skysight-inc/HackerNews huggingface dataset:
I've argued in the past for an intermediate position, especially for HTML. Browsers should be moderately tolerant of bad HTML. But rather than trying to handle errors invisibly, they should revert to a simplified rendering system intended to get the content across without the decorative effects. After the first error, a browser might stop processing further Javascript, display a red band indicating defective HTML, and display all text in the default font. It might also report the error to the server in some way.

Read through the error-recovery specification for HTML5. It's many pages of defined tolerance for old bugs. Then read the charset-guessing specification for HTML5, which is wildly ambiguous. (Statistical analysis of the document to guess the charset is suggested.) The spec should have mandated a charset parameter in the header a decade ago. If there's no charset specification, documents should render in ASCII with hex for values > 127.
There is a major caveat to what they are reporting that gets to the heart of this.

HFT can't see your order as it arrives on exchange A before it arrives on exchange B, they can see the results of an order. That is, they can see a large trade happened on price X on A. With that information they may want to change their prices on exchange B and they may be able to do that before you can also place an order on B.

There are lots of ways to mitigate this other than using a dark pool like IEX. All the exchanges offer exotic order types to make this easier for instance, and large block traders have for years had execution algorithms that spread their orders around venues and over time to minimize price impact.

That IEX offers another option for large block traders does not bother me at all, that they market it via underhanded moralizing i find distasteful.

Finally, in this context front-running has a specific meaning and it requires a fiduciary duty for it to be front running. By using that term incorrectly you ARE bringing fiduciary duty into the conversation, whether you want to or not.
That's absolutely correct and thanks for clarifying my imprecise language. I actually support that EV doesn't support wildcards and don't mind buying both. Wildcards can be harder/riskier to manage in large organizations but the specificity of EV means they're just naturally going to be shared around the organization a lot less.
Meaning that you can easily replace an entire computer system with another entirely different computer system? What stops you from doing the same with your iPhone? (i.e. buying, say, an Android device)
EV is kinda what the CAs should have done from the beginning anyways for any certificate. :-/

Btw, for parallel certs on customer subdomains, that sounds like a very niche use cache. Maybe you could have used a different base domain for user content. (Isn't that best practice anyways, to avoid xss'ing cookies onto the main site?)
Dup of this: https://news.ycombinator.com/item?id=9825328
If your ~/.bashrc is a SYMLINK to a bash or sh script, bash will AUTOMATICALLY EXECUTE that script on login.

If you give rsync command a source or destination with an unescaped colon, it will read an ENVIRONMENT VARIABLE to figure out a command to run to AUTOMATICALLY CONNECT TO ARBITRARY NETWORK RESOURCES. If you have keys, it will even SKIP PASSWORD ENTRY, and with default Kerberos, it will not only skip password, but make a network connections to a login server:port specified by a DNS ENTRY.

Seriously, who is this guy, and why is this trainwreck #1 on HN?
Thanks for the info. Still, it's hard to believe that Japanese phones would put Caucasian people all over their emoji. Related: "Why Do the Japanese Draw Themselves as White?" https://abagond.wordpress.com/2010/06/16/why-do-the-japanese...
Unless you are Greg Ewing, you should probably choose a new name.
Dear Techcrunch, could you kindly clarify in what sense data is related to sex? Is it like some people get a boner when they see data or what?
Lisp still does that. The commercial Lisps Allegro CL and LispWorks have that as a part of their respective delivery toolkit.

See for example the LispWorks documentation: 4.6 How Delivery makes an image smaller, http://www.lispworks.com/documentation/lw70/DV/html/delivery...
Solar Impulse plane lands in Hawaii
Ask HN: What opportunities still exist in desktop software?
In the last few years, the software industry has moved to deliver stuff over the Web or mobile, with the desktop slowly getting hollowed out.

Reading the recent threads about Sublime Text and Atom is making me wonder if there's a blind spot amongst us programmers: What kind of desktop software can one still build and expect to make a living? (It could be for the casual user or tailored for professional use cases).
Reddit is open source so is there any evidence that anything has been done or is planned to improve mod tools? Or have there been any community attempts to push code that was rejected?
The iptables trick Aphyr uses is great for testing unclean networking failures. Closing network connections uncleanly is not something that is usually supported at the language level.
Yep, computed property names is another ES6 feature
Right, with lots of elements, React still needs to render and diff each component which for a lot of elements causes a lot of garbage and diffing work. ShouldComponentUpdate / PureRenderMixin avoids this altogether when props/state isn't changed so this gives a significant boost with lots of elements.
You've got two browsers to chose from. One that handles every site you visit without a problem, one which throws a bunch of obscure error messages on about 20% of the sites you visit.

Which do you think most people will chose?
OOP suffers from a distinct lack of clear, universally accepted, definition that allows such questions to be answered well, but certainly a key component of many understandings of OOP involves centrality of mutable state and particular ways of modifying it which is at least arguably "anti-parallel", and many popular forms of OOP (particularly static, class-based OO) is prone to encourage coupling which makes really independent modularity difficult to achieve, though OOP is based on a kind of modularity which is consistent with this kind of coupling.

So, on balance, maybe, kinda, depending on what kind of modularity and what kind of OOP you are talking about.
Wow, this is all a bit disheartening to read the day after I spent all day updating my app to ES6 + babel.

These performance hits are extreme. I would never have guessed that so many of these features are taking 20-2000x speed hits.

I hope the browsers and V8 catch up soon so transpiling ES6 is no longer necessary.
On reddit, an admin has more power than the overwhelming majority of users. There are seriously only a handful of people on reddit that had more power than Victoria had.
Clas of clansh
Nice. Ultima 'offline' is directly responsible for me being a programmer. Inspired to build ultima-like games in high school (w00 turbo pascal!), I eventually ended up as a professional software thingamajiggy.

...I'm still sad about how awful the ultima (offline) series ended, though
Prior discussion: https://news.ycombinator.com/item?id=9825268
It is not related to a specific platform, we've tested on many different computers and operating systems. We also get reports from users all the time saying the game is barely playable on Firefox but works great on any other browser they use.
Yey for progress, but one of the most annoying things for me with FF is that if I cmd-t for a new tab, I can't start typing right away for a new search and have that get preserved. There's always some lag and only then do my keys get transcribed. Safari and chrome don't have this problem, and it drives me insane.
We played this game a lot as kids. It's also called Mill or Müell. After a few years my sister "solved" it. She showed that the first player could win every time if they made no blatant mistakes. It wasn't as much fun after that.
Awesome to see this integrated with Xcode! What's the status of the memory sanitizer?
TLDR, use Babel in "loose" mode and you'll be fine for pretty much all the ES6 syntax features (by which I exclude Maps, Sets, and generators). Most of the features listed are zero-overhead when transpiled this way. As usual, the native implementations are much slower for some reason (probably because they aren't optimized yet).

Microbenchmarks and relative speeds are not super useful. I'm a performance nut and I love optimizing code -- back in the day I wrote a syntax-highlighting editor that was snappy in IE6's crappy JScript engine -- but I'm not going to worry that some syntax feature is 3x or even 10x slower than assigning to a local variable (which is what, one CPU instruction?). If you're that concerned, you should be avoiding object allocations ({}) like the plague, and that is just madness except in really performance-critical sections of code (and games).
Yeah, it's extremely easy. I wasn't expecting that.
It's more complicated than you suggest: If informed trading can't capture a good portion of the difference between the "true" price and the current price then there isn't an incentive to do it.
And I believe it's relatively trivial to polyfill wasm support by converting it to asm.js.
Introducing Boreal: The final HackerNews client for iPhone
Netflix: Will It Eclipse TV Networks?
Agreed! (but, in fairness, portal.aws.amazon.com might be an obsolete domain, since it just redirects to the correct aws.amazon.com... the actual console login does use TLS 1.2 etc.)

Even so, it still blows my mind that even the main Amazon.com main page uses no SSL at all by default, and they're an e-commerce site, unlike Google and FB. Seems to show a lack of respect for customer privacy.
Ignore Unity webgl and try PlayCanvas instead? It's a lot more work to port, but you'll get much better performance.
Developer tools definitely.

Technologies aiming the enterprise also have an opportunity with desktop software, Slack is a clear example.

Not much opportunities in the consumer tech space for desktop apps.
The Linux AIO project: All of a distro's desktops in one ISO
3 Wishes [music, industrial, heavy, remixes]
You should try it, at the least. It is surprisingly approachable and a lot of fun. I make no claims to be proficient in even a majority of the exercises.

I will add that learning algorithms in the way he presents them has been hugely successful in really understanding working with abstractions. Not just inventing the cheap abstractions of giving names to things; but really understanding how you can abstract some problems onto others and use common tools in solving them.
Morally bankrupt traditional parties and over 20% unemployment would do that to anybody.

Spain lacks a cultural framework that would make the population want market based reforms, as there is so little trust in institutions, employers and employees. Its labor market is not bad because it's impossible to find productive Spaniards, but because productivity, both at the employee and the firm level, is punished.

Podemos is coming, and it's not going to be good for the country. But the alternatives are pretty bleak. Fortunately for Spaniards, a Greece-like catastrophe in Spain would be the death knell of the Eurozone, so the troika will probably bend to Podemos demands, as far as spending goes, as long as some market reforms are done along with said spending. Spain's one way out of this mess is growth.
Boreal, the final Hacker News client.
Created with a full focus on providing the best reading and interaction experience with the platform and their users.

Why using Boreal instead of any other client?
With Boreal you can do a lot of stuff that you can’t in any other client.

MAIN FEATURES

+ Read the Top, Newest and Show HN feeds, with a simple and easy to use design, focused on navigation and providing a clear reading experience.
+ We provide a section what we call “Viewed” that lists all the news you have opened, never lost a good article.
+ When you read a story you can display it in the in-app browser, safari or with the in-app view which displays the content in a more readable way.
+ Comment stories, reply to comments
+ Upvote others news
+ Submit your favourite links and stories
+ “TweetShot”: while reading a story, select a piece of text you like, and share it as an image to Twitter in a clear and beautiful way, your audience will love it!
+ User profiles: explore what other users had submitted, the comments they have posted, and all their information (karma, bio, etc…)
+ Filters: want to only read the best news? Simply filter your news easily by number of comments

…and a bunch more features to come.
We want to hear your thoughts, how you use Boreal, and what you want. Do not hesitate to send us your feedback (contact@getboreal.com). Stay updated following us on @GetBoreal

So, what do you lose, try Boreal for free!

Enjoy,
The Boreal team
Rename it to parl
I don't think this is true. I doubt they would have a problem with someone implementing their own DOM rendering engine within their own app.

The real restriction is on executing JavaScript, scripting language execution isn't allowed except around some exceptions for Lua in game engines.
Are websites that are known for being more anonymous than reddit known for being more or less abrasiveness than reddit?

In my personal opinion, they are less abrasive. But I think I am definitely in the minority there. I think that anonymous sites are popularly known as more abrasive.
Another solid example of not blacking out is /r/malefashionadvice, one of the more prominent voices in the Male Fashion category.

While I can understand the interest in "disrupting the space"; I'm not entirely sure that the current management conditions at reddit are indicative of an opportunity here.
The problem is voat's population.
Hey guys! Did you know you can actually execute a script with date by running date && ./myscript.sh

WOW! I better get on going writing my blog post "executing abitrary code with 'date'".
Have you personally ever done so? I have, and it ain't so easy, especially if you are not just swapping in a piggyback system, but actually installing a whole new ECU.
Frontrunning is a crime because it's acting on privileged information. It's in the same boat as insider dealing. They have that privileged info because of their fiduciary relationship so it is relevant.

What the HFT guys are doing is not frontrunning because anyone can get hold of the same information they have (for a price). That information is not privileged (assuming deep pockets != privilege) so it's not frontrunning.

They're getting to the trade first because they're technically quicker than the routers the banks are using.
EDIT: I think you are right, although I would express things a bit differently. I'm writing a top level post with my thoughts.

ORIGINAL POST:
When you make a trade, there are some information rents associated with that trade. If someone knew you were about to trade, they could capture all of those rents. When there is a monopoly on exploiting these information rents (as in frontrunning), they will be captured by the frontrunner. When there is perfect competition (as when a number of HFTs can trade in another exchange before your trade reaches it), these rents will be all wasted on technology to maximize speed, i.e. no one gets them, they become deadweight loss.

I understand that there are other issues, such as knowing whether a trade comes from a single seller or multiple smaller sellers. But this is a separate issue from simply trading ahead of other people. I don't understand why it's so controversial that an exchange would advertise the fact that traders can rely on their orders reaching the exchange before anyone else knows about it as a good thing.
Python Immutable member variables?
Completely agree. I had to implement something like this when I worked at Stipple in the past, and the biggest problem became optimizing the DOM interactions (adding and removing images from a masonry feed as the user scrolled).

Vanilla JS or React, you can't have 1200 images sitting on a web page all at once without optimizing for what the user is actually looking at and interacting with.
For those not in the know:
http://www.npr.org/sections/thetwo-way/2015/07/03/419756207/
TL;DR: Nothing you can do yourself yet. As for what the researchers actually did, this is near the bottom of the article:

> The team placed [dummy targets] inside transparent plastic cages containing 50 mosquitoes and left them in the cages for 15 minutes. They [counted] the number of feeding mosquitoes at each minute.

> The team tested different scenarios, such as placing [targets] treated with either wild-type or mutant bacteria in separate cages, then putting both types of bacteria in the same cage at the same time. When given a choice, “twice as many mosquitoes were attracted to the wild type on the blood feeder rather than the mutant on a blood feeder,” Tomberlin says.

What these "mutant" type bacteria are, is explained a bit earlier:

> The team used a mutant form of S. epidermidis, in which they deleted the genetic mechanism that encodes its quorum sensing system.

And as for the "quorum sensing system", a bit earlier again:

> Bacteria "talk" to one another using a chemical system called quorum sensing.
If hospitals were run like startups
Whether or not HFTs are rushing to buy the stocks or they have the stocks already, doesn't change the fact that proximity to the data center allows HFTs an unfair advantage. It's unfair either way.
Agreed! And wayyy back when (until the late 90's I think), all SSL certificates were actually identity certified, but then cheaper DV certs became common -- but still operating under the same trust model (no way to show the user that you spent more for a better certificate). Even now, lots of CA's charge you for organizational authentication even though there's no EV bar[1], which is just dumb -- since those certificates really don't prove anything more to the user than much cheaper DV certs. I like DV certs because they enable cheap (or completely free[2]) crypto, but EV-TLS does have a valid purpose for orgs that need it.

Lots of startups do wildcard for customer hostnames. (Freshbooks, Campaign Monitor, I'm sure there are many more.) But we're actually moving away from it anyway.

Incidentally, Same Origin policy prevents XSS or cookies across domains like that[2], so e.g. userify.github.com would actually be safer than github.com/userify.

1. https://www.symantec.com/page.jsp?id=compare-ssl-certificate...

2. https://letsencrypt.org/

3. https://en.wikipedia.org/wiki/Same-origin_policy#Origin_dete...

EDIT: good point, iirc Microsoft even had an SSL cert spoofed that way one time.. or maybe it was a domain.
What I would like to see happen is less use of general purpose programming languages; and more use of domain specific languages. DSLs give less opportunities for people to shoot themselves in the foot and more possibilities for heterogeneous hardware, parallel programming, static analysis etc. Of course, a small percentage of us will have to write these DSLs and Haskell IMHO is currently the best tool for this.
I'd suggest there is still a clear distinction. The big difference is that the CSS defined per-component instead of globally.
Take a week and see what happens.
I've been toying with making one since I realized Reddit has been devolving into a reactionary, hate filled site.

I was thinking about having a gimmick of graph based commenting to prevent the "top post guides discussion" effect. Not sure at how feasible or user friendly that could be.
Is Reddit doomed already?
Doesn't count, a setuid date wouldn't get you root with that command.
Yahoo begins testing search partnership with Google
Impressive achievement! A further update: Solar Impulse landed today at about 6:00 AM local time in Kalaeloa airport after a 118-hour flight. http://www.bbc.com/news/science-environment-33383521
Why not? He doesn't need to use it for his work, why would he spend time learning it vs learning something relevant for his field? Oh, I know, to pass a GYMAAAE interview, but that is a pretty bad reason.

There's a universe of programmers that don't work in the LAMP stack (including me) because it doesn't suit what they are trying to accomplish.
Watch Voat.co Bitcoin donations pour in
>>These so-called "SAT solvers" are able to handle industrial-strength problems, involving millions of variables, with relative ease, andthey've had a profound impact on many areas of research such as computer-aided verification.

I would be very interested in hearing of industrial/practical applications of those. Anyone with some experience?
I really don't care about the law. The point is that if front running was legal, brokers would try to find ways to guarantee to their clients that they wouldn't do it. Similarly, the guy in the article advertises his exchange as preventing the equivalent of front running at the exchange level.
Linux makes browsers?
I'm talking about the OS.
Anything that requires a lot of processing power and very low latency would be my suggestion.

My first thoughts would be video games and CAD.
It seems to me that the issue is not making a technically equivalent site, which is "relatively" easy. There's more to it than that.
And even without any other source of trust, anyone who is willing to go through the automake/config hell, already scored some initial trust points. I rest my case.
Actually, No, Stuff Used to Work
I'd also suggest picking one (security auditing or usability auditing or runway analysis). It's hard (trust me, I know, I haven't been super focused in my consulting) but a clearer message if you stick with one area rather than three.
Reddit would have had my support if they enforced the rules as you say. Unfortunately Reddit chose instead to enforce the brand new harassment rule, ban the sub, ban the mods, and then ban any sub that even looked like FPH.

It would have been a far, far more effective message if they said "We have banned FPH and the moderators due to their brigading and doxxing. Let this be a lesson to all subs: if you do these things, you will be disbanded." and then left alone all of the other subs that superficially looked like FPH but didn't engage in that specific behavior.

Instead they got a minor revolt, and the latest revolt seems like a manifestation of a lot of the hard feelings from that attempt.
I have a feeling Karl Rove and David Axelrod know this quite well.
> There are a million ways to trade orders that are statistically mispriced before the market actually moves,

Can you talk more about this?
That would annoy me too, but I've never noticed it. My main laptop is a Core 2 Duo, so not a speed demon. Have you tried with extensions disabled and/or with a new profile?
This is a point that should have been made in the author's article. As it is, it presents a poorly defined problem without offering solutions (other than "be afraid").
Did this article make you angry? Why do you call it a trainwreck?
There's typically an application process for the low income units. The rents are much cheaper than for the regular units. http://ny.curbed.com/archives/2012/06/05/city_now_accepting_...

I've seen buildings with separate doors and some without that have low income units. Even in the same building, the low income units are not as nice (e.g. no in-unit washer dryer, no stainless steel appliances, cheaper fixtures). Also, some buildings only provide keys to the gym and other common areas for non-low income. But I think they got in trouble for that and may have stopped.
I think this would have been great if done from the beginning, but even in early versions of Mosaic malformed HTML would still appear "correct" visually, and since once it looked ok most people figured it was ok we've been buried under broken HTML from the beginning. The idea that the browser "handles every site without a problem" is slightly misleading though, since even if everything looks ok the user is paying a price of lower performance and a slower pace of innovation as browser developers devote huge amounts of time, money, and attention to not puking on all that broken HTML.