Sytten

10 ms·

121.
by Sytten 1y ago
I dont think that would be right otherwise they R2 offering would be kinda useless. I feel the restriction was on video/streaming. EDIT: OP is correct for CDN but if you use R2 even as a transparent copy from another S3 like provider i
122.
by Sytten 1y ago
This actually a very common way that hackers have used api gateway for years now. You can take a look at plugins like IPRotate. We are currently working on bringing that into our product.
123.
by Sytten 1y ago
I feel I am missing something with the approach of those routers. If I am doing cursor pagination over a couple million rows with some ordering this will pull in a huge number of data from each server and then perform it in memory at the ro
124.
by Sytten 1y ago
There is a mistake on NSO in this guide, there is not tax on grant even if the strike price is lower than FMV.
125.
by Sytten 1y ago
We have done this move at Caido despite being a rust shop for the reason you mentionned. The webviews on OS are garbage in 25-35% of the time and will cause 90%+ of your bug report. Switched to electron and moved on. Almost nobody cares abo
126.
by Sytten 2y ago
For a moment I 100% panicked, it would have hurt us bad as a small business.
127.
by Sytten 2y ago
Off topic but this kind of content marketing is excellent for any startup that tries to get its name out compared with a well-known competitor, like it is the case here with ParadeDB.
128.
by Sytten 2y ago
I am not sure this would haves worked since the return of the US stock market was quite high (due to that constant influx of foreign investment notably) compared to any other asset for people/businesses that wanted to invest their prof
129.
by Sytten 2y ago
Nice :) Can you send me an email? It's in my HN profile
130.
by Sytten 2y ago
Caido founder here! Lots of nice stuff, since we are also in rust I see a lot of similar pattern in our codebase. I think your oneone crate could be split, we would probably be interested to collaborate on an http/2 support. We also ha
131.
by Sytten 2y ago
Probably you saw my rant. We are small team, rust shop and we shipped Tauri for a couple years to more than 20k users. Our application is complex and we had a lot of unpleasant debugging to do due to differences in native webviews. Linux pe
132.
by Sytten 2y ago
Yeah I opened this issue and still stand by the problems. We actually switched to electron since then because of the horrible performances on Linux.
133.
by Sytten 2y ago
An again this would not be so bad an impact if github finally pushed their immutable actions [1]. I sound like a broken record since I keep repeating that this would solve like 70%+ of the scope of attacks on gha today. You would think that
134.
by Sytten 2y ago
What are you rambling about, this is a sanboxed scripting language to allow your users to define customization at runtime. This has nothing to do with rust, it could be written in C or C++. You would not run random user provided C# in your
135.
by Sytten 2y ago
There an interesting debate if home address being public record is a privacy problem. In Canada the government forces business directors/owners to have their address public for transparency. I find that kinda stupid but I do understand
136.
by Sytten 2y ago
Software is weird because it is expected that should be free (as in beer) for most consumers while while being for profit and giving high salaries to its workers. I struggle to think of any other privately owned sector of the economy that w
137.
by Sytten 2y ago
That quote is why security people will always be employed. Jokes aside firebase access control is a nightmare and all those database as an APi thing have the same problem.
138.
by Sytten 2y ago
I am surprised nobody here mentionned immutable github actions that are coming [1]. Been waiting for them since the issue was open in 2022. This would have significantly reduce impact and hopefully github will get it over the finish line. I
139.
by Sytten 2y ago
There was a quite severe vulnerability in Docker IP Tables that was fixed recently in v28. Previously the docker engine would accept request to internal docker IPs for un-exposed ports when on the same LAN. It is being downplayed by the doc
140.
by Sytten 2y ago
Its interesting that the original HN discussion talked a whole lot about recorded meetings. Feels like another world just a few years later with AI transcript embedded in every video conference.
141.
by Sytten 2y ago
Datadog is industry standard at this point, if you dont know what splunk or datadog is you are likely not their ICP and their marketing is not targeting you.
142.
by Sytten 2y ago
Agreed on the chargeback fee they really dont give a shit. I have learned to deal with their V1 API, it has a lot of weird quirks. Kinda wish they offered a better upgrade path to the new billing.
143.
by Sytten 2y ago
I mean sure but is that possible for OS builds? Generally you will generate a private key, get a cert for it, give it to Apple so they sign it with their key and then you use the private key to sign your build. I have never seen a guide do
144.
by Sytten 2y ago
I get the appeal, but without strong typing it's a no-go in my book. Get me an elixir with proper types and we can talk.
145.
by Sytten 2y ago
Ha yes because famously programmers like to build interfaces by using rectangles in C++/C/Rust. There is a reason JSX/HTML won and I strongly believed any new native lib needs to emulate that DX to gain any meaningful tractio
146.
by Sytten 2y ago
The embedded seems to ignore that most modern systems are distributed now and an operation will spawn multiple services. So an external system is better for that usecase I would say.
147.
by Sytten 2y ago
I do get that, but I am not so sure what the real solution is. The industry standard still is some form of "the server sends me a key and I trust it". Key transparency is not really solving anything for the average person.
148.
by Sytten 2y ago
I didnt understand the point he was trying to make about trusting a public key from a remote server. At somepoint you need to trust some third party public key if you want to send them encrypted data and verifying ownership is kinda left to
149.
by Sytten 2y ago
I really don't understand why nobody is talking about it anymore. It's a big deal for startups.
150.
by Sytten 2y ago
Side note, I think the serde yaml debacle was so predictable. As much as I admire Dtolnay his choice to archive the repository and push a deprecated version on cargo made everybody scramble for an alternative "maintained" crate is

More ›