
janglad
124 posts

janglad
@_janglad
jr product engineer @lemni, sometimes keyboard stuff @ https://t.co/bdQa3DyvwY


RLS was a mistake and folks exposing that level of complexity to less technical users is asking for trouble. It was a mistake in Firebase. It’s a mistake in Supabase. It will be a mistake in the next product too. I personally - even knowing how to secure it - would never touch it. It’s the worst security footgun you can imagine. One small mistake and your data is available to the world.



I have also stopped using plan mode It creates a plan FAR too eagerly and usually asks you zero questions en route The whole point of planning is to get on the same wavelength with the LLM, not to generate an asset you don't read /grill-me all the way






It appears I am building a database

More fun things I just remembered: - On Supabase, if you have ONE project that goes over free limits, you have to move to a "pro" account, which charges you $10 PER PROJECT - Supabase's patterns of "connecting to the db" put you in RLS hell, which is HORRIBLE for both devs and agents alike - Branching for dev and PRs in Supabase is rough (I don't even think about this in Convex) There's so many more things I'm sure I'm forgetting. Here's a video I did breaking it all down (that I think may have triggered the current Supabase cringe posting) youtube.com/watch?v=B6C-MW…




















