skysight-inc/HackerNews huggingface dataset:
All these little wires [0] emit electromagnetic radiation that be intercepted and turned back into whatever you see (and more).

Despite what you read on Hacker News no amount of encryption or software trickery is going to stop this.

[0]: http://imgur.com/IHXKlNw
Thanks for this. I did some extra work on it (via someone else's fork) so it can run across multiple directories. I've too many projects lurking around to cd into all of them! I added some pretty colours too :)

https://gist.github.com/yb66/44b97baecbeec6900e039ffb9461d31...
If you're interested in field recordings, I highly recommend the work of Chris Watson.[0] He has some amazing albums featuring the sounds of nature in some incredibly beautiful places.

[0]http://www.chriswatson.net/
And then there's the accelerometer ;)
Not only greencard holders but ITAR even has exemptions for non-US persons, that is those who aren't US citizens or Permanent Residents.

I don't work directly with anyone like this but I know SpaceX has a few, not sure of the exact number, employees who are neither citizens nor permanent residents.

From what I've heard the process of getting a non-US person ITAR cleared is extremely costly, both in time and money and is thus used very sparingly.
What are you doing while using your company laptop???
I think ES6 is the solution. Evolve JS and remove the "warts" instead of introducing new variants.

I'm a big JS fan. I can't stand Coffeescript - it doesn't seem to add anything except changing the syntax to make it easier for Rubyists to understand. Which is fine, I guess, but feels like a personal preference. More like a text editor setting than something anyone should publish their code in.

Same for Typescript, to a certain extent, though I understand the heartfelt desire to have the compiler pick up some of the more common errors.

We run the risk of fragmenting the community by promoting CS and TS - better to evolve JS itself, which is what is happening and it's great.

TL;DR: kill Coffeescript and Typescript, evolve Javascript for the win!
Honestly, unless the API is complex, why bother?

I feel like abstracting APIs into objects (essentially RPC calls?) creates too much of a dependency on the network. The friction of writing the calls and their handlers helps minimize their use :)
They got Eloped, just like Macromedia ... Will Yahoo get Mayered ?
based on those examples, I'm confused as to why they support GNU, considering it can be used with non free software such as a windows kernel. It looks like GNU is abhorrent to the FSF.
Everyone here is saying the article is wrong, but no one really adds anything or corrects the author.

Can you expand?
There are no shortage of competitors in the payments space because most are profitable very early. My first customers would probably be in the vending machine space the few companies that provide this service overcharge and require expensive cellular internet connections per machine. I believe that lowering fees, dropping internet connection requirement and possibly adding value by capturing vending inventory stats will convince a large regional vending company that we have an existing relationship with to pilot and eventually switch it's entire fleet to our system.
I care about audio so much more than video, and text/keys/etc captured from the machine even more. As long as my screen and keyboard are out of the frame of the camera, I don't really care about it getting RATed. At worst, you'll see me naked, or making angry/etc. faces at someone on irc or email. While embarrassing it would be less bad than most of what you could accomplish by stealing actual information.

OTOH, carrying around a microphone connected to the Internet which can be remotely enabled at any time without leaving any real trace (battery use/network use is the only real sign, although even that could be covered up to a great degree -- there is probably a way to do either low-fidelity or infrequent audio pickup, maybe keyed on location and charger state, and on-device pre-processing) -- people do this all the time Mostly because there's no real alternative to carrying smartphone yet.

Plus, of course, there's the fact that no modern desktop OS is particularly secure -- either you give up auto-updates and likely fall to bugs, or use auto-updates and are at risk to your OS vendor or anyone who can compel him. So sensors attached to it, as well as stuff processed on it, is also at risk. You can somewhat mitigate this through a large combination of other protections, but it's almost impossible for a single user single machine to solve that problem.

I'd love a custom run of Dell Chromebook 13 or Lenovo Thinkpad 13 Chrome Edition with no built-in mic/camera, and an EPROM vs. EEPROM, and some special case features. Would be willing to commit to buy 10k units at ~$800/unit retail in 8-16GB x 32GB config.
>The "big CMSs" will not stop a poor development team from making bad decisions.

Depending on the Project they absolutely will. Consider the economic context this is happening in.

There is a staggering number of companies that can harden and secure a WordPress or Drupal Installation. They have scalable workflows that allow them to keep the attack surfaces small, keep up to date with any security issues and even deploy countermeasures before any fix is released.

The market is just big enough for those services to exist. Now consider the same for a custom built Symfony or Laravel CMS.

You still have to trust Third-party code that has had security issues in the past, one just assumes that one crowd is more trustworthy than the others.(http://symfony.com/blog/category/security-advisories)

Besides that, the number of companies that are able to harden, maintain and host is much, much smaller, because their workflows can only scale so much.

So your gains are not really on the security side of things, rather on the implementation flexibility. Which CAN mean a much more Resource Intensive Project.

Drupal and WordPress both have their birthdefects which have ingrained so far into the community that you can't expect them to be ever worked out fully. This leads one to your conclusion that because they aren't doing some parts of their job particularly good, they shouldn't be considered.

Having worked on large WordPress, Drupal(just when Drupageddon happened) and Symfony Projects I can say that from the viewpoint of a customer, the CMS Win out simply because they make the chain of people working on the project more accountable, comparable and replacable. The risks of being technologiclly dependent on the few people that wrote your custom CMS just arent worth it for the customer. The Risk of Running the same Wordpress Code as millions of others sites is manageable in comparison. With Drupal you can go as far as just calling Acquia if all else fails, their customers were safe on Drupageddon since they could just Filter the malicious requests. You can't expect your Symfony Hoster to do something similar when their day comes.
Thanks, I saw it in a Stackoverflow answer and while it did nothing in Chrome or Firefox I thought It might of been there for IE or something.
Silicon Valley’s gender gap problem is really a culture problem
It is the opposite. Subscription model is a good solution for preventing stagnation. Because we have such a large subscriber base, we have to keep our product shiny and keep our users happy all the time. We doubled our engineering team last year and we are investing in improving all parts of our product continuously. We are listening our customers and doing everything we can (usability testing, A/B testing, surveys, feature usage tracking) to make sure they are content with the product.
When we moved into a new house we noticed the air ducts were spewing out strange particles. I called around to see if there is an agency that could test if it's dangerous and the short answer was "we'd only test if we know what we're looking for". If you price this reasonably ($100 or less) and are able to test for a range of substances, I would buy your product in a heartbeat. Don't listen to the nay-sayers, launch a test kit with a list of things you're checking for and see how the market responds. You can try the home buyers / home owners / parents markets, as well as restaurants, hospitals, you name it.
I don't know how to expand. The article is entirely wrong. I can't explain in a comment what's wrong with it because everything is wrong.

This article would barely be any less correct if it gave a recipe for pico de gallo and explained that that recipe defined a monad.
Alright, these are the statements that made me feel guilt / anger, along with the message I interpreted:

> If you walk up to me and ask for my newspaper without offering compensation, and I say "sure, but you have to first look at this pamphlet I'll hand you with it", then I think in this example it is clear that throwing the pamphlet away prior to reading the paper is morally wrong.

"You shouldn't accept my gift without reciprocating."

> For me, the arguments that fall along the lines of "once it's been sent I can do what I want" don't sit well because they feel anti-social in nature.

"Your arguments are uncivil, you should make different arguments."

I get your point about "For me".

> We don't act that way with the people around us, why should be expect it to be entirely different just because we can't see their face?

"You should not treat your property like it's yours alone."

> Unaccountability for poor behavior is a downside of anonymity, and something to to by mitigated, not accepted.

"Your behavior is bad, you shouldn't behave like that."

I hope this helps, and I understand that I may have misread you, it's just my reaction / perspective.
> "Because I saw somebody smarter than I am had a piece of tape over their camera."

And there's (tens of) thousands of people smarter than you telling you how wrong you are about encryption, yet you're ignoring them.
OK so can you back that up with numbers that say how much you are making? Even some approximation of how many units you are selling?

I am currently planning on selling a desktop product and I would be fascinated to know how many you sell.
I'm pretty sure Elon considers himself thoroughly American at this point.

There are quite a few foreign born American citizens working at SpaceX, myself included. You may find this shocking, but seeing as English wasn't our first language, some of us even have foreign accents.

I don't consider them, or myself, any less American.
I like to believe that converting those EM signals back into something useful is beyond the ability of current technology, but I'd be happy to be proven wrong
It seems like a losing battle though. Small embedded cameras are becoming too widespread and you can't put tape on all of them. I think looking forward it's not unreasonable to rely on software controlled switches to minimize this risk, knowing that they will fail or be exploited sometimes anyway.
> You can build and link shared libraries since Go 1.5:

That was not my point and you know it. you can't load shared library at runtime with Go. Like you can do in most languages out there.

> The author of Martini, Jeremy Saenz, didn't feel humiliated:

Yeah, he didn't feel humiliated so much he stopped writing about and programming in Go and interacting with the Go community all together because it's full of bullies.

> The Go team is listening to the community about package management and is even willing to make changes:

The Go team is listening to nothing.

> I would add that I'm tired of people repeating that the Go core team is stubborn and doesn't listen to critics about the lack of generics, even though they have provided substantiated answer on this topic:

That doesn't make them more open to changes, anybody can do an AMA for PR.

Go community is blind to its own shortcomings and the language issues, you just proved my point yet again.
A lot of people ask why the light isn't automatically turned on when it's in use. I think the problem is it's easier to turn it on through software than hardware. Plus, if you can treat the webcam as just a microphone, then anytime a device accesses the microphone (games for example), the light would turn on. Not a problem, per se, but the light would be turning on and off a lot if you use a push to talk game. Something that might cause people to make it so they can just turn the light off. Of course, this is all just speculation.
I would reword it as "Subscription Pricing is for Saturated Markets", since that's basically what he's saying.
Trailing commas were tough to get used to because my primary communication language is English,

After a while I got used to them and I like the copy-paste-ability the enable... I'm also hoping they put an end to leading-comma style,
Can you provide any examples of things that are less fair and less just now than they have been any time in the past 100 years?
Did I understand what you said at the end correctly, are you willing to commit to buy 8 million dollars worth of laptops?
Chariot for Men:

The premise is the same as all the other ridesharing services, There’s a driver app and a client app, except that what makes us unique is our safe driving feature that other apps forgot to do. We ensure every driver in our entourage is a male.
There's this https://jscholarship.library.jhu.edu/bitstream/handle/1774.2... [PDF]
The problem is, the next time we have a genuinely bad government, that government will own us all.

Can you imagine a Stasi or a KGB with the power the FBI is demanding, or the power combined with the legal carte blanche that the NSA already has?
If the conjecture turns out to be false, is the scheme still secure?

If so - interesting, how does that work?

If not - then doesn't that mean it's not probably secure?
Today is 2²/2³/2⁴
This has been a known/practical attack for decades. OTOH, it does require physical proximity, although you could probably do it with a remotely controlled sensor at an intermediate location near the target.

What would be terrifying would be if someone could figure out how to do this attack via software compromise of some hardware sensor system already present throughout the environment; say, a way to repurpose a wifi chipset to pick up nth-order harmonics off a keyboard bus or something. Then, remote-root of some lesser machine could be used to spy on a hardened machine.
Exploding offers are fine. Sudden exploding offers are terrible. If a company recruiter tells you at the beginning of the process: "Hey, this interview process takes two weeks and we expect a response 3 days after your offer letter, which would be 3-5 days after your last interview", then I don't know if I'd be thrilled, but I wouldn't call it bullshit.

Avoid like the plague any company that only tells you about the explosion as the grenade already has the pin out.
Yes. (and then sell them, obviously, ideally for much more than $8mm)
Firstly the article says a monad needs to have a way to extract the value out of it. This is patently false. The most famous monad of all, the IO monad doesn't have a way to extract anything from it (notwithstanding evil trickery). Secondly the article says it needs a way to map a function over it. This is a functor not a monad. Being chainable is not overly important, as the functor law ensures that chained applications of fmap can be coalesced into a single one.
Those are the rate limits, as far as I understand them:

* 100 Names/Certificate (how many domain names you can include in a single certificate)
* 5 Certificates per Domain per week
* 500 Registrations/IP address per 3 hours
* 300 Pending Authorizations/Account per week

It seems to me that WP.com could reach at least one of those... So I was curious to hear how they were doing that.

And yes, I was wondering if they would replace the *.wp.com wildcard - i guess not...
Easy enough to make it stay on for some reasonable number of seconds after each use.
In my opinion the very ideas propping up the idea of work and the economy are flawed. They are flawed because work is not designed to meet human needs. Instead the output of work is designed to meet human needs. But people are so busy working they have little time to participate in the output of that work. Work itself is the end, because that is what you spend most of your time doing, it is the product in of itself. We should figure out how to produce work that actually improves well being. Not products or services which do that because they all actually fail to do that in the end if the people producing them are miserable. And they all are.

Like let me give you an example. Say a worker produces a widget. They can produce the widget in an hour or in two hours. They feel better if they produce it in two hours. Modern work practices would force you to have them produce it in one hour to lock in that profit of the additional hour of work. At the end to cost of the item would be affected by how much time is given for work. Say the cost is doubled by doing things this way. At the end the worker earns the same, and say we do that with the whole economy and so everything costs twice that much. But workers are generally happier and more relaxed. To me that would be a better out come than goods that cost 1/2 as much. Not so for the economy.

In fact it would be very good if we could use automation to do just this. Make work more pleasurable. But the way the economy is set up, and the logic that goes with it. This is simply not going to happen.
One of the biggest benefits of schooling (that almost no one mentions) is that schools function as an enormous public daycare system that keeps children off the streets while parents work. This allows both parents to work instead of having one stay at home for childcare, increasing the size of the workforce and making the country more productive overall.

Schooling has many benefits to the kids as well (which the author does address), but I find it really interesting that simply the existence of schools provides a benefit to society, even when nothing is taught there.
There are so many attempts at describing what monads are, but so few attempts at teaching why you would want to use a monad, and where it would be beneficial over other coding styles.
Yes, carrying around a backpack with all of the receiving kit, and then processing it remotely or in the same kit. Most studies are done under idealized conditions as proof-of-concept for now. If they are close they can grab enough data, but it is still not 'there' yet to be ubiquitous; it will be soon though.
That being said, I use tape at work, and at home on my forward-facing cameras, simply for privacy insurance. Those wires don't show a masked image. Even the best image re-construction or processing algorithms need more data, although you'd be surprised how much data can be extrapolated from semi-transparent Scotch tape over your camera! Maybe you think it's ok if somebody wants to RAT you, but don't forget, some of the photos released or used for extortion are of your SO, or other loved one in the background walking around naked, or doing something embarrassing. I don't care if somebody wants to RAT me this way; they'll go blind, and they must have nothing better to do!
And even afl has qemu-mode, although I have no idea how well that works.
https://en.wikipedia.org/wiki/Van_Eck_phreaking

Have you heard of this?

Video demonstration https://youtu.be/ZZ5HS8GWIec?t=1m45s
I'd love to connect with you @montbonnot - my email is in my profile
Google Doorman: Global Distributed Client Side Rate Limiting
Two Recent Service Outage Incidents
Not only that the high-level information on the page has not been altered, but also just simply that no code has been injected that could possibly lead to a drive-by download or other malware shenanigans.
This is extremely incorrect. He built a test suite PTS to uncover kernel regression and is credited for atleast one major power regression discovery.
A lot of his articles are interpretive, but it's the best way to digest progress in the Linux world on everything ranging from kernel to hardware..which he often surfaces using git commits.

http://www.phoronix.com/scan.php?page=news_item&px=OTUxMw

http://www.phoronix.com/scan.php?page=news_item&px=MTA0MTM

PTS evolved into openbenchmarking.org which has had 17 MILLION downloads for people using it to benchmark and test their desktops and hardware.
https://www.phoronix.com/scan.php?page=news_item&px=17-Milli...
Thats what happens if you take your privacy seriously. You buy one-off Laptops that you can use like paper tissues.
If someone hacks into my computer and steals my CC info, I can very easily remedy that situation by calling the bank. Hell, my bank will probably notice before I do. I'm not even liable for the fraudulent transactions. The same is true to varying degrees of inconvenience for most information.

If someone hacks into my computer and takes videos of me in the buff (or worse, in an intimate situation) and posts them online, I have no remedy. The Rubicon has been crossed. The ship has sailed. The cat is out of the bag. You get the point.

Spare me the lecture about nudity and sex being a stupid taboo. If the world was how I wanted it to be, a lot of things would be different. You have to deal with the reality you live in.
My understanding is that many, if not most, local governments have split their pension plans into two levels: employees hired before date X get the defined benefit plan; employees hired after that day get a defined contribution plan instead.

In Oregon, the state Supreme Court has held that once you're hired the state has no right to change the retirement plan to your detriment.

A few years ago there was a Republican candidate (Ron Saxton) for Governor who said he would fire all the state employees and re-hire them. Sounded very bizarre but the idea was to move them from one plan to the other
I would now think beginners are easily misled by Haskell's do notation. The <- syntax makes it looks like we are extracting values out of a monad, and the do notation certainly looks like it is chainable.
That was done a couple years ago

"IN THE AGE of surveillance paranoia, most smartphone users know better than to give a random app or website permission to use their device’s microphone. But researchers have found there’s another, little-considered sensor in modern phones that can also listen in on their conversations. And it doesn’t even need to ask."

http://www.wired.com/2014/08/gyroscope-listening-hack/
GIMP needs to stop making itself unique from Photoshop and try to emulate it as much as possible. There are way more photoshop users in the world than fresh users going into GIMP.
Two places that I know for sure:
1. Planet Granite in Sunnyvale.
2. Great Mall in Milpitas.

There are several other places where it doesn't use the network unless I explicitly select it though (eg most Philz coffee locations, my work, etc)
Oh, I see: the reasons are syntax error, diff, consistency,.
Exploding offers are actually explicitly forbidden by my top 20 university's on-campus recruiting policy.

Nonetheless, a very famous tech company that was once very prolific, but by 2012, most people considered as their "second choice" company routinely issued exploding offers to CS students in late August/early September before anybody had a chance to interview elsewhere.

To this day, they still recruit on our campus, and while one of my best friends reneged on them to work at Google (which actually in retrospect turned out to be a very wise choice), I wasted a full year of my life at this second tier company; the actual employment experience proved to be as shady as their recruiting experience.

Needless to say, I was extremely unhappy there.
The future of Machine Intelligence
Replication with randomness plus selection is just so incredibly powerful.
thanks for sharing your thoughts. Its a great idea.
One thing that I was thinking was to provide ability to recruiters to push jobs to my job stream but based on my filters/preferences a recommendation engine will sort them and also collapse them if they are irrelevant(like some quora answers) .. that way limiting how many jobs I would take in my feed is also one of the parameters