unscaled

26 ms·

181.
by unscaled 2y ago
On the flip-side, it is much more complex to implement than OAuth 2.1, since it mandates a lot of extra standards, some of them very new and with very little to go in the way of library support: DPoP, PAR, private_key_jwt, Dynamic Client Re
182.
by unscaled 2y ago
Eran Hammer (the author of OAuth 1.0 and original editor of the OAuth 2.0 spec) resigned during the early draft specification process and wrote a more detailed criticism[1]. I don't think I agree with every point he makes, but I think
183.
by unscaled 2y ago
OIDC is still far more flexible than I would have liked. It still allows the implicit flow, and it even created a new abominations that didn't exist in OAuth: The Hybrid Flow. If you just want to follow best practices, OAuth 2.1[1] or
184.
by unscaled 2y ago
> OpenID Connect (OIDC) is mostly concerned with authentication. On the other hand, OAuth (or, to be more specific, OAuth v2.0) is concerned with authorization. That's a common refrain and it's quite inaccurate in that it'
185.
by unscaled 2y ago
Not Japanese either, but I have lived and worked in Japan long enough. > From what I understand, the cost of living is very high The cost of living in Japan is not as high as it used to be and lower than many other countries. There is re
186.
by unscaled 2y ago
The term "Hell Joseon" was widely popularized (Joseon is the old name of Korea, and incidentally still the name used for North Korea in Korean, Chinese and Japanese). https://en.wikipedia.org/wiki/Hell_Jose
187.
by unscaled 2y ago
Rural areas and smaller cities. And it's not really a matter of low birthrate at these places. In fact, Tokyo has consistently had the lowest birthrate of all Japanese prefectures over the last few decades. The problem is that young pe
188.
by unscaled 2y ago
These type of UB bugs in Go are a bit of a red herring, since most race conditions arise from improper use of shared mutability, and would still be a problem even in the presence of full memory safety, for instance: https://githu
189.
by unscaled 2y ago
I admit I would have liked it if English language Ph.D candidates had some basic working understanding of Ancient Greek, Latin and Old English to serve as a cornerstone for their studies, but that ship has sailed more than a century ago. If
190.
by unscaled 2y ago
Chinese dictionaries have been sorted in various ways for at least two millennia, but there are some aspects which make alphabetic order sorting simpler: 1. Less ambiguous order: With classic Kangxi radicals for example, it's not alway
191.
by unscaled 2y ago
Alphabet is a very specific thing: it's a small set of letters (usually less than 30) where each letter usually represents a single phoneme. Sometimes a letter might represent a phoneme cluster (such as the letters "x" and
192.
by unscaled 2y ago
The Chinese equivalent would be the "The story of Mr. Shi Eating Lions": https://www.yellowbridge.com/onlinelit/stonelion.php Both rely on intonation (in addition to volume and pauses) for disambiguation, but
193.
by unscaled 2y ago
I think this is specifically more an IME (input method software) issue than a typing one. Japanese has similar "official" numbers (壱, 弐, 参, maybe some of the few cases where modern Japanese is more simplified than Simplified Chine
194.
by unscaled 2y ago
I doubt this was ever a thing at all. I think the author falls to the common nostalgia trap of an imagined "perfect" past that has degraded somehow. It's a trap all human beings easily fall into, so I wouldn't blame him,
195.
by unscaled 2y ago
If we go far back to Latin, the original meaning of "doctor" is, in fact, an education professional and has absolutely nothing to do with medicine. In classical Latin, "doctor" is a teacher or a trainer. In Medieval Lati
196.
by unscaled 2y ago
The book does say "Both orders are commonly used by modern processor types". I'd say this sentence is quite misleading, since it would lead you to believe two falsehoods: 1. That both byte orders are equally prevalent in the
197.
by unscaled 2y ago
4GL were supposed to be even more of that, with more "human-language-like" constructs added to the language to deal with things besides general logic, simple data structures and arithmetic. The author mentions "4GLs" wer
198.
by unscaled 2y ago
The problem is not XML by itself. XML adds a considerable amount of complexity to JSON[1] and when writing security-oriented software complexity matters quite a bit[2]. But this is still a level of complexity that can be managed. Most other
199.
by unscaled 2y ago
PKCE (specifically the S256 method, but that's the one that you're supposed to implement in almost all cases) is by itself a cryptographic method, but there are few points to note here: 1. PKCE relies on very simple cryptography t
200.
by unscaled 2y ago
Yes, the UNIX principle of being simple and doing one thing and one thing well. Make does dependency tracking relatively well (for 1976). But if you just want to run some commands, your shell already does that just as well, without any of t
201.
by unscaled 2y ago
Or just use a simple command which ALL Unix system have: sh. If you're using make a glorified task runner, why don't you just create a scripts/ directory with shell scripts to do whatever you want. This is simpler, cleaner
202.
by unscaled 2y ago
1. MSVC is not installed by default on Windows. 2. nmake is with POSIX make, let alone GNU make. It doesn't even support .PHONY target, which is what you need to replace Just with make. 3. Installing Just with WinGet is simpler, faster
203.
by unscaled 2y ago
It's not just shitty implementations here. The designers of SAML and XMLDSig cannot just blame the developers for implementing their "perfect" spec incorrectly. The blog post above details exactly why XMLDSig can only be impl
204.
by unscaled 2y ago
The original project name was "Monad", but once it was nearing release, it got into the hands of the notorious naming prodigies in Microsoft marketing. Then it got changed to Microsoft Shell (MSH) and finally to Windows PowerShell
205.
by unscaled 2y ago
I'm not sure if we should blame the designers of PowerShell (Jeffrey Snover and his team). If you followed the history of their project, it seemed like they had very good ideas, but it was very hard to get buy-in for anything CLI-orien
206.
by unscaled 2y ago
So are different functions and modules in the standard library of a large batteries-included language like Python, Java or Go. But in fact, most of the traditional utilities you know and love were first implemented by a small team in Bell L
207.
by unscaled 2y ago
Nobody here was saying you should always write your own framework, which is what your engineers were trying to do. Vert.x is a a low-level framework when compared to Spring, so it doesn't provide much organization for your code. This i
208.
by unscaled 2y ago
Go grew too big (in popularity) to be small. Popular languages tend to grow as the userbase grows. This is natural — the language gets used across a wider range of industries, and the programs being written in the language become larger, mo
209.
by unscaled 2y ago
The responses from Ian and the Go fans are not very well-thought. To begin with, zero values were never a great idea. It sounds better than what C does (undefined behavior), but zero values can also hide subtle bugs. The correct approach is
210.
by unscaled 2y ago
I did mention all of this: "[...] but Kotlin still needs to support [platform types] to maintain compatibility with underlying platforms that support unspecified nullability, such as the JVM and JavaScript." To be more accurate, &

More ›