Viewing profile — va1en0k

It'd be probably easy to guess which communities I mean, but I'd rather not name names myself and hope someone supports me with a datapoint to offset my personal paranoia. Lately I…

Nix is slowly becoming a major point of contention. In some communities, it’s already scary to even hint that one dislikes it.

looking forward to reading the postmortem

I really like Facebook's codemod.py for stuff like that: https://github.com/facebook/codemod It has something like automatic and manual modes, so you can check (and fix) every diff…

You should try https://uploadcare.com/

Wow, thank you! We were wondering if it does the job :)

For now, it can be only a separate table. In the future, of course, there're going to be buckets and everything, stay tuned! If you have some specific ideas about this in mind, my …

Hey, Yes, we're working on it! :-)

And, of course, you can use multiple different dj.FileFields for that in one model, if you need only a limited number of images.

Ha-ha, I'm on it.

Hi! We're working on several things you can do to avoid having a separate table, make sure to be in touch :-) Please continue to provide feedback, it's very valuable to us, thank y…

Hi! Thank you, this was our goal (not to be similar with filepicker.io, but to have a clean, straightforward way to handle files). :-)

please try again... we weren't ready for the prime time probably :-) works for us now

Yeah. I'll edit my post to add your points, but I can't do it right now

Why the hell is that advanced? Nice to know, though. Thanks!

Well, having to use hacks for that is just plain wrong. I think we can consider this as bugs in these mainstream languages. Probably you could file them?

You can use nginx as a proxy on your side for any APIs. Just proxy_pass it to the API, and listen only on the local side. It can provide caching and other stuff that way.

I'd actually recommend just get the exact certificates you're going to work with. For example, if I'm using GitHub's API, it makes sense not to check all the chain, but just keep t…

yep however, encrypted connection without this checks allows, for example, Man-In-The-Middle attack

many servers are deployed using Linux which doesn't have any cert manager (see citation in the blog)

Exactly. Security is something that should just work - arguably, the first thing with such requirement. Even though it simply can't just work in many cases, it should be as close t…

better than /etc/hosts approach, yeah