donbronson

$7M seems small. I assume the airlines make more money by not providing refunds and will continue to do so at the expense of small fines.

This is excellent. Is there something like this for ImageMagick as well?

Fair enough. A clever avoidance could find developers activating some evil stuff after the review process itself, though.

The app review will catch some stuff but won’t be comprehensive since it relies on human judgement, right?

Definitely a difference but there is a similarity in vectors of attack: The contact address book can be taken off the phone using the Apple SDK. Then, that data can be anywhere the developer wants to store it.

Apple could have a similar situation. Via the iOS SDK, developers can ask for access for a phone’s address book. These contact connections could be harvested by bad developers. They could also be sold by those developers. This is merely one example. All companies with data and APIs are vectors of attack.

> She doubts a flood of couples will have “edited children.”

And one person's gut check should be ok, right?

Seems to me the biggest takeaway from the article was that it was Lego's partnerships that saved the company. Without those deals with Star Wars (for example), the company would have not needed to meet demands in the first place. This seems like a big lesson to learn from.

Correct!

Where is native support for iOS and Android? Why do we bother generating the same assets for different screen densities? Am I the only one who wants SVGs on mobile?

As a user, having to file a form using EchoSign, I would to cringe. It requires flash and has some really bad usability. An example of that is requiring at least two non-standardized date formats. UX is important for forms because humans make errors when information is not clear.

This is obviously very cool. My one thought is that it would be very hard for children to use. It's important to consider adoption from a wide audience.

Who is this "we" ? People without kids?

This just shows that the current state of Javascript is a confusing mess. Where do new developers start now when they are been fed ES6 transpilers and ReactJS.

I think Google (as usual) is getting ahead of this problem. But they shouldn't be alone in the fight for clarity.

How are they offering SSL on custom domains for free? by using Cloudflare?