skysight-inc/HackerNews huggingface dataset:
You're talking about essentially an HW firewall for USB connections.

We can discount VID/PID based black/whitelisting since they're trivial to spoof, but it might be possible to use them to identify (from an external database) what features that V/P device is supposed to be capable of, and block/alert if it tries to do things it shouldn't.

So if you initially enumerate as 0x0403/0x6001 (FTDI usb-serial) then if you try to start serving up descriptors about how you totally do mass-storage or something, that's probably kinda naughty. You'd potentially need quite a bit of code to parse and decode the various protocols it might be observing, giving a really big code surface for an attacker to identify or compromise your 'condom' itself.

So, with a lot of work, and a really big and annoying to update database, it might be possible to protect against imposter/multi-personality devices.

The bigger overall threat though is probably masquerading as valid mass-storage, but then doing various things to the data you're asked to store/fetch. (See the Active anti-forensics iPod and similar)

As I see it, there's basically nothing you can do here against an actively hostile device that isn't a cat & mouse game of exploit->patch->repeat. Conceivably the OS could sign every file going in, and maintain a local cache of signatures to check when reading, but that falls over in the hugely predominant use-case of using a USB drive to transfer files between things; you have no easy side-channel to also transfer sigs. So then the machines need to trust each other (without the malicious drive compromising one and being able to fake sigs)
From a theorists perspective there is not much difference, they are both modeled by Quantum Field Theories. However condensed matter theory deals mostly with non-relativistic phenomena. The idea of quasiparticles, like the one they have discovered is also present in particle physics, they are called "resonances". Depending on the energy scale you can integrate out the higher energy modes of your theory to get an effective theory, in which those resonances are now the "fundamental particles", examples include pions, Kaons etc. This is analogous to how you describe quasi-particles in condensed matter theory.

In contrast to condensed matter theory which is able to observe electrons on their own, the fundamental constituents in high energy particle physics have not all been observed on their own. So called quarks, the building blocks of protons and neutrons among other things, ordinarily never occur alone, due to something called confinement. This is analogous to how at low temperature in super conductors electrons appear as so called cooper pairs coupled by phonons, here quarks are in a "cosmic superconductor" coupled by gluons. One of the aims of the LHC experiment is to go to high enough energy to induce a phase transition to a quark gluon plasma, which would be analogous to the state electrons are normally in a metal.

So in conclusion, it's not a coincidence that both the renormalization group by wilson and the idea for the Higgs mechanism, which also has an analogue in the theory of high temperature superconductivity and was originally proposed by Anderson in the context of condensed matter theory, were discovered by theorists working in condensed matter theory.
Measuring Customer Happiness for startups
I doubt it. There's a long, long way from the theoretical finding to the practical device.

Writing and reading speed has been mentioned. Another point is that as the dots become smaller, the mechanical parts need to be much more precise, moving the device from consumer parts to really expensive parts and assembly.
On this website it ought to be more Linux users than Windows users? Last time I went to the Ubuntu hardware compatibility chart.

(Or is OpenBSD the popular choice and I'm behind the times again? :-) )
6 Techniques to Effectively Gamify a Mobile App
As a programmer, I would not buy a 15" laptop without a numpad. I use a 13" Macbook Air nowadays and the numpad is dearly missed. But yeah you are right - most people won't need them.
This is actually a legal convention, not arrogance. Look at criminal complaints for other computer crimes (child pornography, hacking, etc.) and the language is identical.
I should have said "will always catch this for CGI servers and HTTP headers".
Labour is steadily losing out to capital
I’m not sure. I don’t know any CJK languages myself. I’d like some test-cases where the current methods do not work, as the example in the Readme seems to work pretty well: `এটি একটি ভাষা একক IBM স্ক্রিপ্ট` is classified as Bengali?
Entrepreneur Journeys – Friday Fun
Yeah but at the same time I guess it's easier to sell 11" laptops for $200 than it is to sell them for $999.
FYI, you linked a screenshot of the broken layout we're referring to, with all the keys lined up in the same row rather than stacked in a 3x2 grid as they belong.
Raising the water rate would reduce water usage by putting a large number of farms out of business in the short term, which is politically fraught.

Or they'd get an exemption and the brunt would fall on residential use of water which is comparatively small.
It sucks, right? Currently, it’s good at long passages. But for shorter values, the results are pretty poor. The amount of supported languages is just too damn high!
Aren't USA judges voted in? Why do the people vote for judges that will sit quiet whilst someone provably lies in court?

We found them by simple looking at the IP that the packets of the captcha were served from. The captcha was served over tor, based on the evidence that's impossible. Either you lied or you need to add further evidence. If you can't/won't add further evidence then as the court sees it you lied and are in contempt and will be punished in line with minimum sentencing??

This is of the order of a "he robbed me at home at exactly 2pm", "your submitted cell-phone evidence says you were at work from 1pm until 4pm".

If the defendant is convicted on some other counts can they, or anyone else, do anything or is the allowance of officers of the FBI to lie in open court somehow embedded in the USA constitution.

As a foreigner to the USA this sort of thing just undermines the entire foreign policy rhetoric of bringing democracy to the world. Bring some damned democracy to the USA first: government by the people for the people, my arse.
I am getting shades of Literate Programming from this article. I thought that idea was laid to rest in the early 90s.
I agree with this. In 90% if cases where it actually formats anything on reddit it basically gets it wrong in terms of the users intentions.
California has a long, long history of water and pipelines. They even made a great movie out of the topic (Chinatown).

This guy had a lot to do with much of the pipeline engineering:

http://en.wikipedia.org/wiki/William_Mulholland

And this is basically what serves all of San Francisco (and the Bay area's) water needs:

http://en.wikipedia.org/wiki/Hetch_Hetchy
Is it me or this feels terribly wrong?
Creator here - I ported this over from the open-source Julius using emscripten. AMA
> Made it to Atlanta station - receive phone call from the people picking us up...they have never used the train and don't know where the station is. We give directions.

I lived in Atlanta for 7 years and didn't even know it had a train station.
I was involved with nuclear warheads in the USAF, and the Two-Man Policy was never compromised. We took it seriously and the penalties were severe. But that was the Cold War; things may have changed since. Much of it was built into the system. It took two keys to open anything, and the whole shop was divided into A locks and B locks. You were one or the other, never both. There was no practical way to open anything alone, including the maintenance bays.
This is magnificent. Thank you.
Master Your Traffic Generation Craft
Show HN: Connecting Stripe to Xero
Tesla D sighting
The thing you miss in Foursquare is in Foci
I'm not sure how they figure that. How would having a having the Chip and Pin have prevented the data from being stolen? How does them encrypting the data they send relate to the cards? Those seems like separate issues.

With regards to online use, I'll say I'm not familiar with how Chip and Pin really works, but presumably they have some guard for online use, right? Or is that just wide open still?
Screen resolution is my first and most important selection criteria for a laptop.
The only part that I didn't like was the "rewards for strangers for rescuing you". Not that there is anything inherently wrong with rewarding people who help you,but I feel like it's kind of wrong to have it advertised as a feature.
Yet Another Snippet Extension for Emacs
We need to start saying "Dude, not everyone has the all-encompassing power to know everything that you know and it's wrong to judge people, their opinions or their life experiences."

You haven't walked a mile in his moccasins.
Amtrak is great when you aren't on a schedule. I love the railroad travel experience. Waiting patiently for that high speed rail between St. Louis and Chicago...

I will admit, I did check the prices for a 45-day pass after reading this. Sometimes I wish I could go effectively homeless and work on personal programming projects for months at a time.
It's an interesting looking book, and I'm somewhat inclined to buy it. Bookmarked!

I agree that you don't need to read thousands of pages to learn calculus. However, I don't want to stop at calculus. Basically, what I'd really love to have is a "mother of all maths textbook" -- a thick and heavy tome that compacts information from all the other thick and expensive books (which I'm never going to read) and different fields of mathematics. With enough detail that you can actually learn from it -- so it shouldn't be just for review and looking up formulas you couldn't memorize. I'd like to call it a reference book I can forever keep in my bookshelf (under my bed) and always look in it if I'm unsure about something...

If someone has book suggestions, I'm all eyes.
Actually you can fire your boss, that's called quitting. And if you're a tech worker, you really have the freedom to do it because it's easy to find something else if you're decently competent.
Do you have the Chameleon protocol activated?

David Y.
The Ultimate Guide for ASP.NET VNext Which Runs on Windows, OS X and Linux
As a programmer surely just a 0 (for starting for loops), a 1 (for off by one errors) and 0-9 (for regexs) suffices for 99% of typing? Typing other numbers seems like it should be avoided wherever possible.
> So assuming, 4.4 GB her HD film & 2 hrs long each

People bitch constantly, but a typical feature film encoded by YIFY at 720p will clock in at somewhere between 650-900 megs, leaning towards the lower end of that range.

Not that it matters, the rest of your math makes it look ridiculous. Without too many tradeoffs, you could certainly put every American (Hollywood and indie both) film on such a disc.

> Now the next logical question: Has the human race produced 464,000 hours of video content?

Somewhere Google has a gauge that shows how many hours of videos they store... but I can't find it.

> So even if we just look at 24/7 news and shopping channels which always produce original content, you're still talking about easily 200,000+ hours/year.

Agreed. But I don't think that they have archival policies in place where everything is kept permanently. Even the news channels may have been in the habit of dumping everything but stuff deemed important, well into the 1990s.
> ... but the title is very confusing to the layman

Given the density of knowledge in your comment, I'm not sure the title could be much different to aid in the understanding of the layman.
But then you're trying to sell a chunky ugly piece of plastic next to a sleek sexy piece of metal. The number of Apple devices you see out in the wild (outside of an office) vs other brands of laptops bears this out - in the laptop industry there's Apple and then there's everybody else.
5 reasons why developers aren't using your API
Reducing Infrustration: smooth delivery with immutable infrastructure
JPMorgan Password Said to Lead Hackers to 76 Million Homes

Oct. 3 (Bloomberg) -- Hackers exploited an employee password to crack a JPMorgan Chase & Co. server and ultimately pull off one of the largest cyber-attacks ever, accessing data on 76 million households and 7 million small businesses.

http://www.bloomberg.com/news/2014-10-03/jpmorgan-password-s...
http://www.economist.com/news/united-states/21596955-drought...

"Agriculture accounts for 80% of water consumption in California, for example, but only 2% of economic activity. Farmers flood the land to grow rice, alfalfa and other thirsty crops. By one account, over the years they have paid just 15% of the capital costs of the federal system that delivers much of their irrigation water."

Trying to grow rice in California is as ludicrous as the Saudi plans to grow wheat in the desert with oil-desalinated water. I appreciate this is a bad situation for the farmers and in an ideal world the climate change mitigation fund would compensate them for stopping.
How to make games the hard way
You're totally right (that's why I said "kneejerk"). Thanks for the advice.
A taskbar like Windows is useful to know what are your alt-tab targets, of if you need to open a new app. But good idea, I'm going to try the empty dock.
Franc seems to work well on longer passages. Such as these: https://github.com/wooorm/franc/blob/master/spec/fixtures.js...

It’s interesting though, I’ll take a look at it!
Even if you're poor, I doubt having to drive to the fire house and fill buckets or 55-gallon drums with free water is going to be cheaper than a municipal water system (paying for gas, paying for those buckets, the time that you can't spend working at an hourly job).

I would expect that if this persists, a commercial water delivery industry will spring up in the area. Of course, either way, you are very motivated to use much less water than you would if your well worked for actually free.
SQL Dialects Reference
If you're thinking of a European trip, do it right now - Deutsche Bahn are withdrawing many of the sleeper trains in December as they're unprofitable.

I went London-Tokyo by train and ferry. Chinese sleepers were probably the best - both luxurious and cheap, particularly in the northwest there is gorgeous desert and canyons out the window. But the train from Moscow to Uzbekistan was fascinating in its own way, red leather and steaming samovars, fresh-caught fish being sold on the platforms of these rural stations alongside enormous kebabs of mysterious meat. Carriage attendants knocking the snow off the steps with pokers at every stop. Looking out the window and seeing a solitary line of telegraph poles across the empty snowfield, the only human thing as far as the eye could see. A bunch of men lining up on one side of the corridor as we passed the steaming silos and metal towers at Baikonur, hoping to see a launch.
An interactive 3D visualization of the stellar neighborhood
Dell Precision line?
It reminds me a lot of the Pimsleur method.

http://en.wikipedia.org/wiki/Pimsleur_method

It's rote memorization and repetition, but it also incorporates interaction and active thinking. Additionally, the repetition is non linear. As you learn new terms they throw old terms at you once in a while to make sure you remember them, and the spacing is set out for maximum retention.
I don't understand whenever there is a HN article about some injustice being done to Tech Workers somewhere there inevitably be this post

> "I can't find sympathy for people making $x/yr."

Why not? Where do you draw the line of people deserving sympathy vs. those deserving none? If they made $59,999/yr would you "get worked up about their plight"? Can you point out an article on HN (ostensibly a site related to the Tech Industry, hence the posts about Tech Workers) about a factory closing down where there was explicitly no sympathy?
I'm using Plex to store our videos... sold our DVDs on craigslist a few months ago. Within 3 weeks, had another copy of every disc we got rid of.

Eventually I want to get a FreeNAS machine up and running, and any important files will be backed up to Google Drive (though, obviously not movies that can simply be downloaded again if desired).
Employee Builds Chess Components Using Fasteners Sold at Their Store
Nice, thanks for doing this! Are you aware of any sites using speech rec for e.g. page navigation?
I did a D.C. to Miami (and back) voyage many years ago that sounds vaguely similar. It was scheduled as a "mere" 24 hour trip and ended up taking over 30 (flying takes less than 3 and costs about the same and driving takes about 15 hours).

At one point our section of the train was disconnected and transferred to another train, except that train was 2 hours late. All told we waited 4 hours with no electricity or lights and nowhere to get off in the meanwhile.

We weren't in cabins and it was virtually impossible to sleep because of all the kids and drunk people opening and closing the doors to the cars all night.

We had a working dining car for approximately 1 meal going down and 2 meals coming up.

It was an excruciating enough that I've sworn off ever riding trains in the U.S. again. I did briefly consider taking the Accela recently on a D.C. to NYC trip (in theory it takes just about the same amount of time), but decided it's just easier to fly.

I've taken trains in Italy, France, England and South Korea and they're glorious experiences by comparison.

It's a shame too, because the U.S. is a beautiful country to see travelling by land...except at least on the routes I've been on which run mostly through hard neighborhoods or industrial wastelands.
Detroit tried something similar (albeit for different reasons). Didn't work out so well for them: http://www.npr.org/blogs/money/2014/08/08/338068996/episode-...
Thanks for the pointer. I might decide to whip something up one of these days. I really have no need for language detection, but I just find it interesting and I'm curious to see wich libraries will win out.
It's $879 for 18 trips within 45 days. So that's going to lot of sleeping on trains.
I feel the same way. Unfortunately, my employer wouldn't take kindly to me taking a multi-month vacation. Maybe someday...
Here's an MIT OCW lecture series on computational geometry, with an emphasis on folding things.

https://www.youtube.com/playlist?list=PLUl4u3cNGP62xuxL4CQpy...
Errors and Omissions insurance might help with this.
> Two zero axles zero faults, said the computer.

There are infrared sensors along the tracks that look for overheated wheel bearings. They're called hot box detectors.

http://en.wikipedia.org/wiki/Defect_detector

These allowed the railroads to eliminate cabooses and their crews.
For anyone interested in the subject I recommend watching the presentation [1] by by Karsten Nohl and Jakob Lell at Black Hat USA 2014.

[1] https://www.youtube.com/watch?v=nuruzFqMgIw
Usually I decide to learn a new language or framework because I've researched that it will be the best tool for the job for the project I'm currently working on. In my opinion the most useful way to go ahead is to start by developing stripped down, simple versions of the selected components of the project. Then I build, read documentation / code and refactor until the problem is solved in a good way. By then I usually have a good grasp on how to use the language properly and can go on.
The PIN system as used in Europe (or at least where I live) always requires you to physically enter your PIN-Number with any purchase, even online. The card alone is useless as you MUST enter the PIN-Number, and 3 wrong tries blocks the card permanently. To make purchases online your bank would send you a small device which takes: a number supplied by the online website indicating your purchase, your card and then asks you for a PIN-Number. It then does some magic and outputs a number that you would need to verify the purchase.

It seems that this is not that same type of system or am I mistaken in some way? Seems to me that it would have helped; my account number/card number/exp. date are useless on their own.
Google Glass in Education
>* The number of Apple devices you see out in the wild (outside of an office) vs other brands of laptops bears this out* //

None? Doesn't it just depend where you are. I see no (alright very few) Apple laptops as people I know aren't made of money. Some students get them when they first start college/uni because they've not budgeted correctly ... but that's about it.

Tablets though, mostly iPads.

Flame wars ahead ...
I don't think it came from Krebs. The pdf is labeled like the rest of the evidence submitted.
Student with over 600 spare hours is looking for cyber security project ideas
Hello everyone!
I am a student who is finishing a Masters degree in Cyber security and Digital Forensics, and to complete my course I have to develop and submit a project by the end of the second semester.
Originally, I was planning to develop an automated platform for internal penetration testing that runs on Raspberry Pi, but unfortunately for me, ScoutBot was released (http://lansec.net/project/scoutbot/) which means that my project idea is not unique anymore.
Because of that, I am looking for another project idea and hopefully - you can help me.

What can I offer you? Over 600 hours of work dedicated to the project by a student who is hardworking and eager to learn new things.
Although I am not a Programming Guru, I have some skills in C#, Java and Python.

What am I looking for? A project idea that is related to Cyber security (and it would be perfect if it is directly related to Penetration Testing since that is the career I pursue).
I am still interested in using Raspberry Pi, so maybe someone can suggest me something related to it?

I will also be grateful for links to places where I could look for projects.

Thanks.
> Actually you can fire your boss, that's called quitting.

Quitting is (to the extent the metaphor works at all) firing your employer, not your boss; these can sometimes be the same, but often your boss is, like you, an employee of your employer, not someone with whom you engage in a direct exchange that you can terminate.

If a line supervisor isn't given permission to terminate his subordinates' employment (because, e.g., that's reserved for a higher-level manager), but can quit, it would be wrong to say he can fire his employees. Likewise, it is wrong to say you can fire your boss unless you can terminate the boss's employment.
Here's the press announcement in 2012 of the preceeding work done in Delft: http://www.tudelft.nl/en/current/latest-news/article/detail/.... And here's a link to the related paper on ArXiV: http://arxiv.org/abs/1204.2792.

I know a few of the people working on the experimental setup within the Kavli Institute. Insanely complex setup! As an aerospace engineer, most of it goes well over my head, but it's interesting nonetheless!
It does have several translations of the bible, though. I guess it would be a lot of work to find bible translations for all those languages - or was there another reason for using the Human Rights Declaration?

P.S. Kudos, very cool project!

EDIT: Frisian version should you want it: https://www.google.com/search?q=Yn+betinken+nommen+dat+it+er...
Show HN: Simplistic survival game [iOS]
No, but I think it's a great idea. If you end up using JuliusJS for this, please let me know. I still need to make some example applications to showcase what JuliusJS can do - I'll have them listed in the README when they're done.

I also came across PocketSphinx, which has been around a little longer - that may have some users in the wild already, and I wouldn't be surprised if it was used for navigation somewhere.

[PocketSphinx] https://github.com/syl22-00/pocketsphinx.js/
New Mac OS X botnet discovered