skysight-inc/HackerNews huggingface dataset:
Yeah, I won't have an enabled 1394 connector on my PCs; USB is highly filtered and won't give you the bus-level keys to the kingdom.

That said, USB is a huge pain in the rear to deal with, especially isochronous traffic.
> AFAIK: Safari does not expose a setting for this (but I didn't look). Chrome uses Chrome app/extension permissions to control this setting. I'm not sure how Firefox does it.

Okay, so for all intents and purposes it cannot be done programmatically without user assistance.

> You asked "Is there a way to trigger the copy, cut, and paste events?". You don't need to trigger them in this case since the browser automatically fires them when the user invokes the corresponding edit action.

You're right, I apologize.

> Here is a quick sample that works in everything except IE. I'm too impatient to figure out why it doesn't work in IE but http://msdn.microsoft.com/en-us/library/hh772145(v=vs.85).as.... provides IE-centric documentation.

As I mentioned in a previous comment, I've seen nothing that suggest this event allows you to change the contents of what's copied to the clipboard before it happens. From what I can tell this is an notification that it has happened. The link you have provided does not indicate anything to the contrary.

I'm not ruling out that what you're saying, but I still haven't seen something that definitively shows it's possible. Looking at all the hacks and alternatives to make it as close to "click-to-copy" a possible strong suggests it's not.
Have you ever tried to push more than 6 keys on your keyboard? e.g. in local two-player games.

Modern gaming motherboards come with a PS/2 port for a reason...
The difference between totalitarianism and democracy is simply one of pluralism. An idealized totalitarian country has only one ideology; an idealized democracy has dozens to millions, depending on how you count, each in some way a contradiction of the others.

There does exist the notion of a totalitarian democracy [1], which I do not consider democratic precisely because it, by definition, cannot respect pluralism. (Pluralism is more than just dissent, but multiple orthogonal viewpoints.) This is arguably the type of political system that America is approaching.

[1] https://en.wikipedia.org/wiki/Totalitarian_democracy
"The problem with education politics is that people like you love to totally distort the issues. Ya, there are problems on both sides, but we aren't even having honest debates yet."

His was about the closet to an honest debate yet. I also lived in China, and let's be honest, kids from elite families are not in public schools. They go to private schools where they get a superior education and teachers that are subject to much more scrutiny. That being said, as in the US, public schools in wealthier districts are measurably better than poorer districts. I remember walking into a public school in Tongchuan near Xi'an that was nothing more than a tiny wooden frame with aluminum for the ceiling and siding. That was in sharp contrast to a school outside of my apartment in Beijing in Haidian Qu where most of the elite universities are which sported computers, modern facilities, and well educated teacher. Not too much different than a public school in Palo Alto as an example.

Your comment however is more a deflection than addressing the real issue which is teacher quality and whether teachers should be evaluated and paid according to performance. Taking the though further, would a free-market education system rather than the current public system be a better option for improving educational results? That would be a more interesting conversation to have, if you are willing to participate.
Student. Functional programming (OCaml + Haskell). High-performance low-latency C++. Finance.
This is going to get guffaws, and spit-takes, and incredulous stares.

All that matters not, it's a language I love, however it fares.

With postconditionals, and heredocs, and references to unfurl,

my answer is simple, the language is Perl.
I program ruby most of the time, with some sysops mixed in here and there. A smattering of other languages as the need arises. OS is Arch Linux, and I use the i3 window manager. Coding is done in Vim. ZSH & Konsole are my terminal weapons of choice after a lot of experimentation.
You can build the same server for less than $1500 and colo at $100. FYI.
Gigablast was like the old Google, it was really neat years ago, but sadly never kept up.

Lots of details about its development on WebMasterWorld, it only uses a handful of servers.
the students pursuing education majors are already the poorest performing of any other college major

You'd better supply a source for a claim like that.
"The public" seems like a reasonable option. The public pays for it, and in return, the public gets that 'intellectual property'.
At least it's for a good cause. Sure beats crowdfunding already-successful game developers or movie stars who shouldn't need crowdfunding but are too scared to dip into their own pockets for a project.
I was just thinking about this yesterday.
Remember how easy it was to build a working UI in Delphi? Throw some controls on the form with a few clicks, maybe write some code, and it just worked. By comparison, integrating various javascript widgets into existing applications still remains such a pain, you'd think we've receded into the stone age of application development.
Take a jumble of jQuery that is continually updating the DOM via event callbacks and function calls and giving you structured code that wires it up in a smart way. In the same way you don't need a framework like Django or Rails, but server-side code tends to turn into a mess without one.
Github:

https://github.com/mozilla/playdoh
Targets Firefox version 17 and lower. This is the version (17.0.7) that you're required to use for TOR on Windows.[1]

It would take a long time to walk through what's being done, and even that isn't likely to be helpful. There's a lot of Array, Int32Array, and ArrayBuffer allocation and retrieval. It's possible one of the larger strings is for injecting code into memory. It doesn't look at the guid stored in the cookie or the query param. If it is a memory injection, your guess is as good as mine.[2]

Just my sense for staring at this for an hour. I know JavaScript, but I'm not a security expert.

Original iframe w/ ?requestID=<guid>: http://pastebin.com/HcGRQk2N (with HTML)
content_1.html: <connection reset> (only used for versions of Firefox less than 17)
content_2.html: http://pastebin.com/7sTk8bgx
content_2.html?????: http://pastebin.com/t9x4GHr1 (same as content_2.html)
content_3.html: http://pastebin.com/GGCny4Vb
error.html: <connection reset> (it's likely meant to fail)

[1] https://www.torproject.org/projects/torbrowser.html.en
https://www.mozilla.org/en-US/firefox/organizations/faq/

[2] http://pastebin.com/gVna4pi2 (NB: it gets modified before used)
Yes. At least according to California law, you're always to allow faster traffic to move to left of you. Relatedly, it's highly recommended in the driving handbook to never pass on the right. Take it as a safety precaution or whatever you need, but I'm unaware of a good reason to drive in the HOV lane unless you're moving noticeably faster than traffic in the right lanes.
What can you do about content exiting your tor node? Ifit's external requests you can block certain targets etc... But what else besides shutting down?
The higher specs you need in a single server the greater the savings vs AWS.
lol -

"close buttons don’t close the elevator doors in many elevators built in the United States since the 1990s"
Here's an alternative vantage point, my vantage point, one I think makes these kinds of ethical quandaries easier to navigate:

* I'm not a "white hat" or a "black hat"

* I'm not deliberately involved in any kind of "cyber" conflict

* I don't do what I do because I'm battling the forces of evil, or organized crime, or anything else

Instead: I do engineering. The same way a contract driver developer does, or a Rails dev. I happen to work in a particularly challenging problem domain. My work happens to have some interesting implications. But those implications are not the reason I work in the field; I work here because it allows me to grapple with compilers, number theory, low-level networking, hardware, OS kernels, and every imaginable development platform. It's about the craft.

I find this vantage point, which appears amoral, makes the ethical dilemmas easier to resolve. If a company like Narus asks me to help them make a network monitoring system harder to evade, I don't have to put that request into some ethical framework that considers the good that application might do. I just turn the work down. Same goes for the US Government; no, sorry, not interested.

Total respect for Alex (the "white hat consulting company" he founded is iSec Partners, our sister company and former archrival). I get the sense that Alex engages intentionally with these dilemmas, that he wants to be a part of something larger than himself and, I think, larger than the craft. As a result, sure, he has to live a carefully examined life, and make sure the projects he's working on aren't skewing his compass. I admire him for picking his way through those problems. But I'm every bit as engaged with the field as Alex is, and I'm here to tell you that you don't have to get tangled up in these kinds of ethical problems if you don't want to.
i have children and i think people are hysterical with pedophileophobia.
Thanks, I never expected reading a TVTropes reference here. You just made my day.
This is interesting. Isn't Anon supposed to be pro Tor and privacy? I suspect there's more to it than child pornography allegations.
How did they ever determine he was in fact the owner of Freedom Hosting?
No, it is absolutely a reflection of the person. If you cannot purport yourself in a manner reflective of your education, maybe you should not be educating anyone.

What the teaching system needs is someone to upend the current system, which is essentially held for ransom by the education labor mafia. The reason teachers spend out of pocket is not because there is no money, it is because money that should be benefitting students goes to support poor institutional practices such as keeping poor performing teachers in the system, supporting generous benefits, and frivolous spending on administrative costs. And the parents that send their children to these institutions are powerless to change this or have any impact. All of this is the cost of succumbing to the teacher unions.

We should be glad you do not live in Jersey City. We need voters willing to elect people in place to buck the current system. While you might mistakenly believe the commenter is dismissive of teachers, what I see is someone willing to stand up for quality teachers who still care about their craft and care about the children they teach.
Consider the following: there is a masked hero who breaks into crackhouses and drug dens, obtains evidence that the authorities were unable to legally acquire, and then promptly hands this evidence over to authorities. The identity of the masked hero is unauditable.

Can we spot the potential for abuse?
Could I see a source on that $10b figure?
Prediksi Skor Vitesse VS Heracles Liga Belanda 04 Agustus 2013
Prediksi Skor Vitesse VS Heracles Liga Belanda 04 Agustus 2013 - See more at: http://www.situsjudi.org/prediksi-skor-vitesse-vs-heracles-liga-belanda-04-agustus-2013#sthash.09juyZHd.dpuf
Most kids of elites go to public schools actually, like renmin zhongxue that is probably the best in Beijing...you can tell by all the black Audi's lining up around 4 pm to jam traffic on zhongguancun Dajie.

Private schools are technically not allowed except for special subjects (after school) and to teach expat kids (aka international schools, though they take some Chinese students also). Also, where you live doesn't determine where you go to school always, especially if you don't have hukou. So a farmer can't just move to Beijing to have their kids enroll in nice Beijing schools. A farmer could move to palo alto however, and take advantage of palo alto schools. The system in china just fails horribly for most of the kids, and you probably know that.

Lets have an honest debate about education in the states instead of throwing up examples that are probably more screwed up than the USA. Only a few countries in western Europe honestly do better than us; even Singapore and Hong Kong have huge warts.

A pure free market system is just going to lead to sad form of libertarian feudalism. The problem with schools is that the rich kids continue to do well, the poor kids do bad, with little social mobility that the schools should be enabling. Any solution had to look at helping kids that need help the most rather than help rich parents game the system for their maximum benefit.
In specific terms, for 2010:

The mean Critical Reading score was 501. Education majors scored 481.
The mean Mathematics score was 516. Education majors scored 486.
The mean Writing score was 492. Education majors scored 477.

Results directly from a report from the College Board.
Greg Kroah Hartman wrote about implementing Thunderbolt for Linux: http://www.kroah.com/log/linux/hardware.html (not a pretty story)

I suspect Intel has realised that people who need Thunderbolt have no practical alternative. May as well charge what that market will bear for a while.

AMD does have a low cost alternative - Lightening Bolt http://en.wikipedia.org/wiki/Lightning_Bolt_(interface) - and I will admit that if it takes off and beats Intel/Thunderbolt I will smile a bit. It will be AMD64 all over again.
It's a big deal because child abuse is rampant in our country, and in most other places, it's even worse.

I can't recall the source (I'll try to find it tomorrow), but allegedly the amount of child pornography on the darknet is equivalent to a quarter of the legal pornography on the internet. That's a shocking amount of children being abused.

Law enforcement makes such an effort to go after people who view child pornography because many of them are members of underground communities. In any such network, someone is providing the material, as in, someone is raping children and posting it to the darknet. It might sound stupid, but their mentality is often similar to that of serial killers. They want evidence of their crimes to keep as "trophies", and they want recognition from their peers for their "achievements." If you find some random sick fuck who downloads that kind of thing, chances are that he would rather dime out his buddies than feel the full force of the DOJ come crashing down on him. This is how you find the actual abusers.

I for one think that the DOJ needs to stop fucking worrying about how many people downloaded an episode of GOT without paying for it and start using all of those wasted resources to find more pedophiles.
This was a hosting service for onion sites, not a tor exit node.
They were just closing the open parenthesis, which cannot be closed with a smiley face. I actually appreciated your contribution, I've heard of that technique before, and remembered it when reading, but couldn't recall the name, so thanks :)
This seems to be happening at the same time with the founder's arrest. Coordinated action?
I dunno. As a CA taxpayer I agree with you. But as someone who understands how important it is for academics to publish in fancy journals I kinda understand. I'm torn on this one.
It pretty quickly starts making sense. I've had clients paying 50k per month to AWS when they have no earthly business paying more than 5k for someone versed in all this.

I don't believe most software folks realize just how much can be saved with colo strategies, building custom servers, buying directly from distributors, component sharing strategies, etc.

It's a great competitive advantage, 10x less burn rate or 10x the hardware of others. Or fall somewhere in between.
This is some hard core hacking! Love it! First, as others mentioned, this is why you should always encrypt your os drives. Second, it also got me thinking, how many other devices are open to this kind of attack. Like a network switch, perhaps? Say you buy 100 network switches, alter the firmware to call home and maybe even load a Linux instance, and then resell them on amazon, eBay, or even better, give a "good" cash deal to some local IT company. Then you just seat back and wait for your 100 bots to call home for their new business class Internet homes.
Every time this topic comes up on HN, someone feels the need to litigate its importance, or even its validity. The resulting threads are repellent. I downvoted this comment and hope others will too, rather than dignifying the idea that we should be debating the whole concept of child pornography on Hacker News.
Thank you for the link. It was way more informative than the TC article.
Based on my poking around, the guid provided is included in the shell code to be loaded into memory. I'm not sure if it is a windows only exploit or not. There is an ID of ws2_32IPHLPAPIPA6 that is also included as part of the shellcode.
You either choose to operate an exit node or a relay (not sure what the terminology is). If you are not dealing with exit stuff, you can do fuck all. Operating an internal service is functionally the same as an exit node (except you allow access to a server running locally, not on the internet at large.)
Many Indian developers choose their field based on parental and social pressure. I've been working with students in Engineering colleges in India and a significant fraction say that they joined Engineering just because their parents told them to and/or because they want high paying jobs. It's considered undignified in some sense to not have a professional degree. This causes an increase in demand and consequently, private players and others step in to meet it. These institutions churn out a huge number of engineering graduates every year who don't particularly care about their field or their job. That's the first stage. You have a huge pool of (at best) average developers. They're entire "programming education" is four years of working on outdated technologies and a shaky theoretical foundation taught to them by (mostly) uninterested teachers.

The next stage is the service companies. If you're an A player, and these are as common in the Indian tech. community as in others though they're harder to find because the large number of people you have to wade through to get to them, you'll already have some open source contributions and contacts with other good programmers and they'll get there. The others, who are the bulk, don't have all of these privileges and don't know what to do. To their aid come service companies. These are the organisations I blame for most of the, often justified, stereotypes of Indian programmers. They hire people in bulk, give them some focussed training (since their formal education is often worthless) and then expose them to the world of cheap outsourced software development.

This is where many foreign devs and Indian devs meet and this is the "most average" of the Indian tech. crowd you'll find. They're uninterested, driven by things low on Maslow's pyramid and generally worry about things like saving face, getting promotions, pleasing managers and rising up the social and professional ladder rather than good tech.

Naturally, these people are "cheap" and "unskilled". They were selected from the larger pool for mostly those reasons.

If you've come into contact with Indian devs from good tech. conferences, mailing lists, free software projects, irc or other such fora, your experience is bound to be difference since you're meeting the ones that have gone through another filter.

The sad thing is that the education systems can crush people and make them unmotivated and uninterested. That's what I'm trying to remedy, atleast to some extent, with my latest endeavour. I've taught students at colleges and there's often some spark in them that can be nurtured. I've done corporate trainings for fresher batches at service companies and they often couldn't care less. It's too late by then for many people.
> It certainly seems relevant, because Dartium has cross-VM leaks.

Sorry, I must have looked at the wrong message, because reading it now, that's not at all the context I was responding to. However, that message was so late in the thread that are you really surprised it didn't get answered? The conclusion had been reached hours earlier and the broad consensus was clearly to not support multiple run-time VMs in WebKit.

> I am sorry that you interpreted my concerns as flaming or trolling. My point is quite simply that the cross-VM garbage collection story is one of the chief concerns that other browser manufacturers have with Dart,

Mozilla has had support for multiple VM bindings for as long as I can remember. I know at least ActiveState has shipped products based on it. So, it strikes me as very dubious for you to argue like this is some sort of fundamentally intractable problem.

> as evidenced by that webkit-dev thread

It seems like you read a tremendous amount a late response to a concluded thread.

>as well as conversations I have been a part of or witnessed since Dartium was announced.

Forgive me, but you haven't cited any of those.

> As of the time that message was sent the Chromium story has been Oilpan, and that does not assuage this concern. An alternative story from Dart's side that could be demonstrated to prevent DOM leaks in a reference-counted DOM world would go a long way here, but it does not seem that Dart is currently taking this into consideration.

To be honest, I don't really know what Dart is doing beyond what shows up on mailing lists. It's not part of Chromium so it's not a pressing concern for me. I have had involvement with the team working on Oilpan, because it's a Chromium project and it looks like it could help address object lifetime issues, which are a major security concern. And regardless of anything that may or may not happen with Dart, the outcome of Oilpan is very important for Chromium and V8.

> Edit: I was pointed by a colleague to this presentation by Lars Bak which confirms this. Page 44: http://commondatastorage.googleapis.com/io-2013/presentation....

The whole first half of that presentation enumerates the issues with V8's current GC. So, are you really still disputing that the primary purpose of Oilpan is to address issues in V8's GC?

> Edit 2: Another colleague of mine pointed out that I said "memory model" when I should have said "memory management implementation". Apologies for being inaccurate there.

One statement implies that there's some fundamental incompatibility affecting any design. The other implies implementation details that need to be resolved. I think an objective observer would find that the distinction between the two is very important.
>Human trafficking is a ~$10b market in just the United States. You realize that kiddie porn is part of that industry, right?

I in fact haven't seen articles talk about that part of human trafficking before. So what amount of that money is being made specifically through the creation of child pornography? And do you know if piracy increases or decreases the demand for paid child porn?
No it isn't, at least not officially. Poverty is defined as $23,050 total yearly income for a family of four. So even assuming a teacher is the sole earner in their family, if they're making 40k, they're not in poverty. Unable to afford all the nice things the HN crowd loves to talk about? Maybe. But still, if you have a two-teacher family earning 80k/year, they're in the 53rd percentile of US income, according to http://www.whatsmypercent.com/
It will be... It was a feature implemented in WebKit like a year ago. http://googlesystem.blogspot.ca/2013/02/chrome-shows-which-t...

It's coming soon I imagine.
No, the solution is to revoke the privilege of "unfireability", which the unions fight every bit as hard for (in fact, probably more so) as compensation.