byoogle

We’re not going to sell this extension to be turned into malware! I suspect I’m not going to be able to convince you with a comment, though. :-)

You should give the extension a whirl – you only get a few notifications per day. Perhaps you’ll even end up spending less time here. :-)

The reason we use this permission is that we request an image from the source url to show you in each notification, but see my earlier comment about the mvp-ness of this project (https://news.ycombinator.com/reply?id=9612790) – in future iterations, we’d create our own api and just require access to http://top.hn/.

This is a one-day, mvp-type project that our team made, mostly to scratch our own Hacker News–junkie itch, but we’re also inclined to do more if the project gains some traction, so please let us know any feedback/ideas/meditations!

[Slightly OT] Amazon just put out a pilot of The Man in the High Castle, an alternate history about the Axis powers having won WWII based on the Philip K. Dick novel of the same name: http://www.amazon.com/gp/product/B00RSGFRY8 (watch! since popularity and feedback determine which shows get picked up and I’m hoping this one does).

Interesting, this quote comes to mind:

“The American Republic will endure until the day Congress discovers that it can bribe the public with the public’s money.” – Alexis de Tocqueville

But this website isn’t (“Error establishing a database connection”): http://webcache.googleusercontent.com/search?q=cache%3Awww.f...

StoryWorth is a YC (W11) co.

Interesting that David Boies is representing Sony – he represented the US v. Microsoft, Napster v. the RIAA, Oracle v. Google.

Ping me – I might be able to help: I run a (new but fast-growing) consulting co, work for equity, have fantasy sports on our project wish list (you have to have a unique take, though).

That said, I think the top advice here is good.

(My contact info is at the bottom of 10x.co.)

> Google [will] delete your account with no recourse if you admit you’re only 10.

The US gov is mostly responsible here, not Google: http://en.wikipedia.org/wiki/Children%27s_Online_Privacy_Pro...

I hadn’t read before, thought the essay was worthwhile.

I missed the date (updated title).

First link to avoid paywall: https://www.google.com/search?q=Is%20Silicon%20Valley%20Pour...

This attack isn’t new – the first proof of concept I know of that worked well is from 2011: http://lcamtuf.blogspot.com/2011/12/css-visited-may-be-bit-o...

Not true. You’re changing Ghostery’s default settings but not changing Disconnect’s default settings.

Ghostery’s results are (surprise) quite biased: http://www.reddit.com/r/privacy/comments/1kagfu/which_privac...

Cool project, OP (I couldn’t actually get things up and running but filed a bug with details).

If you want to do a v2 (or somebody else is looking for a project), try extending Google’s autoupdater (Omaha): https://code.google.com/p/omaha/. The client is open source, the client-server protocol is documented (https://code.google.com/p/omaha/wiki/ServerProtocol), but an open-source server implementation is missing.

Money (literally) quote:

And what happens next is precisely what is supposed to happen when companies don’t collude to defraud their employees of fair-market wages: Google coughed up more money to improve its retention.

I’m the developer of Disconnect and agree with you, but …

To back up the op and gp, I’m seeing more and more sites that don’t degrade gracefully when their analytics service doesn’t load. I do think devs should check that their site still works when non-essential services fail to load because, even when the user isn’t running Disconnect or a similar app, this scenario is bound to happen — e.g., when there’s a network issue somewhere.

Dev here. We do have a new Android app out (but focused on search rather than browsing privacy): https://play.google.com/store/apps/details?id=me.disconnect....

The source is at: https://github.com/disconnectme/disconnect

The mobile one is particularly good: https://soundcloud.com/a16z/a16z-podcast-apple-and-google

This submission is in reference to: https://news.ycombinator.com/item?id=7439358

To get around the paywall, you can: https://www.google.com/search?q=Mt.+Gox+Finds+200%2C000+Miss...

> That’s why at Facebook we spend a lot of our energy making our services and the whole internet safer and more secure. We encrypt communications, we use secure protocols for traffic, we encourage people to use multiple factors for authentication and we go out of our way to help fix issues we find in other people’s services.

I have to call “bs” here. It took Facebook nine years – nine years! (2004–2013) – to turn HTTPS on by default (http://nakedsecurity.sophos.com/2012/11/19/facebook-https-t-...). Beforehand, anybody on your network could trivially hijack your Facebook session to gain access to your account (I made a video two years ago about how easy this attack was [and is] if you don’t know what I mean: http://youtu.be/g5mFbgxMHqQ?t=1m33s).

It sounds like you’re running at least Disconnect and Ghostery at the same time. You can’t do these comparisons with multiple filtering extensions running at the same time and get apples-to-apples results because if one extension blocks a request, other extensions don’t see the request (the install order [browser dependent] determines which extension has first crack at blocking).

With just Disconnect running (OP), I get this list (similar to AjithAntony):

facebook.com, plus.google.com, reddit.com, www.google.com, apis.google.com, twitter.com, google-analytics.com, livefyre.com, facebook.net, scorecardresearch.com, moatads.com, linkedin.com, doubleclick.net, fonts.googleapis.com, googleusercontent.com, gstatic.com, googletagservices.com, quantserve.com, youtube.com, ytimg.com, googlesyndication.com, 2mdn.net, visualrevenue.com, imrworldwide.com, conviva.com, lphbs.com, googleadservices.com, accounts.google.com, typekit.net, ru4.com, clicktale.net, bkrtx.com, fyre.co, theplatform.com, stumbleupon.com, securestudies.com, network-auth.com

We seem to be getting about 100K extra hits per day (and still going) since Sunday. (I have no idea if this is more or less traffic than one might expect.)

OP here. The differences between (and history of) these two extensions are a bit confusing :-):

The parts of Disconnect that 60 Minutes showed actually started as a Chrome (from Firefox) port of Collusion that I did for a hackathon (https://blog.disconnect.me/collusion-for-chrome). Later, we updated and integrated this code into Disconnect (there’s a “Visualize page” option in Disconnect that brings up the graphical UI).

Mozilla has since made major updates to Collusion in the form of Lightbeam (a Firefox add-on). The Disconnect graphs are now much more like to the original Collusion and the Lightbeam graphs are brand new. But other than the visual differences, Disconnect and Lightbeam are functionally alike (Disconnect is also available on platforms other than Firefox: Chrome, Safari, Opera, IE, iOS, and [sort of] Android).

“Visionary leadership”: http://dilbert.com/strips/comic/2004-04-17/