Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
arekkas
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
16 ms
·
121.
▲
by
arekkas
10y ago
computing an avarage over one or two data points is questionable statistics
122.
▲
by
arekkas
10y ago
have fun searching for anything that isn't [a-zA-Z0-9\.]+
123.
▲
by
arekkas
10y ago
is there a tl;dr to this
124.
▲
by
arekkas
10y ago
"Growth" is really just cheap oil ("energy prices"). As this is an obvious path to imminent doom, energy prices go up and thus growth diminishes. Cheap(-er) energy is what's keeping the States ahead of the EU too. T
125.
▲
by
arekkas
10y ago
another social network? really?
126.
▲
by
arekkas
10y ago
why break something that's already solved a gazillion times. go open standards, don't create your own.
127.
▲
by
arekkas
10y ago
Your example isn't even real statistical/machine learning, it's basic A/B testing. This has nothing in common with orchestrating code.
128.
▲
by
arekkas
10y ago
when you post this on facebook your account will be blocked and you're forced to download anti-malware from kaspersky. outlier detection at its worst
129.
▲
Show HN: Your own AWS-like policy based access control written in Go
(github.com)
2 points
by
arekkas
10y ago
|
0 comments
130.
▲
by
arekkas
10y ago
The day they made batteries unreplaceable was the day I decided to never buy HTC ever again
131.
▲
by
arekkas
10y ago
"Check for no/default passwords for databases especially MongoDB & Redis. BTW MongoDB sucks, avoid it." Come on, you're better than this. What the fuck.
132.
▲
An Open Letter (The DAO Attacker)
(pastebin.com)
257 points
by
arekkas
10y ago
|
101 comments
133.
▲
GitHub now supports code push notifications and pinned repos in your profile
(twitter.com)
1 points
by
arekkas
10y ago
|
0 comments
134.
▲
by
arekkas
10y ago
Except for local storage the information in this post is useless and partially false.
135.
▲
by
arekkas
10y ago
After reading that, I don't feel a bit smarter then before. That's usually how it goes when you make a bold, universal statement about something and put it into 10 lines of text. I aknowledge what Kent Beck has done and what faceb
136.
▲
by
arekkas
10y ago
The libraries (SDK) I used for my first project for had security flaws. OAuth2 is super simple to implement, but hard to get right. It's not just two endpoints, it's multiple specs with ~200 written pages. Some people for example
137.
▲
by
arekkas
10y ago
Not true. Dex and Hydra both support it, although you need to implement a little bit more stuff when using Hydra. Read it in the docs: https://ory-am.gitbooks.io/hydra/content/connection.html
138.
▲
by
arekkas
10y ago
OpenID has been deprecated in favor of OpenID Connect: * http://openid.net/specs/openid-connect-core-1_0.html * http://openid.net/connect/faq/
139.
▲
by
arekkas
10y ago
nice :)
140.
▲
by
arekkas
10y ago
why is it written in python? why not something that compiles and runs well on all platforms?
141.
▲
by
arekkas
10y ago
That's the trade off. Either you have "real-time" data but need a database roundtrip or you save latency but must accept the downside. However, you can use short token times to mitigate that, something like 10 minutes for exa
142.
▲
by
arekkas
10y ago
Auth0 has a lot of integrations and features that dex/hydra do not have. Auth0 have their own Identity Provider, which hydra does not. But in general you can say that dex/hydra have a very similar featureset to Auth0
143.
▲
by
arekkas
10y ago
Integrating that in lambda should not be hard. If you want, create an issue on GitHub and I will try my best.
144.
▲
by
arekkas
10y ago
Depends, if you use JWT you can cryptographically verify that the token and the token claims are valid. Right now, Hydra does not issue JWTs but it would be easy as pie to add that functionality. Writing an integration guide for this is a v
145.
▲
by
arekkas
10y ago
No, Hydra works with every existing solution :) You can read more on this topic in the guide: https://ory-am.gitbooks.io/hydra/content/oauth2.html
146.
▲
by
arekkas
10y ago
Currently hydra issues opaque tokens but has the capabilities to switch to JWT in the future. There is a warden HTTP API endpoint that you can use to inspect tokens and use hydra's access control. I will probably add a more common toke
147.
▲
by
arekkas
10y ago
Yeah I think that is valid. Hydra can also be put on top of existing infrastructures. Not sure how well that is possible with Doorkeeper.
148.
▲
by
arekkas
10y ago
Thanks, however Doorkeeper is an SDK, right? With Hydra, you simply boot the docker image and are done. If you're interested in OAuth2 frameworks, check out [fosite]( https://github.com/ory-am/fosite ), which is lik
149.
▲
by
arekkas
10y ago
Thanks! I didn't know about Mozilla Persona but I think it is possible to use Hydra + Persona.
150.
▲
by
arekkas
11y ago
Fosite is going to support OpenID Connect ( http://openid.net/specs/openid-connect-core-1_0.html ) which could be something you should look at.
More ›