unscaled

21 ms·

151.
by unscaled 2y ago
The nice thing about null-safety in Kotlin is that it is built-in and it requires no extra annotations or added tooling. Not having @ProxySingletonAbstractJunkFactoryFactoryBean sprinkled all over your code does it ever so slightly more rea
152.
by unscaled 2y ago
Java records do not have a copy method (or with clause or whatever equivalent), and there are no keyword arguments. This makes Java records extremely painful to use for any data has more than 3 fields or so. You could use them together with
153.
by unscaled 2y ago
> thanks for writing this up! i have been looking at switching to PASETO instead of jwt I'm glad to hear that! PASETO would solve all the cryptography issues I've described above. > one thing though - the reason we use asymm
154.
by unscaled 2y ago
Yes, that was my usage of "secure" here. I obviously didn't mean that we should blindly trust SAML implementations. SAML should be avoided if possible, due to inherently complicated implementation. The same goes true for JWT.
155.
by unscaled 2y ago
CSRF is not as big of an issue as it used to be, and when it is an issue it can be solved more easily and comprehensively than XSS: 1. The default value for SameSite attribute is now "Lax" in most browsers. This means that unless
156.
by unscaled 2y ago
There is already a closed ticket about JWT usage. Unfortunately the ticket author did not point at any specific weaknesses besides revocation to which the app author answered: "JWTs aren't innately problematic - they come with the
157.
by unscaled 2y ago
- JWT algorithm is not configurable: good! - JWT Algorithm is RS512: uggh. Huge access tokens, slow validation AND bad security at the same time, boy we must be lucky. - Encrypted JWT when saving sensitive information in cookie? Good start.
158.
by unscaled 2y ago
I think Chomsky's theories became popular in anglophone linguistic circles (and later in the rest of the world) because their math-like structure and close applicability to computer science. They've proven to be useful in some cas
159.
by unscaled 2y ago
Levels of formality exist in most (if not all) natural languages, but the difference between what you've described above and a proper grammatical system is that the grammatical system is standardized, accurate and absolute. There are c
160.
by unscaled 2y ago
Roman Jakobson (probably one of the most important linguists of the 20th century) has famously said: "Languages essentially differ essentially in what they must convey and not in what they can convey". I think this sums up the
161.
by unscaled 2y ago
> When talking about someone or something external to you, Tibetan grammar forces you to express whether what you’re talking about is something you’ve experienced or seen with your own eyes, whether it’s an assumption you’re making, or i
162.
by unscaled 2y ago
That would actually be 230V in most countries to be nitpicky. And the split-phase nature of 240V in the US (or 200V here in Japan) does make it somewhat more exotic. I guess building codes may be more expensive when you've got two hot
163.
by unscaled 2y ago
They might think Shakespeare's story are silly even if they did read it. In fact, there is at least one widely publicized instance where exactly the same thing happened with a culture that wasn't exposed to Shakespeare before: ht
164.
by unscaled 2y ago
Microsoft Access definitely took off. It was certainly more popular than the new crop of no-code/low-code platforms we have today. In the late-90s and early 2000s almost every large company seems to have had Access applications running
165.
by unscaled 2y ago
How is it better than the alternative "we have a set of symbol and we don't know what it means"? I really think there is a merit in saying "with this sample size, every theory we put out has low confidence level". W
166.
by unscaled 2y ago
How is that different from the thousands of different languages that did not have alphabet until recently but then got one created by linguists or missionaries (or often someone who is a little bit of both[1])? Cyril and Methodius (who crea
167.
by unscaled 2y ago
I admit I didn't have time to read this blog post deeply, but it doesn't sound very convincing. It doesn't bring any EVIDENCE that this is an alphabet it just cites other cases of possible alphabets in Mesopotamia and the n
168.
by unscaled 2y ago
This does not make GP incorrect though. It just means we really cannot know for sure how the writing system works until we have enough information to decipher the inscriptions. I don't take beef with the possibility of an earlier alpha
169.
by unscaled 2y ago
Consonants changing their sound based on position is not such an abnormality — that's just basic phonology. This phenomenon (allophony [1]) is found in virtually every language, but it remains a bit obscure to laymen, since it is mostl
170.
by unscaled 2y ago
Go errors cannot be string-typed, since they need to implement the error interface. The reason testing error types sometimes won't work is that the error types themselves may be private to the package where they are defined or that the
171.
by unscaled 2y ago
If a private key is available, the public key can be derived from the private key using scalar multiplication. This is how ecdsa.GenerateKey works by itself - it first generates a private key from the provided random byte stream and then de
172.
by unscaled 2y ago
> We randomly read an extra byte from random streams in various GenerateKey functions (which are not marked like the ones in OP) with MaybeReadByte [2] to avoid having our algorithm locked in You don't seem to do that in ed25519. Ba
173.
by unscaled 2y ago
I think most of the arguments in this essay rely on this single premise: "The second thing I want you to take away is that imperative languages are not inferior to functional ones." There is an implied assumption that async/a
174.
by unscaled 2y ago
> If an employee, for example, decides to put in notice and then half-ass their job until their departure date, a company could actually sue the employee and win. That sounds rather exaggerated. There may have been cases of an employee b
175.
by unscaled 2y ago
I think the real percentage of employees using a resignation agency is probably lower than 18.6%. Internet surveys tend to be less accurate and I don't know the methodology they've used to select the 800 or so participants. But co
176.
by unscaled 2y ago
Japan's economic growth started well before World War 2. In fact, Japan wouldn't have been able to fight WW2 against the US for so long if it wasn't a fully industrialized country by that time. The country was devastated afte
177.
by unscaled 2y ago
Why would you trust that the RSA implementation baked into Java (or anything for that matter), is safe? Java is also implemented by human beings. The Java RSA implementation apparently had a timing side-channel attack vulnerability for many
178.
by unscaled 2y ago
Yes, and you've just demonstrated the problem here. People believe RSA is secure if you just use 2048 bit keys, but the problem with RSA is the key themselves... And the padding scheme. For starters, let's look at the keys. You ne
179.
by unscaled 2y ago
I'm pretty sad to see all these JWT libraries which go out of their way to implement RSA-based algorithms (don't we all love massively-sized tokens? with ancient and hard-to-secure algorithms), why they almost universally fail to
180.
by unscaled 2y ago
Back in 2012, TLS was not enabled everywhere yet. OAuth 1.0 was based on client signatures (just like JAR, DPoP etc., but far simpler to implement) and it was a good fit for its time. One of Eran Hammer's top gripes with the direction

More ›