Making sure the version isn't always 0.0 is probably a good start :)

How does one identify against the server? i.e. what's stopping me from opening a dummy Socket connection under your name and start broadcasting false information about you? (Or worse, about 10 users at the same time and drive everyone crazy with neverending Typing... animation)?

How does this script work with private rooms like the Teachers' Lounge? What information does it track exactly?

@poke The new vote feature uses HTTP, which fails on HTTPS :P Best to simply omit the protocol and host when doing AJAX to the same domain. (Line 69)

Works well. Chrome Ubuntu.

I tried natively.