1. Rafert Jan 2, 2026 parent

   I know of https://github.com/Shopify/toxiproxy but it is not protocol aware, you might be able to add it yourself.
2. Rafert Dec 14, 2025 parent

   > This is one of the frustrating realities of these attacks: once the malware runs, identifying the source becomes extremely difficult. The package doesn't announce itself. The pnpm install completes successfully. Everything looks normal.

   Sounds like there’s no EDR running on the dev machines? You should have more to investigate if Sentinel One/CrowdStrike/etc were running.

3. Rafert Oct 18, 2025 parent

   > Using UUIDv7 is generally discouraged for security when the primary key is exposed to end users in external-facing applications or APIs.

   I would not call this “generally discouraged” when APIs generally surface a created_at timestamp in their responses. A real life example are Stripe IDs which have similar properties (k-sorted) as UUIDv7: https://brandur.org/nanoglyphs/026-ids#ulids

4. Rafert Feb 7, 2025 parent

   The counter can always be 0, which is what cloud synced passkeys are doing IIRC.
5. Rafert Feb 27, 2024 parent

   We've used it for about a year - Blazer is okay if you need a quick SQL query console, but we found it lacking as a business intelligence tool. The support for graphs and dashboards is limited, for graphs it requires you to structure the query in an exact way as you can see in the Blazer readme. There is no customizability at all.

   After some research on available alternatives that don't break the bank, we decided to deploy a self-hosted instance of Metabase[0]. This took only a few minutes to set up using their Docker image[1] and it has much better graphing capabilities and you can easily put a custom layout together for dashboards. Upgrading is similarly easy (just redeploy). Also easy to configure: additional data sources, hiding or changing the data type of a column, G Suite sign-in for our domain. It has 'models' as sources of truth to build other queries in - eg a single definition of an 'active user'.

   In short, moving from Blazer to Metabase was a huge win for us. Highly recommend it if you need anything more than Blazer's table output.

   [0]: https://github.com/metabase/metabase [1]: https://docs.render.com/deploy-metabase

6. Rafert Feb 5, 2024 parent

   > It would be quite unfortunate to end up with a UUID v7 in PostgreSQL that’s not quite the standardized one because the patch got merged too quickly.

   The chances of that seem extremely low at this point. The contents of a version 7 UUID have not changed since work started on RFC 4122 bis in October 2022: https://author-tools.ietf.org/iddiff?url1=draft-ietf-uuidrev...

7. Rafert Sep 24, 2023 parent

   Curious which DBs are "production ready" according to you, and how you define that exactly.
8. Rafert May 4, 2023 parent

   I'm aware - but that's hardly their first foray into the space is what I'm trying to say. I guess 'abandoning expansion' can be read multiple ways :)
9. Rafert May 4, 2023 parent

   Quickly? They acquired 6 River Systems and announced the Shopify Fulfillment Network back in 2019. The were some pivots along the way (using 3rd party vs building out own warehouses) but it seems to me they've been at it for some time.
10. Rafert May 4, 2023 parent

    Things changed quite a bit since this quote from February 17:

    > “There’s no cuts coming for us,” Harley Finkelstein told The Canadian Press. “We’re in a really good place.”

    https://globalnews.ca/news/9494197/shopify-outlook-no-layoff...

11. Rafert Apr 7, 2023 parent

    Have you tried Tapioca (https://github.com/Shopify/tapioca) with Sorbet? Typing in general has ways to go sure, but I find this combination quite usable in my day to day.
12. Rafert Feb 16, 2023 parent

    Besides consent there is also the possibility of legitimate interest under the GDPR.
13. Rafert Feb 9, 2023 parent

    They were locked into long term leases anyway: https://storeys.com/shopify-the-well-toronto-office-space-su...
14. Rafert Jan 4, 2023 parent

    Agreed. The author is surprised by a major Ruby release on Christmas day (tradition for many years) and uses a lot of superlatives for no reason.
15. Rafert Jan 4, 2023 parent

    `Float(str, exception: false)` returns either float or nil.
16. Rafert Dec 30, 2022 parent

    ULID hits most of these, and can be converted to UUID for use with databases supporting this datatype (not a strong column): https://github.com/ulid/spec
17. Rafert Dec 20, 2022 parent

    The Basecamp folks feel that web and mobile are the same target: https://turbo.hotwired.dev/handbook/native

    Rails doesn't stop you from building a backend for your React and React Native frontends, for example just look at Shopify.

18. Rafert Nov 7, 2022 parent

    Tab stops are called out in the footnotes:

    > Never attempt to line up text by using spaces. The only exception is if you are using a monospaced font. But in word processing applications, there are appropriate tools available for lining up text, like tables[1] and tab stops[2].

    [1]: https://practicaltypography.com/tables.html [2]: https://practicaltypography.com/tabs-and-tab-stops.html

19. Rafert Sep 22, 2022 parent

    https://github.com/ruby/psych defaults to only loading permitted classes since 4.0 so that seems less of a concern now?
20. Rafert Sep 16, 2022 parent

    WebAuthn does not mandate any kind of form factor[1], external tokens use CTAP for USB/Bluetooth/NFC, Apple FaceID/TouchID and Windows Hello using proprietary interfaces with the built-in hardware. Blink-based browsers ships with a virtual authenticator for debugging[2] and there are a few more[3].

    Apple and Google already announced cloud syncing earlier this year, using "passkey" as a friendlier term for end-users. QR codes already allow for cross-ecosystem non-synced use cases, like using my personal Android phone to log in an account with my work Macbook. https://securitycryptographywhatever.buzzsprout.com/1822302/... is a good listen to catch up on the latest developments.

    [1]: https://www.w3.org/TR/webauthn-2/#authenticator-model [2]: https://developer.chrome.com/docs/devtools/webauthn/ [3]: https://github.com/herrjemand/awesome-webauthn#software-auth...

21. Rafert Aug 14, 2022 parent

    Was curious about 7-zip too, TIL about "origin laundering": https://textslashplain.com/2016/04/04/downloads-and-the-mark...
22. Rafert Aug 13, 2022 parent

    With the Screen Capture API: https://developer.mozilla.org/en-US/docs/Web/API/Screen_Capt...
23. Rafert Aug 2, 2022 parent

    People do switch clouds, but sure it's never trivial. https://about.gitlab.com/blog/2019/05/02/gitlab-journey-from... for example.
24. Rafert Jul 13, 2022 parent

    Exactly. Why should I use this if WebAuthn can do any kind of biometrics (or not!) available on the users platform for free?
25. Rafert Jun 6, 2022 parent

    You don't need those either, perhaps https://github.com/herrjemand/awesome-webauthn is more to your liking than the website of a standards organization.
26. Rafert Jun 6, 2022 parent

    Why not, it seems to be coming to 1Password: https://www.youtube.com/watch?v=lYFxfchhR1g
27. Rafert Jun 6, 2022 parent

    They've already put this WebAuthn teaser up: https://www.youtube.com/watch?v=lYFxfchhR1g
28. Rafert Jun 5, 2022 parent

    I think you missed "since then" preceding the second quote.

This user hasn’t submitted anything.