Details
-
Skillsjava, python, aws
Joined devRant on 10/5/2019
Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
Have you ever had the moment when you were left speechless because a software system was so fucked up and you just sat there and didn't know how to grasp it? I've seen some pretty bad code, products and services but yesterday I got to the next level.
A little background: I live in Europe and we have GDPR so we are required by law to protect our customer data. We need quite a bit to fulfill our services and it is stored in our ERP system which is developed by another company.
My job is to develop services that interact with that system and they provided me with a REST service to achieve that. Since I know how sensitive that data is, I took extra good care of how I processed the data, stored secrets and so on.
Yesterday, when I was developing a new feature, my first WTF moment happened: I was able to see the passwords of every user - in CLEAR TEXT!!
I sat there and was just shocked: We trust you with our most valuable data and you can't even hash our fuckn passwords?
But that was not the end: After I grabbed a coffee and digested what I just saw, I continued to think: OK, I'm logged in with my user and I have pretty massive rights to the system. Since I now knew all the passwords of my colleagues, I could just try it with a different account and see if that works out too.
I found a nice user "test" (guess the password), logged on to the service and tried the same query again. With the same result. You can guess how mad I was - I immediately changed my password to a pretty hard.
And it didn't even end there because obviously user "test" also had full write access to the system and was probably very happy when I made him admin before deleting him on his own credentials.
It never happened to me - I just sat there and didn't know if I should laugh or cry, I even had a small existential crisis because why the fuck do I put any effort in it when the people who are supposed to put a lot of effort in it don't give a shit?
It took them half a day to fix the security issues but now I have 0 trust in the company and the people working for it.
So why - if it only takes you half a day to do the job you are supposed (and requires by law) to do - would you just not do it? Because I was already mildly annoyed of your 2+ months delay at the initial setup (and had to break my own promises to my boss)?
By sharing this story, I want to encourage everyone to have a little thought on the consequences that bad software can have on your company, your customers and your fellow devs who have to use your services.
I'm not a security guy but I guess every developer should have a basic understanding of security, especially in a GDPR area.2 -
But, it's a simple reason. Why would you leave the company for such a simple reason?
Because, that's very telling of the Company's attitude, when you know it's a simple reason and still refuse to fix it. -
Feeling really lonely as the only one who cares about ethical tech. Everyone around me just wants to build money making products and it doesn't matter if it adds value, only if it makes money. I wanna do good things with tech but it's getting harder. And my company just put a new CEO in charge who has a business plan but no vision. No added value. Just taking money from customers, making them addicted to the product. That's all that matters.9
-
My last successful project was a small project I did together with my gf in javascript. She needed to make some algorithms for school for transfering
freight containers and picking them up. I made some visuals and buttons for her to press. And she added a file with algorithms based on the helper functions I created. such as: GetFirstEmptyPosition() or PlaceContainerAt(x, y)
She learned a bit of programming. And I learned a bit of javascript.5 -
woke up in a cold sweat and all i can remember from my nightmare is "there's a party in ring -2 and no one's invited"7
-
Just found out you can take Screenshots of a webpage right from the firefox console... neat! You can even select specific elements to screenshot.
Just throw :screenshot into the console - Ff v62 (--selector [css-selector], --fullpage, and some other params you can look up)
Have a good Monday :)3 -
I literally start coughing/sneezing as soon as I enter the Office. Had the same issue with the previous Office as well.
With offices paying no attention to hygiene, another reason to prefer remote roles? -
After two weeks of struggling with Docker, I can confidently say, this is the worst shit I've ever worked with.
$ php bin/console make:migration
ERROR: php_network_getaddresses: getaddrinfo failed: Name or service not known
Well let's try again...
$ php bin/console make:migration
ERROR: Connection refused
Different error messages for the same commands?! FUCK YOU!!!8 -
Front end developer is still getting a ticket even though the security flaw lies in the back-end.
Today, every click of the UI has an overlay of circular progress indicator indicates that there will be a synchronous actions in an asynchronous requests.
1 click = 1 loading state -
My first freelance project - happened to be with the worst client. They didnt wanna pay more than $500 and also had no clue what they want, so each time i present something they request additional features or changing the ones implemented. In the end i kept the half downpayment for my time and bailed without deploying or anything. I introduced them to another freelancer to take the project and never went near them again.
To clarify, it was not my first project/ just my first time dealing with clients for projects instead of doing them at work. Ever since then i have a strict no dealing with clients directly policy.2 -
Knowing how to write doesn't make you a writer. Knowing how to program doesn't make you a programmer.9
-
Finally getting confident in the worst part of fullstack: frontend
...and getting better at doing devops1 -
I just want to get a job to learn a bunch, make something cool (ideally, but prob won't be all that great in the beginning), to make a decent salary, to get my own little apartment, and support myself financially on my own. Anything more than that is a huge bonus!
-
Nobody understands me
Does it matter
Not at all
I have my laptop
And it understands what I am saying
That's enough for me ;)4 -
Been struggling with compiling a PyQT-program the whole weekend. It worked with PyInstaller on Friday, except that the .ui-file was not included but referenced to the path on my computer. Have tried fbs instead which caused this error that now also occurs when I try to start the program created with PyInstaller.1
-
"Colleague" (he's there for day-time spending, he doesn't actually have a job) of mine keeps telling me I should F off with pushing for Docker, Git and CakePHP because they add an additional amount of learning for interns that they might not need to learn for school.
He wants us to keep working with the following:
- Google Drive for codebase sharing
- FileZilla (or atleast an FTP) for deployment
- "from scatch" PHP code where business logic and front-end code are all slapped into one big file and where functions are also slapped into one big file. also, opening and closing the database connection for each query made
Guy basically wants us to deliver a crappy products that we might not be able to maintain and are prone to a wide-variety of issues.
Yes, let's limit our company to *only* the things that interns need to learn for school, what could *possibly* go wrong :^)11 -
Adding a feature to webapp...
Webapp relies on database in production server...
*adds feature to production webapp directly*
Every page: ERROR 500
Manager: what did you do???!!!! You MESSED UP the production, FIX IT NOW
*Use ctrl-z because manager doesn't like Version Control*5 -
The Steam Community forums for the Planet Zoo beta have really reinforced my decision to stay far away from game development.
A third of the posts are people who clearly have no idea what a beta is - "don't buy, too buggy". Sorry, were you expecting a finished game? You wasted your money, then.
Another third of the posts are people making decisions for the developers. A very common discussion is "Should they delay launch?" which makes my blood boil a bit. First of all, you have no fucking clue what kind of manpower this development team has. You don't manage them, and neither do I. So, neither you nor I should be making assumptions about how fast they can fix the issues, and definitely shouldn't make decisions about if the game should delay launch.
Second of all, neither you nor I know how the game is built. These fixes could mean a line of code, or they could mean a re-write of multiple core systems. We don't know, and I'm guessing you've probably never even written a line of code in your life so you REALLY shouldn't be telling these guys how to do their job.
The last third is benign discussion - people reporting bugs (even though there's an issue tracker, but that thing is fucking jam packed with 250 pages of reported issues), asking how to do xyz, posting feature requests, etc.
But if roughly 60% of the community is behaving poorly and actively working against development by pissing off the devs and drowning out constructive discussion, then yeah; I won't be going near game dev any time soon. Sure, developing business software means dealing with REALLY dumb people but at the very least they are in a business environment and not in a toxic forum of bullshit.
Oh, and as a closing remark, I love this game!13 -
My computer has been acting kinda creepy lately. When I hibernate it, it turns itself ON early in the morning.3
-
This is my first "Fuck you Windows" post. I just got a warning from GitHub that blocks me from using it;
"You must update your password to continue using GitHub.com"
Who the fuck are you? I am risking to be hacked. Why do you care, you just warn me and move on. How dare you block me and force me to use better password.19 -
Update on the previous rant(regarding office laptop stolen):
Company says there might be some deductions in salary. Trying to negotiate with them .
Would like to hear What's your company policy on stolen laptop?5