pyramation

6 ms·

1.
by pyramation 8mo ago
thanks for sharing! author of pgpm here, we are super excited about pushing e2e and integration testing in the postgres community, a big part of the modular postgres workflows in addition to the modules/packages. We'll be continui
2.
Show HN: Pgpm, a package manager for application-level PostgreSQL modules(constructive.io)
1 points by pyramation 9mo ago|0 comments
3.
by pyramation 10mo ago
thank you! let us know if you need help setting it up!
4.
by pyramation 10mo ago
appreciate it! let us know if you and your team have any feedback, cheers!!!
5.
by pyramation 10mo ago
thank you! much appreciated ;) hope it helps you guys ship secure supabase projects!
6.
by pyramation 10mo ago
thank you! Appreciate that. Always want to make the glide path and ensure folks can run the software replicably on their machines! happy to help if you run into any issues :)
7.
Show HN: Supabase-Test – Fast Isolated Postgres DBs for Testing Supabase RLS(npmjs.com)
30 points by pyramation 10mo ago|10 comments
8.
by pyramation 11mo ago
and fwiw, my opinion comes from attempting to upgrade packages that I've depended on that all of a sudden add the module: true, which essentially requires that ALL packages must upgrade — which is 99% of the time not possible because a
9.
by pyramation 11mo ago
ES modules are cancer. I'm fine w the syntax — in fact, I love the syntax. But if you use "module: true" in your package.json, you are splitting the npm ecosystem into two groups, and it's not moving us forward.
10.
Show HN: KubernetesJS – Fully-Typed, Zero-Dependency Client for Kubernetes(github.com)
5 points by pyramation 1y ago|0 comments
11.
Show HN: From Postgres Proto to TypeScript – new transpiler for tooling(github.com)
2 points by pyramation 2y ago|1 comments
12.
by pyramation 2y ago
My journey to upgrade pgsql-parser to TypeScript led to an exciting discovery in the pganalyze/libpg_query repository: protobuf files defining PostgreSQL's AST. This discovery inspired me to create a proto-to-TypeScript transpiler
13.
Draw Me an (Abstract) Tree(fljd.in)
3 points by pyramation 4y ago|1 comments
14.
by pyramation 4y ago
An article about ASTs in postgres, featuring a postgres AST deparser written in pure pgsql
15.
by pyramation 4y ago
HI all! I wanted to share a useful tool that I built during the pandemic. One of my deepest projects I’ve created in postgres, and I’m excited to share it with the community and get ideas and feedback. I do a lot of functional programming a
16.
by pyramation 5y ago
wow, session replays looks pretty slick!
17.
by pyramation 5y ago
this library is amazing! I couldn't live without it.
18.
by pyramation 6y ago
for sure there are all sorts of postgres regex tools... You can likely do everything. The main limitations I found in plpgsql were in base encodings (that were missing), which is why I had to implement base32 from scratch. Besides that, it&
19.
by pyramation 6y ago
ok thank you! I just saw this. Adding a reference to the issue. Thanks ;)
20.
by pyramation 6y ago
yea totally! I love plv8... it's actually how I got started with postgres functions. I ultimately switched to native PG. There were known memory leaks in plv8 and eventually after learning pl/pgsql it became more natural and clean
21.
by pyramation 6y ago
Thanks for the in depth explanation. So it seems that, during the interval (which defaults to 30s) they could possibly determine the TOTP value. It seems possible to brute force, however as soon as the interval changes, by default every 30
22.
by pyramation 6y ago
yea! I LOVE sqitch. As a person who likes to write pure sql with no ORM, sqitch is the absolute best choice
23.
by pyramation 6y ago
https://github.com/pyramation/totp/blob/master/packages/totp... yes in the notes of the source here The first TOTP implementation I wrote was here was much less efficient, literally the algorithm in
24.
by pyramation 6y ago
agree, this is exactly why the code was written. I had originally tried to use plv8 or others, but as my postgres experience matured and I built testing harnesses, I decided to throw away any non-standard code (plv8, etc). I think often tim
25.
by pyramation 6y ago
I'm not an expert in timing attacks, but isn't this if we were doing equality on something like the secret? Not the TOTP value (which changes every interval)?
26.
by pyramation 6y ago
Thanks of the tips! the random() seems easily addressable with pgcrypto, but do you have any information or practical examples of how a timing attack would be mitigated here? It seems that speakeasy (a JS lib) or any TOTP that uses '=&
27.
by pyramation 6y ago
Author here. Here is the full code if anyone is interested: https://github.com/pyramation/totp/blob/master/packages/totp...
28.
by pyramation 6y ago
The file you're pointing to is not the full extension, here it is: https://github.com/pyramation/totp/blob/master/packages/totp...
29.
by pyramation 6y ago
exactly! https://www.graphile.org/postgraphile/ is the system I'm using on and wanted to avoid writing a resolver in JS
30.
by pyramation 6y ago
exactly! this is the ecosystem that I'm a part of that inspired me to build this :) I do agree about making sure you have experience writing PL/pgSQL and would also add that you should make sure you have a good test-driven environ

More ›