Vanderson

17 ms·

121.
by Vanderson 8y ago
It sure does. Which is odd that this alone is a reason I'd use a poorly structured/designed language than a well laid out one. Maybe a similar reason why php also is used over other options? (from a slightly different angle)
122.
by Vanderson 8y ago
> This is an analysis of sloppy design at the core of PHP. I understand this, but the source or reason for the "bad list" doesn't change the fact that every language has something off. (just a matter of degrees) Also, php
123.
by Vanderson 8y ago
I recommended Python with a math library to my friend to try as a replacement for R (and for server code running a project's backend data processing). The amount of effort and time spent trying to get it up and running was ridiculous.
124.
by Vanderson 8y ago
Fonts and typefaces have unique copyright laws that are different from other forms of art/communication. I made a more detailed comment here: https://news.ycombinator.com/item?id=18541934
125.
by Vanderson 8y ago
"The idea that typefaces (rather than fonts, which are computer software) cannot be copyrighted in the United States is black letter law. 37 C.F.R. § 202.1(e). Under U.S. law, typefaces and their letter forms or glyphs are considered
126.
by Vanderson 8y ago
He may be bringing up the issue that it's perfectly legal to copy another font visually as long as you don't copy the font's data. (maybe something the author doesn't understand?)
127.
by Vanderson 8y ago
This looks quite extensive. Does it rely on a clean install to start with? (this seems to be the single point of failure for most FIM systems I've seen so far)
128.
by Vanderson 8y ago
That is interesting. I guess you have to assume your current set of files are all valid for this to work?
129.
by Vanderson 8y ago
At a glance this looks neat. But don't you think it's odd that WP doesn't have built in security of a similar nature?
130.
by Vanderson 8y ago
What I see this seems to be doing is auto-staging every file that changes? And beyond that it has a few aliases for some commands. Is anyone else getting the same thing? I use git in my CMS which auto-commits a template file (text) on save.
131.
by Vanderson 8y ago
I guess an alert is better than nothing. But you still have to deal with the cleanup. It seems the only real way (which I figured out) is to have a separate management system from the CMS. Having the CMS manage it's own files seems lik
132.
by Vanderson 8y ago
Yep, this is my experience as well. I have accounts get compromised because of a weak password. (maybe 2fa will help) But also, accounts can be locked down to IP address (harder to manage but helps more) But does WP allow php executable on
133.
by Vanderson 8y ago
I guess I am looking at it from a systems building perspective. If you can control the rules for what files are allowed to run (ie limit them to something like "plugin.php" or a directory like /something/something/p
134.
by Vanderson 8y ago
I would imagine enough bad press has caused some of the security enhancements of the past. Maybe more are coming? My experience is that some businesses that use WP rely on other companies to maintain security, and maybe individuals or small
135.
by Vanderson 8y ago
I got the idea from a security company trying to sell me WP security suite that will scan all your files, and automatically replace them if they are bad. Since I wasn't running WP, I couldn't use it. But I liked the idea and I bui
136.
by Vanderson 8y ago
> the other aspect is that many compromises in WP come from writeable file systems. Yes, which is why I am stunned WP is setup by default this way, it's baffling to me. But I guess it makes it easier to manage? > You'd need
137.
by Vanderson 8y ago
Couldn't you just set it to automatically quarantine any suspect files? Or in a more dramatic manner, overwrite certain files with the originals. Seems like overkill when you could just disable server permissions on writing to such fil
138.
by Vanderson 8y ago
That is a good point. A hash standard for plugins could be implemented by WP then. And a way to verify the hashes shouldn't really be hard, and it would go a long way to making WP more secure by default. Then if a plugin maker doesn&#x
139.
by Vanderson 8y ago
I built into my CMS an automated scanner that checks hashes on system files and sends alerts if there are any changes detected. (also for any files that shouldn't be there) I can't imagine this would be hard to add to Wordpress or
140.
by Vanderson 8y ago
In my experience, it all depends on the client and the project size. The larger the project, the more documentation, planning and budgeting. And no tools really help with this in general. But if it's big enough, I will do mockups, ever
141.
by Vanderson 8y ago
> I don't know why, but seeing "I’m really, really sorry" in a Post-mortem doesn't feel right. Is there anything he could have said that would appease everyone? I think he is really stuck, and at least he took respon
142.
by Vanderson 8y ago
It's good to get more confirmation that Bootstrap is the way to go. Just today a cohort from Startup School sent a link to a screencast where he had built his entire admin in Bootstrap, and it looked like it saved him a ton of time. Th
143.
by Vanderson 8y ago
> At some point a large'ish team should be able to dive in to the project... FWs are primarily a means of standardization for me. I don't work with a large team internally, but externally I do. Every website built using my pla
144.
by Vanderson 8y ago
I find the critical difference is length of time committed to a project. For my core business interfaces I use my own framework developed and refined over many years. For front end website development I just recently gave up and decided to
145.
by Vanderson 8y ago
I have resellers of my product, and they use it build websites for their clients. And one of the things my clients had a hard time with (a while ago) was retraining their end users. This would happen because their users' had employee t
146.
by Vanderson 8y ago
While I am not a success story yet, I am a founder. If my clients had a problem on their site, sometimes I would just fix it for them instead of showing them how to do it themselves. Then I would improve the system on the next update so I d
147.
by Vanderson 8y ago
I just went through YC's Startup School [SUS] [0], the video/lessons alone are pure gold for software companies. I have had a couple employees in the past and I have had 2 different business coaches and took a business course, but