Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
What it's like to be a network engineer...translated into normal people speak
User: I think we are having a major road issue.
Me: What? No, I just checked, the roads are fine. I was actually just on the roads.
User: No, I’m pretty sure the roads are down because I’m not getting pizzas.
Me: Everything else on the roads is fine. What do you mean you aren’t getting pizzas?
User: I used to get pizzas when I ordered them, now I’m not getting them. It has to be a road issue.
Me: As I said, the roads are fine. Where are you getting pizzas from?
User: I’m not really sure. Can you check all places that deliver pizzas?
Me: No I don’t even know all the places that deliver pizza. You need to narrow it down.
User: I think it is Subway.
Me: Okay, I’ll check…No, I just looked and Subway doesn't deliver pizzas.
User: I’m pretty sure it is Subway. Can you just allow all food from Subway and we can see if pizza shows up?
Me: Sigh, fine I’ve allowed all food from Subway, but I don’t think that is the issue.
User: Yeah I’m still not getting pizza. Can you check the roads?
Me: It’s not the roads, the roads are fine. I’m pretty sure Subway isn’t the place.
User: Okay, I found it. It’s Papa Johns.
Me: Okay, I looked and Papa Johns does deliver pizza. Is it the local Papa Johns or one in a different town?
User: I don’t know. Can you allow pizza from all Papa Johns to me?
Me: No I can’t do that. Can you get me an address for Papa Johns?
User: No, I only know it as Papa Johns. Can you get me all the addresses of all Papa Johns and I’ll tell you if one of them is correct?
Me: No, I don’t have time for that. Okay, I looked at the local one and it looks like they have sent you pizza in the past and they are currently allowed to send you pizzas. Try ordering a pizza while I watch.
User: Yeah still no pizza. I’m guessing they are getting blocked at the freeway. Can you check the freeway to make sure they can get through?
Me: No, this is a local delivery. They aren't even using the freeway.
User: Okay, well then it has to be a road issue.
Me: No, the roads are fine. Okay, I just drove from the Papa Johns to the address they have on file for you and there is nothing there.
User: Hmm, wait we did move recently.
Me: Did you give your new address to Papa Johns?
User: No, I just thought they would be able to look me up by name.
Me: No they need your new address. What’s your new address?
User: I’m not really sure. Can you look it up?
Me: Sigh, give me a second…Okay, I found your address and gave it to Papa Johns. Try ordering a pizza now.
User: HEY! PIZZA JUST SHOWED UP!
Me: Okay, good.
User: (To everyone else they know) I apologize for the delay in the pizza but there was a major road issue that was preventing the pizza from getting to me. The network engineer has fixed the roads and we are able to get pizza again.
Me: But it wasn’t the roads…whatever.
User: Oh, can you also check on an issue where Chinese food isn’t getting to me? I think it may be a road issue49 -
My last internship (it was awesome). A programmer developed a vacation/free day request application for internal use.
Asked if I could test it for security.
The dev working on it thought that was a very good idea as he wasn't much into security and explained how the authentication process worked.
I immediately noticed a flaw just from his explanation. He said it was secure anyways (with an explanation but his way of thinking was wrong in this case). Asked if I was allowed to show him. He said he was intrigued by this so gave me a yes right away.
For the record, user levels were normal user, general admin and super admin (he was the only super admin).
Wrote a quick thingy server side (one of my own servers/domains) for testing purposes.
Then I started.
Went from normal user to super admin (his account) through a combination of XSS and Session Hijacking within 15 seconds.
Explained him where he went wrong and he wrote a patch under my guidance 😃.
That felt so fucking awesome.5 -
The Inevitable Pun and the Joys of Working as a Basic User in the *nix World!
Sauce: http://hit-comic.com/comic/...
3 -
"Make the feature more useful."
Please write a user story. It's hard to determine what you want.
"As Sales Agent I would like the <feature> to be extended so it's more useful to me."
(ノಥ,_｣ಥ)ノ彡┻━┻3 -
Customer is always right.....
Committed to sustainable productivity..
Misunderstanding between the IT Department Staff member and the Finance Department Staff member in one of the establishments...
User: Hi, our printer is not working.
IT Service: What is wrong with it?
User: The mouse is jammed.
IT Service: Mouse? Are you sure it’s a printer, as they don’t come with a mouse?
User: Do you think I’m stupid? I’m telling you it’s the printer!
IT Service: I'm telling you, it can’t be the printer! They don’t have a mouse!
User: Oh really?... Mmmmm... I’ll send you a picture.
Scroll down...
. . . . .. .
. . . . . .
. . . . .
. . . .
. . .
. .
.
.
.
The customer is always right.
Listen to him/her and believe what he/she says.
Don’t jump into conclusions!
12 -
Request URL: /api/v1/user/53b49b5a30
Request Method: GET
Expected Response:
Status Code: 404 Not Found (as the user is actually not present in the DB)
Actual Response:
Status Code: 200 Ok
Response Content:
{
"status": "ERROR",
"errorCode": "404",
"errorMsg": "User Not Found. Please provide a valid user ID",
"type": "Error",
"userMsg": "User Not Found. Please provide a valid user ID"
}
#extremefacepalm19 -
Seriously, god bless Laravel and Taylor Otwell.
I've just had a customer foolishly delete all their user accounts. The customer was seriously stressed about this and as it usually goes, this stress was echoed in the call.
I explained how they can easily restore the deleted records in a single click as I have configured Laravel's "soft delete" functionality site wide. i.e. when they delete a record it isn't really deleted. Functionality to physically delete the record is hidden away outside the client's user level.
Customer was seriously grateful and paid for 2 hours of my time (even though the call took 15 mins) and generally gave me lots of kudos.
Laravel, awesome.
6 -
So according to some reddit user IKEA sends your password as a GET parameter in plain text.
https://reddit.com/r/CrappyDesign/...
Seems to be a network authentication thingy, but still 🤔
34 -
Customer: "Why doesn't the user interface have a night mode?"
Me: It wasn't in the requirements, it also doesn't have bouncing pink elephants, do you want me to add those in as well?9 -
I just got handed a legacy php web project... Full of vulnerabilities... And it's using only mysql_ functions... Not only it's not OOP, there is not even a single class...
How good it's coded: User profiles are created manually by the frontend dev as htmls, and then the past php dev implemented them as links etc in the current page.
This is how I feel:
5 -
Especially painful being a cybersecurity engineer;
Did something wrong with an if-statement.
Caused authentication to break completely; anyone could login as any user.
Was fixed veeeeeeery quickly 😅 (yes, was already live)8 -
Imagine a database table where dates were saved as strings from raw user input. Then do migration to other database with table where dates are datetime.
Yep. That's me. 😶
I hate humans. 😧🔫
Especially those who try to be original like:
11|Sept.|2016 or 13;Juni;17
There are rules in this world, damn. 😥9 -
GUI user: "How can you work from such a basic text interface like that terminal?"
Me: "How can you work with all those stupid buttons that more often than not can't do jack shit?"
Being a Powerline user, I do think that design matters a lot. But so does usability (I don't want my programs to take half a minute to load their bloated UI's) and the ability to use every feature that this or that piece of software has in its command line arguments but not necessarily as a GUI option.9 -
Can we just appreciate for a second how @dfox is active in his own community, both in support and as a user? I've seen like a dozen posts today of "dfox ++'d my post on my new account", my own included.
Best OP4 -
At my first job, I got tired of having to type a user name and password every time I debugged the web application. Thinking I was clever, I put in a hack so that if you launched the application with the query string "?user=Administrator" it would log you in as the administrator. So much typing saved!
A couple days after the next release, I realized it shipped like that. In absolute horror, I walked into my boss' office, closed the door, and told him the tale of my mistake.
He just looked back at me, and after a moment or two said, "Loose lips sink ships."
And that was it.4 -
So today I got a call that an end user decided to try to be a developer. He built and ran a bulk edit script on his company's server.....
Without a scaled test....
As root....
From root....
Without backups....
How's this my problem again?
Oh right, it's not (yet)!5 -
One of our teachers developed a website for our university about three years ago. That was something like assignments management system + social network + schedule, everything in the world as one website.
It seemed like he didn't put any code escaping at all. Injected a block of CSS that made the entire page slowly fade away when some user tried to look at my page. Other teachers stared at it as if it was pure magic, doubting their sanity.
Still isn't fixed btw :)6 -
Long story short, I'm unofficially the hacker at our office... Story time!
So I was hired three months ago to work for my current company, and after the three weeks of training I got assigned a project with an architect (who only works on the project very occasionally). I was tasked with revamping and implementing new features for an existing API, some of the code dated back to 2013. (important, keep this in mind)
So at one point I was testing the existing endpoints, because part of the project was automating tests using postman, and I saw something sketchy. So very sketchy. The method I was looking at took a POJO as an argument, extracted the ID of the user from it, looked the user up, and then updated the info of the looked up user with the POJO. So I tried sending a JSON with the info of my user, but the ID of another user. And voila, I overwrote his data.
Once I reported this (which took a while to be taken seriously because I was so new) I found out that this might be useful for sysadmins to have, so it wasn't completely horrible. However, the endpoint required no Auth to use. An anonymous curl request could overwrite any users data.
As this mess unfolded and we notified the higher ups, another architect jumped in to fix the mess and we found that you could also fetch the data of any user by knowing his ID, and overwrite his credit/debit cards. And well, the ID of the users were alphanumerical strings, which I thought would make it harder to abuse, but then realized all the IDs were sequentially generated... Again, these endpoints required no authentication.
So anyways. Panic ensued, systems people at HQ had to work that weekend, two hot fixes had to be delivered, and now they think I'm a hacker... I did go on to discover some other vulnerabilities, but nothing major.
It still amsues me they think I'm a hacker 😂😂 when I know about as much about hacking as the next guy at the office, but anyways, makes for a good story and I laugh every time I hear them call me a hacker. The whole thing was pretty amusing, they supposedly have security audits and QA, but for five years, these massive security holes went undetected... And our client is a massive company in my country... So, let's hope no one found it before I did.6 -
expect([
row[‘blah’][0][1],
row[‘blah’][1][1],
row[’blah’][2][1],
row[‘blah’][3][1],
row[‘blah’][4][1],
]).to contain_exactly(
a.name(user), # “John doe”
c.name(user), # “John doe”
e.name(user), # “John doe”
b.name(user), # “John doe”
d.name(user), # “John doe”
)
(Note: The comments are mine.)
See the problem? No, not the ugly code (which is actually worse than what i posted here).
It’s using the same ridiculous getter (if you can call it that) that pulls a name out of the passed user object, and then expecting each row to have that name, in order. Not that order matters when they’re all the same.
Upon inspection, all objects created by the spec have the exact same name, so the above test passes (as long as there are 5 rows). It passes, but totally not because it should: those aren’t the objects that are actually in the table. All of the specs — all 22 of them — only check for that shared name on various rows, and no other data. And it’s not like this is the only issue, either.
Fuck me these are bad.
And this guy is a senior dev earning significantly more than me. Jesus what the fuck Christ.18 -
Cleaning lady: *wants some tunes during work*
Me: "Sure, I wanted to listen to some music as well.. not sure if our genres match though 🤔"
Cleaning lady (CL): "So what kind of music do you listen to?"
Me: "Synthwave"
CL: "So um.. synthesizers?"
Me: "Well yes, but it kind of ties in with the dark side of technology.. the whole 1984 dystopian future etc. Privacy, lack of user freedom, etc."
CL: "So essentially cult music?"
TIL that the tech community is a cult for listening to synthwave. I bet she believes that tech peeps are lizards too.
*mentally slaps cleaning lady* - User!!
13 -
What kind of cum gargling gerbil shelfer stores and transmits user passwords in plain text, as well as displays them in the clear, Everywhere!
This, alongside other numerous punishable by death, basic data and user handling flaws clearly indicate this fucking simpleton who is "more certified than you" clearly doesn't give a flying fuck about any kind of best practice that if the extra time was taken to implement, might not totally annihilate the company in lawsuits when several big companies gang up to shower rape us with lawsuits over data breaches.
Even better than that is the login fields don't even differentiate between uppercase or lowercase, I mean WHAT THE ACTUAL FUCK DO YOU SELF RIGHTEOUS IGNORANT CUNTS THINK IS GOING TO HAPPEN IN THIS SCENARIO?13 -
Developer vs Tester
(Spoiler alert: developer wins)
My last developent was quite big and is now in our system testing department. So last week i got every 20 minutes a call from the tester, that something did not work as expected. For about 90% of the time i looked at the testing setup or the logs and told him, that the data is wrong or he used the tool wrong. After a couple of days i got mad because of his frequent interruptions. So I decided to make a list. Every time he came to me with an "error" i checked it and made a line for "User Error" or "Programming Error". He did not liked that much, because the User Error collum startet to grow fast:
User Errors: ||||| |||
Programming Errors: |||
Now he checks his testing data and the logs 3 times before he calls me and he hardly finds any "errors" anymore.3 -
2 weeks ago I was writing an `rm -rf --no-preserve-root /` oneliner as a joke - as an answer to a question "I have access to my competitor's server; what should I do?". I was crafting it so that it'd do as much damage to the business (not the server) as it could.
And I accidentally executed it on my work laptop. In the background (with an `&`).
It ran for a good 5-7 seconds on an i7-11850H with an SSD, until I issued a `kill %%`
Good thing it ran as a non-root user. Bad thing - I have no idea what it may have deleted nor whether it touched my /home.
I'm afraid to restart my laptop now :)
whoopsie :)9 -
I started a job as a developer on Monday for a large retail company. There was no computer available for me because of the IT department but I'm told it will arrive later in the day. It doesn't.
On Tuesday I get told that the PC is coming and later in the day a keyboard, mouse, monitor stand and two monitors arrive but no computer.
Today, Wednesday, I get into work and find that I now have a PC. Woo! I load windows, log into my user account with my new user and pass and go to install VSCode only to find that I don't have admin privileges and can't install almost anything. I'm told that IT will add me to the admin user group soon(tm). I wait. All day. They don't do what they are supposed to do despite us pushing them to do it.
I hope that tomorrow I can actually dev, but at least I've been paid three days wage for doing nothing lol
Anyone have any shitty IT department stories?12 -
As a lifelong Windows user who recently started using a Mac (for iOS dev), I have to say, my mind is blown. I now get the Mac hype.8
-
That moment when you're finally getting your user registration and login system up and running!
As a web dev student I feel like I have accomplished something :)10 -
Stumbled upon VS Code recently, an open source freeware from Microsoft. And as a VIM fan, I must say that it blew me away with its sleek nature.
Been a user of Sublime and Atom in the past as well, but VS code surely stands out.9 -
Story of a penguin fledgling, one of my end users whom I migrated from Win 7 to Linux Mint. She had been on Windows since Win 98 and still uses Windows at work.
Three months before. Me, Linux might not be as good, but Win 10 is even worse. User, mh.
Migration. User, looks different, but not bad.
One month later. User, it's nice, I like it.
Three months later. User, why does Windows reboot doing lengthy stuff?
Six months later. User, I hate Windows. Why is everyone using this crap?
One year later. Malware issues at work. User to IT staff, that wouldn't have happened with Linux. Me, that's the spirit!31 -
Hello * ! I'm browsing devrant since few months and finally subscribe.
As a GNU/Linux user and Free software supporter I really appreciate to not be forced to be logged to use this app. And the community is great ! Thanks to the developers and the community for this awesome app !2 -
I am looking for testers!
operationtulip.com is a small startup that is providing storage with Nextcloud. Currently every user gets 50 GB for free for as long as we are able to provide it.
We would like freeback from our users aswell:
feedback@operationtulip.com
Thank you :)30 -
My own personal hell was a html page that had a script tag that called a rest endpoint that sent back a text block of JavaScript that was then dynamically executed to redirect the user to a php 3 page that was the exact same thing as the original page but with an extra bit of css to make the buttons blue and slightly rounded
You can’t make this shit up6 -
An adult cam website I worked on as freelancer had/has this code everywhere:
$user = $_POST['usr'];
$pass = $_POST['pwd'];
$row = $db->query ("SELECT * FROM users where username='".$user."' AND password='".$pass."' COUNT 1);
I was hired to add new features and was touch any other parts of the code. When my job was done, I tried to fix those as a good samaritan but the client thought I was messing with the system or should be thing of new features to add. So I got fired.
5 years later, I check out of curiosity and they are still there. I ask him again if I can work on them for a little less pay(I'm broke) and he doesn't reply. What a douche. I hope his site receives a shot of SQLi from a customer.18 -
Use to have a client, annoying as fuck, nothing was right for him and the worst thing: IE user :O Anyways...finished the project hoped never to see him again...
Today he walks in my office: "Just got news we'll be working together again"
FML!1 -
User: Hey, we got a big issue with one of your tools. One of your pages isn't loading.
Me: Ok, so when did this happen?
User: We don't know? Its been like that for a long time though, so we thought it was normal 😃
Me: ....ok. So do you know what data is supposed to appear?
User: Uhhh we're not sure as well. Since, you know, its been like that for a while.
Just great 😑4 -
I managed to accidentally clear everybody's usernames and email addresses from an SQL table once. I only recovered it because a few seconds before, I'd opened a tab with all the user data displayed as an HTML table. I quickly copied it into Excel, then a text editor (saving multiple times!), then managed to write a set of queries to paste it all back in place. If I'd refreshed the tab it would have all gone!2
-
And this, ladies and gentlemen, is why you need properly tested backups!
TL;DR: user blocked on old gitlab instance cascade deleted all projects the user was set as owner.
So, at my customer, collegue "j" reviews gitlab users and groups, notices an user who left the organisation
"j" : ill block this user
> "j" blocks user
> minutes pass away, working, minding our own business
> a wild team devops leader "k" appears
k: where are all the git projects?
> waitwut?.jpg
> k: yeah all git projects where user was owner of, are deleted
> j.feeling.despair() ; me.feeling.despair();
> checks logs on server, notices it cascade deletes all projects to that user
> lmgt log line
> is a bugreport reported 3(!) years ago
> gitlab hasnt been updated since 3 years
> gitlab system owner is not present, backup contact doesnt know shit about it
> i investigate further, no daily backup cron tasks, no backup has been made whatsoever.
> only 'backups' are on file system level, trying to restore those
> gitlab requires restore of postgres db
> backup does not contain postgres since the backup product does not support that (wtf???)
> fubar.scene
> filesystem restore finished...
> backup product did not back up all files from git tree, like none of refs were stored since the product cannot handle such filenames .. Git repo's completely broken
Fuck my life6 -
I think my server got hacked, yesterday I made a new server on scaleway for the sake of testing I made a user called dev, with password dev. Forgot to change password before I went to bed.
Logged in today to find that load is 5x.x and this (image) in my crontab
Note to self: You are a disgrace, who the hell uses 'dev' as password for ssh on port 22 -_-
21 -
Built a software portal that tied in with our schools user management systems (fuck that shit btw, was written in Java that tied back to a JS backend) and I couldnt get password verification working probably so put a test in that just let you put the username in and whatever password and as long as the user wasn't currently in use you login correctly (only used it to track download limits and display the student's name)
Planned on fixing it the following week when my contract was supposed to renew, but they never renewed it and every time they have had me come back I haven't had the chance to fix it ¯\_(ツ)_/¯5 -
OMFG I don't even know where to start..
Probably should start with last week (as this is the first time I had to deal with this problem directly)..
Also please note that all packages, procedure/function names, tables etc have fictional names, so every similarity between this story and reality is just a coincidence!!
Here it goes..
Lat week we implemented a new feature for the customer on production, everything was working fine.. After a day or two, the customer notices the audit logs are not complete aka missing user_id or have the wrong user_id inserted.
Hm.. ok.. I check logs (disk + database).. WTF, parameters are being sent in as they should, meaning they are there, so no idea what is with the missing ids.
OK, logs look fine, but I notice user_id have some weird values (I already memorized most frequent users and their ids). So I go check what is happening in the code, as the procedures/functions are called ok.
Wow, boy was I surprised.. many many times..
In the code, we actually check for user in this apps db or in case of using SSO (which we were) in the main db schema..
The user gets returned & logged ok, but that is it. Used only for authentication. When sending stuff to the db to log, old user Id is used, meaning that ofc userid was missing or wrong.
Anyhow, I fix that crap, take care of some other audit logs, so that proper user id was sent in. Test locally, cool. Works. Update customer's test servers. Works. Cool..
I still notice something off.. even though I fixed the audit_dbtable_2, audit_dbtable_1 still doesn't show proper user ids.. This was last week. I left it as is, as I had more urgent tasks waiting for me..
Anyhow, now it came the time for this fuckup to be fixed. Ok, I think to myself I can do this with a bit more hacking, but it leaves the original database and all other apps as is, so they won't break.
I crate another pck for api alone copy the calls, add user_id as param and from that on, I call other standard functions like usual, just leave out the user_id I am now explicitly sending with every call.
Ok this might work.
I prepare package, add user_id param to the calls.. great, time to test this code and my knowledge..
I made changes for api to incude the current user id (+ log it in the disk logs + audit_dbtable_1), test it, and check db..
Disk logs fine, debugging fine (user_id has proper value) but audit_dbtable_1 still userid = 0.
WTF?! I go check the code, where I forgot to include user id.. noup, it's all there. OK, I go check the logging, maybe I fucked up some parameters on db level. Nope, user is there in the friggin description ON THE SAME FUCKING TABLE!!
Just not in the column user_id...
WTF..Ok, cig break to let me think..
I come back and check the original auditing procedure on the db.. It is usually used/called with null as the user id. OK, I have replaced those with actual user ids I sent in the procedures/functions. Recheck every call!! TWICE!! Great.. no fuckups. Let's test it again!
OFC nothing changes, value in the db is still 0. WTF?! HOW!?
So I open the auditing pck, to look the insides of that bloody procedure.. WHAT THE ACTUAL FUCK?!
Instead of logging the p_user_sth_sth that is sent to that procedure, it just inserts the variable declared in the main package..
WHAT THE ACTUAL FUCK?! Did the 'new guy' made changes to this because he couldn't figure out what is wrong?! Nope, not him. I asked the CEO if he knows anything.. Noup.. I checked all customers dbs (different customers).. ALL HAD THIS HARDOCED IN!!! FORM THE FREAKING YEAR 2016!!! O.o
Unfuckin believable.. How did this ever work?!
Looks like at the begining, someone tried to implement this, but gave up mid implementation.. Decided it is enough to log current user id into BLABLA variable on some pck..
Which might have been ok 10+ years ago, but not today, not when you use connection pooling.. FFS!!
So yeah, I found easter eggs from years ago.. Almost went crazy when trying to figure out where I fucked this up. It was such a plan, simple, straight-forward solution to auditing..
If only the original procedure was working as it should.. bloddy hell!!8 -
While trying to integrate a third-party service:
Their Android SDK accepts almost anything as a UID, even floats and doubles. Which is odd, who uses those as UIDs? I pass an Integer instead. No errors. Seems like it's working. User shows up on their dashboard.
Next let's move onto using their data import API. Plug in everything just like I did on mobile. Whoa, got an error. "UIDs must be a string". What. Uh, but the SDK accepts everything with no error. Ok fine. Change both the SDK and API to return the UID as a string. No errors returned after changing the UIDs.
Check dashboard for user via UID. Uh, properties haven't been updating. Check search properties. Find out that UIDs can only be looked up as Integers. What? Why do you ask me to send it as a string via the API then? Contact support. Find out it created two distinct records with the UID, one as a string and the other as an Integer.
GFG.3 -
As a fellow devRant user, what is it you primarily look for in this app ?
0. Some place to rant
1. Dev jokes/memes
2. Observer. devNews.
3. devProjects
4. Here because you don't like being in the presence of people but want to socialise anyway.
5. Finding your partner in life.25 -
curl 127.0.0.1/robots.txt
User-agent: *
Disallow: Injuring a human being or, through inaction, allow a human being to come to harm.
Disallow: Disobeying the orders given by human beings except where such orders would conflict with the First Law.
Disallow: Not protecting own existence as long as such protection does not conflict with the First or Second Laws.3 -
Today I learned that in Unix/Linux or most command lines, when user is asked to choose an option as [Y/n], the uppercase one signifies the default.
I thought they made it a little harder as a security feature to prevent accidental keypress, and I’m shift+Y ing this for the last eight freaking years!!!!! Every time!17 -
User: - The application throws an errror message.
Me: - The error message is caused by a minor bug that doesn't affect functionality, though. This is an old solution that is in the pipe to be redesigned from scratch. As this function is rarely used, perhaps you can live with this cosmetic bug for a couple more months?
User (one week later): - I haven't got any answer from you. How is this issue proceeding?3 -
In PHP (yes, it's a language I... don't hate) I've always hated exceptions. They're like GOTO, in an OOP world with interfaces and contracts, try/catch is really odd as it breaks a promise about returning with a typed value.
But you can now do this in PHP8, which comes pretty close to Maybe/Either monads (Option, Result whatever it's called in other languages):
function getUser(): User | UserNotFound
PHP8 unions don't come with the same strong guarantees as in other languages but *pets PHP gently on the head* you did well, my boy.
Now I would really love it if PHP9 could do:
function getUsers(): Collection<User>
Type Tree<T> = Null | Node<T>;
function 🎄(): Tree<Branch<Ornament|Light|null>>15 -
We devs are rather pessimistic when it comes to User intelligence... Trust us... bad things can and will happen, and in a Universe of infinitesimally many choices, it does not come as a surprise that someone will fuck everything up badly.
2 -
Any Subtitle is a project that enables the user to watch a movie in a theater with a subtitle of any language on his device as assistance.
The user places his mobile handset on the holder on the seat in front of him23 -
My current project. Won't reveal anything about it until I've got a usable version (which might take more than a month) but it would be a good way to give a middle finger to a big ass surveillance company.
It won't exactly match with their product since this is impossible for me to do as this would compromise user privacy but it'll come close enough!9 -
Linux is hard to learn and master. That's fine with me. Windows is intuitive, but not user-friendly. Linux has a steep learning curve, but then is far more user-friendly than any other operating system. To me, that steep learning curve was far more than worth it, as I now have a desktop that does whatever I want, and behaves exactly as I want.
People come to Linux hoping that it will be easy to pick up, and then get angry when it isn't. Then they claim that the community is toxic, because Linux users are happy with something they think is broken.
Linux is hard to learn, and that's fine. That's valuable, to me. That's part of the appeal to me(and millions of others). Linux is unforgiving when you lack the knowledge gained in that steep learning curve. That's fine with me too. As its userbase grows, so too does the number of knowledgeable people who work to make it better and invent more amazing things for it.
If Linux was easy to learn, it wouldn't be as good as it is, and to me, that's reason enough to love it.41 -
User: "Why isn't this process updated? There's something wrong with your system."
Me: "Did you submit the request?"
User: "Uh yeah I'm sure I did..."
Me: "Go submit the request again." (they never did the first time)
User: "I don't know how. Will you show me?" *shows user how to do it* "Ok I did it now."
Me: "You did it wrong, you need to resubmit it."
User: "Ok I resubmitted it."
* a week later *
User: "The process still hasn't shown any progress."
Me: "You didn't resubmit it like you said you did."
User: "Will you show me how to do it again?"
* fuck me *
Me: "Sure..."
Process works as expected and everyone lives happily ever after, except the developer that knows it is just a matter of time till the next user blatantly lies, has no respect for anyone's time, and demonstrates a complete lack of desire to care about their job at all and just wants to bitch and complain like a typical lazy ass-hat.6 -
“Fullstack dev morphs into a security expert”
We have a simple user registration system. Get the user details, generate an OTP, save in Oracle, email the OTP. The SMTP host is configured to send emails only to people who have an existing @a_very_famous_bank.com email address.
As a part of an enhancement request, the other day, we were trying to register a non-bank email address. As expected, it failed.
Manager: Meeting... meeting... meeting
Me: (Explained the problem)
Fullstack dev: so the thing is.. it’s like.. (doesn’t falter to open with these lines)...what I can do is...I can send you an HTTP security header in the HTTP request. It’ll work!
Me: (I hope an adult giraffe fucks you in your belly button)
More to come!3 -
Anyone remembers that in windows XP you coud set any exe as screen saver, and it would run on time, even before you log into any user, as a default system user with administrator privileges?8
-
Normally I'm both the dev and QA... Today I was the dev, QA and the user... Of course, I'm paid only as a dev... But I'm blamed as all three... Ffs I can't do this anymore 😞2
-
Hey !
A big question:
Assume we got an android app which graphs a sound file .
The point is: the user is able to zoom in/out so the whole data must be read in the begining , but as the file is a little longer , the load time increases.
What can i do to prevent this?3 -
Pulled this from a web site's privacy policy. Remember, just because there's a switch doesn't mean anyone has to abide to that rule.
Browser “Do Not Track” Signals: Most browsers contain a “do-not-track” setting. In general, when a “do-not-track” setting is active, the user’s browser notifies other websites that the user does not want their personal information and online behavior to be tracked and used, for example, for behavioral advertising. As required by recent Shine the Light law amendments we are required to inform you that, as is the case with most websites, we do not honor or alter our behavior when a user to one of our Websites has activated the “do-not-track” setting on his/her browser.5 -
Oh finally I figured out how to use SSH pubkeys! It's simple:
1. Generate a public key on client
2. Somehow transfer it to server
3. Put it into user's authorized_ keys files
4. Now you can login as the user whp has your key in authorized_keys1 -
My predecessor used auth as a bool. The only way he kept basic users from accessing admin functions was by including the word "admin" or "user" in the URL so any user could be the administrator by just changing the URL parameters after logging in
For example, mysite.com/admin/editorderdetails vs. mysite.com/user/editorderdetails -
Anybody do any cloud gaming? As a Linux user, I lack access to a reliable Windows gaming machine, so I rent one through paperspace, and pay 40¢ an hour to stream gameplay though parsec to my Linux desktop.
I've been playing a lot of Subnautica lately with it. How about you?13 -
Dear Client,
You said it was of paramount importance that this software work flawlessly. I've worked hard to make it so, even when your indecision and lack of attention to detail indicate you don't care as much as you say and have made the project late.
Yesterday when I handed you a step-by-step user acceptance test plan, you delegated it to someone not as familiar with your specific requirements. You said you don't have time for such things.
I will remind you of those words when the project launches and you find something you dislike.
Sincerely,
Me -
My very first staggering steps with programming were made with Basic, and commands like INPUT that allowed me to create simple text adventures. As silly as it might sound, my biggest hurdle was to figure out how to make realtime action games, reading input from any sort of user device (using GET and JOY) without waiting for input, and designing game cycles in such way that they gave the impression of multitasking (keep in mind there was no such thing as threads). These machines and the Basic interpretor were extremely slow so making anything move a little...er...smoothly, let alone creating a game, was a challenge in itself.24
-
I think nobody as a developer or as a sysadmin wants to deal with a grouchy sysdba. As a full stack developer who sometimes does the work of a sysadmin or sysdba I prefer to do things myself when I can.
But last week I was notified that my app was failing in prod. After some debugging the problem seemed to be related to some queries.
Upon further inspection I realized that the cunt revoked the select grant for the user my app was using.
I will let that sink in. He revoked the fucking select grant. Wtf😶3 -
Stack Overflow taught me to place all my respect for fellow users in a near arbitrary score.
As a new user here I feel trapped...7 -
Rails gems are like heroine. Addicting as fuck and dangerous when you stop using them.
Just the other day I was explaining user accounts explanations to a coworker when he asked me "what if for some reason you cannot use that package"
My brain froze for a minute trying to remember how would one go about doing that without devise.
Dangerous man.2 -
Has anyone installed Elasticsearch on Linux - centos to be specific.
Trying to workout why the fucker won't install. Setting up a proof of concept so don't want to use it currently as SaaS.
From why I can tell, it only needs Java, (check) and to be ran as a user other then root (check) but running ./bin/Elasticsearch hangs after a while and starts powering up 100 odd threads with no progress.6 -
Why the fuck do apps throw tantrums as soon the phone looses internet connectivity?
HBO stops steaming and closes the player as soon as wifi disconnects, discarding the buffered data.
For Quora, it replaces loaded answers with a UI asking you to reload the page. Now, what am I supposed to do in the lift? Stare awkwardly at the lift buttons?
At what point did we decided bad user experience and arbitrarily discarding cached data is the way forward?6 -
Tech Lead: We need to exclude logged in user from our all users API as we don't want to show user's self card on the frontend with other users.
Me (Backend dev): This should be handled by the frontend and they should exclude it by a condition in their loop:
If (user.id != loggedUser.id)
{
// Add card
}
We also need self user at several other places.
Tech Lead: Create a query param filter for that.
Me: We should keep our APIs as generic as possible.
(Real thing starts)
Tech Lead: Which has more processing power frontend or backend?
Me (confused): Backend
Tech Lead: This will add a break to our loop and Do you know how much processing power it will take because of this condition?
Me (dead): WHAAAA....?18 -
HumbleBundle has a Python bundle again, though not as good as the last one, but this time if you pay the avg. of 16$~ you'll get 50$ DigitalOcean Credit as a new user, which might be interesting, else there's also this for students: https://education.github.com/pack
https://humblebundle.com/software/...
1 -
Been a Debian and Ubuntu user since the age of fifteen (21 now). Let's start a new journey! Installing Fedora as we speak 😀
8 -
At first, I was skeptical and somewhat resilient of trying Arch Linux. As a former Debian based distros user, I have to say : once you go Arch you don't go back! Time to 🍚 it up a bit more!6
-
If a user ++ all your rants and they happen to delete their profile does that mean that all the ++ he/She gave you goes away as well? Or what?11
-
I just hate it when a co-worker says "AS LONG AS IT WORKS. It doesn't matter how you code it as long as it outputs what the client/user wants. They don't check how you code it anyway" *facepalm*
We effin' follow standards so that it will be convenient for everybody!
Bad code is still bad code if you don't follow standards even if it works.4 -
Around 2 years ago, I had first discovered DevRant.
I was an intern in a startup then, and I was working on ElasticSearch. I remember making rants about it. The internship ended. So did my relationship with ElasticSearch.
This week, a new intern joined our organisation (a different organisation). He was assigned the task of deploying ElasticSearch, with me as his mentor. All was going good, we migrated data from MongoDB to ElasticSearch and all.
Back then, I used to curse the team lead (leading a team of interns mostly), for not helping me properly...
I wanted a publicly accessible dashboard, since we can't really see the Kibana dashboard with SSH :P... So, we implemented user authentication using X-Pack security. And here we are, stuck... Again... I'm unable to help the intern. The World has come to a full circle.
PS: I have to just guide him while doing my own User Stories.
https://stackoverflow.com/questions... -
I have a love hate relationships with Google.
As an investor, I love how they are a natural monopoly that keeps growing into new areas...
As a deaf user, And I hate how they find ways to screw me over while still looking good.9 -
Built a whole test suite around our Laravel app which has been pointed out to exec as slowing down CI and yielding no value to the user.
Arguing it’s ensuring something our users is using doesn’t accidentally break just gets brushed off as incompetence.
Oh well, I’ll just skip tests in CI and continue writing and running tests on my own as I don’t feel confident just cowboy fixing things.2 -
The whole app was a shitshow...
- Cancel order as a post request (the same post request used to save the order).
I demoed the client how with a couple of lines of code I could change his "Cancel order" button to "Mark my order as payed" button....
- List orders method took an user id as input...
- Update profile did not care about wich properties you should be able to change as a non admin...
And so on...1 -
People talk about how the Linux desktop is coming along. I don't really give a shit about Linux's viability as a desktop OS, or attempts to give it general appeal. In my opinion, that just introduces hits in performance and flexibility. It's a great desktop because I know what I'm doing. I want that. That doesn't have great appeal, but I don't care. Gnome, Unity, KDE, and Cinnamon are user friendly, but heavy as fuck.5
-
Hmm...recently I've seen an increase in the idea of raising security awareness at a user level...but really now , it gets me thinking , why not raise security awareness at a coding level ? Just having one guy do encryption and encoding most certainly isn't enough for an app to be considered secure . In this day an age where most apps are web based and even open source some of them , I think that first of all it should be our duty to protect the customer/consumer rather than make him protect himself . Most of everyone knows how to get user input from the UI but how many out here actually think that the normal dummy user might actually type unintentional malicious code which would break the app or give him access to something he shouldn't be allowed into ? I've seen very few developers/software architects/engineers actually take the blame for insecure code . I've seen people build apps starting on an unacceptable idea security wise and then in the end thinking of patching in filters , encryptions , encodings , tokens and days before release realise that their app is half broken because they didn't start the whole project in a more secure way for the user .
Just my two cents...we as devs should be more aware of coding in a way that makes apps more secure from and for the user rather than saying that we had some epic mythical hackers pull all the user tables that also contained unhashed unencrypted passwords by using magix . It certainly isn't magic , it's just our bad coding that lets outside code interact with our own code . -
management logic.
dev : calling api on every product scroll is a stupid idea. we shouldn't do it. what if user has 100s of products bought?
mgmt : it isn't a practical scenario. in prod, we checked the data and we rarely have customers with more than 20 products
dev : 😮🤷♂️
dev : this is a rare issue that only happens for very old devices from this specific manufacturer. even manufacturers have acknowledged this.
mgmt : we don't care. fix it, as per data this error has been logged for more than 12 times (from 1 user only)
dev : 😮😢2 -
As I am working with WordPress for the really first time I am making horrible experiences now.
My client wants a simple submenu on the sidebar if the user is logged in else he want the login form to be there. Easy peezy done with php and just good old plain html. Maybe some JavaScript to make the login process asynchronous.
But fucking bitch - NO. As I found out after searching and digging. I have to create a menu in wp-admin first. Then add a menu-widget to the sidebar. And then install a plug-in to make the links only visible for logged in user. Wtf?
WordPress takes all the joy in doing web development for me. I won't do that anymore. I will force all new clients to use proper tools to make their shit work for them. And as I am the expert in this things I am the one who suggests the right tool.
Fuck this shit.8 -
Switched back to windows because I needed IIS for work and I did miss having a touch screen (could not get driver working on Linux).
A few gripes.
I mean, the standard "oh great, half a day downloading and updating my machine" applies.
The thing I forgot about Windows is that after everything I do it wants to restart. Updating itself forced the computer to restart several times, wtf.
Powershell (ironically) holds a shadow of bash's power
So many "power user" actions are done with a gui, dear lord give me a terminal command and a man page any day over the convoluted way to do some actions. Changing permissions for IIS was several layers of gui dialogues, where it would be a couple of commands in bash.
Sorry to be unoriginal and moan about an OS, as an end user windows is great and a lot more streamlined and arguably prettier, but as a programmer it doesn't make life half as easy as the realm of *nix1 -
Someone wanted me to make a full system from zero with good UI/UX, for 2 different user types (think marketplace style), admin area, and cool features that could only be done through phones because the tech is not available in web. All of this with good security due to the delicate information it would handle. Also of course subscription support as well.
By myself, within a year.6 -
Possibly the start of a very bad adventure: I'm helping my brother-in-law set up a website for a business he'd beginning with his wife. I'll be needing to provide him a simple cms & shopping cart that he can manage. No payments as we want to just use PayPal so as to avoid having to actually manage user data & credit card information.
Wish me well....
Also advices appreciated cause otherwise, I'm gonna use a simple Drupal or WordPress site with like 1 theme and 0 plug ins.4 -
I googled "scrum sucks" and now I can see a pattern described as an argument against the whole scrum/agile/whatever thing, which is already happening since we started adopting agile: we're consciously incurring technical debt and being allowed to create a mess out of the previously existing code architecture just to "get this ticket out of the way"
We're also refraining from acting immediately on negative user feedback on a feature just released, which I think can wear user perception of the company as a whole, all because it's "not the focus" of the current sprint9 -
That's a question I found today at stackoverflow, though it was deleted when I tried to read and the user was deleted as well.
What do you people think?
I think the person who wrote this is one of those people who think that stackoverflow is a place to find someone else to do your homework...
9 -
So yeah XML is still not solved in year 2018. Or so did I realize the last days.
I use jackson to serialize generic data to JSON.
Now I also want to provide serialization to XML. Easy right? Jackson also provides XML serialization facitlity similar to JAXB.
Works out of the box (more or less). Wait what? *rubbing eyes*
<User>
<pk>234235</pk>
<groups typeCode="usergroup">
<pk>6356679041773291286</pk>
</groups>
<groups typeCode="usergroup">
<pk>1095682275514732543</pk>
</groups>
</User>
Why is my groups property (java.util.Set) rendered as two separate elements? Who the fuck every though this is the way to go?
So OK *reading the docs* there is a way to create a collection wrapper. That must be it, I thought ...
<User typeCode="user">
<pk>2540591810712846915</pk>
<groups>
<groups typeCode="usergroup">
<pk>6356679041773291286</pk>
</groups>
<groups typeCode="usergroup">
<pk>1095682275514732543</pk>
</groups>
</groups>
</User>
What the fuck is this now? This is still not right!!!
I know XML offers a lot of flexibility on how to represent your data. But this is just wrong ...
The only logical way to display that data is:
<User typeCode="user">
<pk>2540591810712846915</pk>
<groups>
<groupsEntry typeCode="usergroup">
<pk>6356679041773291286</pk>
</groupsEntry>
<groupsEntry typeCode="usergroup">
<pk>1095682275514732543</pk>
</groupsEntry>
</groups>
</User>
It would be better if the individual entries would be just called "group" but I guess implementing such a logic would be pretty hard (finding a singular of an arbitrary word?).
So yeah theres a way for that * implementing a custom collection serializer* ... wait is that really the way to go? I mean common, am I the only one who just whants this fucking shit just work as expected, with the least amount of suprise?
Why do I have to customize that ...
So ok it renders fine now ... *writes test for it+
FUCK FUCK FUCK. why can't jackson not deserialize it properly anymore? The two groups are just not being picked up anymore ...
SO WHY, WHY WHY are you guys over at jackson, JAXB and the like not able to implement that in the right manner. AND NOT THERE IS ONLY ONE RIGHT WAY TO DO IT!
*looks at an apple PLIST file* *scratches head* OK, gues I'll stick to the jackson defaults, at least it's not as broken as the fucking apple XML:
<plist version="1.0">
<dict>
<key>PayloadOrganization</key>
<string>Example Inc.</string>
<key>PayloadDisplayName</key>
<string>Profile Service</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist
I really wonder who at apple has this briliant idea ...2 -
A lot of people give Google, Facebook, Microsoft, etc. shit for "selling" user data although in my opinion acting as a matchmaker between advertisers and users does not really constitute selling data.
In contrast there seem to be a lot of companies that actually do sell user data that I never hear anyone here talking about.
5 -
I wished there was a lmao button, because sometimes a post/comment makes you laugh your socks off or is very clever, but a ++ won't just do it.
and you also don't want to reply with a "that's hilarious", because
a) it's non-content thus not something that others than OP would ever want to read
b) on the internet, compliments are usually interpreted as sarcasm
but such thing would also degenerate quickly into a troll tool, eg, a user posting an opinion in a serious manner, and other users spamming that lmao button...
so maybe not exactly a lmao button, but something similar, like medium's clap (although I think 50 claps per user is a bit too much).4 -
!Rant
Got a job offer as an Android Dev, signed the contract, while signing employer asked me if i am a mac or pc user. A day before my joining date got an email from him asking me to bring my mac with me on my first day. Turns out he won't be providing me with a machine to work on :).5 -
Never have I been so satisfied as I am right now after having implemented a login and user account system with the ability to update user preferences with databases n' shit in PHP after only knowing PHP for a day.
Speaking of all that, do you guys know of any good place to make sure all my stuff is secure? No SQL injections n' the like.4 -
I'm facing big issues on one of my apps and luckily a user is helping me doing some tests as I can't reproduce the issue. He just sent me an email and guess what?! He wrote "happy weekend". No. It's not going to be an happy weekend for me.1
-
It's a toss up between a basic software portal for my old school as a volunteer thing or an old game designed around user content creation.
The portal is more of a personal success but the game was a success in the respect it ended up rolling past a Bethesda employee and he gave me a one on one Skype chat about there design methods. -
Looking for a second opinion/validation.
*Me: “Perhaps this simple and concise way to ensure the user doesn’t lose their data before they leave the page that requires non-zero yet minimal input from the user. (Read: ya gotta push a save/submit button)”
*Everyone else: Let’s pretend to read the user’s mind and perform relatively complicated functions behind the scenes, of which the user will most likely be unaware, that will add an undetermined amount of complexity to the development because we think it’s “where things are going,” by saving the value of a certain HTML element as it loses focus.
Edit: this is an exclusively-internally used app.4 -
As a .NET dev I get questioned about using VS Code in favor of full-blown VS. My arguments are that it is faster, lightweight and overall more user-friendly.
I use it exclusively, for all types of files and projects (JSON, SQL, Angular projects, .NET Core, ...)
Do you guys like using VS Code as well? What do you use it for?
Also, if you ever want to annoy a colleague, try associating all file extensions with Visual Studio and watch him go bonkers.7 -
We really take for granted just how much ergonomics goes into the average user interface that has matured.
Like knowing that when I doubleclick a keyword, I don't want the comma as well to be selected.
Or that when I use a command in the terminal and I press tab I want a list of a specific element type.
Everything has gotten so much better since the 90s !9 -
It is not on production anymore, but it was for long enough. Someone thought it would be a great idea to be able to debug a web app while signed in as a user reporting a problem. How to do it? It's easy. Just check on every request if magic HTTP parameter SIGN_IN_AS=id is present and if it is, sign in as this user. Of course, it worked also with admin account with hard-to-guess id=1.1
-
Waiting 15+ minutes while Windows "indexes" a folder just so I can see the contents reminds me of why I dislike Windows as an OS so much.
This is a senseless operation that is of no benefit to the user.5 -
As a webmail user, I want to be logged out automatically without any reasonable reason, to be able to read your notice that I have forgotten to log out, once I log in again.
-
Okay so my ticket got rejected because the on screen texts are not in the correct case (upper/lower). Totally fair because nowhere in the spec are those texts defined. As a developer I am also responsible for what "makes sense" for the user.
I'm just gonna say this next time I ask for a raise. -
Today is my second anniversary as a full time linux user.
When do I get my Tux plushie and a personal letter from Linus?4 -
Here's a hypothetical scenario: what if all web-developers in the world united and collectively decided to act as if there are no other browsers except Firefox and Chrome?
I know I do. Of course, everything I ever made targeted younger audiences, so only idiots, Apple fanboys and the ocassional Opera user used anything else...10 -
This is a gripe about modern UX interfaces. UX interfaces need to have better ways to get information displayed in text as text. It is exceedingly annoying to be presented with an error message in a dialog with a cryptic error code. The user is forced to transcribe the error message to try and figure out what is causing the error. Just make the text copy-able with normal cut and paste interfaces. I think this should be a standard in interfaces that present text to make it easy to copy the message or text from interfaces. This makes information sharing easier and less cumbersome to the user. This is definitely a mindset change for UX. This is mostly a gripe about desktop. Phone systems are just shit to begin with.6
-
Something that I absolutely hate about the IT industry:
When a feature is deployed the chain is like this:
Dev -> Testers -> QA -> Product Manager -> End User
But when things break in production and management wants to yell at the staff... only the devs get the heat and no one else, as if they weren't responsible for anything at all.
Really fucking hate it.7 -
Nearly same time as the "don't be evil" got removed from google pages, an old internal video leaked about some futuristic concept, where the AI would try to gather as much data as possible from a user and if not possible, suggest devices with discount (e.g. a scale), that can return that data to the AI or if there's no fitting product, just print or make it based on the previously collected data (favorite color, ..) and suggest that to the user to buy, all since google duplex, anything mentioning google has been outscoring the previous idea 😶
src: https://youtu.be/iqUCX5rPQug
2 -
An alternative OS for phones able to be installed super simply without flashing or unlocking the bootloader, similar to how easy it was to jailbreak am iPhone years ago. It would also have a focus on privacy and the ability to turn off and on as much functionality as the user wants1
-
many new updates to skyRant, a devRant Android client! new stuff:
user and blocking of words (such as gpt :)
github integration
rEaL tiMe notifications :P
deep linking
more themes
link preview (image, icon and desc)
german language support
double-tap to vote (rant page)
and even more (this was just the best:))
for watchRant the ability to set your avatar as watchFace has been added!
skyRant GitHub download https://github.com/joewilliams007/...23 -
Forgot to do server side verification.
As the service (an injectable game) was expanding and the old system relied on server side calculation without anything returned from the user, the expansion was done a little too fast.
The result could have been anyone passing wrong data and receiving the grand price like a holiday worth $10k. Quick fix ... -
As I am now in a leading position in the middle of a agile transition:
has anyone got a source for a project done completely with user stories?
I am searching a real life example with already finished stories an active backlog and a documentation.
I just can't wrap my head around it. When and what do you document? In which Form do you document? How are you writing user stories with more content like diagrams and such?
(we use jira and confluence but just started with stories)
I read some articles on the topic and watched some talks but sill don't get the picture.8 -
Here's an idea.
I wonder if a politician who work as a dev can belong here...
=======================
Content Boundaries and Use of devRant
Rule 2.
Politics: You may not post rants regarding politics unless they are directly related to a current event directly impacting development/tech. We've gathered lots of user feedback on this rule, and it is widely appreciated as devRant is a platform to have fun and somewhat of an escape for developers, who want to keep real-world issues and controversies off the app.3 -
PM blindly puts user requests into JIRA as tasks to complete without thinking through their relevancy. Some of these are straight up not possible or don't make any damn sense. (╯°□°)╯︵ ┻━┻ just a constant reminder how great it will be when I leave here at the end of the month.1
-
If you think parametised queries will save the day think again.
I occasionally test sites I visit throwing a few quotes at inputs and query params.
I also always test logging in as % with user or pass.
Not only are plaintext passwords a thing but so is this:
WHERE username LIKE ? AND password LIKE ?.
Once I saw an OR.7 -
So I was just about to post a whole long rant about something breaking with an update. But I literally just found out, the whole thing was my fault because I changed something. I feel so fucking stupid. I went on a rant in a Discord chat with a couple friends, blamed fucking everything I could possibly think of.
Then I remembered when I tweaked a config file just a few days ago. "Maybe that has something to do with it....?" YUP, I'm a bit stupid.
Basically I changed an environment variable, and the variable I was referencing in it isn't being set (which is an issue itself, but I can figure that out), so instead of looking in that folder, it was looking in the root directory, and I was getting some permission denied errors cause..I was running the program as my normal user. Of course I shouldn't be able to write to root as a normal user.
I guess I'm a bit stupid sometimes when I'm sick.3 -
XCode you fucking piece of shit...
So I just wanted to process my ios app to the app store and start the archive process. All of the sudden:
Command CodeSign failed with a nonzero exit code
What? So there is an error and you cannot tell me the error code? All information you give me that it isn't zero!? Wow... Amazing... What a great user experience. Maybe it cannot resolve the error? Maybe it is some external tool Apple has no access to and that is the only valid error they can throw at us?
Oh hell no! It has something to do with the keychain access! But why tell the user? That wouldn't be as much fun as just tell it is a nonzero error, isn't it apple?!
In the end locking and unlocking my key chain solved the problem... Thanks for nothing XCode!2 -
God damn I hate that "smart" and "convenient" autoscrolling to focus areas which has kind of exploded on webpages, most of the time just fucking the user over while one is trying to read something or generally use the site.
Pages bouncing all over with shitty response, who the fuck thought that were a great idea, they should've been put in the ground as a Thank you.1 -
Working at a local seo sweat-shop as "whatever the lead dev does't feel like doing" guy.
Inherit their linux "server".
- Over 500 security updates
- Everything in /var/www is chmod to 777
- Everything in /var/www is owned by a random user that isn't apache
- Every single database is owned by root sql user
- Password for sudo user and mysql root user same as wifi password given to everyone at company.
- Custom spaghetti code dashboard with over 400 files in one directory, db/ api logins spread throughout these files, passwords in plain text.
- Dashboard doesn't have passwords, just usernames to login
- Dashboard database has all customer information including credit card stored in plain text
- Company wifi is shared by other businesses in the area
I suggest that I should try to fix some of these things.
Lead Developer / Tech Director : We're an SEO company, not a security company . . .7 -
I've been working on this fucking instagram connector for 4 weeks now, mainly due to idiotic red tape
Now the time has come to get it approved. I'm supposed to let them know how to test the connector with a test user. but FUCKING facebook's test users don't even work as test users! their own spam catcher identifies their own test users as bots!!!!
I mean what the fuck!!!! HOW AM I SUPPOSED TO GET THIS APPROVED IF YOUR TEST USERS DON'T FUCKING WORK AS PART OF THE TESTS
AAAAAAAAAAAAA THIS IS FUCKING INFURIATING3 -
Product owner and scrum master prioritized a not important user story. We are just new to the assigned team without proper turn over, KT, vague user story(one sentence) and no time to prepare our local environments. Then after sprint 1 the client wants a demo by next month but the PO and SM had prioritized the wrong user story so now they are pressuring the developers on finishing fast the other correct important user story. They mismanaged it and now they say the development was slow thus blaming us?! WTF. We hit the deadline of the first user story with unpaid overtimes.
The other PO was always asking us on how to fast track the development lol.
I'll tell them all their faults in the next meeting. As usual we are just high paid corporate slaves with golden hand cuffs trying to escape the rat race.5 -
Heads-up, stop using email as a user-id in your systems. netikras@gmail.com and net.ikras@gmail.com are the same recipient. And noone really checks for that dot when validating a new user in our systems, do we? :)9
-
PM looking at Concept Design: "There were checkboxes and now you have radio buttons"
Me: "Those are two separate screens. One is the user inventory, the other populates an add"
PM: "So which is it? Are we using checkboxes or radio buttons?"
Me:"...both? Each where it makes sense?"
PM: "So what's the point of the radio button? If the user can only click one row, why do we need a radio button?"
Me: "Visual representation of what they selected. We could use row highlighting as well, it doesn't really matter"
PM: "But what's the point?"
Me:"...."7 -
A banking application helps businesses attract new customers, increase audience loyalty, and improve the quality and speed of service delivery. The banking application can also act as a new marketing channel and a tool for detailed analytics of user actions. What do you think about it? Is it convenient to have a banking application on your phone and always at hand?
8 -
Today I completed my first user story as a developer, an feature to edit and update comments posted. It passed the test too.
I'm proud of myself about the achieving this given my actually development experience is very minimal :)
More challenges to conquer..
Thanks1 -
So, yeah it's been a month in the industry for me now. Rant time - I got mind fucked when I saw my teammate making a drop-down list which was editable, when I confronted him and explained him the disadvantages of that. His explanation is that user will not take advantage of that as the feature is for our internal use. But on a positive note he fixed it.2
-
User feedback
Been working on an application for the three days then yesterday happened to present a demo to my target client base.
Me:I need you to go through the app and tell me your experience using it.
User: Great let me see it and comment on it.
Me:I wait patiently as he goes through the app asking for clarification on some activities .
User:I love it but I think would be nice if we improve on the following.
Me:Okay go ahead all ears.
User:How about on the share feature instead of sharing the apps link then one goes and downloads it and install,how about you simply share the APK and install it instant.
Me:Okay that's a good thought and later go on to explain to him why we share links as compared to sending the APK directly . -
For me it has got to be Retroarch/Libretro (or as I've taken to call it etc.).
Retoarch is a frontend for Libretro which is an API that emulator developers can use so that I as the user don't have to worry about configuring each emulator (and some other stuff).
It's a godsend piece of software that makes it possible for someone like me to really just enjoy my (but but expanding) library of old games (that I can only dream of playing on original hardware)
Also, it's multiplatform!
I also tagged it as wk119 since this is my school setup
2 -
No. I’m not going to take a 20 minute user-testing job disguised as a “survey” for you - for free, LinkedIn - and all your other super rich companies. You gotta pay people to work for you.
-
I checked out this new hybrid app that was released by some local senior developers.
Turns out that on my user profile, my user ID is set as the value of a hidden field and changing it to any other user ID and saving the form will update the profile of that user. Including changing the password.
The password reset form also allows me to change the user ID to reset that user's password.
Speaking of passwords, the value of the password field on the profile is my actual password in plain text.
Yes, I said this app was released by a couple of "senior developers". One has over 15 years of experience and the other works at an IT company that builds online banking systems. They appear to have outsourced this side project to some other development team but... Come on. At least take one quick look at the source code before releasing it, why don't you?
I don't even...1 -
UX-wise, it should be absolutely forbidden to alter anything that is being overlapped by the cursor.
One example is the (mostly) terrible search in Windows 10. I have a tendency to use the keywords "fire" for either Firefox or Firefox Developer Edition. Sometimes, Windows will give me Developer Edition as the top result, which is fine. But as I I'm about to click the icon, Windows will find the other Firefox and place it as the top result.
This is known as terrible UX. The user interface is working against the end-user.9 -
!rant
Hi, i just finished developing a web page, and i wanted to ask you as in this case users what do you think about it, is it user friendly , any security breaches found or something?
Here is the link:
http://propika.com/13 -
I want to cry... Fuck it.. shiit. .. :( :( ;(
Wasted half of the Weekend to Setup MySQL on my vServer which uses ssl encryption, have specific User and so on.
Thought: well, the User mysql is not so good as a Name. Drop it, you don't need it.
What did I? Instead of Drop User mysql , I typed Drop Database mysql.
Fuck that fucking Shit. I'm so sad right now. Broked the complete MySQL Database. Nothing is working anymore. And the server is new, I've Just made One Backup. Deleted this a few hours ago.. also accidently.
Help me :( Shit :( so sad :( Now, I don't have Motivation anymore to work with the vServer :(3 -
Allowing only 1-2 chosen apps to use mobile internet while being run in user-space (as in you see the shit and are able to close it via a swipe) would be sick..
-
- Implemented oauth1 - no body hashing
- URL contains credentials in plain text
- Used Azure API management feature as a proxy of the our API, however the documentation was on the our API, thus exposing the API URL with no management to developers.
- easy resource DDoSing because each trial user got a DB, the registration process did not have bot checks. You could literally freeze the db instance by spamming registration requests. -
What a day we are testing a system which was supposed to handle 10 maybe twenty user to handle 12k users.
And i am being lectured this system is using way more resources as it is supposed to be 😔. At design time the same people just wanted to save time.8 -
Somebody needs to look at the whole user admin side of all of google products from a users perspective. Then realise what a disjointed dysfunctional, horrible, confusing, pile of shit it all is. I would say the same for zoho, another example of how to put as many obstacles in the way of doing straight forward tasks.3
-
As a user I want to fart before some one opens the door.
As a user I want to wait if someone farted.
As a admin I want to see who farted.
Does anyone else get annoyed with tasks like that? So much unnecessary words.
Bla bla bla do this bla bla bla2 -
As somebody who works in the industry, 2FA is a great idea, we need to do it more.
As a user, fuck 2FA, I ain't have time for that shit, if you make me type my screen lock once again I will throw my computer out of the window.8 -
Is there a way to sign code for free (or atleast not need to pay over £200 for it)? Im a student and cant really afford much but I have been working on a website and made an electron build for it, however downloading the installer prompts the user to discard it in chrome, then running the installer prompts the user to select do not run in the windows security thingy as its from another computer.
What would be the best way around this if I cant get a certificate for it?2 -
User having a problem with a page in a web application : -...I'm attaching a screenshot of what it looks like.
Me: - Some scripts seem to be cached so you might need to reload the page.
User: - Now that I reloaded the page for the third time it seems to work. Then I tried another case and then it gives me the same response as in the previously attached screenshot.
Me: - Was it in a separate Firefox window?
User: - What do you mean by a separate Firefox Window?
Different professions really speak different languages.2 -
I was a Windows user from the start had an old windows pc og and ever since that computer and my first HTML book I've wanted to code and design as a passion hobby and now work
-
Bash on Windows is incoming soon! As a dual boot win10/Ubuntu user I am pretty psyched. Curious as to what you all think, and opinions from insider program participants.
I just hope it isn't half-assed.4 -
On a personal project, running some tests.
I had errors in specific tests, I just removed them and added a comment:
// We assume the user will use it as intended1 -
As a user getting warnings and errors containing the word "unknown" it can be kind of frustrating, but as a programmer I can relate...
1 -
Microservices
Lets take an example: Products service & orders service.
When I want to save an order for a user, data saved as
1. UserId, ProductId, Quantity, Date
Or
2. UserId, Name, Email, ProductId, ProductName, Quantity, Date
I'm a bit confused here because if I'm going to fetch that purchase, in example 1, it will return IDs requiring another trip to server to get user & product info
In example two it takes only one trip BUT if any changes is made to either user info or product info it means I'm returning wrong info to the user.
What do we do in this scenario? Excuse my questions first time applying Microservices and been using monolith all my life6 -
I can't believe it is real: I just had to talk someone out of calling a navigation point "FAQ User"
Had to admit I'm from Germany and so was the client. It's quiet common people pronounce FAQ as fuck here3 -
At internship with a fellow student from my class, making a SqliteHelper class in php to make things easier. Delete methods only have only one parameter (Primary key)
Coworker: "Why do you use the primary key as parameter? The user has no access to it!"
I can't express in words how close I was to snapping. -
I think I've learnt something worthwhile from nearly every project I've been involved with. If I had to pick one however:
Started an open source project designed for projecting multimedia content during church services as procrastination from final year undergrad revision.
Fast forward nearly a decade, and I've learnt tremendous amounts as a result of starting it - dealing with everything from GStreamer on a native C layer, right through to WebRTC stuff (STUN, TURN, ICE, etc.) at the other end. What started as some odd attempts to show text and images on a screen in a user friendly fashion has grown tremendously, and is now used all over the world. -
@notRant
The devRant team seem quite humble. I feel it's quite important to have a humble face to your user base, because without it, our jobs as devs would be meaningless, even if you develop a cool app like {{ $coolApps[0] }}.
@include('funny_meme.jpg')
@endNotRant -
Why the industry jumped on photoshop as a web design and layout tool is beyond me. It's like trying to stir coffee with your thumb. I'm a descent photoshop user but have always used inDesign in web mode. Far quicker for chucking around layouts and options (as page). It also exports as rgb png's either full pages or selections with or without transparency (at any resolution). Which are perfect for then optimising in Photoshop (Pixelmator these days) or any other less costly image editor. I hand code my sites then in Coda, love it.3
-
As opposed to my horrific experiences with PayPal, Swish, a Swedish (really smooth) payment processor has some really nice documentation. An example:
"The callback, in the happy case, will return an intermediate response with the status DEBITED."
And other nice things such as clear numbered lists describing user flows, with images for extra clarification. Also, they provide full lists of error responses and in many cases suggested way to proceed with these error cases.
And as the cherry on top, this is developed as a cooperation between a few Swedish banks. The banks, who are the most thick type of companies when it comes to IT, does it better than PayPal.6 -
Found out a contractor stored 2.5 million rows of user info as json objects. 2.5 million is our sample size. Please tell me this is nuts right... Searching that would be taxing right?4
-
On stackoverflow, I saw a new user post a comment as an answer, probably just because they had not enough reputation to post a comment. Before I could finish a helpful comment about the situation, that post got downvoted -5 and deleted because the user considered his own abilities "shitty" which was considered an illegal swear word by stackoverflow. Stackoverflow is like the Sunday school of programming, oh my ️🤦♂️😠5
-
Why does nobody talk about security, even as basal on user accounts?
Its rare when i find a a framework/tool/talk/library/spec where the docs give an explanation, and more important an example of doing it the right way, and i mean without going into the history of ancient Greece and their scytale stick11 -
It's done. Agile has taken over my life. The other day I looked outside and thought, "As a user, I can stand on my lawn without my feet disappearing." And that's how I decided to mow my lawn.
-
I hate code imperfections. I have a cookie which is linked to a permanent user setting and I was looking to make it infinite, but I was disappointed to find out the best option is Cookie.setMaxAge(int seconds), so I put Integer.MAX_VALUE, and I'm not as disappointed anymore.
5 -
Is it just me or is everyone thinking the binary ++ counter is a good idea?
I think it’s really cool because it sort of hides the number of ++ you have behind a wall of laziness. Like people probably aren’t going to convert every score and I personally just look at the length of it as a rough estimate of how upvoted a user is.
I think this really helps eliminate the “likes contest” that can come with other social media. (And as a result reduces spam that is posted/reposted just to get likes)
Anyone agree? Disagree?5 -
I'm studying a mix of computer science and engineering. This semester we were tasked with hacking a "smart-production"-production-machine.... And OMFG it's shit!
This is a product by a major company and it's version 4... How the fuck is it this bad?
Like, using the same 5-letter password on all the PLC's FOR THE ROOT USER!!! WTF!!! AND open, unencrypted Telnet.....
This is a million dollar machine and, as soon as a hacker is on the same network it is done for! wtf.... I just can't believe how easy it was to get in and reek havoc.6 -
We have a role/team/user system where we can add people to teams so they can see our code.
Every time I have to add people to something, 20-something emails arrive to inform the new users' managers and let the user know that a request has been made.
Never do I feel as anxious as when all these emails go out and everybody sees my name and I immediately feel like I fucked up -
Been doing java for years now, and finally got to trying out an IDE. Been using VIM and notepad++ for ages, and tried Netbeans. It honestly frustrates me, is this where it's at, or is there something a bit more user friendly? Google yes I know, but Googles opinions are about as reliable as Bill Clinton around Monica Lewinski6
-
I happened to purchase a multi currency card as I was preparing to travel abroad. I enquired a few non tech friends of mine about a bunch of providers/lenders and I got a consistent suggestion of how company XXX is safe and user friendly. I took a leap of faith and went with them, since I didn't have any time left to do my own research.
Met the vendor, loaded some money and all is well. At least so far.
I went to their website to create an account for checking my balance and to do a bunch of stuff online.
Nothing unusual so far.
I fill up the new user register page. At the end I get a message which says "SUCCESS" and asks me to check my email.
VOILA!
I have an email with my user id, password and security questions in CLEAR TEXT sitting in my inbox.
Good job XXX.1 -
As I've been a windows user as long as I can remember, Mac OS always seemed like the COOL OS. until I started using it. I mean, seriously apple? you cannot cut and paste a file? you cannot move a window to another monitor if there's an app in full screen? screenshots are saved in the desktop instead of a dedicated folder & I cant even change it?12
-
Serious question, looking for actual educational answers: I've used Linux for around 5 years now, but what, from a practical user standpoint, makes Arch so much "better" than other distros, as many seem to believe?4
-
An app I'm making for a client currently has 23 "pages" that are simply web views.
Most of those pages have A HREFS which open other pages (some external pages that I have no access to as a developer).
Of course, some of the links aren't HREFS and are javascript calls to change the content on the screen without going to another page. So the user thinks they have gone to another web page when then system doesn't recognise it as another page...
Additional to this, there are multiple versions of the pages depending on which language the user has selected in the app.
And nobody seems to have considered how the default back button handles all these possible eventualities (whether it can go back to previous web page, IF it was an HREF and not just JS mimicking a new page (and how would my webview even catch that), and of course IF the language hasn't changed during the user journey etc etc)
Am I wrong for being annoyed about this? Am I the dick for not developing a clean solution to it? Or am I justified because webviews have no place inside an app!
I'm sort of hoping apple deny this app due to too many web views :S8 -
Recently joined a company (as a fresher), don't even know java spring but have been assigned user stories to be done in java spring batch. I know how to do my story normally in java but in batch it's like a nightmare.I am just unable to do it and today on my way back home,I started questioning if i am good at coding or not....Never felt so low about myself...
-
Hello, can someone help me with this one ? I guess that the fucking SO elitist community would have beaten me to death if I asked this question.
I'm trying to create a relational table between a Tutorial object and a User object (to know which tutorial the user has access to) using Sequelize, and I figure out that I have two PRIMARY keys in my table. How is it possible ? UserID is also marked as Index.
The both keys are not Unique in themselves but their combinations are unique.
4 -
Am doing an online shop for some client as a side project. The client never requested a module enabling an admin user to manipulate listed products. Now this cheap genius wants to be able to login as a seller and manipulate whatever products they've listed. So I told the client it's not possible to do that because passwords are stored as hashes. Now, can you Guess who's storing clear text passwords ?
May shit never hits the fan.3 -
I got asked to teach a bit 3D printing to a physics class at my old high school. But I consider myself an amateur at 3D printing at best and don’t think these kids are going to learn as much as their teacher thinks they will.
Especially if the printer is above the hobbyist level and doesn’t require user added upgrades and improvements3 -
Getting a CodinGame puzzle's description without scraping the page.
I spent hours playing with different endpoints and changing values in postman, all to no avail. The most promising endpoint also returned user progress, which requires authentication, which requires a dummy account, which is against their ToS (it is allowed to reverse engineer the API though).
Turns out you just had to submit “null” for your user ID and it would remove the progress field.
Why is this tagged bad design?
["puzzle-id-string", user-id-as-int]
For almost anything, you POST json arrays...
Send help. -
What it's like to be a network
engineer...translated into normal people speak
User: I think we are having a major road issue,
Me: What? No, I just checked, the roads are
fine. I was actually just on the roads.
User: No, I'm pretty sure the roads are down
because I'm not getting pizzas.
Me: Everything else on the roads is fine. What
do you mean you aren't getting pizzas?
User: I used to get pizzas when I ordered
them, now I'm not getting them. It has to be a
road issue.
Me: As I said, the roads are fine. Where are
you getting pizzas from?
User: I'm not really sure. Can you check all
places that deliver pizzas?
Me: No I don't even know all the places that
deliver pizza. You need to narrow it down.
User: I think it is Subway.
Me: Okay, I'll check...No, I just looked and
Subway doesn't deliver pizzas.
User: I'm pretty sure it is Subway. Can you just
allow all food from Subway and we can see if
pizza shows up?
Me: Sigh, fine I've allowed all food from
Subway, but I don't think that is the issue.
Usher: Yeah I'm still not getting pizza. Can you
check the roads?
Me: It's not the roads, the roads are fine. I'm
pretty sure Subway isn't the place.
User: Okay, I found it. It's Papa Johns.
Me: Okay, I looked and Papa Johns does
deliver pizza. Is it the local Papa Johns or one
in a different town?
User: I don't know. Can you allow pizza from
all Papa Johns to me?
Me: No I can't do that. Can you get me an
address for Papa Johns?
User: No, I only know it as Papa Johns. Can
you get me all the addresses of all Papa Johns
and I'll tell you if one of them is correct?
Me: No, I don't have time for that. Okay, I
looked at the local one and it looks like they
have sent you pizza in the past and they are
currently allowed to send you pizzas. Try
ordering a pizza while I watch.
Usher: Yeah still no pizza. I'm guessing they
are getting blocked at the freeway. Can you
check the freeway to make sure they can get
through?
Me: No, this is a local delivery. They aren't
even using the freeway.
User: Okay, well then it has to be a road issue,
Me: No, the roads are fine. Okay, I just drove
from the Papa Johns to the address they have
on file for you and there is nothing there.
User: Hmm, wait we did move recently.
Me: Did you give your new address to Papa,
Johns?
User: No, I just thought they would be able to
look me up by name.
Me: No they need your new address. What's
your new address?
User: I'm not really sure. Can you look it up?
Me: Sigh, give me a second...Okay, I found
your address and gave it to Papa Johns. Try
ordering a pizza now.
User: HEY! PIZZA JUST SHOWED UP!
Me: Okay, good.
User: (To everyone else they know) I apologize
for the delay in the pizza but there was a major
road issue that was preventing the pizza from
getting to me. The network engineer has fixed
the roads and we are able to get pizza again.
Me: But it wasn't the roads...whatever.
User: Oh, can you also check on an issue
where Chinese food isn't getting to me? think
it may be a road issue5 -
Let's see:
No archival of data on a database server with over 5000 high profile customers using no encryption whatsoever with telnet open on LAN, every user on the same account in the office using the companies name as the password... But hey there are security cameras! -
As a Software Engineer
I want agile bros to fucking understand the amount (scope) of work their stupid user stories contain. So that I don't have to rant about it and go back and forth between 10k people to figure out what the fuck they want.4 -
So i'm workin on a wrapper for an api, and it has authenticated endpoints. My request function has a check to see if the user has a token before making the authed request, but guess who forgot to actually mark like 20-40 different methods as authed : D2
-
*Frustrated user noises* Whyyyy, Grafana, why don't you implement any actual query forgery checks?!
So long as a user has access to the Grafana frontend, they can happily forge the requests going off to the backend, and modify them to return *whatever* data they want from the datasource.
No matter that they're a read-only user. That only stops them from modifying the dashboard definitions on the frontend, but doesn't enforce any sort of immutability on the BE...
If anyone had any tips on how to further secure it, I'm curious...5 -
Do you believe in QA who only tests the application as a user i.e just blackbox testing of clicking here and there.?
The QAs in my company doesn't have a clue on how the shit works and most of them don't even understand a line of code.
I feel that it's really important to test the application from the web api level as well to test out all the complex business logics which may not be feasible from the UI.15 -
I think I am in love with Progressive Web Apps concept and user experience with mobile operating systems, as it is easy to install (as simple as a shortcut on home screen). Just want to know if there are any downsides of using it? Compared to full app install?
I would love to see some games which can be played offline as PWA6 -
Currently attempting to install Arch Linux for the first time in a VM... because I'm bored. As a Pop!_OS user, I am actually starting to miss my graphical installers.
-
I've been working on a Programming playlist for a while and seems people want more of those, so I'll share mine as well
The following is a mix of dubstep, house, vocal EDM and a whole bunch of Rocket League music
https://open.spotify.com/user/...
A little critique won't be hated on (probably) -
why do all erp solutions i know have a poor design?
one of you guys surely works for a company which sells erp solutions. as i am a user AND a programmer.
i just have to ask: do you have the feeling that your UI is bad?
and if - why is it like this?
i dont want to attack someone. just want to know the reason why all of the solutions i saw have bad UI or are just "user-unfriendly" (like you would say in german :D)1 -
When you end up running support queries and QA as a developer because the client's on site support team blame the provider instead of their half-assed user configuration job. #IHopeYouGetFiredAssholes
-
I tried ProtonMail after a user here got creeped out after watching snowden. And I like it. Sick of gmails intrusion to what I buy, where I go and yes the need of phone number. Why tho?
I think we as a developer community should educate the need of such encrypted non-intrusive services not necessarily proton to common people. Privacy is a right.
*doesnt apply to insta models though, lulz* -
Today is a sad day. I wanted to do some experimenting with the Google Cloud Vision API, but apparently EU users can use it only as Business user (which sadly I'm not). Why Google, why are you betraying me? 😭2
-
Why?! Why do companies need to build a useless application for their product every... single... time? It's not like I'm going to watch the state of my (future) pension every single day, I only want to update my personal information.
(I kinda get why, but still, you can get similar features out of a PWA as well, which is less annoying for the end user)2 -
This poster is shite quality but I've transcribed the gold found on it:
The Technical Support Specialist:
- SEND US AN URGENT EMAIL IN UPPERCASE. We'll flag it as a rush job. Really.
- Loves it when a user calls screaming "the internet is broken".
- Gonna snap the next time a user asks why they don't have permission to install a George Michael screensaver.
- Last vacation: catching the first rays of sun from the back booth in Tim Hortons. Sweeeeeet!
- Most dreaded words: "I don't know what happened, I only opened the attachment".
- Has memorized over 100 access codes, but can't remember what day it is.
- Is amazed a user can have five chatrooms and three celebrity sites opened at once - but reading an I.T. support e-mail sent with high importance - now that's a complicated request.
- When you call with a tech support problem and say you'll be back in 5 - I'll say "Great!" And try not to snicker.
- System crashed last Thursday. Haven't seen my wife and kids since.
2 -
Had to send my new, shit Nokia phone in for repair as the forced update fucked half the built-in apps. My dad tells me "use my old phone for now, it's terrible." He hands me an LG V20.
Spec relations:
Nokia 3.1 A vs LG V20
RAM: 264MB free w/ nothing running vs 1342MB free w/ nothing running
CPU: 4-core 1.7GHz vs 4-core 2.1GHz
Onboard storage: 16GB/5GB user-accessible vs 64GB/51.5GB user-accessible
Battery life: 7 hours under load to 4 hours under load
I don't think he's getting this back.
(He doesn't use it as "it's so slow" but like... with proper care, the only issue is that switching apps sometimes doesn't fully clean the LCD of the old app and it burns in really fast, but minor annoyances for a WAY better device?)7 -
I made a reminder application, with different sounds for different hours, but it's super primitive, as I'd never figured out how to use android intents that we'll, and the logic was barebones. I'd like to polish it up so it's a little more user friendly and intuitive.
-
Me: "How could I handle all these conditions? Would I be somehow able to implement them in the database so my code could just grab it there?"
Mentor: "No, that would be impossible"
Me: "Oh how about I just save them as a valid question in the db and the user will have to answer!"
Mentor: "No, you're supposed to automate that process for the user."
Guess I have to hard code it and can't rely on the good old humans.5 -
When did we decide managing Users through Cloud REST architecture was more secure than having them in an underlying DB?
Because I can't put my finger on exactly why... but I don't like it and I think it's probably less secure... and just spawned from the need to be able to make user management a subscription based service like fucking everything? When a simple MySQL or postgres and some bcrypt somewhere would be both more secure and infinitely cheaper?
I'm more used to consuming REST API's than writing them. Can any you REST peeps help me understand how a REST API could be made as secure as a SQL DB connection for user management?
What do you think the attack vectors are for a REST API User Management? Like... what's the SQL injection of REST API? Pack some extra JSON somewhere or something?
At least if I can have faith my shit's not gonna get hacked because I have to use a 3rd party REST service for User Management of Users to my own fucking app I can maybe sleep tonight.2 -
Fucking Ruby.
Installed my new job's codebase on my machine and it's fucked everything.
While trying to get the database working, someone's dropped my User table, so I can't log in as 'Josh' anymore.
Now I can't compile scss assets without a fucking gem error.
I'M IN A PYTHON ENVIRONMENT, FUCK OFF!
GRR.1 -
Three Layers of Security
As InfoWorld notes, all smartphones have three basic
elements of security. Your first major task as a mobile
user is to become aware of these layers and enable them
in your devices:
1. Device Protection: Allowing remote data "wiping" if your
device is ever lost or stolen.
2. Data Protection: Preventing corporate data from being
transferred to personal apps running on the same device
or personal network
3. App-Management Security: Protecting your in-app
information from becoming compromised.
6 -
Comment in our code, followed by 3 identical SQL queries with only the table name different (Admin, regular user, old regular user).
Then we duplicated the entire project as it being a contract first webservice prevented us from changing it's signature to accommodate the needs of a new application.
2 -
Want to get into mobile dev, as i am pc and android phone user, so getting in android dev would be logical choice. Was thinking of iOS market as well so is/was learning Flutter(Dart). Is it a good choice? Or just stick to android? Let me know your suggestions? Thx for everything ^^3
-
I have to build a database migration that generates user handles. The user handles are unique within an organization. The user can change them. The auto generated handles are either the first name + last name, or the business name depending on which user type it is. Unless it would be a duplicate. Duplicates auto increment if the handle is taken. The character limit for a user handle is the same length as first name plus last name so I have to check for possible overflow if I add digits. I also have to see if the generated name is in the DB already because a user could have custom entered the result of the auto generation.
This has to be programmed async. The DB driver is using a transaction but multiple calls have to be made to check if the generated handle exists for that organization. Also I have to check the migration script itself for possible duplicates. 3/4 of the users have a handle and with the scale there will definitely be duplicate names.
My idea is if there is a collision, use a UUID and let the users pick something nicer next time they log in. Business says “Reeeeeee!!!! The users shouldn’t see a UUID!!! You can do this!!!” Absurd uniqueness requirements. Absurd backfill procedure. Absurd business rules.2 -
This weeks a joke right 😂, the recent day 0 Microsoft bug that allows anyone to get hacked, and allow someone to do whatever the hell they want.(as you can pretend to be any program on the computer)
Or the super user hack on Linux recently patched... Day 0....
The fact 80% of devs implement oauth incorrectly... So their user accounts are hackable...
Need I go on?1 -
a "configurable" confirmation system, where page conditions (e.g. customerId=someId, etc.) are stored in the DB as a comma separated string to be run through a stack expression evaluator, so that customers can add a "confirmation" (aka just a modal dialog) with custom reminder text when a user does a certain thing on a certain page....2
-
How should I name NPM package which works as console log for errors, but throws user to stack overflow page with error massage included in the link?
Found a meme here at DevRant in which this idea was presented, haha.13 -
Any one running Symfony on a Docker container in production? I currently try to migrate our dev env to a docker compose setup (from a "monolith" vagrant vm). I'm atually not stuck at a Symfony specific thing, but on a, I guess Docker specific one(?), The issue is, I need to read and write with two users to one folder (in my case the /application/var/cache folder). Since I mount my whole code into the docker container (to use an IDE on the local files), I've got a volume (not mounted to the outside world) for that folder. (As far, as good). Now this folder is owned by root and root is also the user I get when I enter the container. When I then run a cli script, that writes to this folder, every thing works (as it's run by root) and the resulting entries in the cache dir are owned by root. Trouble starts when the php fpm process tries to write stuff in there too (as it's run by www-data).
If I add `USER www-data` (or create a new user foobar and add `USER foobar`) the container exits with status 0
So I guess the question is, is anyone running an Symfony app on Docker in Prod, if so how do you solve this? Or another question would be what is the best practice to do this? Sure on dev I could just `chmod 777` the whole folder or run the php-fpm process as root, but if that thing ever goes to prod, I wouldn't sleep very well... -
A lot of people are diving into web dev - true is the next big thing as native apps will soon become obsolete ...
But have you taught about web security.
They are few web security experts out there and sooner the global focus will be on user safety not just user experience.3 -
If there was such of a thing as a user community for Devs. (Like Facebook) What would you like to see in it?4
-
Hi guys! We are still searching for another dev to join our team for the hackathon hosted by Deutsche Bank in Berlin (late october). We're currently a team of 2: @ginjikoibito as iOS-/Backend-Dev and me as Designer.
So far the idea we want to apply with goes in this direction: Real-time evaluation of social structures through analyzing wealth & transactions provided by anonymized user-data of the API. It will also incorporate recognizable networks between users.
Sounds interesting? Please leave a comment, we're happy to share more with you :-)2 -
Why is it so difficult to tell the people to not use the same passwords everywhere? I thought of a service which searches all leaked databases and predicts a password based on that as a warning for the user... Having the program told you that your password the user is likely to enter would be XY, because the adobe OR MySpace OR Dropbox passwords for the email OR username entered was that password could be a bit more aggressive but useful to let the users at least think of secure passwords.1
-
Web dev (JS, node) question since there are so many here... I think...
I want to return a JSON array as a stream so the server passes whatever the DB returns but also normalize each record.
Also the data is across several collections. Is it possible to return this in a single request?
And how do I add in error handling? If there's an error in between the user already has part of the data?3 -
Created a separate user in linux debian. Logged in as new user. Console seems weird and if I press my key up I can't get previous commands, I'm just getting symbols. This is how it looks https://prnt.sc/r0krvw
With root user everything is fine.
How can I fix this?7 -
I'm trying to move a backup User folder from a dead Windows computer over to cloud storage. In checking the size of the folder before compressing it, it shows as 1.08GB, which I guessed would be reasonable. So I zipped it and it came out to be 48GB!! Compressed to 75%! So I went one folder deeper and checked the properties of all files there. That came out to be much larger than 1.08GB. Thinking Windows has some problem revealing the true size of a parent folder and its content, I did a Google search. Sure enough, it's a bug where incorrect folder size is reported. What the heck is going on at Microsoft that this blatant of a bug would ever have a chance of getting into the code? And why is this single user at 48 GB _compressed_? I'd understand if the user was a photographer, but he's just a gamer, and these aren't applications, just save files and profile settings!
https://social.technet.microsoft.com/...4 -
So PHP PDOs... nothing fucking works. It's that or the lovely MariaDB implementation, I know that the query is correct and I've tried a stored procedure as well. The query itself ran once to add one user and never again while anything I try now doesn't return any result. I'm going to install Percona and see if it's the implementation or me.8
-
Would be cool to have an AI user in devrants as a mascot or something. Would probably be possible to use other posts to learn.🐤🐤🐤5
-
As a developer who loves to do back-end work, I pause and do some self-reflection every time I'm asked to make some user interface decisions. It's not as easy for me.1
-
I was wondering if we can mute a rant's reply via the web interface. I am (also) designing a bot that will post to a specific thread to clearify it's a bot on that account at that time, so that way the affected user won't get any side effectes from bot's work.
(Such as mass ++'ing ;) )
(Idea: https://devrant.com/rants/2660331/... )6 -
Working on programming a user interface so a user can select a line in a graph. I have a rotated mouse area to match that of the line to be selected. This mouse area can detect when a mouse enters the area. This seems to be working well. But then I noticed it was lopsided. Entering the area from one direction was not showing entry as soon as from another direction. Then I realized that the black border of the mouse was not being used to trigger entry into the area. It is the white area of the mouse tip that triggers this. The black area is only to provide contrast so you can see the mouse.
So on a mouse, and in mouse point selection on Ubuntu, the black border of the mouse only servers to provide contrast to the controlling white area of the mouse.
🍿🍿🍿4 -
So I am struggling with a SQL Query for my Database lecture.
This is the Table Layout:
Users(id:integer, reputation:integer, display_name:string,
day:integer, month:integer, year:integer, location:string,
up_votes:integer, down_votes:integer, age:integer)
This is the task:
Show the set of users who have the highest reputation and the lowest down_votes
than any other user. HINT: there is no user that is better than all other users on each of the
criterion individually. Thus, you need a query that can eliminate users that are worse on both
criteria than some other user (in Economics your query will return what is known as the Pareto
Set).
I have looked up the Pareto Set but I am not really sure how to implement it into SQL.
So does any one of you know how to implement this or could anyone lead me into the right direction?
Help is very appreciated :)12 -
I love stickers but I also love my laptop lid clean. Back when I was a MacBook user, I did buy a case/cover in order to place the stickers and remove them whenever I want. Do you know anything similar for regular notebooks such as a Dell Inspiron?3
-
Downloaded Gitkraken in my ubuntu workspace... Like to work with GIT in a GUI interface...
Now trying how to run this GUI as a sudo user so that Gitkraken can edit files in my home directory :p1 -
Why is Arch User Repository considered as a strong point for Arch and Arch-based distros? is it more reliable than the way Ubuntu manages packages? is it ok to trust some guy that made a version of a program you need to run? why most of the programs that have a linux version are only available for Debian/Ubuntu, Fedora (made by their own developers)?13
-
Wtf Fedora? I install the develop version of TheFuck to work on a plugin, all of a sudden dnf only runs with sudo but gives a module not found when run as normal user? Whyy?
Python import system is a bloody mess, 1 file somewhere with the wrong name and it imports the wrong thing which doesn't contain the thing and crashes.
Can't we just please have STATIC BINARIES? Please? Fml1 -
!rant
Starting my first small c++ project with website interaction on an Ubuntu server as practice for next semester. Any good recommendations to get user input from a webpage using only c++ (there can be html within the c++ program of course) and libraries?
I have once worked with an httpd-deamon and got user info from the url but I want a user to be able to fill in 2 textboxes and submit them using a button.
Plain text is good enough and it will only be used by 2 people once every week or so.8 -
App displays a message if user has a lolipop device and system webview version is either old or not installed. As a small hack if version is less than string "70" , I display the message.
I am totally not proud of this.1 -
Git: "Your local changes to the following files would be overwritten by checkout. [...]
Please commit your changes or stash them before you switch branches.
Aborting"
Fucking nitpicking, that's not "Aborting", that's meant to be:
"Dear user, would you like to overwrite your current changes, even more so as you are currently in a so-called detached head state anyway, as you obviously just checked out an old tag to try a temporary rebuild of an old project state."
Yes, the build targets are checked in, as this can be very useful in some scenarios.
It's just! some! CSS! from the SCSS!
Stop "Aborting"!4 -
relativity of paths:
the fact that "paths relative to where the user is launching the program from" EVEN FUCKIN EXIST is such a fuckin idiotic thing.
it means that there's ONLY SINGLE ONE SPECIFIC (unknown to the user) PLACE FROM WHICH TRYING TO RUN A PROGRAM WON'T FAIL.
which is the most moronic thing ever.
and, as usual, linux bullshit turd smell. nobody except linux geniuses could have ever come up with such galactic size bullshit.23 -
Branch Staff Member: EFTPOS isn't working
Me: Are you logged in as the right user?
Staff: No
*staff switches user*
Staff: Still not working
*remote in and see software had crashed*
*check computer uptime* ... 38 days
Me: Give it a restart
Rant: why do people expect their issues to be resolved magically by IT when rebooting would (usually) fix it? -
Need ya help
i can't figure it out. i am working on a q&a webpage and i want to make an upvote/downvote system.
How or what should i use to save when a user upvotes a question on a database without needing to refresh the page.
I have no ideea ><
PS: as backend i use php and mysql for the database3 -
stupid dumb wordpress, who POSTS a user registration, returns data to the SAME site with a dumb "successful" message alert, and THEN redirects to whatever page you want?!?! looks like shit, feels like shit in terms of UX
JUST REDIRECT ME TO THE PAGE I WANT FROM THE SERVER THAT'S THE WHOLE POINT OF PHP
I swear its as slow as balls too -
Today " It's not a bug it's a feature" became true. Had an escalation where user reported as a bug. Team came up with an answer they couldn't resist to accept it as a feature. 😎1
-
VSCode offers to install the official MSSQL plugin as "recommended plugins for MySQL" without informing the user that they're getting fucked over. I tolerate very few deliberate minor inconveniences designed to influence my product choice, so what are my options for a reasonably scriptable, yet stable open source IDE with a good set of plugins?6
-
Who thinks a study designed on +1's on a platform which promotes them as a sign of popularity and approval affecting user behavior is in order ?
-
Disclaimer: I am relatively new to this. Feel free to use a tone you'd otherwise use to explain to a 10yr old.
I am trying to run a rails app on docker. I came across permission errors while I trying to edit some of the files. After a couple of searches, I found out it is because docker, by default, creates files as root. I have been reading for a while now and I can't, for the life of me seem to understand how to implement USER instruction as recommended in the docker documentation.
Here's a link to my dockerfile https://github.com/Melvin1Atieno/....2 -
How does your organisation and team balance PR comments demanding changes and dev time?
Here, while fixing PR comments we sometimes end up wasting as much time as we took in actually developing the feature... As a result, almost every major user story overshoots the estimation and almost every sprint gets delayed.
Yes, to each his own; but talking in general, why do you think this time wasting happens?
Do you think that happens because some of us are not as experienced as the others, the existing code not being up to the mark giving a bad example, or just a skewed review process?2 -
Soon even more reason for that friendly high-rep SO user to close your question as a dupe :-)
https://meta.stackoverflow.com/ques... -
How the fuck you people do load testing ?
Don't tell me JMeter, it's useless as it doesn't represent an actual browser session...
I'm not taliong "test APIs" but the whole user experiance....
Can't find a single tool which does it at 1000+ sessions....6 -
NEED HELP: C#
Please I am a Beginner in C# and I need little help with Methods.
In the Picture attached, I'd love to use User input as Parameters in the method. Example: example getting user imput with Console.ReadLine(); and storing it to num1 or num2 as parameter in the Method.
Is this possible in C#, if so, how can I make it work? Thanks
5 -
TrumpScript is one funny programming language that was formulated by four Rice University undergraduates. TrumpScript allows developers to operate with numbers that are bigger than one million. If programmers user numbers less than a million then it will generate a quote from Donald Trump as an error message: ”I’m really rich, Part of the beauty of me is I’m very rich.”1
-
I'm creating a webapp or I could say a common Markdown editor where user can write markdown and download it's created markdown in html form but I want also add a feature where non techie user can host their written markdown on github pages as a static html page through my app interface, is here any api that github provide us to do this or any other way to do this, please help?6
-
Learning C# coming from Java...
What's the fuss about properties? As i see it, theyre only usefull for binding, as else they just work as syntetic sugar instead of getter/setter methods.
But properties are also limited to give response back, like a successfull set, unless you start throwing exceptions..
And if a set property has if(age>5){this.age=age} then if i pass the property a 4, you will never know as a user that it failed (again, unless you start throwing exceptions)
Im kinda feeling like i want to use get/set methods until i need to bind, then of course use property ?? Am i all off here?25 -
random rant:
as much as I like manjaro, and antergos is very nice looking, and sometimes arch bang is just easy and good:
they are not arch. yes they are arch-based. but you are not an arch user. you are a manjaro/antergos user. please do not call yourself arch users. and especially do not ask questions in the arch forums. all of these arch-based distros have their own forums for a reason.
that is all...3 -
which is the best cloud provider for a complete beginner (user/dev) in terms of community support, employer preference and user-friendliness?
i know that understanding the tech and concepts behind it matters more than getting familiarized with a specific platform, but i'm looking to build a more diverse profile and have noticed many positions asking for AWS/Azure experience.
since i'll be starting from scratch, any provider with easy-to-follow documentation, online help and certifications that don't leave you broke (would have to pay myself, earn very less as a student from a third-world country, parents/current employer can't support) would work.8 -
So if only one query on a firestore collection returns 1000 documents, this is considred as 1000 read ?
Or only one ?
Docs say 1000 !
And since the cache os 30min long, if the user came to the same and open it 30sec later, ill be charged for 1000 reads ?
Well well well !2 -
!rant
I've been wondering, is anyone else having problems with Windows 10 restrictions.
I have pretty much the same authorization as a regular user just as I do as an administrator.
I've had to uninstall countless programs and games due to authorization issues.
Anyone? -
hey, so i have recently started learning about node js and express based backend development.
can you suggest some good github repositories that showcase real life backend systems which i can use as inspiration to learn about the tech?
like for eg, i want to create a general case solution for authentication and profile management : a piece of db+api end points + models to :
- authenticate user : login/signup , session expire, o auth 2 based login/signup, multi account login, role based access, forgot password , reset password, otp login , etc
- authorise user : jwt token authentication, ip whitelisting, ssl pinning , cors, certificate based authentication , etc (
- manage user : update user profile, delete user, map services , subscriptions and transactions to user , dynamic meta properties ( which can be added/removed for a single user and not exactly part of main user profile) , etc
followed by deployment and the assoc concepts involved : deployment, clusters, load balancers, sharding ,... etc
----
these are all the buzzwords that i have heard that goes into consideration when designing a secure authentication system for a particular large scale website like linkedin or youtube. am not even sure how many of these concepts would require actual codelines and how many would require something else.
so wanted inspiration from open source content to learn about it in depth, replicate and create new better stuff if possible .
apart from that, other backend architectures like video/images storage system, or just some server for movie, social media, blog website etc would also help.2 -
I think I am too stupid for OAuth2. How do I handle this scenario: User deletes his account at the OAuth Provider. Lets say my own, Google, Microsoft, whaever. How do I handle data associated with the user then? I have some data which can be deleted then as it is not needed anymore.
Or is this not possible by design? If yes, this a perfect example on how to waste resources...8 -
How the hell do you get jobs on sites like freelancer.com? As a newly registered user, things seems so confusing and almost impossible to own a bid :/
-
!rant
Looking for help starting with DevOps.
Does anyone know of a site or forum where you can talk about general coding/scripting patterns rather than just asking specific questions?
Bear with me, this may be a bit longer than most posts here.
I'm a self-taught admin/tech working with one colleague (who's also mostly self taught) at a high school, managing both clients and servers.
We've been doing most things manually bit I'm looking into converting as much work as possible into more of a DevOps setup, with Powershell-scripts for multi step tasks.
I want to do this for a number of reasons. Having a script doing a number of steps would cut down on time spent on individual tasks and minimize the risk that a step is missed or, perhaps even worse, mistyped. Also it's important that I actually learn what I'm doing, why something works and why something fails.
As and example, I have a powershell-script which moves a student from one year to another (basically they have user names with a two-digit prefix based on the year they started and a suffix with two letters from their first names and four from their last names) if they need to repeat a grade.
It basically renames the account in the AD with the correct year-prefix, changes the samAccountName, renames Home and Profile-directories on disk and changes paths on the profile-tab in AD, moves the user into a new OU and security group etc.
It works as intended if the user account to be renamed exists and there's no name conflict with the new name. But I'd like for the script to validate that there's no problem with user names, source and target security groups and OUs etc. and eventually split the script up into smaller clearly defined functions for better readability.
However, I don't want someone to just write the script for me, I'd prefer to be able to discuss script flow and come to my own conclusions and solutions.1 -
!rant Since there was quite some bashing on CMS as of wk60: I want to create a new website for a community I am in but am not really experienced with web development. My plan was to give Joomla a try but after all these rants I am not sure anymore. What made it interesting to me was user management as we have different groups that should manage their own areas on the site. Is it worth a try/what tech should I use?3
-
So I found one of the most random bugs I've ever come across.
So we have this file management system as part of the website, showing breadcrumbs to the current directory, with 'home' as the root of the path. This path is passed to the back end whenever the user navigates to a new directory etc.. The back end code then does a replace on 'home' with the actual directory path.
Ended up with a directory for a person called Homer. Guess what happened.. -
Any (good) programming courses/presenters ?
Udemy for example is stacked with courses from the one's i bought Wich is more than a few 🙂 only one is really zgood.
What is good?
As All courses i bought having all the information needed, lots of them are not interesting ,not enough hands on project etc.
Regarding user review , as my ampiric experience it's not saying much.
So asking you guys for the courses impacted you the most. Any subject will do 👍2
Top Tags
Weekly Rant
View