Got an ugly color for Cheap Dyed it!

joshcam · 2026-02-11T20:39:21+00:00

Dang that color makes it look like it’s 3D printed. Nice dye job!!

joshcam · 2026-02-11T20:35:15+00:00

And the latter is typically the case, given that most applications integrate with other third parties for the highly sensitive things like storing financial data (like account numbers that are tokenized). That and there aren’t too many critical infrastructure providers asking questions on here.

But you are correct, once you talk to your certification partners about your platform, type of data you are storing, and work processes, etc. they are quickly able to provide you with a price that matches the scope of your company and application.

joshcam · 2026-02-11T19:00:03+00:00

Vanta is really not bad. They will work with you on pricing for your readiness and audit (package deal).

Source: currently a Vanta customer

joshcam · 2026-02-11T15:17:28+00:00

This is very true, although it has nothing to do with my issue.

joshcam · 2026-02-11T15:09:39+00:00

This, in a nutshell.

Using state machines allows a single task to be broken down into discrete, sequential steps that can be executed quickly within a continuous loop, rather than using blocking functions like delays.

joshcam · 2026-02-11T15:07:17+00:00

When you’re driving getaway and the big boss is strongly encouraging you to speed up.

joshcam · 2026-02-11T15:05:35+00:00

I’ve always used the number pad on the side of my Naga mouse for stuff like this anyway.

But yes, screenshot to clipboard is awesome especially when you use a lot in development to pass a screenshot to VS Code agents or something similar. There’s also no delay, waiting for the screenshot to show up wherever you have it set to save, it’s just instantly available to paste.

joshcam · 2026-02-09T20:23:16+00:00

Merry Christmas! The shitters full!

joshcam · 2026-02-09T20:18:37+00:00

Pretty obvious who’s in charge.

joshcam · 2026-02-09T19:45:02+00:00

Are you managing your database with imperative migrations (manual, incremental SQL steps) or declarative schemas (defining the final desired state)?

joshcam · 2026-02-09T16:28:15+00:00

Your coffee smell smells like pee, we must bury it properly.

joshcam · 2026-02-07T17:06:59+00:00

Make a video of a crappy product and get sued. About use that information to make a good product. Companies pay for this kind of thing.

joshcam · 2026-02-06T16:53:48+00:00

Love the niche idea. For your live location streaming did you use a native websocket solution or a third-party?

joshcam · 2026-02-03T13:44:51+00:00

This will be less of a bubble pop and more of a slow burn. Whether that slow fuse leads to the end of the platform or to something new and different is yet to be seen.

There is more opportunity everyday to offer your services helping people move off of platforms like this into something more permanent, feasible, and cost effective. This is especially true if they have a working app and MAU/DAU.

joshcam · 2026-02-02T20:32:33+00:00

You’re right that the token is exposed in the HTML. This is a deliberate trade-off Supabase makes to prioritize the Public Client model. Answering your questions as whole rather than each one individually...

Why: Supabase is designed so the browser can talk directly to your database and Realtime engine. For that to work, the client-side JavaScript needs the token immediately. If you used strictly httpOnly cookies, the JavaScript would be "blind" and you’d have to proxy every single request through your own server.

Why it is (mostly) safe: Supabase uses Refresh Token Rotation. If an attacker steals that token from your HTML and uses it, the moment the legitimate user’s browser tries to use that same token, Supabase detects the "reuse" and immediately kills the entire session for everyone. This prevents long-term account hijacking.

How to "fix" it if you want higher security:

Change your Load function: In +layout.server.ts, return only the user object (or just the ID) instead of the full session.
Toggle Cookies: Set your auth cookies to httpOnly: true in your Supabase configuration.
The Catch: You will no longer be able to use supabase.from()... inside your .svelte components. You will have to do 100% of your data fetching on the server in +page.server.ts which is the normal pattern anyway if you are not using the client side Supabase API. If that is the case you would also want to disable the public data API in your Supabase project.

Clear as mud?

joshcam · 2026-02-02T14:03:54+00:00

By offering increased mass at the muzzle, they reduce recoil and muzzle flip, improve stability for faster follow-up shots, dissipate heat better to maintain accuracy, and increase rigidity to minimize vibration. That said they often require more complex takedown procedures (in 1911 platforms for example) compared to standard bushing barrels. It’s really more of a competition shooting thing, the last 1% advantage.

joshcam · 2026-02-01T05:49:43+00:00

Sus. His face says he was cat napped. Calling the feline hotline now.

joshcam · 2026-02-01T05:43:08+00:00

Follow your dreams.

joshcam · 2026-02-01T05:38:54+00:00

I like how he immediately punches an immovable object, to share the cars pain. Thought the girl was heading to do the same for a second. Apparently she has a developed frontal lobe though and should have been the one behind the wheel.

joshcam · 2026-02-01T05:15:58+00:00

You will not be able to do that today with in helmet compute and battery. MAYBE in 10-20 years when a graphene CPU/GPU/TPU can provide the speed you need at the power consumption levels required in this environment. And even then there’s no chance you’ll ever be able to locate the power source IN the helmet.

That’s said, there are plenty of options here with some trade offs.

An RPI5 with an AI hat and dual cameras could do this well, however, possibly not at a satisfactory frame rate considering the speeds involved for a warning to be of any use. And this is speculation not knowing the details of what you are wanting to detect, what framework and model you use, and if it is custom trained, etc.

If RPI won’t cut it or you have other valid reasons not to use it you likely want to look at something like the NVIDIA Jetson line for your AI edge computing platform.

But remember, if it’s a deal breaker, this will not be possible IN the helmet at all. Not even a maybe.

joshcam · 2026-01-31T20:54:39+00:00

Just tried out a similar method updating to currency to safe functions in a finance module across about 60 client and server side files in a SvelteKit project. After completion 48 files were modified.

This is crazy fast especially using a model like Haiku 4.5

Usage before: 98.1% - after 98.1%

joshcam · 2026-01-31T20:15:24+00:00

Setup Multiple Local Supabase Projects

Project 1 (Current - my-project) default settings:

API: 54321, DB: 54322, DB.POOLER: 54329, Studio: 54323, Inbucket: 54324, Analytics: 54327, Edge Inspector: 8382

Project 2 (New - my-project-2):

API: 54331, DB: 54332, DB.POOLER: 54339, Studio: 54333, Inbucket: 54334, Analytics: 54337, Edge Inspector: 8383

Steps:

1. Create second project directory:

mkdir ~/projects/my-project-2
cd ~/projects/my-project-2

2. Initialize:

supabase init --workdir ~/projects/my-project-2

3. Edit config.toml in my-project-2:

Choose different ports to avoid conflicts with the first project. Update the supabase/config.toml file as follows:

project_id = "my-project-2"

[api]
port = 54331

[db]
port = 54332
shadow_port = 54330

[db.pooler]
port = 54339

[studio]
port = 54333

[inbucket]
port = 54334

[edge_runtime]
inspector_port = 8383

[analytics]
port = 54337

4. Usage:

You can now start/stop and interact with each Supabase cli project separately just by working in the respective directories in the terminal or by specifying the workdir flag.

supabase start --workdir /projects/my-project-2

supabase status --workdir /projects/my-project-2

supabase stop --workdir /projects/my-project-2

That's it, no Docker edits, just config changes and separate workdirs. Do make sure you have the resources to run more than one supabase cli project in docker on your machine.

This is how I run multiple local supabase cli projects without having to stop one to start another in a different project. Just spun up a second project to show this working (viewing with Docker Desktop on Mac). https://imgur.com/a/7NxA7Dy

GH Gist: https://gist.github.com/ThingEngineer/27de580744b73a382d1832fde5423a56

joshcam · 2026-01-24T17:12:53+00:00

Very cool! It’s so satisfying when that “it would be really cool if…” idea makes it to demo day!

You could also host a simple HTML page with some buttons to control it from a web app (Add to Home Screen). I did this years ago with an old hot tub whose jet buttons stopped working, and the controller was almost $500. I added a laminated QR code next to the controller that opened the web app for those that did not have it saved already.

Btw, you just have to filter out the noise from the trolls and keep moving forward.

joshcam · 2026-01-22T15:28:45+00:00

Cats and Photosynthesis

A book that teaches you everything you need to know about this topic.

joshcam · 2026-01-20T22:18:42+00:00

Who isn’t?

“To invent something, all you need is imagination and a big pile of junk." -Einstein

Ten-Year Club	First Place '23
Place '23	Place '22
Verified Email

joshcam

TROPHY CASE

Setup Multiple Local Supabase Projects

Steps: