9dev

152 ms·

3001.
by 9dev 4y ago
Huh? Over here in Germany, every single step of a treatment is documented and has country-wide standard rates. The actual cost depends on the specifics of the treatment, expressed in various parameters like required personell and their work
3002.
by 9dev 4y ago
If only the name wasn't as awkward... I can't help myself, maybe it's just my crude foreigner's understanding of the English language, but fingering someone always has that uncomfortable, slightly salacious sound in my
3003.
by 9dev 4y ago
I’m curious how much you’ve actually customised it. Does the docs source still have a resemblance to markdown, or is it more of a react-like DSL by now? Job sounds super fun by the way :)
3004.
by 9dev 4y ago
Fair enough as well, but the internet seems full of people who’ve used php decades ago, and spread falsehoods based on that as fact. Your REPL complaint specifically is void these days - you can do exactly the same with a php interpreter, t
3005.
by 9dev 4y ago
That sounds like a fun thing to build - if only someone I knew used IRC…
3006.
by 9dev 4y ago
A question on the services you mentioned: why do you use the premium offerings of Sentry, Mixpanel, GitHub etc already? Which features do you rely on the free plans don’t provide?
3007.
by 9dev 4y ago
That’s probably more telling of the amount of awful startup ideas floating around in the internet :)
3008.
by 9dev 4y ago
Well, the intention of X forwarding was exactly to enable GUI apps via plain old SSH, and that works fine! There’s just no really cool, ubiquitous, useful, cross-platform, GUI apps in that realm: if there were any, we would use them, becaus
3009.
by 9dev 4y ago
That's not what we're talking about here. OP specifically mentioned working on projects unrelated to work.
3010.
by 9dev 4y ago
That may be true in principle, but you’re simply not getting paid for contributing to open source projects unless your employment contract says exactly that. Im not opposed to idling, brains need that. But I don’t think it’s fair to use yo
3011.
by 9dev 4y ago
It sounds great, until you have Chinese customers. That’s when you’ll figure out Recaptcha just doesn’t really work in China, and have to begrudgingly ditch it altogether…
3012.
by 9dev 5y ago
Ah, I just found out the Device Authorization Grant didn't make it in there, which is a bit sad - that was a really pragmatic way of building user-friendly authorisation for all kinds of devices where you don't have your password
3013.
by 9dev 5y ago
It's not the designers fault that browsers provide ridiculously bad default form controls with almost no way of styling them. Really, we have WASM, Bluetooth APIs in JS, and boatloads of other extremely advanced engineering feats in br
3014.
by 9dev 5y ago
SSH certificates are great in theory, but the whole certificate management, ad-hoc issuance, and revocation require boatloads of infrastructure. If you do it right, certificates will be signed as needed and have a short validity period, sa
3015.
by 9dev 5y ago
That’s a different situation - the CA key resides on some high security server, not a developer laptop that may get stolen or compromised by ordinary usage.
3016.
by 9dev 5y ago
Yes. This is precisely why passphrases are a bad idea - people tend to use their easy-to-remember default password, which gets compromised along the way if an attacker can get their hands on the key file and throw their full processing po
3017.
by 9dev 5y ago
> In my book that counts as "obscurity". "We are not an attractive target, hence we won't be targeted". You will be targeted, as long as your defence is weak. I find this point to require more subtlety; "we
3018.
by 9dev 5y ago
No, that's distinctively different. This is about distributing attack surface, not obscuring authentication infrastructure. Are we really at a point where not relying on external account providers is considered unusual, or a bad prac
3019.
by 9dev 5y ago
As I wrote in a sibling comment: Keycloak, for one: https://www.keycloak.org I've also heard good things about Hydra: https://www.ory.sh/hydra/ Depending on your needs, an SSO proxy like Vouch works we
3020.
by 9dev 5y ago
Yes. Keycloak, for one: https://www.keycloak.org I've also heard good things about Hydra: https://www.ory.sh/hydra/ Depending on your needs, an SSO proxy like Vouch works well for internal services: h
3021.
by 9dev 5y ago
Could you expand a little? Of course a HN comment is not giving you full instructions on implementing custom authentication infrastructure, but that doesn't mean it's impossible or somehow "wrong" to do so, if you rely o
3022.
by 9dev 5y ago
> If you are not, overreacting isn't going to help anyone. There's no need to start writing user login code tonight. I agree. That being said, there's no need to write login code yourself. Trust on the existing, tested, pr
3023.
by 9dev 5y ago
No, but there are both open source libraries, and complete authorisation servers. If you trust Okta, you can trust these, and embed them in your infrastructure. Auth only gets super hard if you try to be smart and deviate from best practice
3024.
by 9dev 5y ago
And this is why I would ultimately never trust a centralised company with our authentication infrastructure: because something like Okta is an infinitely more attractive target than we are. Their offering is sweet, and I’m always tempted to
3025.
by 9dev 5y ago
Yeah, there are some intricacies as I said, didn't want to turn this into a long-form essay (because that's what you need to describe anything formalised in Germany). Lidl doesn't participate in the bottle sharing initiativ
3026.
by 9dev 5y ago
For reference, this is what we do with beer bottles in Germany. There’s two standard bottle types which you can return to shops, which take any brand, as long as it’s the standard type. They return them to a cleaning facility which distribu
3027.
by 9dev 5y ago
Check out the reference here: https://xkcd.com/936/
3028.
by 9dev 5y ago
Because 99% of the websites I browse are optimised for wide screens and/or contain lots of information that legitimately fill my 4K screen. I'm not going to resize my entire browser window for that one special snowflake that doesn
3029.
by 9dev 5y ago
This is no ordinary political disagreement, however. Russia is committing a crime, plain and simply. I doubt you would want murderers advertise for their cause on Facebook.
3030.
by 9dev 5y ago
Tangent: I wonder why, after having standards like ISO 8601 for decades, stuff like this is something we even have to think about. On a technical level, there's a need for exactly two date time formats: Monotonically increasing integer

More ›