nethsix

This is my earnest effort to write an intro to OAuth that is aimed at being useful to CEOs, engineering VPs, sales, etc. Any feedback is very much appreciated!

For your case, you do not need JWT.

Stateless JWT is useful in the scenario where one server is capable of authenticating a user (through password, social login, one-time password, etc.), and a different server holds resources that the user is trying to access.

The server doing the authentication will issue a stateless JWT with all the user credentials cryptographically signed, so that the user can pass the JWT to the server holding the resource to be granted access, assuming that server trusts the authentication server to perform authentication correctly.

Stateless JWT is useful here because the server holding the resources can verify the credentials of the user without contacting the authentication server.

Regarding OAuth, there are 2 sides to it. You can become an OAuth provider, which I reckon you are not interested to be. What you may be interested is to use OAuth to enable users of OAuth providers like Facebook, Twitter, .etc, to access your service, so that you minimize what you have to develop in terms of user management, i.e., you don't have to worry about user creation, email verification, password resets, etc., because all those have been performed by the OAuth providers.

I believe passport.js allows you to use OAuth to allow OAuth providers' users to access your service. passport.js may be a backend-base solution so you have to be somewhat familiar with OAuth to get started.

Alternatively take a look a https://oauth.io, which has a front-end based solution; I am not saying a front-end based solution is better, but rather it's easier to understand for someone starting out. Moreover they have JS fiddles that you can instantly play around with.

Check out the JS fiddle for creating a 'Login with Github' for your website here in just a couple of lines of Javascript: https://jsfiddle.net/dg9h7dse/1/

There is a full explanation of what the code is doing here: https://coderwall.com/p/sjbwcq/javascript-github-social-logi...

It may be but probably not that soon since there are a lot of countries not on smartphones, some industries have multiple dominant players, and users may not want to deal with an app from each player, e.g., car dealers, etc.

Yeah. Every single action is tracked these days, and almost every channel is utilized as a marketing attempting; some channels are just very well disguised or they do provide some value/amusement that they are sort of welcome or at least tolerable.

I wrote this to supplement the original presentation slides (http://www.slideshare.net/KhorSoonHin/gentlest-introduction-...) and video (https://youtu.be/dYhrCUFN0eM) at a Tensorflow meetup because the slides and video got more love than I ever expected. Enjoy and let me know what I didn't do well.

Basically for people who are interested to understand Relay/GraphQL's global node ID covers: * What is the mysterious NodeDefinition interface? * What is Node ID? * When is it created? * When is it used?

Thanks. You would definitely make the great colleague/leader, and I would hire you!

Start using Relay framework on Rails 4.2/Ruby >= 2.1, with this starter-kit.

There are 2 perspectives to be aware of: theirs & yours.

You are replacing something they wrote. That in a way is saying what they wrote is obsolete.

Ask yourself why are you and other new members are working on this project; for your own advancement or for the good of the company. If the reason is the former, there's going to be a big ego-clash.

Look for win-win: * The original team wrote the system and have learned valuable lessons from it over time. Ask them if they could write it now using current tools, how would they improve. Sell them the vision that the success of the project depends on their knowledge, and they can learn new tools, language, patterns, from the new members. * The newer members can bring new ideas (backend, UI, etc). Sell them the vision that the success of the project depends on the new skill set that they bring.

Since you cannot change the original team composition, balance it by choosing the new team carefully, e.g., choose people who are goal-driven, and result-oriented; they care more about getting things done then throwing their weight around.

Use Facebook's plain vanilla Flux implementation on Rails if you are worried about specification conformance, and future support of other gem-based Flux implementation.

The subjective nature of gender discrimination/sexual harassment makes it difficult for not only the law/helpline administrator, but even the victims themselves to ascertain its occurrence. The lack of genuine support on offer to the victims to voice out perhaps is the missing pieces. Thoughts?

I'm not arguing for either but trying to state a point. Putting a side-by-side feature list face-off showing you have more features than the incumbent does not in anyway, prove that you are not a rip off. In fact, it probably proves that you are and just trying to outdo the incumbent. There would be little to compare if both were playing in a different area.

Perhaps nothing can be truly 'open' to contribution given that everybody has a different opinion and everybody often believes that they are right. Probably a huge number of newbies who tried posting something on Hacker News, will also feel that HN is closed and unfriendly as well. Is it really unfriendly or just a resource-management issue; it may be better not be perfect but can satisfy a large audience.

Perhaps, startups have been reading Hacker News/Y-combinator too much? ;-) (http://ycombinator.com/howtoapply.html). Y-combinator applicants are encouraged to make such associations to enable the evaluators to quickly grasp what they are doing.

What about if people express their commitment to actions, e.g., boycotts, etc., if SOPA goes ahead. I created a simple site where people can just send one-liner email to register their commitment to action. Kindly see http://news.ycombinator.com/item?id=3243052.

I cobbled this together in a few hours. Hope it can serve some purpose. Apologize for any bugs, inconveniences etc.

If you down-voted something perhaps you'd care to give your thoughts, at least, instead of hiding out there.

Perhaps, the best way to fight against someone stealing your idea is to release your code as open source.

Yes. With Google no longer providing search result API (not even paid version, the last I checked) people are turning to BOSS/Bing/(anything else?)

Not sure how many of those were the 'Lite' (free version). My guess is that once Angry Birds started getting rave reviews, lots of people started downloading the Lite version. Still that is a lot of downloads =)

I live in Japan and I find that Japanese websites are also 'cluttered'.

Perhaps Klout will become the killer-app to help educate the public on the 'dangers' of putting too much information the Internet. It is time people become more wary of 'free' things too.

Not sure how many people become immune to such enticing headlines after a while and how these may undermine a domain branding, e.g., people may stop clicking on search results pointing to that domain.

I am a researcher and I publish papers...for the record. I am not proud of every paper that I publish. For those uninitiated with the research industry, take conferences (in general, not referring to this particular one), etc. with a pinch of salt. In some ways, conferences are the main mechanism for the organizing body to make money/achieve sustenance, committee members to embellish their resumes, researchers to add to their publication list while milking taxing-payers/profits (depending on her affiliation) to go on 'vacation' to present.

I think that is a good way to approach anything in life. Prepare hard for it but accept that there'll always be people smarter/better than you. That way, you will worry less about bombing out during presentations, and be more receptive to constructive criticisms.

Google and Facebook didn't get it wrong, they just don't want pseudonyms or at least limit each person so they can conquer/monetize the identity space. Two examples, (1) online commerce trust Google and Facebook identities sufficiently to allow them to purchase, similarly some poll sites can trust those identities, i.e., a single person can't vote a X times but creating X fake identities.

I suppose this is more of image sharpening rather than reconstruction. Is this very different from technology on cameras/phones that tries to reduce of photo blurness due to unsteady hands?

There are lots of seasonal and limited edition candies in Japan that I think is difficult to find elsewhere.

A TechCrunch article. I renamed the article because I felt the original was a bit of hype. Nonetheless, I found it interesting because the guy kept believing and built the company and survived business terrain change over the years. Hope it spur some people on.

My opinion is that applying for funding should merely be something to bring 'excitement' to an otherwise tough' monotonous' life of an entrepreneur.

Whether you get funded does not only depend on the ingenuity of your idea but a match between you and the funder.

You should continue working because you believe in your idea (to some extent but over-believing is unhealthy) and simply because what else would you do with your spare time =)