Do all the things like ++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatarSign Up
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple APILearn More
Search - "gift"
Doing some Christmas shopping.
Creating some throwaway accounts in various e-shops
Some e-shops send me my password via email upon registration.
I've spent the better half of a day emailing those e-shops to revise their IT security policies.
Haven't bought a single gift yet.
Time well spent!6
In this episode of "office drama", we have the head secretary asking me if I want to contribute to the gift for the baby of some guy I don't know well. (I'm new to the office btw)
When I refuse, saying that I don't know him well enough to want to contribute, she says "that's okay, but we won't be collecting for a gift for you once you have a baby. We want to be a '''team''' ".
I just said "that's fair", but maaaaaaaan! Since when is it okay to demand that someone participates in a gift, while ignoring their social or financial circumstances? 😤
Update: went to her office to talk about this "being a part of the team" and clear things up. She said, and I quote "I don't have time for this". And by that, swords have been unsheathed. I guess there is no pleasing some people.16
Well, well, well, my new year's gift:
Someone is jamming thousands of requests per second, and NO firewall. JWT tokens that expires in 3 HOURS.
Now MORE THAN 40K stolen.
But, where did it come from? https://devrant.com/rants/4961285/...16
[CMS of Doom™]
The gift that keeps on giving...
When you think you've seen it all after 7 months in legacy hell, you get another gift:
Let's say you use PHP, but your IQ is in the zero-ish range, then it is obvious to:
- use define() for constants in all your config.*.php files
- then include said config.*.php files multiple times
- and because define() doesn't overwrite the same constant, because it's - you know - a constant, you instead of including just do a file_get_contents() to read the PHP file as string and then parse the values by Regex.
The dev who wrote this was truly one of the devs ever.12
Stakeholder: In user profiles, I want users to be able to renew gift memberships for their giftee.
SH: For example, if I buy a gift membership for you and it expires or is about to expire, then I want to be able to renew it for you.
Me: Typically, gifts aren’t the gifter’s responsibility to manage. There’s no reason for you to be able to manage my membership from your account, even if just to renew. You’re opening up Pandora’s box here. If you let users renew for giftees, you’ll eventually have a user ask if they can cancel the giftee’s membership because they got into a fight and want to stick it to the giftee.
SH: But our users aren’t using the gift membership sales flow correctly. That results in all sorts of data issues for our reporting services and we spend so much time fixing it by hand.
Me: Your sales flow is confusing. The website asks users to verify membership for a giftee in case the giftee has or had a membership. How it the gifter supposed to know that? You’re trying to make things easier for you, but you’re expecting the user to know that and comply. That’s unrealistic.
SH: But there must be a something you can do.
!rant Stood outside talking to my next door neighbor (who I hadn’t met yet) for over an hour yesterday.
In the middle of the day.
Not in shade.
When I lack the ability to tan.
It’s been so long since I was stupid enough to be outside for that long that I forgot just how much sunburns suck.
I really hate the childish corporate culture at some tech companies. Today I received my Christmas "gift" from my employer. It was a branded chocolate bar and a sticker pack. The stickers were designed by our UX designers, and the stickers look like they are made for little toddlers at kindergarten. The stickers said things like "Make Friends!" and "To The Moon!". Jesus Christ, are we little kids? The average age of an employee at my company is around 30 years old, and those are the stickers you give us? Stickers are childish anyways, but it seems like 50% of my autistic colleagues seem to like putting those ugly things on their laptops to lick the boots of upper management.
The office itself literally looks like a kindergarten. There's LEGO artwork on the walls and the "Make Friends!" and "To The Moon!" nonsense and similar motivational bullshit is plastered on all the walls. Seriously, who ever thought it's a good idea to tell 30 year old adults to "make friends!". I already have my friends, I don't need to be friends with anyone at work, and I definitely don't need to be told to do so!
Even funnier than that is the fact that the whole "To The Moon!" bullshit is a phrase introduced by upper management to symbolize their effort and wish to make our company bigger and stronger by having a bigger market share. Basically it's the rich peeps from upper management telling us to work harder and make them more successful. Today I had a meeting in which they told me they wouldn't increase my salary because they have a tight budget this year because of the economic problems we're currently facing. But that doesn't stop them from childishly motivating us with bullshit like "To The Moon!" so they can become richer themselves, while the little people at the bottom of the pyramid need to work harder without extra pay.
The most annoying part of this is that many employees lick the boots of upper management and go along with all this bullshit. God I hate cringy childish corporate culture so much.13
Follow up to: https://devrant.com/rants/5047721/....
1- The attacker just copy pasted its JWT session token and jammed requests on the buy gift cards route
2- The endpoint returns the gift card to continue the payment process, but the gift card is already valid
3- Clients wants only to force passwords to have strong combinations
4- Talk about a FIREWALL? Only next month
5- Reduce the token expiration from 3 HOURS to 10 minutes? Implement strong passwords first
6- And then start using refresh tokens
BONUS: Clearly someone from inside that worked for them, the API and database password are the same for years. And the route isn't used directly by the application, although it exists and has rules that the attacker kows. And multiple accounts from legit users are being used, so the person clearly has access to some internal shit7
Devils Advocate moment: A proper PM can assist greatly on projects.
Don't get me wrong, you have all for the most part been faced with the incompetence of glorified quasi manager positions. But a proper PM can be a gift really.
I absolutely despise generalizations, I do get that percentages matter, but shitting on professions when the realm of possibilities have yet to be touched to the full extend of capabilities seems like child's play really.
remember, y'all think you are all God's gift to the world through coding experience, but a solid network engineer might have as much gripes about developers as y'all do about managers, project managers, sys admins etc, and the same shit can be applied vice versa.
Software engineering is magic, in the sense of the tv show "The Magicians" where you can make an incantation and suddenly your penis/tiddys explode: inexact science.
Be a tad bit open minded, learn enough about their shit to tell them that they are fucktards, and run from the ones that know but don't fix shit.
I haven't been here for a long while but I wanted to peek in because of the dev ducks, cause I thought they would be a great gift for someone and now I found out they're sold out - my disappointment is immeasurable and my day is ruined.
But now I decided I'm just gonna buy. a rubber duck and DIY it.1
I can’t remember if I shared this cringe with you all or if I was too embarrassed by it, but…
In the spirit of giving, I gift you all this cringey parody song I recorded 3 years ago. “I Program in C”. Lyrics written by Chris Frederick on amiright.com, song parodied is I Go to Extremes by Billy Joel.
Happy holidays, friends.7
-- Best --
> Submitted my notice of termination for my current job
> Found a new job starting next year
> Can switch from Windows to Linux/MacOS in new job
> Got more time to work on personal projects due to the pandemic
-- Worst --
> Huge amount of software restrictions (current job) almost got several projects at work canceled. Maybe its important to say that the core business of my current workplace is auditing so there are a lot of law regulations which then apply in the softwaredevelopment process.
> New managers that do not have the slightest clue of what they're doing
> Online Teambuilding events
> Absurd amount of segmentation of tools and also different coding guidelines that are used at work. E.g. one team uses jira, another trello, another github issue tracker and so on.
The universe has taken a cactus.
It proceeded to gift the cactus with a toxin that greatly enhances the stimulus of pain.
After the universe watched it's miraculous creation it decided to shove it up so far my arse that my gag reflex turned on and I puked a lot of cactus.
Didn't sleep well, weekend hardware migration finish, today an old server got moved.
Some part, most likely the redundant PSU, had a short circuit - decided to take the switches out... Which are the only non redundant hardware...
There was only one critical system in the whole rack, that was one redundant firewall.
Guess what happened..... Naaaa?
For whatever reason, the second firewall didn't kick in, so large part of internal network unreachable as VPN was on the firewall.
That's not cactus level yet.
Spontaneously a large part of the work at home crew decided to call, cause getting an email wasn't enough.
So while all the phones were ringing and we had the joyful fun to carefully take apart a whole rack to check for possible faulty wiring / electric burns / hardware damage and getting firewall up and running again...
Some dev decided to run a deployment (doable as one of the few working at the company at the moment -.-).
I work from home, but we had a conference phone call running the whole time so I could "deescalate" and keep others up-to-date. So me on headphone with conference call, regular phone for calls, while typing mails / sms for de-escalation.
Now we're reaching cactus level, cause being tortured by being annoyed out of hell by all telephone ringing, the beeping of UPS (uninterruptible power supplies), the screaming of admins from the server room and the roaring of air coolers…
Suddenly said dev must have stood in the midst of the chaos… and asked for help cause "the deployment broke, project XY is offline"...
I think it was the first time since years that I screamed at the top of my lungs.
Bad idea (health issues)… but oh boy was it a pleasure to hear my own voice echo through the conference speaker and creating an echoic sound effect.
It was definitely worth coughing out my loungs for the next hour and I think it was the best emotional outburst ever.
I feel a bit sorry for the dev, but only a tiny bit.
After the whole rack thing, the broken deployment fixing and the "my ears are bleeding and I think I will never be able to talk again" action...
We had to roll out several emergency deployments to fix CVEs (eg libexpat).
This day was a marvelous shit show.
I will now cry myself to sleep with some codein.1
Corporate hackathons are bullshit. I've swore them off. There is no way I'm going to be put in additional hours for so little gain ever again.
Companies have boatloads of money, and they think they can get away giving people $100 Amazon gift cards. SERIOUSLY? You pay for execs in millions of dollars for flapping their mouths.
Make it so that you pay out at least 20k+ to winners and give people something for participating - a nice 1k bonus.
You guys have enough money.5
My wife gave me an iPhone for Christmas. The last one I had was the 4. As soon as it connected to my computer and I answered the first call from it. I don't know, I fell in love. Mind you, I don't want the Apple Watch. I have an amazfit neo and I like it that way.6
Sometimes there is no helping people !
I notice a neighbour not far from me stealing another neighbours stuff, or lets say, borrowing their stuff when they shouldn't be.
Whilst said neighbour was out, I left them a gift, of so they now have own stuff, so they don't have to steal their neighbours instead.
And what do they do, they ignore it and don't use it !5
Just got a bottle of baileys as a gift for acing my "end of high school" exams. I never had my own bottle before. How do you store these things? It has milk in it so I might want to put it in the fridge, but only if otherwise it's good for less than a week, because everyone else in the family also loves it so in the fridge it'll be empty within a week.7
Someone should give me a Christmas gift by giving me a remote project to work on that will get me paid.
I am a kotlin and python DEVELOPER. "I could work on Android apps and web backend"
My first experience…
My father bought a Commodore 64 but couldn’t figure out how to use it. A few days later I was playing games and making art. He yelled at me saying none of it was in the manual. He was mad I understood how to use it. It all came naturally to me, and I early
on realized I had a gift.
Sometimes it does seem like there's no way out, like it's hopeless. That's why it's important to remember: there's always someone there for us . . . my best friend and personal savior, Jesus Christ . . . I thought I was the inventor, but the best invention of all is the free gift of eternal life. Jesus is always knocking at the door. All we have to do is open it and let him into our hearts.10