HNHacker News
TopNewBestAskShowJobs

shadowbanned4

7 karma · joined November 18, 2023

submissionscomments
shadowbanned4··on How Open ID Connect Works
They do them with much less complexity than OIDC.
shadowbanned4··on How Open ID Connect Works
HTTP basic auth, TLS with client certs.
shadowbanned4··on How Open ID Connect Works
I hand-wrote the largest OIDC deployment in the world, after experimenting with other libraries. It is awful. Do not use OpenID, do not use OIDC.
shadowbanned4··on Scheme in Scheme on WASM in the browser
the same discussion is going on with rust. it lets the compiler enforce that you're actually using a tail call, instead of silently optimizing it when it sees it and otherwise being silent.
shadowbanned4··on Show HN: I scraped 25M Shopify products to build a search engine
This isn't worth the cost or effort. Shopify already has an internal tool with this functionality that they are planning to publicize.
shadowbanned4··on Dark Mode Is Coming
No, that gets you a lot of spam emails and the popup doesn't go away
shadowbanned4··on "Useless Ruby sugar": Argument forwarding
> The block is free to return from its enclosing method, which effectively pops multiple frames, including foo and possibly more, off the stack.

As an aside, this is one of the key differences between a lambda and a proc. Last I checked, you can pass a lambda as a block, but it is implicitly converted to a proc.

shadowbanned4··on Ask HN: Any comprehensive courses on Auth?
No. They used Oauth. I wrote their entire Oauth system. And it was a nightmare reading through Oauth/OIDC specs for something that could be handled trivially with http basic auth.
shadowbanned4··on Ask HN: Any comprehensive courses on Auth?
I worked for the largest company in Canada who handled billions of dollars. You can make your decision but they won't do anything.
shadowbanned4··on Ask HN: Any comprehensive courses on Auth?
This is practical, but awful advice. Auth (z or n) has been very badly over engineered. You don't need anything more than http basic auth, the rest is just people with too much time on their hands. Oauth particularly is a travesty that their authors should be ashamed of.
shadowbanned4··on OpenAI's board has fired Sam Altman
There isn't really any reason for this except Sam is a YC founder and OpenAI (whose name is a lie because they provide proptietary LLMs) is being hyped in the media.

He is already rich. Getting fired means an early retirement in Bahama.