mmebane

> As far as I can tell, their ReLinker solution is only a workaround to the installation problem.

I guess it should be pretty simple to add a "wrong version for your device" killscreen to an app, once you realize it's a problem.

> then some device makes the requests out on behalf of the clients.

Well, that, or horribly mangles them. My employer uses Blue Coat ProxySG, and browsing Wikipedia in Chrome has been impossible for a few months. [1] Before that, it was anything which prioritized ECDHE ciphers and used Fallback SCSV, like the Mozilla Developer Network site. It's a pain in the butt.

[1]: https://code.google.com/p/chromium/issues/detail?id=511976#c...

It might be related to Crosswalk[1], their mobile webview implementation.

[1]: https://crosswalk-project.org/

Chrome doesn't have the ability to edit cookies built-in, either, does it? All I can find is viewing and deleting.

I found keeping my Yubikey Neo on my actual keychain to be a bit inconvenient, but wearing it around my neck like a dog tag has worked great.

Sadly, I've been unable to convince my wife that it's worth it. She won't wear it as a necklace or bracelet, almost never has pockets, and rarely has her keys near her when at home. I might just have to stick an Edge-N in her laptop and slip an Edge onto her keychain, so that when she inevitably calls complaining she can't log into GMail from a friend's computer, I'll be prepared...

From a development perspective, I've read through the U2F spec, and it seemed quite reasonable. I haven't had a chance to try implementing it in anything, though.

It's been a couple of weeks since I did it, but I got it working on my nVidia Shield TV, and I remember the process being something like:

1) Sideload Amazon app APK 2) Sideload Amazon Video app APK 3) Open Amazon app and log in 4) Open Amazon Video app

However, it wasn't a pleasant experience. The version of the Amazon Video app I was able to get working didn't scale well to large screens, didn't work well with remote-based navigation, and didn't seem to do HD. I watched one episode of something, and haven't used it again since.

Nor can you integrate with the local filesystem, or call native APIs. With a hidden Java applet, it was pretty easy to make a full-fledged application that just happened to have a web-based API. That's getting a lot harder.

Chrome extensions have an API called Native Messaging which is roughly the postMessage API over stdin/stdout. It works, but isn't cross-browser. Alternatively, you can start up a local server and make XHR or WebSocket calls to localhost. However, both of those require the user going through an external install process. Maybe, in the current security landscape, that's the way it has to be, but it's kind of annoying.

Indeed there is: http://facebook.github.io/react/blog/2015/09/02/new-react-de...

Android TV devices act as Chromecast receivers, so you can do the same thing on Android TV, at least with media player apps. However, I don't think there's a built-in way of transitioning state for full-fledged Android apps. Samsung's apparently been experimenting with it [1], but it's still in beta, currently only works with a few Galaxy devices, and requires apps to integrate their SDK. I'm interested to see what Apple's approach looks like.

[1]: https://play.google.com/store/apps/details?id=com.samsung.fl...

The io.js situation was more akin to Python 3 vs Python 2 than Python vs PyPy. It might not have looked like a major difference at first glance, but there were notable significant, which came with some breaking under-the-hood changes.

I have a 2600k at 4.5 GHz (probably can go faster, since I haven't put much effort into overclocking). For almost everything I do, it's fine, but some games in Dolphin still push the limits. It's really annoying when something runs perfectly well most of of the time, but has occasional slight speed drops.

25% faster clock-for-clock would probably fix this in most of the games I care about, and that might be enough to get me to upgrade.

Did you expand the sections in the Privacy Statement [1]? Open the page in Firefox or Chrome, hit F12 to get to the browser console, then run this to expand all the sections:

    $('.learnMoreLabel').click()

If you search the page for "disclose", you'll see that that exact wording is no longer present, but very similar wording is in the "Reasons We Share Personal Data" and "Skype - Partner companies" sections.

[1]: https://www.microsoft.com/en-us/privacystatement/default.asp...

At least with SSDs, there's much less worry about your RAID 5/6 array self-destructing while it's failing over to a hot spare. With hard drives of that size, I'd only feel comfortable with full mirroring.

I have Lion, Mountain Lion, Mavericks, and Yosemite running in VMWare Workstation. They work well enough to do web testing in Safari, but the video performance has been too slow to do much else, so I don't use them for anything too serious.

Windows and Linux should be able to do that, too [1] - any idea if Chrome or Firefox make use of it?

[1]: http://en.wikipedia.org/wiki/Timer_coalescing

I use Session Manager [1] for this. It has a "restore tabs on demand" option. I usually end up restarting the browser every week or two, either due to Windows updates, Firefox updates, or getting enough active tabs that the browser crashes. When it reloads, I only have one loaded tab, and start the cycle over again.

I think the lazy loading on session restore has been built in to Firefox for a while now, but I still use Session Manager. It shows me the number of tabs in the session before I choose to restore it, and if I hit a problematic page that is making the browser immediately crash, I can remove that page from the session before restoring, as well.

[1]: https://addons.mozilla.org/En-us/firefox/addon/session-manag...

Ironically, Chrome on Android handles this better than Chrome on the desktop. I have 15 tabs open on desktop Chrome right now, and it's getting a bit cramped. My Note 4? 33.

I use Tree Style Tab for this, although I hate the actual tree functionality - it just happens to be the only reasonable vertical tab solution I've found. Unfortunately, it seems to get a little bit laggy with more than a couple hundred tabs.

Last I used NOD32 (~2 years ago), a username and password were required to activate as well as download updates.

My first thought was that the authors may have independently discovered the same flaw that is going to be presented at Black Hat Asia, but the paper does seem to be "getting more out of existing weaknesses" and not "publishing new attacks", which is what the Black Hat abstract promises.

Is this the Bar-Mitzva attack [1]? Or something else entirely?

EDIT: After a quick skim of this paper, I didn't see anything about passive eavesdropping, so I'm assuming this is another new attack.

[1]: https://www.blackhat.com/asia-15/briefings.html#bar-mitzva-a...

It's still not a terminal emulator, but you can use Clink [1] to get readline in cmd. Works great with ConEmu or as part of cmder, as others have mentioned.

[1]: http://mridgers.github.io/clink/

I think Microsoft could be in a position to do this with Windows 10. It certainly seems to me like it would be the next logical step after the Surface Pro.

The lack of a "for 10 minutes"-type option is, IMO, the biggest failing of Privacy Guard. XPrivacy is better in that regard, but was harder to use overall when I last tried it.

XPrivacy does have the benefit of making it easy to provide realistic-looking fake data, which I believe the CyanogenMod team is against.

Are you referring to this talk by Stamos? https://www.youtube.com/watch?v=-1kZMn1RueI

Chrome is utterly unsuited to the use case of leaving hundreds of tabs open, which happens often to me, as I only bother updating/cleaning my bookmarks a couple of times a year. There's three main issues with Chrome:

1) Nothing I've found that works nearly as well as Tree Style Tab.

2) Chrome always reloads all tabs when the browser starts up. Firefox, at least with Session Manager, will only load old tabs when I activate them.

3) Chrome takes up way more memory. That's partly due to #2, but partly inherent in the multi-process model.

The Chrome UI also gets weird under load. With Firefox, it's easy to tell when it's laggy. With Chrome, the UI seems asynchronous, but there's no consideration for actions taking a long time, so you can get the annoying feeling of clicking with nothing obvious happening.

You print off a list of backup codes and stick them in a safe. Then log in with the backup code, and set up a new Authenticator token.

You could also add a U2F token and store that away.

Then why not allow users to defer entering a phone number until they try to add a service that actually requires it?

Yes, that's definitely unfortunate. I don't remember it being required with older versions of the Authy app. I really hate forced cloud service integration, especially in applications that deal with sensitive material.

Out of curiosity, are there any decent libraries you looked at for doing language detection? Thhat's the main reason I'm using Highlight.js in one of my projects instead of Prism or Rainbow.

Unfortunately, the tradeoff is no support for generating a display with line numbers. In my case, that was the lesser of two evils, but I wouldn't mind using two libraries if it meant I could get everything I want.