USDS may only get away with this because their roles are term-limited excepted service, but pretty much everyone comes in as a GS-15-10, regardless of education.
It's not recursive, though -- that would only be true if AOL stood for AIM On-Line. Maybe "nested acronym" is a better term?
It'd be unreasonable to ask someone to perform a hash of those last four digits (how would your mom respond if the bank asked her for the sha256 hash of her card number?), but it could be helpful to ask questions that…
The comment you were responding to was summarizing/editorializing its parent, not presenting new information.
> Do thirtysomething's still use Facebook ironically, or something? Not among my peers. Facebook is seen as a way to communicate with older and tech-challenged relatives. It's in the same category as LinkedIn -- a…
Oof. I wonder if admins can disable push notifications and just fall back to TOTP instead? Though it does sound like that would not be convenient if you have to enter a TOTP every time an RDP connection get interrupted.
Don't you have to provide some information as part of the confirmation? Whenever something requests MFA, it will show a two digit number, and in the Authenticator app, I will be presented with three numbers and can only…
I would say yes, Azure AD is more complex, but in a good way. AWS IAM is interesting in that IAM resources are provisioned within a subscription. You can use IAM as an identity solution, giving everyone a user account…
Rasmus borrowed this distinction from Larry Wall, since PHP was originally implemented in Perl (which also uses + for addition and . for string concatenation). The neat thing about PHP and the + operator is that you can…
I'd echo others and say this boils down to familiarity more than anything else. Identity and authentication is honestly the one area where the popular cloud platforms differ the most. I used to work for AWS and…
I've seen a lot of projects that use a full response cache to capture a view with holes where user-specific information would go and then fill in those holes with some client side JS. I wouldn't call those SPAs, though.…
> I preload basically all the data a user might need at startup This can be a great strategy when you're dealing with bounded data that's not sensitive, but it's important to recognize that this approach is often…
> Can I load ALL the data this user might need to read? Probably. You can do that with HTTP/2 server push on a multi-page app, too. The main difference is that with an SPA, you get to reinvent it all yourself.
> The distinct advantage of an SPA is that, done correctly, cached data lets you render pages instantly. Yeah, but full page caching is a thing, and in my experience, teams writing traditional server-rendered pages are…
The GP was not saying "bad software is bad"; they pointed out a lot of footguns that are introduced by going the SPA route. "More code -> more (opportunities for) bugs" is the truism at play here.
The Bahamanian dollar has a fixed exchange rate of 1 USD, and I believe this has been the case since 1973. The economic mechanism that allows this to persist is also the one that keeps gift certificates denominated in…
I realize it's not hip, but I use OneNote. I used to keep notes + a work diary in markdown in a git repo, but it was difficult to integrate screenshots, and converting a note to a task was always a manual process of…
USDS may only get away with this because their roles are term-limited excepted service, but pretty much everyone comes in as a GS-15-10, regardless of education.
It's not recursive, though -- that would only be true if AOL stood for AIM On-Line. Maybe "nested acronym" is a better term?
It'd be unreasonable to ask someone to perform a hash of those last four digits (how would your mom respond if the bank asked her for the sha256 hash of her card number?), but it could be helpful to ask questions that…
The comment you were responding to was summarizing/editorializing its parent, not presenting new information.
> Do thirtysomething's still use Facebook ironically, or something? Not among my peers. Facebook is seen as a way to communicate with older and tech-challenged relatives. It's in the same category as LinkedIn -- a…
Oof. I wonder if admins can disable push notifications and just fall back to TOTP instead? Though it does sound like that would not be convenient if you have to enter a TOTP every time an RDP connection get interrupted.
Don't you have to provide some information as part of the confirmation? Whenever something requests MFA, it will show a two digit number, and in the Authenticator app, I will be presented with three numbers and can only…
I would say yes, Azure AD is more complex, but in a good way. AWS IAM is interesting in that IAM resources are provisioned within a subscription. You can use IAM as an identity solution, giving everyone a user account…
Rasmus borrowed this distinction from Larry Wall, since PHP was originally implemented in Perl (which also uses + for addition and . for string concatenation). The neat thing about PHP and the + operator is that you can…
I'd echo others and say this boils down to familiarity more than anything else. Identity and authentication is honestly the one area where the popular cloud platforms differ the most. I used to work for AWS and…
I've seen a lot of projects that use a full response cache to capture a view with holes where user-specific information would go and then fill in those holes with some client side JS. I wouldn't call those SPAs, though.…
> I preload basically all the data a user might need at startup This can be a great strategy when you're dealing with bounded data that's not sensitive, but it's important to recognize that this approach is often…
> Can I load ALL the data this user might need to read? Probably. You can do that with HTTP/2 server push on a multi-page app, too. The main difference is that with an SPA, you get to reinvent it all yourself.
> The distinct advantage of an SPA is that, done correctly, cached data lets you render pages instantly. Yeah, but full page caching is a thing, and in my experience, teams writing traditional server-rendered pages are…
The GP was not saying "bad software is bad"; they pointed out a lot of footguns that are introduced by going the SPA route. "More code -> more (opportunities for) bugs" is the truism at play here.
The Bahamanian dollar has a fixed exchange rate of 1 USD, and I believe this has been the case since 1973. The economic mechanism that allows this to persist is also the one that keeps gift certificates denominated in…
I realize it's not hip, but I use OneNote. I used to keep notes + a work diary in markdown in a git repo, but it was difficult to integrate screenshots, and converting a note to a task was always a manual process of…