Viewing profile — nmgsd

You can't forge a JWT without stealing the private key of the valid JWT signer. You can steal a JWT token the same way you can steal a session token.

The issue becomes very difficult when you need to preserve message history reliably and allow account usage across devices. Because key management becomes tricky and clunky and the…

I agree strongly with you that the direction to be taken is independent messaging clients for existing messaging channels as long as those channels allow third party API use. What …

This highlights a major issue with ALL messaging apps, namely that the provider owns the clients AND the backend. Distributed open-source clients that use end-2-end encryption over…

VPN people, VPN

It depends what the API is supposed to do of course.

A cool way to circumvent the keyword filtering: www.seecret.io

This is why you should never trust proprietary secure messaging solutions that offer you both the client and the channel. The future of trusted secure messaging will be open source…

of course he does.

One option is to store the files in Amazon S3 and only serve them over cloudfront signed URLs. There's ways to lock down the S3 access so that only a few Very Important tech leader…

You can always assume this.

So, you want to avoid mass surveillance and don't trust big tech companies either? But you're tied to your existing network of contacts like everyone else? Well now you can send en…

We built a simple Twitter client that can post and read steganographic tweets at www.seecret.io using the plaintext steganography library from https://github.com/simpledynamics/see…

From the article:"But take a closer look at that list and you can quickly see that all of these various behaviors could be described by one simple, everyday phrase: You're in troub…

Are you perhaps thinking of JQuery UI? The core JQuery lib is still used. And for basic front end dev it really does offer most of the utility you'll look for in other libs. 1. Get…

The App Store run by a central authority with complete control over what can even be available and the ability to modify the delivery at their own whim is certainly a big issue in …

Most interview processes are a real disservice to the interviewee AND the company. Typically, the team manager will just have his team members all interview the candidate. They wil…

This is 100% false. Can confirm.

I have never once attended an all-hands meeting that couldn't have been an email instead.

A lot of these answers are pointing out the x-browser complexity which is true but that isn't what drives JS package mgmt. It's mostly Node stuff. The mature common JS libs for bro…

Let's hope they at least hashed their passwords correctly.

-- "Open source software and decentralization is nice and all but to become a mobile app it'll have to be compiled and run on a closed platform and will almost certainly use APIs o…

For high value targets yes, they can't really be safe but for avoiding mass surveillance it's good.

can anyone confirm this is legit?

Suprising to no one.