hirsin

18 ms·

211.
by hirsin 5y ago
I just turned 30, and this is the first time I've felt too old for the Internet. I can't even pretend to make sense of this, but it recalls a "how to work with your new gen Z colleagues" sketch I saw. I was astounded th
212.
by hirsin 5y ago
When at Microsoft I was expected to be on top of Stack Overflow for our product, and there's a whole program where if you contribute to open source you get to vote on where the monthly OSS sponsorship goes. I've linked to WebKit s
213.
by hirsin 5y ago
There's a legitimate engineering issue here too that bears mentioning. Your marketing team will charge ahead with migrating all your product.business.com sites to just product.business You'll get half a year into that migration be
214.
by hirsin 5y ago
The Microsoft-side app owner provides a trust description of the incoming token based on issuer, subject, and audience - https://docs.microsoft.com/en-us/azure/active-directory/deve...
215.
by hirsin 5y ago
Heya. I own Microsoft Oauth2. We use JWTs for our access tokens. (the consumer service uses encrypted tokens, yes). Auth0 just championed the RFC for a standard for JWTs as access tokens too, largely informed by the architect there working
216.
by hirsin 5y ago
BFF is not great for long term security, notably token binding. It's hard enough to bind an artifact to the browser session from the IDP - having each app implement binding passthrough from browser to app to IDP is even worse.
217.
by hirsin 5y ago
Clients are either public or confidential. Confidential clients have a registered credential (cert, secret) that's used to prove that eg your server backend is actually your server backend.
218.
by hirsin 5y ago
Ha, thank you, I was about to inject the pro-Cleveland piece mentioned in your link, so that was educational. How bounteous our country is to have so many second place cities!
219.
by hirsin 5y ago
It certainly seems true of a breed of MBA. When interviewing candidates for PM it's interesting to see the breakdown in people who care about how the product works and those who consider it a widget to be put in a box. "Bring the
220.
by hirsin 5y ago
Google does this at 10/hour as well. Unsure of others. Both Google and Microsoft match cash donations too up to 15k/year - it's a wonderful perk to have after you've basically covered all your living expenses and savings
221.
by hirsin 5y ago
Can confirm, this is popular on my team. Additionally, this should also direct actual dollars to OSM - volunteering for an organization is matched in cash by Microsoft, to the tune of 20-something an hour.
222.
by hirsin 5y ago
Which is odd because Github doesn't use Teams, they're Slack based. As in, if I set up a meeting with my Github counterparts they're late because they had to install Teams.
223.
by hirsin 5y ago
I mean, no, but they do let you sign in with a non Gmail address. (My @microsoft.com is a consumer Google account. Same way my @gmail personal email is a consumer Microsoft account.) Means of contact end up being a pretty useful way of orga
224.
by hirsin 5y ago
Is your loan delimited in dollars or non-stable crypto?
225.
by hirsin 5y ago
They sent those too FWIW, I had just ignored them.
226.
by hirsin 5y ago
Speaking to this myself - I was blown away by Masterclass letting me do this, after I forgot it would renew. I responded to their "hey you've been charged" email with something like "I forgot about this and didn't m
227.
by hirsin 5y ago
You just keep enumerating reasons why as a hypothetical game dev I'd never support NFTs. "Hey, build your platform on movable objects so that customers have no incentive to remain sticky to your game" "Hey, build your in
228.
by hirsin 5y ago
Or when the politician in question releases an edited video and "NFTs" it or signs it with their DID. Then you're just back to trusting a consensus of trusted media disagreeing with them.
229.
by hirsin 5y ago
Password authentication to something running on local network (and therefore can't get a useful TLS cert) is about it, in my experience. Use the PAKE in place of TOFU to trust a self-signed TLS cert in the browser and get rid of cert w
230.
by hirsin 5y ago
Seeing as Gabe viscerally hates Microsoft, I imagine so too. Also, what's the appropriate P/E ratio for a money printer?
231.
by hirsin 5y ago
We've largely broken app architectures in AAD down to spa, hybrid, and "webapp". Where webapp means "a server owns the state, and creates a web page and sends it to your browser". MPA is rough - 110% some engineer
232.
by hirsin 5y ago
The AZs are generally spaced far enough apart to withstand this. While rumor was that this is specifically done with your scenario in mind, it may also be a happy coincidence for grid and other infrastructure resilience.
233.
by hirsin 5y ago
The eye is very calm - and freakily bright. It glows from all directions as the light is reflected down into it, causing all the windows in the house to cast shadows onto the floor, which your brain can quickly realize is wrong! But I expec
234.
by hirsin 5y ago
This varies immensely by the product team. If you file a bug on the AAD protocol docs I have a self-enforced SLA of a business day (or less). And a CVP enforced SLA to solve it in 30 days. And I generally love the folks who do file bugs - t
235.
by hirsin 5y ago
Which gets you back to the problem OP has - trusting that device enough to make it a secure root of trust. Windows lets you do it, so do Android and iOS. But your admin, maybe not (or you're not on windows, which is more likely I guess
236.
by hirsin 5y ago
Hm, that's surprising. I added it as a known error response to the Internet Explorer dev tools in 2015 (inadvertently causing "I'm a teapot" to be localized into 108 languages...). I wonder what "support" means
237.
by hirsin 5y ago
Credit tips are cashed out at the end of the day, generally speaking, so that the "credit tips" are offset by unreported "food cash payment" that sits in your pocket all night. (I believe it also relies on the business u
238.
by hirsin 5y ago
Was surprised to not see Chet's name come up. When we were shipping WSL, I got the team in touch with Chet to give WSL a test run, with no major surprises (a couple edge case bugs, IIRC). I'm bummed I never met him in person while
239.
by hirsin 5y ago
Far from snark, this certainly seems to reinforce the point. We have two levels of response, where one level is called in for more dire circumstances (life or death) and correspondingly has equipment capable of handling a worse situation.
240.
by hirsin 5y ago
As an analogy - DNA is source code. The first arrow is the parser and creates RNA that is a reflection of the DNA. The second arrow (RNA to protein) is the compiler, taking the parsed code (RNA) and generating a program (protein) from it. A

More ›