mantrax3

5 ms·

1.
by mantrax3 12y ago
Doesn't help if you click somewhere by accident and delete an email without noticing.
2.
by mantrax3 12y ago
You can always shoot yourself in the foot even with a service layer. But in a service layer you need to get it right once . And therefore if you don't, you have to fix it just once . And coupling your business logic with your fronten
3.
by mantrax3 12y ago
If it's "not a hard problem" - and I agree it isn't, and it's solved by Clojure's SQL libraries, why should the web framework deal with it in any way? And moving the problem actually helps, when the original
4.
by mantrax3 12y ago
It's simple. Let's see what the spectrum of PHP solutions is. It goes from: - WordPress: very simple, you don't need to be a coder, not that powerful. And goes until: - PHP + libraries: complicated, you need to be a coder, ex
5.
by mantrax3 12y ago
Yes scores can't possibly be universal. But admit it. It just irks you to see a pop singer might be more popular than the president.
6.
by mantrax3 12y ago
> "But in our universe, people saw the algorithm as hackneyed, particularly when Justin Bieber had a higher Klout score than the US president." Maybe Klout was wrong with this particular arrangement, or maybe your assumptions a
7.
by mantrax3 12y ago
> "That won't necessarily stop $developer making a little PHP interface long after you leave, which exposes your DB again." Let me ask, does this hypothetical company have someone in charge of architecture, or everyone jus
8.
by mantrax3 12y ago
In a nutshell, social engineering can be countered by proper software & processes engineering. So if social engineering is possible, blame the software architects. Maybe in extreme cases changing the email of an account might be needed,
9.
by mantrax3 12y ago
Your logic is a bit weird. Sendgrid just experienced this major embarrassment and are currently re-training their staff to avoid it again at all costs. And you're going to move away from them now ?
10.
by mantrax3 12y ago
That's probably the one part that really didn't make sense. But maybe he did it for sport.
11.
by mantrax3 12y ago
> "and it looks inspired by PHP." You're getting the order wrong here. - It was inspired by Java. - PHP OOP was also inspired by Java. It's hard to argue that Java's OOP model is bad. It encourages clear code str
12.
by mantrax3 12y ago
And a bunch of people coming out of their caves to tell us how JavaScript's quickly cobbled up hacky prototype system is a design by God himself, and everything else is the Devil trying to trick us into his Java ways... Sigh. Which is
13.
by mantrax3 12y ago
You may have heard about spreadsheets or relational databases...
14.
by mantrax3 12y ago
Of course, and in software development we call these instruments, interfaces and well designed automated tools libraries . A framework in aerospace would be more akin to a pre-built airplane with a bunch of holes where you put seats, in-fl
15.
by mantrax3 12y ago
It is always possible. Name one case where it isn't, and I'll tell you how it's possible :) Web frameworks should handle input (routing, request fields, url query) and output (templates). That's it.
16.
by mantrax3 12y ago
That private API is called a service layer, and without it, your code devolves into copy/paste spaghetti. We live in an age when having a complementary iOS/Android app for your site is not the exception anymore. Without a service
17.
by mantrax3 12y ago
Once again there's no way to make a mistake with a prepared statement. The only way to do it is using poor practices like using half baked "sanitizing" functions which no competent developer will use. And once again, you don&
18.
by mantrax3 12y ago
Well first of all your "common scenario" terrifies me, and betrays an app developed by incompetent devs who wouldn't even know what a "hash" is, because in any sane situation: 1) The SQL database is not public (any
19.
by mantrax3 12y ago
Nothing is secure by default, even Django and Rails. You can always shoot yourself in the foot, if you don't know the basics about security. This is why the solution isn't relying on your framework, but on your competence.
20.
by mantrax3 12y ago
SQL injection is not a problem of web frameworks, because SQL should never be a part of the web layer of an application in the first place.
21.
by mantrax3 12y ago
The problem of lookup table attacks is solved by the public salt I already mentioned. HMAC protects against attacks like length extension (google it), which aren't applicable for discovering a password from a hash. Encryption also does
22.
by mantrax3 12y ago
> "This is a standard developer response - I recall when Sinatra was a fresh kid on the block, and the same arguments people used against Rails" And the more time passes, the more problems with Rails are being discovered that h
23.
by mantrax3 12y ago
Many things said in that video are kinda off. He mixes password hashes and MAC (message authentication codes), saying we should HMAC our password hashes. There's little to gain from that: - Password hashes exist to hide passwords. The
24.
by mantrax3 12y ago
For CSV forbidding commas in data is not practical. For ASCII delimiters, forbidding ASCII delimiters in data is practical. Sure - you can't, say, nest ASCII tables into one another due to this limitation. But for simple structure, i
25.
by mantrax3 12y ago
1) You were wondering why people disable JS. 2) You were making "THIS FACE" at one of them . 3) You didn't ask him why did he disable JS. 4) You're about to remake your site based on conclusions drawn by a sample of
26.
by mantrax3 12y ago
Hey I like how they've blurred this DKJX3-7KBW5-237BT-K22TX-6XG7J key here in Chapter 5: https://zapier.cachefly.net/static/CplbOk/images/learn/apis/... ... beyond any recognition!
27.
by mantrax3 12y ago
I'm curious why they never make CRTs and floppies anymore. Let's write an article about it.
28.
by mantrax3 12y ago
I find this particular form of cynicism entertaining. But this is not about the particular number of users lost. It's about Facebook's brand. There are many things Facebook might want to do, but it can't, because people don&#
29.
by mantrax3 12y ago
I know women, programmers, who are in love with programming. Hell they're more in love with programming even maybe than I am. We have wonderful arguments about SOLID, and CQRS and event-sourcing and queues, and pipes, and job servers
30.
by mantrax3 12y ago
Facebook buys WhatsApp - hundreds of thousands creeped out, go to Telegram app. Facebook buys Oculus Rift, Minecraft creator cancels talks, creeped out. Feels like that Facebook brand has taken a hit or two with all the privacy violations,

More ›