niftich

12 ms·

31.
by niftich 6y ago
According to WHOIS, w3c.org is from 1997 while w3.org is from 1994. A message from a W3C staff member on a W3C mailing list on 1999-06-21 mentions [1] that w3c.org should redirect to the corresponding page at w3.org, and the latter is consi
32.
by niftich 6y ago
Fielding's thesis [1] talks about this. Here's some selected quotes: 6.2.1 "(...) The definition of resource in REST is based on a simple premise: identifiers should change as infrequently as possible. Because the Web uses e
33.
by niftich 6y ago
This is one of those classic, foundational documents about the Web. But it's rarely followed. Tool use has come to dominate the form that URIs take; tools are used both for delegation and to absolve humans from crafting URIs by hand. S
34.
by niftich 6y ago
This basically exists, and it's called ISO 8601. But the scope of ISO 8601 isn't programming languages and APIs, but data models and their representations. A subset of ISO 8601 forms the basis of RFC 3339. Official copies of ISO 8
35.
by niftich 6y ago
In 2005, Ed Russell and Frazer Jarvis calculated 5,472,730,538 "essentially different" 9x9 grids [1][2], once they've excluded valid grids that can be derived from another valid grid using relabelling, various permutations, r
36.
by niftich 6y ago
SipHash was specifically designed to be resistant to hash flooding attacks. FWIW, the SMHasher test suite takes the view [1] that defense against hash flooding attacks is a concern for the hash table's collision resolution method, whic
37.
by niftich 6y ago
Depends on your use-case and the tradeoffs you're willing to make. SHA1 is slower than the the top finishers of the SMHasher suite [1], even if it's hardware-accelerated. Meanwhile, SHA256 and later are currently considered to be
38.
by niftich 6y ago
This is a hash designed for non-cryptographic use, like in hash tables or bloom filters. You can tell by their small output size, which greatly reduces the cost of a brute-force collision search. It's also in the linked readme. Hash fu
39.
by niftich 6y ago
This works sometimes. Like, the article notes, it worked for the iPod. For the iPad, it landed much softer than its predecessors, even if they still made a killing on sales. The large format was awkward to hold as a content consumption devi
40.
by niftich 6y ago
He's speaking from experience. But, if your circumstances aren't exactly the same, the outcome may be different. Credits pages in software, accessible from the main UI, used to be very common, and having names there -- or embedded
41.
by niftich 6y ago
With Spring Core (the DI container) the only parts of your code that have to depend on Spring are the config and your entry-point. You can choose to import facade-style Spring libraries, and write your code against them -- like Spring JDB
42.
by niftich 6y ago
Spring class names are the stuff of legend, but most of those classes you wouldn't deliberately use in your application. They're there so Spring can layer up its own functionality feature by feature. The only problematic part ab
43.
by niftich 6y ago
See document FCC-20-48 [1] for full text. Some quotes: "Our decision authorizes Ligado to deploy a low-power terrestrial nationwide network in the 1526-1536 MHz, 1627.5-1637.5 MHz, and 1646.5-1656.5 MHz band (...)" "Our ac
44.
by niftich 6y ago
As posted by someone downthread [1], there's an ongoing effort to update the OAuth 2.0 spec with changes since, lessons learned, and best practices [2], in what's currently being called OAuth 2.1. Some more rationale and resources
45.
by niftich 6y ago
OIDC is for authentication and profile information. The standard claims refer to each field of profile information [1]. It doesn't include any domain-specific operations like your examples. [1] https://openid.net/specs&
46.
by niftich 6y ago
A drop-in component so your product can do what exactly? To be an OIDC Relying Party [1]? To be an OIDC Provider [1]? To be an OAuth2 client [2]? Keep in mind, being an OAuth2 client is probably not useful by itself -- you'll have to p
47.
by niftich 6y ago
Client registration is so that (1) the authorization server can obtain the client type (confidential or public), then, (2) if appropriate, obtain the client's Redirection Endpoint URI, so that the authorization server's authorizat
48.
by niftich 6y ago
Much of the deployment of OAuth2 was a shitshow, because early on, there was a huge debate about OAuth1 vs OAuth2, and the concepts and terminology used in the OAuth2 spec exceeded the mental load of people who were simply looking for a qui
49.
by niftich 6y ago
In this situation, their guidance says to embed the secret, because in this context it's obviously not a secret. Here's the current page [1]; here's the earliest Archive.org snapshot of its one-earlier predecessor page from 2
50.
by niftich 6y ago
Lake Agassiz and Lake Missoula were glacier-dammed lakes that periodically overflowed the lowest sill of their basins to cause massive floods. Lake Agassiz is thought to be responsible for the deeply incised Minnesota River valley. The shif
51.
by niftich 7y ago
The ultimate, yet-to-be-realized killer app of a tablet would be to act as large drawing, editing, and writing surface in augmented reality -- and a cutaway-plane viewer. Currently, it's mostly used (1) to consume content, (2) as a lar
52.
by niftich 7y ago
While they have competent infrastructure, an IaaS offering needs a platform whose capabilities are more complex than one where you're running only first-party applications. And even if they spent the time and effort, they'd be ent
53.
by niftich 7y ago
> I don't suppose it will persuade you that String (and many other classes) are in the Java.lang package. From the prior source [1], immediately below the previously-quoted text: "Trial Exhibit 980, The Java Application Progr
54.
by niftich 7y ago
IBM sued Corona Data Systems, and Corona settled [1]. IBM sued Handwell Corporation, and Handwell settled [1]. IBM sued Eagle Computer Inc., and Eagle settled [2]. [1] https://books.google.com/books?id=gy4EAAAAMBAJ&lpg=P
55.
by niftich 7y ago
Here's some additional context in from a lower court: Oracle Am., Inc. v. Google Inc., No. C 10-03561 WHA (N.D. Cal. Jun. 8, 2016) [1]: "Oracle has portrayed the Java programming language as distinct from the Java API library, ins
56.
by niftich 7y ago
In 886 F.3d 1179 (2018) [1][2], the Fed. Cir. noted that: "62 classes (and some of their methods), spread across three packages within the Java API library, must be used. Otherwise the language itself will fail." "On remand,
57.
by niftich 7y ago
Instead, once your product grows popular enough, they'll just offer a managed, hosted service with a compatible API.
58.
by niftich 7y ago
The official avif github [1] references Kagami/avif.js [2]. It's intended as a server-side component to be installed, and uses service workers to on-the-fly repack AVIF images as AV1 videos. The code is licensed CC0, and is easy t
59.
by niftich 7y ago
I am not a lawyer, and I realize there's a fine line between genuine concern and speading FUD, but in the spring of 2019 I looked into the patent situation around the HEIF container itself [1] -- the container upon which AVIF builds --
60.
by niftich 7y ago
From English Wikipedia article "Advanced Video Coding", with cited sources: "The commercial use of patented H.264 technologies requires the payment of royalties to MPEG LA and other patent owners. MPEG LA has allowed the fre

More ›