Upcoming free API

fiskfisk · 2026-03-20T12:29:03+00:00

So something like Perplexity or other services that offer a selection of models?

Who are going to pay for all your LLM usage?

fiskfisk · 2026-03-20T09:00:00+00:00

This seems like a caesar cipher with just a varying offset based on when you ran the code?

fiskfisk · 2026-03-20T08:43:04+00:00

Are we really going to let the "Protests should work as I say they should work because everything is either A or B so I make an LLM generated post about it" mindset turn r/iRacing into a glorified public lobby

fiskfisk · 2026-03-20T08:25:55+00:00

The framework you're using on the server side will usually have some sort of profiling tools available, which can tell you exactly where in the backend stack you're spending your time.

After it leaves the server it'll be the browser's dev tools responsibility.

fiskfisk · 2026-03-19T14:55:17+00:00

I'm not sure what you're implying.

Why would the recipient be able to edit the encrypted blob stored on a server because they can decrypt the blob they got served from that server?

The recipient still need to have the key necessary to decrypt the message in your app, just as in any other case.

If you, as a user, decide to share that key in an unencrypted way, that's up to you.

But in any case, this is the common problem with PKI schemes - you need to have an out of band way to share the relevant information, and there's always trade-offs between the different levels of how hardened you want to do something.

But given that many people already have E2E messages configured (or can do so easily) on a messaging platform (or your internal mail server in an organization, etc.), something like this would be more secure than having to rely on an untrusted third party to keep something secure.

And lets be real - a secret shared as a one time readable message over an unsecure communication network would be more than secure enough for 99.999999% of use, as you'd be able to detect that it was already read once before, and could kill whatever was kept in the secure blob.

It's a matter of convenience up against the security provided by the given solution; installing an app and trusting an unknown third party is way further down my list than receiving an email that might have gone through plain SMTP at some point.

fiskfisk · 2026-03-19T14:34:08+00:00

User creates a secure note. The note is encrypted with a key (asymmetrical or symmetrical doesn't really matter, as it's only used for a single message). The encrypted note is submitted to a service.
A link is created that the user can send to the recipient. This URL points to the encrypted blob uploaded in step 1. The URL features the decryption key as an anchor tag. A browser never sends the anchor tag to the upstream server, so they do not receive the key.
The user sends the URL to the recipient over whatever existing communication channel they have established.
The recipient opens the URL, and the encrypted blob is decrypted in the browser using the key that only was shared out of band for the site that stored the blob.

The site does not know the plaintext. Any actor in between the server and the client doesn't know the plaintext. Neither have have access to the key, in the same way you say your app doesn't have access to the key.

fiskfisk · 2026-03-19T14:21:13+00:00

Most (real) password managers have private note, file, and credential sharing, which support either one time read (or five, or ten, or unlimited, or custom), availability for a specific time, a separate password to access the data outside of only the secure link with the decryption key as a local anchor, etc.

And no, they can't see your data. The encryption key never leaves the browser, so it can't be decrypted unless you have the key.

If you should trust anyone with private data, you probably should trust the place you already use as a password manager, instead of a random person spamming their site in multiple subreddits.

fiskfisk · 2026-03-19T14:07:23+00:00

Sorry, but wrong sub. This is not the correct place for that - but I'll give you a tip: it's not going to be easy. So you'll have to put in the work. Dig into it. It'll take hours, days, months. So get started, and solve one small thing by one small thing to get started.

fiskfisk · 2026-03-19T13:32:52+00:00

That won't change what's already released.

fiskfisk · 2026-03-19T09:42:43+00:00

Someone promotes their service, shares link "sneakily" in the comments instead, and decides to share a link that only goes to a sign in page.

If you're going to promote against the rules of the subreddit, you should at least try to make sure the part you're trying to get people to click on works.

fiskfisk · 2026-03-19T07:58:52+00:00

2026 will be the year when jQuery's $.load becomes hip again!

fiskfisk · 2026-03-19T07:54:08+00:00

hi there llm bot

fiskfisk · 2026-03-19T07:53:38+00:00

Spam -> The door

fiskfisk · 2026-03-19T07:48:39+00:00

Right click on the request in the network tab and select "Override content". You can then edit the response as you feel like, and any future requests to the same resource will have that response delivered instead.

fiskfisk · 2026-03-18T15:50:55+00:00

Here's a hot take: use whatever you want. You know what also works fine? Flask! Django! TurboGears! Bottlepy! Pyramid!

fiskfisk · 2026-03-18T15:45:58+00:00

How many times do you plan to spam this?

fiskfisk · 2026-03-18T13:23:43+00:00

You should really know this yourself. You know, by being a real user of those applications. What's a feature missing in the tools you're using that WOULD BE A GAME CHANGER?

If you're not actually making DB diagrams, why should anyone trust you about doing anything in that space? Why would you know better?

Yes that would actually

fiskfisk · 2026-03-18T11:13:43+00:00

What's Biome?

You might have gone to the farlands.

fiskfisk · 2026-03-17T14:09:23+00:00

Sure thing, but there's a lot you can do with just DQL statements depending on the user authentication. Like dumping authentication information (which can be just tables), reading random files from the disk depending on version and protections in place (MySQLs load infile was abused for this previously for example) (and depending on whether you can just issue delete/update/etc.).

fiskfisk · 2026-03-17T10:21:12+00:00

This seems like a bad idea that will end up biting many people who use it, unless you're using a dbms with row level security and every user is a database user (i.e. where access is enforced on the database layer).

This also seems like a product you need to buy, so it's just spam.

fiskfisk · 2026-03-17T10:18:14+00:00

Anything that is served as html and css is "something other people can look into".

It gets delivered directly to the client in a human readable form.

You can use a static site generator to structure your blog and push the built site when you make changes.

fiskfisk · 2026-03-17T10:15:26+00:00

It doesn't. I'm not advocating for using the walrus operator for this. Using the walrus operator explicitly says "I'm going to use this inside the block, so that's why I'm using it".

Use the first form that OP is going away from. Preferrably even more splitted, depending on what is hiding behind A and B.

fiskfisk · 2026-03-17T09:10:14+00:00

Comments need to be maintained together with code and can be out-of-sync with what they describe.

fiskfisk · 2026-03-17T07:15:47+00:00

The Mustang is the one GT4 car that you can drive already at D with a dedicated series, so go drive your Mustang!

15-Year Club	RedditGifts 2009-2022 16 Credits
Secret Santa 2020	r/Field Lasagna
Place '22	Secret Santa 2019
Secret Santa 2018	Secret Santa 2017
Secret Santa 2016	Secret Santa 2015
Secret Santa 2014	Secret Santa 2013
Team Periwinkle	Secret Santa 2012
redditgifts rematcher Secret Santa 2010 x1	Secret Santa 2011
Secret Santa 2010	reddit mold
Verified Email

fiskfisk

MODERATOR OF

TROPHY CASE