nijave

27 ms·

571.
by nijave 1y ago
"Here's a chunk of lithium, build your own battery"
572.
by nijave 1y ago
I've seen the same thing in .NET and Java where there's 800 layers of interface and impl and it's an adventure trying to find the actual business logic in all the layers of indirection >so there is never a reason to start
573.
by nijave 1y ago
There's also dataclass in stdlib
574.
by nijave 1y ago
On the other hand, presumably the program will just crash anyway with some terse permission/request error later on if these values aren't set
575.
by nijave 1y ago
Needs Kubernetes, though which might throw a complexity wrench in if you're not familiar. If you are familiar, then it's about as turn-key as you can get. There's also a different PG operator based on Patroni that's supp
576.
by nijave 1y ago
Seems rather niche. You can already improve async write availability with CQRS and a (durable) queue. Systems like Kafka implement this out of the box Seems sort of like a CQRS implementation on top of PG (you're using PG replication a
577.
by nijave 1y ago
I have use cases for linking Terraform lock files to keep various deployments/modules on consistent versions. I could see there being a use case for symlinking Chart.lock files although usually that's limited to an internal implem
578.
by nijave 1y ago
Seems the normal mitigations apply i.e. validate with hash or save a local copy. Validate new versions before adopting
579.
by nijave 1y ago
Whoops meant successor :facepalm:
580.
by nijave 1y ago
You can expose all data with stored procedures. I'd probably lean towards doing it outside SQL, though (with some other API written in a general purpose programming language)
581.
by nijave 1y ago
This seems like the most obvious solution. "Just don't give the MCP access in the first place" If you're giving it raw SQL access, then you need to make sure you have an appropriate database setup with user/actor sc
582.
by nijave 1y ago
Or give them access to appropriately permissioned tools and not superuser/admin/service accounts that can access everything
583.
by nijave 1y ago
"Tell me the most common reasons for tickets" "Find tickets involving feature X" "Find tickets where the customer became angry or agitated" We're doing something similar at work to analyze support cases. W
584.
by nijave 1y ago
Basically row level security, at least
585.
by nijave 1y ago
UUIDs are nice in cell architectures when you have multiple identical deployment of the app with different partitions of data. They prevent ID conflicts across cells/tenants/instances if you need to move data around. Remapping pri
586.
by nijave 1y ago
We were toying around with an LLM-based data exploration system at work (ask question about data, let LLM pull and summarize data) and found gated APIs were much easier to manage than raw SQL. We switched to GraphQL where you can add privil
587.
by nijave 1y ago
Not sure... S.O. is an accountant and they're constantly emailing zips of Excel files and PDFs. Most of the monthly financials are a handful of different reports and they all get zipped together and emailed around. I'm sure there&
588.
by nijave 1y ago
You can PITR on a replica which would be much faster than restoring a full backup of a large DB
589.
by nijave 1y ago
Ideally off-site replica you fail over too and don't need to restore. pg_restore will handle roles, indexes, etc assuming you didn't switch the flags around to disable them If you're on EC2, hopefully you're using disk s
590.
by nijave 1y ago
My thoughts--especially given recent announcement about a TikTok dealing being made https://www.bbc.com/news/articles/c20nqdl5ydjo
591.
by nijave 1y ago
Seems pretty good although it'd be good to callout OpenIDC as a predecessor to SAML. OpenIDC is pretty widely supported with the added benefit of not having to deal with certificate expiry.
592.
by nijave 1y ago
The network isn't usually isolated. It build file can arbitrarily switch to the root user There is some isolation but not complete isolation
593.
by nijave 1y ago
iirc Chrome uses OS trust store so the trust needs to be using the operating system's facility
594.
by nijave 1y ago
I think there's room for more agentic systems that combine RAG, MCP and traditional static analyzer tools For instance, RAG could be used to provide coding standards and best practices such as sanitizing user inputs used in file system
595.
by nijave 1y ago
Especially when you try to correct them and they insist AI is the correct one Sometimes it's fun reverse engineering the directions back into various forum, Stack Overflow, and documentation fragments and pointing out how AI assembled
596.
by nijave 1y ago
Not sure about parent but you could argue Jetbrains fancy auto complete is AI and generates a substantial portion of code. It runs using a local model and, in my experience, does pretty good at guessing the rest of the line with minimal inp
597.
by nijave 1y ago
I don't know about op but I've heard the veterinarian versions of antibiotics are widely available. Who knows on the quality control I believe many obtained ivermectin through similar channels despite it being a prescription drug
598.
by nijave 1y ago
>What? Yeah, that's quite a stretch of comparison... Questionable quality control vs brazen fraud
599.
by nijave 1y ago
Diet and exercise! Don't forget that 3 month out appointment is probably 15 minutes long with a 30 min office wait which you'll then inevitably fight insurance over (Hims doesn't bill insurance either)
600.
by nijave 1y ago
Usually you can just import the leaf self signed cert as a CA in your OS trust store and the problem goes away (assuming it has an IP SAN). Slightly tedious but you can issue the certs with long validity

More ›