skysight-inc/HackerNews huggingface dataset:
The article claims that by colocating in one exchange, HFT can see you order arrive at exchange A, and send orders to exchange B before your order reaches exchange B. I don't know if this is true, but this is the most important part of the article. Given the fixed latency they introduce, you can send your trades to IEX before sending to any other exchange, safe in the knowledge that no other exchange will react to that information before your order.

No one is talking about the fiduciary duty. Fiduciary duty is just a way to define a default contract into law. E.g. brokers could write a contract saying that they promise not to front run. But since this is something that almost every client would want, it's just written into law instead.
Freemium Is a Money Burning Business Model, Cheapium Is Better
Powershell!

Seriously, MS doesn't do everything great, but Powershell has typed pipes (typed everything, actually, it's not just stringly like *sh) which are seriously awesome.
You can't have encryption without authentication. So self-signed needs an error because it looks exactly like an attack.

The only time its OK to not warn about self-signed is if you're using HTTP (unencrypted) and the browser did some opportunistic upgrade to prevent totally passive attacks. But no indicator of security should be shown at all.
There's simple ways to "escape" user input (as in, ensure the whole input string is interpreted as a single argument to this program) in ways that ensure you can't do simple &&'s or ;'s and execute a totally different command. But the point of the article is even if it's properly escaped, users can still do malicious things when input is passed to lots of standard UNIX utilities.
> Billions of people who aren't white were using and invented emoji before white people even got to them.

There are not billions of Japanese people and their skin tone is light (though they're not European).
I think everyone should be able to program in the same way that everyone should be literate, and should have a grasp of basic mathematics too for that measure.

But the people who write software professionally must be held to a higher standard, just as we expect so much more from professional writers (but we expect everybody to be able to read street signs and write shopping lists.)

I don't wish to be provocative but anyone who can't understand factoring shouldn't be writing software. DRY is an oxymoron.
"Lets see how this document looks when I move this content over there"
We went 100% SSL years ago and EV. Conversions increased over 30%. However we do sell Certs so that probably helped.

What did reduce was the "are you legit questions".
Wow... I'm starting to get really scared of the shell, and how much hidden complexity there is waiting to trap the unwary. Feels like best practice for shellscripts is to only ever use them for one-offs. And that tar and friends should never be used as "helpers" by other programs.
I wonder why Cloudflare doesn't sign certs for their users to be used just for CF connecting to them. Seems like an obvious step to take.
Yes, that is one of the things that turned out to be a bad idea. That's why it was dropped.

Look, it's all about trust management. If you trust everyone's good will, like in an academic community, it's fine. If not, you need to manage trust. There are three models for it AFAIK:
initial trust, as in SSH; trust to the authorities, as in X.509; and the web of trust, as in PGP/GPG.

They all have their use cases. I like the opportunity to choose.
We can stop this abuse by demanding a full-amount escrow, or at least a rescind fee to be posted at the time offer is made.

Pricing assets is an art, and humanity has a lot of experience in this art. Something can be figured out if there is a will.
The part where you're abusing an old "array like" and the way Array.from works with it and uses the index argument in the mapper argument to force it into a range. How many people do you think understand what `Array.from({length: 5})` works?
Well maybe they are using "class" in the OOP sense, for instance if they're implementing a programming language. Even if they're not, if they use the word "class" in the specification for what they're implementing (maybe they're representing a taxonomical hierarchy in their program and have fields named "kingdom", "phylum", "class", etc), or have the word "class" in a user facing output (maybe they're making an RPG where a character object has fields "race", "class", "level").

It's confufing to use one name inside your code and different one elsewhere.
> But 1-2-3 was killed by Excel because it lost the feature race. It's origins in assembly language gave it a significant disadvantage in this race.

Yet the winner was written in C++ for many years, while the world was distracted with the less inefficient VB.

Now some parts are .Net, but the crucial parts are still C++.
Probably Harshil is. Harsh must be the shortened version.
Would you mind sharing your list? I like to have a good talk in the background when I work.
Read "Flash Boys" for a better insight into how much difference variable latency between exchanges and clients makes to the profitability of fast execution of trades.

https://en.wikipedia.org/wiki/Flash_Boys
The Guy Who Did That Viral Shaving Video Now Has a Company Worth $615M
Yup, there is a bunch of things you can do to reduce the constants, but even with chunking the computational complexity is the same.

In this case, it's not hard to reduce the constants to a point where the complexity doesn't really matter though.
For context, the original comment was asking if the article was encouraging Reddit moderators to sue Reddit.
No IO in Haskell is purely functional. Your Haskell program wires up a computation that is eventually run by the runtime. The wiring up, as described in Haskell, supports referential transparency and composition as only pure code can. Your confusion may arise from people using the term "pure" to differentiate from "monadic".
Most of the problem is that he'll have to go into a foreign court just to keep a domain he had for ages.
How To Turn A Sphere Inside Out
Presumably then the luxury building wouldn't get the subsidy or whatever incentive is involved here.
.. and prepare to make time for new full time hobby, like analyzing battery usage and discovering memory leaks.
There is definitely an issue in conflating low-income tenants with "troublemakers". However, the real justification for this break in particular is that there is a very real belief that by putting low-income renters in better housing and better environments that they will be more inclined to maintain or improve upon the status quo. The problem with the so-called "poor doors" is that they are ignored and create a bad environment (which is bad for everyone) which breeds contempt. I live right next to NYCHA housing and get to see first hand how much of a difference the environment makes on a person; kids growing up in really crappy places must have amazing fortitude and support in order to not get stuck in the status quo which is not giving a shit about anyone else, things always falling apart, etc. Granted the issue is more complex than this, but it's much easier to antagonize low income people than to come up with possible solutions.
Deadline Tracker iOS App
I tend to think that if EV had a measurably positive impact on conversion, the CAs would have provided reliable data to back it up by now.
Banks handle everyone's money and are high-profile targets for compromise over the network. As such, they should be obliged to keep current with best security practices as the technology evolves, not lag far behind these.
A movie from the 70s that compares with TWoO and GWTW in stature would be Star Wars, certainly not MPatHG.

I find it unremarkable that people today quote SW.
Flash Boys is a god-awful mess. Two better alternatives:

Kovacs' _Flash Boys: Not So Fast_ which in the best possible way reads like a long-form ELI5 Reddit post about modern trading and all the WTFWAT moments in Lewis' book: http://www.amazon.com/Flash-Boys-Insiders-Perspective-High-F...

Patterson's _Dark Pools_ which tells the story of Island and the ECNs and the advent of automated trading. Patterson is more ambivalent about HFT than Kovacs, and does a good job of explaining the Core Wars phenomenon of modern trading from '98 to the mid-'00s.
Promises - the assumption here is that native promises are fast - this is amusing. Userland implementations like Bluebird promises are significantly faster than native promises. Not to mention the fact that converting an API to use promises is slow with native promises - a native `promisify` will have to be provided for Node, it's being worked on.
The tests with real numbers indicate that the rule is one based on order. So the problem doesn't state this but it is easily deducible when working with real numbers. Hence no need to check complex numbers. In common parlance in mathematical circles "number" tends not to mean real number unless context makes this obvious.
> but ruby doesn't track external strings as dirty like that.

It does:

irb(main):001:0> gets.tainted?
foo
=> true

You can even set $SAFE to 1 or higher to disallow the use of tainted strings in potentially dangerous commands:

freya:~ flgr$ ruby -e '$SAFE = 1; system "tar bla bla #{gets}"'
foo
-e:1:in `system': Insecure operation: -r (SecurityError)
from -e:1:in `<main>'

See http://phrogz.net/programmingruby/taint.html for more information.
Very steep learning curve. Months to years to become good at it rather than the weeks to months of the Java/C# style enterprise languages. Needs a more "math like" mindset rather than a step-wise stateful mindset like typical imperative programming languages. If you're not good at abstract math you may never get comfortable with Haskell.
They wouldn't get a tax break on the luxury housing which generates all the money, and the non-luxury apartments (if you mean "affordable housing" here) simply wouldn't generate much money to make up for whatever savings they get.
> where are all the deficits that balance out all the surpluses?

Where did I say that the system would balance out?

There are countries that will under-perform for a myriad of factors. That's a fact. These countries will require the charity of those doing well (with rules as to how that assistance is to be used).

It's also a dynamic system. Today I make a profit and tomorrow you do. It's a pendulum that achieves some degree of balance at the right time scale.

Also, resources and economies change over time. Compare the world 1,000 years ago to today. It's not a static playground.
>People loved Raymond Chen back when Steve Ballmer was CEO of Microsoft.

Why the past tense? Did people suddenly stop loving Raymond Chen for some reason?
I've often seen the term "functional first" used, which would describe F# but not Scala.
Yes I mean if I think the fair price of a stock is $100, and I knew who I was trading with, I might bid 99.99 offer 100.01 to a retail trader, but bid 99.95 offer 100.05 to a bank or hedge fund. The retail trader probably doesn't have short-term info and he's not going to keep trading in the same direction so I don't need to make as much spread.

On exchange markets you can't really tell who you trade with so you have to guess.
There must be a bug in my OpenBSD, because none of these work...
Mobbing and Psychological Terror at Workplaces [pdf]
All security is a matter of degree, be it computing or physical.

the most determined of attackers will always find a way in.
If you ended up in that situation, obviously pick the candidate more familiar with your stack, but that's a hypothetical, hiring in this business is not generally characterised by a glut of qualified candidates.
It sounds to me that it's frameworks that are anti-modular.
Meh, it's a use case scenario. When the differences in the materials you are testing for are so large, the sensor can make a pretty good bet for you. Take the case of; Is this Tylenol or a Skittle. Acetaminophen and fructose are very different and you can test for that pretty simply. To get very accurate readings you need a much more powerful pulse laser as the source, ture, but mose people don't need that. You can get 80% of the use cases with 20% of the 'tech', I think that's a great reason to stick one in every phone you can.
Yes, it can be a royal pain in the ass at times but my advice is: Suck it up and get your act together! If you really mean business and if your business is going to be anything but a hobby those notary costs are going to be vanishingly low.

Telecommunication in Germany has always been notoriously ridiculous but keep in mind that solving problems is what an entrepreneur's job description is all about. So, Deutsche Telekom sucks. I had pretty much the same problem when setting up a company about 7 years ago. We ended up using a combination of the neighbouring company's Internet connection and mobile Internet connectivity (mind you, this was pre-LTE and ridiculously slow at times and we still made do) for about 3 months.

There have always been complaints about rampant bureaucracy that's hampering startups in Germany. While those are justified to some extent they also most of the times seem to come from people who don't really want to start a company anyway but are looking for a good reason not to.
I can relate myself here. Many people who are suggesting to focus on on technology seems difficult now. If you are a web developer you need to know many things. Apart from main programming language you should know about Redis or other Q system, Build systems and many other things.
I suspect someone like Knuth might attract quite a bit of mail from "math cranks" [0]; this tiny little hurdle might actually discourage a few of them.

[0] https://empslocal.ex.ac.uk/people/staff/mrwatkin/isoc/crank.... (this an an excerpt from a paywalled NYT article here: http://www.nytimes.com/library/national/science/020999sci-ma... )
Things Rust shipped without
Wild in the Streets: A 24-Hour Field Guide to New York City
I think you should complain on your browser's default table styling rather. Looks good with w3m ;P

Seriously though, graphs can be manipulated to look exactly how you want the user to interpret it.
That's true, but EV on its own does provide real value as well.

When you see the green bar, it's proof that it's at least nominally certified to be served from the entity displayed (barring key theft etc).

Barring parallel certs, even if it was possible, wouldn't necessarily be a good idea, since there's a lot of legitimate uses for them. For instance, we also have a wildcard (non-EV) certificate for the same domain, covering *.userify.com that we currently use for customer subdomains.

I'm far from an apologist for CA's. I think the entire system is broken. It's ridiculous that my browser trusts a Chinese govt CA with the same level of trust as the best US or EU CA, and it's ridiculous that it's so hard for me to customize that level of trust. Still, it's what we have right now.

EV does represent some actual effort for every single issued certificate on the part of the CA's, and they do deserve to get paid for that. Whether that payment should cost many hundreds or even thousands of dollars is debatable, however!
That doesn't help reduce the computational complexity in this instance. After appending, the lists are different, so it renders the component, which starts iterating the children and checking each one in turn to see if it's changed. To reduce the computational complexity you'd need to do something like walking the tree that backs the list instead, so you can ask it "did any of the children under this node change?" which means you can start skipping the comparisons for big chunks of the list. I don't know if react and immutable.js can be combined in this way without significantly rewriting you or components. I suspect not.
See http://kpdecker.github.io/six-speed/ for overview and better readability.
> Reddit is really poorly managed. If Google bought it and gave it an overhaul

If this happened, Internet would explode from all the rage.
Preventing other rendering engines is Apple trying to leverage the strength of its iOS platform to help control the future of the internet. Nothing more, nothing less.

I can understand their wanting to have some say on what may be the sole future platform, but lets not pretend it's for some altruistic reason.
If this is art then I'll have to admit - after 20 years of learning and practicing programming, I'm still a mechanic (or craftsman), not an artist.

I will not be able to read and understand this book fully and I probably won't even try, unless I'm locked in a cell with it.

Although I've helped build software used by millions, what I did was stitch together things that are too brilliant (or insane) for me to fully understand. And I assume that most of my colleagues did the same.

There are pylons of brilliance on the shoulders of which everyone builds, and Knuth must be one of the strongest.

Thank you Mr Knuth for holding so much weight on your shoulders.
> it's possible to do very intesive computation on the computer running the flight controller - Andrew does a demo where he flies while compiling the linux kernel on the same computer at the same time, no glitches

My point is that it's incredibly dangerous to build this as our default security model in drones, because while it's certainly the case that the flight controller has the raw processing power and if our security worked perfectly, it wouldn't be a problem we live in the real world and errors in userland execution shouldn't be able to break the control loop and send heavy toppling down on your head.

Just because you're probably smart enough to do your taxes while you drive doesn't mean it's not safer if you focused on the road.

> And if you want a co-computer, it's quite easy - use any board you like, for instance Nvidia Jetson which has tons of GPU cores for paraller processing, and just talk to the flight controller via mavlink over ethernet

Yes, I expect that the model we'll see for consumer drones is something like a Kepler embedded module running userland, with a second, standalone ARM core running the flight controller (with the flight controller exposed as a device in userland, but talked to as a server on the wire).

Probably with some kind of hardened RTOS on the flight controller, and Linux running userland OS.

This has the benefit that controlling the drone is no different than lots of other devices we control, we can work in our usual operating system, and we get to perform a sanity check between userland and flight control execution.
PureRenderMixin is basically shouldComponentUpdate with a shallow comparison of previous/next props and state, but the big win is avoiding render and diff for the component, so returning false would be about the same as PureRenderMixin.
See my post above (https://news.ycombinator.com/item?id=9826916). The break itself is pretty significant and, if I read it correctly, would also make their rate static/predictable for a long period. That is pretty tempting for developers.
Truthfully, the subreddits I follow (programming-related) are unaffected, though a few threw up a notice saying they were not going to black out.
I have a hard time not to be sarcastic about the author's naivete.

He does acknowledge that Postel's Maxim might be essential to any widely deployed protocol that wants to be successful. He also acknowledges that his alternative is inaplicable to the early life of a protocol.

The main two flaws in tghe reasoning is that incompatibility or bugs are not intentional and that success is contingent on something 'just working'. For a thousand-feet views, you want errors, whatever their source, to propagate as little as possible and affect as little of a network as possible. Postel Maxim provides that effect. Being strict ensures that some process somewhere over which you have no control will affect your system.

Fortunately, it's being applied everywhere, notwistanding purists. Your house electrical input gets filtered and aim to provide a standard volatge. Your computer power supplies filters that and aims to provide a stable voltage and amps. Your electronics are surrounded by capacitors... wand it goes up the stack. It's just good engineering.
I've seen softcore pornographic material from twitch. Women flashing their breasts or ass at the webcam.

Granted, that sort of thing apparently is uncommon because the people who did it were apparently almost immediately banned... but that's rather the point, isn't it? You don't see it because they ban it.
Read all three! Thanks for the reading list extension and gratuitous downvote :-)
A major reason for freemium vs. cheapium is to minimize friction.

Freemium signups can be achieved in a few clicks. But if you charge anything, now the user has to pull out a credit card, enter digits, etc. That additional investment of time might mean the difference between someone trying something and not trying something.

Established brands like Apple can afford to charge for everything and not play this game because they are already known. But if you are a scrappy little startup, your biggest problem is often getting anyone to try your product at all. Your product might be great, but if nobody tries it nobody will ever know. Freemium is a strategy for achieving that at some cost further down the line in the form of overhead and possibly reduced perception of "high-end quality," etc.
Sure, but those forums don't get millions in funding.
Well - OK lets try taking the conversation a bit further.

"Adverse possession was still possible in any private property where at least ten years had passed ‘without effective action by the owner" [1]

Should we have 'squatters' rights' (adverse possession) for domain names? I personally think not...

[1] http://www.dailymail.co.uk/news/article-2622995/Squatter-400...
A position:absolute div with position:relative parent made sibling of the parent can behave differently.
> but ruby doesn't track external strings as dirty like that.

Yes, it does. E.g:

x = STDIN.gets
puts x.tainted?
y = "hello "+x
puts y.tainted?
z = "foo"
puts z.tainted?

The two first will return "true", and the last will print "false". If you set the safe-level appropriately some methods will be disallowed for x and y above (e.g. eval()), though I would not trust that as comprehensive, but it's a lot better than nothing.
Are they putting bitcoin mining into the TLS protocol?
There was some serious concern that they wouldn't find another opportunity with good weather this summer. The Japan - Hawaii leg was the longest planned leg, and really stretched the aircraft's capabilities. If they couldn't find a good weather window in June (near the summer solstice), they faced ever shortening-days, and may have had to wait until next year for another attempt. They may have run out of funding during that year-long wait!

I'm glad they made it!
Without OCSP stapling, every time someone connects to your server via HTTPS their client will check with the CA's OCSP server to verify that the certificate is still valid. They maintain CRL's for certificates etc. For DV certificates less so and EV certificates more so, the CA also verifies your information before issuing certificates.

This infrastructure is not free. But yes, technically CA's could issue certificates for absolutely everyone for near-zero cost and they would be just as good as the ones that cost more.
Wouldn't any kind of puzzle be too slow for embedded devices, yet trivial for a botnet?

It would be intresting if this could be used to do something useful, or even as a source of revenue for servers.