Viewing profile — valverde

It's a custom-built chip according to https://atap.google.com/soli/

The signal has to make its way to a speaker in analog form, eventually. In a way, analog output will always be supported.

Ah, sorry, I misread your comment. Indeed, a browser that doesn't respect cross-domain restrictions is a poorly written browser. My point still stands, though: the point of cookiel…

There are many high profile websites that use the cookieless domain approach: Google, Facebook, and Reddit off the top of my head. I wouldn't say they are poorly written - it's mor…

It's not about the security of the cookies, it's about the bandwidth you save by having a separate domain for static content, because the client does not have to transmit the cooki…

Because WhatsApp uses your phone book as the only way to interact with its contact list. You can't add someone to directly to your WhatsApp contact list. It could probably access i…

Yes. Much like many consumer projectors.

They have been doing that for a while. https://news.ycombinator.com/item?id=7037575

Tap and hold your Wi-Fi network, then select "Modify network". The proxy options are under the advanced options.

Making it impossible is impossible. They might make it more difficult.

Thanks! I added that to the article.

I had Facebook installed while investigating for this article, and could not identify a similar behavior. Google, on the other hand, did the exact same thing, but I remember explic…

Thank you for the feedback. That was my original intention, but seeing the constant location updates from Foursquare while writing the article surprised me (admittedly not too much…

Interesting. I created a test account just to be sure I hadn't accidentally opted in before and, sure enough, it was enabled.

I recognize this as a possibility and I would definitely take it down if the bank requested it. On the other hand, if anything, I exposed that they did a good job. They could have …

This specific token is time-based, so a clone would not be detected. On the other hand, counter-based tokens as you described them do exist, and it would indeed be simple to detect…

Don't forget bandwidth costs. I could get about 100mbps to an external server. At $0.12/GB, 100mbps * 35 minutes = 25GB = $3. Most clicks won't cost you this much, but you should d…