Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
hot_gril
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
8 ms
·
121.
▲
by
hot_gril
2y ago
Maybe doing scientific stuff in-browser that you would normally need a Python backend (with numpy etc) to do. I don't see it being used for driving UIs.
122.
▲
by
hot_gril
2y ago
That's true.
123.
▲
by
hot_gril
2y ago
I can't imagine how the schema would reveal SQL injection holes. Maybe other holes, though. Any poor choices for PKs, dumb use of MD5 computed fields, insecure random, misuse of NULL, weird uniqueness constraints (this also ties back t
124.
▲
by
hot_gril
2y ago
SQL injection will give you the entire schema anyway. It doesn't help if someone tells you the col names beforehand. I'm more wondering about non-SQL-injection vulns.
125.
▲
by
hot_gril
2y ago
Just because the article gets into fine details doesn't mean it's silly. They're working with what they have. But after reading more, I agree. The point of FOIA in the first place was "access by all persons to public rec
126.
▲
by
hot_gril
2y ago
Excel sheets are databases. That's their purpose. They store rows/cols like an RDBMS. They allow joins and constraints, including uniqueness. There are even backends that use a spreadsheet as a DB. What else do you want?
127.
▲
by
hot_gril
2y ago
The author already said he messed up. What are you adding by saying this?
128.
▲
by
hot_gril
2y ago
They didn't need to. In the first appeal, it didn't matter because it didn't jeopardize security. In the second appeal, they said it's a file layout. You also said SQL schemas are declarative, not imperative. Those are t
129.
▲
by
hot_gril
2y ago
is_cop bool not null default false
130.
▲
by
hot_gril
2y ago
What if you guess common table names? Wonder if they send back the error message.
131.
▲
by
hot_gril
2y ago
So you mean the filetree and file contents, as seen by userspace program? It's meant to be imprecise, because they didn't want some "gotcha." If they say we won't reveal the disk layout, technically you can't t
132.
▲
by
hot_gril
2y ago
You said that SQL schemas aren't software, and that's what this lawsuit was about. If they explicitly say that Excel docs (even w/ formulas) aren't software, I think they're wrong, but that doesn't matter becau
133.
▲
by
hot_gril
2y ago
Do you mean that section headings aren't a file layout? That's their entire purpose. Edit: If you're talking about the byte representation only, I don't think section headings indicate the placement of the body's by
134.
▲
by
hot_gril
2y ago
Abstractions are notoriously leaky in DBMSes. First off, they don't even use the same SQL spec. Give me a schema that uses anything Postgres-specific, and I can tell you what the bytes on disk look like for a given row or index. I thin
135.
▲
by
hot_gril
2y ago
If you send a copy of the code, is that sending the code? If it is, what about sending a copy of the code with a Caesar Shift?
136.
▲
by
hot_gril
2y ago
SQL schemas aren't Excel spreadsheets.
137.
▲
by
hot_gril
2y ago
Just that it's a file layout. Or even if you strictly define a file layout as say an ext4, NTFS, or FAT file tree, that revealing the schema is revealing the file layout. I don't know why they don't want to reveal file layout
138.
▲
by
hot_gril
2y ago
If the Excel spreadsheet has formulas in it, it's software. If you're just talking about the data in the sheet, i.e. what you'd get exporting it as a CSV, then it's not. Col types, unique/FK/PK constraints, def
139.
▲
by
hot_gril
2y ago
File or file layout? Cause both of these are probably stored as files, .sql and .xltx respectively.
140.
▲
by
hot_gril
2y ago
So if you have the schema and the DBMS, you probably know how data is arranged in the files ("files" in the filesystem sense).
141.
▲
by
hot_gril
2y ago
There's a solid chance that the schema gives away what DBMS is being used. But even if it didn't, I'd still call it a file layout in this context.
142.
▲
by
hot_gril
2y ago
Schema is definitely software, a operating protocol, source code, and file layout. Maybe also documentation.
143.
▲
by
hot_gril
2y ago
Neither does a file layout. FS will decide that... even then, not physically.
144.
▲
by
hot_gril
2y ago
Maybe their schema has triggers and stuff
145.
▲
by
hot_gril
2y ago
Also, Americans all know what kebab is, but not the case with gyro
146.
▲
by
hot_gril
2y ago
I've seen this too, a lot of 1-star reviews from customers who wanted some substitution and didn't get it. Seems designed to be abused by unreasonable customers, cause one of those equates to ~3 honest customers saying "meh&q
147.
▲
by
hot_gril
2y ago
My family members from Iran and Syria have said that people there cook beef extra because it's usually not very fresh, unless they're rich. So overcooked beef may be the more authentic way, depending on how you look at it. Lamb is
148.
▲
by
hot_gril
2y ago
I agree. But one exception, a lot of good Syrian restaurants aren't named for a region in Syria, or the country, but some greater region that includes Syria (usually "Shaam").
149.
▲
by
hot_gril
2y ago
I'm never going to look at ratings. The only use there is photos of menus, food, and the restaurant itself.
150.
▲
by
hot_gril
2y ago
Well on the topic of kebab, good Persian restaurants usually have better decor.
More ›