Viewing profile — sytringy05

Java applets were terrible in all possible ways that something can be terrible and it took no less than Steve Jobs to kill off Flash. This stuff was foundational to the modern web …

I worked for an aircraft parts manufacturer, they closed an entire factory / production site rather than try and upgrade the manufacturing system or move the part production onto t…

The issue with myki wasn't the card technology, it was the fact they wanted to have standardised ticketing across the entire state. eg Tap on a bus, tram and train in Melbourne, ge…

“it’s that easy!”

It’s from the original borne / korn shell in Unix. Ctrl H was backspace, but the pc keyboards would send a different control character. you often had to map the backspace on the pc…

Pretty interesting way to run what's in effect a XSS attack.

It's interesting to hear that because IHMO one of the reasons OAuth and JWT took over the world is that you can base64 decode the tokens and see whats inside them, compared to Kerb…

Well hopefully someone has taken the time to, or there will be nasty surprises I certainly don't want people building security sensitive parts of an app to be slinging the features…

The whole point of access tokens is to not do expensive checks on every request. Signature checks out and isn't expired - you are free to go. This is a core design thing of OAuth, …

Yes, single log out is an ongoing nightmare. As many here have said the size and range of use cases that OAuth and OIDC support is off its head. And that's with the big boys who ha…

lol, here's my visual flow which consists of "start" -> "script node" -> "end" Still, people buy Dell Boomi and Mulesoft, so it's not like there's no market for this rubbish

It wasn't a draft, it was reviewed, approved agreed upon etc, but the initial reason to do it was supporting a review of how things were integrated. Basically because it was useful…

because that's just how it was there... wasn't the best place in the world to work.

I once made the mistake of doing a set of rather detailed integration diagrams for an airline I was consulting at. This diagram, which was intended to be a rough snapshot of how th…

the main ones are OIDC plugin, the serverless plugin, advanced req and resp transformer plugins. auth connectors are useful, but most orgs I work with are using OIDC or SAML

does anyone know the history of the project? I hadn't really heard of this until earlier this year.

the same benefit you get from most reverse proxies. If you dont need it, then nothing. If you do need it, it's critical. If you: - have more than 1 upstream service to hide behind …

I think they were logging them in clear text, so server side, prolly ended up in splunk or elasticsearch.

This article answers its own question: "The situation is hopeless, but not serious." REST vs HATEOS vs HTTP API vs Web Service It's not serious and it doesn't matter that much. If …

I wholeheartedly agree, which is why hardly anyone ever builds "REST" APIs. It doesn't really add that much to a data API

According to this web page - https://vicsig.net/infrastructure/signalbox/Metrol - it seems yes, it has been replaced. > Train Describer replaced with TCMS in 2014-2016.

IIRC high speed signalling is coming with the Melbourne Metro trains (and the existing lines those trains will run through). Replacing train management systems like this with new o…

No doubt, but there's always a way to smoke the whole thing, even with all the fail safe and redundancy in the world.