Readit News logoReadit News
scottmotte commented on Cursor uploads .env file with secrets despite .gitignore and .cursorignore   forum.cursor.com/t/env-fi... · Posted by u/bfelbo
scottmotte · a year ago
Encrypting your .env file with dotenvx, or something similar, can help mitigate this need for trust.
scottmotte commented on Ask HN: What tools should I use to manage secrets from env files?    · Posted by u/TheBigDuck234
saturn-five · a year ago
This is by far the simplest solution. It’s easier to understand and setup than the other solutions mentioned. It simply encrypts the value portion of the variable so its safe to commit the entire env file. The only draw back is developers could still potentially commit private keys the repo or commit the decrypted env file. If you’re working with env variables that don’t require updates often it’s a decent solution.
scottmotte · a year ago
> developers could still potentially commit private keys the repo or commit the decrypted env file

to prevent this, use:

$ dotenvx ext precommit --install

scottmotte commented on Heroku is down and they didn't know it for 90 minutes   status.heroku.com.... · Posted by u/justinmolineaux
gkoberger · 3 years ago
Fly.io, Render, Vercel, Railway
scottmotte · 3 years ago
I've tried all four, and Render is the closest experience to Heroku. It still isn't as easy to use as Heroku, but it is close.

Deleted Comment

scottmotte commented on On Rich Friends and Poor Friends   commonsense.news/p/on-ric... · Posted by u/bkohlmann
scottmotte · 3 years ago
> people are most comfortable being around people like themselves

Inertia. This is everything. It takes effort to be around people unlike those currently around you.

We all have personal biases against the strata economically above us and below us. I think most of the individuals that move up economically are able to get beyond these biases for one reason or another. Otherwise, even the most hardworking individuals tend to self-sabotage when they start to feel out of place.

scottmotte commented on Life Without a Smartphone   youtube.com/watch?v=tzbKq... · Posted by u/thebiblelover7
scottmotte · 3 years ago
I love the look of the Punkt. I ordered one 3 years ago but because of delays, and then Covid, gave up on receiving it. They issued me a refund but I'd still like to get one - in a reasonable amount of time.

Anyone have one and like it? Or recommend a different dumb phone?

u/scottmotte

KarmaCake day383February 13, 2012
About
Software Creative, in Los Angeles. Currently making dotenvx, a modern secrets management platform. Previously, I created dotenv, the widely-used open-source tool for managing environment variables.
View Original