T-Winsnes

SAML allows you to send additional attributes with the identity payload, like group memberships. This is not inherently authorisation, but can be used to automatically map users to teams/groups/roles in your application.

SAML is a very complicated standard, and very painful to implement. OIDC is much simpler, but lacks some of the capabilities.

Both can automatically create users on login, that is application implementation detail. Both also need SCIM or something similar to offboard users

I had the same thought, I got an alias set up in my ~/.gitconfig to clean up branches that gets deleted from remote when I'm ready

`gone = !git branch -vv | awk '/: gone]/{print $1}' | xargs git branch -D`

Huh, socialism as a violent ideology was not on my bingo card for 2025

I think the right balance here is to have ownership of the outcome rather than the thing. E.g. you have ownership of making sure the feature you’re working on makes it to production and works properly

With that ownership comes there responsibility and accountability of making sure it happens. The level of responsibility and autonomy that comes with that is what I’ve found people react positively to

For basic auth it works well, but the challenge comes when you need to integrate with oidc, need to enforce mfa, enable sso etc. session invalidation is also quite complicated.

You need an identity middle man in front of the Postgres identity to tackle these and validate that the session is still active. Last time I looked at electric it was a big challenge to integrate such a service. This might have improved since then however

The security model is challenging, as it relies on Postgres users for iam. Your users essentially log directly into your db

I think you underestimate the value of controlling the platform that you base all your revenue from. Chrome controls the internet and android has a huge market share on mobile.

The latest changes to chrome that breaks plugins like ublock origin allows them to keep maximising their advertising revenue.

I think these two being open source is a major reason why they have been so successfully adopted. It isn’t direct revenue, but the control and indirect revenue that comes from that which is the driver

I think it comes down to which type of market you’re in. In some markets, like highly congested markets, design makes a big difference. It can be less important in more niche markets

It would be interesting to see if these clusters are related to resource distribution (blood vessels) like how cities often grew up around rivers

Even AWS in their own docs says to use the native tools when migrating from postgres to postgres[1]. They don't go into the details to much and points to pg_dump rather than pg_logical, but interesting to see that they don't recommend using DMS for it

[1] https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source...

I've been a big fan of worldtimebuddy[1] for a long time. I book a lot of meetings across timezones and it's makes it very easy to see when a good time for a meeting would be between sydney tokyo and miami as an example

[1] https://www.worldtimebuddy.com/

We're going through this right now with hava.io

AWS RDS postgress 11.13 > 15.5

We ended up going with a relatively straight forward approach of unidirectional replication using pglogical. We have some experience doing the same migration from Google Cloud sql to AWS rds with zero downtime as well, which made us pretty confident that this will work and not impact customers in any visible way.

pglogical makes it relatively straight forwards to do this kind of migration. It's not always fast, but if you're happy with waiting for a few days while it gradually replicates the full database across to the new instances.

For us it gave us a bit more freedom in changing the storage type and size which was more difficult to do with some of the alternative approaches. We had oversized our storage to get more iops, so we wanted to change storage type as well as reducing the size of the storage, which meant we couldn't do the simple restore from a snapshot.

We’ve taken a different approach with hava.io, why draw yourself when you can automatically draw what’s in your cloud environment.

It comes down to "the squeaky wheel gets the grease", if you sit quietly in the corner and get things done, and there are no problems with the work you do. You will be invisible to everyone outside those you work with directly.

The person to makes a lot of noise, good or bad, is noticed

Everyone say they want well engineered solutions, but in practice it's not what makes an impact.

I tend to disagree, it's risk based. If it's incredibly expensive to get it wrong, you start weighing up if it's worth storing all that data.

I would assume single account but multiple devices, so you could have multiple connections syncing at once.

I've often found that diagrams as code is fine for simple things, but once the complexities start adding up, it becomes as much work maintaining the diagrams as it is to main the actual codebase. I honestly think there is little difference in effort required to maintain a diagram in something like draw.io over PlanetUML or ilograph. Time is just spent in different places

Automatically laying out diagrams in a away that makes contextual sense is one of those problems that seems easy, but is actually really hard. If it was easy, everyone would have used dot files and graphviz to generate their diagrams since the 90s

Disclosure: I'm the CTO at hava.io, where we automate cloud environment diagrams, so I'm biased towards automation

Difference is that in most jurisdictions those professional engineers are liable if people die because of negligence, the software engineers are most definitively not

This reminds me of the 90s when sites where hosted inside iframes to inject ads. ISPs were notorious for doing this. Every site started running javascript to break out of iframes because of it. I'm not sure if this would work for you, but something like this could help you

if (window.location.hostname !== 'your host name') { window.location.replace('url on your website');

That raises an interesting philosophical question, do you have to be alive to retain ownership?

What has worked really well for me running workshops and other things remotely is Mural[1] with an iPad Pro. I can open my screen and share it on my laptop / desktop. And open the same view on my iPad, then draw. This allows people that don't have an app to see what is going on, and people that do have the app, can interact with the same virtual board

1: https://www.mural.co/

Thank you, I've updated the post with the correct term :)

I think it can be done simpler than that. When the client/server has a choice of multiple peers to connect to, it can pick the one with the lower latency. That way you end up picking peers that are closer and will help lessen the load on the overall network. Not perfect, but a pretty good 90% solution

Still available through their doco https://docs.docker.com/v17.12/docker-for-mac/install/

If you put down your loss due to clerical errors, theft, etc. of handling cash at around 1%, increasing the amount of cash will also increase your loss. Credit cards and other electronic payment methods, won't have that issue.

My gut feel on this, is that if you use a metric to infer if you will get a positive review and only show the popup in those cases, you might be in conflict of this ruling

That really depends on the Tax laws in the area you are looking at. Negative gains will help reduce the cost of the investment, and if you take capital gains fueled by the increase in population into account, it can be highly profitable. Even when rent doesn't cover the whole mortgage payment.

>Jobs used to be very manual, but as jobs are becoming more and more cognitive, I think caring for your cognition is going to become increasingly important for the work.

That's an interesting point, it will become less about not sitting in the same position for a long period of time, and more about making sure you don't strain your brain

I wonder if the numbers change if you filter out the applications that don't have an equivalent app on a different platform

Technically yes, laws only apply within sovereign borders, but this is where trade agreements come into effect. EU is a big enough market that most countries will likely agree to uphold the rules for European citizens. It has been a big focus for online retail in Australia lately, and for good reason.