975 karma · joined May 19, 2014
When I read about JWT's I saw the alg fields to a simple indicator of the algorithm being used on the JWT, not that it is allowing the token to select whatever algorithm it wants for the server to run. Granted, this is a semantic difference, but if you treat the alg field as such it then becomes the servers choice of what algorithms to support. The practical solution is simple: Only support one algorithm, and if the token's alg does not match what the server is expecting, do not authorize. Sure this is a weakness in the JWT spec, but the real underlying issue is dev's not understanding the security mechanisms and libraries they are deploying. That is bad news no matter what tech they are using.
Why do you think that Uber has this kind of reputation AND has to say these things, other companies don't write these memos. These types of things are written by companies whose culture breeds contempt of these societal rules. That is why they need to 'remind' people.
All of these things are certainly in the employment agreements and HR guidelines at Uber, this memo is NOT the first time any of these employees have gotten this 'advice'. Further, but putting this content in the memo you are doing a couple things: First, setting an expectation that sex will occur at this company endorsed function; and two, second you are essentially saying that your employees have had problems with this historically. How do you think that makes you employees who are not interested in this type of thing feel? What about those that just want to have a good time with their coworkers without being propositioned by every horny drunkard in the room?
The idea of reinvesting money domestically is good in theory, but how do you actually ensure that the money stays here? Is Apple Et Al. going to build, staff and operate these factories with local labour? Or, are they going to sub-contract out to the lowest domestic bidder who will just end up outsourcing the work overseas where the factories and labour is already established and cheaper?
Subjective advantages which are not exclusive nor intrinsic to ride sharing services. They can be replicated by anyone in the industry if they are deemed as valuable to their business. I never denied they don't add value (for some), I'm saying that it is the hugely undercut pricing that is primarily driving this trend.
> p.s., why do people like you want to hate on ride sharing services so much? Is it just that nothing can ever be good enough in your mind?
Wow, generalize much? Who is "people like you" exactly? The answer to you question is pretty obvious if you put the snark aside: My problem is with the predatory pricing that companies like Uber are using. when I said their pricing is not sustainable that is exactly what I meant. In 5 years they will either be gone or will have raised their prices.
Then this candidate has likely done many tech interviews before, what does that tell you?
[0] http://guides.rubyonrails.org/active_record_querying.html#or...
I think you can go even further and say that having different apps for different types of communications is actually a convenience in the context of something like a smartphone. Different apps implicitly cater to a different circle of contacts with distinct levels of privacy, discretion, formality and posterity. If you had to explicitly manage these types of preferences in a single universal app it would be both tedious and error prone. Having separate apps that work is specific ways is just so much simpler to manage, it is convention over configuration.
* Headset Pricing: Major OEMs will be releasing headsets starting at $300 [0]
* Lowering system specs for VR [1]
* Not just a gaming focus: Windows 10 creators update puts an emphasis on 3D and Mixed-Reality, including a 'holographic' interface [2]
[0] http://1reddrop.com/2017/01/06/microsoft-announces-299-windo... [1] http://thenextweb.com/microsoft/2016/12/08/microsoft-unveils... [2] https://www.microsoft.com/en-us/windows/upcoming-features