Hacker News Reader

The subset aspect is indeed still relevant. JSONP callbacks[0] make use of JSON's just-JavaScript nature.

In old browsers, yes. The much more secure CORS is now an option, however.