Daily Edition · Page 4

THE DAILY INDEX

Technology, AI, software, security, crypto and business

GENERAL

TLDR Dev

EVERYONE IS A STAFF ENGINEER NOW

AI coding agents have become so good that they have fundamentally transformed software engineering, making code implementation inexpensive. This means engineers are increasingly expected to focus on higher-level skills like architectural judgment, system-level thinking, and managing complex contexts across multiple domains. Devs will need to start adapting their workflows, including planning and steering AI agents and developing habits to maintain focus amidst asynchronous work.

YOUR SUPABASE IS PUBLIC

This dev frequently finds Supabase projects with exposed credentials, which, due to a lack of proper Row Level Security (RLS), grant full access to sensitive user data within the database. This vulnerability is surprisingly common. It allows simple `curl` requests to retrieve all user information from unprotected tables. While users are responsible for RLS, Supabase's design could be improved with clearer warnings or default secure configurations to prevent the anon key from becoming a master key.

TLDR IndexPage 4