole' boy" network from Southern Ontario
I think this is the free version of the first edition of this: http://www.nostarch.com/assembly2.htm

Many of the reviews on Amazon bemoan the choice of "High Level Assembly" in that book, does this edition use HLA? How does it compare?

Any HNers who've read the second edition care to comment on it? The author responded in the reviews on Amazon and his defense seemed reasonable to me: many students won't become professional assembly language programmers, so why make them struggle more than is necessary.

http://www.amazon.com/review/R3C06U180STE19/ref=cm_cr_rdp_pe...

Edited to add: I answered my own question, I think this does use HLA. http://homepage.mac.com/randyhyde/webster.cs.ucr.edu/www.art...
Internet eCommerce lecture notes
You have a good point. Like I said in another comment here, I think there will be companies to thrive on this new type of network. I also believe that in the end, Wi-Fi is a disruptive technology to 3G/4G technologies, and once it's everywhere and, perhaps always-on, it will quickly become the defacto network connection for a lot of mobile users.

In a way it's already there, but I think it has 2 issues right now: battery life and not being on by default. Although, battery life for 4G connections is probably even worse than Wi-Fi.
You are probably going to rewrite it all anyway, regardless of wether you stick with the same language. Unless you know precisely what you want and how you want it build and are lucky enough to get someone to do that for you there's probably going to be a quite a few rewrites, there always are. Rewrites aren't a bad thing. The point is by then you know the basics and you know what doesn't work.
> But I'm all for removing the 'I'm feeling lucky' button. Did anyone ever use that?

I don't use the homepage, but I do have a custom search set up in my browser for "I'm Feeling Lucky". It's useful when:

a) I'm reasonably sure what result will come first. For instance, if I want information about a movie I'll type `l imdb tron legacy` (l being the Feeling Lucky search prefix).

b) I want to visit company's website, but I'm not sure of their real domain. I hate landing on domain spam so if I think the company is popular enough to get the first result I'll use Lucky. Example: If I wasn't a user a Dropbox and wasn't sure they had 'dropbox.com' (and they didn't at first, getdropbox.com was the original domain) I would do `l dropbox`.

Also worth mentioning for my specific case is the fact that I don't like Instant or Suggestions and keep them disabled.
Or just have different QR codes for different replies.
Straight east of Madagascar.
Geeky Stats About Magic Mushrooms
The economics of trust. why you should trust Google.
HackerNews is not a creator it's a host. It support my point.
These posts are becoming tiresome (not to say a little bit inconsistent). If Linux doesn't work for you, use something else. It's fine for a lot of people. In fact, most people I know who tried it, like it.
Cargol, una obra u otra instantánea de prats/ruibal, en directo desde Facebook
Unfortunately everybody becomes your neighbour then
Sure there will be small content companies in all mediums, but you can't be a big single media content creator. You need to create other revenue venues over multiple channels. Besides, instead of just telling us, show us ... what site do you work for?
How do you mitigate problems with a user opening multiple tabs over a span of time, and attempting to submit the first one opened?

I believe the best practice is to provide the user's session id in their cookie and provide that with the requests via javascript or even at the time of page rendering. Since a third party (untrusted domain) cannot access information from your cookie, they also cannot form a valid request.

This method is called double submitting cookies.

See: https://secure.wikimedia.org/wikipedia/en/wiki/Cross-site_re...
Are there any demos or sample apps to play with? The last time I tried SproutCore 1.x I was not satisfied with the responsivnes of the UI, even on Chrome there was a noticable delay when switching between tabs or moving sliders.
Cake Toppers
Topper land specialises in creating personalised cake toppers. These unique figurines make wonderful gifts that will create that extra special touch to any special occasion.
Taking full advantage of many of the specialized instructions (SSE) in an Intel chip requires assembly language.

One of my recent hobby projects rearranges the bits in a large set of data using the SSE instructions, and it's an order of magnitude faster than doing it in C.

"Assembly language" is a bit of a misnomer. What we're talking about is writing hardware instructions and laying out bytes in memory directly. Learning the syntax takes about 5 minutes.
You should learn to type (properly)
I upgraded to IE9 to test a web app I'm working on, with the usual "1st IE test" dread. Surprised and super pleased by how well it worked. Way less awful than previous IE versions, in my limited testing. Even looks better - less cluttered ui. If chrome, ff and ie9 had a 3 way tie, I'd be perfectly fine with that..
That was fast. One of the first things I thought when I heard about Facebook's Project Spartan was "this sounds like it should've been done by Google". After all, they're supposedly the ones that want to promote cross-platform web apps, but I think lately they've been too caught up with native Android applications, and forgot a bit about their main vision - that of web-only apps.

I've been also wondering for while if Google is working on HTML5 tools for mobile. I mean, GWT is not very suited for that is it? And it's probably too complex for that anyway.

I do believe, that just like on the desktop, things go in cycles, from native to web, on the mobile platforms as well. We had native apps for a while on the desktop, and then web-apps started becoming more and more used over native apps. I believe the same will happen on the mobile platforms, too, and Google should be the one to take advantage of that, instead of getting to caught up on native Android apps, because the shift is already starting to happen, and they need to be there early, just like they were with Gmail on the desktop.
Sure, Machine learning algorithms can be applied to detect spams and recruiters, but I am talking about having a structure of the job application, like having mandatory fields for company name, location etc., instead of having them in free flow text of job description. It would also make for an easier read.
Having thought of the best multiple channel content creator, I've come up with Disney. Disney makes everything.

http://en.wikipedia.org/wiki/List_of_assets_owned_by_Disney

Anyone have a better example, or of the elusive single online content creator? (Like AOL tired / is trying to be). We have penny arcade as the leading example. http://www.penny-arcade.com/ and since I had never heard of them before this, I am skeptical, but I'm checking them out.
> 4. Do not use the same password on UseTheSource as you use on Hacker News. That's silly and dangerous.

You're not storing the passwords in plaintext, right? They are being salted and encrypted with a one way hash, aren't they?
What iCloud and Music Match Mean for the Piracy Fight
Not nearly as dramatic as Réunion, but I've personally seen 900mm (35.4") of rain in one day. It was August 31, 2002 in the East Coast of South Korea. It felt like a reenactment of the Biblical deluge or something. Really scary stuff.
ICloud and iTunes Match
I use StumpWM: http://www.nongnu.org/stumpwm/

I personally think the whole "Linux Desktop" issue is a bit of a red herring. GNU/Linux (and, I assume, other libre Unixes) is the only widely-available OS I know of where it is even possible to use a graphical environment without the "desktop" metaphor, which I see as a huge step forward.

To me, the "desktop" is all about entrenching the various kinds of boring, repetitive work that computers are supposed to relieve. This insidious metaphor is implicit in everything about how desktop environments are used and developed: the way users are encouraged to scatter icons across their screen for fast access to files, instead of encouraging organization and fast access via searching; the presumed importance of "office" software that most users could replace with a typewriter and a calculator; the focus on making the environment "intuitive" from the first moment one uses it, at the expense of training the user to eventually learn to use their computer more effectively and efficiently.

I would much prefer to see the free software community put its efforts into building graphical environments that eschew the desktop metaphor, and instead focus on making it easy for the user to off-load work to the machine. Part of that task is making it easy for the user to discover what the components of the environment are, how they work, and how to recombine them in novel ways.

A good test for this, I think, is how well a graphical environment supports a task like data entry, because it's the kind of thing that just about every computer is going to have to do at some point, and it is often a mind-numbing task. It's often mind-numbing not because the task is boring, but because most "desktop" environments provide no way to offload the cognitive advances you can make while doing it. After a few records, you know you have to check that field C looks a certain way relative to fields A and B, or that it's faster to enter field E before fields D and B, etc.; but the software you're using provides no way to encode this information, so you have to remember this boring algorithm and execute it repeatedly yourself, instead of letting the computer handle the algorithm while you focus on edge cases.

The challenge is to build an environment that a user can offload the algorithmic aspects of their work onto, without requiring the user to be a full-on programmer, at least not at first.

Free software has already taken some significant steps in this direction. Tiling window managers, the OLPC's Sugar interface, and even to some extent programs like Emacs are examples. We're ahead of the game when it comes to building a new metaphor for working with a computer. We just need to recognize it.
Hi, im a mechabucal engineer in mexico ... Will be cool to work in that project, im from mexico, pls send ne an email to guali.mexico@fmail.com, thanks :)
I agree that one has to make a few sacrifices but I don't see projects like this one as a doomsday failsafe internet; rather as an attempt to get a REALLY free internet. I am afraid we are going to need that in the next 5-10 years.
haha - fatal error! .. it needs restart as soon as possible ;)
Thomas Kalil: Information Technology and Social Progress
Why Popups, Ad Push Notifications, and Degrading the User Experience is Bad
Hunting HiPPOs
About 8 years ago I worked on porting NetBSD to a custom MIPS platform. Most of the kernel work I did was in C, but just two things had to be done in assembler:

1. Putting the CPU into 'idle' mode when no processing needed doing.

2. Putting the CPU+memory into 'standby' mode when running on batteries and it hadn't been used for a while.

This second feature was slightly challenging as the memory had to be put into standby mode first, then the CPU put into standby mode, but of course you couldn't access the main memory after it had been put into standby mode, but did have to carry on running instructions to then put the CPU into standby! The solution was to ensure that all the code required to put the CPU into standby mode (and then after wake-up, get main memory back out of standby mode) was in the CPU cache, so it didn't need the main memory to execute.

I've also recently used a tiny amount of assembler to implement computed goto's when using a C compiler that didn't natively support them

I'm fairly sure that people who require insane speed in tight loops also code in assembler, but I've never needed that myself.
I have a CR-48 and would be interested in checking it out.
I don't mean to be insulting, but this looks like it was hatched up by a high school teenager with no experience or skills in setting up metropolitan-scale networks, let alone a "second" Internet.

No security, & contrary to the webpage's claims completely touchable and jammable. Unless you had a ridiculous amount of wireless access points deployed, destroying one node would have a significant effect (again, contrary to what the webpage sees).
The Chrome dev channel has support for multiple profiles.

Incognito windows share cookies with other incognito windows but not the regular windows.
Haacked has a step-by-step description of how this attack works:
http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-js...

The Microsoft asp.net web stack avoids this by automatically wrapping json responses with an object "{d:...}".

The comments describe this as only affecting FF2.0 although testing was informal. (You should, of course, still protect your services.)
http://www.heavenmedia.com - 1.5 million monthly unique readers and 20m page views, employee number in low double digits.

you can't be a big single media content creator

Why not? I see no reason it can't be scaled up, and we've scaled up by purchasing several websites in the past couple of years (from small to slightly less small). Sure, the bigger you get the harder it is, because there's more work creating the content, and more work monetising it, and more opportunities for making mistakes. But it's certainly doable.
I once used the MMX registers to lowercase large blocks of text in chunks of 8 characters at once. It was faster than using strlwr().
What are the key places to visit in Silicon Valley for entrepreneurs?
I'd rent a beach house in Malaysian Borneo. Parts of it are a paradise, hardly any tourists compared to somewhere like Thailand and many speak English so you can get by. It's also pretty cheap.
Microsoft Responds to Horrified Developers on Future of Windows 8
A session is shared between multiple browser tabs so this shouldn't be a problem. If the user opens a new tab/browser in incognito mode, then the browser will ask them to login in again b/c it can't read their session to authenticate their identity, and then when they login they will have two separate sessions going, each with a unique token/timestamp so multiple sessions isn't a problem either.
I'm curious why you think that. I find Google Instant useful sometimes but more often irritating. It's jarring the way it insists on popping up at you. More interestingly, I find I'm acutely aware of all its tiny lags, the way it slows down and breaks up the simple experience of using a web browser. That's interesting because its speed is, in absolute terms, incredible; an engineering triumph by any standard. And yet all I notice are the ways in which it isn't instant.
Google appears to be spending quite a bit to increase Chrome's market share - not just through advertising, but also through aggressive bundling deals. For example, Skype's installer also installs Chrome and selects its as the default browser—if the current default browser is IE. There's a choice to opt out, but the installer's standard action is to install and select Chrome.

I assume the Skype installer deal will change once Microsoft finishes acquiring Skype, but Chrome is also bundled in the installers for other popular software like Avast Antivirus and (I think) Adobe Shockwave.

Some details:

http://news.idg.no/cw/art.cfm?id=67785482-1A64-67EA-E4A686A8...

https://blog.avast.com/2009/12/03/avast-and-google-chrome/

[Disclosure: I work for Mozilla. My comments are based on my opinions, not my employer's.]
So, what is Chrome Web Store? Chopped liver?
How Harvard’s Bill Sahlman Turns Leaders into Entrepreneurs
>The most likely crime being investigated is student aid fraud, which is an immense problem especially at inner-city colleges. Because of the ease of obtaining government grants and loans, students can register for different programs under multiple names and Social Security numbers.

Worth noting: this stuff happens mostly w/ public institutions, since the private ones are under harsher guidelines and a lot more scrutiny.
They are adding executable code at the beginning of what is supposed to be a data structure. This solution is not elegant at all. It's an ugly hack that uses a side-effect of code to plug a hole in a rather convoluted security model.

Edit:

Come to think of it, this seems to be solvable by a much better method - the same one that is used to prevent standard CSRF. The problem is effectively the same.

Server A is a valid server. User logs into it and gains privileges. Then he visits server B, which is a bad server. B tricks the browser into sending a request to server A to do something (abusing the elevated privileges). The only addition with AJAX is that server B also manages to read the result of its attack. That wouldn't matter if it couldn't trick the server A honoring that page request in the first place.

You can easily solve this by signing your requests, effectively binding two pages on your server together. Normally, PAGE1 has a form (or JS code) that requests PAGE2. You simply need to enforce that only legal (yours) pages can do that. This is achieved by adding a token to PAGE1 that must be sent to PAGE2.

For example,
token = hash(server_secret + PAGE2_identifier + user_id).

Upon receiving a request for PAGE2, the server will know all the arguments that went into creating that token, and re-generated. If the user-supplied token and server-generated tokens don't match, the request is denied.

As long as client side scripts from server B cannot read the token from server A, this should work even with AJAX requests. Since attacker (server B) cannot know server_secret, they will not be able to guess your generated token, and their requests to PAGE2 on server A will fail.
The animation itself admits the error by backing the circle up the distance of the radius before beginning rolling.
Hubspot Gives Analytics Its Due With Performable Acquisition
Salesforce.com's Chief Scientist on Why Gamification is the Future of Work
I think it's just the ASP.Net AJAX Toolkit not plain ASP.Net or ASP.Net MVC.