> it sends whenever there's 3G transaction and the usage period ends
Sure - what I was guessing is that sometimes the phone is on a "single" 3G connection all day & there's no alert, and some days the phone makes "many" 3G connections & there are lots of alerts. (or perhaps it does not work this way & there's some other cause - not a telecom expert!)
[EDIT: oops both friends say they get SMS not USSD alerts]
I have to say that it's (mostly) the carrier's fault.
I have the same issue sometimes with Airtel India, and I'm pretty sure this notification was turned off 2 years. [edit or maybe i just had a good data connection then]
Also, this issue is not consistent. I'm guessing what happens is: carrier sends usage alert when you "turn off" data + bad connection that keeps dropping => many notifications even though you never turned off data.
There are a few apps that convert USSD alerts to notifications - try these - but it would be nice if this was a built-in feature.
I & millions of others will be proving you wrong this winter.
Though I can afford a $500-700 device, but I can't justify it. Meanwhile, one of the big battery life tips for smartphone owners is to disable 4G. So, no Google has not screwed up.
"Tech press ignores expected next phase of ICANN's gTLD sales."
would be a more accurate title.
Like a public good, the dilution costs of issuing gTLDs is externalized and paid by everyone (other than ICANN).
ICANN has an exclusive license on this valuable virtual real estate, little accountability and a well demonstrated intention of making all the money they can.
Don't blame smart buyers who get in early - they're not the ones who created the situation.
Possibly similar: I accidentally had flashblock disabled, and a malicious flash ad on wired.com performed many MB of requests and then redirected me to another site after 5-10 seconds.
> Having the application's functionality split across two completely separate menus does not constitute a usability improvement.
That's putting it mildly. A split menu may be correct from some design point of view (e.g DRY principle) but from a usability point of view, it's recipe for frustration.
On a more general note, does no one else consider Mac-style "alt-tab switches apps" and "global menu" usability mistakes? (on grounds of being modal)
With both Unity and Gnome adopting these, I no longer have a compelling reason to switch from Mac back to Linux.
Which is a pity really, because Gnome 3 is one of the prettiest and most usable desktops I've seen: I love how the windows key gives you access to the dock, all windows, workspaces and search at the same time.
I don't want the legitimate uses prevented. The default behavior should be to prevent, and the legitimate uses should explicitly opt-in. That way, you only have to do security analysis for those explicit points.
A malicious site will load your site in an iframe, fill in your form and post it. Fixing it requires some a token in your form, but I can see you don't understand how an extra hidden field in your form will make a difference so you're clearly not going to handle it correctly. You're screwed. Go home.
As far as I can tell, CSRF should have existed since javascript & frames. How have the browser vendors not fixed such a huge insecure-by-design flaw?
The real short answer seems to be: encryption is done client-side by Javascript.
I'd worry about the extra attack vectors because of that - man in the middle, snooping browser extensions, etc (or even just strong-arming them into silently changing their javascript do no encryption)
To his credit, he writes about this as well:
> On a trust scale, is it better to use PGP or PrivateSky if you want to be 100% sure that no one can see your data? Answer: There is no question that [...] a system such as PGP is better [...]
> There is only one problem. PGP and the current state of the art are too damn hard for the general population at large to use. [...]
As the article says: "For now, a better option is to extract the log from a database" - i.e you use some tooling to generate a log from the db.
Indeed, you can now see tools that go in this direction usually by using the replication stream. (eg https://github.com/shyiko/mysql-binlog-connector-java and https://github.com/xstevens/decoderbufs)