HN user
Tech Enthusiast.
Claude web app cannot automatically read from my github private repo. I need to attach it every time manually.
Claude Code works though. But now I can’t share this with non-technical users
12x multiple for a Cloud SaaS company is not overpriced typically. I was surprised at this low multiple. Could be due to the current economic situation. And also the licensing changes, lack of product moat contributing in the wrong time.
Would this benefit encourage you to use GraphQL as your backend/data api layer?
On the performance side, there is definitely the N+1 problem which is solved (partially) by the data loader pattern. But curious if the benefits vs tradeoffs is in favour of GraphQL? And have you considered tools like Hasura/Postgraphile that take care of boilerplate CRUD APIs for databases? Then you actually just focus on writing business logic.
Relay spec lets you do cursor based pagination. Are there specific use cases you are looking to solve?
We have written a post[1] on building a real-time chat app with Streaming Subscriptions on Postgres. It gives a quick overview of the architecture used and how you can leverage the API on the client side with AuthZ. There’s a live demo that you all can try out.[2]
[1] https://hasura.io/blog/building-real-time-chat-apps-with-gra... [2] https://eclectic-dragon-25a38c.netlify.app/
Would love to see more use cases coming out of this :)
Interestingly, there are no breaking changes that were required to be addressed by Hasura GraphQL Engine to support Postgres 15. Hasura is fully compatible with this release, with the potential of adding the MERGE command via the GraphQL API soon.
Excited about the incremental performance improvements and making more secure defaults by revoking CREATE permission for public schema for non-superusers.
MERGE feature is interesting. But specifically on the revoking CREATE permissions for the public (or default) schema, this is a step in the right direction. Some of the defaults in Postgres can be more secure. For example, the first time I use a POSTGRES_PASSWORD to configure a password, changing this password involves more steps than just changing the values of the ENV, because it doesn't take the changed value there after.
Structured logging with JSON is going to improve a lot of debugging, again a great productive change.
Also, any idea when the docker image for Postgres 15 will be available?
I can speak about Hasura; I work there :)
Hasura connects to databases and all your other APIs to give a unified GraphQL API (and REST API, if you configure it).
This takes care of your CRUD APIs portion of building your app. With declarative Access Control Rules, you get powerful Authorization. IMO, these two should take care of 70% of your application code that you typically end up writing. The remaining will be custom business logic that you can write in any language or framework of choice and connect it to Hasura.
There’s of course more with the cloud offering to give you caching, rate limiting and monitoring in production. Hasura doesn’t host your database, it just needs the db connection string to get started.
We're very excited to launch GraphQL joins - a way for folks with existing investments in GraphQL to join data across GraphQL and non GraphQL sources. A few key points:
- Join data across new or existing GraphQL services: Your own GraphQL services or GraphQL vendor APIs (eg: Github)
- Join GraphQL services with other non-GraphQL services: Join data in your GraphQL Server with data in your databases (eg: Postgres, Timescale, Yugabyte with GraphQL servers)
- Uses native GraphQL with no changes to the GraphQL specification: No upstream changes are required to the GraphQL service
- Powered by semantic configuration - no custom code required.
- Role-based access for schemas you bring in
We'd love for you to try it out and give us your feedback. This is a sample repo for you to take this for a spin: https://github.com/hasura/graphql-joins-example
My google search over the last two years has been primarily "site:http://reddit.com <search-term>".
Niche communities with valuable insights and anecdotes that cannot be found elsewhere.
Now I wish they do well with their upcoming IPO and beyond.
Hey folks, I am Praveen, a developer advocate at Hasura. We first launched Hasura Learn in 2019 with the intention of building GraphQL tutorials for developers who wanted to learn GraphQL by getting hands-on, within the comfort of their favourite stacks. 2.5years later, we have grown this to just over 25 courses, added tutorials on databases, and Hasura (basics, authorization & production ready advanced concepts). We. have had a lot of help from the community in building & maintaining these over the years.
The intent has always been for devs to be able to get exactly the slice of info they need to get productive. The courses typically take between 30mins to about 2 hours to complete.
We're super excited to re-launch Hasura Learn today with it's brand new look, poised for many more courses to be added in collaboration with the community. We have also Japanese & Mandarin translations to our two most popular courses, and added 2 new databases courses (SQL Server & MySQL in addition to Postgres).
with all your back end logic being in lambda functions.
Although this is recommended for NoOps and Scale, you can technically run all your backend logic on any full fledged servers that can run anywhere. Hasura just requires a HTTP endpoint for custom logic.
Agreed with all 4 points.
EXPLAIN ANALYZE output is cryptic enough for beginners to get any meaningful information out of it. Your thoughts on where to get started as a frontend developer?
Have you tried using Gatsby's GraphQL API as a standalone server? The dev server in Gatsby lets you use the GraphQL endpoint running at `___graphiql`. I wrote about this in https://hasura.io/blog/data-federation-in-graphql-using-hasu...
How does one developing a product find out if they are infringing a patent? Apart from the Apple/Samsung patent battle few years ago and to an extent Google/Oracle battle, I don’t remember anything in the tech space leveraging this.
Is there a list of companies that got screwed by giant companies because they unknowingly infringed a patent?
I have been using NextDNS with a few block lists configured at the router level and device level.
The internet experience has improved a lot since ads and trackers are blocked system wide.
A few block lists that I would recommend:
1. Steven Hosts - https://github.com/StevenBlack/hosts
2. Adguard DNS - https://github.com/AdguardTeam/AdguardSDNSFilter
3. disconnect.me
The amount of DNS requests made silently in the background is astonishing across all devices.
This is a misconception. Hasura doesn’t depend on serverless functions for doing business logic.
If you are comfortable writing GraphQL, you can add your own custom GraphQL server to Hasura for business logic.
If you are comfortable with REST APIs (or something that already exists), you can use Hasura Actions to define GraphQL types and call your REST endpoint to perform business logic.
Now where this server is hosted is totally upto the user. It can be serverless functions or can be a monolith server (in language of choice) hosted anywhere.
Hasura just needs the endpoint :)
In a production app, you would limit the query depth or have an allow-list to prevent arbitrarily nested queries.
In India, we have this app called cure.fit[1] which now conducts live CrossFit classes for anyone to attend from home. This is just body weight movements and no equipment.
Apple takes so long to add cross-platform support despite these services making money with more potential to do so with cross-platform. icloud.com is unusable. Keychain is available only on Mac and iPhone and restricted to Safari.
I understand they are trying to lock-in users to their platform / devices but there would be more users if cross-platform versions are available making more money for them eventually.
It's not like consumers are buying a Mac or iPhone because Apple Music experience is better, or iCloud experience is better.
Have you checked out https://hasura.io? That may be exactly what you are looking for. You create DB schema (Postgres in Hasura's case) and point Hasura to Postgres to get an instant realtime GraphQL CRUD.
Disclaimer: I work at Hasura.
In case you are looking only for a web app you can check out this open source starter - https://github.com/hasura/gatsby-gitbook-starter (Made using Gatsby and MDX).
You can write markdown with added benefits of React components and this Gatsby starter will render a GitBook theme documentation site. Self host using Docker or build the static bundle and deploy to Netlify :)
Disclaimer: I maintain this starter.
For a 50% fall, there needs to be a 100% increase to reach back the same levels and hence the timelines might be longer.
Crypto trading garnered everyone’s attention when Bitcoin kept rising upto $20k and there was a huge FOMO.
During that time, there were a lot of Get Rich Quickly scams around Crypto trading. Coupled with 24x7 online trading, a lot of people were losing a lot of money. Taxation (for those who made money) around Crypto weren’t clear either.
An exchange ran away with the money. There was also the money laundering aspect. The Govt also wanted to curtail cash usage (Demonetisation happened) and track the transaction trails.
Not saying if they are right but some of these reasons were triggers for the original ban by RBI.
Casinos are banned in majority of Indian land and i’m wondering if the reasons are the same. Would be interested to know what the Supreme Court thinks about that in the current world.
Now Safari will no longer trust certs valid for more than 13 months. Recent discussion thread about it https://news.ycombinator.com/item?id=22398063
JWTs have made client side auth integrations look better. But the problem is that common security considerations and implementation details are generally overlooked.
1. Tokens are typically stored in localStorage. (app becomes vulnerable to CSRF & XSS attacks).
2. Tokens can be stolen. Now this is generally controlled by having a very short expiration time.
3. Short expiration times mean persisting refresh tokens to do a silent refresh.
4. Blacklisting of tokens adds complexity and defeats the purpose of decentralising the auth workflow.
5. There's technically no logout. It's all done via very short expiration times. With multiple tabs open, logging out on one tab needs to be synced with rest of the tabs via some event listeners.
6. SSR rendered pages need to send along the latest refresh token cookie so that the browser can use it.
7. The refresh token is sent by the auth server to the client as an HttpOnly cookie to prevent XSS/CSRF.
My colleagues wrote a detailed guide which goes through these considerations - https://hasura.io/blog/best-practices-of-using-jwt-with-grap...
Adguard Pro in VPN mode works system wide on iOS. I personally use this filter list https://github.com/StevenBlack/hosts
Query whitelisting has been available since beta 1. It is called Allow Lists :) https://docs.hasura.io/1.0/graphql/manual/deployment/allow-l...
We recommend every production app to setup Allow Lists to prevent arbitrary querying.
Also: Something about Postgres
Is Ghost bringing back support for Postgres? :)