Viewing profile — onaworkcomputer

USDS may only get away with this because their roles are term-limited excepted service, but pretty much everyone comes in as a GS-15-10, regardless of education.

It's not recursive, though -- that would only be true if AOL stood for AIM On-Line. Maybe "nested acronym" is a better term?

It'd be unreasonable to ask someone to perform a hash of those last four digits (how would your mom respond if the bank asked her for the sha256 hash of her card number?), but it c…

The comment you were responding to was summarizing/editorializing its parent, not presenting new information.

> Do thirtysomething's still use Facebook ironically, or something? Not among my peers. Facebook is seen as a way to communicate with older and tech-challenged relatives. It's in t…

Oof. I wonder if admins can disable push notifications and just fall back to TOTP instead? Though it does sound like that would not be convenient if you have to enter a TOTP every …

Don't you have to provide some information as part of the confirmation? Whenever something requests MFA, it will show a two digit number, and in the Authenticator app, I will be pr…

I would say yes, Azure AD is more complex, but in a good way. AWS IAM is interesting in that IAM resources are provisioned within a subscription. You can use IAM as an identity sol…

Rasmus borrowed this distinction from Larry Wall, since PHP was originally implemented in Perl (which also uses + for addition and . for string concatenation). The neat thing about…

I'd echo others and say this boils down to familiarity more than anything else. Identity and authentication is honestly the one area where the popular cloud platforms differ the mo…

I've seen a lot of projects that use a full response cache to capture a view with holes where user-specific information would go and then fill in those holes with some client side …

> I preload basically all the data a user might need at startup This can be a great strategy when you're dealing with bounded data that's not sensitive, but it's important to recog…

> Can I load ALL the data this user might need to read? Probably. You can do that with HTTP/2 server push on a multi-page app, too. The main difference is that with an SPA, you get…

> The distinct advantage of an SPA is that, done correctly, cached data lets you render pages instantly. Yeah, but full page caching is a thing, and in my experience, teams writing…

The GP was not saying "bad software is bad"; they pointed out a lot of footguns that are introduced by going the SPA route. "More code -> more (opportunities for) bugs" is the trui…

[dead]

The Bahamanian dollar has a fixed exchange rate of 1 USD, and I believe this has been the case since 1973. The economic mechanism that allows this to persist is also the one that k…

I realize it's not hip, but I use OneNote. I used to keep notes + a work diary in markdown in a git repo, but it was difficult to integrate screenshots, and converting a note to a …