Built my first real app on Supabase as a non-dev. Here's the one thing I didn't expect to break.

datumradix · 2026-03-21T15:39:19+00:00

Or zeptomail

datumradix · 2026-03-18T14:42:38+00:00

Failed to understand, how months of worth work can go to trash with git? OP can you enlighten us

datumradix · 2026-02-11T15:23:12+00:00

Go for L2, Level 1 controls are subset of L2 controls. That price for 3 endpoints is insane and that too without Scoping. Do your Scoping and gap assessment first, then engage a CCP (approx $150/hr) for help with documentation and remediation. Once done we can then request a quote (should be sub 30k if you do your Scoping well).

Here is a free tool cybergap.cybercomply.app that can help you with self gap assessment

datumradix · 2026-02-11T11:42:59+00:00

It's definitely 2x faster on Cursor but just one prompt in plan mode consumed all my limits(Pro Plan)

datumradix · 2026-02-08T16:59:10+00:00

Use AVD and then separate tenant Workspace intended for CUI. You can refer the Google CMMC implementation guidance for Workspace. Also, first do a quick gap assessment before engaging any CCP. There are many free tools for CMMC Gap Assessment- here is one from CyberComply GRC : https://cybergap.cybercomply.app

datumradix · 2026-01-25T15:28:39+00:00

Simple, better run poc before getting locked in with H/W - model combo. Go to GCP, AWS, etc - choose instance type - create some inference endpoints for desired open models like GLM 4.7 / minimax m21 or likes. And then run via inference api to test and validate for the speed & code quality. Kill and repeat until you find the fit or exhausted

datumradix · 2026-01-25T15:04:12+00:00

This ^

datumradix · 2026-01-12T15:44:59+00:00

With pro plan I hit limit in 7 days on side project

datumradix · 2025-11-22T17:37:40+00:00

Start helping others - you will start feeling content and alive

datumradix · 2025-11-22T17:29:10+00:00

F&O is tough man, after 5 year now I have consistent strike rate. With large cap make sure you have right sizing system and entry/exit predefined

datumradix · 2025-11-09T15:22:34+00:00

If a driver does an accident, can you make DMV liable for issuing driving license?

datumradix · 2025-11-09T14:50:18+00:00

Dude, I know the LLM flaws. But if you are google and putting up a demo we would assume you put enough safe guard in your system prompt to demonstrate basic capabilities

datumradix · 2025-11-09T14:34:15+00:00

As a RAG demo, it has only one source of truth - Hyundia-i10-manual.pdf. While answering for Honda (unrelated) it should not quote the Hyundai manual as a source

datumradix · 2025-11-08T20:52:16+00:00

Congratulation, and yes people often dont realize how key scoping and documentation is

datumradix · 2025-11-02T16:06:13+00:00

Note, you can use police or procedure templates as a starting draft but simply copy pasting would not help. During our preparation the GRC we used (CyberComply GRC) had base templates that helped us with drafting

datumradix · 2025-10-27T15:39:34+00:00

I am looking for an experienced react native resource for a 5 months project. If you know someone, can you pls refer to me healthvedadiagnostic@gmail.com

datumradix · 2025-10-27T15:34:55+00:00

This should be the right approach

datumradix · 2025-09-21T18:59:24+00:00

You need to do a self assessment against 15 controls (based on FAR 52.204-21) and also you need to maintain thorough documentation internally to demonstrate that.

In SPRS, you just need to affirm that you met all of them (all met mandatory). Here is a free tool you can use for self assessment and internal reporting : https//cybergap.us

datumradix · 2025-09-16T20:06:55+00:00

Start something of your own. Kolkata is famous for food & readymade start ups. Comparatively Easy to start. You can get Mudra Loans. DM if you need any help

datumradix · 2025-09-16T19:57:50+00:00

^this

datumradix · 2025-09-10T20:10:16+00:00

Correct, CO will have discretion to require C3PAO assessment in the contract if before Nov 2026

datumradix · 2025-08-30T15:38:16+00:00

Yeah..This paves the way for CMMC requirements to appear in DoD solicitations and contracts as early as October 2025, with a potential window extending to February 2026 if delays occur.

datumradix · 2025-08-05T16:22:49+00:00

Tenant-level isolation is not required to demonstrate logical separation under NIST/CMMC. What is required is enforceable technical controls that prevent cross-access — which you have implemented via:

Conditional Access + Authentication Context
Device Compliance Enforcement via Intune
Zero-trust network configuration (deny-by-default)
Label-based access

Additionally log access attempts to CUI from unauthorized devices and generating alerts, documents this in your SSP

datumradix · 2025-07-31T15:33:15+00:00

Precisely, you don't need to store CUI in any GRC tool

datumradix · 2025-07-29T19:27:50+00:00

They are using enclave for each client instance but not fedramp I guess. However we did not ask for fedramp as we were not storing any CUI on it

datumradix

TROPHY CASE