woranl

6 ms·

1.
by woranl 2mo ago
I use client certificate authentication (or mTLS) to access internal services. It requires the client device to present a digital certificate during the TLS handshake, so I don’t need to white list any IP addresses.
2.
by woranl 11mo ago
What about something like this: A javascript bookmarklet that fetches the html page with SRI, then turn the file into a blobURL and run. Within the html page, all resources are chained with SRI.
3.
by woranl 1y ago
OAuth 1.0a requires API requests to be signed.
4.
by woranl 1y ago
It would be nice if I can feed an image blob to it, and return the edited image as a blob programmatically - i.e. without the need for an UI to open or download the image. That will help integration/embed it into other apps.
5.
by woranl 1y ago
I still remember the Snow Leopard update wiped my drive clean. Talk about most solid software releases Apple ever put out. Period. Yeah right. https://arstechnica.com/gadgets/2009/10/apple-owns-up-to-odd...
6.
by woranl 2y ago
If you have a dedicated bucket just for this and the authentication is just for that bucket, then is it still considered insecure?
7.
by woranl 2y ago
I get that a lot, just have to restart that Docker desktop to push the saved changes to volume.
8.
Air Canada's Boeing 777 trails flames on take-off(twitter.com)
36 points by woranl 2y ago|13 comments
9.
The Apple Vision Pro Reinforces the Continuing Problem with VR Adoption(forbes.com)
1 points by woranl 2y ago|3 comments
10.
by woranl 2y ago
"The problem with Microsoft is they just have no taste. They have no taste and I don't mean that in a small way, I mean that in a big way" - Steve Jobs
11.
Google TV channels forced on the homescreen(old.reddit.com)
27 points by woranl 3y ago|20 comments
12.
by woranl 3y ago
Which version of OAuth implementation is at risk? 2.0 and 1.0a are quite different.
13.
by woranl 3y ago
I beg to differ. Impact will not be easily felt by businesses if it relies on trickle down consequences. In a capitalistic society, employers and employees don’t share the equal power dynamics.
14.
by woranl 3y ago
Tax the companies that deliberately and unnecessarily decided to go against climate policies. Let them feel the direct economic impact for their action. If we are to shield these initiators from the consequence through a series of convolute
15.
by woranl 3y ago
What actually happened is the costs and wages are all jacked up and we ended up with inflation. There is no meaningful GHG emissions reduction overall.
16.
by woranl 3y ago
In this case, taxing fossil fuel directly won’t reduce emissions. The increased cost to fossil fuel will simply be passed to the consumers. It just adds cost to the affected employees and makes them accountable for bad corporate policies to
17.
by woranl 3y ago
I don’t think companies can rightfully claim carbon neutral if they don’t account for the GHG emissions from their forced “working in the office” policy. They should be taxed heavily at the very least.
18.
Netflix Canada just got rid of its cheapest ad-free plan without even a heads up(narcity.com)
119 points by woranl 3y ago|99 comments
19.
by woranl 4y ago
Freeport buys US natural gas and turns that into LNG for export to Europe. With a plant shutdown, it’s not buying as much natural gas domestically. Hence price in US goes down. Despite still high globally.
20.
by woranl 4y ago
Many don’t survive. You mentioned Symfony, Zend used to be equally popular. Not many people use it now.
21.
by woranl 4y ago
Frameworks come and go. What is trendy today will be deemed obsolete a few years later. By the time when the community no longer interested in said framework, it will feel like the rug got pulled leaving many projects stranded.
22.
by woranl 4y ago
Safe nuclear power is an engineering problem, whereas Russian gas is a geopolitical one. Germany has more faiths in Russia being nice than German engineering. It is a shame.
23.
by woranl 4y ago
I followed the instructions and got the confirmation email. But in Admin console under billing > subscription, my subscription is still showing google workspace business starter. Are you seeing the same?
24.
by woranl 4y ago
Isn’t this how OAuth 1.0a work? It is more secured for a reason. https://developer.mastercard.com/blog/why-mastercard-doesnt-...
25.
Topaz – the first subsea cable to connect Canada and Asia(blog.google)
1 points by woranl 4y ago|0 comments
26.
ZendFramework 1 – Reborn (2021)(beau-beauchamp.medium.com)
2 points by woranl 5y ago|0 comments
27.
Google Apps for Your Domain is available without cost (2006)(googlepress.blogspot.com)
2 points by woranl 5y ago|0 comments
28.
Google could face class action lawsuit over free G Suite legacy account shutdown(androidpolice.com)
162 points by woranl 5y ago|138 comments
29.
by woranl 5y ago
There is nothing before the first @, and nothing after the last @.
30.
Zero-day in ubiquitous Log4j tool poses a grave threat to the Internet(arstechnica.com)
2 points by woranl 5y ago|0 comments

More ›