Who let them in? Ember checks your Supabase sign-ups

Ember takes guest lists seriously. A "private" team app on Supabase may still let any stranger create an account. Here's why: Supabase Auth allows new user sign-ups by default. If your RLS policies say "any logged-in user can read," a stranger who signs up is now a logged-in user. The two-minute check Open Supabase, then Authentication, and find the setting that allows new users to sign up. App…

dev.to ·3h ago

We haven't written up this one. Dev.to has the full story — the link below goes straight to it.

Read the original at dev.to →

More in Tech

How to Retry Email API Calls in Go: Backoff for Signup Verification

Short answer: Use a bounded exponential retry policy for failed email API calls: start at 2 seconds, cap the delay at 32 seconds, stop after 5 attempts, and make every attempt idempotent.

Ensure each API call attempt remains idempotent and log every retry attempt
Handle retryable rate limits and server failures while surfacing other terminal responses for review

3h ago ·dev.to

An Annual Renewal Fails Once a Year. That's Exactly Why It Hurts.

Most billing dashboards are built around the monthly renewal. It happens twelve times a year, it fails at a fairly steady rate, and the recovery work is spread thin enough that no single failure feels…

Annual renewals cause larger, single charges disrupting monthly billing routine
Failed annual charges often trigger fraud controls, unlike monthly charges
Effective recovery requires dedicated calendar, staff, and metrics for annual renewals

3h ago ·dev.to

AWS FinOps Field Notes (2026-11-01): Auditing RDS Extended Support Charges with Python

While auditing cloud infrastructure costs this week, recurring configuration gaps continue to quietly inflate monthly cloud bills.

AWS client's bill doubled from $30 to $330 in March 2025
Python script audits RDS Extended Support charges using Boto3
Script identifies PostgreSQL 12 and MySQL 5.7 databases for cost management

3h ago ·dev.to

Proxmox VE 9 high availability: HA rules, fencing and a failover you have actually tested

High availability is the feature most people build a Proxmox VE cluster for: a node dies at 3 a.m. and its important guests are running again on another node before anyone wakes up.

Proxmox VE 9 introduces HA rules in /etc/pve/ha/rules.cfg
Node affinity rules can be strict or non-strict
Resource affinity rules default to strict enforcement

3h ago ·dev.to

Why Your Python Cache Does the Same Work Twice (P.S: GIL Won’t Save You)

Your Python cache can run the same work twice, even with the GIL. See the check-then-act race, the lru_cache gotcha, and how locks fix it.

3h ago ·hackernoon.com

An outsider's perspective on Scion and Mononoke

Anthropic shares insights on Scion, a centralized version control system
Author, with Databricks experience, compares Scion to Mononoke
Author emphasizes user-friendly interface in version control systems

3h ago ·typesanitizer.com