572 karma · joined June 22, 2010
[ my public key: https://keybase.io/superdon; my proof: https://keybase.io/superdon/sigs/x8N-xeM2DR6Qs9kHK_Sjoc0fGeYUZZpbtGwj1f4GzXg ]
Thanks Kevin.
If result improves your productivity, it may be a WIN-WIN solution.
In short, companies should approach interviews like free consultations with an expert or peer.
Even if mechanism is same, I think result will be different for Twitter.
1) Add golden heart 2) Sell golden hearts to users. 3) Reward some golden hearts daily to users, perhaps based on tiered ranking. 4) Allow advertisers to gift golden hearts to users. 5) 'Promote' tweets with golden hearts and display them in Moments.
In short, allow peer promotion. Red hearts are currently being wasted as weak social signals and nods. This change blurs the line between ads and peer-promotion.
Calling in another expert is not an admission of incompetence. It's just a matter of efficiency and expediency.
I'd not recommend doing what lawyers do. Best client-developer relationship is built-on trust. Follow your heart and you'll be rewarded over time.
Given that OAuth is all about delegated authorization, meaning entity that uses the access token may not be the user but some third-party service using the token on behalf of the user, using it as proof-of-identity makes no sense.
This point becomes clearer with limited permissions. If access token is proof-of-identity, why limit what the user can do when you know it's the user?
Magic with container are: 1) those changes are only visible from code running in the container, and 2) changes can be layered on top of each other (FROM in Dockerfile).
JWT itself, however, is a signed-JSON format with detached signature which is very useful well beyond access token use-case.
JWT as access token at large scale will require frequent key rotation so inability to revoke becomes a problem but it's not a show stopper because one can work around it using various tactics such as bloom filter I mentioned above.
Proving me wrong would be simple: just demonstrate live streaming to thousands or even hundreds of viewers without adding servers.
but then we developers would be lost without problems.
[Online interactive demo](http://sites.skoltech.ru/compvision/projects/deepwarp/)
This effectively creates a safe harbor against not only trolls but also legit patent holders who foolishly decide to use AWS.