I do. And I still don't get it. I doubt I am alone ( not getting it, that is. ).

Unless the other guy also has laser missile defense.....

You just need to give it more fuel to burn and keep it's density.

Your argument was actually quite valide. The only thing I would add to it, is signing the page. Let me explain:

1. Do all the above steps
2. Hash ( and store ) the output buffer ( PHP ) before flushing it to the browser
3. When preparing the POST to send the auth to the server, have the JS include the hash of the current page

If they do not match: you know code was injected in the page.

I tried, but it crashed...soemthing about division by zero....

http://www.dtic.mil/dtic/announcements/dodrootcertificates.html 'nough said

Best news of the day !

What I really don't get is why would you allow desktop streaming but not an appliance if the idea is to protect your your IP and keep your traditional business model ( ad revenu ). It's much easier to rip a feed from a desktop / laptop / HTPC / whatever than from a locked appliance !

Police 911: Best arcade game ever. Could play for hours ( or until money ran out ). Damn I miss it.

wow, I never noticed the improvement. Thanks !

Ever heard of layered security ? That's like saying you don't need to backup because you have a raid and you know how to manage it.

95% of the PC I fix / clean have AVG installed. I think it's the program I un-install the most frequently.

You are aware that the space race was a fight against other humans, to be the first to achieve it right ?