It's written in Rust.
All jokes about the Rust Evangelism Strike Force aside, various parts of the industry are finally starting to think that "If it's written in Rust, we have less to worry about with respect to that thing, so we won't torture the devs and force them to sneak it in the side door anyway."
It's a thing that I've been seeing at work for the last few years.
In case anybody's curious about what those are:
The biggest reason they use phone calls or SMS, however, is because they don't want to go to the hassle of getting an in-house MFA service (a TOTP backend, in other words), approved, pen tested, analyzed, verified... all things considered, it's faster and easier to go with a service like Twilio that already did all that legwork. A couple of years back I worked for a company in just that position, and after we did all the legwork, research, and consultation with the independent third party specialists trying to run our own TOTP would have easily doubled the yearly cost because of all the compliance stuff.
That implies that they pass parameters in URLs... FFS.
You joke, but...
(No, I will never forgive the college I went to for undergrad for forcing us to take two semesters of COBOL. Why do you ask?)
Which begs the question, how often do people really change their passwords unless they're forced to? This feels like the sort of thing that somebody should have studied.
Huh - they increased it!
Yeah. They're background radiation on the Net.
Nope. The summary is a dog's breakfast of words.
Hence, why they call folks who actually want to make government do stuff "rubes" back home.
Cookie Auto-Delete helps with that.
Now if they could just help defuckulate the Pypi search problem.