mfbx9da4

33 ms·

1.
Effective Patterns for Advanced MCP Usage(pulsemcp.com)
2 points by mfbx9da4 2mo ago|0 comments
2.
Rant about local models [video](youtube.com)
2 points by mfbx9da4 2mo ago|0 comments
3.
A collection of packages for developing web applications with Node.js(github.com)
1 points by mfbx9da4 8mo ago|0 comments
4.
Apple WINS AI because Intel and Microsoft got it wrong [video](youtube.com)
2 points by mfbx9da4 8mo ago|0 comments
5.
Claude Code is your customer(calebjohn.xyz)
87 points by mfbx9da4 8mo ago|74 comments
6.
OpenAPI Generator CLI(github.com)
2 points by mfbx9da4 8mo ago|0 comments
7.
by mfbx9da4 8mo ago
https://davidadler.pages.dev/
8.
Forward Compatible Unions in TypeScript(speakeasy.com)
1 points by mfbx9da4 8mo ago|0 comments
9.
Publishing ESM-based npm packages with TypeScript (2025)(2ality.com)
2 points by mfbx9da4 8mo ago|0 comments
10.
Show HN: Go Libraries for Working with OpenAPI(github.com)
3 points by mfbx9da4 9mo ago|0 comments
11.
by mfbx9da4 10mo ago
Isn’t it also easier than ever to learn though? The moat that seniors built around their expertise enabled a juicy buffer of mediocre devs paid mediocre rates pushing up the value of mythical 10x engineers.
12.
Forward compatibility and fault tolerance in TypeScript API Clients/SDKs(speakeasy.com)
5 points by mfbx9da4 10mo ago|0 comments
13.
We list Zod as a dependency and not as a peer dependency(speakeasy.com)
1 points by mfbx9da4 11mo ago|0 comments
14.
Httpx vs. Aiohttp(miguel-mendez-ai.com)
2 points by mfbx9da4 11mo ago|0 comments
15.
State-based vs Signal-based rendering(jovidecroock.com)
54 points by mfbx9da4 11mo ago|62 comments
16.
Patchutils(github.com)
1 points by mfbx9da4 11mo ago|0 comments
17.
The Great Unmasking: When AI Shows Us Who We Really Are(kennethreitz.org)
3 points by mfbx9da4 1y ago|0 comments
18.
by mfbx9da4 1y ago
How can you tell a human actually understands? Prove to me that human thought is not predicting the most probable next token. If it quacks like duck. In psychology research the only way to research if a human is happy is to ask them.
19.
MCP for Skeptics(speakeasy.com)
4 points by mfbx9da4 1y ago|0 comments
20.
Lessons from building 50 production MCP servers(speakeasy.com)
1 points by mfbx9da4 1y ago|0 comments
21.
by mfbx9da4 1y ago
> A shared secret removes the potential for detection from the service while asynchronous key signing does not. I would approximate that 95% of the time when a webhook sender discusses signatures they are referring to HMAC (symmetric-key
22.
by mfbx9da4 1y ago
Webhooks basically never implement asymmetric signing. If you survey the industry 99% of the time if it’s signed, it’s hmac.
23.
by mfbx9da4 1y ago
> Thank you for helping me understand that I had missed context My pleasure! > The signing process retains private signing materials under the custody of the sender In the signing process, with a symmetric key, the signing materials d
24.
by mfbx9da4 1y ago
> If you move authentication to the web hook implementer you lose control of what authentication mechanisms are in use I don't understand where you are coming from. The article is comparing shared secret vs signing. In both those au
25.
by mfbx9da4 1y ago
The API producer will always retain ownership over the authentication mechanism. The article is comparing the use of a shared secret vs HMAC. For shared secret: Who specifies auth? The webhook producer. Who implements auth? The webhook cons
26.
The double standard of webhook security and API security(speakeasy.com)
122 points by mfbx9da4 1y ago|57 comments
27.
by mfbx9da4 2y ago
I would be curious too. I think it comes down to the benefits are there and they're cheap enough that they may as well recommend a more secure approach.
28.
by mfbx9da4 2y ago
Hey, author here. Pleasure to work on this article. I'd welcome strong opinions :-)
29.
There's no good reason for signing webhooks(speakeasy.com)
18 points by mfbx9da4 2y ago|3 comments
30.
Signing HTTP(justinsecurity.medium.com)
4 points by mfbx9da4 2y ago|1 comments

More ›