HNHacker News
TopNewBestAskShowJobs

SomeOtherGuy

93 karma · joined December 2, 2011

submissionscomments
SomeOtherGuy··on Merry Christmas from the FreeBSD Security Team
Nonsense. People stick with telnet because of ignorance. That is why you remove telnetd, and force them to update. There is no difficulty in switching, and thus no valid reason not to switch.
SomeOtherGuy··on Merry Christmas from the FreeBSD Security Team
I'm pretty sure openbsd is fine, since they removed telnetd from the OS years ago. The big question is, why do other systems still have a telnetd?
SomeOtherGuy··on What to Look For in PHP 5.4
He already answered your question in the post you are replying to:

>because you can easily use it without buying into the whole MVC and routing paradigm

As much as I think the zend framework is terrible, you can pick and choose whatever bits of it you like and ignore the rest. There's no working around assumptions or anything, it is just a normal way of using the framework.

SomeOtherGuy··on What to Look For in PHP 5.4
Yes it is. Go read the list archives.
SomeOtherGuy··on What to Look For in PHP 5.4
>The bits of PHP that are "much worse" are mostly either legacy cruft that nobody in their right mind uses anymore, or bits are rarely touched in day to day programming but are safely wrapped in frameworks, ORM's, libraries etcetera.

Huh? The article in question demonstrates otherwise, note they just now fixed one of the problems with anon functions, a relatively new feature. PHP continues along the path of adding "features" randomly and without even understanding the purpose behind the feature, and so you get half-features that kinda work and don't really solve any problem in the context of PHP, but were just added so they could check off "some feature we don't understand" on the feature list.

>Other than that, I rarely see any relevant criticism, let alone constructive criticism.

In the context of PHP, I think "you should use a better language" is as constructive as you can really get. There's nothing wrong with warning new web developers that PHP is worse than every other language that lives at the same sort of level (perl, python, ruby, pike, etc).

SomeOtherGuy··on What to Look For in PHP 5.4
>When that "well deserved criticism" comes from the same people who feel compelled to post in every PHP thread, obsessively, over and over again ... it's hate.

No, you choose to label someone else's opinion as "hate" because it lets you dismiss it and throw out baseless insults at those people with less risk of getting taken to task for it. You told other people (theoretical people at that) what they think, and then told them there is something wrong with them and they lead sheltered lives. How incredibly arrogant.

SomeOtherGuy··on What to Look For in PHP 5.4
What do you mean lately? PHP has gotten tons of well deserved criticism since it was created. It isn't "hate" to point out that a popular language is much worse than many other comparable languages.
SomeOtherGuy··on ISO C is increasingly moronic
>Doesn't seem like the author really thought some of this through

Yeah, he says the same thing at the bottom:

>Poul-Henning

I guess it would be nice if he warned you up front, but at least he does include the warning.

SomeOtherGuy··on In case SOPA passes: IP addresses of popular websites
You are very confused. Asking google for a list of IPs does not provide you with their page rank. IPs are not domains, nor are they websites.
SomeOtherGuy··on In case SOPA passes: IP addresses of popular websites
No, my point is that it is already completely trivial, and getting a list from google wouldn't even be worth doing if they did provide it, as you can easily and quickly generate a more extensive list with a single command.
SomeOtherGuy··on In case SOPA passes: IP addresses of popular websites
>If google released a list of all crawled websites and their IP addresses, if I was inclined I could then take those IP's and scan them for known vulnerabilities

You can already do that. You want a list of IPs running websites? So scan port 80? Your port 80 scan will be finding hosts and adding them to the list faster than the vuln scanning can grab them off the list.

SomeOtherGuy··on Insidious Bug or Comedy of Errors?
>Even when using ACID compliant databases

I am genuinely sad that such a statement would ever be uttered. "Even when"? Why would you choose to use a database that isn't reliable?

>Consistency check should be replicated in your application layer, atleast for mission critical data.

Maybe if there were some way to do that, but there isn't. It doesn't get replicated, it gets re-implemented, which is quite different. And it results in application code in app X that says data is bad while the DB says it is ok, and then application Y also says it is ok and inserts it fine, and then app X pukes getting it back out later, etc. Leave the DB in charge of the rules and when it gives you an error, you can go ahead and relay that error to the user (in a nicer format one would assume).

SomeOtherGuy··on Insidious Bug or Comedy of Errors?
>What you're talking about is a "Single Source of Truth"

What is with all the random nonsense comments here lately? I am not suggesting a single source of truth, the person I replied to was. I simply pointed out that if you are trying to have such a source, the database is where to put it, not a shared library that all the codebases maybe use sometimes.

SomeOtherGuy··on Facebook releases HHVM, 60 percent faster than its current PHP interpreter
>Still a bit confused

Clearly that is not a situation I can remedy for you. I suggested you read the thread, as that would resolve the confusion for anyone with basic reading comprehension skills. If that is not sufficient for you, then you'll need to ask an adult to explain the words you don't understand.

SomeOtherGuy··on Insidious Bug or Comedy of Errors?
No, I am suggesting that we already have a solution for "I need a single authoritative source of rules about this data". And it is called a database. Treating your database like it is just dumb storage is what creates these problems in the first place.
SomeOtherGuy··on Insidious Bug or Comedy of Errors?
>where you can enforce the rules of your data in a single place

That's called a database. That entire post could be summarized as "look, some dumbass didn't put a foreign key constraint on the currency column".

SomeOtherGuy··on Facebook releases HHVM, 60 percent faster than its current PHP interpreter
Again, read the entire thread. I am not confusing you with anyone else, and I understand the concept of quotes. You are failing to grasp the context of posts, and assuming everything anyone puts in quotes must be a statement you made. There are other people who post, why on earth would you think "your post is entirely irrelevant" is something I claim you said? I very clearly pointed out that two people replied to you saying that your post is irrelevant.
SomeOtherGuy··on Facebook releases HHVM, 60 percent faster than its current PHP interpreter
You. You may want to consider that if there's two replies to your post, and both are "your post is entirely irrelevant", then perhaps your post genuinely is entirely irrelevant. Protip: read the whole thread from the top.
SomeOtherGuy··on Facebook releases HHVM, 60 percent faster than its current PHP interpreter
You could go on? You are at 1/7 so far, perhaps you should quit while you're ahead. How many decades ago were you developing in java professionally? You don't manually build your code, you don't restart your development web server, are you doing your java development in notepad or what? I've been the sysadmin for big java projects, and a developer on them. I've never had any problems with DB access or "classpath/jar file fun" or deployment in either role. I genuinely have no idea what you are even talking about with the "classpath/jar file" thing, it honestly sounds like something someone who has never used java before might make up.

The only valid point you have is that java is slightly more verbose. But of course, it also prevents a number of bugs that slip into PHP code bases, which I find balances it out. And keep in mind, this is coming from someone who finds java offensive, and refuses to use it any more. You're not dealing with someone who is in love with java, but rather someone who thinks java is a terrible language that should never have been made. It is simply not as bad as PHP.

SomeOtherGuy··on Facebook releases HHVM, 60 percent faster than its current PHP interpreter
I don't know why you are saying anything to me since you are responding to something I didn't say and that has nothing to do with the post I made. Is "dim witted attempts to respond to poorly thought out strawmen" really the level of discourse here?
SomeOtherGuy··on Facebook releases HHVM, 60 percent faster than its current PHP interpreter
Because you are buying 10 times as many servers, and paying for power for 10 times as many servers. Where on earth did this "bog standard x86_64 hardware" business come from?
SomeOtherGuy··on Facebook releases HHVM, 60 percent faster than its current PHP interpreter
So check the single core version: http://shootout.alioth.debian.org/u32/benchmark.php?test=all...

Oh look, PHP is still 30 times slower than java. A 60% improvement to that still won't get it within an order of magnitude. And PHP is not significantly faster or easier to develop in than java, so you are losing execution speed to gain nothing.

SomeOtherGuy··on Facebook releases HHVM, 60 percent faster than its current PHP interpreter
>Because you can get a web application up and running quickly in PHP

You can get a web app up and running quickly in good languages too, and then you also don't have ongoing maintenance nightmares and the massively increased hardware and hosting costs that come with PHP.

SomeOtherGuy··on The diagnosis
>From what I understand, she was not in a risk group and didn't yet require periodic exams

Everyone is supposed to do self-exams. There is no consensus on preventative mammograms, some doctors still say to get them, but at different ages. Others say not to do it at all as the risks outweigh the benefits, and mammograms are most useful to diagnose lumps found through normal exams.

SomeOtherGuy··on We've invented waterfall
That response is even sadder. I haven't chosen the "just code" koolaid, but your religious beliefs are so deeply ingrained that you can only perceive me through that lens. As a result, you miss out on the great big world of "every situation is different and you should do what is appropriate instead of what some dipshit hawking books and seminars says".
SomeOtherGuy··on We've invented waterfall
>You have a choice of koolaid

I also have the choice to ignore all the methodology snake oil salesmen and actually write software. Every "methodology" is bullshit. The new ones are not any less bullshit than the old ones. The fact that your response assumes I must love the old version of "follow our stupid manager nonsense" is really pretty sad. You honestly can't even imagine a world where I might think all of the bullshit is equally worthless? I have to be an adherent to one of these religions?

SomeOtherGuy··on We've invented waterfall
>Most of us would probably agree that their method is worse than more modern methods

Not everyone drank the agile koolaid.

SomeOtherGuy··on Rails Is Not For Beginners
Of course there was a time before ecommerce apps. That would probably explain why I was talking about the very first perl cgis. While there's a lower barrier to entry for people to exploit security holes, there's also far more targets. Automated tools to go around exploiting the latest holes in "insert shitty PHP app here" aren't an issue for web developers who are writing their own apps. The security issues that impact web developers are the same as they have always been for all kinds of developers, input filtering, escaping output, etc. Web developers have always needed to understand basic security issues, it is just that 99% of web developers historically have been completely incompetent. This does not appear to have changed recently.
SomeOtherGuy··on Rails Is Not For Beginners
It never was for beginners. All those problems have been around since the web has, and beginners have been making insecure crap ever since the first perl cgis.
SomeOtherGuy··on Is Haskell a Good Choice for Web Applications? (2009)
Except that popularity doesn't generate extensive testing. IE was one of the most insecure pieces of software ever created, and was incredibly popular. People using software don't find security holes, people looking for security holes do. Has anyone with any credibility done an extensive security audit of ruby on rails? Not that I am aware of. So that puts it at the same level of confidence as snap or yesod. So then we have to judge by things like the track record, the underlying design, and the confidence we have in the developers behind the projects. None of those things are in rails or django's favor.
← PreviousPage 2 of 3Next →