hirsin

14 ms·

181.
by hirsin 3y ago
The rest of the paragraph discusses "what happens when it ignores type?", so I think that's where they were going with that?
182.
by hirsin 3y ago
Only Facebook has a more obviously concentrated revenue stream - but Google is a close second. https://www.visualcapitalist.com/how-tech-giants-make-billio... is enlightening.
183.
Regarding AI assisted content in Firmament(cyan.com)
2 points by hirsin 3y ago|0 comments
184.
by hirsin 3y ago
Token binding was the closest we had - still lets a compromised endpoint in the right position steal and use the tokens from that device, but it's at least not persistent.
185.
by hirsin 3y ago
Which only worked if you had both phones working at the same time... I'd bet a sizable portion of new phone enablements are due to losing the previous phone irrevocably.
186.
by hirsin 4y ago
The extra steps are the ones between them being a free person and an inmate.
187.
by hirsin 4y ago
I get a screening in India when I visit some family there. Full blood work, you call in the morning, they come by the house and draw it, results in the next morning. It's faster and cheaper to do that, including the flights, than to tr
188.
by hirsin 4y ago
The pixel 6 modem has a bunch of known issues, to my understanding (certainly that's been the consensus when I've looked up solutions to my Pixel not getting a signal in the middle of Seattle until I toggle airplane mode on and of
189.
by hirsin 4y ago
Putting your opponent on the record as against something is a strategy, and a perfectly valid one. Whether you out them on the record over culture war stuff, things your base cares about, or better, things their base cares about, is what ma
190.
by hirsin 4y ago
That's fantastic debt though, at presumably low interest rates. A dollar in my pocket today is worth way more than a dollar in debt at 3.0% interest or less. You can't subtract debt from cash on hand and get a usable value, they&
191.
by hirsin 4y ago
Notably, per the Alaska agent I spoke to about my cancelled Alaska flight, Delta doesn't let other airlines rebook on Delta flights. That may just be an Alaska/Delta thing but it's not obvious full reciprocity.
192.
by hirsin 4y ago
AAD without all the security features (p1/p2) is free, with some limitations you'll quickly hit if using as your main directory. https://jumpcloud.com/blog/understanding-aad-pricing-free is a decent overview
193.
by hirsin 4y ago
Sadly Dinorwig is closed with no sign of reopening soon. It sounds incredible to visit!
194.
by hirsin 4y ago
That's not a trust statement, and it's not reliable as a proof. You can reliably tell you've seen this authenticator before, but that doesn't solve the problem being described here
195.
by hirsin 4y ago
This is what Intune and similar provide, but you need some existing, secure registry of devices before this works. Cross device webauthn is the better solution here but it's still vulnerable to the oauth phishing called out here.
196.
by hirsin 4y ago
Here's some folks taking emojis very seriously. Including the poop emoji face. It's a good read - https://www.unicode.org/L2/L2017/17393-wg2-emoji-feedback.pd... (pdf)
197.
by hirsin 4y ago
Eh? Apple and orange I think. They're uncomfortable picking up the tab for group-peers (not income-peers) because it's uncomfortable for everyone involved. The coffee guy was just a bit nutty, sounds like, and not really related t
198.
by hirsin 4y ago
The point is that "you can invert the rewards signal on a Tesla and turn it into a people mower" isn't exactly a dunk on the point above them. We're not worried about Tesla having (someday accurate) people detection beca
199.
by hirsin 4y ago
Those things are not built for the express purpose of killing people. There is no manual button on the outside of the xray marked "kill patient" that's at risk of being automated away. No "aim for pedestrians" butto
200.
by hirsin 4y ago
Not to mention that even the data being requested and stored is also organizationally sensitivite if leaked. Everyone's got some problem customer emoji or frustration with their cloud provider in there, which maybe wouldn't look g
201.
by hirsin 4y ago
Stripe was already known (in my circles at least) for being a ~grinder~ long hours type place. Not neccesarily because they're understaffed but because it was a work work work culture.
202.
by hirsin 4y ago
It's tricky when the whole chunk of data is only signed over once by your issuer - you can't go back to the government for a new token every time you want to give out your first name instead of first and last name. This is where S
203.
by hirsin 4y ago
Yep,proof of possession - the ID contains a public key, you own the matching private key. You send them the ID with a matching assertion ("This is meant for cheapboozeforstudents.com"), signed by your private key. The website can&
204.
by hirsin 4y ago
"Act on your behalf" is a common (and not great) way of indicating that the app will do <above permissions> wearing your nametag. It doesn't give the app blanket permissions against your account, just that it gets to d
205.
by hirsin 4y ago
This is not supported for fine-grained PATs. Using apps for this, which have rotation as a requirement, is preferred.
206.
by hirsin 4y ago
That's exactly what they are describing - the push notification to the phone _that the user has lost_.
207.
by hirsin 4y ago
Note that adding your domain to the PSL changes how browsers interact with it, so don't do it lightly. In particular, no more cookies for the parent domain.
208.
by hirsin 4y ago
Yes, it means that you have a tenant in AAD that's usable for signing into SaaS products and Office. May not have many or any users in it, but it exists.
209.
by hirsin 4y ago
Book banning is the right's equivalent of deplatforming, with the bonus that they are getting the government to do it, not just a private company. They do take it further though, with banning of talking about how to get an abortion, ba
210.
by hirsin 4y ago
Curious why you say this isn't suitable for authN? This seems maximally suited for processes where changes (or more likely, additions) in a split out system (authn, authz) may immediately rely on behavior or interface changes elsewhere

More ›