Building a Better Photo Uploader

Introduced a new, custom-built photo uploader that replaces a third-party ActiveX control and Java applet. The new uploader relies on a headless browser plug-in providing JavaScript APIs for filesystem browsing, background uploading threads, and thumbnailing. Uploads are asynchronous, allowing users to browse Facebook while uploads are in progress. The UI is built entirely in HTML and CSS for easier iteration. Security measures include binding the local web server to 127.0.0.1, using a hashing mechanism for secure URIs, preventing the plug-in from running on non-Facebook domains, implementing mechanisms to prevent unauthorized access to trusted functionality, securely signing and verifying all code downloads, and a remote "kill switch" to deactivate the plug-in if necessary.