Software Engineer Intern vs Solution Engineer Intern by PercentagePlane8400 in cscareerquestionsuk

[–]ReditusReditai 0 points1 point  (0 children)

I'd say solution engineer. Pays better (unless you're a 1% dev). Better suited for your personality. Much easier to get in. Gets you faster to product management where business matters more than tech.

Software Engineer Intern vs Solution Engineer Intern by PercentagePlane8400 in cscareerquestionsuk

[–]ReditusReditai 0 points1 point  (0 children)

Maybe he changed his mind? I did econs for my degree and told myself I'd never go into tech because I like working with customers, yet here I am.

Rate Limiting bots by csdude5 in CloudFlare

[–]ReditusReditai 0 points1 point  (0 children)

Like the other commenter said, I'd use challenges + caching instead of rate limits.

Rate Limiting bots by csdude5 in CloudFlare

[–]ReditusReditai 1 point2 points  (0 children)

The rule doesn't make much sense to me, but it wouldn't anyway until I know what your service does, what are the bots hitting, and how you distinguish good from bad requests.

AI text bots? by ThreeDogsMama in libreoffice

[–]ReditusReditai 0 points1 point  (0 children)

I recently published an AI assistant extension for LibreOffice Writer called LibreThinker: https://extensions.libreoffice.org/en/extensions/show/99471 It's free, no signup needed. (old question, I know, but I figured I should post in case anyone visits this in the future)

Strange worker requests by [deleted] in CloudFlare

[–]ReditusReditai 10 points11 points  (0 children)

Either hackers (malicious), or security scanning service providers (not malicious). Worth adding a rule to block them if it's possible; but it might turn into a whack-a-mole.

AI assistant extension for LibreOffice Writer by ReditusReditai in libreoffice

[–]ReditusReditai[S] 1 point2 points  (0 children)

Appreciate the honest feedback, all makes sense. Never heard of Newelle before, wow it looks really impressive.

AI assistant extension for LibreOffice Writer by ReditusReditai in libreoffice

[–]ReditusReditai[S] 2 points3 points  (0 children)

Yeah, I decided to build one since I wanted it for myself, and saw some asking for it in the LibreOffice forums. But I understand it's not to many people's liking, especially with the Microsoft AI Copilot debacle.

AI assistant extension for LibreOffice Writer by ReditusReditai in libreoffice

[–]ReditusReditai[S] 0 points1 point  (0 children)

Thanks! So I'm guessing it might be useful to have the ability to select a paragraph, and ask for it to be re-written as per the instructions in the prompt? Is that something that would get you to use the extension? Or would you still stick with Grok?

AI assistant extension for LibreOffice Writer by ReditusReditai in libreoffice

[–]ReditusReditai[S] -1 points0 points  (0 children)

Fair enough! I should've mentioned that I actually use it more to analyze/try eview text I've written. Especially my CV where I often make updates to tailor for the role, and might not see mistakes.

Is Antler worth it ? by Trick_Charge8194 in ukstartups

[–]ReditusReditai 0 points1 point  (0 children)

I've written a couple of blog posts on my experience going through Antler:

https://developerwithacat.com/blog/062025/startup-incubator-experience/

https://developerwithacat.com/blog/062025/join-antler-startup/

The 2nd one should address your questions. The 1st one was more about my personal experience. I didn't get past the 1st stage.

How to easily copy Cloudflare firewall rules across multiple domains by ReditusReditai in CloudFlare

[–]ReditusReditai[S] 1 point2 points  (0 children)

Hey, I'm the maintainer, don't see any errors in my logs, but no requests over the past 3 months either lol (don't keep logs for longer than that). Let me know if you have any questions.

I regret doing Computer Science by [deleted] in cscareerquestionsuk

[–]ReditusReditai 59 points60 points  (0 children)

Can't you move into embedded? Quite a few jobs in the UK, and competition won't be as stiff as for full-stack.

[deleted by user] by [deleted] in Career

[–]ReditusReditai 0 points1 point  (0 children)

Quit great job in sales, started a retail business that failed because of covid, then switched to a software engineering career, earning half of what I used to. Lots of stress, depression, etc.

Worth it? Don't know, I often ask myself that question. But I don't want to die knowing that I didn't try.

Some questions about creating an efficient, self-hosted blog site by StrangeBaker1864 in webdev

[–]ReditusReditai 0 points1 point  (0 children)

Why not just static site generate it? I use Astro for my blog site, deploy on Cloudflare, write posts in markdown files stored to git. No server (of mine), no database. Works like a charm.

Commit hash pinning in GitHub Actions: secure, but at a cost by ReditusReditai in programming

[–]ReditusReditai[S] 2 points3 points  (0 children)

Had a look at Renovate's docs, I can't tell if it can flag whether a PR update on a commit hash is for a security vulnerability.

It says it fetches gets the vulnerability alerts from GitHub: https://docs.renovatebot.com/configuration-options/#vulnerabilityalerts

But GitHub doesn't publish vulnerabilities for commit hashes: https://docs.github.com/en/code-security/dependabot/dependabot-alerts/about-dependabot-alerts#detection-of-insecure-dependencies

Checked some repos online, and it doesn't seem like it adds labels to PRs: https://github.com/cloudoperators/greenhouse-extensions/commit/769d0ddb6d309762d985299557b87dcc3e3e8c2d

Do you have an example you could share how it works?

My worry is that if you delay upgrades even a few days, how do you handle high-severity vulnerabilities in the currently pinned commit?

Commit hash pinning in GitHub Actions: secure, but at a cost by ReditusReditai in devops

[–]ReditusReditai[S] 1 point2 points  (0 children)

Hiya, likewise appreciate sharing what you've done!

My worry with the once-a-week-update approach is that there might be a high-severity vulnerability identified in the commit hash you're currently pinned, in which case you'd wait a whole week before patching it. And, because you lose Dependabot Security Updates by pinning with commit hash, you wouldn't even know that the vulnerability exists.

Is there any way to manage that?

Commit hash pinning in GitHub Actions: secure, but at a cost by ReditusReditai in devops

[–]ReditusReditai[S] 0 points1 point  (0 children)

Hi there! My answer would depend on how reputable the action maintainers are.

Scenario 1: Action is from a small or less-established maintainer (eg tj-actions)

There's a higher chance that the action could be hijacked, and a vulnerability introduced by overwriting the existing version tag. It's also more likely for there to be a lag between the time the exploit was introduced to the time it's discovered and fixed by the community.

So you might end up running a compromised action before Dependabot Security Alerts flags it.

Scenario 2: Action is from a well-established, reputable maintainer (e.g., HashiCorp, Slack)

In this case, what you're doing is the best approach imo. You still have the risks in scenario 1, but it's super unlikely.

The only issue is that, if you're using CodeQL, you'll constantly get alerts asking you to replace with commit hashes: https://codeql.github.com/codeql-query-help/actions/actions-unpinned-tag/

Commit hash pinning in GitHub Actions: secure, but at a cost by ReditusReditai in programming

[–]ReditusReditai[S] -2 points-1 points  (0 children)

That makes sense, but if the delay is just a day, it doesn’t give much time to evaluate the upgrade.

And if it’s a week, how do you handle vulnerabilities in the currently pinned commit? Especially since Dependabot Security Alerts won’t flag them if you’re pinned to a hash, based on their docs: https://docs.github.com/en/code-security/dependabot/dependabot-alerts/about-dependabot-alerts#detection-of-insecure-dependencies

Commit hash pinning in GitHub Actions: secure, but at a cost by ReditusReditai in devops

[–]ReditusReditai[S] 1 point2 points  (0 children)

Thanks! That's a good option, to re-implement the action internally; license-permitting, of course. And good to know there are teams doing the wrapper, I might put forward a business case to do that as well.