skysight-inc/HackerNews huggingface dataset:
Against this attack? Yes. Against a trivial modification of this attack? No.

(Trivial modification: you have two transceivers. Each transceiver encodes and encrypts everything in the frequency range, and sends it to the other one, which decrypts it and rebroadcasts it.)

Think of the original attack as being the equivalent of placing a megaphone up against the guy whispering, and this attack as being the equivalent of placing a cell phone up against the guy whispering and another cell phone that's connected to the first one up against the guy waiting to hear something.

Not to mention that triangulation has... problems. You really don't want your car to not open because there was a stray reflection off of something nearby.
Osquery, Performant Endpoint Visibility of Your Machine Like SQL
Firefox is too forward-thinking for ES5 transpilers...

Fixing the issue. :)

EDIT: Fixed
> Bethesda did not ask for the fix. They have no obligation to compensate them financially.

This is why this isn't about Bethesda paying or not paying modders. This is about why the hell should Bethesda get 75% of the profit out of a modification that was made on someone's own time and sold through a third party. It's not as if Bethesda was doing quality control, providing support, hosting the mods or providing a marketplace. Steam is providing the hosting for the mods and providing the marketplace, so it makes sense they get that small cut.

Bethesda shouldn't be getting such a big part of the pie.

This is not about some mods being free while other are paid. This is the community saying "No, we don't accept that. The modder getting 25% of profit for something that was done independently, without their support, is unacceptable."

The game company is getting free content, free publicity, free developers. They shouldn't also get the majority of the profit.

edit: fixed some numbers that were wrong (75% profit by company vs 25% profit by modder)
From the title I thought they were opening an API for the car ;-)
SmartRecruiters Announces New Enterprise Customer Win and Expanded Funding
It took a few minutes for the 'relay' portion of what you just wrote to click.

So, in theory, if you wanted to steal a REALLY expensive keyless car you could have two devices connected over a mobile data connection that just relays communication with the keyfob. You put one device near the owner of the fob, so in his office, and you keep the other. Then you can just walk off with the car.

Yikes.
The Apple Watch doesn't work with wrist tattoos?
Some half-baked ideas:

- If the car was inductively powering the key, that might be harder/more dangerous to amplify.

- The car or house could send a false key signal, which would also be amplified, and refuse to open when receiving it. (New attack: lock rich people out of their car with 17$ of equipment!)

- If your house/public-buildings/phone+gps could track the key, they could tell the car to disable the system.

- Sending the signal with audio or visible light? Something that doesn't pass through walls.

- Use a pedometer to deactive the key when it's at rest.

- Use a really long key (like... 2 metres long) with transmitters at each end, use crypto and frequency hopping, and use multiple receivers on the car to triangulate both ends. If both transmissions are coming from the same spot, it's an amplifier.
Agreed.

Your opinion is an unpopular one, albeit one I share.

There are far too many cases where security is getting removed in the name of convenience, and this is no exception.
You say "needs" as if it's a matter of fact, but what a program needs to do is a very subjective matter.

If you feel the command does more than it needs to, could you call out a few examples of bloated features that you would cut?
Obligatory: HACKERS CAN TURN YOUR CAR INTO A BOMB [0]

But on a more serious note this is pretty cool to see not only Tesla but GM and BMW reaching out to these groups. We saw an article or two here on HN not to long about about, IIRC, car makers trying to use DMCA to prevent people from modifying the software in their cars [1] (I know there was another article about tractors as well [2]). I'd be interested to know Tesla/GM/BMW's stance on that issue. They are opening up to hackers to find issues but that doesn't mean they are on board with making it easy for people to modify software in their cars.

[0] http://www.homelandsecureit.com/wp-content/uploads/2012/10/C...

[1] https://www.eff.org/deeplinks/2015/04/automakers-say-you-don...

[2] https://news.ycombinator.com/item?id=9414211
Google Trying to Buy Patents Before Trolls Get to Them
Matt Blaze's Congressional Testimony on Crypto Policy [pdf]
I'm not a fan , but he he has thought different also
Their system isn't capable of extracting complex info such as executive names and ages, which is what the requestor wanted. The API only does the easy stuff, returning fields from XML.

Edgar Online was sort of a data troll. They bought FreeEdgar to make them go away. After the SEC put up their own search engine, Edgar Online was mostly unnecessary, and it was sold to RR Donnelly. There's also "secinfo.com", which someone runs as a spare-time activity and does about as much as Edgar Online. There's no need for a pay service to get this free data.
Sara Chipps on Building a Hardware Company
Gox. https://github.com/mitchellh/gox
I'd actually like to read some of these articles, for example "Markov chain using machine learning and teeth" or "Lisp in medieval name tags".
The iPhone 4 did work no matter how you held it, as evidenced by its long tenure (sold for 4+ years), and high sales and customer satisfaction ratings.

If you carefully held it in a very particular way, you could make it lose a couple bars. Jobs said: there's no reception problem, just don't hold it that way. It turned out he was right.
Miasmata is a great example.
Hook, a new homeautomation rising star at kickstarter
A new budget home automation system has been created by Hack-a-Joe Labs that has been designed to enable you to control your homes electrical outlets and light bulbs via the Internet using a single hook.

More details, check this out
http://www.geeky-gadgets.com/hook-budget-home-automation-system-28-04-2015/

Kickstarter campaign: https://www.kickstarter.com/projects/hackajoe/hook-home-automation-on-a-budget
Probability cheatsheet
I too thought the same thing and got really excited (not that I own a Tesla or have any chance of owning one any time soon). Tesla just gives me hope for the future of automobiles.
The best place to start, if you haven't read it, is the documentation here: https://golang.org/ref/mem

For more detailed information on the garbage collector improvements and roadmap for 1.5 and beyond, this document is the Roadmap and discusses improvements being made including a maximum of 10 ms STW out of every 50 ms. https://docs.google.com/document/d/16Y4IsnNRCN43Mx0NZc5YXZLo...

edit: fixed incorrect link
This is beautiful and perfect.
YC Rejection – How much should we change to address their concern?
After 2 rounds of intense interviews, got the rejection email last night. Although we agree with YC's reason for rejection (user acquisition), we'd like to confirm that not everyone got the same response before we devote our full energy in pivoting or changing something fundamentally to deal with the issue they raised.

We are super passionate about our idea and already had planned out the milestones we need to hit in the next few months. But if we were to truly address their concern about user acquisition, we need to take a long and hard look at our business model and the overall landscape, but we fear this may jeopardize our schedule.

Anyone else feeling the same? How much are you going to change to address their concerns?
Really?

http://news.nationalpost.com/news/canada/quebec-language-pol...

In Quebec, the law is that the public has an affirmative right to be served in French:

http://en.wikipedia.org/wiki/Charter_of_the_French_Language

and fines are issued for violators:

http://www.cbc.ca/news/canada/montreal/french-still-under-th...

I don't know if this counts as "bizarre" or not, but it's certainly unusual, since other provinces do not do this.
A New Bionic Eye: Infrared Light-Powered Retina Implant Coming
Thanks for the reference! We definitely have some good services available! :-)
> it took months looking for a replacement but still nobody wanted to pick up this code

> and if I ask other developers around here to learn Haskell, it is difficult to get any enthusiasm

Sorry, it does not seem to be Haskell the problem, but the people.

> If you ask me what is bad about Haskell, it is the difficulty in finding developers and difficulty on making other developers to work with apps written in Haskell.

For this, I suggest few solutions:
(1) http://www.haskellers.com/users
(2) http://careers.stackoverflow.com/employer
(3) http://www.reddit.com/r/haskell
(4) https://wiki.haskell.org/Mailing_lists
(5) #haskell at Freenode

In the extreme case, I would go for https://wiki.haskell.org/Haskell_in_industry and https://github.com/commercialhaskell/commercialhaskell looking for a freelancer or a consulting company focused on Haskell.

Seriously, I don't think those were strong arguments, although I totally understand the difference in finding a Java developer versus a Haskell one.
Eh, I'm playing fast and loose to validate a number of interesting things that come out of that blog post. The `FFI a` functor is just Yoneda of (F o = exists i . (FFI i o, i)) which you want because we can't guarantee that `FFI i` is a functor. You can form the standard free monad over (Yoneda F) just fine, but if you do it in the weird CPS style indicated here you get something that's faster in Haskell ("well, ok, so what") but also has a really nice story where the only remaining bit is "the interpreter is exactly giving semantics to FFI".

It's also nice to do parallel threads in this way, but it's not infeasible to do them with the standard free formation. Totally just aesthetics. I'll see if I can dig up an example of two concurrent threads interacting over a shared flipflop.

Also worth thinking about a definition of FFI which goes like

data FFI i o where
Unsafe :: (i -> o) -> FFI i o
C :: (Storable i, Storable o) => String -> FFI i o
Are we already at the bottom? I just read an article about Baltimore on CNN, and at the bottom the related articles included "TV's hottest news anchors".
"On HN, these kind of submissions are just as trashy, but because they point directly to LKML we can be fooled into thinking to be something loftier."

No, it's because of the cognitive dissonance in play on HN. It's a fucking news-re-blog, for crying out loud, but because of the stated goals[0] of the site there's some idea that we're rising above the trash and nonsense of sites like Slashdot.

Don't get me wrong; articles get posted here before they get reposted on Slashdot or The Register etc., but that's all there is to HN. It's not a better place for discussion than either of those two sites.

[0]https://news.ycombinator.com/newswelcome.html
Gumroad and Its Frictionless Sales Strategy
For sure. I'll keep an eye on the progress of the library to see what will be configurable.
I love reference sheets like this. Thank you!
I wonder how this compares with the benefits of writing a kernel in a high level language as seen in the Singularity project.

http://research.microsoft.com/pubs/52716/tr-2005-135.pdf

http://research.microsoft.com/en-us/projects/singularity/
Yes, all of our VPS plans are OpenVZ.
I don't know what the answers are, but burning the businesses of innocent people who have nothing to do with all of this is not one of those answers.
It could just be risk? I don't have numbers on the comparative risk between Canadian cops vs. American cops, but I know that America isn't the safest place to be a cop, and it's well-understood that a cop who does not feel at risk is a friendlier cop.
This is more of a question . Is it not possible to "listen" for your reflected (there will be some always right?) search pings, and conclude that there is some amplifier attack happening if the signal is much stronger than usual. Even if there is no signal reflected usually, wouldn't this amplifier be more or less omnidirectional (they don't know where your key is right now). If so, a stronger than expected "reflected" ping can still be recognized. What am I missing?
When to Layer Virality
Have you tried asking? There's often a fee schedule involved depending on who's asking and why - if the request comes from your attorney and it's for litigation, expect to pay a lot.

On the other hand, if you say you're moving out of state (or out of the country) and thus changing providers, it will probably be free. (This was my experience when I really did move out of the US and had to get hard copies of all my family's medical records.)
Vault – A tool for managing secrets
If you need any help, reach out to me directly via email at jonathanb@serverhub.com or on Skype at: JonathanBSH

Additionally, we have 24x7 chat, ask for Jonathan! :-)
You'll probably transition fairly easily. Mac OS X is a customized BSD, so although it has differences with respect to Linux, it's also not that foreign either.

* Remap Command and Control if your fingers can't adjust to the change in shortcuts. System Preferences > Keyboard > Modifier Keys

* If you want TAB to work with all widgets (which is what makes sense to me): System Preferences > Keyboard > Shortcuts > Full Keyboard Access: All Controls

* Not sure where a menu command lives? Search for it in the Help menu's Search field.

* Spotlight is a pretty good launcher, calculator, and more. Command+Space is your friend.

* If you need additional keyboard remapping support: [Karabiner](https://pqrs.org/osx/karabiner/) and [Seil](https://pqrs.org/osx/karabiner/seil.html.en)

* Time Machine is your friend.

* Grab [iTerm2](http://iterm2.com). Apple's terminal is nice, but iTerm2 has so much more. If you use tmux, iTerm2 has support for that, too.

* Install [Homebrew](http://brew.sh) for package management.

* [TotalSpaces 2](http://totalspaces.binaryage.com) gives you even more control over how your spaces are arranged, animations between them, and keystrokes for accessing them. Can't live without it anymore.

* Window management sucks. I use [Moom](http://manytricks.com/moom/)

* I've given up on Apple's Mail.app. I use Gmail, and [AirMail 2](http://airmailapp.com) does the trick for me.

* Use virtual machines where appropriate (VirtualBox, VMWare, Parallels, ...)

* Install your preferred shell if Bash isn't your cup of tea. I use [Fish](http://fishshell.com)

* [F.lux](https://justgetflux.com) is your eye's best friend.

* [Bartender](http://www.macbartender.com) keeps all those pesky menu items under control

* If you want to really customize your gestures and the like, [BetterTouchTool](http://www.bettertouchtool.net) can be useful. For awhile I had my "Windows+E" muscle memory tied to launching a new Finder window until I got over it.

Good luck! Give it about a week or so (if that), and you should be comfortable in your new environment.
Just to clarify, this is a vulnerability for cars with keyless entry. IE when you approach close enough to the car, it unlocks automatically if you have the key on your person, and you can start the car with the pushbutton without inserting a key. This attack makes the car consider "close enough" to be 100m instead of a few feet. If the key is inside your house a couple dozen meters away, the car unlocks automatically and you can drive it away.
What you are looking for is called serpwoo.com ;)

Also any rank tracker can do that too. I use proranktracker.com for my personal URLS and serpwoo to track the entire top 20 sites for any keyword.
Anything to do with active disabling is easy to prevent via jamming.

Inductive power isn't going to really help, I don't think.

A false key signal, like you mention, won't help. Also, it'd be relatively easy to stop via a directional antenna.

Audio does pass through walls. Visible light would be less convenient than a standard key, I'd think.

Disabling the key while at rest would be really annoying for those who tuck it in their purses.

A really long key... I hope you're joking.
Vault: A tool for managing secrets
It's really hard to sell programming tools today. Everyone now expect them to be free.
The Devops Job
I just the The Phoenix Project by Gene Kim, George Spafford, and Kevin Behr. I've working in IT for thirty plus years and I didn't understand what DevOps was. I now think I can define it.

Devops Job is to help and maybe do:

A - Identify each IT product
B – Document each step from build to deployment
C – Automate each step
D – Create feedback for each step and production
E – Identify ways to reduce or remove steps
F – Consult with Development and Operations to build standards

Can anyone add more.
Sorry. You can read it online, one page at a time:

http://www.nap.edu/catalog/13163/reference-manual-on-scienti...

There also used to be a place to download PDFs of individual chapters.
My troubles seem to have very low self esteem. If I can point finger and laugh at them they retreat in a corner and sulk there for weeks :)

10 minutes of laughing is a part of my daily routine. It brings in much needed supply of fresh air and fresh perspective.
Rust's Enum, it looks like, aren't the same as C-esque enums, and look a lot closer to Go-interfaces (or like the article says C's unions).

That said I wonder why they named it enum.
Most places probably don't test the same browser on both unless they have a specific bug report they can't reproduce on their normal testing platform.

Given the popularity of Macs with web/front end developers, and the ease (+ legality) of running windows on Mac (vs Mac on windows), most developers end up testing ff,chrome,opera,etc on OS X and use vm(s) for ie - often the ms provided ie testing vms.
Secret Air Force Space Plane Gets Darth Vader-Style Engine
[0] Actually if you look at some of the big engines, they are becoming free, or require a small royalty to use, and it sure as hell isn't a 75% cut.

[0]https://www.unrealengine.com/what-is-unreal-engine-4
Of all the gadgety improvements cars have picked up over the last 10 years, keys are both the most "oooh!" invoking and the most useless, IMO.

Normal keys work great. I don't see the big advantage of techno-keys that outweighs the (almost inevitable) cost of paying so much for a spare.
Isn't it also true that much of what people are discussing when they're talking about GMOs and appearing to suffer this misconception that roundup and GMOs are the same thing that what they're really communicating is that the increase in use of RoundUp is due to the genetic modification of RoundUp ready crops? Isn't it also true that the increase in use of RoundUp that is in the food we eat the cause of their concern? And finally isn't it also true that the correlation of increased use of RoundUp and rise in food intolerance, allergies and autism what is fueling these concerns?

So to unlink RoundUp from the sentiments against GMO is disingenuous. It's the genetic modification that allows the proliferation of herbicides and pesticides that are used in food crops and is making its way into our bodies, its these chemicals that the plants are genetically modified to withstand (and then pumped full of) that is in our food at the heart of a large proportion of the arguments against GMOs.

If there is no need for RoundUP, then there is no need for the genetic modification to make crops RoundUp ready. So you can't just argue that most of these arguments aren't about GMOs, they're about RoundUp which is a different argument. The two are inter-linked. If you didn't need RoundUp, you wouldn't need the genetic modification to make the crop RoundUp ready and RoundUp wouldn't be making its way into our bodies where you claim it does us no harm anyway.

Don't forget that the food industry has done this time and again with herbicides and pesticides:

It doesn't get into our bodies! Oh, it does? Okay, well, it doesn't matter, it's harmless. Oh, there are people getting sick and dying? Okay, we'll do a study. Oh, it's not harmless? There's evidence suggesting it is harmful? Okay, well it's not harmful to humans because we don't digest it. Oh, it is harmful to humans? Okay, the chances of it causing problems in humans is an acceptable trade-off because the amount it costs us in medical treatment [or settlements] is far less than the profit we make and we can pay off those that suffer severe consequences to keep their mouth shut so nobody else will ever find out.

You see where this is going right? You cannot act like this and expect people to trust you. The problem is that this behaviour has been recorded time and again with these companies. They've demonstrated time after time that they cannot be trusted and will put profits above everything else, including human life... yet every time they're caught in a lie they keep asking us to trust them again, like they're the NSA or something. You can only break people's trust so many times before they say fuck you and annex you to the sideline of history they'd rather forget. This is the position that big ag and big pharma are starting to find themselves in today.
Hashicorp blog post on the tool: https://hashicorp.com/blog/vault.html
AWS and the Square Kilometer Array Launch Astrocompute in the Cloud Grants
just more money?
You can relatively easily set up an amplifier with a directional antenna. Also, that will easily false positive - there are a lot of things that reflect RF in weird ways.
I'm glad! That's exactly what it was designed for (and to scratch my own itches about configuring and maintaining other web servers).
It's definitely SOC. You're pretty much correct in your interpretation, too. You "purify" the core of your code by asking it to merely construct a data structure which represents an impure program. When that pure core code produces the data structure your "run-time system" outside of it executes the program and produces side effects.

If you look at another comment I left on this thread you'll see one implementation of this. While it's very complex, it does have a very nice interpretation of this system as the "RTS" and the "pure data structure" working as co-routines, passing control back and forth between one another.
Yeah. You can also find the same clip uploaded with the opposite intent.
Yep, that's pretty much it.

Although sometimes you can even skip the second device and just have the one near the keyfob.
Are you implying that there is anywhere other than the USA?
I have also found Ramnode to be cheaper than DO. Their support is also good and they have active IRC channel for quick help. Been using them from two years and no complaints so far.
I don't know of a single Firefighter/Paramedic who doesn't complain about their shift schedule interferring with their life and how much of a pain it is to have to go to mandatory training all the time whereas tons of people I know just do their 40 hours a week in IT and go home.
The example that really rubs me the wrong way (currently) is if I lived in Quebec, I would have to send my children to school in French, even though they have never spoken a word of French before --- that is, unless I send them to private school. It is a law that if you are an immigrant, your children, if they go to public school, are only permitted to go to French public school. I find that bizarre. My tax dollars are neither French nor English tax dollars. They are just Canadian dollars. If that is prejudice, so be it.
In addition to what brianmcc said: Given that the requirements are going to change, what are you going to do about it? The ability to change rapidly gives you a chance (not certainty) to respond successfully to a requirements change.
mmm, this seems to be a confusion of names. Using const and iota in Go helps you to create enumerations (http://en.wikipedia.org/wiki/Enumeration) whereas enum in Rust is actually creating a tagged union (http://en.wikipedia.org/wiki/Tagged_union). Most of the time in Go, you would define a new interface for the situation the author is describing.