• 2 Posts
  • 24 Comments
Joined 2 years ago
cake
Cake day: July 18th, 2023

help-circle





  • Canada has a lot to offer and to gain from being part of the Eurostack initiative.

    I think The Conversation just wrapped news about Eurostack in Canada wrapping paper to get views.

    Canada can’t be a part of Eurostack; its goal is bring everything (tech) in-house. Aside investing capital so Eurostack can hit its lofty 300 billion euro goal in 10 years, I dont see what Canada can offer or gain from this. If the “gain” is that we stop Canadian dependence on US tech, we’d just be swapping one overlord for another.

    Yes, of course we could reduce our dependence on US tech, but Canada should be stealing this page from Europe’s playbook and making their own Euro Canstack






  • If you are looking to do something like Github’s Personal Access Tokens (PAT) then it is easiest to just think about it like a password:

    • Create a high entropy (secure) string
    • Store the hash of the string in a database table
    • Store the permissions and other metadata with the PAT’s hash
    • Validate the PAT (permissions, revoke status, etc) on each request to the server

    Storing the hash of the token, like you do with passwords, is a good practice in case your db is ever compromised as it wont leave the tokens accessible and reusable without a lot of effort.







  • The answer depends on the country. In the US, review the Bank Secrecy Act and anti-money laundering (AML) regulations. In Canada, there is the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) regulations and also the CRA requiring the individuals and businesses retain their records for up to six years.

    if there’s some sort of way around this either with a lawyer or federal form or something.

    Very unlikely.