Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I don't think it's a good idea to give a DB connection string to everyone, even if it's read only


Funny enough, looking at the db logs, no one queried it. I think simonw made it so much easier with Datasette that no one bothered.

But I did spin up a single use free tier supabase db for this usecase. Spent a lot of time worrying some hacker would find an exploit.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: