giaour

22 ms·

691.
by giaour 5y ago
The US Digital Corps (a new program) is meant to be for people at the beginning of their careers. GP was referring to the US Digital Service, which is for mid- and senior-level tech folks.
692.
by giaour 5y ago
Plenty of people move from USDS to permanent civil service roles, but they do need to plan for it and apply. Your time in USDS counts towards government retirement benefits, but you can't stay in that particular position for longer tha
693.
by giaour 5y ago
There are a few ways to get an IC role that pays more than the GS salary cap, but they are fairly rare. Some jobs have an "ST" level that is classified above GS for senior individual contributors in scientific or technical roles,
694.
by giaour 5y ago
Really happy to see this on the front page! One thing to keep in mind if you're interested in joining: the Digital Corps is for early career technologists, so if you have much experience in tech, you might want to apply to USDS ( https
695.
by giaour 5y ago
Most of this article seems to be against having browser JavaScript store tokens and inject Authorization headers, which you are free to avoid if you don't want to use them. JWT is just a token format, you can set it as an HTTPS-only co
696.
by giaour 5y ago
I am not an expert on Brazil, but the link you shared matches my recollection. It's important to remember that Brazil covers a lot of ground, and many internal tools at Amazon are external to Brazil but rely on it and the way it organi
697.
by giaour 5y ago
There are some cases where you have to make a breaking change, and in those cases, it is helpful to be able to assess the fallout without a ton of manual effort. E.g., sometimes a security hole can only be remedied by restricting certain in
698.
by giaour 5y ago
> Honest question - how do you actually effectively share code between many repos? Locally, you can use an Amazon-internal tool to check out multiple repos and make changes to all of them. The tooling calls this a "workspace,"
699.
by giaour 5y ago
Amazon has Brazil versionsets and workspaces, which solve many of the same problems monorepos do. I really liked the way those extra resources let you organize "ad-hoc monorepos" from smaller repositories, but it's infrastruc
700.
by giaour 5y ago
Don't ALBs have a minimum hourly cost? Last time I looked into this, you couldn't run an ALB for less than ~$17/month. Definitely cheaper than API gateways for even a moderate amount of traffic, but API gateway costs scale do
701.
by giaour 5y ago
You can buy a snapdragon desktop, but it's really only spec'd out for testing: https://www.microsoft.com/en-us/d/ecs-liva-mini-box-qc710-de... On the plus side, they're pretty cheap.
702.
by giaour 5y ago
Yes and yes, though I used it for a read-only application.
703.
by giaour 5y ago
The hand wringing and gnashing of teeth in this article is a bit much. Is America splitting by sexuality because different dating apps and media properties are popular with each group? Some balkanization is inevitable when systems with netw
704.
by giaour 5y ago
I think the top-level comment ("Might his squadron be called in to quash civil disturbance? Sent to the next Iraq? Is it reserved for defending the UK from invasion?") is exactly the kind of thing you should ask yourself when join
705.
by giaour 5y ago
I don't know if this was your intention, but your comment comes off as extremely dismissive. If you are joining a fighting force, you absolutely should consider where and how you might be deployed should your unit get mobilized. There
706.
by giaour 5y ago
In many OLTP systems, almost all work operates on multiple attributes of a single record. E.g., when logging a user in, an authentication system cares about multiple attributes of a single user record, not facts about the aggregate pool of
707.
by giaour 5y ago
That would prevent using a pre-generated lookup table but doesn't help much with brute force attacks. All possible card numbers is a finite set, and if you have the sha256(card number + salt), you can figure out which card number was u
708.
by giaour 5y ago
There may be inferences you can make from the sum that aren't immediately obvious. If cards can end in four zeros, the sum and the last four digits contain equivalent information, but you would also confirm that three of the digits are
709.
by giaour 5y ago
Brute forced by a human voice on a phone call? You must talk quickly.
710.
by giaour 5y ago
"What is pictured on the front of my card?" might not be a bad question (assuming the bank allowed account holders to choose from a large variety of images or upload their own). It's data that the bank could capture on card i
711.
by giaour 5y ago
If the account holder has to ask the bank for a piece of information, the account holder will also have to produce it for comparison. Summing the last four digits could unintentionally leak information (what if those digits are all zeros?),
712.
by giaour 5y ago
> There would be little recourse other than this ebanking system refunding you your money directly. Depending on how the system is designed, such a refund may not be possible. I'm guessing that an offline-enabled ecash system would
713.
by giaour 5y ago
Ah, I thought you were talking about the individual holder's risk of theft, not the system's risk of counterfeiting. My understanding from the article is that the TPM would be used to prevent theft, and counterfeiting would be pre
714.
by giaour 5y ago
I get that it's better (from the victim's perspective) to have to deal with fraudulent credit card transactions, but I don't get the difference from the point of view of the fraudster. If anything, breaking Apple Pay would be
715.
by giaour 5y ago
Yes, they would be hardware wallets or phone apps relying on TPM. There is some more info on possible options at https://ecashact.us/#hardware
716.
by giaour 5y ago
From the article: > An E-Cash device is any piece of secured hardware issued and/or authorised by the government for the purpose of receiving, holding, and transferring e-cash balances. > In contrast to ledger-based systems (incl
717.
by giaour 5y ago
The (hypothetical) proposal from the linked piece is to create a non-forgeable digital bearer instrument. The enumerated requirements include that there be no ledger or central clearinghouse and that the medium support offline transactions.
718.
by giaour 5y ago
What would you propose qualifies as a private instrument given this definition? Anything with a public ledger lends itself to really detailed forensic accounting, and durable goods tend to be uniquely identifiable. Gold can be melted and re
719.
by giaour 5y ago
Yeah, that would be terrible! I would expect that this would be reframed a user education issue, as in, don't carry more ecash on you than you're willing to lose (same as physical cash). That would only be workable if they made it
720.
by giaour 5y ago
Why, because bills have serial numbers? Presuming that ecash "units" will also have serial numbers, that would mean getting caught with a flagged unit in your possession could land you in hot water (just like getting caught with m

More ›