How much value are you going to be able to extract over its lifetime once your customers want to see some additional features or improvements?

How much expensive maintenance burden are you incurring once any change (human or LLM generated) is likely to introduce bugs you have no better way of identifying than shipping to your paying customers?

Maybe LLM+tooling is going to get there with producing a comprehensible and well tested system but my anectodal experience is not promising. I find that AI is great until you hit its limit on a topic and then it will merrily generate tokens in a loop suggesting the same won't-work-fix forever.

I know there are other solutions to this particular problem but this model is extremely easy to reason about. When the application accesses tenant objects or delegates that access with pre-signed URLs it is doing so with ephemeral credentials that literally could not access the objects in another tenancy.

That and a similar DB isolation, allows most of our handlers to be very simple as far as tenant isolation goes.

Just before they announced that I was working on creating org accounts specifically to contain S3 buckets and then permitting the primary app to use those accounts just for their bucket allocation.

AWS themselves recommend an account per developer, IIRC.

It's as you say, some policy or limitation might require lots of accounts and lots of accounts can be pretty challenging to manage.

When I learned German the word for potato was Kartoffel.

"You have 100M MAU, you need to be keeping up with the standards"

What is the incentive for the citizen to make sure their authentication isn't shared?

Aggressively limit speed and enforce it until you're onto the fast roads.

If cars could only roll on at 10mph I'd feel a lot safer and I'd probably be able to use my bike and make better time for the local stuff.

I would be worried about collision safety though, I am not going to persuade everyone in my neighborhood to stop using cars in a hurry and there are not bike routes between me and school, library, shops, ...

If you spend 4 hours/24 hours on your phone then every 20X you'll have lost 3.33... X.

I think the author is using year and waking-years but it doesn't parse well for me because you don't get close to 20 waking-years for every 20 years.

The way I read it TFA is claiming that the Devs who built the Natascha AI suite did solid work.

Contrary to prior reporting there really was an LLM based product at Builder in addition to their earlier business of a large pool of contractors cranking out apps on demand.

https://off-the-rails.netlify.app/

Google knows there is a building here (there is a dotted outline on the map) and that it doesn't know the address (if I drop a pin on the building I get a button "Add Address Address may not be up to date")

We've clicked that button a few times over the years and received an email telling us the new address has been submitted for review but that is the end of what we hear from Google.

IIRC Apple maps does return the correct location if you search for our address.

So, this is my bat signal! Is there anything I can do?

Comments URL: https://news.ycombinator.com/item?id=38732025

Points: 1

# Comments: 7

https://openid.net/wg/connect/

   How does OpenID Connect improve security
   Public-key-encryption-based authentication frameworks like OpenID Connect (and its predecessors) globally increase the security of the whole Internet by putting the responsibility for user identity verification in the hands of the most expert service providers.
   ...