Host-proof applications: doing it wrong | Hacker News Reader