4 ms·
It feels like you and the parent commenters are framing this as a choice between allowing public access to existing databases, or continuing to build new tools
by droopyEyelids 6y ago
It feels like you and the parent commenters are framing this as a choice between allowing public access to existing databases, or continuing to build new tools for accessing the data.
The way I understood the article, the ideas is 'can we expose a safe subset of SQL or fix the security issues instead of continuing to build entirely new systems'
- falcolas 6y agoHere's the root of my concern - safely and securely emitting SQL from an untrusted client is exponentially harder than running canned SQL queries from a trusted client. People forget (or don't care) about security or safety when it lets them move faster. "Move fast and break things," is a terrible security model.