5 ms·

Many people learn web development from short crash courses and half baked youtube videos these days. They are often often don't pay much attention to these. So

Many people learn web development from short crash courses and half baked youtube videos these days. They are often often don't pay much attention to these. So many times I have seen people concatenate strings to do SQL than use prepared statements or whatever language analog its scary. For HN audience, It sure sounds very old knowledge but for some document intended as cheat sheet / checklist it has place.

bigiain 5y ago
> it has place. Yup. Reminding everybody you need to have some adults in the room. If your full stack web team has not one single person who's experienced enough to have ever had to investigate and clean up after an intrusion, its 1) going to happen soon, and 2) its going to go badly. I mean, sure - bootcamp "grads" are cheap and plentiful and have pretty portfolios. But almost none of them should have root on production servers...
notapenny 5y ago
If you don't mind, would you recommend some sources these people can go to/should read into? I've had a shortened CS education (2yrs) but I'm mostly self taught outside of that. I'm just starting to do a bit more back-end development and I have the exact same issue with these courses; they focus on "build the cool thing using these popular tools" but never on build it right. I don't really care about the shiny new thing personally, I'm looking for fundamentals.
- hutzlibu 5y ago
  "I'm looking for fundamentals" Have you heard of this shiny new thing, called printed out books? This is mainly how I learned them. Saves you some screen time as a bonus.
  - chakkepolja 5y ago
    Yep. I prefer books to youtube videos or whatever my peers use for the precise reason that books cover concepts from ground up, whereas tutorial content is geared towards fastly getting some stuff up and running.
- bigiain 5y ago
  In spite of my Node snark above... Owasp is a really great resource, just don't concentrate only on a quick Node-related cheat sheet (even if you are using node for your backend). The more generic information handout web application security is very good, and will benefit your knowledge across all languages and frameworks, if you care to consume it. (There may be genuinely good current resources to learn web app and platform security from, but I cut my teeth there in the late 90s - including fucking up and needing to clean ups after myself, which sadly is the most powerful learning tool, while also being a very very poor way to achieve that learning...)

bigiain 5y ago

> it has place. Yup. Reminding everybody you need to have some adults in the room. If your full stack web team has not one single person who's experienced enough to have ever had to investigate and clean up after an intrusion, its 1) going to happen soon, and 2) its going to go badly. I mean, sure - bootcamp "grads" are cheap and plentiful and have pretty portfolios. But almost none of them should have root on production servers...

notapenny 5y ago

If you don't mind, would you recommend some sources these people can go to/should read into? I've had a shortened CS education (2yrs) but I'm mostly self taught outside of that. I'm just starting to do a bit more back-end development and I have the exact same issue with these courses; they focus on "build the cool thing using these popular tools" but never on build it right. I don't really care about the shiny new thing personally, I'm looking for fundamentals.

hutzlibu 5y ago
"I'm looking for fundamentals" Have you heard of this shiny new thing, called printed out books? This is mainly how I learned them. Saves you some screen time as a bonus.
- chakkepolja 5y ago
  Yep. I prefer books to youtube videos or whatever my peers use for the precise reason that books cover concepts from ground up, whereas tutorial content is geared towards fastly getting some stuff up and running.
bigiain 5y ago
In spite of my Node snark above... Owasp is a really great resource, just don't concentrate only on a quick Node-related cheat sheet (even if you are using node for your backend). The more generic information handout web application security is very good, and will benefit your knowledge across all languages and frameworks, if you care to consume it. (There may be genuinely good current resources to learn web app and platform security from, but I cut my teeth there in the late 90s - including fucking up and needing to clean ups after myself, which sadly is the most powerful learning tool, while also being a very very poor way to achieve that learning...)