Matthew Clower

This episode of DOS Won’t Hunt saw Matt Bishop, principal architect at Bitwarden; Artem Kroupenev, vice president of strategy at Augury; Matias Madou, Secure Code Warrior’s CTO and co-founder; and Joel Carusone, senior vice president of data and AI at NinjaOne, come together. They discussed the use of AI in software development, its benefits and risks, and how developers want AI to be implemented in the cycle.

10

Having a ton of fun writing an ORM for V2 of Case Kit. Typescript has such an incredible type system. I have autocompletion for column names, the ability to include relations, relations of relations, etc etc etc... all returning properly typed data (no classes in sight). It's been really satisfying seeing it coming together, and it's been great getting my hands dirty with some (relatively) complex generics. And to head off the obvious question… why aren’t I just using Prisma? Well there’s a couple of things I’m doing differently that I think are marginally better: there’s no code generation involved here, it’s just types (inspired by Drizzle); there’s no Rust binary you need to deploy, and it hews much closer to Postgres behaviour and syntax (the aim here is not to abstract away which database you’re using). But the real blocker to me using Prisma was that its extensions don’t support modifying queries of nested relations - a hard requirement for me due to the way I have multitenancy and soft deletes set up. It’s not shown in the video but the Case Kit ORM lets you write simple middleware that will be applied to every level of a nested query. Perfect for setting timestamps or adding clauses on tenant id or things like that.

21

so what is your move gaes

1

🚀 Attending SaaStr Annual in San Mateo this week? Let's connect and elevate your networking strategy! I'm excited to host 1-on-1 Braindates to discuss how Leads Caddy is improving lead information collection at in-person networking events. 🔍 Discover how our AI powered assistant can: - Streamline your networking process - Boost your conversion rates - Maximize your ROI from events - Save tons of time during and post event 👉 Click the link and grab a slot, or simply DM me! See you soon at SaaStr Annual! #SaaStrAnnual #LeadsCaddy #Networking #LeadGeneration #StartupLife

17

Hey folks! Garrett Milster and I have only posted about Sacramento Labs once, so we figured it's time for an update 😊 **What is Sacramento Labs?** We’re a small team focused on launching software products that solve real-world problems. Think of us as a startup lab—constantly testing ideas, learning from feedback, and building tools that matter, and having an impact while doing it. **How do we decide what to build?** We like to build products that: -         Solve real-world problems in mostly ignored industries -         Are small, highly maintainable, and scalable codebases -         Make the world a better place directly, or by donating a percentage of profits to a relevant charity in that space You can learn more about our philosophy at sacramentolabs.com **What you can expect from us** We’ll be posting product ideas that are in various stages of our pipeline: Early Concept, Customer Development, In Progress, Launched, Scaling. We’d love to hear your feedback! **Our latest concept: Self-Hosted Security** Here’s the problem: - Businesses often use third-party URL shorteners to share internal tools, resources, or campaigns, but these services introduce serious risks. Enterprise companies like Google, Microsoft, and Stripe have built their own internal URL shorteners for this reason – but most businesses don’t have the resources to do that. - Phishing attacks are rampant, and links from external services can be spoofed or abused. - Branding and security controls are limited, leaving sensitive information exposed. - You can’t track link activity—who’s clicking what, when, or why. - When employees leave, their shared links still work, leaving potential vulnerabilities. Our proposed solution: Self-Hosted Security. It’s a plug-and-play solution for businesses to host their own branded URL shorteners with: - SSO for secure access tied to your company’s directory. - Link expirations to ensure old links don’t stay active indefinitely. - Audit logs to track activity and improve visibility into link usage. 📢 We need your input! Would this solve a problem for you? What features would make this indispensable? Check out the landing page and share your thoughts: selfhostedsecurity.com Want to chat? Email me at [email protected] 😊 💡 And here’s something we’re passionate about: a percentage of profits from Self-Hosted Security will go to the Electronic Frontier Foundation (EFF). Your feedback not only helps us create better solutions, but also contributes to making a positive impact. Thanks for being part of the journey!

51

4 Comments

I just posted about Ploze to Product Hunt: https://lnkd.in/ebtktneU - I'd appreciate it if you'd take a look. (Unlock and integrate your digital life using Ploze: Load your data on-device from exports from a myriad of services, and view it all in an integrated searchable timeline. There is no cloud component to Ploze - it works on your computer.)

8

Progress = your QA release process growing from 15 minutes to 5 hours. A stat that’s both invigorating & frustrating at the same time. But I think the single best thing you can do to delight your customers is to personally guarantee “it just works”.

10

If you're the kind of person who's excited about all the recent S3 feature announcements (bucket policy unlocks via temporary root sessions, up to millions of buckets per account, pagination and region filtering for ListBuckets, conditional writes, ListCallerAccessGrants API) and you're attending re:Invent, then you should come to our storage track session, STG306 Advanced security patterns on Amazon S3. Learn how to use all the exciting new stuff securely in the most interactive format available at re:Invent!

94

2 Comments

Great podcast with Bret Taylor (CEO Sierra). Stellar communicator. Covers a lot of ground. One area he touches on are engineering changes instigated due to agentic frameworks. Resonates with a lot of the work we are doing at Doyen AI. A few nuggets - engineering moving from rule-based to goals & guidelines, increased focus on statistical approaches for managing non-deterministic systems, core agentic components are (a) knowledge of the business, (b) knowledge of business processes, and (c) knowledge of underlying systems for actioning. Worth a listen! #agents https://lnkd.in/ezdghk_v

21

Industry Insider – California hosted a fantastic event with CDPH and their IT leadership. If you are not a member, you should join. Not only do you get access to a broad cross section of the tech community, but you also get to hear directly from agencies. Here are four take aways I shared with our team. IT decision making involves policy and program people not simply IT leadership. They participate and inform the process, but they are not the sole decision-makers. They have a very pro-Microsoft disposition. Their history of AD Hoc, program driven technology spend means their technology stack is very complicated. They view building on a Microsoft platform as a major driver of efficiency and cost savings. Their technology budgeting process is changing which offers opportunities to capture larger sales across program areas in the future. CDPH has massive privacy and security concerns they need help addressing.

12

Average body transformation you can expect after you stop reading Search Engine Journal, and start relying on testing, patents and unseen Google documents.

42

13 Comments

Time to be fair.... In past posts, I have been less than complimentary of the DLC regulations that now make it more difficult to implement SMS into an application. I understand that all sorts of organizations use (and misuse) SMS millions (billions?) of times daily. I get that the new regulations make an attempt to reduce, as much as possible, SMS Spam. All in all, it just seemed like another example of hand-cuffing the good guys while trying to put some limits on the bad actors. My experience at the time was with #Twilio... and I tried to make it very clear that my frustration wasn't necessarily with them - they were doing the best they could to handle an avalanche of organizations trying to comply with new rules that everyone was stumbling their way through. I've been using Twilio for years and can't complain AT ALL about the platform performance for my particular small-scale needs. It was the nearly impossible approval process that really soured me. After nearly a year of living without application-based SMS (email only), I decided to revisit. The application was already all wired up for the feature - it was just dormant. This time around I was able to get up and running in 3 days... 99% of which was the DLC approval - which happened today. Kudos #Twilio for suffering through the tough days and making SMS once again something that can be done with very little pain. #twilio #sms #dlcapproval

2

We are quite proud to share that CoreStack has made the Inc 5000 ranking for the second consecutive year! This year, CoreStack ranks #12 in the Greater Seattle area, #14 in Washington State, #121 in all of Software in North America, and #1013 on Inc. 5000 complete listing. Being on the list of America's fastest-growing private companies twice in a row is indeed an honor. Thanks to our valued customers, partners, investors, advisors, employees, and well-wishers for the continued trust! Our vision at CoreStack is to help customers embrace the cloud, AI, and security with confidence, helping them go further and faster, realizing their digital ambitions. We’ll do so by being the world’s most admired, advanced, and valued intelligent cloud governance platform. We invite you to learn more about how we can help you cloud with confidence today! Sridhar Krishnakumar Sabapathy Suren Raj Venkata Robert Bala Mohan Parthu Perumal Satyabrat poornodhaya Rodrigo Davide Samad Gurpreet Shridhar Riz Dayakar Arun Abhay Mohanjit Abidali Gowri Haresh Gokul Shyam Anand Vishal #cloudcomputing #devops #finops #cloud #cloudmanagement #cloudgovernance #cloudoperations #cloudnative #digitaltransformation #automation #compliance #cloudsecurity #cybersecurity #security #cio #ciso #azure #aws #googlecloud #gcp #oci #artificialintelligence #machinelearning #ml #ai #corestack

226

91 Comments

Dare I say I'm a rails convert. It outshines any other full-stack setup I've ever worked with. And ruby (with rails) is just BEAUTIFUL. Exhibit A: 2 lines of code (no joke) to enable real-time updates for a given model (create, update, delete).

1

Anthropic introduces Autonomous AI Agents that use a computer mouse and screen to perform complex tasks independently. Currently available for developers only through the Claude 3.5 Sonnet API.

7