skysight-inc/HackerNews huggingface dataset:
I used to work for a financial software startup. One of our products was all about analyzing the NYSE TAQ (Trade-And-Quote) data to find such patterns. Another of our products was an execution engine that would take a large block order and automatically slice it up into individual trade executions so that nobody could a.) identify the source of the large order and b.) trade against it. The software would automatically compensate for the amount of liquidity in the market at a given time and execute trades only when there was sufficient order depth to avoid moving the market.

Basically, people have thought of these strategies before. And they've thought of countermeasures to those strategies. And they probably have countermeasures to the countermeasures - for all I know, maybe RennTech's secret is that they've figured out how to statistically identify everyone in the market and trade ahead of them.

The financial industry is a massive arms race which draws some of the smartest people in the world. It's very unlikely that you (or any individual investor) can compete unless you've worked at one of the big hedge funds.
A New York City Newspaper Called Obama the “N***er in the White House”
I'm sorry, it definitely isn't. I had to increase the font-weight from 200 to 300 to even get basic legibility.
Searching for "pe ratio for google" in pennywhale doesn't return anything, while the same query in google actually returns the PE ratio for GOOG.
If anyone has questions on how I developed this application I would be more than delighted to answer.
Had notary up and running, but was not able to force browser into using one. Unfortunately there is not enough attention from community to this project.
Evidence of Abundance #1: More Leisure, Less Work
The bud ( https://github.com/indutny/bud ) does support this kind of hot config reloads and process restarts. It's just starting new worker processes on SIGHUP, and let old workers wait until all their connections will be closed.

This is basically done by moving the balancing between workers into the master, instead of calling `accept()` concurrently from the workers.
So is this the politically correct version of the "avoid ghetto" function that people joke about?

In all seriousness though, it is pretty cool use of data mining and crowdsourcing.
Can you explain in more detail how well it works with Arduino? Could I take 3 arduino components and 3 spark components and have them integrate to do something useful?
I have developed in Python for the past 4 years, give or take. Virtualenvs have, hands down, been one of the worst parts of the experience, without exception, and I can not recommend them.

(No, I won't write up an essay about why on HN. If you really want me to, shoot me an email and I'll write an essay about them).
this is pretty cool ! could you talk about the parser-generator and ER relationships ? I was looking to build something similar for a webapp and was stuck at how to generate the autocompletes.
That's useless. A compromised CA could create a certificate for an arbitrary start and expiration date. So this only penalises users who have had a certificate legitimately, and doesn't work at all if the CA's crown jewels are stolen.
Returning and storing user selected web elements using a basic C++ web browser
First HN redesign I like. I would actually use this.
Heh... I do feel like I'm promoting bud a way too much here, but it seems that it could be better suited for PaaS than HAProxy, mostly because of it's async SNI feature.

Basically, bud can load the certificates and private keys for a domain name on the fly, without putting all of them into configuration.
“HummingBoard” looks like a Raspberry Pi but packs in more power
I'm not necessarily talking about just the Net Neutrality issue, it seems pretty obvious that the internet should not be remodeled after Cable TV.

Plus, there's no real way to enforce it unless they purposely slow down VPN traffic, which would make me look for a new internet company immediately.
Comm failure is a good risk to guard against but that won't help with a damaged craft.
"6. Production filesystem IS NOT mounted at this point

9. gitlab-ctl start starts the GitLab with the staging data in /var/opt/gitlab on the root filesystem that doesn’t have any production data. At this point logs report that the production db doesn’t exist which is correct because we are not on the production file system. No production data has been touched at this point. The Gitlab web UI is not responding (502 error from nginx)"

This is what strikes me as needing addressing. There shouldn't be staging data that is normally hidden by mounting the production filesystem. If the production database isn't there, Postgres should fail to start. The Postgres team is pretty adamant that otherwise bad things can happen; see http://www.postgresql.org/message-id/12168.1312921709@sss.pg...
Why are you being intentionally obtuse on this issue? I can't tell if you're trolling, shilling or just using poor rhetoric to support a genuine opinion.

Ending net neutrality is an opportunity for the very few large Telco companies to profit from their monopolistic position in the market at the expense of all customers.

Aside from the direct and immediate impact of a degraded experience for internet users, in the long term it also kills innovation by making it harder or impossible for new services to compete with existing companies that can afford to pay AT&T, TimeWarner, etc their extortion.

No, it's not just about video. Yes, your latency playing Starcraft will be effected (either blizzard pays your ISP to let you access their servers on the fast lane or your traffic gets deprioritized and you get more lag). No, you can't circumvent this by using a VPN and most importantly, you shouldn't have to even think about using a VPN to route around your own ISP intentionally degrading your connection to force payments from the services you're trying to access.
It's interesting, because theoretically NLP should be able to "understand" what you mean but in reality I find that even if you parse sentence structure and extract some meaning, you're still at some level hardcoding the possible things that can be queried into the code.

This is a good point.

One thing that I'd claim is that NLP is less useful than you'd think for single queries. I'd just suggest the thought experiment of being able to ask a highly knowledge person one question with no follow-ups. Even someone with a mastery of English and the data probably won't start out with the same idioms and approaches, so you'd have to phrase the question carefully and exactly ... just the way you have to spend a lot of effort writing a SQL or similar query.

If you can interact with such a knowledgeable person, you'd learn their expression style and they'd learn yours - after some interaction one has a very powerful effect. Until then, things are rather limited.
Do we have any idea how much potato salad guy already gives to charity? It might be a little, it might be a lot, it might be nothing. How is what he does with his money anyone's business but his own?
One thing I'd say is that for the first week, don't go too deep into theory or even syntax. Have him work with tools like MIT's Scratch or Scirra's Construct to build games and in the process, learn how to think in a programmatic manner. Then, once he's interested and hooked, take him through your planned curriculum.

Source: I'm a 16 year old who got hooked on to programming a while ago.
What bothers me personally the most is aligning the comments link right. This works well on almost square browser windows, as in the mockup, but considering that hackers may (probably?) have huge screens at work... That's too far away from the other links. Fitt's law etc.
Hello ECMA-408, the new official Dart Programming Language Specification
iOS Security Whitepaper [pdf]
Time to ditch polite talk about income inequality. We know who’s getting rich
Hey,

(Disclaimer: one of the authors)

We randomize the connection parameters on each connect to help us gauge the stack's behavior with various combinations (see https://github.com/mirleft/ocaml-tls/issues/159 ). Normally it uses first available from the list here: https://github.com/mirleft/ocaml-tls/blob/master/lib/config.....

(For some reason the RSA variant got on top; it should have been DHE_RSA, which does provide PFS.)

Side channel attacks were a very big concern, and I invite you to read the entire series of articles we plan on publishing in the next few days, where we try to lay down our strategy and explain what we know and what we don't. Or even skim through the handshake code and check some of the comments there.

We were already warned that CVE-2014-1266 CVE-2014-0224 are not memory safety issues. The article is badly worded there. What was meant is that they are, at least in our pretty firm opinion, issues with C (something we will elaborate in more detail in further articles, but in essence, you get regular control-flow in a functional language and you can encode state machines in a far more explicit manner). Working to update the post and clarify this.

As for the issue #6, yes, its closing was not documented too well. This does not mean we didn't expend significant effort to actually address the points there :) .

Thank you for the input and please have patience with us. We still have (at least) four more articles to publish!
> The original comment listed some issues with free-market financing but gov backing is not suddenly more altruistic/fair because it's not coordinated by 'free-market' billionaires.

I agree (though I don't think it's a 'free market' in sense of the economic term of art), however the issue is political power and control. Do we want a few citizens to have that much influence over our society, such as deciding which good works get funded, and who gets the funding? What happens when a donor threatens to reduce funding for the local hospital if the city council passes a law that impacts the donor's business?

Also, I tend to think the NSF will do a better (if not perfect) job of evaluating grant proposals than the random philanthropist.

You are right that the wealthy already have outsized influence; that's not a reason to give them more.
this is one of those times where the people using badly configured proxies just need to live with a broken internet rather than drag the rest of us down
Polyfill for module.exports in the browser
Agile for a Bootstrapped, Part-Time Startup
They don't make a chip. They use a CC3000 from TI -- which costs about $10 -- and provide a thing wrapper around TI's own provided driver.

You can take the same CC3000 from TI -- around $11 in low volume -- put it on your board and write your software with their driver.

They basically make a good dev board but for anyone wanting to make anything in a volume beyond 1K they'd use the TI module directly. You don't put a dev board in an end product.

I fail to see how their business is going to scale beyond this.
The Spark Core works as a standalone microcontroller (like an Arduino) and a WiFi connection (quite unlike an Arduino).

All you need is Spark.
Bud – TLS-terminating load-balancer
PR Mistakes Tech Startups Must Avoid
> In Lua, it's impossible to have a dictionary that maps a key to nil: setting a key to nil removes it from the dictionary!

Wait is he really trying to say, "Setting a VALUE to nil removes the entry from the dictionary!"? If so, that sounds terrible.

I can imagine barking up the wrong tree wondering why my map is missing fields when the real problem is an object I passed into it is unexpectedly nil.
How is banning the right to defend yourself against a baseless accusation in any way "free for open discussion and transparency"?
I don't think I ever said that all ISPs are going to do this. I also don't think any ISP needs to charge customers twice for accessing the internet (eg, own the gun in the first place).

I think this is where the gun simile breaks down because while a gun may have valid uses relating to protection, internet non-neutrality has no uses except to line the pockets of monopolies.
What's crazy is that on Sunday, he was at like $4K. Two days later he's at more than 10x that. Can't wait for VCs to start funding webscale potato salads.
There's also Red Thread Games. They're doing "Dreamfall Chapters", a next installment in "The Longest Journey" saga.

http://redthreadgames.com/
Simple Collection's sorting and filtering with Ember.js
Birth year and political leanings
Needs a demo video.
Why would you want "high-performance 3D interactive content" in a browser?

What I want is to read things and communicate with people.
The main product isn't the board -- CC3000+STM32 -- but rather the glorious and inscrutable cloud service that goes with it. The board designs are even being given away for free, it's OSHW.
Skin's ability to 'smell' seems to help it heal itself
Why represent the data twice? That's not minimalism. Besides, if you were the OP on an article, you couldn't tell the addition of even say, 5 points without the number itself, making the Y-meter useless. Plus, all data outside 0-400 is completely lost. Something with 401 votes looks exactly the same as 2000 votes.
No. The spark dev kit includes an STM32F microcontroller. You can think of this as kinda like your Arduino. You can write programs for it, but you'd have to use their online IDE I think since Arduino native doesn't support STM32F.

It is basically an Arduino dev kit w/ the WiFi module integrated. If you want to use an existing Arduino shield you'd have to buy their Shield Shield which you can plug your spark core into and then plug in the other Arduino shield.
"Body on a Chip" Hints That Nanoparticles Could Damage Organs
Yes, that is what I meant. And yeah, it is weird behavior. (I think of "d[k] = v" as "setting the key k to the value v", so that's why I said "setting a key". Perhaps "binding a key" would be clearer?)
Great - you have a new customer. Thanks for putting this together!
I gave my opinion and labelled it as such.
I wish networking was sandboxed in iOS 8, at least for particular kinds of apps (e.g. diary apps). Apple could use the chance to promote iAds and CloudKit at the same time by whitelisting them. :)
ILK 8 Juli 2014 Indonesia Lawak Klub Terlucu Narsis FULL
> That's useless. A compromised CA could create a certificate for an arbitrary start and expiration date.

Sure, next month they could still be issuing certificates that expire in 23 months and they would be valid. But a year from then they'll only be able to issue certificates that expire in 11 months, and after two years they'll only be able to issue certificates that are already expired.
It comes from my knowledge of functional programming and the problems that come from trying to do this stuff by passing dictionaries. I'm not a Scala programmer, so maybe I've missed some subtleties, but I doubt it. Here's Edward Kmett:

"Since you can pass any dictionary anywhere to any implicit you can't rely on the canonicity of anything. If you make a Map or Set using an ordering, you can't be sure you'll get the same ordering back when you come to do a lookup later. This means you can't safely do hedge unions/merges in their containers. It also means that much of scalaz is lying to itself and hoping you'll pass back the same dictionary every time."

You get the same issue with Ocaml's implementation of polymorphic tree-based maps, where you lose type-safety. This is why you don't want to pass dictionaries for this stuff, but instead want to use modules and functors, which allow you to emulate existential types, higher-order kinding and higher-rank polymorphism.
Google Intern Salary Reaches $6,000 A Month, Plus Free Food And Gym
If Two Homes Are Built on This Bernal Heights Property, Will It Explode?
In my experience, the ascii graphics in DF was the least of the contributors to the steep learning curve in the game. Many people would complain and be turned off by its ascii graphics, but you really do get used to it pretty quickly. Think of that matrix quote "All I see now is blonde, brunette, redhead", after a while of playing you really do just see trees, water, dwarves, etc. In my experience, the difficulty of the game comes about because of the sheer complexity of the simulation and the clunky UI (the menus not the graphics). The latter of the two really a minor annoyance when compared to the former.

While stonesense may encourage more players to start previously turned off by the ascii (as did the 2d tileset mods before it), it will not help the actual difficulty of the game.

New players aside, current players also seem ecstatic about the mod.
I want a legislative solution that doesn't stab me in the back, which is what I think I'm going to get if we don't talk these things out.

I don't think it's as simple as, "No more peering agreements" (the internet infrastructure would be overloaded) or "every ISP must accept all peering agreements" (one-sided peering agreements are something that needs to be addressed somehow -- Netflix can't keep flooding Comcast's network with impunity).

I absolutely don't want to pay extra to my ISP just to watch Netflix in HD, but I don't want to have my Netflix degraded to SD just because Comcast and Netflix aren't legally allowed to make deals together anymore. There's a middle ground here, and everyone seems to be ignoring it.

People seem to have a chicken little view of this, and won't accept any dissent or disagreement whatsoever. Look at how you wrote what you did! You just threw in like 5 or 6 very uncertain things, and pretended like they're undeniable fact. That's not how a discussion happens.

It's too bad Hacker News doesn't appear to be a place where a discussion can take place. It's sad, because if we can't get our heads out of our asses about this, there's zero chance anyone in congress has a hope of doing so.
His idea deals with the problem of CAs having no incentive to do their job properly: they won't lose their ability to issue certs.

You are addressing the other problem: CRLs essentially.
It concerns us too. Right now the entropy in Xen domains is weak, but we are working with the rest of the team to feed some actual environmental noise to keep Fortuna well-fed.

You can also run the library on Unix, of course, and there the RNG is periodically seeded from /dev/urandom.
Update on Twitter[1] from Googler.

> The "Only Chrome" thing in google.com/hangouts/ is not correct and an error/confusing UI. Will be fixed. CC @andreasgal @angelinamagnum

I'll leave it up to the reader to believe it or not :).

[1] https://twitter.com/cramforce/status/486572034458021888
tl;dr it's Oprah.
This is the kind of one-hit wonder that you simply can't imitate. It amuses due to its novelty. Repeat it, and it's gone.
>Why not just use one of the apps? //

Why use one of the apps though, isn't this a website, shouldn't it be made accessible through the common web browsers. Individual apps which just apply a style, sample and modify a website and pipe it through a hidden browser object seem strange - we don't need apps for every different bit of content, that's one of the great things about a properly standardised web and high quality browsers.

Different apps for every bit of web content seems perversely inefficient to me.
HN trends happen regularly. Right now it's profiles, in the past it has been military aircraft, biology, whatever.

It's pretty neat and seems to work well - waves of variety without the segregation of something like subreddits or the chaos of a completely theme-less forum.

Ideally, I'd have a "More like this" button that would identify recent submissions belong to the same topic cluster.
That is exactly the question we have. And yes, the primitives are in C largely due to timing concerns.
The whole point of the gun analogy is to illustrate how terrible the, "just because they can, means they will" argument is. That's it. Think no more of it beyond that.
http://freerice.com/content-group/kick-watch-brazil-vs-germa...
Well done on noticing the slightly random cipher negotiation. That was actually deliberately put into the demo server on tls.openmirage.org to help us get more test coverage from visitors to the site (see the https://github.com/mirleft/ocaml-tls/tree/demo-random branch). We've mitigated most of the commonly known client incompatibilities, but there are no doubt obscure cipher-specific mitigations remaining, and the only way to uncover those is by forcing their negotiation ahead of better ciphers.

We've looked into timing side channels attacks quite a bit, but decided to focus on the core protocol support before tackling the big issue of data-dependent control flow attacks See https://github.com/mirleft/ocaml-tls/pull/49 for discussion on the Lucky 13 mitigation that isn't merged in for example.

Editing the goto-fail reference to reflect that it's not purely memory safety (but of course we believe that more structured programming abstractions will help mitigate this class of errors). I've asked Hannes about the #6 issue as well, as that shouldn't have been closed with no explanation -- do feel free to post queries on such issues yourself as polling HN threads for feedback isn't reliable.
Maybe they don't throw an exception immediately. Maybe that null value gets stored somewhere, and you don't hit it until three hours later, when the system goes to save data to disk. Now your exception gets thrown far away from where the error occurred, both in terms of code and actual time.

(For the record, I'm assuming an interface such as:

fileOpen -> FileHandle

Where the FileHandle object can be null, and it being null is used to indicate that the call to fileOpen failed.)
I would also add usability to the already mentioned tactics. Usability testing helps you to understand what people really want, thus making you a better marketer.

In addition to testing your own site, you can also do a usability test for your competitor's site. You might find some interesting marketing ideas that way. :)

Here is a free usability checklist for websites: https://userium.com/
And services like e.g. usertesting.com are great for getting feedback from users.
Have your hardware project built for free
The Jehovah's Witnesses' new tactic
Curated list of awesome
Their cloud software is also open sourced, and based on IEFT CoAp[1]. I see this being useful for a newbie maker, but for product shipping in any volume you'd integrate the CC3K directly ($11 vs $39) and you'd host the cloud server yourself, or pay them a nominal fee.

I am not seeing a cloud "operating system". Maybe I'm missing something??

But most of the magic is the cloud app that each device maker writes that does the heavy lifting, and that's pure web service; i.e. if it's X o'clock send command to turn on the sprinklers, unless it is raining in the user's zip code.

[1] https://tools.ietf.org/html/draft-ietf-core-coap-18
Thanks for the interest! I'll be here all day for your questions and suggestions.
Curious how things have changed since 2013. Glassdoor has a login wall to see beyond the top 3 salary brackets.

Since Google is largely a "level" based company, could a change in this reflect the larger inflation/deflation of Google salaries?
My first name is hyphenated. I still run into web forms that insist that having a hyphen in your first name is "invalid" or that my first name is too long for the form. So I get mail addressed to all sorts of variations of my name not to mention people that "correct" my name by thinking that it is my last name that is hyphenated. And there's also the fact that search engines seem to ignore a hyphen so someone searching for me will get lots of results for someone whose first and last name make up my first name. That is real fun when that person is a famous kidnapper...
Urban Airship CEO Accused of Sexual Assault