3 ms·
> I'd like to see "Don't deserialize into arbitrary objects" become General Programming Wisdom, but it is not there yet. I think that's pifflesnort's point.
by ScottBurson 14y ago
> I'd like to see "Don't deserialize into arbitrary objects" become General Programming Wisdom, but it is not there yet.
I think that's pifflesnort's point.
- jerf 14y agoNo, his point is that it already is and we can declare anybody who doesn't know to be worse than a "trained monkey". I say the evidence clearly shows that it is not widespread knowledge (IMHO "trained monkey" makes it sound like you could ask a normal college sophomore about this and get the correct response, which is just false, a lot of programmers don't even know what the term "serialization" means), and while it is a great goal we can not act as if it is already true.