Viewing profile — pki

Prod/staging environments now taken seriously

Clever-enough is the key word, with Safetynet involved, which dynamically executes signed classes and you don't know what checks will be done

I am less curious about the year and more curious as to how the hell flip phones are rendering video. Like 64p 3GPP or something realtime transcoded?

At least on Android you can generate a fake VPN-esque connection locally that passes everything through a proxy, so the proxy isn't exposed to the application

Also variably checks http accept headers ( produces accept of image/* iirc)

Isn't it for setting cookies not on the google.com domain?

You already proved that you have access to it. Why is that no question asked? Normal DV certs are either "add a CNAME, upload a uniquely named html / txt file, or click a link in a…

> I'd demand my money back, and contract canceled $500 early termination fee, 8-12 weeks for a "partial refund" via cheque ;)

GCE ~= EC2 GAE ~= Elastic Beanstalk

then we get into the whole "at what point do we stop supporting windows xp for real this time guys" argument though..

html5-sandbox or iframe will have you terminated from adsense, at least. don't know about the others.

> Demand Media, a provider of online content, has seen its shares crater 96% since 2011 as Google made changes to its proprietary search engine formula making it more difficult to …

https://en.wikipedia.org/wiki/Liberty_Interactive#Divisions - "a bit of everything" it seems

Any product by 360 is effectively malware. They are by no means a legitimate "security software" vendor.

adblock does not. an adblock filter you have installed does.

type 'danger' on the warning page

Twitch player is flash.

Google has done JS for years now, far more advanced than just AJAX

Sure, it's not hard, then you get into side channel, first-use-trust/update, MITM, etc territory.

Do you have a good GPU?

> special secure operation mode might be needed for this sort of use case, one which can't be subverted by normally installed software Now people will complain that "the app doesn'…

It's a shame that chip and signature is used in the states though..

this is done by cloudflare, not hn i think.