woranl

I use client certificate authentication (or mTLS) to access internal services. It requires the client device to present a digital certificate during the TLS handshake, so I don’t need to white list any IP addresses.

What about something like this: A javascript bookmarklet that fetches the html page with SRI, then turn the file into a blobURL and run. Within the html page, all resources are chained with SRI.

OAuth 1.0a requires API requests to be signed.

It would be nice if I can feed an image blob to it, and return the edited image as a blob programmatically - i.e. without the need for an UI to open or download the image. That will help integration/embed it into other apps.

I still remember the Snow Leopard update wiped my drive clean. Talk about most solid software releases Apple ever put out. Period. Yeah right.

https://arstechnica.com/gadgets/2009/10/apple-owns-up-to-odd...

If you have a dedicated bucket just for this and the authentication is just for that bucket, then is it still considered insecure?

I get that a lot, just have to restart that Docker desktop to push the saved changes to volume.

"The problem with Microsoft is they just have no taste. They have no taste and I don't mean that in a small way, I mean that in a big way" - Steve Jobs

Which version of OAuth implementation is at risk? 2.0 and 1.0a are quite different.

I beg to differ. Impact will not be easily felt by businesses if it relies on trickle down consequences. In a capitalistic society, employers and employees don’t share the equal power dynamics.

Tax the companies that deliberately and unnecessarily decided to go against climate policies. Let them feel the direct economic impact for their action. If we are to shield these initiators from the consequence through a series of convoluted economic maneuvers, then nothing will get changed and it’s just business as usual.

What actually happened is the costs and wages are all jacked up and we ended up with inflation. There is no meaningful GHG emissions reduction overall.

In this case, taxing fossil fuel directly won’t reduce emissions. The increased cost to fossil fuel will simply be passed to the consumers. It just adds cost to the affected employees and makes them accountable for bad corporate policies to make a choice between livelihood and climate. The root of the problem is not addressed. The deep pocket should be accountable. It is the unnecessary emissions forced onto the working class that should be discouraged.

I don’t think companies can rightfully claim carbon neutral if they don’t account for the GHG emissions from their forced “working in the office” policy. They should be taxed heavily at the very least.

Freeport buys US natural gas and turns that into LNG for export to Europe. With a plant shutdown, it’s not buying as much natural gas domestically. Hence price in US goes down. Despite still high globally.

Many don’t survive. You mentioned Symfony, Zend used to be equally popular. Not many people use it now.

Frameworks come and go. What is trendy today will be deemed obsolete a few years later. By the time when the community no longer interested in said framework, it will feel like the rug got pulled leaving many projects stranded.

Safe nuclear power is an engineering problem, whereas Russian gas is a geopolitical one. Germany has more faiths in Russia being nice than German engineering. It is a shame.

I followed the instructions and got the confirmation email. But in Admin console under billing > subscription, my subscription is still showing google workspace business starter. Are you seeing the same?

Isn’t this how OAuth 1.0a work? It is more secured for a reason.

https://developer.mastercard.com/blog/why-mastercard-doesnt-...

There is nothing before the first @, and nothing after the last @.