96 karma · joined March 18, 2020
You are also wrong in saying there are no projects that could reasonably have a safe api key made unsafe by this exploit.
One example, a service that has firebase auth must publish the key (Google's docs recommend). Later, you add gen ai to that service, managing access using IAM/service accounts (the proper way). You've now elevated the Firebase Auth Key to be a Gemini key. Really undeniably poor from Google.
Also, there is an extension for freecad to make non rectangular (e.g. "p") shaped bins.
Most satisfying, least productive things I've done this year!
I've been using GOVUK stuff for my own purposes for a good-long while now, this should speed up the process.
I'll try to plug your thing into Json Forms [1], then I'll be back to the good old days.
Super cool to see this, and congrats on 1.0!
One question, has the GDS stance on Javascript softened, namely progressive enhancement being essentially mandatory [1], since I last worked with you? Is the target for more controlled user groups, non-govuk projects, or do you do SSR to give a usable first HTML response?
[1] https://www.gov.uk/service-manual/technology/using-progressi... Last update: 16 December 2019
Something I've found valuable is on is managing euler units/ratios (e.g. proportions 10^1, percentages 10^-2, basis points 10^-4) . Enforcing a standard that all interchange, data storage has either the same scale, _or is stored with its scale (and not in the name)_ will reduce errors hugely significantly.
> Since Google Domains is the underlying domains registrar for Cloud Domains, there are some important changes that we want to share with you.
> What do you need to know? Upon closing of the Squarespace-Google Domains transaction, Squarespace Domains will become the registrar for your domains managed by Cloud Domains.
Docker desktop pays for itself by solving these issues though IMO (I wasn't able to get a licence at the old role however)
Super tasty, not spicy, can be done in 5 days, fermentation kicks off quickly due to sugar content in beets so you get quick feedback.
Adding a schema to it seems natural to me (as someone who prefers strong-typing), and the JSONSchema implementation seems pretty lightweight and sensible.
I'd go even further down the mining XML's legacy route and add better XPATH2.0 + XQuery - style support. XQuery was a great tool, so expressive. Though it did spawn XQueryX [1] which I'm still unsure whether it was a joke or not.
[1] https://www.oreilly.com/library/view/xquery/0596006349/ch22s...
Regarding your recommendation, were there any libraries that exist already?
Otherwise, I assume that you mean:
1) write some code to derive a CRUD/RPC OpenApiV3 Spec from some data-at-rest spec/JSON Schema other (e.g. RDBMS Table)
2) generate endpoints conforming to that spec and wire it to persistence
3) generate UI components that allow you to drive requests to those endpoints.
4) build something to serve backend + front-end
Those steps look like a low-code system to me?
Hah, that's the problem with every framework!
> SDLC is a frequent pain point.
I've dealt with that pain before with other tools (promoting DataDog montiors + dashboards comes to mind). This area seems like it'll be even more painful so I'll definitely be filtering by that critereon.
> On the last question...
My particular use case would be for some human checkpoint in an otherwise-automated system. I'd hope to pull in all the contextual information, provide the decision-maker with a text box and an approve/reject decison.
> Worst part here is I feel like this is really often something that will come with using the product. Often the use cases documented and sold really seem like all you'll need.
Yeah, that's what worries me about low-code. I know it'll be a bit of a slog to do all these full-code, but it's a known quantity.
Agreed on the all in one docker solution, it seems like a choice made to get things off the ground, not one predisposed to effective prod operations (storage being the major headache, though I assume there's not too much stored on disk).
Regarding the more complex application, do you think you could pinpoint what quality caused the low-code version to be too complex?
Out of interest, what proportion of your creators are engineers vs SMEs? Reason why I'm asking is that I'd be very nervous of letting non-engineers (without an understanding of just how much damage they could do) create write apps.
I'll take a look, I'm much happier in Python than JS so a big plus for me.
Not defence of the product, definitely not for me, removes the fun part of mushroom growing.
Much better than a crazy ORM rat nest in my experience.