CodeLieutenant

8 ms·

1.
Show HN: Native macOS SSH config manager with in-process tunnels(sshmanager.app)
1 points by CodeLieutenant 1mo ago|0 comments
2.
by CodeLieutenant 4mo ago
I'm not, first of all, English is not my first language and I dont see any problems with this sentence. This is not AI, and I'm not lying, but you can believe in whatever you want, I really dont care
3.
by CodeLieutenant 4mo ago
JWT is not a solution for that, any regular token fixes this problem. If you need something like that you can build an auth server, and everybody talks to auth server. I've built these kinds of systems, they are complex and working on
4.
by CodeLieutenant 4mo ago
I've never said JWT is insecure. It's just hard to do it right, even with libraries. Most libraries just give you HERE IS THE SIGNED TOKEN, but everything else is on you. I've implemented JWT many, many times, and I'm re
5.
by CodeLieutenant 4mo ago
You have, and so unknowingly. If you change password, this one triggers, you have to login everywhere. e.g Instagram, Facebook, Github etc.
6.
by CodeLieutenant 4mo ago
Yes you can invalidate them, but comes at the cost that you have to write the machinery yourself, that is the point. If you miss something, that's security issues, and I say you can't just because people are not doing it, dont kno
7.
by CodeLieutenant 4mo ago
Thank you very much, YOU ARE SOMEONE YOU ACTUALLY UNDERSTAND WHAT IM RANTING HERE. You dont need JWT, just use something else and you will be fine, this is the gist of it.
8.
by CodeLieutenant 4mo ago
It's not, it's just something that I've had problem with a long time. Not everything is AI generated, and I hate if someone writes AI articles especially something important like this. These are my general thoughts about it,
9.
by CodeLieutenant 4mo ago
Who is not, X86_64 is an extension to X86. Same thing, no need to nitpick
10.
by CodeLieutenant 4mo ago
You dont need jwt so that you can authenticate API or Mobile app. people were doing exactly that long before JWT was invented.
11.
by CodeLieutenant 4mo ago
You have never used "Log me out from everywhere" feature. I've used it. Also it's for I want to change my password and invalidate all sessions.
12.
by CodeLieutenant 4mo ago
Still the same problem, if your account is compromised, you cannot invalidate the session, same for web, same for native app. You need to store it so that it can be blacklisted.
13.
by CodeLieutenant 4mo ago
How that is possible, when every web framework has a package for handling sessions, and in a secure manner. Rolling everything on your own is time consuming and error prone. I know you should not use library for everything, but this is solv
14.
ScyllaDB PHP Driver: the story so far(dusanmalusev.dev)
1 points by CodeLieutenant 4mo ago|1 comments
15.
JWT is a scam and your app doesn't need it(dusanmalusev.dev)
73 points by CodeLieutenant 4mo ago|65 comments