maqr

Look, my time is valuable. I decide what media to play based on my preferences. If I don't want to see ads, why would I instruct my browser to play them?

If giving out free videos isn't a sustainable business model, change your business model.

No amount of shame will ever be effective in getting me to turn off my adblocker. Sorry if this offends you.

What country and how? I'm just asking for a friend...

Yes, let's all keep believing that. If companies realized that all programmers can actually work decentralized, we might not be able to command a decent salary as it becomes a global race to the bottom...

I agree with the entirety of your post, but I'm unsure what can be done practically. Can you recommend an organization that is pushing for your positions? It may take a long time, but similar to marijuana legalization, it's gotta start somewhere.

If more startups allowed remote workers, would the salaries of developers fall in the bay area?

The post is tagged "sexual assault" by the publisher, so I assume there was some sort of lewd messages. That would make it not ok.

It is really hard to tell from the article if there was criminal behavior by members of our community targeting an underage girl or if she got a bunch of followers that happened to be older men and freaked out.

I think that's an important distinction. We all know it's not ok to solicit underage people. I'm not sure if it's still ok for older people to talk to younger people.

I've tried fiddler, charles, mitmproxy, burp suite, etc, but the best one I've found is ZAProxy: https://github.com/zaproxy/zaproxy

The point and click scripting it does is pretty neat. Makes it easy to stub out responses if you happen to be a client developer blocked by your server developers.

Useful little tool: https://github.com/iSECPartners/ios-ssl-kill-switch

Can you elaborate on the femtocell vector and mitigation strategies?

You can tell your browser to not download images: https://support.mozilla.org/en-US/questions/981640

This would disable all images, but that's what you want, because you can never tell if a site you're going to has been compromised and what content they're going to serve up until you've already downloaded it.

This doesn't completely solve the problem though, you'd also need to make sure you don't have Flash or Java, and disable SVG and CSS now that I think about it... plus an encoded text of an illegal image is still probably illegal, even if it's text-encoded, so, uhh... I don't know, it depends how paranoid you want to be.

If someone wanted to force you to have illegal data on your machine, there's almost certainly a way to make it happen if you're connected to the internet in any way. Hell, even gmail shows embedded images by default... and even if you didn't open the email containing the illegal content, you still have it in your inbox, so there's that...

You may be right, but I only ever hear my fellow working class people espousing that view...

> Apple seems to be worthy of that trust.

Oh no... it's working...

> Throw away for obvs reasons.

Not super obvious to me, unless you work at Facebook. Is it really that much of a social taboo to delete your Facebook account?

I've been refusing to sign up for about 11 years now and I'm pretty OK with the social consequences.

> I never understood the "game of skill" argument, though.

I'm not sure if this is really on-topic, but I think you'll find this interesting if you're not aware of it: https://en.wikipedia.org/wiki/Skill_testing_question

We (the people) should probably be at least one of the governments.

I don't know how these decisions are actually made, but I would think there'd be at least one government with one military team that would willingly rescue him.

If anyone is in the military, what's the feeling when these kinds of things happen? It seems like there should be brave people volunteering for those kinds of rescue missions where someone really needs their help.

Eventually, somebody would notice the car there and remove it by tow truck. Most garages need parking passes or have assigned numbers or something. When someone complains is usually when someone gets towed.

I don't think you should be downvoted for this. The server chooses what to send me, and I choose if and how to display it.

Is it also considered unethical not to install that bundled spyware with your favorite freeware app?

Or how about that trojan installer tried to download automatically when you somehow landed on their page? After all, you used up some of their computing resources by serving you the page, you owe them the installation of their malware.

I just made the switch from Charles to mitmproxy. The only issue I've found with it so far is that it seems really slow in returning responses. I'm not doing anything crazy with it either, but Charles was getting content to the device way faster.

Yeah, as long as you have control of the device.

That hack only works if you have root, which means you have to be jailbroken, and Apple is always trying to stop that. I keep a jailbroken device around specifically for disabling all SSL for debugging and dumping app binaries/assets.

I wish they'd just let me buy the thing rooted like Google does.

For if that happens, or just for general convenience: https://github.com/iSECPartners/ios-ssl-kill-switch

What's the best way to make this more prominent for Mozilla to see?

I made a bugzilla account and added my name to the CC list, but is there anything else I can do to help this get more recognition?

> For years we’ve offered encryption services like iMessage and FaceTime because we believe the contents of your text messages and your video chats is none of our business.

Sounds great, but take note that it's none of their business today and we know they can be compelled to spy on their users by NSLs.

They control the key infrastructure with their closed-source software that runs on their closed-source hardware.

If they wanted to go into the business of sucking up all of your private messages and parsing them to sell advertising or if the government wants to read some messages, they wouldn't need to do anything besides issue you a different key.

iMessage won't even let you look at the fingerprints of your friends, and it won't warn you if they've changed. [1]

[1] http://blog.quarkslab.com/imessage-privacy.html

Would this auto-update if I wanted this version?

I don't want to be off the normal firefox release cycle, but I also don't want my browser to have DRM.

Why couldn't this be an install option and a preferences setting in the normal firefox version? It could even be enabled by default. Then people who care about DRM when they install have the option of disabling it, and people who care about it later once they realize the evils of DRM could disable it in their preferences. If someone installed without DRM but wants it later, the preference could download the DRM at that point instead of automatically.

edit: thanks to cpeterso below: https://support.mozilla.org/en-US/kb/enable-drm

But I still think it would be better as an installer option.

As far as I can tell, the only purpose for calling it "ADHD" is to make you eligible for drugs that would otherwise be illegal or therapies that are specifically targeted at people with the symptoms of ADHD.

If the drugs or therapies increase your quality of life, you're "ADHD" because you have a prescription. If they make you feel worse, you're not "ADHD" because you don't need ADHD treatments.

This works because people only ask doctors about ADHD if they need help with the symptoms that we all culturally think of as ADHD.

> I can confirm nothing about what ADHD actual is or whether or not I have it.

You don't need to confirm what ADHD actually is or whether or not you have it. What you want to figure out is if ADHD treatments help you live a better life.

Also keep in mind that a lot of people that could benefit from ADHD drugs don't seek treatment, and don't think of themselves as "ADHD", but instead they self-medicate with things like coffee to avoid seeing a doctor and taking the diagnosis.

Sometimes these things are easier to explain if you look at it like an attacker:

If you're a regular user of an OSX system before 10.10.3, and you want to become root (admin user), you can use this exploit to become root.

If you're an author of malicious OSX software, and a user without admin permissions installs your malware, you can use this exploit to make your malware run as root.

Once you have root, you can do anything on a system.

If the system you're attacking is 10.10.3 or later, you won't be able to use this exploit because Apple has a fix in 10.10.3.

Apple will not make the fix available to anyone on 10.9 or earlier.

Anybody remember this gem? http://en.wikipedia.org/wiki/WinNuke

> >Middle ground does not always exist

He doesn't mean ideologically, he means technically. You're either encrypted or you're not.

This isn't about being opinionated, it truly is about whether or not we allow the government to monitor all the things.

The only options are all or none, there is no "just monitor some of the things" option.

I've heard from a few people that they've been selected for featuring during the approval process. I haven't been able to verify that, but it sounded plausible.

The only method that I'm aware of that Apple gives for promotion is to contact them at [email protected]. I've never gotten a reply from them, not sure if anyone else has, but that's the official address.

Another method that seems effective is networking with important people at Apple. I know of at least two instances of apps being featured based off of knowing the right people at Apple, but I'm not sure the best way to find those people or to get their attention.