logicuce

With the right choice of algorithm, and if you control the code which interprets that JWT (whitelisting the alg and choosing the right library), I don't see a reason why JWT would be insecure.

Google OAuth 2 tokens are also RS256 JWTs

I feel Jira is actually a workflow management system disguised as a ticketing system. It is a complex product and their pricing is shit expensive but I haven't come across anything more powerful.

IMHO If you are a small startup and can be self disciplined, you don't need Jira. It is more for enterprise setup where accountability/responsibility has to be generally enforced.

I guess the onus is on the company to fix these things rather than on interviewer.

Let's say the candidate behaved in this way, should the company ignore it?

I guess the underlying assumption is the person in charge would retire or become unavailable with some deliberation and planning. Somebody gone due to accident is entirely different thing.

Exactly. Don't think of people landing on the site as an infinite stream of people. There are influencers who land first and you don't want to be in their bad books.

This. Had a lengthy discussion exactly on this point in context of this very article couple of days back in office :)

Totally agree with you!

Isn't it that UP elections, which happened after demonetization, were a clean sweep in favour of BJP? From what I understand UP voters are a good proxy for sentiments of traders, daily wage laborers and middle class. They seem to have accepted it with a bang.

In the article you shared, there are mentions of celebrated economists siding with both camps. I will leave up to the chosen government to weigh in those opinions and make a move.

Coming to GST - the earlier tax system was much more complex and leaky. If your turnover is below 75 Lakhs (small traders) you can opt for composition scheme which is even simpler. If your turnover is higher, it should be fair to assume your business is big enough to have a computer operator who can file 3 returns (excel sheet I guess) every month with benefits of input credit.

With so many people in a country, you will always find interesting anecdotes. The problem is, you can't wait for everybody to get ready to make a move. By that logic, India should not invest in ISRO when there are still villages without electricity.

So you mean the older tax system which had 10+ taxes without input credits was a simpler and more reasonable? Now at least people can learn few things and do it on their own.

Unable to understand how these moves are catering to the elitist alone. Will appreciate some elaborate details or pointers to the least.

I think Thumbor fits the bill very well. In fact, using something like APSL's thumbor docker image [1], you get the complete setup including the optimizers, object detection, etc. ready to go.

It works really well for UGC as an ondemand optimizer but you can easily make some URL calls to include it in the build time as well.

[1] https://github.com/APSL/docker-thumbor

Nadella wasn't an outsider. He was with Microsoft when all this happened.

May be he had something to do with these initiatives and lead to him being promoted eventually.

Just yesterday I looked at Atlassian Marketplace and had similar thoughts (was looking to solve our reporting needs at work). Nice to hear about your success story!

Isn't fingerprint based authentication considered, generally, weaker than that based on a password?

Misleading title of the post. The hacks are possible because of insecure implementations not because of the protocol itself.

All 3 insecure implementations which paper talks about are known from long. Developers concerned about security are cautious about such pitfalls.

But that information is not available to a random stalker

When I first came to US, I found it to be the case for chocolates as well (being a vegetarian, I stay away from pastries and cakes).

I specifically remember trying out KitKat out of craving and it was way sweeter than what I get in India. Tried switching stores before concluding the recipes are tweaked.

Not really :)

"Reliance Jio Infocomm Limited" is a new a telecom operator. Reliance Industries Limited, the parent company, doesn't own any other telecom operator.

Microsoft My Phone https://en.wikipedia.org/wiki/My_Phone

It would even backup my SMSes and let me search through them in an online interface. But then MS decided to shut it down within few months of me buying a phone because of this particular feature.

Well, MS does it often.

I believe the sales function is very much incentive driven. As a sales staff, your pay is very much correlated to the sales you do which means the stuff needs to sell. I think of it as, you get money for company and company gives you a small portion of that but in the process company is essentially paying you only when you bring in much more than what you cost.

Pricing a medicine, like pricing any other product, will have its own complexities.

* You need to fix a price which would cover the cost of your research that went in (and also for unsuccessful researches that you write off for other ailments) * You have idea about the scale of the ailment but little idea about market acceptance and reaction to your price. * After market has accepted a price, even if it exceeds your predicted consumption by many fold, you have little incentive to change the price especially if insurance is paying for it. * In a new market, because you have already recovered what went in to build the medicine, you can price it better.

In fact, insurance itself work very differently in US vs India. In India, in most cases your insurance won't pay for your medicines and medical expenses (diagnostics) if you don't end up hospitalized for at least a day. And that can govern how medicines are priced here because price has a direct implication on adoption.

People have had success with a table layout using css display property as well: http://mdo.github.io/table-grid/

It has better support as compared to flexgrid.

Does anybody know why it isn't the more common as compared to other solutions?

I think Amplitude gives you access to the RedShift cluster which is hosting your data. You can then connect it to any custom vizualization tool and analyze it to your satisfaction.

They have tech to do even better. See here https://www.cloudflare.com/railgun

That is how you can make it faster even when somebody is logged in and you are delivering a somewhat personalized experience.

Just tried it. Looks great.

In fact, it can simulate the scenario better as compared to Chrome as the speed is shared by everything on the system and not just that Chrome tab.

For your need to simulate a 256kbps connection, two things have worked for me. Both require a good few mbps connection to begin with though:

1. Use Chrome's device emulator mode. You can ignore all other settings like screen size, user agent, etc. and just use the speed restriction. 2. Use a specialized WiFi router. I use the ones from TP-Link in which I can restrict speed for a particular device IP. DD WRT based routers can also help here.

Spot on. You don't need the UTC at all to be stored. What matters is the local time at the venue.

If its a virtual meeting (eg. over Skype) with participants from multiple time zones, it is safe to assume always one time zone will take precedence over others and time should be saved with respect to that.

If its a natural event like a solar eclipse, it can be saved in UTC.

There is always one time zone in which the event won't be adjusted. Just use that.

There are people for whom even $100/mo/user would not be a big deal but then there are bootstrapped businesses in 3rd world countries with lots of non tech part time employees (I want all of them on same communication medium). For them its not an easy decision.

This is not to claim Slack is pricing it utterly wrong. Of course they have their target audience and should do things best for their business.

Those numbers are not true for even half of the world. Also, I would want everybody in my org to be part of the same communication channel including every non tech folk.

You will definitely find folks for whom the $100/mo/user is not a big deal and Slack does have that plan with needed features. However if I am bootstrapping with a business with majority of non tech part time employees, its not a quick decision to commit to $8/mo/user.

For comparison, Google Apps provide their complete suite at $5/mo/user. Desk.com provides interfacing with customer starting at $3/mo/agent. With the value they provide I don't think twice before committing to it.

(btw, I could only see their cheapest plan at $8/mo/user paid monthly, where is $5/mo coming from?)