Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

Possibile databreach sui sistemi di Almaviva (sulla commessa Ferrovie?)

Uncategorized
8 4 34

Gli ultimi otto messaggi ricevuti dalla Federazione
  • When building CLI tools, shell completion usually treats each option in isolation. But sometimes valid values for one option depend on another—like branch names depending on which repository you're targeting.

    Wrote about how I solved this in Optique, a type-safe CLI parser for TypeScript.

    https://hackers.pub/@hongminhee/2026/optique-context-aware-cli-completion

    read more

  • @rl_dane I also work on a very large Perl project, and will continue to do so for maybe the rest of my days (I'm 25+ years in, why stop now?).

    read more

  • @rl_dane yes, actually, see my recent threads about Go. I use it 100% of the time for web apps when I have a choice, and have done so for the past couple of years (and a lot lately). I'm also porting my old stuff that I have control over that's in Python. I have grown tired of the beatings. If it has dependencies or needs to be packaged I'm not building it in Python.

    But, I maintain a bunch of Python packages for my job, so it's not really a choice I have for the stuff I'm working on right now.

    read more

  • @rl_dane if only there were some middle ground. Alas, impossible.

    read more

  • It's a passion for tracebacks. Soul mates. Love at first sight.

    read more

  • I wish I loved anything as much as the Python community loves breaking backward compatibility.

    read more

  • @evan I don't think there's been any Canadian political leader who's received much hero worship — maybe Pierre Trudeau? They all have major flaws, Sir John A. notably so.

    (I contrast this with the arguably blasphemous https://en.wikipedia.org/wiki/The_Apotheosis_of_Washington ; I can't even imagine anyone doing something similar for any Canadian politician.)

    read more

  • Consider Git's -C option:

    git -C /path/to/repo checkout <TAB>

    When you hit <kbd>Tab</kbd>, Git completes branch names from /path/to/repo, not your
    current directory. The completion is context-aware—it depends on the value of
    another option.

    Most CLI parsers can't do this. They treat each option in isolation, so
    completion for --branch has no way of knowing the --repo value. You end up
    with two unpleasant choices: either show completions for all possible
    branches across all repositories (useless), or give up on completion entirely
    for these options.

    Optique 0.10.0 introduces a dependency system that solves this problem while
    preserving full type safety.

    Static dependencies with or()

    Optique already handles certain kinds of dependent options via the or()
    combinator:

    import { flag, object, option, or, string } from "@optique/core"; const outputOptions = or( object({ json: flag("--json"), pretty: flag("--pretty"), }), object({ csv: flag("--csv"), delimiter: option("--delimiter", string()), }), );

    TypeScript knows that if json is true, you'll have a pretty field, and if
    csv is true, you'll have a delimiter field. The parser enforces this at
    runtime, and shell completion will suggest --pretty only when --json is
    present.

    This works well when the valid combinations are known at definition time. But
    it can't handle cases where valid values depend on runtime input—like
    branch names that vary by repository.

    Runtime dependencies

    Common scenarios include:

    A deployment CLI where --environment affects which services are available A database tool where --connection affects which tables can be completed A cloud CLI where --project affects which resources are shown

    In each case, you can't know the valid values until you know what the user
    typed for the dependency option. Optique 0.10.0 introduces dependency() and
    derive() to handle exactly this.

    The dependency system

    The core idea is simple: mark one option as a dependency source, then create
    derived parsers that use its value.

    import { choice, dependency, message, object, option, string, } from "@optique/core"; function getRefsFromRepo(repoPath: string): string[] { // In real code, this would read from the Git repository return ["main", "develop", "feature/login"]; } // Mark as a dependency source const repoParser = dependency(string()); // Create a derived parser const refParser = repoParser.derive({ metavar: "REF", factory: (repoPath) => { const refs = getRefsFromRepo(repoPath); return choice(refs); }, defaultValue: () => ".", }); const parser = object({ repo: option("--repo", repoParser, { description: message`Path to the repository`, }), ref: option("--ref", refParser, { description: message`Git reference`, }), });

    The factory function is where the dependency gets resolved. It receives the
    actual value the user provided for --repo and returns a parser that validates
    against refs from that specific repository.

    Under the hood, Optique uses a three-phase parsing strategy:

    Parse all options in a first pass, collecting dependency values Call factory functions with the collected values to create concrete parsers Re-parse derived options using those dynamically created parsers

    This means both validation and completion work correctly—if the user has
    already typed --repo /some/path, the --ref completion will show refs from
    that path.

    Repository-aware completion with @optique/git

    The @optique/git package provides async value parsers that read from Git
    repositories. Combined with the dependency system, you can build CLIs with
    repository-aware completion:

    import { command, dependency, message, object, option, string, } from "@optique/core"; import { gitBranch } from "@optique/git"; const repoParser = dependency(string()); const branchParser = repoParser.deriveAsync({ metavar: "BRANCH", factory: (repoPath) => gitBranch({ dir: repoPath }), defaultValue: () => ".", }); const checkout = command( "checkout", object({ repo: option("--repo", repoParser, { description: message`Path to the repository`, }), branch: option("--branch", branchParser, { description: message`Branch to checkout`, }), }), );

    Now when you type my-cli checkout --repo /path/to/project --branch <TAB>, the
    completion will show branches from /path/to/project. The defaultValue of
    "." means that if --repo isn't specified, it falls back to the current
    directory.

    Multiple dependencies

    Sometimes a parser needs values from multiple options. The deriveFrom()
    function handles this:

    import { choice, dependency, deriveFrom, message, object, option, } from "@optique/core"; function getAvailableServices(env: string, region: string): string[] { return [`${env}-api-${region}`, `${env}-web-${region}`]; } const envParser = dependency(choice(["dev", "staging", "prod"] as const)); const regionParser = dependency(choice(["us-east", "eu-west"] as const)); const serviceParser = deriveFrom({ dependencies: [envParser, regionParser] as const, metavar: "SERVICE", factory: (env, region) => { const services = getAvailableServices(env, region); return choice(services); }, defaultValues: () => ["dev", "us-east"] as const, }); const parser = object({ env: option("--env", envParser, { description: message`Deployment environment`, }), region: option("--region", regionParser, { description: message`Cloud region`, }), service: option("--service", serviceParser, { description: message`Service to deploy`, }), });

    The factory receives values in the same order as the dependency array. If
    some dependencies aren't provided, Optique uses the defaultValues.

    Async support

    Real-world dependency resolution often involves I/O—reading from Git
    repositories, querying APIs, accessing databases. Optique provides async
    variants for these cases:

    import { dependency, string } from "@optique/core"; import { gitBranch } from "@optique/git"; const repoParser = dependency(string()); const branchParser = repoParser.deriveAsync({ metavar: "BRANCH", factory: (repoPath) => gitBranch({ dir: repoPath }), defaultValue: () => ".", });

    The @optique/git package uses isomorphic-git under the hood, so
    gitBranch(), gitTag(), and gitRef() all work in both Node.js and Deno.

    There's also deriveSync() for when you need to be explicit about synchronous
    behavior, and deriveFromAsync() for multiple async dependencies.

    Wrapping up

    The dependency system lets you build CLIs where options are aware of each
    other—not just for validation, but for shell completion too. You get type
    safety throughout: TypeScript knows the relationship between your dependency
    sources and derived parsers, and invalid combinations are caught at compile
    time.

    This is particularly useful for tools that interact with external systems where
    the set of valid values isn't known until runtime. Git repositories, cloud
    providers, databases, container registries—anywhere the completion choices
    depend on context the user has already provided.

    This feature will be available in Optique 0.10.0. To try the pre-release:

    deno add jsr:@optique/core@0.10.0-dev.311

    Or with npm:

    npm install @optique/core@0.10.0-dev.311

    See the documentation for more details.

    read more
Post suggeriti
  • 0 Votes
    1 Posts
    0 Views
    L'ultimo TechDispatch esplora le sfide della privacy dei portafogli di identità digitaleIl #GarantePrivacy europeo (GEPD) ha pubblicato il suo ultimo TechDispatch , una serie di articoli che forniscono analisi dettagliate su nuove tecnologie e tendenze. Questo numero si concentra sui Digital Identity Wallet (DIW) e su come possiamo garantire che rimangano conformi ai principi di protezione dei dati.(segui l'account @privacypride per avere gli ultimi aggiornamenti sulla #privacy e la gestione dei dati personali)Un DIW consente agli utenti di archiviare in modo sicuro dati di identità e credenziali in un repository digitale, consentendo l'accesso ai servizi sia nel mondo fisico che in quello digitale. Intitolata "Il percorso verso un approccio di protezione dei dati by design e by default", la nuova pubblicazione è una lettura essenziale per decisori politici e professionisti che desiderano garantire che lo sviluppo di DIW, come il futuro Portafoglio Europeo di Identità Digitale (EUDIW) , aderisca ai principi di Privacy by Design e by Default.Per saperne di più sulle raccomandazioni del GEPD per un quadro normativo sull'identità digitale sicuro e rispettoso della privacy,edps.europa.eu/data-protection…
  • 0 Votes
    1 Posts
    10 Views
    "La scuola a prova di privacy". Online il vademecum aggiornato del #GarantePrivacy È online la versione aggiornata del vademecum “La #scuola a prova di #privacy” che affronta le tematiche connesse al trattamento dei dati personali nelle istituzioni scolastiche, anche alla luce dei nuovi strumenti di intelligenza artificiale https://www.gpdp.it/garante/document?ID=10190259@privacypride
  • 0 Votes
    1 Posts
    8 Views
    Inviare un’email a un destinatario sbagliato, è da considerarsi data breach?📌 Link all'articolo : https://www.redhotcyber.com/post/inviare-unemail-a-un-destinatario-sbagliato-e-da-considerarsi-data-breach/#redhotcyber #news #gdpr #databreach #protezionedatidati #sicurezzainformatica #violazionidati #dataprivacy #security #hacking #malware #cybersecurity #informaticasicurezza #protezionecontroildatabreach
  • 0 Votes
    1 Posts
    10 Views
    Sigfrido Ranucci denuncia: «C’è chi vuole armare il Garante della privacy per punire Report». La replica: «Noi indipendenti e trasparenti»Il giornalista Sigfrido #Ranucci, conduttore di Report, ha denunciato pubblicamente un presunto tentativo di «punire» la sua trasmissione attraverso l’uso politico del Garante per la privacy. «In questi giorni sto ricevendo solidarietà bipartisan, ma si sta rivelando ipocrita — ha detto — perché da una parte mi si esprime vicinanza, dall’altra qualcuno sta armando il Garante per colpire Report e dare un segnale esemplare ad altre trasmissioni». Ranucci ha parlato da remoto nel corso di una conferenza stampa al Parlamento europeo, organizzata dall’eurodeputato del Partito democratico Sandro Ruotolo.Nota del canale: deregittimare le autorità indipendenti non è mai una buona idea. La politica non attende altro. Se Ranucci dispone di informazioni sul fatto che il #GarantePrivacy si sia prestato un uso politico del suo ruolo, dovrebbe immediatamente informare le autorità giudiziaria. L'autorità per la protezione dei dati personali si muove nell'ambito delle proprie prerogative, talvolta d'ufficio. E quindi sempre possibile che un reclamo al garante venga fatto sulla base di motivazioni politiche, ma viene sempre vagliato in base alla procedibilità. open.online/2025/10/23/sigfrid…@privacypride