AtNightWeCode

7 ms·

361.
by AtNightWeCode 3y ago
One problem could be JWT. Anybody can use the bearer tokens from the portal and then use K6 to flood any endpoint. If you are willing to pay for the attack which states often do.
362.
by AtNightWeCode 3y ago
I don't really understand how a DDoS can happen when the portal is using MS routing. Should be a simple fix. More likely some misconfiguration.
363.
by AtNightWeCode 3y ago
This is like when their speech-to-text-service always got "how much wood could a woodchuck chuck if a woodchuck could chuck wood" right even if you replaced some of the words with similar words. But then failed at much easier sent
364.
by AtNightWeCode 3y ago
For some stupid reason I always start the chats with a greeting. Kind of funny when it does a dad joke and also explains what Hello means just because I forgot a comma.
365.
by AtNightWeCode 3y ago
Thank you
366.
by AtNightWeCode 3y ago
Is this not the same problem as older numerical keypads on doors? The ones that opens as soon as you enter the correct 4-digit sequence. The cops used a pattern to crack those fairly quickly back in the 90s at least.
367.
by AtNightWeCode 3y ago
In theory, you mean if there were like separation of concerns. Like the billing address being in the billing service instead of the customer service?
368.
by AtNightWeCode 3y ago
Jesus, it was a joke. The major diff is that with imperative langs you are not using functions as much as with functional programming langs. Even though in C# and other langs functional patterns becomes more and more common. Which is also m
369.
by AtNightWeCode 3y ago
Love to meet you at a party! ;) Cheers!
370.
by AtNightWeCode 3y ago
Useless parentheses?
371.
by AtNightWeCode 3y ago
That is why most developer jobs are safe. Tasks from stakeholders often contains only a title.
372.
by AtNightWeCode 3y ago
Are we chatting directly with the model? Maybe the interface has changed. With long term use the likelihood of hitting edge cases is higher and maybe that is a cause as well for what users are seeing. People probably ask more vague question
373.
by AtNightWeCode 3y ago
The reason certificates expire is because historically the quality of the generators was known to be poor. NotAfter ensures that a new certificate is created with a better generator every now and then. Today that is not really a problem. Pu
374.
by AtNightWeCode 3y ago
I have cancelled my sub. What I found is that the extra cognitive load these services comes with simply does not pay out. Github copilot is even worse. I am gonna check my estimates against the code I wrote during the last 6 months. I am pr
375.
by AtNightWeCode 3y ago
I call BS on this. ChatGPT anyversion could never solve complex problems. That is just silly. I tried to get the version 4 to solve some very basic problems around generating code. It suggested to build several trees including a syntax tree
376.
by AtNightWeCode 3y ago
I have not seen any decrease in speed with ChatGPT-4. It has become more stupid though. It gives results that you even ask it not to give. It has some sort of amnesia. Even if there are other services that in the short term can beat ChatGPT
377.
by AtNightWeCode 3y ago
No.
378.
by AtNightWeCode 3y ago
You are right and I am not sure where my mind is right now. Isaac Asimov is on my bucket list to read. At least the trilogy.
379.
by AtNightWeCode 3y ago
It is not a fluke that ChatGPT becomes popular in a time when alternative facts wins elections. A time when prominent business people look down at education and talks about smart people being dangerous. A time when you have to sit down with
380.
by AtNightWeCode 3y ago
Surely there should be a way for an owner of a group to revoke these permissions. I am not familiar with the tech though. If it is not too much hassle I would create a new group, switch to it and delete the old one. This is just one of many
381.
by AtNightWeCode 3y ago
"It is an enterprise feature but not including in your enterprise agreement." "You want to use XYZ? Fine, we include any count of XYZ for free. Next agreement negotiation. 200$ for each instance of XYZ." CF is simply n
382.
by AtNightWeCode 3y ago
So they added this. But stale-while-revalidate does not work. And there is no request collapsing. And you still have to write code to get CORS to work in workers. And you can't cache the response from workers. How does CF prioritize th
383.
by AtNightWeCode 3y ago
The opposite. I always add CF to small sites.
384.
by AtNightWeCode 3y ago
Not the author but to use WAF rules that can be used on layer 4 for instance. Zone lockdown, some rate limits...
385.
by AtNightWeCode 3y ago
Depends. But moving the payload between the body and the query will not solve anything performance wise if you design for it.
386.
by AtNightWeCode 3y ago
Many logging systems exclude query parameters from the logging by default. It is also fine to include PII data in the logs as long as they are handled correctly and deleted after 30 days. But I have got burned by this problem as well. Like
387.
by AtNightWeCode 3y ago
A query of that size will likely not benefit from a GET anyway so use a POST.
388.
by AtNightWeCode 3y ago
Or just use GET since it already works. I don't see any problems with large query params. You can also split the search into a POST request and a GET request for the result.
389.
by AtNightWeCode 3y ago
It is important when a team works with PRs that it is clearly agreed upon what should be reviewed during PRs. PRs is not the place to discuss solutions. If that is your problem then solve it before you start coding. I view PRs as a kind of
390.
by AtNightWeCode 3y ago
"With access to the operating system, we managed to find some internal Google URLs related to the docker image repository. We could also access the internal repo which later was fixed and the access from non internal IPs was blocked.&q

More ›