moyok

4 ms·

1.
by moyok 10y ago
As someone working on a side project that allows people to upload data publically (think something like codepen), what can I do to stay away from trouble like this?
2.
by moyok 10y ago
Could be worth noting that the pay of an entry level scientist or engineer is less than 1,000$ a month, probably making less sense to someone from outside India. It's because of a low cost of living in India.
3.
by moyok 10y ago
If the JWT is as long as the refresh token, then what's the point of having a refresh token? You would then probably need to get new refresh tokens then to make the session last longer. The idea is to make the refresh token last for sa
4.
by moyok 10y ago
The point is that it would reduce the DB/cache load, as the refresh token would need to be verified once in a few minutes or so as opposed to verifying it for every request. Regular requests could be authenticated in the CPU itself wit
5.
by moyok 10y ago
I have personally experienced the security disadvantage you mentioned. I used my Google login to sign into an email client. I immediately realised that the app was going to store all of my email data in their private servers. I quickly went
6.
by moyok 10y ago
The thing that scares me about using JWT is that all security completely relies on the one secret that is used to sign tokens - any person with access to that secret has got potentially unlimited access to the app. They can now impersonate
7.
by moyok 10y ago
For this, you can use refresh tokens and set the JWT expiration to a low interval - say 10 minutes. After every 10 minutes, the JWT expires,authentication fails, and the client uses the refresh token to get a new JWT. To revoke a client, re
8.
by moyok 10y ago
Julia is great too for this kind of work
9.
by moyok 10y ago
I really like go. I just love that it compiles to a native binary and is so easy to distribute. I love the way interfaces work and that types specify interfaces automatically without explicitly specifying that. I love the "strictness&q
10.
by moyok 10y ago
I used to get paid 500€ a month as a developer for a consulting firm, and it was a 12-hours-a-day kind of a job. The firm would then bill its clients 40-60$ for every hour I worked. From one perspective it does seem exploitative. But on the
11.
by moyok 10y ago
That would be 4*26=104 hours right? That seems a good amount of time.
12.
by moyok 10y ago
I have been looking for a solution to the same problem - short projects with no long term commitment for some side income. Maybe this is useful - CodeGophers: https://news.ycombinator.com/item?id=11663869
13.
by moyok 10y ago
This used to happen to me every time I had to go to the airport in the night, and would book some local taxi to do that. The drivers just never cared about the traffic signals in the night. The prevalent attitude seems to be that traffic ru
14.
by moyok 10y ago
I'm in New Delhi, getting 54ms to Bangalore, 84ms to Singapore and 304ms to London.
15.
by moyok 10y ago
Looks like it has been implemented in only Chrome and Opera so far. No Microsoft Edge support, and Firefox support is under discussion. https://www.chromestatus.com/feature/4672634709082112