ucarion

8 ms·

31.
by ucarion 1y ago
Six-digit verification codes for something like a "forgot password" flow are OTPs -- they're only good for one login -- but they are not HOTP/TOTPs. HOTP/TOTP has a registration step, where you copy a server-generat
32.
by ucarion 2y ago
Sorry if asked and answered: can you hand-edit the generated migrations? Like, what if I want to do a create index concurrently or something?
33.
by ucarion 2y ago
I think short options taking a value in the same argv (i.e. `-o=1` stuff) isn't a GNUism mostly because it's backwards-incompatible with POSIX. `=` is a valid getopt option character, `chmod` uses it. That said, I think? 'nlo
34.
by ucarion 2y ago
That makes sense. The weirdness of https://docs.aws.amazon.com/ebs/latest/userguide/ebs-io-char... makes more sense now. Reminds me of DynamoDB capacity units.
35.
by ucarion 2y ago
Really, really great article. The visualization of random writes is very nicely done. On: > Another issue with network-attached storage in the cloud comes in the form of limiting IOPS. Many cloud providers that use this model, including
36.
by ucarion 2y ago
Such a cool website. In case anyone else was looking for it, this article from the same author covers the more algorithm-y question of how a camera body decides to actually use these motors when you press the "focus" button: http
37.
by ucarion 2y ago
You could rent a car out of Auxerre, but don't count on being able to get by in rural l'Yonne without one.
38.
by ucarion 2y ago
What does "cooked" mode mean in the context of this article?
39.
by ucarion 2y ago
I didn't know RFCs are being written with xml2rfc directly anymore; I was under the impression most work was now happening through https://github.com/cabo/kramdown-rfc , which lets you hand-write markdown instead o
40.
by ucarion 2y ago
The ruling comes down to the definition of "property", and the court finds that Tornado Cash's immutable smart contracts aren't property. Treasury can only sanction property under the law. Tornado is a tool that nobody c
41.
by ucarion 2y ago
Almost every calendar system has a similar trick: https://en.wikipedia.org/wiki/Intercalation_(timekeeping) The west inherits from the Romans, and Julius Caesar standardized away the Roman intercalary month by glomming
42.
by ucarion 2y ago
tzdb often has the answer, and it's almost always because everyone used to do local solar time (i.e. on average, the sun is at the top of the sky at noon) until convenience (i.e. train and plane schedules) required an offset friendlier
43.
by ucarion 2y ago
I mention Asia/Kathmandu instead of Pacific/Chatham or Australia/Eucla mostly because it's not one of those "exotic birds / kangaroos outnumber humans 5:1" kinds of places.
44.
by ucarion 2y ago
If you go by the wtf-ness of the comments on a tz, Asia/Riyadh has gotta be up there. But contemporarily it behaves as `<+03>-3`, which is vanilla.
45.
by ucarion 2y ago
You should read Matt Levine's Money Stuff! I think his is the tone I roughly was going for here.
46.
by ucarion 2y ago
Thanks! The irony is not missed on me. I think I have the dates internally in the article metadata, just didn't set up my Hugo templates to display it. TODO!
47.
by ucarion 2y ago
In theory, this can be expressed in tzdb. Obviously, it will cause problems. The only really important assumption not obviously present in TZif's data format is that when you go from a local time to a UTC time, there can only be up to
48.
by ucarion 2y ago
Japan does something similar in the context of things that close after midnight: https://en.wikipedia.org/wiki/Date_and_time_notation_in_Japa... FWIW, the English-speaking world used to switch years on March 25: https
49.
by ucarion 2y ago
This is really neat! Separately, I'm a little skeptical of the tzdb's endeavor of even thinking about pre-Unix-epoch stuff. The bug-to-utility ratio of that stuff doesn't seem to be there. `zic` is where most of the ugly gnar
50.
by ucarion 2y ago
I'm not sure if being from the north of France changes things, but I think the Renaud song is much more familiar to folks I know than the wind.
51.
by ucarion 2y ago
I think this is the website for the FBI's sting? https://nexfundai.com/ I find it interesting that they made up both "NexFundAI" and "NextFundAI" (with a t) with some sort of made-up relationship
52.
by ucarion 2y ago
For anyone curious about the real critique of utilitarianism behind the joke, it's called a utility monster: https://en.wikipedia.org/wiki/Utility_monster
53.
by ucarion 2y ago
Oh don't get me wrong at all -- deprovisioning is huge indeed! I'm not going to misleadingly edit my initial comment, and your comment is fair. I said "just" when I should have said "precisely". As in, I was al
54.
by ucarion 2y ago
What I'm saying is you can implement the functionality of the parameter -- i.e., arbitrary data that survives a round-trip through a SAML login -- without literally using RelayState. For example, the ID of a SAML `AuthnRequest` always
55.
by ucarion 2y ago
That's a very fair point! I'm going to add mention of SCIM / directory sync. I feel like it's easiest to stick that into the CISO section, since a big part of SCIM is just the deprovisioning aspect? And yeah, you're
56.
by ucarion 2y ago
Yeah, I didn't even mention the other bindings (HTTP-Redirect, Artifact, etc.) because they're not widely supported. Only SAML's HTTP-POST binding enjoys "every IDP supports this exact protocol" status. FWIW, the fo
57.
by ucarion 2y ago
FWIW back in the day, samltest.id was a dummy IDP, whereas sptest.iamshowcase.com is a dummy SP. You could hook these two up to each other and see the whole flow.
58.
by ucarion 2y ago
I'm working on that at the instant (I wrote this article). Sadly the samltest.id squatter wants at least $15k, super lame. dummyidp.com it is!
59.
by ucarion 2y ago
You'll be pleased to know that we're not making a ton of progress on the "split things over N docs" front. In recent years IETF has given us SCIM (which is sort of like "offline SAML") which is 3 RFCs (goals, s
60.
Ruby-SAML pwned by XML signature wrapping attacks(ssoready.com)
166 points by ucarion 2y ago|91 comments

More ›