Hacker Newsnew | past | comments | ask | show | jobs | submit | nslog's commentslogin

This is a great talk. More technical videos should be done from the basics like this.


Didn't react just have basically the same vuln


The code in TFA is, by a hair’s breadth, not actually vulnerable, as long as the type signature of the function is obeyed. React spinned the same gun in the game of Russian roulette but was less lucky.


This is spot on. Parts of Amplify are aimed at people just getting started with Cloud and Programming, which is good and bad. You can shoot yourself in the foot if you drive the car too fast. I think a lot of more advanced people use Amplify services along with the Amplify client SDKs and then do the provisioning using CDK rather than the Amplify CLI.


Eh their documentation is pretty clear about all this stuff and all the new directives released a couple years back (like the PK and index stuff) clearly guide people towards using indexed queries and not scans: https://docs.amplify.aws/cli/graphql/data-modeling/

A lot of this is on the author IMO


Stopped reading when this guy started talking about Single Table DDB being best practice and linking to AWS when he clearly did zero research on AWS recommendations with GraphQL including from the AWS Hero Alex Debrie he mentions: https://www.alexdebrie.com/posts/dynamodb-graphql/ https://aws.amazon.com/blogs/mobile/single-table-vs-multi-ta... https://aws.amazon.com/blogs/mobile/enhancing-dynamodb-singl...

Also he mentions the race condition around clients connecting to the backend between queries and mutations, then in the same breath says the DataStore client handles this but also it's mistake is being reliant on Subscriptions? This contradiction doesn't make sense.

There are some legit bugs in this article though that I've seen, like that Analytics one. It's really a Pinpoint issue though when you dig under the covers that I've been waiting for them to solve for years.


Finally



Pretty sure it doesn't stack up to Amplify + AppSync: https://aws-amplify.github.io/docs/cli-toolchain/graphql#aut...



Oh I know Amplify, I just wanted to know what this console brings :)


Mobile Hub is now part of AWS Amplify. The Console brings continuous deployment and hosting (with features like easy custom domain setup, atomic deploys, rewrites/redirects, feature branch environments) to Amplify.


Ah, nice!

Is this also available via the CLI?


Yeah there was actually a blog on this: https://aws.amazon.com/blogs/mobile/aws-mobile-gets-amplifie...

"What’s happening with AWS Mobile Hub?

In the three years since we introduced AWS Mobile Hub, we’ve spoken to many developers. We listened to the feedback about what was difficult or confusing about developing mobile and web applications within the AWS ecosystem, and distilled that down to two problems:

Provisioning and maintenance of the mobile backend. Solved by using the Amplify CLI. Secure hosting and continuous deployment of web applications. Solved by using AWS Amplify Console. We took the great things that AWS Mobile Hub offered and added them to the Amplify CLI and the AWS Amplify Console. All of AWS Mobile Hub’s functionality and much more, are now part of AWS Amplify. Over the coming months, we will be encouraging all our developers to move their apps from AWS Mobile Hub to AWS Amplify."


With the requirements above, especially GraphQL and Conflict Resolution, AppSync is the way to go.


thx for your reply. I‘ll investigate it further :)


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: