Stealth-

ALOT of apps are starting to do this. I believe Snapchat initially was the company that began doing it. When a site like Facebook uses your number to identify you, this feature actually makes sense.

I wonder if more fine-grained permissions would make more sense for this sort of feature. Perhaps it would be better if Android had support for "This app may read text messages from 1-800-XXX-XXXX" or something similar instead.

I agree! I found this version to be much easier for some reason. Possibly the brain is quicker to recognize and match the colours than when I'm forcing myself to look for numbers?

It can, but they explicitly choose not to in Snapchat, afaik.

I don't totally see the point to these arguments. The inherent nature of the technology we have means that if they can view it once, they can view it as long and as many times as they want. Anything trying to restrict that is just futile -- look at DRM.

Snapchat has never given that particular illusion of privacy. As the most common and basic example, it has absolutely no way of stopping people from simply taking a screenshot of your image. Snapchat is meant to be used to share throwaway photos without the social expectation that comes from putting it on somewhere like Facebook. Anyone who uses the application learns quickly that someone can potentially store the photo they sent -- in a vast variety of ways.

In app purchases are fine, but be HONEST about it. Not being upfront about the costs of your game directly misleads the customer and, in my opinion, is a terrible and abusive way to earn revenue.

This is great. Proper cryptography is the solution to so many of the problems the modern internet is facing right now, but the key problem with cryptography is that it is never user friendly enough and never distributed enough.

This looks like a great step in the right direction.

I'm not an expert on this, but I believe that at the VM user level they would see wiped data because of the internal mapping. I think physical analysis of the drive would be required.

The term "disc scrub" makes little to no sense in terms of SSDs, which makes this issue even more complicated. People who work in the disc recovery field have been dealing with this since SSDs became popular.

An SSD is limited by its number of writes. To compensate for this, the SSD has very complicated on board logic that abstracts the actual SSD away from what it tells the OS system. This allows it to do certain tricks to save writes. However, when you are "scrubbing" an SSD, internally the SSD might be writing somewhere else entirely. Scrubbing is not considered an effective way of wiping SSDs, from what I believe.

VERY interesting, thanks for sharing! I'll have to play around with this a bit...

I imagine it assumes a header like X-Requested-By has not been manipulated. You can safely assume that the referrer, or other headers, have not been manipulated. There is no way for malicious Javascript running in the users browser to edit headers.

Of course, anyone can code their own browser to lie about headers. It doesn't make much sense to specifically open yourself to vulnerabilities though.

I think it's important to note that this is a bug that effects older browsers only. Modern IE, Chrome, and Firefox have security measures that do not allow scripts to capture values passed to constructors of a literal. That way, this hack is only needed for older browsers and will hopefully not be needed at all in the future. For more info: http://stackoverflow.com/a/16880162/372767

Also note that this attack, JSON Hijacking, is different than a CSRF (Cross Site Request Forgery) and has little to do with CSRF tokens.

Unfortunately, this is what happens to online communities. Particularly those run by teenagers. I've been a member of a number of communities that have suffered deaths in very similar ways -- choked by the people who own the rights at the expense of the volunteers and the community.

It's unfortunate, because I find that often volunteer teenagers are the ones that truly have a passion for doing what they are doing, but they get held up by corporations or by people who want to monetize. When that doesn't work, the people in charge ignore the community until it dies.

It's sad to see it happen to another community.

Hehe, when I started reading I was very appreciative of the fact I was prewarned by the "DESIGN CONCEPT" lettering.

I think it's important to keep this in context, especially for Snapchat. Snapchat is an app. Their website contains almost nothing. I bet a VERY small percentage of people who use Snapchat have ever seen their website, much less google'd the term.

After the preauth, you're required to take it out before you can start pumping.

Honestly, most of my HN reading is because I need a mind-break from whatever I'm focusing on. I find it's a great way to take a break, and still learn a few things while I'm at it.

Just finishing going through this in my province. The latest transition is that all gas pumps now suddenly require me to leave the card in. Yay for Chip and Pin!

He says a folder _under_ /tmp/

My point is that the people that get the benefits are not necessarily the people that need them the most. I've seen many families with status that did not need the money, but took advantage of it. I've also seen many families that needed the money, but could not get it because they were not status.

I completely agree with a support system for people who need it, but I do NOT think that system should be based on racial background.

Growing up in a poorer neighbourhood, the native friends I had were able to play football, have school lunches, go on fieldtrips, and go to university when I could not because they were paid for with tax payers' dollars.

My grandparents were not even in this country at the time, it was not my ancestors nor me that hurt anyone. So I should have less because of what someone with the same skin colour as me did decades ago? Doesn't that seem a little, I don't know, discriminatory?

As another resident of Canada, I have to completely disagree with you.

I have to pay $20,000 for my schooling. My first nations friends pay nothing, it's covered by tax payers. This includes numerous other benefits that I do not get. In Canada, unfortunately it can often seem like the minority have more privileges. That's not equality, to me.

I do. Your typical user does not.

I believe the write concern default is under the responsibilities of the driver -- not the Mongo Daemon.

You can tie private information, such as your telephone number (for SMS) and various emails to your account that you can associate with alerts on various reminders you set up.

It's bad practice to not use a secure login, because anyone who is sniffing HTTP traffic can see your Uptime Robot username and password in plaintext.

This might not be that bad for this website, but keep in mind how many people use the same email/password for other services, or their email.

I think most people would prefer this, even regular people. The problem is that, at least right now, doing that yourself is an _awful_ lot of work. And it's definitely too much work for your average Joe.

I believe the majority of people would rather "own" their data because the idea of a company owning it makes them uncomfortable, however they don't care enough to learn to run their own and they aren't aware that alternatives are even possible.

To me, the key to a decentralized web is ease of use.

Exercise is spot on. It's amazing what exercise will do to your mood.

Unfortunately, when you become stressed exercise is often one of the first things to be neglected. Over the last few years I've learned that having a routine and sticking to it, no matter the circumstances, will do incredible things for your mood and energy.

Have you tried LibreOffice? It's a significant improvement.

I prefer this sort of interface any day compared to a bloated AJAX-y web interface that kills my browser.

Lulzsec was a group of people that split from anonymous. They used "AntiSec" as their slogan. Anonymous is still around and often they either disagreed or completely fought against what Lulzsec was doing.

Anonymous itself does not have leadership, it's more of a swarm mentality.

I do both regularly. They are different hands and the different movements actually become very different feeling. When my right hand is on the mouse, WASD feels natural. Otherwise, I naturally hold my left hand near the ESC key and my right hand over HJKL.

Because it's the home row, it also feels more natural when you are getting ready to type. The mental separation between "gaming" and "typing" is not hard to get a hold of really quick. Give it a try! I guarantee you'll be completely used to it within a week.

Also, keep in mind all of these keys can be remapped in Vim anyways :)