HN user

codingjoe

78 karma

[ my public key: https://keybase.io/codingjoe; my proof: https://keybase.io/codingjoe/sigs/6piNbb5ObZtovsKmYGPsS7BkJ7u6bMwBuZJUYCoDsAQ ]

Posts3
Comments27
View on HN
Organic Maps 17 days ago

Yes, you can toggle a setting to use the network colors. I use it mostly for hiking. The UI is a learning curve, 100%, I am curious to check another tool

Sadly this isn't limited to Australia. RCS the SMS successor does not consider free peering. I believe security is used as an excuse to create a closed ecosystem that surfaces new businesses and therefore innovation.

For a community of builders, like this, any barrier to entry will be problem, however we'll intend.

[dead] 1 month ago

Today, few realize that Instagram was originally a Django app. But is Django still relevant today? For the task, is it still the best framework?

If it sounds illegal, it usually is. Tricking people into buying things usually doesn't hold up in court. However, few cases ever make it there and that's what companies like these successfully gamble on.

Beautiful README badges to honor your GitHub sponsors.

I created this to show some respect and figured others might like it too :)

It's runny on a Raspberry Pi 5, so no expensive Vercel invoice, no worries. :P

... and I'd still be very happy for them. Some money, is better than none.

Besides, supply chain payments are already a thing and help maintainers like myself already while providing security benefits for corporations.

Empty words. Without changes to anti-circumvention laws, safe harbor commitments for security researchers and serious funding for foss projects nothing is going to change.

Ok, then for everyone. Don't save tokens in a database. Selects are vulnerable to timing attacks. You want a token to include a id and a signature. The ID is used to look up the scope or user attached to the token, while the signature is recreated from the ID, the server secret and some salt. The resulting signature is double checked with the provided signature with a time constant comparison.

An attacker will be able to identify valid keys, but won't be able to sign them.

You can either split the values like aws or join them with a separator.

Good idea with the slug though, makes it easier to report leaked tokens to the issuer.