What's "worse" is that today we have access to (basically) real-time videos/evidence of the crimes and yet so many people claim that's all fake.
Israel is conducting a genocide in Gaza. The least we can do is be vocal about the reality.
634 karma · joined April 15, 2015
What's "worse" is that today we have access to (basically) real-time videos/evidence of the crimes and yet so many people claim that's all fake.
Israel is conducting a genocide in Gaza. The least we can do is be vocal about the reality.
[0] https://en.wikipedia.org/wiki/Oath_of_Allegiance_%28United_S...
If your goal was to establish authoritarian system and/or oligarchy in the US within a year and without firing any bullets, what would you do differently to what's happening now? Honest question I've been thinking about lately. My current answer is that the diff is not that big.
Yes, there's much to be done about efficiency/productivity on the government part, but this is not what's being done.
I am not sure if Elon is deliberate (similar to how "X is about free speech", DOGE is about "government efficiency" i.e. fake ideology to push some agenda) or an useful idiot (believes that all he's doing is improving efficiency, without realizing the consequences of destroying the institutions), but that's not the main point. The point is that fundamental institutions are being destroyed very, very quickly, without real oversight. This has important and negative consequences to democracy.
I'm familiar with Vault and been using that at work — but we tend to fetch values from Vault and export them as env variables in the end anyway. Obviously we don't want to hardcode these values in the code either. So env vars are not good for secrets, hardcoding is terrible — what's good/secure then?
It seems that Cursor is using Electron. I don't know about its internals (tried it a couple of times years ago), but after a quick look at the docs I've found this: https://www.electronjs.org/docs/latest/api/utility-process#u... which is a section describing `utilityProcess.fork(modulePath[, args][, options])`:
env Object (optional) - Environment key-value pairs. Default is process.env.
I don't get why some unique-looking prefix/suffix would be needed there, though. process id: 54279
process args: -p "<some id>" + JSON. stringify(process.env) + "<some id>"
process path: /Applications/Cursor.app
The alert showed up right after I installed the app and clicked on the Cursor icon [1]. I understand that processes can access the entire environment by default (which was always a bit too "open"/strange for my taste, but I get the reason) but then I don't understand why you need to use `JSON. stringify(process.env)`[0] <some id> was some 12 character hex string
[1] Note that this was like a month ago; I have a cold, so finally have time to catch up on such questions
Can you elaborate/show an example?
I agree in general to limit sensitive data stored in env vars, but often it's not feasible. One might have e.g. AWS keys loaded when using Terraform. The problem in this particular case is that Cursor is not selective in what env vars are loaded, it serializes _everything_. That seems like an odd choice to me.
Are there any public sources about SM being written in Pascal? TIL
Given the acquisition by ClickHouse (congrats!), what can we expect for the CDC for sinks other than CH? Do you plan to continue supporting different targets or should we expect only CH focus?
Edit: also, any plans for supporting e.g. SNS/SQS/NATS or similar?
1. Syncing data in Postgres to ElasticSearch/ClickHouse (which handle search/analytics on the data I store in PG)
2. Invoking my own workflow engine — I have built a system that allows end-users to define triggers that start workflows when some data change/is created. To determine whether I need to start the workflow, I need to inspect every CRUD operation and check it against triggers defined by the users.
I'm currently doing that in a duck-tape like way by publishing to SNS from my controllers and having SQS subscribers (mapped to Lambdas) that are responsible for different parts of my "pipeline". I don't like this system as it's not fault-tolerant and I'd prefer to do this by processing WAL and explicitly acknowledging processed changes.
Can you elaborate on failure modes? What happens if e.g. NATS server (or worker/replicator) node dies?
In principle, how hard is it move data from Postgres not to another PG but e.g. ElasticSearch/ClickHouse?
Just to give you a bit more context, I've been evaluating CDC (change data capture) tooling and Prisma Pulse was one of the options. My primary data storage is Postgres but I have a need to react when data in some tables is changed (depending on some user-provided filters). I'm currently handling that with naive message push to SQS, because Debezium/Kafka setup is too expensive/complex. Prisma Pulse looks great, but that CDC part of my app is crucial and I need an option to be able to host it myself/on premises for some customers.
However I totally understand the need to build a moat — good luck on your journey!
Will it ever be possible to self-host Prisma Postgres (or Pulse)? It's great that I can use your platform, but if I adopted e.g. Pulse, that's a non-trivial vendor lock in. I'd feel _much_ safer/confident building my app around the Prisma stack (besides the ORM, which I like).