3 ms·
You're right about PostgREST. See my comments here: https://news.ycombinator.com/item?id=23321132 https://news.ycombinator.com/item?id=23321132 > we're suppose
by kiwicopple 6y ago
You're right about PostgREST. See my comments here: https://news.ycombinator.com/item?id=23321132 https://news.ycombinator.com/item?id=23321132
> we're supposed to ignore all of the security work that went into making that database software for the past however many decades, and turn it into a dumb storage medium instead
I couldn't agree more
- block_dagger 6y agoWith containerization and network orch layer, the db often isn’t the best place to enforce access perms.
- RNCTX 6y agoI think that's debatable. A UI without a persistent root/admin connection lingering in the wild cannot leak such a root/admin connection, can it? How many retail corporations have had breaches resulting in huge credit card dumps that would not have happened if they had not been using frameworks with persistent root/admin database connections outside of their internal office network?