berkes

11 ms·

91.
by berkes 8mo ago
How does a mounted secret (vault) protect against dumping secrets on crash or debugging? The app still has it. It can dump it. It will dump it. Django for example (not a security best practice in itself, btw) will indeed dump ENV vars but w
92.
by berkes 8mo ago
I'm not familiar with all current ongoing projects. Because of the situation mentioned above. Currently I'm involved in projects surrounding https://developer.overheid.nl/kennisbank/security/standaarde...
93.
by berkes 8mo ago
I strongly disagree. Environment variables are -by far- the securest AND most practical way to provide configuration and secrets to apps. Any other way is less secure: files on disk, (cli)arguments, a database, etc. Or about as secure but f
94.
by berkes 8mo ago
> This is symbolism It is probably unintentional. I work and worked in such projects (in The Netherlands), and the process is -rightfully- chaotic. Governments typically don't have a central single team that builds all their android
95.
by berkes 8mo ago
FWIW, I looked into it myself too, and found e.g. this direnv setup: https://github.com/direnv/direnv/wiki/Sops
96.
by berkes 8mo ago
It suprises me how often I see some Dockerfile, Helm, Kubernetes, Ansible etc write .env files to disk in some production-alike environment. The OS, especially linux - most common for hosting production software - is perfectly capable of se
97.
by berkes 8mo ago
Has done "wat" for years? I use sops for encrypting yaml files. But how does it replace .env or other ENV var setters/holders?
98.
by berkes 8mo ago
You can achieve something like this with a pricing strategy. As DHH and Jason Fried discuss in both the books REWORK, It Doesn’t Have to Be Crazy at Work, and their blog: > The worst customer is the one you can’t afford to lose. The big
99.
by berkes 8mo ago
"Informed decisions" mean you need to have the information. Like with software development, we often lack the information on which we have to decide architectural, technical or business decisions. The common solution for that is t
100.
by berkes 8mo ago
People and societies. Your question is an important one, but also one that has been extensively researched, documented and improved upon. Whole fields of science, like "Metaethics" deal with answering your question. Other fields o
101.
by berkes 8mo ago
That reduces humans to the homo economicus ¹: > "Self-interest is the main motivation of human beings in their transactions" [...] The economic man solution is considered to be inadequate and flawed.[17] An important distincti
102.
by berkes 8mo ago
This field is highly competitive. Much more than I expected it to. I thought the barrier to entry was so high, only big tech could seriously join the race, because of costs, or training data etc. But there's fierce competition by new o
103.
by berkes 8mo ago
Devstral¹ has very good models that can be run locally. They are in the top of open models, and surpass some closed models. I've been using devstral, codestral and Le Chat exclusively for three months now. All from misteals hosted vers
104.
by berkes 8mo ago
Another legitimate use case are e.g. Event Reminder, which intercept my calendar notifications and turn them into full screen alarms. My distracted ADHD brain misses event notifications just too often, but with this app, even I my phone is
105.
by berkes 8mo ago
What about the shame for publicly criticizing someone who put their software out there? Where was the instinct that held you back to reply is such a confrontational way?
106.
by berkes 8mo ago
> we had companies that employed many people, so that the top level of the company could simply specify what they wanted, and the lower levels only had to focus on making individual parts. I think this makes a perfect counter-example. B
107.
by berkes 9mo ago
Same here. I remember a large part of the fun was that we couldn't just look something up on the web - it didn't exist in our home in the eighties. Instead we'd pore over BASIC on floppies. Changing a thing, for example GRAV
108.
by berkes 9mo ago
> If you're logged in everything just works. That's my point. That's the problem I am addressing. You present that as a solution. I presented it as a problem.
109.
by berkes 9mo ago
Or maybe start with defining who the "they" (the ones who "think") are.
110.
by berkes 9mo ago
I'll take any of the lot that i could "find [..] on my own". Or hearsay. Or quotes from tinfoilhats or conspiracy nuts even. Without any of these, you are seriously discrediting people and projects. And without any of these,
111.
by berkes 9mo ago
I deleted my Twitter right before Elon bought it. Aside from political or social reasons, X is a terrible platform. More often than not, I get a blank page, something didn't load. If I get content, it's (randomly) behind a registr
112.
by berkes 10mo ago
That's a very serious and bold accusation you make there. It's so serious, that you should really back it up with some evidence or at least some foundation. Got any?
113.
by berkes 10mo ago
> swaths of free speech Which is very cultural dependent as well. "Not being able to log in on TikTok if you are under 16" is not "preventing free speech". And "having no access to pornhub" is not preventi
114.
by berkes 10mo ago
Certainly. But the problem here wasn't "we want flags", but that the client (via the designer) demanded something that couldn't fit in a select box and so we had to build our own. Now, I think part of the problem is that
115.
by berkes 10mo ago
Is that "straight-forward easy to understand and follow JavaScript" the whole thing written from scratch? Or does it use libraries (that use libraries, that use libraries)? Because I've written my share of javascript-from-scr
116.
by berkes 10mo ago
I guess the surveillance industry has enough incentives to make this ever larger, so they can fit more utm-trackers, campaign-ids, referal trackers and whatnot in URLs. It's truly insane how large typical share-URLS for content on inst
117.
by berkes 10mo ago
The other thing that design patterns allow, is to learn pitfalls, applications and other attributes about them. To keep in your analogy, if you have a 3KG naildriver with a 2m handle you'll quickly find out that driving nails into a dr
118.
by berkes 10mo ago
But the nature of a CDN and most other products CF offers, is central by nature. If you switch from CF to the next CF competitor, you've not improved this dependency. The alternative here, is complex or even non-existing. Complex would
119.
by berkes 10mo ago
At least this warrants a good review of anyone's dependency on cloudflare. If it turns out that this was really just random bad luck, it shouldn't affect their reputation (if humans were rational, that is...) But if it is what man
120.
by berkes 11mo ago
Indeed, this solution is in some way even worse. It teaches people to trust "Currently NonEvil Company™" to do the good thing. First, and obvious problem is that this "trains" us to rely on brands to protect us. And to k

More ›