4 ms·
"For every 1 day estimates of a task, there’s a simpler version of that you can do in 3 hours, and an even simpler still you can do in 30 minutes. Back yourself
by revetkn 17y ago
"For every 1 day estimates of a task, there’s a simpler version of that you can do in 3 hours, and an even simpler still you can do in 30 minutes. Back yourself into a corner and these versions will vividly appear before your eye. You can always do less."
I wonder if this was the reasoning behind 37s' storing passwords in plaintext instead of taking an extra 10 minutes to write the code to encrypt them?
- nwjsmith 17y agoEvidence?
- tome 17y agohttp://www.jgc.org/blog/2009/05/can-you-trust-37signals-with-your.html http://www.jgc.org/blog/2009/05/can-you-trust-37signals-with...
- nwjsmith 17y agoThis is from May, and 37signals just made a fairly large change to their authentication system (I think its called Launchpad). Their password recovery system now works differently than described in this post, so I doubt they're still storing them plaintext (thank goodness).
- runevault 17y agoYeah, however the point stands that it proves they are willing to act this way about things that are too important to treat said way. Goes to show even good advice can be taken too far.
- revetkn 17y agoYeah, it may work differently now, but I think the point still holds. I understand that engineering's all about tradeoffs and being practical with your time, but things like plaintext passwords are unacceptable (IMHO) in even the first cut of a production system, let alone an established one with a large userbase.
- almost 17y agoAs I understand it they changed how they did things in response to the linked blog post.
- tjic 17y agoOuch That's going to leave a mark!
- _pius 17y agoTouché.