zie

6 ms·

61.
by zie 7mo ago
> My suggestion is merely that a database holding financial data should have more than a single layer of security. We require SSO(Azure via vault) to authenticate to the DB. We also don't expose PostgreSQL to the public internet. We
62.
by zie 7mo ago
> It doesn't really matter. The fact is that you're one CVE away from every employee having access to arbitrary data, including financial data. I feel a bit like a broken record saying this. Sure, but it's the same with pr
63.
by zie 7mo ago
Your SSO system is a lot of pressure on one control too. Nobody seems to have problems with Azure or Okta or whatever SSO system you use having every key to the kingdom. RLS has been around a long time and is very stable and doesn't ch
64.
by zie 7mo ago
> No, the app would still use RLS. I don't think you thought this through? The problem with the app being constrained to RLS is you have User A and User B accessing your API, how do you get them access to the different data they nee
65.
by zie 7mo ago
If you have people running crappy SQL SELECT, it can be a problem. statement-timeout[0] is your friend here. You still have to be on watch, and teach your users not to write crappy SQL. You can also limit it by creating read-only replica&#x
66.
by zie 7mo ago
Well, I mean it's not only RLS, but yes it's only PostgreSQL doing the access control as far as if they can see a particular table or row. Every user gets their own role in PG, so the rest of the PG access control system is also u
67.
by zie 7mo ago
We do the same thing, every employee can access our main financial/back office SQL database, but we just use PostgreSQL with row level security[0]. We never bothered to complicate it like the post does. 0: https://www.postgr
68.
by zie 7mo ago
Awesome sauce! I was too lazy to track this down, thanks for sharing! (for readers not following, this is Lotus 123 on Linux)
69.
by zie 7mo ago
and Emacs SES, built-in spreadsheets outside of Org-mode: https://www.gnu.org/software/emacs/manual/html_mono/ses.html...
70.
by zie 7mo ago
There is SC and now sc-im: https://github.com/andmarti1424/sc-im You can also literally run Lotus 123 if you want. Someone has binaries to make it work on linux. or under dosemu
71.
by zie 7mo ago
Yes, lots of large providers really want defense in depth at the router/firewall/important services level. They want separate OS's in case a giant CVE or bug comes out for platform X but isn't on platform Y. So multi-pl
72.
by zie 7mo ago
> Linux is more welcoming to new users. And the difference is only growing. Unless you want documentation. :) Linux documentation is ALL over the place, and it's hard to know if X docs apply to your particular mess. On OpenBSD it&#x
73.
by zie 7mo ago
When you realize companies can borrow against receivables and payables also.... But it eventually comes out, so while you can do it short-term, it's a terrible long-term strategy. Your stock will eventually crash and burn if you do to
74.
by zie 7mo ago
In the USA, I've had several charging stations where the CC terminal acts like it works, but it won't actually charge the vehicle. However if you use the App, the charger works. This is in late 2025 and 2026, so it's better,
75.
by zie 7mo ago
Request Tracker(rt): https://github.com/bestpractical/rt
76.
by zie 7mo ago
The risk you are hiding will eventually show up. Charging .25% ER means you probably can make some decent money in the meantime and since the customer holds MBSF directly, you aren't on the hook for the risk. Smart. It's a great b
77.
by zie 7mo ago
At .49% expense ratio, plus whatever your cut is, it won't be a very cheap product. Even SPAXX, the default holding of cash at Fidelity is cheaper at .42% ER. There is no free lunch in investing, so that extra yield comes with extra r
78.
by zie 7mo ago
Don't worry, Seiko learned: https://www.grand-seiko.com/us-en/collections/sbgd223j
79.
by zie 8mo ago
Firefox Send is still around in hobbyist land: send.vis.ee along with ffsend[0] maybe? 0: https://github.com/timvisee/ffsend I love and use ffsend every day.
80.
by zie 8mo ago
I think you are responding to the wrong comment. I never said that.
81.
by zie 8mo ago
Thankfully you don't really need an adblocker for apps on an iPhone. Your browser could use one, but thankfully those do exist :) That said, I want off the iOS ecosystem, but Google has basically said guess what? We are going the way o
82.
by zie 8mo ago
They have a DBA in their infrastructure team, they just didn't bother to tell anyone and let them own it.
83.
by zie 8mo ago
My advice: One code base and one database. In my experience, it's easier to take schema out into a new DB in the off-chance it makes sense to do so. The big place I'd disagree with this is when "your" data is actually cu
84.
by zie 9mo ago
I agree this is an awesome feature. I use pg_timetable instead of Oban though: https://cybertec-postgresql.github.io/pg_timetable/v6.x/
85.
by zie 9mo ago
Generic Openpilot out of the box is just super nice cruise control right now. So it can do longitudinal and latitudinal control. So it lane keeps, stays behind the car in front of you, etc. If you use Sunnypilot or one of the other friendly
86.
by zie 9mo ago
uBlock origin does indeed work, and ctrl+e is really nice, so I'm actually using Vivaldi as my main browser now. It's nice.
87.
by zie 9mo ago
There is also https://text.npr.org
88.
by zie 9mo ago
You can get pretty far with just PG using tstzrange and friends: https://www.postgresql.org/docs/current/rangetypes.html Otherwise there are full bitemporal extensions for PG, like this one: https://git
89.
by zie 9mo ago
sorry, try this: https://django-liveview.andros.dev/docs/install/ Though it doesn't answer your question, the link at least works :)
90.
by zie 9mo ago
I looked(admittedly briefly) and couldn't find the architecture explanation in the docs here: https://django-liveview.andros.dev/docs/

More ›