skysight-inc/HackerNews huggingface dataset:
The FCC thanks you for your generous contribution.
I don't know about "the same way", but Andrew "bunnie" Huang had a cool talk and post about hacking the firmware of SD cards and had this to say about security:

> om the security perspective, our findings indicate that even though memory cards look inert, they run a body of code that can be modified to perform a class of MITM attacks that could be difficult to detect; there is no standard protocol or method to inspect and attest to the contents of the code running on the memory card’s microcontroller. Those in high-risk, high-sensitivity situations should assume that a “secure-erase” of a card is insufficient to guarantee the complete erasure of sensitive data. Therefore, it’s recommended to dispose of memory cards through total physical destruction (e.g., grind it up with a mortar and pestle).

http://www.bunniestudios.com/blog/?page_id=3592
Given the FCC's argument against Marriott, wouldn't it be illegal for Cisco to sell this now? (I'm not a lawyer, but 47 U.S.C. § 302a(b) makes it illegal to manufacture, import, sell, offer for sale, or ship noncompliant devices, and that document describes a feature whose specific purpose is to interfere with WiFi.)
This should be a top-level post.
The pkgsrc-2014Q3 Release
Sadly, the Chrome extension API doesn't support TreeStyle UI, and generally the Tab/window maniuplation APIs give a very clunky UX (slow, flcikery refreshes, no pixel-perfect layout)
The first recommended read at the end of the Harris article, _The Gift of Fear_ by Gavin de Becker, agrees generally with Harris but offers a more nuanced approach. He says to trust your gut. Occasionally cooperating does work. Standing up can also get you out of a pickle. But if you have a bad feeling, run with it and don't look back.

Couldn't agree more about leaving your family to an intruder. By all means call the police, and by all means stand and fight.
DukeScript – Write HTML5/JavaScript Apps in Java
Here is a post on their mailing list about it:

"""
Since we bit the bullet and changed the on-disk format for JSONB data,
the core committee feels that we should put out a new 9.4 beta release
as soon as possible. Accordingly, we plan to wrap 9.4beta3 on Monday
(Oct 6) for release Thursday Oct 9.

regards, tom lane

"""

http://www.postgresql.org/message-id/26018.1412041228@sss.pg...
Is it any surprise that companies act like this? They're rarely punished for malfeasance, and when they are the penalty is barely noticeable.

It's like putting someone in front of a big trough of money and allowing them to take as much as they want, with the caveat that every few months they will get a mosquito bite.
As has been pointed out to me: ignore my previous comment. I got some fundamentals wrong and should leave the technical explanations to the real physicists :)
Thanks for the link. I was well aware of that week. Michigan skies were exceptionally deep blue and cloud free - all week. I am also aware that NASA recorded an increase in the daily temperature range (details escape me). My question getting modded down to -4 is an amazing example of... something. People thinking climate is all about CO2? I dunno, but I'm gonna go follow that nature link. Thanks again.
How do you define "user computer"? We run a bazillion tests on our stuff during manufacturing. Stuff is plugged in/out of Windows boxes over and over on the manufacturing line.

It's hard to tell where that "last step" might be. Boxing? Shrink wrapping? Delivery to Amazon's warehouses?

Our ASICs have efuses to disable insecure firmware changes. (Need insecure fw updates during fw development.) During dev we wind up having to scrap parts because we blew the fuse prematurely.

It's a tough logistical problem.
Yeah, and from Penn you can jump on the Subway and get most places in the city without too much fuss (though it might be hard to get luggage through the turnstiles with you).

Let's just say that it's appealing enough to be on my options list for travel whenever I go the NYC.
Wouldn't this theoretically "over-eager CCNA" have to manually configure the equipment to target the networks in question?

From the linked article it appears to only target devices attempted to spoof you by default, which is definitely not what the complaint was about.
makes sense to me, they pay out 10k, they receive a solution that can save millions of dollars
I want to love Amtrak. Trains are such a fabulous way to travel. But I've just gotta vent at how embarrassing and seemingly inept the train system is in my country.

This very morning I went to pick up a friend who was riding Chicago to Pittsburgh. The train was due to arrive at 5:00 AM, giving me plenty of time to get her home and get myself to work by 8:00. But knowing how these things tend to unfold, I was savvy: I told my boss that I might not be in until 9:30 or so, giving myself enough headroom to breathe even if the train was an unthinkable three hours late.

I was naive. The train was five hours late.

Meanwhile, I have friends who work for companies who write the software that control train scheduling throughout the country. After what they've seen, they refuse to ride on trains, and from the stories they've told I don't blame them.

It's easy to attempt to excuse this state of affairs. Our rail infrastructure is some of the oldest in the world. The country is huge and sparsely populated. The system was designed for hauling freight, not passengers. But none of that keeps me from reading pieces like the recent HN article on Japan's bullet train (http://www.theguardian.com/cities/2014/sep/30/-sp-shinkansen...) and longing for something so punctual and efficient.
I'm guessing, but that might be a few orders of magnitude more expensive than just using a jamming device.
Thank you for the reply. I understand much better now. An intuitive understanding of the price/demand/negotiation dynamics still eludes me, but this has helped a lot.
I'd completely forgotten about the single-payer negotiation aspect. That makes sense.
FWIW: It appears as soon as marriot corporate discovered this, they ordered them not to do it again.
>All you need is a security layer requiring user authorization for execution of code from any USB device.

That won't help. You can still send keystrokes to the system, which means that BadUSB could have a step by step process, including downloading, installing and compiling anything it needs.
I'm not surprised. Marriott hotels will do anything for a dollar, including turning off the air conditioning to both of their hotels (4 and 5 star) in Cancun, Mexico (a rather hot and humid location) while denying that they had done so.
You only do it when nobody else will do it
Why Not A/B Testing Is for Idiots
Depends if the average charity is actually good or is net negative.
Security issues with promiscuous devices
I asked similar questions. My instructors always encouraged us to just follow the rules and memorize the formulas. We never really were encouraged to understand. Doing that took too long!
> It's really nice for working in computer networking, where you're often typing long strings of numbers with dots between them. The number row sucks for finding numbers and the dot is way far away.

Someone really needs to setup their own DNS server...

(That, or make a programmer's numpad that goes from 0 to 'f')
YMMW, but I use "I can always fill in that gap later if I have the time" and move on. Later, if I do indeed have the time or I find out that I'm struggling because of missing details, I'll get back to it.

Its like making a temporary mess in a project while trying to understand the problem you are solving and making a promise that you will refactor it later, once you get to something that works.
I know that they have better systems for trains in general, but all of those countries also have a much smaller area to cover by train than America. It's no surprise that the quality of trip with a train there would be much higher.
Commitment rewards: From hundreds to millions views in 5 years
Well yes, you're correct. And I wouldn't obviously struggle with simple addition like 1+1. But... for me, the hard part is the "accepting as-is" on more complex things. Especially on topics that I'm new to, or some higher level concepts. I'm currently learning Scala and really trying to learn FP for the first time and have similar issues.

Also, fwiw, you can take anything to the extreme. Even simple addition :)

http://math.stackexchange.com/questions/321939/proof-of-the-...
It isn't really in their interest to have cell phones not work in any of their conference rooms. I imagine a lot of people (and businesses) would very quickly start booking elsewhere if they did that.
'Data smashing' could unshackle automated discovery
That sounds better than a good portion of my K-12 math education. Starting in 7th grade and going to 10th grade, I would walk into class and the teacher would have a list of problems on the board for us to complete and turn in. That's it. Zero instruction at all, we were expected to read the book to figure out how to do everything on our own because the teacher barely knew how to do the problems. These were the "upper level" math classes too.

This situation was actually pretty terrible. My classmates and I hated this setup and most of us were barely learning the material, those of us who did figure it out usually had to teach those around us since the teacher wasn't. During this time my math grades were low compared to my normal grades, mostly in the B to D range.

Eventually, I found a teacher who would spend class teaching instead of having us work on "homework" the whole time. We would go over all of the relevant theories to the chapter for a few days, showing us, in a way that most of us could understand, mostly how they worked but without getting too in depth. At this point, I went from being the guy barely skating by in math classes to being a straight A student, just because my teacher was willing to put in the effort.
I suppose for keyboards you could do something like requiring a specific randomly generated password that is shown on the monitor to by typed by a keyboard before allowing it to provide regular keyboard input, but I'm not sure how practical that would be. I assume it would also have to happen each time the machine reboots, etc, since any USB device can pretend to be another.

That's just for USB keyboards though, there used to be these USB sticks that pretended to be a CD-rom drives in the windows xp days where those were autorun, I'm sure there's other vulnerabilities that can be exposed through USB nowadays.
And that story is apparently wrong if it was $250 per access point rental, not per device connected.
Need feedback on a product idea - Instant one-to-one chat for learners
We are currently working on a side project. I just thought that I should feedback from HN community before building it. Your feedback would be of great help to us in shaping the product. Our motivation for building this was generally people get stuck while learning online and lose interest because there is no one else to discuss, help him to get unstuck.

The idea is to build a platform where anyone can search for a keyword and instantly get connected to other learner, experienced person or an expert based on his needs. Then he can have a one-to-one chat (video, text, image) to speed up his learning. People who to help can sign up to help or advice for free or get some money. What do you think of such a platform? Would you use it? Why or why not? Please leave your feedback as a comment or fill this form http://goo.gl/forms/KWhLOeyzmr.

You feedback would be of great help in shaping our platform. Thank you.
Yes, there are billions of different setups, but there are a few basic ones, and you could start by solving one or two, before solving the generic case. For example, one could provide just a cluster setup for data replication. No fancy distributed data models, just copy the data around in the cluster, if a new node joins copy that data to it, if something fails, handle the failure. Postgresql claims to have multi-master setups, so this is really about the node handling and copying the data around.

After that, you could introduce locally distributed cluster. Later on you could introduce geographically distributed cluster setups. But just because the later is very complex, does not mean that you can't start with the basic setup.
Why women leave tech because they have good taste
Microsoft's Windows 10 Preview has permission to watch your every move
Of course not, but this is the difference between prohibition era levels of black market participation and current day alcohol black market dealing. Sure, people still make moonshine, and there's a bit of traffic in things like illegal cigarettes (guy tried to sell me singles yesterday), but its far less than truckloads coming over the border to fill our demand.
1) I like tabs and I use a whole lot of them

2) tabs alone are starting to feel limited as the average number of tabs and the relation between them gets larger and more complex.

3) browsers are just too fucking big. I tried I think it was surf, or something, I mean, a browser that's basically WebKit + V8 + a few keyboard navigation bindings, along with I think it was uzbl, a tabber system, and it worked decently. I like the idea of small, independent, lightweight single-tab browser instances along with another application that would supply the rest of the functionalities of a traditional browser. Unfortunately I quit this setup because changing is hard and I'm lazy.

4) I use like one thousandth of my favourite browser's UI elements and functionalities. The UI I really need is a set of quick shortcuts to navigate tabs and click and edit stuff in the dom.
That would also block cellular signals. Which might be a detriment or an additional "feature" depending on your perspective.

I personally wouldn't book a conference center which didn't allow the use of cellphones. Just too impractical as a lot of people use them as de facto 2 way radios (e.g. the people setting up booths, employees of the conference center, security, et al).
D.C. hospital evaluating patient who has Ebola-like symptoms
Not to be that guy, but it wasn't written in JS it was transpiled from C to JS.
I wish you could get some feedback from you on this topic.

A mix of impostor syndrome [1] and trying to be comfortable at your job end up consuming you. For me, side projects helped awake the "hacker" spirit in me, or plainly, child curiosity.

Anybody else in their 30s feel like this?

[1]: http://en.wikipedia.org/wiki/Impostor_syndrome
You're both right, and that's what is holding DevOps back. From a prescriptive view of language, "DevOps" has the meaning that early leaders like Gene Kim gave it: a culture of collaboration and continuous improvement that combines dev and ops teams. From a descriptive view of language, LOTS of people, and not just recruiters, use it to mean a special group of people who are essentially release managers. Is DevOps the union or intersection of dev and ops? It really depends on what you want it to mean. And that is...not useful.
2700+ Cassandra nodes! Anyone know how big Facebook's Cassandra is?
clustered read scalable deployments in minutes with no special skills

Full integration with high availability solutions such as Red Hat's Cluster Suite

With Postgres Plus Advanced Server, you can build sharded systems or other replication architectures with a variety of bundled solutions.

Master-to-Master, and similar styled applications are fully supported

Then their marketing copy is full of shit because they promise what rather sounds like a clustered setup with very little effort, maybe not zero config but doable with no special skills.
IANAL but, it is kind of a grey area. That functionality is only designed to be used on a device which is attempting to spoof you (i.e. a device already disrupting WiFi).

So is it a disruption feature if in effect it neutralises disruption when used correctly? As I said, it is a grey area.
As apparently, is being on the right side of the GamerGate fiasco. (They're down at the moment.)
Calling Webhooks asynchronously with Zurl
Yes the hotel could do these things and the FCC probably wouldn't care since it's on their own property and doesn't affect anyone else.

However, when you start jamming other people's signals that's in direct violation of FCC regulations, so of course the hammer is going to drop. I'm really glad it wasn't just a token slap on the wrist. FCC made it clear that they are serious about this.
Easy solution, don't allow people to connect/add power to the grid. Want solar panels? Great! Use your panel power or lose it (or store on your own batteries but no hooking up to the grid and selling it to others). Or, if you want to hook up to the grid because you don't want to waste that energy then give it freely to the transmission company who has overhead managing the lines and smoothing out the power loads.
This seems like a mistake. The original posted article wasn't blogspam. It commented on the krebs article. Adding detailed commentary to a source has a long and valid history.
Marriot made $11.8 billion in 2012. $600,000 is not an actual punishment.
Your Rails/Rack app just got a 2~4% performance boost
is no more effective than the best possible treatment sounds pretty good especially when used in conjunction with rather than instead of.
there are other studies including meta studies which show that exercise is an effective treatment with the lowest rate of relapse:

http://www.theatlantic.com/health/archive/2014/03/for-depres...

we need more studies
When a HID device is plugged in, the OS presents the user with a random number and requests that it be typed (if you only have a mouse, an on screen keyboard can be used). The newly plugged in HID device would not be fully active until the OS receives the right number. Until that time only this authorization system would receive its input (so there is no chicken and egg problem).
Interestingly enough, Cisco's own docs mention that there are some legal issues, especially when used against neighboring networks:

> "Containment can have legal implications when launched against neighboring networks. Ensure that the rogue device is within your network and poses a security risk before you launch the containment."

The wording in the FCC Consent Decree in this case suggests that this feature would actually have been okay if it was being used against actively hostile networks:

> "Specifically, such employees had used this capability to prevent users from connecting to the
Internet via their own personal Wi-Fi networks when these users did not pose a threat to the security of the
Gaylord Opryland network or its guests."
And democracy also means elections, multiple parties and not murdering your opponent party.

Please, no simplified propaganda on HN.
>>> There's no active jamming going on; it's just the way the building is constructed (I assume).

You're correct there. Cell signals don't play very nice with concrete and steel. It also depends on who your carrier is and what technology their using.

Verizon uses CDMA, which uses a lower frequency (around 800MHz) which gives you better building penetration, as opposed to say T-Mobile that runs on higher frequency (1.9MHz) which tends to have issues getting through all that concrete and steel.
Some value tics on the axis for price points and screen size would improve this.
With that internet speed, it could take days to do anything. :D
To put things into perspective, a couple years ago North Korea sunk, without provocation, a South Korean ship with some >20 soldiers on board. Yet no war started. This year rebels in eastern Ukraine downed a civilian plane with >200 civilians, many from the Netherlands, using weapons supplied to them by Russia. Yet no war started. Not only but two war ships sold by France to Russia, sitting in EU harbours, continued onward with their training of Russian solders. Israel baited the public into hate-mongering, directed that hate at an enemy under false pretence and then began a military campaign that was grotesque (based on facts at: 1,2). The public will never forget this.

I grew up in Israel during the 2nd intifada and watched the west bank empty itself of the majority of the moderate populace with anyone that could move elsewhere doing so. We are watching the same thing happen more slowly now with the Israeli public. First the moderate Israeli became a minority due to the 2nd intifada and then the more liberal have begun a mass exodus both due to the general environment of hate and ridiculous cost of living and work standards (of all OECD countries they work more hours per year than most [3]). The next 15 years is going to be a very interesting time for Israeli politics.

1: https://en.wikipedia.org/wiki/2014_Israel%E2%80%93Gaza_confl...
2: https://en.wikipedia.org/wiki/2014_kidnapping_and_murder_of_...
3: http://stats.oecd.org/index.aspx?DataSetCode=ANHRS
The Plunge of Icarus
Coachability
Did you know where API is located?
That's my take on it as well. Per the linked docs, the only modes natively supported are:

- Rogue on Wire - If a rogue device is identified to be attached to the wired network, then it is automatically placed under containment.

- Using our SSID - If a rogue device is using an SSID which is the same as that configured on the controller, it is automatically contained. This feature aims to address a honey-pot attack before it causes damage.

- Valid client on Rogue AP - If a client listed in ACS is found to be associated with a rogue device, containment is launched against that client only, preventing it from associating to any non-managed AP.

- AdHoc Rogue AP - If an ad-hoc network is discovered, it is automatically contained.

The kind of blocking in question here sounds more aggressive than any of these categories. Though it's certainly possible they were using some other vendor's gear which has additional options.
Its sad that so many people have to suffer ...

The whole population of Gaza does not have to suffer. That is a conscious decision made by Israel's political and military leaders.

You can change that. Educated people like you are the way to solve this conflict. Don't wait for the people of Gaza to "change first".
Show HN: Create Your Own Startup Metrics Dashboard
Facebook given green light to buy WhatsApp
I don't think it's a slap on the wrist at all. The $600k is probably not a big deal, but now they will have to figure out a process for verifying and reporting compliance across all their US properties. That's likely going to cost a hell of a lot more than the actual fine.

Honestly, I figure that just the initial analysis of what they need to do will cost them that much before they actually start hiring personnel and putting the preventive actions in place.

Then factor in all the bad press they will get from this and the final bill will be well into the millions.
Does this also allow us to assume that any unique properties that we observe from this quasi-particle will have a good chance of being applicable to an actual particle, and thus help us discover the first actual Majorana particle?
hopefully they made less then $600,000 in profits from their access points...
Why do you think this law reflects the worst of its citizens?

Maybe people are sadistic at best.

If those people got their moral education from the system they then vote in, that would be a broken system...
True. Transpiled, with a few abstractions written over the transpiled code (such as a worker script), and some tweaks to the transpiled code to fake multithreading so that it can coexist with the Web Audio API.
your nickname makes me wonder if there could be any correlation between the mobile OS people are using and which side they support in this conflict :))
It's also only coming out of the left channel (unless I've suddenly gone deaf in my right ear.)
Connect usb stick. It does nothing on the first connect. Restart computer few hours later. The infected stick is disconnected. When it loads it detects that it was restarted or reinserted. It assumes restart so it decided to turn on keyboard emulation. System starts, detects two keyboards but does not know which one can be trusted. What do you do now?