michelpp

10 ms·

91.
A tiny startup has helped Intel trounce AMD and Nvidia in critical AI tests(techradar.com)
20 points by michelpp 3y ago|2 comments
92.
by michelpp 3y ago
Alternatively you could use Continuous Archiving with Point In Time Recovery [1] which has been built into Postgres for a while. Once your db exceeds several tens of gigabytes dumping to SQL is just not a viable solution anymore. [1] http
93.
by michelpp 3y ago
There is a great video where Danny Hillis describes their thinking behind the design of the CM-2, and how it influenced the design of the then still in development CM-5. What's crazy is when he talked about "bits in the machine&qu
94.
by michelpp 3y ago
> There’s a theory that work expands to fill the time you give it https://en.m.wikipedia.org/wiki/Parkinson's_law
95.
by michelpp 3y ago
Yes that's true, there are efficient heuristic graph algorithms for many problems, for example the travelling salesman problem has several good heuristic algorithms that gives you a short path, but perhaps not the exact shortest. But f
96.
by michelpp 3y ago
This is interesting to me because it's advancing the work on the notion of quantum graph problem solving. I'm sure we've all heard how quantum computers can be used in the future to decrypt information from today. There&#x27
97.
by michelpp 3y ago
The young are needed for slave labor and click farming, and you have to feed them something . Real food is for the rich.
98.
by michelpp 3y ago
> That said if anyone from supabase reads this - I'd love to see GPG signing, version hashing/integrity verification, 2FA if it's not their already Yep, we've got all these on the road map, thanks! > and I know thi
99.
by michelpp 3y ago
Good news for you then! plv8 is a trusted language and works with pg_tle just fine. EDIT: I think I misunderstood your comment, plv8 itself is a compiled extension and thus cannot be a TLE, however TLEs can be written in plv8 once you hav
100.
by michelpp 3y ago
Like any package or plugin for any language or framework, you are responsible for understanding what you are installing. Since TLEs do not come with any compiled code, this is relatively easy for you to verify yourself with code inspection
101.
by michelpp 4y ago
MIT OCW Signals and Systems is excellent: https://www.youtube.com/watch?v=6xaaeop7gJ8&list=PLADC1A1B7F...
102.
by michelpp 4y ago
So much awesome fail, sir, I salute you! “You're afraid of making mistakes. Don't be. Mistakes can be profited by. Man, when I was young I shoved my ignorance in people's faces. They beat me with sticks. By the time I was for
103.
PostgREST: Get started with automated PostgreSQL APIs(cybertec-postgresql.com)
7 points by michelpp 4y ago|0 comments
104.
by michelpp 4y ago
I agree and just want to add to your list, Intel missed the low power mobile processor market and may never even achieve a foothold.
105.
by michelpp 4y ago
One benefit of the approach we are taking is that you can use regular Postgres security rules and policies (GRANTs, RLS, etc) to constrain access to decrypted secrets. It's not quite going all the way to encrypted VMs, but it's b
106.
by michelpp 4y ago
You've hit the nail right on the head with this question on how hard group encryption is, and we don't have all the answers yet as we are still working the use cases around it. We are hoping to reach a level of security that you
107.
by michelpp 4y ago
> Is Vault something that can handle this without getting into my app code? Basically, if i gave a someone root access to my supabase instance is that encrypted data safe? The answer is slightly offset from your question, so let me start
108.
by michelpp 4y ago
Vault and pgsodium dev here at supabase, we're pretty excited about the Vault, and this is just the beginning of some of the advanced encryption functions that libsodium provides that we want to bring into the Postgres ecosystem. Happy
109.
by michelpp 4y ago
Yes, multiplying graph adjacency matrices over a min-tropical semiring produces shortest paths. APL supports this syntactically, but how does it function in the real world? What if the matrices are extremely sparse, like almost all real w
110.
by michelpp 4y ago
Another signcryption scheme as described in the article is also implemented by the libsodium author as an extension: https://github.com/jedisct1/libsodium-signcryption It's unclear from the article if this is the
111.
by michelpp 4y ago
> But I think it would help to understand if Supabase is fully managing key backup and recovery internally, how exactly is that working? Supabase persists and protects your key and we will provide API and CLI access to retrieve it secure
112.
by michelpp 4y ago
The Vault will not prevent someone who has login access to your database and the right grants (or superuser) from decrypting the data. If someone is in this position they are fully compromised and the Vault is not protection against that (
113.
by michelpp 4y ago
> Hmm... I feel like secrets are the one thing I don't want to be in Postgres... because I want to store my Postgres credentials in the secrets vault! And I certainly don't want to have to update the configuration for every ser
114.
by michelpp 4y ago
The Supabase Vault is encryption at rest, the column is stored encrypted in the database, WAL streams and backup dumps. This is usually more efficient than dealing with full disk encryption, and it allows you to control who sees decrypted
115.
by michelpp 4y ago
If you give a database client access to the decrypted secrets, then they have them. What the client will not have access to is the hidden root key that is not accessible to SQL that pgsodium uses to encrypt and decrypt data.
116.
by michelpp 4y ago
We are considering running the Vault in Trusted Execution Environments (TEE) that are similar to encrypted VMs, where the memory traffic to the cpu is encrypted until it hits the processor. We're still investigating this possibility b
117.
by michelpp 4y ago
> Namely what will happen when you first restore some data into a new Postgres instance which booted with its own randomly generated root key (the wrong key) and then how you are supposed to patch in the correct key and be able to start
118.
by michelpp 4y ago
Hi! article author and Supabase employee here. We're excited to preview the Vault secret storage we've been working on. Please drop any comments or questions you may have here and I'll be happy to answer them!
119.
by michelpp 4y ago
He's played the comical part of slick startup investor "Freak Masterstroke" in the new mst3k series: https://mst3k.fandom.com/wiki/Freak_Masterstroke "Where's my second-screen experience!"
120.
by michelpp 4y ago
Old android phones make great dashcams. Most of them have automatic gps address lookup, g-sensor shock detection, far better cameras and more storage than most dedicated devices. There's several dashcam apps on the play store.

More ›