skysight-inc/HackerNews huggingface dataset:
It's different in a number of ways: Suppose it's not you hacking your car, it's an enemy that want you dead. So they disable the brakes. Or perhaps it's possible for an attacker to disable the brakes only when you're braking hard and have a speed above 100 km/h (60 mph).

Or suppose a neighborhood kid is angry at you, have figured out how to hack the system, but haven't yet figured out the difference between "that'll teach them a lesson" and "this might actually kill them".

Or, hypothetically, if system hacks don't require a physical connection, it's wide open for anyone anywhere in the world to replicate something like the file encryption extortion scam[1]: Break into as many cars as you can. Send them a mail saying that you hacked their car. They can take the chance of figuring out what you did on their own, or pay you money to revert it. The scam might work just as well for cars you didn't break into, as long as the owners believe it's a credible threat.

The point isn't necessarily that these scenarios are more likely than in the physical world. The point is that many people have a fair idea how the physical world works, while they have only vague notions about "hacking" in the virtual world. We know that there are new threats, but we don't yet know what they are, so these new threats will be inherently scarier than the threats we already know about. (The devil you know, etc.)

[1]: http://www.techspot.com/news/17678-file-encryption-extortion...
Steve Jobs Hinted At A 'Magic Wand' For The Apple TV In An Email
Deep-Submicron Backdoors
Repository of resources and documentation to build and experiment with deep-submicron VLSI backdoors and other malicious hardware modifications.
Some people have been thinking about creating a standard to distinguish between the two so that captive portals won't have to do a MITM attack (that browsers currently correctly defend against). One idea might be to have a different protocol through which the captive portal can indicate its presence and declare itself as a captive portal, entirely or almost entirely outside of the HTTP or HTTPS session.

Getting the UI right is pretty challenging, though. It's not even completely clear what getting it right would mean. Even if the user clearly understands that they're interacting with some network operator rather than, say, Gmail or their organizational webmail server, the user still has no way to know whether the portal they're talking to is actually operated by the operator of the network that they think they're connecting to!
That's totally true.

I agree, so I'm also going to do some of the MOOC CS courses as well, coupled with working at a startup.

I'm trying :)
Walt is planning on doing a blog post with some source code tomorrow, I think!
As hopeful as people may be, humans don't surround themselves with the best security. Sure, stealing it without the private key may be impossible, but stealing the private key can be very possible.
Not even a mention of Data structures and Algorithms
Code crap, where you go to laugh and/or cry
Don't underestimate the power of bundling. Even if content becomes decoupled from the cable companies, bundling is still a powerful way for content companies to get a small amount of revenue for content they know you don't care much about.

The way it works is this: consider customer A, who isn't subscribed to any TV service. Customer B is subscribed to HBO only. Which customer is likely to pay more for a subscription to a different channel, say AMC? The content provider wants to charge less to the customer who already has HBO, since they know that customer gets less marginal value for an additional channel and is willing to pay less. The best way to figure out which customers already have HBO is to bundle the services.

This is also why dreams of splitting the 100-channel packages into separate deals for a dollar a channel are so misguided. If you're trying to buy a single channel, the content provider knows you really want that channel, so they'll charge you $40 for it. If you already have 99 channels and you're buying channel 100, they know you don't want it at all and might charge an amortized $0.05.
Sounds silly to consider shutting down a profitable business with employees. Get real and sell it to someone.
Microsoft open sources big chunk of .NET;.NET Foundation to govern components
How is that not a free market, let alone capitalism? That's how club goods work. The cost per individual is low, but the total cost is high. In those cases it makes sense to have different prices for different regions, or even different individuals. A poor person in Egypt can't afford $1,000 a day. But if they charged everyone the Egypt price, they wouldn't make enough money to even cover the cost of researching it.

Besides that's not an argument for why it's bad. Your just saying you don't like it because it doesn't look like what you think a free market looks like.
It's illegal if your broker does it. He has a contractual (and legal) obligation to act on your behalf. This is completely different from the kind of thing that Michael Lewis claims is happening in his book.
Wouldn't you end up being all sweaty by time you got to the ferry?
Onto more important matters, does anyone know the track being played?

The title is 'All the things she said', which originally was a #1 Top 40 song by the Russian pop group 'Tatu'. However the picture is definitely not the Russian duo. Is this a German cover version of some sort?
Why do we asume that domains have to be 'unique' like trade/brand names? I have a name, shared with my grandfather, father and son; in the right context, you would never confuse one for another. Furthermore, my name is shared by probably thousands in my country; again, I have never been confused with any of them. So, if the whole point is to translate human readable (and memorable) words to IPs, and in the event that the DNS returns more than one result, can't the browser display a search-results-like page letting one know there are options? Wikipedia does it and that is THE descentralized knowledge store of the planet. Maybe if I type homes.com I mean local homes first, like Google rankings, but is ok if someone else is using homes.com elsewhere.

Think about it...
Earth to McDonalds.com: It's 2009 (2009)
What's the crux of your point? How would you prefer the system work? As I said, it's not mutually exclusive. You can have government funding and subsidies without getting rid of private research or patents.
In addition, could you make a service where I can go into a new car dealership and buy a car in five minutes with financing. I just bought two brand new cars in the last six months and had to wait around for hours and leave dealerships after calling them up before I even left my house and telling them I want to buy x car at x price at x time of the day and they agree, but when I get there it's a nightmare.
Lynx seems a likely candidate, though I'm not positive it has zero support.
It's actually been there since the very beginning, but it wasn't publicised too much.
You're missing the fact that the trade would not necessarily have gone through a sub-second later anyways. There is a very real chance that the trade would never happen because the market moves away from you.
Exactly right, and I don't understand how people don't notice this already. Cable packages are deliberate. The crossover between channels is low, but those why watch TNT (for example) help pay for TBS, which they may not watch, and vice versa. Not to mention that the cable provider is subsidizing subscriptions back to the content provider, so while you may only pay $3 to ESPN (which you don't watch, of course), Comcast is also paying for the right to carry it.
Publicly crucified 6 years later due to the intolerance of the community. I thought that's what we're trying to avoid...
Yes, but you'd have to serve that over HTTPS. And even then, how do you know that all the caches that have the older, longer expiration time have revisited and updated their cache? You won't, really, until that many seconds have pass.
I cannot wait until we get through this video background fad...
Does Jon Postel's ghost decide if I want local or non-local homes when I send email to bob@homes.com?

Side note: Wikipedia is NOT the decentralized knowledge store of the planet. There is nothing decentralized about wikipedia.
There's not a business case for it? Are you implying the NHS gets the drugs for free?
2048 implemented in 487 bytes of C
Sadly, the segregation between CAN buses is not nearly as good as you would think. ONSTAR, for example, sits on the drive critical bus (and is exploitable). Of course, this is not on a Tesla, but still.

http://www.autosec.org/pubs/cars-usenixsec2011.pdf
Automatically Entering the Grand C++ Error Explosion Competition
Googling for cycling short muscles turned up nothing relevant on the first page, for me.
Are you saying that one data point means you have enough data to infer broad actions?

He may have spent some time deciding to donate, he may also have made a snap decision and donated without consideration. You don't know. You also don't know how he spends his free time. You basically know nothing about him. I also know basically nothing about him, but I'm not making broad statements based on one piece of information.

The principle of presumed innocence has been completely ignored when it comes to Eich's personal life. His life is his to do with as he pleases (to an extent). I disagree with his position on gay marriage, I also think that the one data point coupled with his actions this past week say he probably shouldn't be CEO of Mozilla, but I don't know anything else about him, and can't, and shouldn't, make assumptions based on tiny morsels of evidence.

The only realm of Eich's life that I even microscopically care about (I really don't care all that much) is the public realm. As stated, I disagree with him, and think his selection to the CEO position probably wasn't considered enough, but that doesn't mean I'm fit to make comments on his personal life. Nor are you, unless you're closely acquainted with the man.
Xtend has been around for a while and I think one of the reasons why it didn't catch on is because it generates Java, which severely limit its performances.

These days, "modernized Java" would probably be Ceylon or Kotlin.
The behavior would be illegal if conducted by the exchange itself. Why is it suddenly not simply because the exchange outsources the business model to a third party in return for super-expensive colocation rights?
I've wondered this too. Doesn't DHCP support extensible options? Couldn't you just send an option that said, "hey, crappy portal welcome site at {URL}"? It'd be fixed to a particular webpage (so, you can't use another protocol), but that's the state of things today.
Chrome does this already by sending a hidden request to http://www.gstatic.com/generate_204 and displaying the page in a new tab if the request is intercepted.

(More detail at http://www.chromium.org/chromium-os/chromiumos-design-docs/n...)
I understand what you are saying but I feel like you overlook the power of having everything on one device, if you are at a friend's house eating something new you like you will likely have your phone on you. Also this viewpoint id's really shortsighted, everyone will be very used to using your cellphone for everything as our generation ages
Ubuntu/FF28 - I was able to watch the video in browser without issue. I most definitely do not have Silverlight.
First - what's simple about "simply scan the damn barcode"? Simplicity is telling your phone that you ran out of pasta sauce, not stocking a barcode scanner in your pantry. The hardware may be sleek, but amazon's solution most certainly isn't. For a company with amazon's resources, I'd expect more.

Next - presuming that you bought something from Amazon, why do you need the barcode? If I recently bought and/or regularly buy granny smith apples from Fresh, it's quite easy to figure out the most probable buying targets for queries of "apples." Further, if I regularly buy 5 different types of granola bars, now I can use one query and a checkbox instead of scanning each box individually. (Sidebar: how do you use Dash to scan produce that you've already consumed? Do you have to keep the containers around?)

In the big scheme of things, figuring out which product you probably want to buy based on your buying history (and that of others) is a trivial problem compared to the other problems that had to be solved for "always listening" and such. Amazon's job ends up being the easiest in that stack.
Arguably. He could just put more weight in one category than every other category combined, and Buchanan might match that category better than any other candidates.

Unless Eich actually makes a statement on his political views, we don't really know anything.
Inbound.org for Mobile (Reading list for serious mobile devs, entrepreneurs)
Not sure why all the hate towards Facebook lately in HN. I do FB ads exclusively ALL DAY and I can pretty much tell you it works.

FB Ads is a very stubborn creature. There's a lot to learn in order to make it work, their editorial team is trigger happy with account bans... but the volume is massive and the targeting options are amazing.

Running a 60$ is nothing on FB, you need to run volume and optimize.

I"m doing a lot of mobile right now and you can go anywhere from .10 to .50 per install and basically scale to infinity if you like.
It seems like there are only two things captive-portals are "for", though: accepting EULAs, and presenting a login form for the proxy. Both of these could be better if built into browser/OS chrome.
You probably need to review the list on computer or phone to confirm the items, types, and quantity.
I tried reverse image searching the photo, but got nothing.

However, a simple YouTube search for the song name turned up a bunch of cover versions. This one matches the length shown (4:17): https://www.youtube.com/watch?v=tytPcvyJASc

The band, Simple Plan, also appears to have five members, which is pretty strong supporting evidence. Strangely, I couldn't find the exact image shown in the Tesla photo.
FWIW, cryptocurrencies are far more fiat than dollars. You can pay taxes in dollars, for example, so they're not even a pure fiat currency.
What Data Is Collected With Facebook Authentication?
Those points seemed already covered in the article, but somehow it must have been unclear.

First of all, it's unlikely to ever have ketamine as a first-line treatment for a depression. Probably more somewhere near electroconvulsive therapy. ECT also has adverse effects which can't be considered as minor (e.g. severe memory loss). However, at the same time it's recognized as a life-saver for certain population of patients.

As I have understood from this research and previous ones, it's hoped that the effect of ketamine would be long-lasting: at least up to months. Not so-called daily anti-depressant pill. The adverse effects of ECT would also be more severe if it would be administered on a daily basis. As it was mentioned, some patients relapsed within days, some were free from depression for up to three months.

According to animal research[1], it's prolonged not acute ketamine use that has shown signs of renal and bladder damage. In a review of ketamine-induced vesicopathy[2] it's also noted that 'Very little is known regarding the pathogenesis of its effects on the urinary tract.' I'm not claiming that it doesn't cause any damage, but that it needs more research and currently there's no indication of "renal havoc" after few doses.

In light of this, I can't even imagine how someone could call possibility of using ketamine for treatment of depression not viable. However, it may be because I know how disabling severe or even moderate depression is and how much damage it causes to person's life.

Each person reacts very differently to anti-depressants and there's large amount of people with treatment resistant depression. It's not like there's silver bullet and because of that we need as many as possible different treatment methods. Depression is life-threatening condition and thus all of those methods can't (and don't need to) be 100% safe. A lot of approved drugs have serious side-effects. Basically it's all about assessing the benefit:risk ratio of a drug. It's not rational to cross any treatment out, just because it may have side-effects. Especially if there's not reasonable amount research done - like with ketamine.

When we have more data, then it may show that certain population would need additional doses of ketamine after 1-3 months and the damage to organs is minor or non-existent in such case. Or it may show something else. It's just unthinkable to call it as "not viable" option, yet.

[1] Yeung, LY, Rudd JA, Lam WP, Mak YT, Yew DT. (2009) Mice are prone to kidney pathology after prolonged ketamine addiction. Toxicol Lett. 2009 Dec 15;191(2-3):275-8. doi: 10.1016/j.toxlet.2009.09.006. Epub 2009 Sep 17.

[2] Middela, S., Pearce, I. (2010) Ketamine-induced vesicopathy: a literature review. Int J Clin Pract. 2011 Jan;65(1):27-30. doi: 10.1111/j.1742-1241.2010.02502.x.
Dilution: How Founders Become Employees
Google Location Services does it every time you turn on GPS on a Kitkat android phone, if you've turned their location services permission off.
Why do they have to go big all at once? What other grocery delivery services have even tried that in the past 10 years?

Freshdirect is NYC area and Philly, Peapod has a few markets but they are part of a grocery chain so everything but the last mile is take care of logistics wise. It seems like figuring out how to do it at scale and be competitive is exactly what Amazon is doing. If they can make it almost as cheap but have compelling additional features then it helps them roll it out wider.
hah! I think it's a genius design detail. They want you to hang it in the kitchen somewhere, so it's always accessible.
I think that Github now labels them as "collaborators" in the UI.

In this PR for example, wearhere is labelled as a collaborator in the corner of his comment. https://github.com/inkling/Subliminal/pull/170
RNA symphony
Dash connects to your home Wi-Fi network and works directly with your AmazonFresh account. Say or scan items into your Dash, and then view the list on your desktop or mobile device to purchase and schedule delivery.

You have to confirm the order.
Lawrence Lessig on Aaron Swartz and the unstoppable walk to political reform
Did you intend to link to a repository of markdown files?
Are NSA social media strategists as annoying as corporate ones?
Where does it say that this was made by MS?
A few things. It depends when you're asking what my interests are around then.

At the moment these spring to mind:

Chess - casual player, friends and family type thing. Never been competitive enough to want to learn specific openings and counters and so on.

Martial arts - specifically I practice Wadu Ryo karate.

Swimming

Archery - Longbow

Reading - Mostly fantasy and sci-fi, a few technical and history books or books on whatever my interest happens to be then.

Volunteering - I try to help young people into work.

Music - I play the piano. Well, technically a keyboard at the moment.

Wood work - Pretty rare these days since I got my house the way I want it, but I still make little things from time to time. Really more my boyfriend's thing these days than mine though.

Computer games - I enjoy strategy games, RPGs, and things where you can build stuff.
"Maybe I get a flash discount if the GPS has me standing in a Best Buy already." That is hilarious! It doesn't have cellular connection, but it might have bluetooth.
Cubes | Data Brewery
Please use Typescript by default.
Stop adding up the wealth of the poor
I wonder if there is a good way to measure what these various sound byte facts are trying to get at?
It's a wired-ethernet network not Wifi.

The attacker would still need physical access like the low-tech attacker to network and update software on the Tesla.

Also, the brake line could be cut in seconds whereas 'jailbreaking' and then flashing the drive control software would take ages in comparison.
Was not meant to be a troll, just a question if someone knows a similar tutorial for Flask. Actually, I've been thinking to write about my last project in Flask.

I noticed people on HN default very often to "this is trolling"
I wonder if there is a metric that could better reflect the sound byte fact that these organizations are trying to get at?
Serving static files from the EC2 instance is also more expensive, once you factor in storage costs, IOPS, etc. Not to mention S3 will be faster.
Cutting the brake lines or using a kitchen knife (or a gun bought off Craigslist in the US) to kill the person you hate works just as well and is much simpler.

I personally would like to see various "hacks" adjusting the suspension, brakes, spark timings and other things for a better ride in certain conditions (racing, drifting, mountain roads, etc).
The whole "Wiki" feature comes to mind. Can I leave and take my project's wiki with me?
640k ought to be enough for anyone.

Absolutes are usually bad advice. Some apps effectively use push. Many don't. With iOS' limited background modes, despite advancements in 7, sometimes you need to get the user's attention, and push is the means.
Brooklyn Law Cuts Tuition
My first thought: people are going to bring this to retail shops to get the benefits of brick-and-mortars shopping while benefiting from the low prices / delivery of Amazon.

A lot of people already kind of do this. They go to a shop, find the items they like and look up on the web if they can get a cheaper price by ordering online.

This version of the product might not be so practical for this use case though since it requires a WiFi connection and can probably only scan AmazonFresh barcodes.
Coolio. Instead of uploading to S3 through Flask you can make a direct upload https://coderwall.com/p/56a9ja
Is it not effectively like someone hand-typing the address with HTTPS? how does it expose anything?
you think middlemen inject themselves into transactions that don't require them

I'm responding more to this (and more as a general concept).

If given the opportunity, people would do this. So it's useful to dispel the notion that because its "not seen" it's not a problem. It might not always a be problem, but many it is and others it's also "annoying".

Stepping outside of markets for a second, this is why M&A deals have exclusivity and breakage terms. The theory/practive on why you do this involves assymetric information and something economists refer to as "opportunism". Opportunism[1] is exploiting legal abiguity for narrow self interest.

The more complex the legal/transaction structure the wider the attack surface for "opportunism" (because it's proportional with deal complexity). In slow and complex deals like M&A at a certain point it becomes an issue and so safeguards are taken.

In fast and simple deals like buying stock on the box or what not, the scope is very limited. The glaring example is the broker issue you highlight. But as the deal structure gets more complex, this risk rises.

Now, the attack surface for opportunism is proportional to deal complexity as mentioned above. This is legal/structure but also now needs to consider execution and # of counterparties. Limiting counter-parties (ie, middlemen) reduces this "attack surface" (if you will). Because each of them needs to be monitored/paperwork delath with etc. This is why such uncecessary interventions are structured out of deals. Typically by way of convention/courtesy if not expressly by things like ethics codes & stronger (ie, exchange regs+laws).

This is a long way of saying that the institutional integrity of markets hides a lot of problems. This is a good thing. But not to be taken for granted. The cost of undermining these institutions/trust etc. is not insignificant. Because it means you have to solve all these problems again in new ways.

[1] https://en.wikipedia.org/wiki/Opportunism
It's almost certainly sterile. Look at what happens to mules, and horses and donkeys appear to have diverged closer in time than goats and sheep.