skysight-inc/HackerNews huggingface dataset:
14 low-tech ways to keep your house warm over the winter
I haven't looked into any research about this, but anecdotally I find this to not be true. Having peaked at 215 lbs. and ~12% body fat at 5' 11", (I'm now closer to 195 lbs. and ~10% body fat) I'd say that I'm in the top 1% in terms of muscle mass. I am often very hot. My theory is that because of the added muscle mass (which requires much higher food intake), I'm metabolizing food at a higher rate and thus generating more heat. I don't know if this is actually the case, but it's my theory.

This may not be the case for people who are fit in a more cardiovascular sense.
I could be wrong (I haven't delved too deeply into this), but I think it requires a code review system (such as Gerrit) hooked up to a CI (such as Jenkins). Then you have the code review system require the CI "sign off" (whatever criteria you please) on changesets before they can be approved by a human; no sign off by the CI, no merging the changeset. Of course, if the CI tests are dependent upon something in the repo, this can be defeated . . .

As usual, it comes down to trust: if you can't trust your developers to write good code or not subvert the system, you either need to educate them, or work with better developers (fire them, or quit and work somewhere better). The point at which you have to start enforcing things by machine fiat can be helpful to catch honest mistakes, but it can also be a sign of a dysfunctional team.
I had a motherboard in the 90s that had a mouse-driven GUI for its BIOS configuration. "BIOS" hasn't been "basic" in decades.
Chirp.io uses sound to transmit & receive links between nearby Android/iOS devices. IMO, interesting tech[1], thats more useful & less secure than bluetooth, for such use cases.

[1] http://chirp.io/tech/
If these were all EFI/UEFI machines, there is a lot more code in these preboot EFI environments than one expects. Room enough to hide this kind of payload.
Great look inside a new product. Thanks for sharing.
eball, your post is marked as dead. But yes, he need to get a Beagle USB analyzer on the thumbdrives to find the injection vector.
btsync is really nice, just install the software, no account creation needed, and if you just want to sync computers on a LAN, no internet connection needed. I was worried about btsync being closed source but when I looked at alternatives like dropbox and spideroak I noticed they weren't open either and you have to sign up for an account and give them personal information to get serious amounts of storage.
Plenty of people will spend years developing a product with no customers. I see small-l lean as more of a scientific method - fail fast, iterate rapidly. I'm a big fan of John Boyd's OODA loop so maybe I'm projecting.
It's just as possible he checked against the MD5s supplied in the torrent he got the ISO from, or never did the check, if he hadn't thought of it.

It's much less likely that he's experiencing the most advanced malware in the world, and much more likely that he just overlooked something simple.
funny how getting $500 from a multi-billion company is pulling teeth, especially when it's an easy PR move
Yeah, he's moved up a notch in my book with this.
I'm slowly (3 years) getting my associates in CS -- and eventually bachelors-- BUT I'm just doing it a 1-2 classes at a time, my major focus is REALLY learning to code, which sadly most colleges don't really cover--to code you need to be building all day everyday -that's the only way to become a good coder.

Will I get my degree? Absolutely? Will it matter? Maybe -- more so when I get my Masters in Business(Looking to go into project management) -- or even better is you majored in Business but became an awesome coder in your spare time -- you could be an instant CIO for a company. -- Knowing business processes AND coding is a HUGE asset.
Six steps on hipster logo design delivered in infographic form...perfect.
You should still be thinking big. But more importantly you need to think of small actionable items that will slowly get you to a big idea.
Thank you for your prompt response.
This is so true. If you look at the big companies they all started with a small feature as a product. There are a lot of startups that are trying to be Google right now. I am probably guilty of that one too.
The N900 was amazing. I used it as my only computer on quite a few trips, effortlessly handling stuff like flight reservations and hotel bookings regardless of having to use desktop-oriented websites with Flash. And the keyboard was great for email on the go.

Of course, progress has passed the device quite a while ago. I still see the occasional hacker using the phone, as that was the last phone many could consider having. A phone you bought and would actually own: http://flors.wordpress.com/2009/08/27/software-freedom-lover...

Disclaimer: I was part of the team that built the "Maemo Downloads" app store for FOSS applications for Nokia.
« Strangest of all was the ability of infected machines to transmit small amounts of network data with other infected machines even when their power cords and Ethernet cables were unplugged and their Wi-Fi and Bluetooth cards were removed. »

How is that possible ?
Would you mind if I suggested that arbitrarily using a couple of gigabytes of memory like that was a fairly severe problem? :-)

Seriously, I would like to see a warning put on links to that example to the effect that at present it will make your browser use up to 2½ GB more RAM and will thrash your memory. Because it did render my browser (and to a lesser degree my system) unresponsive for a couple of minutes while things swapped.
#62, cts.com

About 4 years ago the company I worked for had this in their domain portfolio and at one time offered shared hosting from this domain in the mid-late 90's to Present. There are likely a lot of legacy accounts still utilizing the subdomain hosting accounts but we decided to take advantage of domains that were no longer used. Most of these accounts were tied to a dial-up internet service (Concentric).

There were a ton of old broken links for subdomains like mycompany.cts.com where the client had closed their account. I set up 301 redirects in the htaccess file for any subdomain which was no longer in use and the actual cts.com domain to redirect to one of our services websites. The PageRank for that website went from 3 to 7 for about a year then it dropped back down to around 4-5.

Fun times!
For anyone having trouble believing that their computer can network using sound, give this demo a try:

http://smus.com/ultrasonic-networking/
No they just had a stupid rat.
01000111 01001111 00100000 01001100 01000001 01001011
01000101 01010010 01010011

Fixed that for you.
17 Wicked Ways to Use Your Facebook Cover Photo
Crazy Cops (21 Photos)
Swiss system is awesome as a safety net but I am not quite sure if it helps the entrepreneurs. The moment you register a company(either as GmbH or AG) you basically kiss your social security goodbye. The only comfort is that if your startup fails within a year, then you just have to liquidate the company and you are back on the social security system. Not bad as a truly dooms-day-scenario.
Selenium vs Browserbite – what bugs can you find?
Also, if you've compromised BIOS what do you care if the user boots from CD?
Well, the natural next step for the "genre" is to use something other than just pianos, then use multiple instruments simultaneously, and before you know it you're "just" writing very polyphonic music.

It depends on how pedantic you want to be about the word "genre", and I tend to avoid the word entirely when possible because of the really weird (IMHO) ideations that surround it. But in this case, if we're going to keep it to "piano"-type sounds, which we pretty much have to if we're going to have a "problem" that needs solving anyhow, I think they've pretty much explored the space that's available to them.

And the primary reason for this is that they are not charging into a new, unexplored space... quite the contrary. The piano has been explored for hundreds of years. Rather than opening bold new fields of exploration, this is exploring the last few remnant bits that people couldn't cover earlier due to not having hundreds of fingers.

I understand being open to music ideas, but I also don't believe in entirely turning off my brain. I really don't think there's much "there" there.
It's possible that some kind of secondary liability theory could be invented to make Satoshi an accessory to money laundering on a massive scale. But I've also noticed that communities and movements must become stronger when they outgrow their original leader. When you meet the Buddha on the road you're supposed to kill him, but most people won't. So he disappears instead.
I once saw humans making filenames like --splitwork --verbose -tdxh input.txt

And by "once", I mean "yesterday". Now, is it reasonable to design a system that takes input flags through the names of input files? No. It is clever, yes, but it's not reasonable. The fact of the matter is however that these usecases, for better or worse, do exist. We should not change filesystems to break these systems (broken as they are already) just because bourne-related shells aren't fond of them.
He also mentions that data was deleted and configuration changes made. If all of these things happened to you in a short amount of time, on multiple machines, what would your conclusions be? Would you just shrug it off as coincidence?

Personally I'm skeptical about the registry search functionality being disabled on a wiped machine -- that could easily be a Windows bug. But the other stuff would certainly get my gears turning.
With real estate property taxes encourage an efficient distribution of resources. The domain fees could increase, however it would be difficult to assess the value of a domain for a property that is so nonfungible that it is only valuable to the company that has a made up word as its name.
Vidyard (YC W11) Hallowe'en Video: FRANKEN-BOT
Well, I do notice. I have a 800*480 ZTE Open too, and when I got it, it was a shock to see just how horrible it was to read stuff on a screen like that again.
I upgraded my late-2008 iMac with Mavericks to see if it performed better than Mountain Lion given that my machine's maxed out at 4GB of RAM and my experience thus far has been that overall, the system is more responsive, but there's a lot more latency in doing things like restoring backgrounded applications that haven't been quit, but are still running. It may be that my machine is too old, but Mavericks has just shifted the latency around in this case.
Door pattern
Door is a conditional pattern that is a mix between a promise (two states, open and close) and a state machine (multiple transitions).
A simple comparaison would be a door that has multiple locks. You can't open the door until every locks are unlocked. Moreover, you can close again a door that has been opened.

It is really useful for validation (ex: you can submit -open- a form until every required fields -locks- are filled), to reduce the number of 'if' statement or to load async conditions.
We have written a detailed post a few months ago comparing duetto to emscripten. We also explain why we think it's not a good idea to use a pre-allocated typed array heap: http://leaningtech.com/duetto/blog/2013/05/28/Comparing-to-a...
So 14 days and still "pending analysis". I don't know where he lives, but it can't be that difficult to find someone with an oscilloscope and the knowledge of how to use it?

Again, sounds very fishy. I would expect a more methodical approach from a security researcher.
The NSA orders companies to bend over.
Even if it's nice, I won't recommend it to anyone. If it becomes big, I don't want the next Edward Snowden to tell me it's been used by .gov in the future.
Interestingly it sounds like MS is going the opposite way to Apple which has been taking steps to stop apps (and probably ads too) from tracking the device (although you can track across different apps from the same developer).
No but the way Dropbox and btsync work are way way different.

> BitTorrent Sync synchronizes your files using a peer-to-peer (P2P) protocol.
This is all just part of food education on how to properly store your products. Some people living in remote areas are prefectly fine living on a diet of fresh produce going shopping every other month, while some buy their food every day. It is not really a limiting factor, more of an excuse.
What's the incident response protocol for illegal intrusion by a government agency? These crimes are never investigated or prosecuted, so what can you do except remove them from your systems and keep it quiet?
41 here and still Peter Pan syndrome (except at startups). My first name even fits lol
To clarify the issue: I performed the following steps:

1. created a CA key+cert (selfsigned)
2. created a keypair K
3. signed the public key of K with the CA
4. uploaded the CA-signed cert and the private key of K --> "Your Certificate and Key match"
5. uploaded the CA cert (not the one of K) and the private key of K --> "Certificate an Key do NOT match."
That wasn't an insult. Jonathan Ive is a brilliant designer, and Microsoft is smart to create a public image if they have an equally brilliant designer.
The article is long and a bit rambling. It doesn't do a good job of explaining what steps Dragos took to eliminate different attack methods. It doesn't sound like a particularly clean fault finding / debugging session.

> For most of the three years that Ruiu has been wrestling with badBIOS, its infection mechanism remained a mystery. A month or two ago, after buying a new computer, he noticed that it was almost immediately infected as soon as he plugged one of his USB drives into it. He soon theorized that infected computers have the ability to contaminate USB devices and vice versa.

I don't want to sound mean, but what? This paragraph just reads like Hurp-Durp to me. I'm an idiot, but even I know that there are some very nasty things to do to USB drives.

EDIT: https://news.ycombinator.com/item?id=6534617 https://news.ycombinator.com/item?id=933210 https://news.ycombinator.com/item?id=1855936
Congrats and best wishes :)
too awesome! :)
Sure, there are plenty easy-to-install-but-not-necessary-to-use-properly tools out there as well. Not to knock off your argument but would love to see stronger emphasis on proper automation test (QUnit does not count as "proper") over the JavaScript community in overall.
Interesting, I was hoping for a N9 port of Sailfish OS, which is a way more powerful phone than this, but maybe I should consider this, since it seems like an N9 port won't be official:

http://talk.maemo.org/showthread.php?t=90761

edit: or maybe it will? www.jollausers.com/2013/10/sdk-update-jolla-won-an-award/

edit2: ok even more confused now: http://www.youtube.com/watch?v=jr_yQwTUv3s&feature=youtu.be
Something's gone wrong with communication here:

It is the exact equivalent.

Except it never discards the buffer (they do this all the time), I can seek with impunity (I do this all the time), it doesn't consume huge amounts of CPU (they do this all the time), it goes full screen reliably and quickly (on linux they fail frequently), If there are problems with the connection then I won't lose everything I've downloaded (online video players are so terrible about this), I can run it at any speed I want (I do this all the time), I can supplement it with third party subtitles (I do this all the time) ect. ect. ect.

further, no bizarre bandwidth saving gets involved. If the connection is very bad, I can just let it download. It won't stop after 10 seconds and wait for me to play, and I get to decide when it starts playing. I can resume failed downloads, I can respond to bad connections, I can use web technologies that have existed for decades that are specifically there to deal with bad connections to route around poor network conditions.

Video players on the web are just death by a thousand cuts. They're all different unique little snowflakes, and all worse then windows media player from 2001. We are literally swimming in methodologies to deal with poor network connections, and the inter

but other than that they are equivalent.
The audio channel doesn't make any sense to me; when I heard it from Dragos on Facebook the first time, I was actually a little worried about him. It's not that I think it's impossible to create a covert channel over audio; it obviously isn't. It's that for the malware story to play out, the covert receiver needs to already exist; if it does, you're already infected, so what does "air gapping" matter?
Any amount helps, but cardio benefits only start to kick in at 20 minutes or above, as I understand it, from the research.
One of my favorite essays and even more relevant today than when Orwell wrote it. ("Enemy combatants", "right-sizing", "Patriot Act") I think the effect in business is even greater, partly because the bar for good business speech and writing is so low.

I wrote a post inspired by Orwell's essay called How Your High School English Teacher is Ruining Your Proposals to vent my frustration over language that obfuscates rather than clarifies, whether intentionally or just due to laziness. (http://www.mimiran.com/proposals/how-your-high-school-englis...)
I like C++ because it addresses problems relevant for building performant applications in the real world. Details matter for performance - the memory hierarchy, cost of small allocations, allocating and accessing aligned data, copying to enable concurrency are all real things.
Free does not mean that you are uninhibited by circumstances. The free in free market means you are not coerced into action by other actors. You are free to act by your own will as long as you do not attempt to coerce others.

Safety net for anyone provided by government must first take resources from individuals by force to provide it.
You can watch PeepCode videos at Pluralsight: http://pluralsight.com/training/Authors/Details/geoffrey-gro...
I don't understand. Card has the right to express his opinion but I don't have the right to express mine?

Deciding not to pay for a product is somehow dangerous? Expressing my opinion to other people and asking them to do the same is dangerous?

If Card is allowed to say hateful things, then I'm allowed to tell people about it and recommend that they not give him money. It is not logically possible for you to accept the former without also accepting the latter.
Why is this on the second page of news right now? Older stories with way fewer points are currently ranked higher. This story is 22 hours old with 1495 points. There are stories with 264 and 305 points that are older but are currently ranked just higher than this story, moving it to the second page of news
I would be interested in developments regarding this. I was thinking perhaps some extension to firefox to trigger youtube-dl. I don't think firefox would provide that kind of system level access to plugins, however.
A bit unrelated, but does anyone know at what comment score one gets to downvote non-constructive comments, or is that what the flagging is for?
Sure, but how much data needs to be sent to deliver the first stage, and how long does the attacker have to deliver it?

Reminded of ELF communication with submerged submarines.

http://en.wikipedia.org/wiki/Extremely_low_frequency
But the existing meal replacements come in a variety of flavours, including sweet or savoury. They come in a variety of textures, thick yoghurty to milk-shake, to thin. They can be eaten hot or cold.

So, uh, what does Soylet add? Just one more extra bit of variety?
The way I read this article, two infected computers can communicate via these means, but the means of initial infection of airgapped computers are still partially unknown. You may have more context, but that's how I understood the article on its own.
I wonder if the Absolute Software Computrace BIOS integration has been compromised?

http://www.absolute.com/en/products/absolute-computrace/pers...

All of the major OEMs embed code from these guys into their BIOS. Once activated, it can brick the box, delete files, re-install their Windows/Mac agent that allows for location tracking, etc.
Devops Horror Stories
It's not just the PPI, it's also the display size that makes a major difference in readability - being able to comfortably use bigger and crisper text and still have a decent amount of content on screen.

I didn't believe it'd matter much either, until I got my higher res phone a year ago. Now I can't stand a smaller, lower res screen. I recently got a 800x480 ZTE Open as well, and it reconfirmed just how much difference it makes - the latter is just awful to read on.
> power cables

Keep in mind he's talking about laptops that have batteries.
Yeah, I was going to say something similar. You'll never get a compiler to be as intelligent as a human being. At best you'll get human intelligence rapidly applied by a computer to a problem. The computer will be able to do this "manual labor" (if you want to call it that) faster than a human can. However, a human being will be able to find ways to optimize for the problem that a computer will not be able to.

I realize that many people believe that computers will some day be able to truly think on a human level. I just don't happen to be one of those people.
The lack of low-level analysis is incredibly suspicious. If you think its moving at the BIOS-level on USB sticks, then you find someone with a high-frequency recording oscilloscope and capture every single electrical signal you see on that bus because it's certainly not going to be moving an encrypted version of its own infection code. Same thing you'd do to the microphone and speaker.

I mean I get a few months of nothing you don't do this, but 3 years? A USB bus is not high bandwidth - there's off-the-shelf hardware that will do this.

This story is just too fantastical to be true. We're talking about a ridiculously sophisticated piece of malware, which has been found nowhere else, and is absurdly high visibility (people don't keep using computers which are obviously infected with something).

If you had something as resistant as this in your pocket, you didn't write it on your own, and the absolute last thing you would do is give it high-visibility infection symptoms and toss it out into the wild.

EDIT: It's worth noting this would very much hardly be the first time a researcher suddenly went off the reservation. Happens to even Nobel Laureates.
I don't know. On the one hand it's good to face adversity early on as it forces you to get your act together and spares you trouble down the line. On the other hand if your skill or situation is different from troubles that you think you'll face, than the adversity becomes arbitrary. So you end up with people who where "good at the entrance exam" when you really want people who are at their best at the end of the process.