hirsin

9 ms·

91.
by hirsin 2y ago
Less technical here doesn't neccesarily mean "worse engineers". It can also mean lawyers, marketing, sales, product, and leadership. Someone is trying to learn something from you and you give them an answer so full of holes a
92.
by hirsin 2y ago
HUD and FEMA alone are 2.5x larger than USAID's budget, so while I can't argue with the unsourced bit that it would be shocking, it's clear there is and was even more money being spent on Americans too.
93.
by hirsin 2y ago
Maybe we've worked with different FF systems, but anything that involves a call more expensive than an RPC would be lethal to request latency. Calling out to a CDN forty five times per inbound request would be... Infeasible
94.
by hirsin 2y ago
You'll still be building management UI over their system (it doesn't understand or validate actor types, tenants, etc, so you have to do that.). But at high throughput, you might want something with dedicated professional love. Te
95.
by hirsin 2y ago
Except that she was not rejected - she rejected them. She simply couldn't get a match with a job that worked for her.
96.
by hirsin 2y ago
They're not just the insurance company - they are also the pharmacy manager who sells the drugs to the patient. So there wasn't really anyone to negotiate with - they pick the price they want to sell the drug for and then how much
97.
by hirsin 2y ago
Pick the right number is not secure (enough), unfortunately - MFA exhaustion leads to users hitting one of three at random in an attempt to "make the notifications stop" (that are, naturally, being spammed by the attacker with a p
98.
by hirsin 2y ago
Keys are _not_ just long passwords. They're asymmetric. Feel free to steal any and all of my webauthn public keys. Heck, here's one: "kty": "EC", "alg": "ECDSA_w_SHA256", "crv": &q
99.
by hirsin 2y ago
Pointing out that they maybe have experience with this (however you want to phrase it) does sort of lend the guidance some credence no?
100.
by hirsin 2y ago
I was curious - land use stats in the US show agricultural use has dropped from 49% to 45% in the last 60 years, with the majority of the loss in the 90s and early 60s. Basically zero change in the last 20 years. https://data.wor
101.
by hirsin 2y ago
Oauth usually implies some variability of access - ie selective permissions. Is this more a pure authn layer as opposed to authz? You have a repo on GitHub... Have you looked at using account public keys for anything? Ie https://
102.
by hirsin 2y ago
Convenience. If it works like Google pay (fair bet?), it hands over your payment, billing, and shipping details in one go. It's wildly effective.
103.
by hirsin 2y ago
What? That's token to self, you don't even really need an access token there. What's the actual use case for an access token where the client and the resource are the same app? (I'm aware of some, but we didn't expe
104.
by hirsin 2y ago
Do you want select account, implying the site supports multiple accounts at a time, or just prompt=login? We're still shaking out bugs and bad behaviors after adding multi account on GitHub, I get why folks might not want to implement
105.
by hirsin 2y ago
Cosign. AAD ID tokens had the same issue, and we'd see tokens with 1500+ guids shoved in there for the group ids. We had (and have) a nasty "too many, go call this API you need a new permission for" outcome there. Right next
106.
by hirsin 2y ago
Is that just because they're old trees, which are stronger than the fast farmed ones we get today?
107.
by hirsin 2y ago
Should I read this as a reversible hash? I can't imagine it works this way, have you got any pointers to learn more about early sabre ?
108.
by hirsin 2y ago
It's rare in my experience. We don't support OIDC, so technically it's standalone oauth. In reality there's of course a user identity in the mix used to authorize the resulting access tokens. Even server to server calls,
109.
by hirsin 2y ago
I was a bit disappointed that the kwak glass didn't make an appearance here. Although I suppose the treatment of the thick bottom as being better insulating wins out over volume efficiency.
110.
by hirsin 2y ago
It's not my first time seeing this, but I'm struck by some disappointment in the legacy of OSS here. The author clearly understood what was happening enough to post this to the unix SO - but not enough to find the `man` code and g
111.
by hirsin 2y ago
Ooh that's excellent news, thank you! When I'd last checked it was not an option and our account rep had no predictions to offer.
112.
by hirsin 2y ago
Okta barely supports OIDC I'm afraid. We have to use SAML with them because they don't support a reusable app model for OIDC (a "marketplace app" that multiple customers can use). I'd love to add FastFed support for
113.
by hirsin 2y ago
Cheese is a processed food, class 3. "Cheese products" like Kraft and Velveeta are class four ultra processed given the additives and way it's broken down and reformed.
114.
by hirsin 2y ago
This is malpractice, so if you have evidence of this you should consider reporting them. Certainly I've never had this issue with my opticians, but have certainly had plenty of bad Zenni glasses.
115.
by hirsin 2y ago
What recent experience? Do you mean keeping them home from school for covid? I don't think the knock on effects from that are remotely traceable to their immune systems.
116.
by hirsin 2y ago
I was ready to go along with that but uh, it converts down to urethane. Let's maybe let people take the hit on their bread not being so fluffy (and probably more profitable) to avoid extra urethane in our food. Similarly with a sibling
117.
by hirsin 2y ago
I could believe that being in 2.1 as a BCP,but if it's not it's a good idea to add it.
118.
by hirsin 2y ago
/s? The violations in question almost all happened during ZIRP. Capitalism is the culprit here, zero interest loans just meant they had more juice to squeeze from their workers.
119.
by hirsin 2y ago
In the sense of "I refuse to support browsers that only support tls 1.0", definitely. "Just let the user turn off TLS, why do you hate choice" isn't the instant win you might hope it is.
120.
by hirsin 2y ago
I feel like we'll get a (less physically _real_, but much more impactful) run of this "make it to the next day unscathed" adventure in 2038. Only 14 short years...

More ›