pingsl

Joined 4 years ago

Karma
105
Submissions
80
Member since
Dec 15
~ Database engineer for decades

~ Open source evangelist for a while

View on Hacker News

Recent submissions

Comment · 4 years ago
This is horrible -_-!!! But I wonder what would happen to GitHub Discussions in this situation?

I now 100% feel necessary to build a Discord channel for OSS projects.

Comment · 4 years ago
Confused for a second till I saw "Write-Only storage".

Obviously, they should include "Trash bin" in the pricing comparison table.

Comment · 4 years ago
From an app dev perspective, sysplex is very similar to a single system image, especially when they are using the Db2 database.
Comment · 4 years ago
You were very likely not the only one who found this security issue. But you were probably the only one who disclosed this issue to the bank.

This is ironic, but it is how business people deal with issues.

Comment · 4 years ago
I am very excited to see the RISC-V devices come to the end users.

Then I am thinking how this device could fit into my daily life. I am wondering what are the typical scanrios for portable computers these days?

Comment · 4 years ago
I have accounts on Medium and Substack.

In the beginning, I posted blogs on Medium, and I sent out newsletters on Substack.

Then Medium started to provide email subscriptions.

Now Substack has a mobile app.

I need to rethink my content strategy going forward...

Comment · 4 years ago
> if someone has access to data the assumption is they are able to read it.

This is not the case in most production for two major reasons:

1. Row-level security is expensive and hard to manage, so in most cases, users are granted the select privilege on table level. But indeed, it doesn't mean they should have access to all the rows in that table.

2. Power users should not have production accounts all the time. The production accounts should only be activated when power users have to perform the changes during the production change window.

So financial institutes usually generate two kinds of reports for audit/regulation purposes.

1. Report on the privileges and roles, which tells if a user should have those privileges and roles. This is a periodically static report.

2. Report on the actions a user has performed to see if these actions are part of the changes. This is a dynamic report in which we have to capture the select statements.

Comment · 4 years ago
Me neither. That's why I posted here to see if someone could give some insights on this.
Comment · 4 years ago
I am afraid data audit is not just about data changes. The real challenge is how to audit the data read which people should not do.

Since there is no redo logs generated for data read, CDC could not help in this case. It will reply on the audit traces, the SQL capture and cache, etc. But it's costly.

Comment · 4 years ago
People die some day because of some disease. This is natural.

Give people a heart from other species, this is unnatural.

I'd rather transform my brain and thoughts into a robot.

Comment · 4 years ago
I am using logi K580.

It can connect 2 devices and support both Bluetooth and Unifying.

Most important it has numpad with a compact size.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton