311 karma · joined March 25, 2014
For authentication & authorization, the caller sends a bearer token. The format of the token is known to both parties and the server knows how to validate it.
It's better than username password combos because (1) not every "account" has a password, (2) tokens can and generally do expire, (3) it's not tied to the password if the password changes the tokens continue to be valid, (4) the user can invalidate the tokens of their choice, (5) you can grant restricted permissions to a token. You can do more or less things with tokens based on the needs of the application but it decoupling it from password gives you additional security and flexibility.
I thought the air was less dry too, but didn't really have means to measure that.
They have to have PC to arrest someone. Even if you're not charged, PC has to be there for an arrest to be justified.
They never claimed that they are doing a public service. The only reason it's free is they hope you'll get used to it and pay for bigger stuff later on.
It's OK to be sad, but it's not OK to be morally outrageous.
No ethical dilemma or "ever hungry crony capitalism machine" here.
As we know there are safer and riskier drivers on the roads.
If everybody was driving with AP the total number of accidents would drop.
However if you are already a safe driver, there's a chance that AP is riskier.
I don't want to bash AP to the ground, I think the tech is still phenomenal, and forced the car industry to catch up. However Tesla has the attitude of the classic move fast and break things mentality and not willing to take responsibility for it. When lives are at stake, you gotta do better than that.
You don't get to blame the customers for getting distracted for using a system that's literally called and marketed as Autopilot.
There's a reason similarly capable other cars in the market their systems as driver assistance and will force you to give input on tighter intervals.
Uber's system killed a person. They received a huge backlash and their permission to test self-driving cars have been revoked in the state of Arizona. They also pulled out from testing California as well.
Waymo had 13 non fatal crashes, of which, 12 of them were other drivers' fault. One was caused by the software where the car wanted to maneuver around some sand bags on the road and side swiped a bus. No injuries. Google took the blame and said it's a learning experience. AFAIK, Waymo cars are not available to public by default.
Tesla had multiple fatal accidents as a result of "Auto Pilot" which is just a bunch of driver assistance systems taped together and marketed as a complete self-driving system. At every single accident, Tesla never admitted the blame, and just reiterated it's statistically safer to drive with AutoPilot than without.
Obviously, this pisses people off. The never-take-the-blame attitude gets old and annoying. It's like a colleague who would throw everyone under the bus to avoid taking the blame.
Secondly, I've seen the video of the accident with the Apple employee. It's clearly AP error and I don't care if it's statistically safer to drive with AP, if a system causes and accident that I could have avoided easily, I don't trust that system.
2FA means two factor authentication. It's a guarantee that even if someone hacks your password or steals your computer, if they don't also have physical access to the secondary device (phone, yubikey etc), they won't be able to gain access to your account.
If you put the secrets of 2FA into the same computer, you are back to 1FA.
However, you end up being less secure than not enabling 2FA in the first place. This is because when you enable 2FA, they can disable the regular checks that they have for 1FA accounts. It will also be incredibly difficult to regain access to the account if you don't have access to 2FA devices.
In certain areas you can deduct your expenses from your taxes.
But yeah, you should certainly take this into account when you are discussing your salary.
It adds a step during checkout where you are redirected to your bank/card issuers page to answer some security questions.
Landing page have multiple cards of different types, including debit and credit.
It's alright if they want to lock the thread to prevent a massive +1 spam, but at the very least they should have given a link to track the status of this.
When your production systems are down, "thanks for the report" is not a good enough response.
You can buy gold, stocks, foreign currencies as means of investment.
You can't pay your restaurant bill with them but that doesn't mean they don't have a future.
Not true. I'm self taught and I had very generous offers from the two of the three big names.
Screw spending a time to getting a degree just for the sake of it and build stuff.
I know it wasn't like that before, but times have changed and so have recruiters.
It sounds weird when you say you have made a research about security of fingerprint scanners on phones without actually trying the attacks on those phones.