If I moved to the US from the UK on an L1-B visa, how long does it typically take to be granted a green card? Can the process be started immediately?

There's no waiting period and the timing will depend on the green card path and category but likely a 12-18 month process.

YPlan | https://yplanapp.com | London, UK | Onsite | Full-time

Here at YPlan we uncover the best events every day so you can get out and Live Your City!

We are looking for smart, talented people to join our growing team. We're agile, pragmatic and curious. We see what works and keep doing it, if it doesn't work we change it, be it tools, process, management or code. We prefer small steps over big launches. We focus on the outcome, not the rigid plan and like smart people over heavy processes.

Our stack: Python, Django, React.js, Flux, Swift (iOS), Java (Android)

Why we believe you would love working with us?

- People. We've got a very strong and skilled team with a wide mix of backgrounds and experience.

- Teams. We work in cross-functional teams, each fully responsible for a specific product.

- Culture. No BS culture focused on helping each other out, valuing each others ideas and bringing out the best in the team.

We're currently hiring for several positions including:

  - Backend / Full-stack Developers - https://boards.greenhouse.io/yplan/jobs/27465

  - Junior/Graduate Developers - https://boards.greenhouse.io/yplan/jobs/45388

  - Front-End Developers - https://boards.greenhouse.io/yplan/jobs/36793

  - iOS Developers - https://boards.greenhouse.io/yplan/jobs/20297

  - Android Developers - https://boards.greenhouse.io/yplan/jobs/47542

For a list of positions across all teams, please visit https://boards.greenhouse.io/yplan

For more information, including the perks we offer, please visit https://careers.stackoverflow.com/company/yplan and if you have any questions, feel free to contact our head of talent at [email protected] :)

Does anyone know why exactly payments in apps also require the iPhone 6? I thought that iPhone 5S also had a secure element for storing data (Touch ID).

The iPhone 6 / 6 Plus include an NFC transducer, whereas the old hardware does not include the ability to operate at this wavelength (13.56 MHz)

It does, and the tag works as per the beta.

This is seriously awesome!

I don't want to detract, but it's a shame that your https://stripe.com/checkout page isn't optimised for mobile. I wanted to have a look at the demo on my phone as well as on my desktop.

Perhaps an interesting discussion is whether games should provide options to disable features that might be dangerous.

Absolutely, giving users an option to reduce effects or at least bright blinking lights would be a good idea. In the context of games I guess they don't think of blind or even color blind people, but taking into account epileptics may save some lives.

More and more games feature color blind modes. I know some of the most played games of the moment have it: League of Legends, Battlefield 4, Call of Duty: Ghosts.

That's good to know, I went ahead to mention color blind out of an assumption though (even though I know even some web sites have them in mind), I haven't read anything about an option for epileptics, I wonder how that would work because making a game safe for epileptics is not only more work but if for some reason someone dies playing your game then you would be to blame, maybe that's because it's not done by big companies?

I think they would still include standard disclaimers, just add the options and leave the risk with the gamer.

I think there's something to be said for personal responsibility here. Games are known to have bright flashing lights. If you are epileptic, don't play games unless they are specifically designed to be epilepsy-safe (or have someone nearby to help).

SSL pinning on iOS is now very easy. AFNetworking 1 supported it and AFNetworking 2 has made it a great deal easier.

Pinning by public key means makes upgrades and certificate renewal less of a problem.

You're right, it's not an absolute fix.

It would have prevented requests from an authenticated browser (without a mobile UA) from being accepted, reducing the effectiveness of the attack.

I think a lot of it comes down to this:

"4. Some of the biggest companies in the world have security that is only as good as a minimum-wage phone support worker who has the power to reset your account. And they have valid business reasons for giving them this power."

It could be greatly mitigated by automating that power more.

E.g., "No problem, I can reset your password! The system will automatically contact your registered phone number and email address -- if you confirm both, it resets now, and if you can't, it will send the reset to your new email 3 days from now."

Now all an attacker has to do is wait for me to go on a cruise, or camping trip, or basically take any action which means I'm out of communication for a week or more.

It's a change from near-zero security like now, to having to know your routine, travel, and communication plans. Perfect? No, but what is?

Well, yeah -- I said "greatly mitigated".

I can't think of the last time I was completely cut off from both phone and email for more than 3 days. Can you? I travel around the world regularly enough (I was in Malaysia in November; I'll be in Rwanda in March), but never with breaks in connectivity lasting more than 3 days.

I don't go wandering into the wilderness for more than a day trip, admittedly... but I'm also pretty sure most other people don't do that regularly, either.

so that's better than before, right?

Or, if requested, just never allow password resets. Period.

What advice do you have to someone who wants to do something similar, and in particular, what advice do you have on choosing a product to sell?