Hacker News new | ask | show | jobs
by MProgrammer 4870 days ago
I think it would help a lot if broadcast were unavailable via the client-side API. Without broadcast, an attacker would have to find out usernames or device tokens to push to. I'll suggest that to StackMob and see what they think.