So maybe let me simplify my question: If I set up both a copy of a database with values encrypted by CipherStash, and an application server connected to it, and the application server has enough access to do queries on sensitive data (eg "WHERE sensitiveField = ?", pretend it needs that for a migration), and a developer has root access on the application box while it's running, and a gdb session connected to the app, can they see any sensitive data or no?

If they can't, then that's genuinely cool, and I probably need to look into the workings a bit more!

> We're explicitly not claiming to defend against an attacker who fully owns your running application with valid credentials.

and dandraper says:

> I was CTO [...] and the engineers all had access to patient data. They needed DB access [...] but not access to the sensitive values > [...] > CipherStash solves the following: > * Hide sensitive data from direct database accessors

So putting these together is this implying that a developer who wants to test things on a large data set is given access to the database directly, but not access to debug the application? Surely for example if they could load the app in a debugger, step through it, and execute arbitrary code (eg. if they are developing on it) that includes "fully running the application"? So are you saying that scenario is not secure?

If so then I'm struggling to see how a developer would use this realistically. As a dev how am I supposed to work on an application without access to be able to change the code (assuming here then that "change the code" means I can also add a statement that dumps a decrypted value to the log)?

If the security level we want is something like "devs need to be able to test migrations work on the actual data" then why would I use this instead of just NOT giving direct db access and having an audited environment spin up a db copy and container and just output the logs of whether the migration worked, without access to query the db directly. If I do that then nobody needs direct db access right? But then why would I need CipherStash?

Seems pretty brutal to me though.

My understanding is that now with this workflow I will pay the same amount but get much less usage before getting to 100% for the week. How is that not bad?

Questions:

- rendering capabilities of this seem like it should also be able to handle 2d well, or am I mistaken? every solution I see for getting high quality 2d images or rasterization in terminal is all pretty bad. Could this do better than other solutions or is there a fundamental limit being hit somewhere?

- What happens with ssh given that this is gpu accelerated?

A link that is "https:// web.site" is fine.

A link that is "https:// web.site?via=another.site" is fine.

A link that is "https:// web.site?fbm=avddjur5rdcbbdehy63edjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63edaaaddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednzzddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63ednddjur5rdcbbdehy63edn"

is annoying as shit and I need to literally apologize to people after sending it if I forget to manually redact the query string. Don't abuse this.

Unless you are trying to screw your loyal users in 3 or more dimensions which seems to be the case here

What if you are ACTUALLY someone who knows what they are doing and need to run a perf test over a multiple day period and need it running and uninterrupted? You can't. You are not a part of their target customer base, and at this point their actions have made it clear that they want such users to leave.

Microsoft, your users include developers and power users. We are not all someone's tech illiterate relative who needs constant reminding to check that backups are on, nor do we want to use OneDrive.

If we turn it off, it means off. Updates off = they stay off until turned back on, don't worry, we'll remember. Backup off = it stays off. Edge off = it stays off. Ads off = I don't want ads.

The battle they are fighting is that by using Google, tech illiterate people have found buttons like the ability to disable updates, but don't understand what they're doing, and then leave them off and now their OS becomes part of a botnet in a few months. So Microsoft believes that they are doing a greater good by not offering a real option to actually turn certain things off. But this babysitting behavior is annoying as shit when you want to leave something running that is going to take 6 days. Sure yes put it on a cloud vm. But if I was still using Windows as my OS, why should I have to? Just because your OS can't handle a developer doing something else than using Outlook and OneDrive to store pictures of aunties family get-together?

This didn't occur on any other game for me, which I recall having over 50.

If I want to ask it to do something like research and add tasks to my schedule I just tap on termux on my phone, I'm already at the Claude prompt and I just type in or voice dictate in what I want. Claude via skills and MCPs can do literally anything on my computer or connected accounts.

I'm literally not sure what I would use something like openclaw for as every time someone describes it to me it's already something I can do in this system I set up in 20 minutes. Is there something I'm missing here?

My experience developing on a fairly standard SAAS is that AI (Figma, Claude) has produced UIs which look better, are more accessible, and get through review and QA and product approval, faster and more reliably than any of the FE developers I've worked with recently can.