<story><title>Am I hacked? Oh, it&apos;s just Vodafone</title><url>http://www.sphaero.org/blog:2012:0418_am_i_hacked_oh_it_s_just_vodafone</url></story><parent_chain><item><author>compbio</author><text>Visit &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;1.2.3.50&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;1.2.3.50&lt;/a&gt; to disable this image compression for your device.&lt;p&gt;Add &amp;quot;Cache-Control: no-transform&amp;quot; to your headers to disable image compression for all your site&amp;#x27;s visitors.&lt;p&gt;Web devs should make sites that work without javascript, so that turning on NoScript is also a solution.&lt;p&gt;The bmi.js injection may look a bit nasty, but it is there to save bandwidth for users who are on a bandwidth budget. Vodafone would profit from higher bandwidth usage.</text></item></parent_chain><comment><author>viraptor</author><text>What you say is technically true, but for a user it&amp;#x27;s complete BS:&lt;p&gt;- As a developer I looked for a way to disable this system - maybe something changed, but ~5 years ago I couldn&amp;#x27;t find any information about the 1.2.3.50 address and support told me it&amp;#x27;s not possible.&lt;p&gt;- Unless you&amp;#x27;re running a site that&amp;#x27;s professionally based on image distribution, you&amp;#x27;re unlikely to know no-transform exists.&lt;p&gt;- NoScript can block the bmi script specifically, not everything. Vodafone doing MITM shouldn&amp;#x27;t concern webdevs.&lt;p&gt;- The injection does not look nasty. It is nasty - you get no easy switch for it and cannot decide for yourself what behaviour you want. If you really want bandwidth saving, use opera mini - it&amp;#x27;s available for all phones now.&lt;p&gt;Sorry for being harsh, but I don&amp;#x27;t see how Vodafone&amp;#x27;s MITM can be defended in any way.</text></comment>
<story><title>Am I hacked? Oh, it&apos;s just Vodafone</title><url>http://www.sphaero.org/blog:2012:0418_am_i_hacked_oh_it_s_just_vodafone</url></story><parent_chain><item><author>compbio</author><text>Visit &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;1.2.3.50&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;1.2.3.50&lt;/a&gt; to disable this image compression for your device.&lt;p&gt;Add &amp;quot;Cache-Control: no-transform&amp;quot; to your headers to disable image compression for all your site&amp;#x27;s visitors.&lt;p&gt;Web devs should make sites that work without javascript, so that turning on NoScript is also a solution.&lt;p&gt;The bmi.js injection may look a bit nasty, but it is there to save bandwidth for users who are on a bandwidth budget. Vodafone would profit from higher bandwidth usage.</text></item></parent_chain><comment><author>aaron695</author><text>&amp;gt; Web devs should make sites that work without javascript, so that turning on NoScript is also a solution.&lt;p&gt;Sorry but this is a ridiculous statement, it&amp;#x27;s like saying websites should still be able to run on Gopher. (Which some people want)&lt;p&gt;It&amp;#x27;s cool if you want to run NoScript but if you think website should&amp;#x2F;would be made around that you have cognitive dissonance.&lt;p&gt;Other than that, informative comment.</text></comment>