u/until0

“Similar risk” is doing a lot of heavy lifting there.

GitHub.com is built for collaboration first, not security. The enterprises that take security seriously usually run GitHub Enterprise Server on their own infrastructure, not the public platform. Connecting a third-party service through github.com adds another place where access can leak. If security is the priority, we have better options: tighter-scoped repos, signed commits, or self-hosted repos we fully control.

tl;dr: Railway doesn’t sell itself as enterprise-grade security, and connecting it to GitHub makes that gap worse.

You accepted the risk of Railway leaking your code when you uploaded your code to Railway, it's that simple.

Users with different security requirements would not upload source code to Railway to begin with.

You bear responsibility when you upload your code to Railway

You're being very naive here

Yeah, that's actually my whole point. You asked a question in your title:

How do sites that don’t rely on Cloudflare even deal with distributed scraping from infinite IPs?

The answer is the replace the offerings layer by layer - in this case, to combat scraping, they buy a WAF.

> why on earth would you use a model that bills per token rather than a sub based one for such a task?

You do know Fable is available in the subscription, right?

A passing score doesn't imply the same quality, this only measures success and not performance, LoC, etc

Though I agree with the high level sentiment, I use medium as my daily default with no issues

Yeah, like when the specific one is spelt out in the URL

I think you missed my point

That lands, it's hard to contextualize a greater intelligence than your own; which you've laid out in clear in your argument.

Those apps are all fake, even Oura is being sued for faking sleep data. You just cannot do it without the proper apparatus, and wearables and speakers are definitely not that.

You know CF is just a WAF right? Plenty of companies have offerings in this space?

Maybe in the past, but now you can run an entire small business code hosting and CI pipeline for free

We run self-hosted runners at my day job, and we're always having issues with the control plane.

No, because that makes a lot of sense and would be the best decision.

Instead, the CTO is on Twitter saying that they are fully committed to supporting open source software and are burying their heads in the sand to the service level they are providing to actually paying customers.

Meanwhile, I am committing code and running CI pipelines on multiple private repos for free on my personal account, deriving a ton of value,

This would be okay if they could support it, but they can't - and they are explicitly denying the very obvious, easy levers they have to pull to fix it all (free tier rate limits and private repo paywalls)

yes, data loss

> But for a simple script that just needs to run 24/7

That's called a server

As mentioned, I went back to my bespoke app which already had local caching.

It was clear this app was vibe coded, and I was better off putting focus into my own app.

I never said there was an issue with the MQTT connection, just in the lack of status caching.

It's been months when I spun it up, and this is all from recollection:

• First printer worked
• Added 20+ and app was very sluggish until it effectively locked up
• Analysis showed hundreds of MQTT probes at a high cadence, no caching at all
• Review showed no local state and all statuses derived in real time

If that's since been improved, I'd be happy to give it another go.

I have my own Claude special lol - it's very tailored to my specific farm and printers though

Yeah, I spun it up when it first came out a while back and it was clearly a Claude special.

It may work well with one printer, but I added 20+ from my farm and it saturated all the bandwidth of the MQTT conns.

A solid hobby app, a lot of neat features, but not production grade.

You need to update your views on SQLite

Its the entire tech by Cloudflare D1, and it's very much server side now

Theo isn't Jewish lol

Big upgrade over most big org ops departments

Mythos can't manufacture GPUs though

What's 2437?

That would make sense, but this happens ordering 15+ of a single colors.

It will come in combinations like:

14 in one big package

6 in a medium

1 in USPS a week later

Often too - it's weird to have such fragmented stock for a single color repeatedly, and they are usually all from NJ too so I'm not certain this is it.