michelpp

24 ms·

211.
by michelpp 6y ago
There's always this confusion that comes up whenever PostgREST is discussed on HN, which is many times at this point. There is the misconception that arises that you use PostgREST to remove your existing stack entirely and you do eve
212.
by michelpp 6y ago
It uses JWT, you can use third party or serve them yourself.
213.
by michelpp 6y ago
> Yup. Postgres cannot send confirmation mails, push notifications, make calls to Stripe or anything really. You put an item in table queue using SELECT FOR UPDATE ... SKIP LOCKED and some out of band consumer sends your email. PostgRES
214.
by michelpp 6y ago
> When you need to integrate with 3rd parties though you're right back to writing traditional backend code. So now you have extra dependencies and a splintered code base. Those third parties can still talk to the same database. We
215.
by michelpp 6y ago
PostgREST is far more secure than most API servers. Any API server can leak data. Most API servers define their own, native, completely one-off security system that does all checks in-app and logs into the database as a superuser. The fra
216.
by michelpp 6y ago
That's surprising, SQL is one of the most well known languages in the world. plpgsql has its quirks, but as languages go, it's pretty straightforward, most things do what you expect them to do.
217.
by michelpp 6y ago
Postgraphile and PostgREST can be used side by side, they provide different interfaces but can talk to the same database. Two for the price of one!
218.
by michelpp 6y ago
Sorry but I disagree, PostgREST is REST. For example URLs map to resources and it uses HTTP verbs. GraphQL does not.
219.
by michelpp 6y ago
You can request different mime/types and postgrest will send you, for example CSV of the results instead of json.
220.
by michelpp 6y ago
> They can absolutely have meanings assigned outside the usual "when multiplied by a vector" type of calculations. For example the "adjacency matrix" representation of a graph is very often never multiplied by a vecto
221.
by michelpp 6y ago
Numba is indeed a great library for speeding up Python and also doing other useful things when interacting when external libraries. For example the "jit compile a single function" feature is gold when you need to pass a function c
222.
by michelpp 6y ago
The article only briefly touches on this, but you can control various aspects of how postgres decides to store your value using `ALTER TABLE ... SET STORAGE` including the ability to make it inline, uncompressed, compressed, or TOASTED and
223.
by michelpp 6y ago
> Computers are just too complex and there are days when the complexity gremlins win. I'm sorry for your data loss, but this is a false and dangerous conclusion to make. You can avoid this problem. There are good suggestions in thi
224.
Introduction to Causal Inference(bradyneal.com)
4 points by michelpp 6y ago|0 comments
225.
by michelpp 6y ago
> Existing incumbent solutions (the C-17 rockets) cost $200M each. The C-17 is not a rocket, it's a cargo plane: https://en.wikipedia.org/wiki/Boeing_C-17_Globemaster_III and yeah it's >$200M to make ,
226.
by michelpp 6y ago
Numpy (and CuPy) provide dense matrices. They're super awesome and certainly very useful for many kinds of problems, but they are not useful for storing adjacency matrices for sparse graphs. That is the point of the paper and the p
227.
by michelpp 6y ago
SuiteSparse doesn't support GPUs just yet, but when it does, you can do this with pygraphblas: https://github.com/michelp/pygraphblas (I am the pygraphblas author)
228.
by michelpp 6y ago
This is pretty awesome work! Just a quick read so far but their approach shows great results. As recently announced at HPEC 2020 GraphBLAS BOF, NVIDIA is contributing CUDA support to the SuiteSparse GraphBLAS library for sparse matrices.
229.
Mathematical Foundations of the GraphBLAS(youtube.com)
9 points by michelpp 6y ago|0 comments
230.
by michelpp 6y ago
The libsodium secretstream API supports ratcheting and forward secrecy by rekeying on every exchange: https://doc.libsodium.org/secret-key_cryptography/secretstre...
231.
by michelpp 6y ago
I came here to say exactly this and I couldn't have said it better!
232.
by michelpp 6y ago
If anyone is looking for a relatively simpler explanation of GIT than Gödel's own work, I suggest the beautiful but sometimes inscrutable book "Gödel, Escher, Bach" by Douglas Hofstadter. Hofstadter draws lines between the ma
233.
by michelpp 6y ago
They're just fine, they do the job. Note that in PostgreSQL 10 they updates the user password storage and challenge mechanism to SCRAM https://info.crunchydata.com/blog/how-to-upgrade-postgresql-...
234.
by michelpp 6y ago
I wrote pgjwt, a JWT implementation for Postgres, my primary motivation is that pgcrypto does not have public key signing, which is needed for JWT. Once I started experimenting with the one feature it sort of snowballed from there, I still
235.
by michelpp 6y ago
Author here. I'd like to put it out there that pgsodium is relatively new work that hasn't seen any serious battle testing. At this point you should consider it more risky to use than pgcrypto, for now. That being said pgsodium
236.
by michelpp 6y ago
Yes they are secret, which is why databases usually don't store them, they store a salted hash. The secret , the key in a sense, is in the users head, or password manager I guess these days. An attacker cannot get the password from
237.
by michelpp 6y ago
It's unit tests for PostgreSQL, so pretty straightforward use cases. I've definitely caught a lot of edges, type confusion, and refactoring opportunities with it. Here are some pgTAP examples from my work: pgsodium: https:/
238.
by michelpp 6y ago
If you want to do this with something like libsodium there is a Key Exchange API https://doc.libsodium.org/key_exchange Knowing only each others public keys, two parties can exchange session keys for bidirectional encryptio
239.
by michelpp 6y ago
There are many database migration tools, more than I can remember. This isn't a replacement for tools that need to migrate a lot of different heterogeneous sources, it is for PostgreSQL only. I don't know of any others taking th
240.
Show HN: Metagration: PostgreSQL Migrator in PostgreSQL(github.com)
1 points by michelpp 6y ago|2 comments

More ›