5 ms·
This is absolutely the problem. There are high-horse developers who've made 4 webapps using PHP and don't know anything about the system they're deploying on --
by h4waii 10y ago
This is absolutely the problem. There are high-horse developers who've made 4 webapps using PHP and don't know anything about the system they're deploying on -- but they're rockstars disrupting the world!
They leave mysqld bound to 0.0.0.0 because they don't know any better. They SSH as root because they don't know any better. They have a default WordPress install with the config db sitting in webroot.
But hey, their website works and might one day make them some money.
- overcast 10y agoEveryone can't know everything, be realistic.
- h4waii 10y agoAh yes, everything is absolutely what I was getting at. This line of thinking is what allows these problems to happen due to pure laziness or not caring. When you build a product or service, you should own it end-to-end OR simply let it be known that you are unable or unwilling to do so. If you take it seriously, you'll know what can sink your project/business -- and stuff like leaving your entire database publically available with no auth, is one of them.
- maxlybbert 10y agoIt's a requirement for a one-person shop. Or they have to get expert advice.
- overcast 10y agoSure, but everyone is naive at some point. You can't expect one person to make ZERO mistakes. There is a huge amount of steps involved from conception to implementation. I've done many, and still forget things.