6 ms·

Php 5 would not be boring and safe. You'd have some interesting challenges writing in an unsupported language version

pkrumins 4y ago
There are no challenges. The code I wrote in 2000 still works in 2020 and will work in 2030. That’s why it’s boring tech - it just works without thinking or deleting node_modules directory every day.
- meadsteve 4y ago
  The excitement comes when security issues are discovered in no longer maintained code
  - pkrumins 4y ago
    There are no security issues.
    - tchaffee 4y ago
      That's a laughable claim. https://www.cvedetails.com/vulnerability-list.php?vendor_id=74&product_id=128&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&cweid=0&order=1&trc=604&sha=d8a9f07b702ae6252893a7ef73f2f2812bbcbb8a https://www.cvedetails.com/vulnerability-list.php?vendor_id=... And just 10 days ago: Code security company SonarSource today published details on a severe vulnerability impacting Packagist, which could have been abused to mount supply chain attacks targeting the PHP community. https://www.securityweek.com/critical-packagist-vulnerability-could-have-allowed-php-supply-chain-attack https://www.securityweek.com/critical-packagist-vulnerabilit... And this source says PHP is the 2nd most vulnerable server-side language in the world. https://www.thewebmonkeyonline.com/php-security-issues-you-need-to-protect/ https://www.thewebmonkeyonline.com/php-security-issues-you-n...
      - pkrumins 4y ago
        Lulz
- tchaffee 4y ago
  > it just works without thinking or deleting node_modules directory every day That kind of hyperbole isn't useful. If you're deleting node_modules directory every day, you're doing something wrong. Perhaps due to lack of experience. You're claiming 22 years of experience in PHP. So of course that familiar workflow is going to work better for you personally.
  - pkrumins 4y ago
    My favorite interview question is - how often do you delete node_modules directory. I find that the most experienced candidates will answer “every day”, which is the correct answer. I can catch people lying quickly if they say they don’t delete node_modules.
    - tchaffee 4y ago
      That's a horrible heuristic. All you are doing is selecting for engineers who have failed to fix the problem like you have failed. Misery loves company, eh? I have decades of experience, mostly work in JS, am often in the top 5% on StackOverflow and very rarely need to delete node_modules. Neither do most of the people on my team. Some of our junior devs reach for that sledge hammer out of frustration. Which is fine. I used a lot of sledge hammer when I was first learning PHP too.

There are no challenges. The code I wrote in 2000 still works in 2020 and will work in 2030. That’s why it’s boring tech - it just works without thinking or deleting node_modules directory every day.

meadsteve 4y ago
The excitement comes when security issues are discovered in no longer maintained code
- pkrumins 4y ago
  There are no security issues.
  - tchaffee 4y ago
    That's a laughable claim. https://www.cvedetails.com/vulnerability-list.php?vendor_id=74&product_id=128&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&cweid=0&order=1&trc=604&sha=d8a9f07b702ae6252893a7ef73f2f2812bbcbb8a https://www.cvedetails.com/vulnerability-list.php?vendor_id=... And just 10 days ago: Code security company SonarSource today published details on a severe vulnerability impacting Packagist, which could have been abused to mount supply chain attacks targeting the PHP community. https://www.securityweek.com/critical-packagist-vulnerability-could-have-allowed-php-supply-chain-attack https://www.securityweek.com/critical-packagist-vulnerabilit... And this source says PHP is the 2nd most vulnerable server-side language in the world. https://www.thewebmonkeyonline.com/php-security-issues-you-need-to-protect/ https://www.thewebmonkeyonline.com/php-security-issues-you-n...
    - pkrumins 4y ago
      Lulz
tchaffee 4y ago
> it just works without thinking or deleting node_modules directory every day That kind of hyperbole isn't useful. If you're deleting node_modules directory every day, you're doing something wrong. Perhaps due to lack of experience. You're claiming 22 years of experience in PHP. So of course that familiar workflow is going to work better for you personally.
- pkrumins 4y ago
  My favorite interview question is - how often do you delete node_modules directory. I find that the most experienced candidates will answer “every day”, which is the correct answer. I can catch people lying quickly if they say they don’t delete node_modules.
  - tchaffee 4y ago
    That's a horrible heuristic. All you are doing is selecting for engineers who have failed to fix the problem like you have failed. Misery loves company, eh? I have decades of experience, mostly work in JS, am often in the top 5% on StackOverflow and very rarely need to delete node_modules. Neither do most of the people on my team. Some of our junior devs reach for that sledge hammer out of frustration. Which is fine. I used a lot of sledge hammer when I was first learning PHP too.