skysight-inc/HackerNews huggingface dataset:
Can you link to a recent (for any reasonable value of the word) remote code execution vulnerability with JavaScript? Because my observation has been that RCE through codecs has been a much bigger vector for compromised systems.
He likes to be at the nerve of it all. It's an honest place for him to be and work, and in all fairness, they have really supported his enterprise there.
It's a sad day when the mob campaigns to end the career of someone who's simply doing there job, rather than causing change to the actual law that defines how they do the job.

But this particular prosecutor was just a bully, right? Who had it out for Aaron out of personal hate, perhaps the Illuminati are involved also?

The only other reasoning is she was just doing her job and prosecuting a man who broke the actual law, and showed traits of an activist who could be a repeat offender, and was trying to deter him from getting into more serious trouble in the future.

A suspended sentence and a felony doesn't seem too bad if she was deterring him from something that could see him in jail 10 years with a plea bargain.
Harvard Law professor Lawrence Lessig, a friend of Swartz, told NPR that making a big federal case over the computer hack was out of hand.

So you believe that is an accurate portrayal of what Lawrence Lessig "said" to NPR when he "told" them direct quotes from his blog post? Joke.
I don't know why people hate it, I love it. It gives me so much more visual space.

For example, with Unity I was able to start using Virtualbox VM's maximized instead of full screen, which is so much more comfortable. The host has the sidebar hidden (shows on hover), and the guest has it always visible (as hover wouldn't work for a guest). It really makes a great use of the visual space.
I think the danger with encouraging lawmakers ignorant of how computers work to make more laws is that they will not actually improve things.
I just don't think that's a worldview that anyone arrives at in an intellectually honest way.

I'm reminded of the great example of gaps in the fossil record. If you find a fossil that's in the middle of the two end points of the gap you make things worse, because now you have TWO gaps in the fossil record.

Ranting aside, I have no idea how to deal with this phenomenon in a constructive way.
What makes you think students at MIT aren't trying to make a difference? Do you expect something to happen within days of a tragedy? This takes organization, and outrage, and discussion. People searching for solutions. The wrong message would be to attack students, who are also ultimately victims of information monopoly.

I fear you're cutting off the nose to spite the face.

And these frequent DDoS attacks are partly to blame for Aaron's death, it's the reason why prosecutors are so hardcore about "hacking" or anything vaguely similar to it.
I thought people were trolling when they claimed the Earth was 6000 years old and it was a good troll, then I found out they really believe in it.

Anyway, the problem with taking Genesis 1 as a historic record is the greatest misinterpretation of the Bible, and created so much trouble for creationists.
Proxima Nova and Helvetica don't look alike much:

http://render00.fontshop.com/fonts/font_rend.php?idt=f&i...

http://render00.fontshop.com/fonts/font_rend.php?idt=f&i...

The canonical Helvetica clones are Swiss721 (good) and Arial (terrible).
That works with any link type except for pdfs which start 'okular' on my machine, and then I don't have access to the link.
It took forever to get Square or Stripe outside of the U.S., and they don't even store your money for long. I think you far underestimate difficulty of "scaling" banks across jurisdictional borders.
Only if you can justify why you need ~200 staff in the digital age when most if not all research papers are made in electronic format and don't need to be digitized.

What do they do as well, watch Youtube videos most of the time and then scan in those rare research papers that are submitted in hardcopy format? The 1% of submissions that are actually in hardcopy and not RTF, DOC, PDF, ePub, Mobi ect formats?
What do you mean by includes? It's the default interface, or it's accessible in the repos? Looks really nice and I'm thinking of upgrading from FC17.
I don't see any reason not to believe it. Lawrence Lessig is often interviewed by NPR, and I wouldn't be surprised if he used exact same language as his blog posts. Legal people like precision in language.

I guess I don't get your joke.
>To me this feels a bit like a lunch counter cook complaining all these black people showing up in his restaurant are causing him extra work.

Are black people notorious for eating or something? That kind of came out of left field, there.
It's a workable first step. Some suggestions:

You need to actually suggest new wording. Lawyers can be consulted -- does the EFF propose model legislation? Perhaps it should.

Convincing your senators and representatives that this is an injustice that needs to be fixed would help.
Yes i'm privileged now ... But I grew up in a shed and a caravan in regional QLD, Australia. Went to shitty public schools. Slowly I worked my way to Silicon Valley. It took a LOT of hard work running business in Australia to get the cash to move here.

Life isn't fair. VERY few people are raised in a life privileged enough to move country.

Your post makes me angry. You are privileged and you have no idea. You're on the goddamn internet. You have the opportunity to make a lot of money if you get your shit together. STFU
https://code.google.com/p/ryacas/ to name one. It's not native but yet so aren't a lot of libraries in other languages.
The Rocket Science Group, LLC dba MailChimp, a Georgia limited liability company

Where did you get that?
You hate everyone and nobody then.
Peaceful protest to raise awareness in my view.
Also, I don't remember anyone getting publicly bent out of shape about including AES-NI support in Linux's CryptoAPI. (I'm unsure why people would think Intel would backdoor RdRand but not the AES-NI instructions.)
Startup falling apart? Silicon Valley’s fairy godfathers are at your service
But why protest student blogs and class websites? Why not target the prosecutor's office?

Blockading a key port that is shipping war supplies or preforming a DDOS attack against government websites can be legitimate form of protest, but those actions are very hard to plan and pull off.

This attack (if it is an attack) just seems like someone is going after the low-hanging fruit of MIT's network.
Sort of like Wal-Mart having 300 employees per store and only two of them on checkout lines.
This is as expected. If you want to disable the browser, you should a blank page. Javascript is as much a part of web content as html.

If you're worried about security, run Linux or OSX as your operating system.
Understanding Automatic Reference Counting in Objective-C
That's insane. There's no way an individual student can possibly vet and approve every decision made by the school administration. If the U.S. president engages is an immoral action do I bear the guilt of his actions because I voted for him? Should I renounce my U.S. citizenship whenever my congress-critter misbehaves? Of course not. That is the worst thing I could do. I would be far more effective if I stuck around and campaigned against an immoral leader and tried to get a replacement elected.

I imagine the point of this attack is to effect/inconvenience students so they complain to the MIT administration. The school bureaucracy won't listen to random strangers on the internet, but they will listen to students.
During the 1960s he faced prison due to his opposition to the Vietnam war.

I don't know the specifics, but I recall in one interview about his personal life he mentioned that his wife finished her degree so that she would be able to support their family while he was in prison.
Why is it perfectly acceptable to inconvenience people from their studies? Man, this kind of attitude makes me want to encourage harsher penalties on people who pull this bullshit. You do your movement no favours when you inconvenience the same people you want on your side.
Sensr.net - Taking IP cameras to the next level
In my experience they don't think it through that far. Creation's not really a theory. The theory is just "Something intelligent created it." How? "Not evolution." Most of the time and energy is spent trying to say how evolution couldn't happen.
Because most religious myths are pretty absurd and it's become less and less difficult to admit it without persecution.

One of Dawkins' theses is that many Christians just identify as such because "Christian" has historically meant "good" or "normal" in many communities. In these communities to introduce yourself as a Christian gets a slight nod and the conversation moves on but saying you are an atheist (or otherwise) makes it "a thing."

I remember growing up Catholic and hearing news that some friends admitted to being atheists. This had the same feel as hearing friends had admitted to being thieves, liars, or cheats. Lots of whispering, rumors, and altogether reprehensible behavior for such a stupid thing. It had less to do with disagreements about true, deep belief in an all powerful deity and more about saying "we are not part of the team" and being tarnished by admitting such.
He doesn't really mean 'open source'. He means "user contributed content". Which is an entirely different thing. You could run wikipedia on closed-source/proprietary software if you wanted to.
Just crunched the numbers to see what the effective rate actually is. Assuming self-employed and single in California for 2012, with standard deduction and 1 exemption, your taxable income on $150,000 total income is $131,416, and your federal income tax is: $30,257. Your self-employment tax is: $15,468. Your state income tax is: $10,373.

Total effective tax rate is: 37.4%

A bit higher than I thought it would be overall, but not quite close to 55%. Of course, if you're at that level of income you should probably set up an S-corp to save on SE tax and dump some money into a 401(k) to further reduce your taxable income.
I've been trying to think what is the root cause of this sad state of affairs on Windows. Attacking the scammers is not going to work since obviously their scams are profitable (and legal enough to get away with...)

Is it (the lack of) education among users? I find it curious that when compared to financial products, where improving financial education is often brought up as a solution, there's a lot less mention of education when it comes to cases like these. Sadly this kind of "don't fall for these scams" computing education is not very transferrable to more productive uses of computing.

In a free market, if users stop falling for this crap (admittedly a tall order on Windows) then the scammers will naturally go out of business.
Ubuntu...
Many users have already been adding random people for the social games that have been going for a few years now. Like Farmville or Sorority Life. I know several people who ended up talking to some of those random "game friends" and ended up befriending them in real life. Granted, it hasn't been incredibly common or straight-forward.
Could have been personalized when she signed in via Facebook
http://en.wikipedia.org/wiki/Greensboro_sit-ins
He could only get the 6 month (rather than 35 years) prison sentence by waiving his right to a fair trial. So exercising his constitutionally guaranteed right would result in a seventy-fold increase in his worst-case outcome.

In 2009 fully 96% of criminal cases in our Federal court system resulted in a conviction. http://abclocal.go.com/wls/story?section=news/local&id=7...

This situation would be absurd if it weren't so horrific.
I think it is referring to the sit-ins that occurred in the 60s.

http://en.wikipedia.org/wiki/Sit-ins#Civil_Rights_Movement
If you're trying to simply "get the attention" of the student body, congratulations you have it.

If you're trying to get the student body on your side, you're doing the exact opposite. If I pay $X/year to attend an institution, and someone wants to fuck with my ability to learn to further their own political goals (no matter how noble) you're not winning me over.
He's analogizing DDoS attacks to the lunch counter sit ins that were used as a means of nonviolent protest during the civil right movement.
https://en.wikipedia.org/wiki/Greensboro_sit-ins
Does this mean Americans that haven't protested or denounced their citizenship are just as guilty for the sometimes awful things the American government does?
I've always heard the phrase "ignorance of the law excuses no one". Now, should it? In many cases maybe so, but we all know the obvious cases where it probably shouldn't.

But to assume that intent is the rule of thumb or has been since... Well, I'm 32 and have never understood it to be. To assume that it is, is odd to me. That's genuinely an attitude I've never heard argued by someone who wasn't an accused party.
>but I think if most of the evolution-deniers truly understood the modern theory of evolution, and understood that it is separate from abiogenesis, I think they wouldn't have a problem with it.

I am the son of a fundamentalist minister. For a time, I was also a Christian. I'm now an atheist.

Take it from me: you're wrong. I've been there. There is literally nothing you can say to them. Their belief system is invested in it not being true. It's like the quote attributed to Upton Sinclair: 'It is difficult to get a man to understand something, when his salary depends on his not understanding it.'

I once stood in my doorway and pitied Einstein et. al, smugly thinking that for all their "human wisdom", they weren't able to grasp these "universal truths of God as made manifest through creation." Me, who dropped high school physics. So you see, there's another element to the denial. It allows less intelligent people to think they have something over "these intellectuals."
I doubt I'd use it for any of those reasons, but I guess it doesn't hurt to have the search there. Just like outfitting your blog with a search function, this improves the usability of the site a bit, but I'd hardly think it would be a very big profit maker for Facebook. On the other hand, if it helped you reach out to people you don't know for various reasons, maybe to find a language studying partner, people to play sports with etc, that would be more useful. It would also be perfect for businesses when they want to find and target messages to a certain audience. The only problem is, I doubt very many people would like to share their information with anyone outside of their friends, I sure don't.
From one conscientious objector to another (ages ago), thank you.
Its not black and white. Sure Aaron built things but he also threatened to destroy JSTOR's business model. Likewise a DDoS may seem destructive but if it causes MIT to have better Ethics and Leadership as a result then its well worth the discomfort. If theres a bug in your system you sometimes have to replace some lines of code to make it better, this isn't destruction its just change.
I think there are at least three different ideas being discussed here:

1/ A web-calculator which does more advanced functions. See http://live.sympy.org/#example and Sage Web Notebooks -- hell even google does quite a few things.

2/ A natural language science search thingie -- i.e. a smart algorithm which understands what data to shoot at you given your query. (query recognition ML? NLP?)

3/ An open source / community-editable platform for editing scripts for 2/.

I can imagine there are some interesting lessons about machine learning and NLP to be learned from such a project. In particular 3/ seems like a good thing to have in general: functional modules (transformations?) which take some input data and produce another type of data.

The components 1/, 2/ and 3/ above would work really well if restricted to a specific application domain. This way we would have a chance of competing with Wolfram and understand verbs from that domain + use structured data from dbpedia et al.

Very cool. pm me if you are working on any of the above. I would like to help.
I used MIT WAMI

http://wami.csail.mit.edu/
You must not live in the US, as we have freedom of assembly here
Pro-active log review is a good idea. No argument. I'd been incredibly lazy about log reviews on my two vps's. I started looking through the logs weekly and was incredibly freaked out by what I saw. There are almost constant attacks on the machines (obviously script kiddies), and it was just my initial setup of the linux environment that probably saved me (ssh key based auth, basic iptables, fail2ban etc). It's kind of like when I installed a security camera at the back door of my house (we'd been robbed a couple of times) - it was a pandoras box, prior to the camera going in I was under the illusion that no one ever ventured on to the property. Once the camera went in, I discovered it wasn't a rare event. Same with log reviews, once you start looking, you find attacks are common, and it's actually incredibly unnerving.

Web server logs are another example, once you have a publicly accessible website, you'll see thousands of requests just trolling for phpmyadmin installs, versions of php forum software, known exploitable cgi scripts. I certainly felt better about it when I was ignorant of what was going on with my servers!

However, the example the author provided seems a little far fetched though? Could someone seriously pull this off?

Seems like a house of cards that would fall down the first moment he was required to talk with a colleague about some bit of code he'd committed to source control, he'd have to be a pretty good liar.
>Quit whining.

What an excellent way to win the hearts and minds of the MIT student body. Congratulations you've managed to belittle and alienate the same people you'd want on your side!
I tend to not mind using getters and setters, but I don't create one for every internal variable in a class. I consider "universal" getters and setters (which I take to mean one getter and setter for every variable in every class) to be an absurd idea, like something taken to the logical extreme just to piss someone off.

Perhaps a lot of people don't like using or writing getters and setters because it's cumbersome if the only code in them is an assignment/return statement. Maybe something like providing Ruby's attr_reader/attr_writer/attr_accessor to create these boilerplate getters and setters is what is required. Also in Ruby all member variables are private, so methods are always needed to access them.
One of my mates is actually working on something similar, check out 7pmanywhere.com
THere are rapist and murderers that get smaller sentences than Aaron Swartz. Priorities are screwed up Ms. Ortiz.
That's all great information but it goes contrary to the narrative coming from all sources I've seen, including Lessig himself who was involved with the case. His own post (http://www.huffingtonpost.com/lawrence-lessig/aaron-swartz-s...) cites a figure of "50 years" based on the number of felony counts (http://www.techdirt.com/articles/20120917/17393320412/us-gov...) , and states the "government continued to push as if it had caught the 9/11 terrorists red-handed."

If these numbers are really all just meaningless and in "reality" he was really only looking at...a year? why is it that nobody, even sources like Lessig, seem to be saying this.
What are you going to do in a few years when those tax hikes expire, and you suddenly lose the same amount of revenue?

Assumes economic growth of exactly 0%.
I'm a bit sad that none of these quotes include, "Because there's no evidence." I wonder if this is because none of the people interviewed said it, or because it didn't make a good quote.
That touches on one of the biggest conceptual problems holding people back from understanding evolution. The timescale is big. Really big. Bigger than human brains are typically capable of handling. I sometimes think that teaching shared ancestry as a starting point is the wrong approach, and that we should focus instead of the science of how old the universe must be (based on things like astronomy and earth science) and how iterative adaptive systems reflect changes over billions of years.

From there, people can arrive at common ancestry all on their own.
I love this comment for following its own advice. "Cut from the bottom," it is still very readable and gets the point across.
That's the point. They COULD have, but they WEREN'T.
That's a pretty standard piece of legalese you'll see in most service agreements.
Ebay and Amazon require you to separately list and ship each item, and Craigslist is both unreliable and requires much of the same thing. But they, along with Goodwill, were what I was referring to when I mentioned blacklisting the things you don't want. At some point--and estates are certainly one of these--it's so much easier to whitelist and outsource the getting-rid-of process for the rest.

Unless you're talking about my NeXTs. I'd rather make a personal connection with someone who would appreciate them more than I would than just let anonymous hooligans on Ebay buy them.
Just don't expect sympathy from anyone you've inconvenienced when that right is infringed upon.
I gave a talk on this very topic a few months ago. Here are the slides: http://www.slideshare.net/priestc/the-kanye-quotient

Basically, some people have a knack for managing, others have a knack for creating. Put a creator in a management position, and they will suck. Put a manager in a creator position, and they will suck. The trick is to put the right people in the right roles, and to make sure you're hiring both types of people. Managers prefer hiring other manager-type people, and creators prefer hiring other creator-type people. Often you have companies that are either heavy manager based (where nothing gets done), or are highly creator based (where the office environment is miserable due to conflicts and ego). Both companies are bound to fail.
Well ... I did my last 7 (at least) Ubuntu installs by dd'ing Ubuntu isos to a USB stick without a hitch ...
Disclaimer: I work at ActiveState, named in the article.

I'd just like to point out that ActiveState is not VC funded and is profitable. We are able to grow other parts of the business from core products that are enhanced open source (much, but not all, of which is contributed back to the core open source projects). Most of this is in support and services, but we also have highly regarded tools products and a popular IDE (Komodo, of which we fully open sourced the core editor).

Not sure why there are so many negative vibes to this article.
Wow! That is not a comment I expected from HN.

You do know that Java7 (also part of the web) has a cross-platform 0day exploit. Your OS will not save you here (layered defense might help though).

Something as inelegant as click-jacking will not be prevented by your silver-bullet OS of choice, either.

> Javascript is as much a part of web content as html.

Why is javascript required to see content for a simple blog page?
That's a good sign that the hackers community is not only concentrated on professional matters, they are not a bunch of narrow-minded nerds, but are enlightened people concerned with all sorts of problems a modern intellectual would be concerned with, a sort of elite of the humankind.
He didn't add a property to a rule. He entered text in the CSS editor.

He didn't enter text in the CSS editor. He pressed some buttons on a keyboard.

We could keep at this for a while, if you want.
Agree, I remember that it took me a while to figure this out when I first tried playing with z-indexes.
Bold. Before everyone pulls out, may be worthwhile to visit the vault itself:
http://www.newyorkfed.org/aboutthefed/visiting.html
Yep, totally blank page. JS enabled, no plugins, no caching, Chrome Beta 24 from New Zealand. All HTML loads fine.

There's an uncaught TypeError in common.js:40 (looks like jQuery.browser isn't getting defined?) which seems to cause the blogger object to not be created, breaking classic.js and gadgets.js nearly immediately.

Ridiculous
Raspberry Pi for CCTV using motion