skysight-inc/HackerNews huggingface dataset:
From what I understood, audio cannot serve as a first infection vector, but it could serve as a reinfection vector even when the BIOS was flashed, as the malware apparently also infects the RealTek audio chip software (according to what he reports on G+).

That would explain this scenario: the malware has been erased from the disk and the bios, but still lives in the audio chip, download a new payload through the high frequency connection, and boum, the computer is infected again.

See https://plus.google.com/u/0/103470457057356043365/posts/3reW...
That did confuse me for years. I thought there were a bunch of child prodigies working for BBN.
There's still an unquantified pile of hidden results that stem from studies that never register with ClinicalTrials.gov in the first place. (E.g. studies done outside of the US.)

How many studies done outside the US are not registered at ClinicalTrials.gov? If you intend to use your post-phase 1 trial for FDA approval, you have to register within 21 days of signing up your first person. Since the US is where drug and medical device companies make all their profits, I can't imagine why you would spend the money to do a trial just to have to rerun the trial later for FDA approval.

Plus if you ever intend on publishing in any of the major journals, you have to register before your trial starts or you'll be ineligible to publish (including phase I trials).
Ugh... do you know any flight attendants? They are not the lowest common denominator by any stretch.
This is the clearest concise explanation I've seen on Modernism and Postmodernism, thanks for that. Can you explain Post-postmodernism?
Exactly. From the article: "Forensic tools showed the packets continued to flow over the airgapped machine." How do they know? Where do they hook in to log these packets?
Having built the first version of LayerVault in Berlin, it was remarkable to see how many expats were building companies there. It's also much more affordable than your more traditional hubs.

I can't recommend Berlin enough, especially for building an MVP.
Well, I'd rather have people using Vista and XP. I don't see what's wrong with Windows 7 though if you don't like Windows 8's interface. (Even though there's a few cheap paid and free tools to make it behave pretty much exactly like Windows 7 if you don't want to embrace change).
Getting a US visa is one thing, but what about tolerating the thought of someone putting their hands up your ass at the port of entry :-(
I have a similar usage pattern. My issue is that it is so slow. I agree, it is a confusing, but that wouldn't be a problem if it didn't take 30 seconds between clicks to see if you clicked the right thing.

The first thing I would implement is a search that accepts most things like a profile_id, transaction id, or email, and returns results within a few seconds. Right now it is about 13 clicks, and 30 second wait only to find out you didn't select the right combination of option buttons. The system is awful when you have a customer on the phone and are trying to figure out what is going on.
The best place to live in New York is actually New Jersey. The PATH subway in Jersey City or Hoboken gives a quick (15 minute) commute to the downtown and midtown business areas, or there's also bus and ferry options.

Rent goes very roughly 25% cheaper than Manhattan for similar digs, everything from basement studios (~$1500) to modern luxury towers, and gets cheaper with more distance from the PATH.

Bonuses: You dodge the NYC income tax (over 3% of income). NJ sales tax is a bit less too. And NJ has easier driving and flying (Newark) access to the rest of the world.

I've lived on the NJ Gold Coast and commuted to Manhattan for basically my entire professional life, and quite satisfied with that. I've never lived in any other area than NJ/NY so can't compare it with the west coast.
This would be such a beautiful website for such a terrible company.
I get this same thing but can't figure out why. The are no forms or suspicious links. Aside from Google Analytics, there's a single (conditional) JS include, and the code looks harmless. The page looks safe to me.
Update: Google Denies NSA Cooperation While Expanding Encryption
For some strange reason, it seems to me that arstechnica decided to treat Halloween like 1st of April.
Because the threat-model they use didn't include a well-funded government opponent with submarines and the manpower and ability to physically interfere with private lines.
An equally good question is why to poor people vote republican? Because they want to belong. And through financial osmosis people who vote republican become rich, right? That is the thinking anyway.
Bitcoin As Protocol
Any taxes you pay out of the US are credited against your US tax liability.

http://www.irs.gov/Individuals/International-Taxpayers/Forei...
Facebook should worry about Facebook Nevers, not Facebook Quitters.
> US taxation laws deter US-based talent from leaving the country

They do? I know Americans still have to pay taxes while living abroad, but they can exclude up to $97600 per year from their US taxable income which is a nice start.
(And that "Earned Income Exclusion" is rising every year: http://taxes.about.com/od/taxhelp/a/ForeignIncome_3.htm)
This is an interesting read, and there are serious problems Aviran is trying to address. I would be a bit concerned about 'tail wagging the dog' or also known as 'inmates running the asylum' with such a developer-centric approach.

"Architecture should be done by the developers themselves while the architect should become a consultant and a supervisor."

Engineers can care very deeply about components of the system which the customer is blissfully and entirely unaware. In my experience, Engineers also really love to refactor, which can just as often be reshuffling deck chairs versus truly reducing technical debt.

An architect's job is to fully understand the working system so they can figure out the right places to build or add functionality efficiently, effectively, without creating a monster. An architect needs to be able to say (and end the discussion with) 'No we're not going to do it that way' when an Engineer wants to re-write the lowest level communication protocol between two system components resulting in 6MM of development and QA and zero impact to the user-level features or performance of the system.

"When a product manager hands over a spec to a developer, the developers usually don’t really read the whole spec..."

I've had this happen to me (exacerbated by working remote / cross-country) and it is an absolute killer. A good spec is worth its weight in gold for aligning a team toward a common vision. I think the real problem is the spec needs to be a living document, and be a continual influence/guide during technical discussions. If you are constantly referring to it and refining points of ambiguity, the team is more likely to invest the time not just to skim through it but really internalize it.

So I think the answer is not 'don't write the spec' or 'have the engineers co-author it' but rather make sure it's relevant and useful to guide all your future discussions about functionality. It should be possible to build consensus and common vision with a spec rather than just dictate requirements.
And what's so difficult about following the rules and being inconvenienced for 20 minutes?

The amount of entitlement in this HN discussion is nuts.
Extraordinary claims require extraordinary evidence.

So far it sounds very conspiracy theory to me. I don't know his credentials, so it is hard figure out what to make of it.

Had this come from Schneier I would have taken it a lot more seriously.

Like others have mentioned, where is the evidence? Give us the audio recording at least.
As a argentinian programmer with italian citizenship that is considering leaving the country for Europe, are there any sites / forums or communities where I can contact startups or companies residing in Berlin?

I'm a web developer with experience in Ruby, Rails and Javascript
Thomas Jefferson designed his bedroom with ventilation in mind.[1]

[1] http://www.monticello.org/site/house-and-gardens/bedchamber
The first ~$97K earned in a foreign country is not taxable on your U.S. return.

http://www.irs.gov/Individuals/International-Taxpayers/Forei...
And then remove the existence of cookies altogether, I infer. Since only a unique identifier is necessary, with all other session data and preferences being stored on the server.

I notice in a comment further up that Apple has two separate IDs. One for advertising and one for tracking users of a vendor's applications. Should this browser ID system have two separate IDs, one for securely identifying a user and another for advertising? The secure ID would have to be unique per website, otherwise phishing schemes just became ridiculously easy.
There are pressure sensitive pens that work with any Android/iOS cell phone via ultrasound. So I don't know about laptops, but all smartphones are capable of data transmission via ultrasound. I can't recall the last laptop I used that didn't work fine for Skype, so I don't think laptops are any worse, personally. Maybe 5 years ago one employer went cheap on a model without the built-in webcam on a laptop that usually had it, but even that had speakers and mic.
Wait, where did you read that poor people vote republican? I would've guessed otherwise.
"This is your last chance to learn, soak things in like a sponge."

I think this is a terrible way to look at college v post-college.
You can also build it in, like, your home town.

I don't get this obsession with moving to a startup hub before there's even most remote proof of your startup's viability. To me, it always raises the suspicion that one's less interested in actually building the business and more interested in living inside the movie The Social Network.
Pretty cool!

1. Is there a way to route a request to a specific backend server? For example, all file uploads go to one server and everything else goes to another? Personally, I would use something like this if I could add custom routing logic.

2. What about handling authentication? Then the request is never submitted to the backend. Again it could just be a hook for custom logic.

3. Similar to #2. Is there a way to have custom validation logic? Some validation is very application-specific which I am not talking about. However sometimes you want to validate that the request is HTTPS, JSON formatted, etc.
Ok but if I wanted to use alphabetic sorting I would have used ["1","10","5","-15"] no? Wouldn't that make more sense.
If you are a U.S. citizen working in Berlin and paying German income tax, you will not be double-taxed on the income. The USA will give you credit for the tax paid in Germany. See Form 1116. Others have mentioned the Foreign Earned Income Exclusion. See Form 2555.

You will, however, pay two metric shit-tonnes in professional fees getting your U.S. tax returns prepared because the international tax rules are so ridiculous. The operating principle in U.S. tax law is "If you are doing something abroad, you must be Mafia ^H^H^H^H^H a drug lord ^H^H^H^H^H a thieving bastard tax cheat ^H^H^H^H^H^H terrorist." (The Poster Child of Evil has changed over the years, but the pig-headedness has remained constant).

Disclaimer: I am an international tax lawyer.
Firefox has had in the region of 30-40 advisories per quarter recently, hardly an order of magnitude more vulnerabilities than the ~50 you mentioned as the Java plug-in's recent record.

Also, as has been pointed out in numerous recent debates about Java, it might be unnecessary for most folks, but there are still many millions who use it routinely. Indeed, this is precisely why I think Mozilla's U-turn on this issue was a sensible move.
Isn't there a tax treaty between Germany and the United States to avoid double taxation?
Are you sure you'll be paying taxes twice? AFAIK, countries signed on mutual tax treaties only tax you for the difference between the domestic tax rate and what you paid in the other country. Being that US has a lower tax level than Germany, this difference will be negative, so effectively zero US tax.

I think the problem with US tax codes is that as a citizen you need to pay tax for any revenue you collected regardless of where you are physically located, but taxes you paid in treaty countries are subtracted from the total.
Just to clarify, in the newer iOS versions there are two classes of identifier that replace the UUID:

identifierForVendor is not shared across vendors, but it is shared across apps from the same vendor.

identiferForAdvertising is shared across all apps, but it is not shared between devices and can be reset at any time by the user. (I think the user can suppress it altogether, but I'm not 100% sure.)
Make A see only see C's reponses to B.
> When we ban things after they prove to be a distraction, that usually means we proved them a distraction via a body count. Waiting for a hundred or a thousand people to die so that you have statistical certainty is the shittiest kind of science.

I don't know. You make this sound really bad, but isn't this how a lot of science works? How do we know if a medical treatment doesn't have disasterous side effects? Sure, we start by assuming it's safe, and maybe we test on animals to gain some confidence, but at the end of the day you can't really be sure until people have tried the treatment.

Obviously, there are other safer ways to study whether things distract drivers. Perhaps we could use driving simulators to test reaction time. I probably should have worded my comment differently, and asked for proof that Google Glass makes drivers quantifiably more distracted or less reactive rather than asking directly for proof of a higher accident rate.
Mexico and France, Demand Answers Over US Spying ~ ESET NOD32 SOLUTIONS
Maybe an answer to Arrington bashing #TCDisrupt; was it worth the $3,000?
why to poor people vote republican? Because they want to belong. And through financial osmosis people who vote republican become rich, right? That is the thinking anyway.

This is needlessly insulting tripe. Poor people vote Republican because they believe in the platform that the Republican party states they support as they understand it.

Just like the reason people vote for the Democratic party.

It's all based on a mix of imperfect understanding of imperfect honesty.

You have an interesting profile as well:

HN has become a very negative site as of recent. I see no place for me to contribute here. From now on I will not be posting or submitting
So it is broken. I already gave it a list of numbers. Why do I have to subtract them to tell it how to compare them. If I wanted to compare string I would have used ["1","10",....].
> Pretty inhibiting for a speaker of Kannada that they can't name their résumé file with their own name.

That's what transliteration is for. I have no problems writing my name transliterated into the Latin script.
What if you don't trust the politicians or the functionaries... do you have any method of validating the elimination of the funding not based on "Trust"?

Gov accounts are prepared and audited by civil servants. At a certain point a conspiracy is too large to be controlled, and I'd suggest managing to divert hundreds of millions from other budgets is a conspiracy just too large to hide from an entire people when gov. accounts are public. I'm all for official oversight as well by politicians, but politicians could easily cut funding for this sort of activity if they wanted to.

Obama certainly doesn't want to, for whatever reason, as evidenced by the his disingenuous lies about this topic to the public (no one is reading your email) and the way he left Clapper in power after lying to congress and proposed fig-leaf reform, not real reform.

"Redirecting that level of funding... without someone noticing..." is their job

No, it's not. Their job is spying on enemies of their country, nothing more, nothing less. In peacetime that should be a pretty simple job of spying on a few terrorist networks using targeted attacks.
I'm very interested in working at this new media outfit. Anybody have any contacts?
Many people vote republican not because of their fiscal policies, but because of the social ones like abortion.
Mind you that the cost of living in Berlin is nowhere near the cost of living in the Valley. A 40 square meter flat here costs just around 500€ ( less than 700$). I hear it's about three times as expensive in the valley.

You get plenty of restaurants around for less than 10€.
Other note: medical insurance is mandatory and covered by your taxes. It just doesn't make sense to compare salaries like this, you need to compare what you get for it.

Note: I'm working for a young startup in Berlin, my girlfriend might have to refuse a postdoc in the states as I wouldn't be allowed to follow her because of VISAs problems.
> I'd have to be paid about 30% just to offset the cost of paying double taxes (both to the US, and to Germany)

This is plain wrong. The US and most (all?) EU states have agreements for the avoidance of double taxation in place. I live and work in Ireland as a German and US citizen. I pay my taxes here, and have to file in the US, but can deduct all my Irish taxes as "foreign taxation credits" or some such, effectively paying nothing to Uncle Sam.

Here's the US-Irish agreement: http://www.revenue.ie/en/practitioner/law/double/usaprot.htm.... I'm sure you can find one for Germany.
You're more likely to find up-to-date and useful resources on the 'net then in a dead-tree form.

Moreover, you aren't likely to be able to write any meaningful code without cruft, because you'll have to use existing libraries, where that cruft lives.

Giving you a reference to writing C properly--something most folks still don't do--is actually somewhat helpful as opposed to pure snark.

Does C++ have a fixed ABI yet? Is there a fixed name-mangling scheme across compilers? How do I bind other languages to the lambdas?
Because of the mind-numbing tendency to politicize everything.

Card's book and the movie have nothing to do with his bigoted views, and should stand or fall on their own. In fact, the book (and possibly the movie), with its strong moral stance that resonates with teenagers, is likely to spread far more good by encouraging its readers to think about bullying, suffering of others, etc. than Card could possibly do harm, even if he wanted to, with its proceeds.

Historically, just about every famous writer has been bigoted about something; all of us are probably bigoted in some ways in which future generations will judge us. If the sanctimonious boycott calls leveled against Card succeeded in the past, we'd be left without many wonderful masterpieces that enrich our lives and deepen our understanding.
Fifth Amendment Prohibits Compelled Decryption, New EFF Brief Argues
Why Won't Coworking Grow Up?
alt.sysadmin.recovery lives on! albeit in a web app. wonder if usenet is still alive...
I have old eyes, further blurred by writing re:Invent blog posts almost non-stop for the last 2 weeks. The typo has been fixed.
Trolls, Watch Out: Senator Hatch Introduces New Patent Legislation
This is the first time I've seen information addressing quantum computers and bitcoin in a meaningful way (between the linked text and the additional info it links). As a relative layperson when it comes to such things it's nice to finally have some notion of Bitcoin's ability to cope with the quantum world.
Is the protocol propriety too?
> Disclaimer: I am an international tax lawyer.

Alright, I'll take your word for it then.

> You will, however, pay two metric shit-tonnes in professional fees getting your U.S. tax returns prepared because the international tax rules are so ridiculous

So, instead of getting shafted by paying Uncle Sam, I'll get shafted by paying a tax attorney. :)

Either way, there is a financial disincentive to working abroad, and that's not taking into account the fact that this is a disincentive to look for jobs abroad (speaking for myself, I'd want to figure out the financial implications before seeking employment abroad, and this creates yet one more hurdle).
Disclaimer : we didn't compete on the battlefield but had a regular booth in startup alley
Yahoo Bug Bounty Program is Now Live
I played saxophone in middle school, which wasn't a total waste, but I quit after two years to fit Spanish into my schedule (which I then didn't learn because the instruction was so bad). Drawing, cooking, shop, accounting, intro to programming, etc. would have all been more applicable to a productive life.
Atlassian OnDemand Tools use at Medlert to get stuff done faster
Agreed. Not to mention, those low wage, low skilled attendents have quite a bit of training that can save your life if you are ever in an airplane accident. They may not know about the latest gadget from Amazon, but they do know their stuff.
Yes I see your point to a degree, in a way we're working in a sort of "highlevel C++" most of the time at some performance cost: We have strict coding conventions in place which forbid low-level C/C++ stuff in high-level code (no raw pointers, no C-style arrays, no pointer arithmetics, no C library functions, etc...). Plus static code analysis and tons of runtime asserts. I can't remember the last time we had a buffer overflow or pointer-gone-wild. The performance hit of C++ compiled to JS is surprisingly small (1.5x native performance in Firefox, a bit slower in Chrome, but the gap is getting smaller, this is in the same ballpark as strongly typed bytecode languages like C# or Java).
The killer app for me was the built-in FM transmitter. Yes that's right, transmitter. I could change the user agent, then listen to rdio in my old car with no tape deck.

Plus the overclocking, the bash prompt, it goes on and on. It was a fantastic phone that none of my phones since have lived up to.
I do understand this but what is wrong with recommending picking up a USB 3 external drive over USB 2? I doubt the Pi is the only device it will be used with.
Can someone explain what the technical important point is? It looks to me that console.log is capable of logging not just plain text, but even images (they inlude data-urls for a github icon). Is it complicated to do this?

Edit: I'll answer my own question:
https://developers.google.com/chrome-developer-tools/docs/co...

They use the %c control character in the log message to emit css, including embedded icons
While the precombined versions are much more common, Japanese does have combining characters to add voiced and semi-voiced marks to syllabic characters (e.g, か vs が, は vs. ぱ).
"Socialism never took root in America because the poor see themselves not as an exploited proletariat but as temporarily embarrassed millionaires." -- John Steinbeck
Sdesalas/trifleJS - Headless node powered Internet Explorer
I was the one who came up with the "Neo900" name and I can say that the inspiration was from Neo1973 and Neo Freerunner names. As OpenPhoenux, Neo900's umbrella project, has Openmoko roots, and given that "neo" means "new", it seemed pretty natural to name the "new N900" as "Neo900".
What about this part:

> Strangest of all was the ability of infected machines to transmit small amounts of network data with other infected machines even when their power cords and Ethernet cables were unplugged and their Wi-Fi and Bluetooth cards were removed.

When I read that, I had to check the date to make sure this wasn't posted on April 1st. That seems completely implausible, unless the author completely misunderstood some information relayed to him.

There's something (okay, several things) about this entire article that just screams April Fools.

Edit: The additional information others have posted here regarding malware in USB controllers seems far more likely and that the article itself was written as a ridiculously implausible story until the very end where it alludes to the notion that nearly the entire first 2/3rds is completely false. I guess I would've expected better of Ars.