xvinci

7 ms·

31.
by xvinci 3y ago
Maybe I am really missing something seeing how other comments didnt mention it, but is this REALLY explaining how OIDC works? I don't see it.
32.
by xvinci 3y ago
While you are right, using those autopilots requires a license which at least in europe is waaaaaaaay harder and expensive to get. Hell I am fine with people using something called Autopilot in the car if you get instructed on how-to, but y
33.
by xvinci 3y ago
As a passionate competitive gamer since 20+ years I see a 100% parallel to the "Cheating" problem in PC games. There is a HUGE market there and a never-ending game of cat and mouse between cheat developers and anti-cheat developer
34.
by xvinci 3y ago
I think they have, they are just not that well known. E.g. SQL Server - https://learn.microsoft.com/en-us/sql/relational-databases/i... - you can also find quite a lot of papers by microsoft employees on the
35.
by xvinci 3y ago
I mean there is, you send out randomized credentials "please use these for your next login". And if someone lost access to their e-mail address, the proof of ownership would be the same as it is today (aka sending receipts, keys,
36.
by xvinci 3y ago
Since you seem to be from citusdata: I used cstore_fdw 2 - 3 years back and at least when paired with TPC-H it was horrendously broken for both small (10 gig) and large (100 gig) datasets. It has been integrated into some other product by t
37.
Cypress E2E test automation breaks open-source integration for “security”
6 points by xvinci 3y ago|0 comments
38.
by xvinci 3y ago
Statelessnes is really a prerequisite for proper horizontal scaling (with small exceptions), so best practices for e.g. spring boot web applications will lead to a stateless architecture as well. Same goes for event-driven -> amqp, mqtt
39.
by xvinci 3y ago
I mean, yeah you are right calling those out, but there is a plethora of vulnerable drivers from e.g. mainboard and GPU manufacturers, very often installed by default on new machines. I would distinguish between an Anti-Cheat actively doing
40.
by xvinci 4y ago
The old saying goes (basically the same as with Malware vs Anti-Malware): Whoever loads first, wins. So you are right in theory, you could intercept any call that would allow you to detect malicious behaviour. That being said two things: 1.
41.
by xvinci 4y ago
Everything that goes is common sadly. This includes: - Reading from and writing to memory (either by direct means provided by windows, by custom drivers, or by exploiting installed vulnerable drivers to bypass secure boot and such) - Readin
42.
by xvinci 4y ago
Piracy is not Cheating (or rather it is, but a different kind: cheating the developer out of his money):)
43.
Rovio delists original Angry Birds from PlayStore because it's still too popular(twitter.com)
193 points by xvinci 4y ago|247 comments
44.
by xvinci 4y ago
Creating empty git commits and pushing them to a PR might be all you need to scratch that “let’s just try it once more, without changing anything” itch. Please just don't. If your CI / CD pipelines do not offer the option to ret
45.
by xvinci 4y ago
Except I've seen too many spaghetti code craps in production to actually recommend this. There is a plethora of reasons why colleagues (or even you) will end up not waiting until code is production ready (e.g.: A new nice task comes in
46.
by xvinci 4y ago
I think you got it wrong: Buying hardware and setting it up and keeping it running, just as described, is / was a high barrier of entry cost-wise (Not to mention the fact that people used to actually running hardware in a data center a
47.
by xvinci 4y ago
Can anyone enlighten me on Some secrets don’t belong in your password manager. Things like backup private keys, 2FS recovery keys, wallet keys, safe combinations, treasure maps, etc. I am a 1password user and am aware that I am trust
48.
by xvinci 4y ago
It was more about the and use it in another without those servers needing to consult a central service. part. Unless you take care of key distribution yourself (like another poster wrote), this consultation of a central service has t
49.
by xvinci 4y ago
Unless I misread I consider this statement not true or contradictory: it has all the information the server needs except the signing keys, so the server doesn't need to store this information server-side. This means that users can
50.
by xvinci 4y ago
When picking a car I wanted as much safety as possible for myself but also especially my kid and the obvious choice was a SUV (Qashqai in my case). I am aware of the dangers of a big car to others and try to drive responsible, but self-pres
51.
by xvinci 4y ago
Depends on what you mean by "proxying". Everything you do (serving a Single-Page Application or requesting HN by backend, processing it's HTML and sending the content to your own frontend) will take traffic away from news.yco
52.
by xvinci 4y ago
To state the blindingly obvious: It's a perfectly valid term for what OP / the github repo refers to and your response just goes on to show that you probably don't know much about these things. Let me spoil it to you: The clo
53.
by xvinci 4y ago
(what other options are there LOL) It is a hot topic, here are a few: IONOS - https://cloud.ionos.com/ Onep Telekom Cloud - https://open-telekom-cloud.com/en But if you want to do scale in Europe you have t
54.
by xvinci 5y ago
I meant the overhead - in the case of two services - of managing and developing two sets of schemas and a mechanism of data exchange (be it rest apis or queues. both come with a producing and a consuming side). There are many reasons where
55.
by xvinci 5y ago
> "Direct DB reads, outside the domain of each service, is a bad idea and it will be obvious to you why on the first schema change. Please don't be lazy and just say no to this." Good read, but I am not really a fan of tha