EnFinlay

9 ms·

31.
by EnFinlay 7y ago
I am personally grateful for every blog which does not go out of it's way to follow "standard typographic rules" because so many of them end up looking identical.
32.
by EnFinlay 7y ago
I want status pages to show traffic to the status page itself over the last 24 hours (or some time period). A sudden uptick in traffic but green across the board would indicate that there is an issue, but they just haven't updated the
33.
by EnFinlay 7y ago
I don't think the civil comment was directed at you specifically
34.
by EnFinlay 7y ago
"Come on we need 23 reasons because of 23 chromosomes! I don't care how stupid the list is, just hit that number"
35.
by EnFinlay 7y ago
I am very surprised by the reaction you're getting.
36.
by EnFinlay 7y ago
I relate strongly with this. Someone made a comic that partially captures how it feels: http://www.poorlydrawnlines.com/comic/do-it-turtle/
37.
by EnFinlay 7y ago
No, but pre-requisites to bank accounts do, like permanent addresses.
38.
by EnFinlay 7y ago
On one hand I agree with you, on the other hand I don't think the space is short on people writing their own tools. The number of DNS enumerators I've seen shared over the past month alone speaks to this.
39.
by EnFinlay 8y ago
> Old rules don't apply at all How did that happen?
40.
by EnFinlay 8y ago
Nice write-up!
41.
by EnFinlay 8y ago
I think "Software Engineers" can't tell the difference.
42.
by EnFinlay 8y ago
Professional engineers do engineering. Title only engineers work on complex systems. This distinction has largely been lost and most "Software Engineers" think they are doing PE Engineering when they are not.
43.
by EnFinlay 8y ago
I would say that this needs to change on a broader scale within the software development community than just with Facebook.
44.
by EnFinlay 8y ago
I couldn't agree more.
45.
by EnFinlay 8y ago
Interesting analogy and I see your point. If a car manufacturer's process made it easy to install the brakes wrong they would be held responsible (probably with a recall or damages for lives lost due to faulty brakes). I guess part of
46.
by EnFinlay 8y ago
Also true.
47.
by EnFinlay 8y ago
It might be depressing, but I think it's true. What do you think?
48.
by EnFinlay 8y ago
You're right, the impact is just as bad. I think people in this thread (including myself) are downplaying it because it's a very easy mistake to make, rather than a terrible design decision.
49.
by EnFinlay 8y ago
I disagree that they are both terrible security designs. We expect every company to not use plaintext for auth. We do not expect every company to have infra/ops setup to prevent logging on login requests.
50.
by EnFinlay 8y ago
Having (read) access to the hash shouldn't give any access to the account. Edit: You've made this comment twice in these threads. It's wrong.
51.
by EnFinlay 8y ago
Because some developer typed: > log.info(req.body) and no one realized that login data would get captured? Get real.
52.
by EnFinlay 8y ago
It's an issue for the same reason storing passwords in plaintext in the database is an issue. Reading the hash != access to the account. Passwords should be private to everyone except the account owner. If devs have access to all user
53.
by EnFinlay 8y ago
It's just such an easy mistake to make. Some new ops guys logs all the traffic through a subsystem and boom - plaintext passwords.
54.
by EnFinlay 8y ago
Because there's two types of storing passwords in plain text. There's the "your password is stored in plaintext in the database" way which everyone agrees is 10 different kinds of stupid, and then there's the "
55.
by EnFinlay 8y ago
No one is saying that it would be better if everyone was dirt poor. The main criticism of wealth inequality (as I understand it being a developer and not an economist) is that with the systems currently in place in America (and other nation
56.
by EnFinlay 8y ago
Being reincarnated in a cat isn't always great. https://imgur.com/rHm8Nwv
57.
by EnFinlay 8y ago
Business/self-improvement books are the worst for having 3 pages of ideas and expanding it to the publishers 200 pages minimum.
58.
by EnFinlay 8y ago
I am on HN more, but it hasn't replaced Reddit. HN doesn't move fast enough for hours of dopamine hits like Reddit is. HN is for when I'm at work and I need to give my brain a rest from a tough problem. My time at home no lon
59.
by EnFinlay 8y ago
I pruned my comments about a year prior, so anything useful should still be there.
60.
by EnFinlay 8y ago
Likewise, been off for over a month (yay New Years) and my productivity has been significantly increased. And I agree about HN, it's similar in system, but the content is very different. I'll look at the front page and maybe read

More ›