Developer's Rust Trading Bot Backtest Reveals Hidden Losses Masked by Lucky Trades

A software developer running a Rust-based trading bot on Polymarket for six months discovered through backtesting that two strategies were quietly losing money, obscured by gains on a few large positions. To replay historical data, the developer used tick-level L2 order book data from a third-party provider, since Polymarket's public API offers no historical endpoint. Rather than building a separate backtesting system, the developer reused the live bot's existing architecture, swapping only the data source between a WebSocket feed and a local file replay. This approach ensured the strategy engine, order book logic, and risk manager ran identically in both live and backtest modes. The exercise highlighted how trade-only historical data can mask slippage and produce misleadingly clean backtest results compared to full order book depth data.

PostCSS Adopts Staged Publishing, Gating 685M Weekly npm Downloads Behind Human Approval

Following a GitHub issue filed on June 18, 2026, PostCSS maintainer Andrey Sitnik began rolling out npm's Staged Publishing feature across his high-impact packages, which collectively account for over 900 million weekly downloads. The change was prompted by concerns that CI-based publishing — where automated pipelines hold publish credentials — creates a broad attack surface, as demonstrated by the TanStack compromise in May 2026 and a Red Hat incident on June 1, both exploiting CI tokens to push malicious packages with valid provenance attestations. Staged Publishing addresses this by allowing CI to build and stage a release while requiring a human to manually approve promotion to the 'latest' tag, meaning a stolen CI token alone cannot complete a malicious publish. Within nine days of the initial issue, four packages — PostCSS, nanoid, browserslist, and Autoprefixer — had Staged Publishing enabled, covering 685 million weekly downloads. Three remaining packages, caniuse-lite, postcss-nested, and postcss-js, have yet to adopt the feature, after which the entire ecosystem's roughly 963 million weekly downloads will sit behind a human approval gate.

PM arrives in Seychelles, to mark 50 yrs of ties, chart future

AI Data Centre Boom to Drive Global Memory Market to $890 Billion by 2026

A surge in artificial intelligence data centre investments is fuelling rapid growth in the global memory market, according to a Morgan Stanley report. The market is projected to expand by $670 billion, reaching a total value of $890 billion by 2026. The primary driver behind this growth is the unprecedented demand for memory infrastructure to support AI workloads. This boom signals a broader shift in the technology industry as AI adoption accelerates worldwide.

Slab Collapse at Under-Construction Guest House in UP's Barabanki Injures 8

A slab collapsed at an under-construction guest house in the Haidergarh area of Barabanki, Uttar Pradesh, injuring at least eight workers. Several more labourers are feared trapped beneath the debris following the incident. Initial reports indicate that a shuttering failure triggered the collapse, burying workers at the site. A large-scale rescue operation involving police, fire services, and the SDRF is currently underway. Authorities are continuing efforts to locate and pull out those still missing from the rubble.

Developer Builds Dual-Pool AI Code Review System Using Real Engineer Personas

A developer has created an adversarial AI code review system that simulates feedback from real-world engineers with documented philosophies, rather than relying on generic abstract roles. The system uses two pools: a fixed pool for consistent, depth-focused review and a randomly assembled pool that pulls fresh personas via web search each session to surface blind spots. Two AI managers, modeled on Netflix's Patty McCord and Pixar's Ed Catmull, curate teams of workers tailored to each task's specific needs. In a live test on a real pull request to an 18,700-star GitHub repository, the system surfaced 21 total findings across three rounds, with the random pool identifying issues that both fixed-pool rounds had missed. The project is publicly available on GitHub and was submitted as an installable skill via PR #866.

MVC in Rails: Why Service Objects Solve the Fat Model and Fat Controller Problem

The Model-View-Controller pattern in Rails assigns each layer a distinct role, but developers often overload models or controllers with logic that belongs elsewhere. Fat controllers emerge when business logic crowds a single action, while fat models balloon when callbacks handle emails, payments, and third-party syncs. The missing piece is the service object, a plain Ruby class designed to coordinate multi-step workflows such as creating an order, charging a payment processor, and sending a confirmation email. Database writes that must succeed or fail together belong inside a transaction using bang methods to trigger rollbacks on failure, while external API calls like Stripe charges should sit outside the transaction to avoid holding open a database connection. Keeping each concern in its proper home — model for data rules, controller for request handling, service for workflows — is what separates junior Rails code from production-ready architecture.

Manickam Tagore appointed new Tamil Nadu Congress chief

Gaganyaan test flight delay: Will it stall India’s first human spaceflight launch?

Expo Raises $45M Series B to Accelerate App Development Tools and AI Features

Expo, the mobile app development platform, has raised $45 million in a Series B funding round led by Georgian, which has previously backed developer infrastructure companies such as Replit and Render. Co-founder Charlie Cheever noted that Expo was already profitable and did not need the capital to sustain operations, but chose to raise funds to speed up product development. The company plans to use the investment to hire engineers and build new features that make app creation faster and more accessible. Growing adoption of Expo alongside AI tools has expanded the team's roadmap significantly. Expo also stated a broader ambition to enable non-developers with vision and determination to build application software.

Developer Builds Static Scanner to Catch Supply-Chain Malware Before Code Runs

A developer created a static repository scanner after being targeted by a fake job interview repo designed to steal credentials and API keys. The tool analyzes repositories without cloning, installing, or executing any code, since malicious scripts embedded in npm lifecycle hooks like postinstall can run automatically during npm install. The scanner checks for three key threat categories: dangerous build-time execution hooks, dependencies in package.json that resolve to unexpected or non-registry URLs in the lockfile, and obfuscation patterns such as eval of decoded strings or long hex literals. The attack that inspired the tool exploited a mismatch between a trusted-looking package name and a malicious tarball URL hidden in the lockfile. By keeping analysis logic free of any I/O and testable against known-malicious fixtures, the scanner can flag suspicious combinations of signals before any harm is done.

Filmmaker K Bhagyaraj Dies; Remembered for Amitabh Bachchan's Aakhree Raasta

The Indian film industry is mourning the death of acclaimed Tamil writer-director K Bhagyaraj. He made his Hindi directorial debut with the 1986 film Aakhree Raasta, featuring Amitabh Bachchan in the lead role. The film stood out for blending family drama and emotion within an action-dominated genre. Bhagyaraj's careful creative approach, combined with Bachchan's confidence in his direction, helped the film earn critical acclaim. The collaboration remains a significant part of his enduring legacy in Indian cinema.

How kids allegedly sparked American Atelier fire

Zuckerberg's Increasingly Bizarre War on Whistleblowers

Article URL: https://pluralistic.net/2026/06/27/zuckerstreisand-2/ Comments URL: https://news.ycombinator.com/item?id=48698684 Points: 15 # Comments: 0

'Attempt to provoke Muslims': BJP accuses Telangana CM of disrupting SIR process

Developer Releases 9 Open-Source Telegram Bot Templates Built in Python

A developer has published nine production-ready Telegram bot templates on GitHub, covering use cases such as AI assistance, appointment booking, crypto price alerts, job listings, and survey collection. The bots are built with Python 3.12 and the aiogram framework, using SQLite for data storage and Anthropic's Claude Haiku model for AI features. A freemium model is implemented across relevant bots, allowing 20 free messages per day with unlimited access for premium users. Supporting tools include APScheduler for scheduled tasks and free APIs such as CoinGecko for cryptocurrency data. All nine templates are freely available on GitHub, and the developer is also offering custom bot development starting at $49 per bot.

Maharashtra TET 2026 Postponed After Question Paper Leak; 3 Held

Maharashtra's Teacher Eligibility Test 2026 was called off on Saturday, just one day before it was set to be conducted. Authorities took the decision after portions of the question paper were allegedly leaked ahead of the exam. The development has disrupted the plans of thousands of candidates who had registered for the test. Three individuals have been arrested in connection with the paper leak case.

How to Build Real-World API Tests Using Python and Pytest

As software systems grow increasingly dependent on microservices and third-party integrations, automated API testing has become essential for maintaining reliability and security. Manual tools like Postman are useful for exploration but fall short in CI/CD environments with hundreds of endpoints. Python's Pytest framework, combined with the Requests library, offers a scalable solution for automating API validation. Developers can write test cases to verify correct status codes, data structures, and error handling — such as confirming a valid user returns HTTP 200 while a missing one returns 404. Advanced patterns like parameterized testing further extend Pytest's usefulness in production-grade testing pipelines.

How to Build Real-World API Tests Using Python and Pytest

As software systems grow increasingly dependent on microservices and third-party integrations, automated API testing has become essential for maintaining reliability and security. Python's Pytest framework, combined with the Requests library, offers a scalable alternative to manual tools like Postman for testing API endpoints. Developers can write structured test cases to verify correct HTTP status codes, response data formats, and error handling for invalid inputs. A practical example using the public mock API at reqres.in demonstrates how to validate both successful user profile retrieval and 404 responses for non-existent users. Beyond basic tests, Pytest supports advanced patterns such as parameterization, making it well-suited for complex, production-grade CI/CD pipelines.

India and South Africa's semi-final fate hinges on Australia vs India result

India and South Africa are both fighting for semi-final spots at the tournament, with their qualification scenarios closely linked to other match results. South Africa are considered favourites to defeat Bangladesh, but their significantly poor net run rate complicates their path to the knockouts. A win alone may not be enough for South Africa, as they need Australia to beat India to improve their qualification chances. India, meanwhile, are also dependent on the outcome of the Australia match to secure their place in the semi-finals.