The first was that 123456 was the credentials for the admin panel.
The second was an insecure direct object reference, where the lead_id querystring parameter can be changed on an API call to retrieve another applicant's data.
2,293 karma · joined September 26, 2021
The first was that 123456 was the credentials for the admin panel.
The second was an insecure direct object reference, where the lead_id querystring parameter can be changed on an API call to retrieve another applicant's data.
Thankfully, I can be patient, but I wonder sometimes if some of these companies will ever exit.
As an LP, I would be excited for liquidity in 10 years at this point.
It seems like even for successful companies, there isn't a clear path to an exit for many of them. Add to that the increase in late-stage investors, and there isn't much of an incentive to exit.
This "gotcha game" has become so tiresome.
This is every day for a developer though.
The pay will probably be less, but it is a trade-off.
It looks like web workers is the way for JavaScript to do multi-threading.
Async has always been enough for what I need to do in the front end, as most of my long running processes are just calling a back end.
Edit to add: for context, I am a full stack developer and know what threads are... I just never have needed them in the browser.
JavaScript doesn't have threads.
Most American food has High Fructose Corn Syrup instead of Sugar.
I have a recurring reminder on my phone and find that it helps keep me on track for this.
I'm not used to taking medicine and only started a couple months ago, so found that I can easily forget without it.
Maybe if there is a way to see all predictions made by someone, it would be more compelling.
The people making the decision to switch to Teams don't "get" slack.
They think the features are the same, so what's the problem?
Ironically, Microsoft Teams is terrible for teams.
It's a Frankenstein cross between instant messanger and SharePoint.
CI solves it because it proves that it can build in the pipeline, using a well defined environment.
No guessing at which node version you need or any other dependencies that may be required.
https://notepad-plus-plus.org/news/v733-fix-cia-hacking-npp-...
They created a fake band called "Zendesk Alternative" just in an attempt to pollute the Google results if you search for an alternative to Zendesk.
http://zendeskalternative.com/
While not illegal, it shows the way they think, a sort of manipulative pettiness.
The $50k was from other bug bounties he was awarded on hackerone.
It's too bad Zendesk basically said "thanks" but then refused to pay anything. That's a good way to get people not to bother with your big bounty program. It is often better to build goodwill than to be a stickler for rules and technicalities.
Side note: I'm not too surprised, as I had one of the worst experiences ever interviewing with Zendesk a few years back. I have never come away from an interview hating a company, except for Zendesk.
> He also tells of how he can back out of contracts by inserting a clause “subject to the approval of my partner”, where said partner was actually his cat. That is called “fraud”.
How can you take anyone seriously who does a thing like this?
This happens because the so-called "authoritative sources" have lost their trustworthiness, creating a vacuum that is filled by new sources, some good and some bad.
The problem is, people are bad at thinking for themselves, and basically outsource their beliefs to third parties. Are we worse at this than we used to be, or has it always been like this?
We need more primary sources of information, and less filters trying to persuade us, who often have unseen agendas and different motivations.
The difference is, I don't go around telling you what to do. Be a nice guy if you want.
I simply stated my way of thinking, but it angers the "nice guys" and I get attacked for it.
Oh, and you're not the gatekeeper of credibility, nor do I care how "credible" my opinion is to you (what does that even mean?). Credibility of opinions is just more "nice guy speak".
I never said any of those things, that it was better to be a jerk or toxic, but you assume that I did.
You're right, it is more in the context of romantic relationships, but I have since noticed nice guys can be a problem everywhere.
I certainly had some "nice guy" tendencies in the past, and maybe still do sometimes, bit I try to be aware and strive to be more direct in my words and behavior.
It's been a few years since I read it... I may read it again actually.
I'm reminded of a book I read once called "No More Mr Nice Guy" where it explains that "nice guys" are actually kind of jerks because they behave certain ways to try to manipulate people and they expect reciprocation.
They live by a sort of unspoken code that they believe exists but which other people may or may not be aware of.
When a "nice guy" doesn't get his way, he can become bitter and resentful.
(I am using the term "guy" to fit the name, but it could be a woman too)
I'm not sure if you intended to describe your manager as "nice" in this way, but niceness has become a huge red flag to me ever since reading that book. I much prefer someone who is good (in competence and/or in behavior) than someone who is nice.