skysight-inc/HackerNews huggingface dataset:
> Nasdaq even has an order type that auto-adjusts itself such that it will never execute

That's not true, the order could execute if someone slams the market with a massive buy / sell order. It auto adjusts to stay away from the active market. The idea behind the order type is that you don't want to be at the current 'market price' but rather just outside to handle big fish. You might argue this sucks, but the the big fish don't mind as it gives them more liquidity that wouldn't otherwise exist. The trade also lightens load as you don't have to constantly send cancels.
My argument is not, that we should not enhance security. We definitely should, the fact, that even the most developed industrial powers can not handle it in a manner that satisfies me personally is my argument for eliminating it. I am personally just not comfortable with even a tiny chance of a massive and unfixable catastrophe. This is just my subjective feeling.

To your second point: I always forget how this rhetoric figure is called and I would be grateful for a link, but it is easily dismissed: Something even worse does not justify not acting on something bad. We have quite a few people on this earth and can tackle multiple issues at once.
Continuous Delivery is going to eliminate that from the equation. The software developer will write software and tests and if they pass the tests throughout the pipeline then it will ship to production automatically and potentially multiple times per day. Much faster than the heavy ITIL based change control process that requires you to be inserted in the middle of it will manage.

The companies that do this will have a velocity that outstrips the companies that do what you describe and will naturally have an advantage in the marketplace.

There will still be room for security compliance and someone in the company to be responsible for that, but they'll be writing tests that check software for compliance automatically, they won't be some drone in an office looking at a form and stamping their approval on a change request.

Your industry is changing. You may retire before it really hits you in the ass and kicks you out, but your advice for people getting into the industry is terrible.
Is the blog itself also delegated? I've seen CEOs send out "personal" notes that were drafted entirely by a PR team.
How to Avoid the Pitfalls of Poor Localization
So basically a micro-cube. This is to a cubicle as a lecture hall chair-with-writing-surface is to a desk. Hurrah, now we can fit each worker into 9 sqft instead of 25sqft, and they'll consider it an upgrade from the open office!
> if MongoDB now claims to be consistent in any way, that deserves scrutiny. And these analyses are always a really interesting read. But the general tone in the developer community about MongoDB seems a bit irrational.

It has been sold that way. People believe with write-concern majority, they can use mongo replicas for primary data stores and not lose anything. Embed your relational data and use it for everything.
One guy in his pajamas caused a market crash? How many of these events will it take to cause a fundamental rethink of the financialization of our economy? Where are the supposed benefits to justify finance gobbling up more than a third of corporate profits [0]? When will we finally see a financial trading tax [1] that ends High frequency trading (HFT) for good?

[0] http://angrybearblog.com/2012/01/where-has-all-money-gone-pa...
[1] http://en.wikipedia.org/wiki/Financial_transaction_tax#Unite...
This makeup tutorial will change the way you look at standards of beauty
There is a problem with your premise. Why do you need to log in the middle of that function? In a procedural language you need to log right then to make sure state hasn't changed on you. In Haskell you could do it before or after the function and not be able to tell the difference because state can't change on you.
Join Microsoft to Celebrate Debian 8 at LinuxFest Northwest
gcc $(gcc -v --help 2>&1 | awk '/-W/ && !/=/ && !/[oO]ptions/ && !/larger-than/ { print $1 }')

Not particularly useful though.
Wherein I ridicule Facebook some more, then collaborate with the Panopticon
so the system was the culprit
Author here. There's a few things on the net using either one of these solutions, but none seem to explain /why/ the fixes are required and where all this stuff is actually documented.

Also of interest to HN should be RDAP, the whois replacement mentioned.

Hope you find it useful.
Just coming up to 100,000 flight hours with my 6. No real complaints, but quietly planning retirement to secondary mass storage. Picked up some surprisingly cheap Toshiba 5TB's for evaluation[1].

Did you notice anything in particular leading up to failure? IO errors, reallocated/pending sectors, checksum errors?

1: http://www.toshiba.co.uk/hard-drives/internal-hard-drives/sa...
Not to mention that in plenty of environments production systems don't have access to the internet to begin with, so curl/wget | bash is a non-starter.
Show HN: Mailswipe, the tinder for emails – IMAP / Gmail  (iOS and Android ßeta)
Iran Reveals Small Armed Robot Car
>positioning itself as a company with design chops of Apple

Are you kidding? Xaiomi is a classic copycat Chinese company that lifts designs and ideas from elsewhere, but sits pretty with the CCP so has access to the local market.

http://www.cultofandroid.com/66569/xiaomi-dont-copy-apple/

Heck they cant even make an invite without copying Apple

http://ibnlive.in.com/news/xiaomis-apple-fixation-goes-to-a-...

>engineering chops of Google,

Reselling a skinned Android that looks a lot like iOS isn't exactly the "engineering chops of Google."

I'd be VERY surprised if this Baidu car is remotely competitive with its Western counterparts, especially when companies like Mercedes have been working on this stuff for decades.
This is hardly a new problem- and in many ways, I'm not sure it's a problem at all compared to the company cultural issues brought up by skywhopper.

Whether it's programming or system administration, you're always going to have new people getting excited about the sudden power they've learned. Being able to make computers do things opens up this whole new world, and when people find themselves in that world they may end up overestimating their skills and underestimating how much they need to grow. What they fail at understanding they make up with in enthusiasm, and with experience they become more knowledgable about what they don't know.

If we waited until they were "qualified" for jobs they would never get the experience to become qualified. At the same time there is more than enough room in the current job market to support people of lower skillsets, and for some companies that's considered an investment (junior people tend to turn to senior people over time).

This is where it becomes a company culture issue. If a company is smart they'll have a few senior people making sure things are held to the right standard, and a few junior people who can get things done but need some guidance and direction. However, lots of companies (especially the smaller ones who may be more constrained by budget) go for the cheaper route and would rather hire someone junior as their main support. The problem isn't that the sysadmins aren't qualified sysadmins, it's that they're junior system admins who have been hired for the wrong job. Companies that fail to value experience tend to suffer as a result.
I get your point, but even still. The Niger-Congo family is probably relatively analogous to the Indo-European family (both in internal diversity, geographic spread, and association with the spread of pastoralism/agriculture), but even still you've got the very convoluted Afro-Asiatic family, Khoi-San languages, numerous language isolates, &c. &c. But in Europe you only have the Indo-European family and Basque.
Android ß available on the play store here: https://play.google.com/store/apps/details?id=co.teammate.ma...

All feedbacks (pros and cons) are welcome for both version!
Cell Network Threat Detection Announcement
Thanks for pointing out.
I feel the exact same way about it.

What is wrong in tricking stupid bots in the market?
Lets not forget, it was a flash crash, meaning that if only emotional, slow humans would have been trading this thing, it would probably have never happened (at least not in these proportions).

Pretty far fetched to make one small guy responsible for a conceptual problem in the system.
I think you left off the key part of his point, namely "when recursively parsing unknown json data structures".

json parsing in Go uses reflection, which not only means it is slow, but if your input is not consistent (like say.. a log file with 20 different possible formats), it can be quite painful and very verbose.
As a publisher, I'm excited to be finally at the point where I can remove Adsense as a revenue source (and will May 1). A lot of people find ads that follow you around the internet to be creepy and they often ruin the experience by either being slow or jarring in comparison to our direct-sold advertisements.

One frustrating thing about Ad Blockers though is that even my "non-annoying" advertisements and up getting blocked in many cases because they fit the size profile or are wrapped in a particular class name.

Magazine readers also happily pay for access to the magazine content which also contains advertisements. For some reason the discussion regarding website ads is either 'pay for access' or 'see advertisements', but I see premium online content going the way of magazines and combining 'pay for access' and 'see advertisements'. People willing to pay for content are generally going to be the exact people worth advertising at.
Well fuck me. I just spent two weeks fiddling with Vagrant and Docker and finally got everything up and humming only to come into this thread. Going to refrain from slapping the SysAdmin title on myself for now.
Make Sure to Schedule Your SQL Server Replication Jobs
I can't help but think, "if it's really that easy to crash the market, how come terrorists aren't doing it on a regular basis?" Seems way easier, safer, and more effective than shooting people or blowing them up.
No, that's Discourse install instructions quick, hand-wavy way of telling you to install Docker if you don't already have it. If your cloud environment already has Docker installed, you can skip that step.

Are you really trying to say that the instructions for installing Docker should be considered in-scope for a guide to install Discourse on a cloud server?

They've included a short snippet that will get you a Docker, in the way recommended by Docker, for whatever your base system is. Many production systems do not move at the pace of Docker development, so it's not practical to run Docker from your distribution's package archive. Some distros will not have distributed packaged Docker releases at all.

What's wrong with these instructions? If you are really "dealing with this" right now, it is worth noting that something like 20 or more supported platforms have specific Docker installation instructions from the Docker website.

https://docs.docker.com/installation/#installation

From a quick sample of those instructions, only the Ubuntu instruction page uses the wget|sh method, and it's using an SSL connection to Docker's own website to add an apt source with signatures in the supported way. This way should work on any Debian-based or Yum-based distro, and writing the instructions like this must likely save Discourse from getting a lot of "How do I docker" issues and e-mails from their clueless users.

So, would you prefer that part just says "installing Docker is out of scope" or should the Discourse developers go through every distro and cloud system and document the specific instructions for that? To do that would completely defeat the purpose of even using Docker at all.
The E-mini S&P futures market is incredibly illiquid, which is why one guy can game it this way. Look at the current volume on the June 15th contract: http://finance.yahoo.com/echarts?s=ESM15.CME+Interactive#sym...

It's 343! That's zero to a good approximation.

So this guy found a low-volume market that he could game with large sell orders above the current price that he would cancel (automatically, eventually) so he had a low (but crucially: non-zero) risk of actually having to sell at that price. Others would see the large sell volume and sell themselves, driving the price down. He would buy at the lower price, stop placing sell orders and watch the price bounce back up, absent his manipulation.

This is likely illegal in the letter of the law as written in 2010, and fair enough. Illiquid markets are easily subject to this kind of thing and if you want people to invest in them maybe you need to police them against it. Whatever.

But to call this "the cause" of the flash crash is like saying my neighbour's love of fireworks is "the cause" of my house burning down after I deliberately poured gasoline all over it. Sure, maybe my neighbour should have been more careful, but they had a reasonable expectation that my house would be ordinarily fire-proof, and behaved accordingly.

And of course this guy dominated the market when it was falling rapidly: his algorithm would have a field day in such an event, placing and cancelling multiple sell orders as fast as it could all the way down. So to cite that as some kind of evidence is to put effect before cause.

The only way this could have "caused" the flash crash is if a whole lot of large trading algorithms were using E-mini S&P futures as a a major input, and doing that--using such an illiquid, easily-manipulated market to drive large orders--that is criminal. Or should be.
Whether a frictionless pulley is useless or not depends largely upon whether you are using it to change the direction of the line, adding tension to it, or using it to perform work. Such a pulley is only useless for the latter, such as a belt turning a drum, but a frictionless block and tackle or tensioning pulley would be incredibly useful.
Take a Deep Breath If You Want to Try Competitive Vaping – WSJ
Why DynamoDB and not, let's say, SimpleDB? I'm sorry but isn't this "tiny" utility coming with huge requirements indeed?
It's a good point that this vision they have is specific and technical to some extent. But it's also not very well thought out from the perspective of an elected official and the general public (their bosses, even if we want to go all the way to the level of an inherent social contract).
Here's a detailed explanation of -Weverything from a clang developer. He says -Weverything is intended for clang developers' own testing. He recommends using -Wall -Wextra plus any individual warnings you may want.

http://programmers.stackexchange.com/a/124574

clang does not document its warning flags like gcc does, but a long (but now incomplete) list is available here:

http://fuckingclangwarnings.com/
Legacy and Learned Behaviour = complex muddled spaghetti code
Funny tumblr but makes me care-confused.

I understand that curl pipe sh could have security problems but I also don't see it as that much different than the "normal" and "ok" way of doing things. I would consider something like the below pretty normal.

wget https://whatever.io/latest.tgz
tar xzf latest.tgz
cd whatever-stable
./configure && make
sudo make install

Because of familiarity, we aren't going to be too worried about what we are doing. If we are on a secure system (like a bank or something) then we've probably already gone through a bunch of hoops (source check, research) and we mitigate it like anything else.

What is so different about

curl https://whatever.io/installer.sh | sudo bash

We didn't check the md5s in the first example, so yolo, we don't care about the content of the tarball we just `make install`-ed. We're assuming the webserver isn't compromised and that https is protecting the transfer. Is it because the tarball hit the disk first? Does that give us a warm fuzzy? Is it because "anything could be in installer.sh!!!?! aaaaah!". Well, anything could be in Makefile too right? Anything could be in main.c or whatever.

I agree that curl sh | sudo bash makes my spidey sense tingle. But if I really cared, I would read the source and do all the normal stuff anyway. So I think it's some kind of weird familiarity phase we're all in.
Echoing stonemetal, I would recommend seeing if you can refactor so that you can keep your pure function as-is, and then lift it into some monad that takes care of the logging. The Writer monad can be a good way to do this elegantly.
Introducing Hello – Facebook's New Android-Only Social Caller ID App
Mr. Muppet, I am not a Haskell expert, but I had a similar coding issue that I blogged about a while back. I was threading a score value through some code that calculates an updated gameboard. The solution (well, one solution) was a writer monad. That got me over the hump a little further towards understanding monads, and the conventional wisdom nowadays seems to be that teaching beginning Haskell developers how to _use_ them is more effective than pointing them at endless monad tutorials or articles on category theory.

If that sounds helpful, see: http://praisecurseandrecurse.blogspot.com/2013/07/the-polar-... and see also the next post in the blog. Then maybe go from there!
ExtraTorrent, the Pirate Bay raking in millions annually claims report (2014)
I agree 100%

I often argue with a lobbyist friend of mine about their (lobbyists) role in the ecosystem.

Right now the paradigm seems to be hire lawyers to serve in Congress because lawyers know how to write potential laws. Leave it to lobbyists to convince them of the policy they should care about.

I feel that if we had representatives with more diverse backgrounds, and we surrounded them with lawyers and staff to explain how to best translate their ideas into bills, we'd be better served.

There would still be special interest groups trying to convince them of what to do, but I feel it would avoid situations like SuperPAC's buying clueless politicians, and clueless politicians being appointed to committees they know nothing about.
The job of a market maker is to ensure that there is always a counterparty for buyers and sellers; an MM takes a chaotic marketplace and, for those who need it, presents the illusion that (for instance) you can buy a security the same way you buy a book on Amazon: here's a price, click buy, done.

If you try to think about it, it's hard to get your head around how MMs can provide this service. Ensure a counterparty to buy from, or sell to? The market is constantly moving. From where do they get the superpower of always having stuff to sell, or always being able to buy? How are they not taking a bath doing this?

One reason MMs can exist is because they charge a premium and pay a discounted rate for the securities they charge. The premium you pay an MM when you buy a security offsets the risk that they're getting the fuzzy end of the lollipop, which, if it happened over and over again, would force the MM out of business.

But: it's tricky to charge a premium (or pay a discount) against an estimated fair market value that is constantly changing. Also: the size of the premium/discount (the spread) depends on factors that also constantly change.

For me, knowing these things makes it intuitively obvious why MMs need to constantly submit and cancel new orders. It's like the edits in a simple diff algorithm; cancellations are the "-" lines, order entries are "+" lines, and a "change" in an order requires both.
I dispute that the world's economic base is shifting to the Asia Pacific.

The US still has the same share of global GDP that it had 35 years ago, and faces no credible threat to the dollar's dominance. The US economy is larger than the size of Japan + China combined, and is now 250% larger than Japan, and that gap will increase significantly. Canada has become vastly stronger over that time, it has as large of an economy as India with just 2.7% of the population (with not even a small fraction of the problems that India faces).

Mexico's GDP has doubled in 15 years. Brazil has become one of the major GX economies, with an economy 50% larger than Australia or South Korea.

Spain has as big of an economy - even after all the problems they've had - as South Korea (which is the #4 economy in the Pacific region).

Germany, the #2 economy in the West, is likely to pass Japan's economy in size in the next 10 to 15 years (with 1/3 less people). In the last 20 years that Japan has been treading water and taking on vast debt, Germany's economy has doubled in size post re-unification.

Most of the best countries in the world in terms of high standard of living are in Europe.

Meanwhile the Asia Pacific region has nearly two billion people living in what can only be described as intense poverty by Western standards. China alone has ~600 million unemployed captive 'farmers' earning $3 / day, because there are no other jobs for those people to do.

Japan is in such dire condition 40% of their budget goes to paying interest on their debt, their GDP hasn't grown in 20 years, and they've gotten so desperate they've taken to aggressively debasing the Yen to keep their government solvent (rapidly chopping down the Japanese standard of living in the process). Japan is of course Asia's second largest economy.

China has spent the last six years post great-recession faking their growth by taking on $30+ trillion in new debt, in the process becoming one of the most indebted nations on earth.

Japan and China, Asia's two biggest economies, are facing disastrous demographics issues, while they simultaneously drown in debt (a bad combination when you have to take care of a lot of elderly).

Compare the top 20 economies of the West vs the top 20 economies of the Asia Pacific, in terms of incomes, wealth, standard of living - it's not even remotely a close contest. The 10th largest economy in the West is the Netherlands ($50k GDP per capita); compare them to Malaysia ($10k GDP per capita) or Thailand ($5k GDP per capita).

I fail to see how this sum represents a shift to the Asia Pacific economically.
For people who are interested in learning more about the problem. This is a really great paper : https://www.informatik.tu-darmstadt.de/fileadmin/user_upload...
ahhh, Thankyou.

I thought it meant that if you're exposed to 100mSv/h, you'll get sick around 2 hours later... but what it means is a full body dose for 2 hours is enough to make you sick.

Therefore 5 minutes to the fingers is probably OK.
Which data loss issues? You're gonna have to be more specific. ;)

It doesn't fix the election rollback issue, because that's handled way above the storage layer. It does solve a whole slew of storage engine related write issues though. No more "we flush to disk every 100ms and call it good".
This 1 page poorly titled wrong rant is the #2 story on this site?

"Ever tried to security update a container?" lol. you are doing it wrong.

"Essentially, the Docker approach boils down to downloading an unsigned binary, running it, and hoping it doesn't contain any backdoor into your companies network." nope https://blog.docker.com/2014/10/docker-1-3-signed-images-pro...

"»Docker is the new 'curl | sudo bash'«" no it's not. most intelligent companies are building their own images from scratch.

People that care about what's in their stack take the time to understand what's in there & how to build things.
200$ millions trading by themselves, without external investors? Very, very unlikely.