HN user
The presence of an "eval" makes it pretty obvious that there was something going on.
The only clever thing here is putting the code after the GPL text that usually nobody reads.
Does not Joomla community code reviews the contribution to their code base?
http://support.citrix.com/article/CTX116557
Getting the private key is as easy as having a smart person inside the company that works for both the company and the gov.
Then you just have to sit on a router and read the traffic. Relatively simple for a gov agency.
There are 2 ways to be safe: 1) You do not use any technology. 2) You are honest in everything you do.
The second one is probably the easiest.
They just fixed. I saw the same problem on zendesk (video attached): http://news.ycombinator.com/item?id=5185484
Their "Move fast, break things" motto may not go along well with your product. When you add Facebook's Javascript on your page you trust them that they will not make something dumb... but sometimes they do.
I am happy to be building the startup (BloomBoard) that Colorado is using to assess the quality of their teachers =)
I would even pay $50 a year if Google stopped making "improvements" to the UI. The new composer looks nice at first but it slows me down when I need to use different fonts, etc AND they removed background color AKA highlight. I do not use Evernote just because they do not have highlight... and now they decided to removed it from Gmail too. If it is not broken, don't fix it :-/