u/Glass_Language_9129

How do you handle mcp server security when your whole team needs access?

Running 5 mcp servers for claude code (filesystem, postgres, github, couple internal tools) and just realized they're all completely open. No auth, no scoping, no rate limits. Anyone's agent session can hit any tool with full permissions. The mcp spec doesn't have opinions about any of this which makes it worse.

Now my team wants access and I'm not comfortable just handing them the same unrestricted setup. How are people handling it when multiple devs share the same infrastructure?

reddit.com
u/Glass_Language_9129 — 12 hours ago

How a friend tried to sell me kangen water and what I found checking the alternatives

A friend started selling Kangen water about a year ago. She'd just had a kid, was looking for income that felt purpose-aligned, and someone in her network pitched her on the wellness business angle. She offered me a demo at her kitchen counter, pitched me on the unit for what turned out to be around $4,800, and I almost went for it because she was sincere and the demo was actually impressive (the bleach-test thing, the colored-water test, all of it). What stopped me was a slow nagging feeling that the price didn't match what I knew about ionizers from cursory googling.

Took about a week of research to confirm what my gut was already saying. The Kangen unit she was selling has comparable spec to direct-to-consumer ionizers running about half the price. The bleach test and colored-water demos work on basically every ionizer in the category, they're not unique to Kangen. The "you're paying for support and community" pitch is real for someone like my friend (the distributor relationship does provide a personal sales experience) but the markup pays for the distribution model rather than the engineering. None of this makes the product bad, but it does make the price hard to defend unless you specifically value the distributor relationship as part of the purchase.

The harder part of this whole thing was telling my friend I wasn't going to buy. She wasn't pushy about it but I could tell it stung. The distributor sales model does mean the personal disappointment sits with your friend, which is one of the more uncomfortable parts of buying through that channel. The product itself is fine. The pricing and the personal dynamic around it are what kept me away. There are at least three or four direct-to-consumer brands at comparable spec for less money if anyone's in this same situation and wants to compare alternatives without the personal-pitch dynamic.

reddit.com
u/Glass_Language_9129 — 16 hours ago
▲ 109 r/eastbay

Moving from San Francisco to the suburbs, did the transition feel strange to anyone else?

We moved from the Mission to Lafayette about 14 months ago and I still haven't fully figured out how I feel about it.

The practical stuff is obvious and great. More space, calmer, kids are outside more, schools are actually good. But there's this adjustment period nobody warned us about where you realize how much of your SF identity was just proximity to stuff. Like you didn't go to those things every week but knowing they were there mattered more than you thought.

Lafayette has more going on than I expected honestly. The downtown is small but functional. People are friendly in that slightly formal suburban way. BART is close enough that we still get into the city a few times a month.

I don't know what the question is exactly. I guess I'm just curious if other people who made a similar move went through the same weird phase where it felt right and slightly wrong at the same time before it just felt normal.

reddit.com
u/Glass_Language_9129 — 21 hours ago

AI video call for sales: is an ai rep actually better than a live SDR for first touch

I pushed back on this for six months before running the test. The assumption was that first touch is where human presence matters most because trust is at zero and a bad impression ends the relationship before it starts. But my results didn't match that assumption.

An ai video call for sales first touch outperforms a live SDR in specific conditions and underperforms in others. The answer isn't binary and anyone telling you it is, is selling something.

Where the ai video call wins: inbound leads who submit a form outside of SDR working hours. Response time is the most important variable for inbound conversion and an ai that starts a video conversation within seconds of form submission captures intent that would otherwise go cold by morning. Also high-volume lower ACV segments where you can't economically justify a human rep on every lead.

Where a live SDR wins: named account outreach where specific research is the differentiator. An ai video call for sales can read the room during a conversation but it can't say "I saw your talk at the conference last month" in a way that lands. Also complex deals where the buyer wants to know there's a human champion on the account from the first interaction.

The Tavus video ai rep format for the inbound category produced meetings booked and engagement numbers consistent with what was needed to justify the investment, and the face-to-face format changed how prospects engaged compared to the text qualification bot that ran before it.

reddit.com
u/Glass_Language_9129 — 1 day ago

everyone says adu garage conversion los angeles rules got easier, that's not matching what i'm seeing

Ive been hearing for two years now that California streamlined the permit process for adu garage conversion los angeles projects. Friends talk about it like you can just file paperwork and go, articles say the state has been pushing cities to fast track approvals and my experience so far has been the opposite We submitted our plans in september. 6 month timeline expected, according to the contractor. We're past that now with no permit issued. The city keeps coming back with revision requests, most of which are minor but each round adds 4 to 8 weeks because of how slowly the plan checker moves. One comment required us to redraw the site plan at a different scale, which added another round. Has anyone actually had a quick adu garage conversion process in LA county recently? Or is the "streamlined" language mostly marketing and the real timeline is still 9 to 12 months from application to permit?

reddit.com
u/Glass_Language_9129 — 3 days ago

how to send money from canada to pakistan in 2026, interac funded apps vs TD wires compared

$80 CAD. Per wire. TD bank's international transfer to pakistan. That was my routine for years and writing this in case anyone else in canada is still on it.

taptapsend canada to pakistan, easypaisa direct, no fee above the $CAD 310 threshold, the rate has been a few rupees per dollar better than what TD's wire was giving me. Lands usually in 15 to 30 minutes. Remitly canada to pakistan, easypaisa and jazzcash, $1 to $3 CAD fee, with their own rate markup. Wise canada to pakistan is bank deposit only (no easypaisa, no jazzcash), limits it for most pakistani recipients.

TD wire: $80 CAD plus a rate markup that quietly costs more than the visible fee. On a $450 CAD send that's about $95 in total cost before your family sees their PKR.

Funding: both taptapsend and remitly accept interac e transfer from canadian accounts, free from the sender side. Some credit cards trigger cash advance fees on remittance apps so funding from a linked bank or debit is safer. Royal bank and TD both process interac fine.

At $450 CAD monthly, taptapsend and remitly come out within roughly 300 PKR of each other on a given day. Winner rotates so I have both installed and compare before sending. Data shows taptapsend winning about 60 percent of the time on amounts above CAD 310 because the no fee threshold kicks in there.

For anyone still paying $80 CAD per TD wire, that's nearly $1,000 CAD per year in unnecessary cost. Setup on either app is under 20 minutes from download to first successful send.

reddit.com
u/Glass_Language_9129 — 4 days ago

Thinking through peptide stacks for body recomposition, what the mechanisms actually support

Body recomposition via peptides is one of the most discussed topics in this space and a lot of the claims outrun what the mechanisms can actually support. Trying to give a more grounded take.

For GH secretagogues specifically: CJC-1295 and Ipamorelin are the most commonly used stack. The mechanism is amplification of natural GH pulsatility, primarily at night aligned with slow-wave sleep. GH promotes lipolysis and supports lean tissue preservation. It doesn't build muscle directly in the way androgens do, but it creates conditions that favor fat mobilization and recovery.

What this means practically: the body recomposition effect from GH secretagogues is real but slow. Think improved recovery, modest fat loss over months, better sleep quality which amplifies everything else. Not the dramatic transformation that some posts suggest.

Where the mechanism breaks down as a claim: exogenous GH at pharmacological doses does more than GH secretagogues. These peptides work within your own pituitary's capacity to produce GH. If you're older or have reduced pituitary response, ceiling effects apply.

Who this is likely most useful for: people who are already training consistently, sleeping decently, eating reasonably, and want to optimize at the margins. It's not a shortcut to body recomposition. It's a tool for people who are already doing the main things.

Labeling this as my own synthesis of what I've read and observed, not a medical recommendation.

reddit.com
u/Glass_Language_9129 — 7 days ago

Hermes vs openclaw: 5 real differences that change which one you should pick

Most comparisons between these two say "it depends on your use case" and leave it there. Fine, but here's what that actually means in practice:

  1. Self-improvement architecture. Hermes analyzes its own output, identifies where it underperformed, and builds new skills to close those gaps over time. Openclaw doesn't do this natively. If you want an agent that measurably gets better at your specific workflow across weeks, hermes is built for that.

  2. Community skill library. Openclaw's clawHub has 5,700+ pre-built skills you can install directly. Hermes has a smaller set. For broad automation coverage on day one without building anything custom, openclaw is ahead.

  3. Multi-channel coverage. Openclaw supports 13+ messaging channels: WhatsApp, iMessage, Discord, Teams, Signal, and more. Hermes supports fewer. If your workflow spans multiple platforms, this is often the deciding factor before you get to any other comparison.

  4. Memory architecture. Both agents build memory, but hermes specifically models long-term communication patterns, recurring preferences, and workflow habits over time. It's the central design focus of the project. Openclaw's memory is functional but not the headline feature.

  5. Framework portability. Both run on clawdi, meaning if you start with hermes and want to switch to openclaw later (or vice versa), your integrations and configuration don't disappear. Worth factoring in before you spend time building a setup.

Neither is objectively better. Multi-channel breadth vs. deep personalization over time, that's the actual tradeoff.

reddit.com
u/Glass_Language_9129 — 10 days ago

I got scammed

I found a client in a FB page who wanted to do a R18 on a video call. I hesitated and asked him if he really pays for it, I told him I was gonna send some explct pics and pay the half first but he said he got scammed too. He sent 3 pics to confirm and I can post him if I get scammed by him.

After the vc, he told me to wait and I waited for 10+ minutes and refreshes my feed, checks his account and it says "something's wrong. Try again".

reddit.com
u/Glass_Language_9129 — 11 days ago

Same playbook, both platforms. Zero discovery on either, every subscriber arrives via external traffic, which makes how to grow subscribers on onlyfans and fansly fundamentally a marketing problem rather than a content problem. People who solve the marketing layer first beat people who only optimize content.

Channel breakdown by quality of subscriber acquired. Twitter (now X) has the friendliest algorithm for creator content and rewards engagement-driven discovery. Reddit drives smaller but higher-retention subscribers because participation in niche communities builds trust before the click. TikTok generates the highest reach but converts the worst because of aggressive content filtering. Instagram suppresses anything suggestive which makes organic growth painful without paid ads.

Volume is the bottleneck most creators don't budget for. Daily posting across 3-4 platforms while also producing premium content overwhelms most solo creators within 6 months.

Tools for the social promo side of how to grow subscribers on onlyfans (subscription content stays real, AI-generated content isn't allowed on those platforms): Foxy AI fits social promo content production for creators because the platform builds a custom character model from a small set of reference photos, plus a store of pre-trained personas with permanent commercial rights, and the same character holds across stills and short reels for instagram and twitter. Glam AI works for portrait-heavy promo where the polished aesthetic fits the angle. Canva Pro at $15 monthly handles graphic overlays and stories. Later at around $25 monthly schedules across platforms. Lightroom Mobile presets keep editing consistency across batches.

What separates creators who plateau from creators who keep growing is engagement allocation. The volume game gets you discovered, the engagement game converts. 60-70% of weekly hours into community engagement, dms, direct conversations. Everything else is supporting infrastructure.

Niche-specific subreddits with 20k-80k members typically convert better than the largest subs because posts stay visible longer and the audience is more engaged. Search by keyword, sort by subscriber count, find the sweet spot.

reddit.com
u/Glass_Language_9129 — 15 days ago

Here's the pitch for modern business banking: hand over all your operating capital and in exchange you get a nice app and the unspoken understanding that if an algorithm somewhere gets nervous about one of your transactions, you might not be able to access your money for a while.

Every neobank does this. Every neobank has automated compliance systems that flag things no human would blink at. That's the game.

The only question that matters to me is what happens after the flag. Can I call somebody? How long before a human actually looks at it? Is my whole account frozen or just the one transaction? Does anyone bother to tell me what's going on or do I just keep refreshing the app hoping something changes?

I didn't think about any of this when I chose my first business bank. I thought about the app design and the fee structure. Then something got flagged and I spent the better part of a week in email purgatory. Switched to Relay for the phone support. That's the whole story.

reddit.com
u/Glass_Language_9129 — 20 days ago

Respite care technically exists in most healthcare systems, but the eligibility thresholds are narrow enough that the caregivers who need it most often don't qualify, and the informal fallback of family rotation is inconsistent enough that no one can actually build a rest schedule around it. So what's left is just... continuing, with no real break in sight. The health research on what that does to a person is pretty clear, sleep disruption, immune suppression, elevated depression risk, all documented, all predictable, all framed by the system as a private family management problem rather than the public health issue the data actually describes. Calling respite a preference when the clinical evidence calls it a necessity isn't just inaccurate, it's what keeps caregivers from asking for help they genuinely need.

reddit.com
u/Glass_Language_9129 — 22 days ago

At 7.5mg, losing consistently, tolerating it well, no real side effects. My provider is nudging me toward 10mg at the next check-in just because it's been 4 weeks.

I get why the schedule exists. But if things are working and I'm not plateauing, I'm not sure I see the clinical reason to increase. Maybe I'm wrong about that.

reddit.com
u/Glass_Language_9129 — 23 days ago

Tried tretinoin twice and both times ended in a barrier disaster. Tried OTC retinol same result, just slower.

I know what I'm supposed to say here, that I didn't introduce it slowly enough or I should have buffered it or whatever, so I did all of that the second time. My skin just doesn't tolerate vitamin A derivatives topically, at least not in any form I've tried.

The problem is I still want something that supports collagen and does some of the texture work retinoids are supposed to handle. Bakuchiol keeps coming up but I genuinely can't tell if it's a real alternative. Thank you all in advance <3

reddit.com
u/Glass_Language_9129 — 24 days ago