deathanatos

849 ms·

3211.
by deathanatos 10y ago
Certainly it does, but what would you suggest JWT do differently? One can't realistically hard-code the algorithm(s) in use: that would prevent any ability down the road to upgrade to a better set.
3212.
by deathanatos 10y ago
This is a much better point (or perhaps a much better way of stating it) than what I got from your original post. I agree wholehearted that you don't want to give the end-user mix-and-match primitives. But I don't think that JWT r
3213.
by deathanatos 10y ago
Specifying "v1" "v2" or "v3" is not materially different than specifying the exact algorithm by name, which is what JWT does. You (and the linked article) are selectively quoting the JWS specification too, to i
3214.
by deathanatos 10y ago
> But the server and the client should support only a single algorithm, probably HMAC with SHA-256, and reject all of the others. If you have a centralized system dealing w/ authentication, this doesn't work, as now everythin
3215.
by deathanatos 10y ago
Good JWT libraries essentially have a "box" and "unbox" function; the work required by the client needed to go behind the library's back here is on the same level as that needed to behind crypto_box's. Further,
3216.
by deathanatos 10y ago
While the person you're responding to might genuinely be confused about JSON usually being valid JavaScript, arbitrary JSON isn't guaranteed to be: http://timelessrepo.com/json-isnt-a-javascript-subset
3217.
by deathanatos 10y ago
That's a huge micro-optimization. For a trivial example of a class having the attributes "a", "b" and "c", and a dict of the same, In [4]: %timeit d['b'] # dict 10000000 loops, best
3218.
by deathanatos 10y ago
This feels a lot like Bunch, and a lot of private reimplementations I've seen elsewhere. I dislike these structures. Yes, Python lets you pull this trick. Everything, yes, can be represented as a dict, a list, or one of the primitive s
3219.
by deathanatos 10y ago
Extremely close! It was actually posted on today's thread about consciousness[1], and what I was thinking of was [2]. [1]: https://news.ycombinator.com/item?id=14263842 [2]: http://www.scottaaronson.com&#x2F
3220.
by deathanatos 10y ago
> What else do you need? Me personally: sum types. (Some languages call these tagged unions. Rust calls it an enum, but note that enum here does not mean "an integer under the hood") We have the case where we have an entity w
3221.
by deathanatos 10y ago
These things make my blood boil. I'm going to allow the assumption that 10x programmers even exist. First, it's elitist. This isn't a professional athletics team, this is the workplace focused on engineering. Most places ar
3222.
by deathanatos 10y ago
> No need for forking … Fire up a few processes First, forking is "firing up a few processes". Yes, you can do that prior to launching your process, and then let gevent just have the process, but you have to be able to
3223.
by deathanatos 10y ago
OS X also ships with a vim installation that can't access the system clipboard (I mean specifically "+; needing to type :set paste ⌘V :set nopaste is a PITA). This annoys me quite often. (And replacing the built-in vim, if you als
3224.
by deathanatos 10y ago
I'm assuming your stack looks like mine: gevent has monkey patched everything. 1. fork'ing just doesn't work properly; something about the event loop in the child hangs. 2. You can't easily spawn an honest to god hardwar
3225.
by deathanatos 10y ago
Are you sure? Both my ThinkPad (personal) and my MBP (work) appear to be affected; they report CPU models that, when I look that model up in Ark, Intel says has the vPro technology.
3226.
by deathanatos 10y ago
That disqualifies a lot of otherwise really good hardware. My current Thinkpad, for example, and all current MBPs, I believe. Some manufacturers also aren't very clear about the exact hardware in their machines, either. (For example, A
3227.
by deathanatos 10y ago
I thought the "balance" was and continues to be that Vorbis delivers at least as good a quality as AAC at equivalent bitrates, if not better, better quality than MP3 at equivalent bitrates, and is FOSS which way tips the scale i
3228.
by deathanatos 10y ago
It might not be trivial, but you can do this w/o the ME. My understanding is that most ethernet cards support a "Wake-on-LAN" feature to turn off machines on, and from there you can trigger the machine to reboot and then netb
3229.
by deathanatos 10y ago
Binky Sky, LLC Binky Frostbite, LLC Binky Birch, LLC Binky Galley, LLC Binky Moon, LLC Binky Lake, LLC Binky Glen, LLC Silver Glen, LLC Holly Glen, LLC Grand Glen, LLC Magic Glen, LLC Magic Birch, LLC Magic Wood
3230.
by deathanatos 10y ago
If you contacted Rackspace's chat support while logged in, the representative sometimes asked the security question. To which (remember, you're logged in) you could click "Account Settings", "Security Question&quo
3231.
by deathanatos 10y ago
> Superhuman AI is inevitable because there is nothing magical about human brains. I'm of the opinion that that's an assumption being made. An article I read at one point supposed that our brains could have, as a way of examp
3232.
by deathanatos 10y ago
> I'm not trying to argue whether or not the API is well designed (the designers can do that if they so wish). My point is a pragmatic one: Saying the API lets you shoot yourself in the foot makes people believe that if they just u
3233.
by deathanatos 10y ago
> As soon as you use the result, a sufficiently clever and informed attacker can almost certainly own you. This is equivalent to saying that we should just not write any program, ever. > YAML is just too powerful for anything else.
3234.
by deathanatos 10y ago
Also, this one: a + (b - a) / 2 has issues that if b is large and a is negative but "large" (in magnitude), then b - a can overflow. I mention that one, since that was how I was taught to do it for binary search, to pr
3235.
by deathanatos 10y ago
> (The used book market actually drives up the price of texts – to see why, think of what would happen to car prices if used car sales were not permitted.) My best guess is he is trying to argue that if you disallowed used car sales, y
3236.
by deathanatos 10y ago
Interesting. If you're right, the manual leaves out the rather critical "or the default identity file" bit: > Specifies that ssh(1) should only use the authentication identity and certificate files explicitly configured i
3237.
by deathanatos 10y ago
> Specifying just IdentitiesOnly is not enough. In what manner?
3238.
by deathanatos 10y ago
At least one of the screenshots[1] has him entering a value such as 1001 1010 which isn't ASCII (the 8th bit, the MSB, is set; ASCII is composed of 7 bits). It seems to give him Ü, which is that bit pattern in at least CP 850[2
3239.
by deathanatos 10y ago
Comcast (I have a business class plan; this is not their residential offering) also changed my "static" IPv4 address at one point, as well. They claimed to have allocated the same IP to two different accounts.
3240.
by deathanatos 10y ago
> Carnegie Mellon University estimated the median length of a single online privacy policy, for example, to be 2,514 words. This would take 10 minutes to read. That seems extremely generous. That's a reading rate of 252 WPM throug

More ›