Hacker News Reader

trakouton Apple starts rejecting apps with “hot code push” features

I'm having trouble seeing this as a valid argument when applied to cached JavaScript within a mobile browser. The same security practices apply.

trakouton Start with universal basic income and a 15-hour work week

Genuine question, what would an individual doing such a thing be arrested for?

trakouton Disclosure of Additional Security Fix in WordPress 4.7.2

Keep it updated, and don't use 3rd party plugins.

trakouton Chrome will aggressively throttle background tabs

For animations/any sort of render loop, you can also make use of the requestAnimationFrame API, which auto-pauses when the tab is out of focus.

https://developer.mozilla.org/en-US/docs/Web/API/window/requ...

trakouton Uganda is shutting down schools funded by Mark Zuckerberg, Bill Gates

Quick point to add for you, Zuck has far more control over vendor lockin and hostility towards his users than Gates does at this point.

trakouton Why you should never use Socket.IO

Sure. The only thing SocketIO really has going for it is built-in support for falling back to long polling (for browsers that don't support websockets). That said, if you're using socketIO in production, you'll have to deal with memory leaks that aren't your fault (eg. even if you stick to boilerplate code). If you just want something quick and easy for a hackathon or personal project that you never want to scale, go for it. Otherwise be prepared for a rewrite, or increased hardware costs.

trakouton Pokemon Go, Security, and Obsolescence

Furthermore, you don't need a device at all if you want to bot. The unofficial API (and client-side signing) was figured out a while back.

trakouton Taser proof hoodies

yes!

trakouton A scammer stole $500 from me and in the end begged me not to tell his parents

That's just not the case for everyone, however.

trakouton Show HN: World's Sexiest Video Search Engine Hits the Streets (YC W16)

Is Hoogley a cross between Google and Hooli?

trakouton Pokemon Go – Permissions Update

Cert pinning can be circumvented w/ a rooted or jailbroken device.

trakouton Facebook disabling messaging in its mobile web app to push people to Messenger

Are you sure it's funny?

trakouton Is your smartphone listening to you?

Isn't DVasive software founded by John McAfee? I'd trust it based purely off his personality. He's kinda crazy (in a good or bad way, depends on who you are), and he'd probably make a lot of noise if he found out his app was malicious.

trakouton Google Deactivates Web Search API

Agreed -- 1k/mo is not worth the initial time investment.

trakouton Hacking Your Phone

Typically the app that uses certificate pinning will just cease to use data during a typical mitm attack. Kind of like going into airplane mode.

trakouton U.S. Says It May Not Need Apple’s Help to Unlock iPhone

They removed their warrant canary. That's a giant red flag if there ever was one. Cooperation w/ governments negates encryption, no matter how good.