chrismsnz

12 ms·

61.
by chrismsnz 14y ago
This is just another example of how we're learning the lessons of FP about 20 years late. I'm no expert - I've only muddled with FP languages (mostly Haskell). But what I learned there deeply affected my everyday imperative and OOP coding.
62.
by chrismsnz 14y ago
I will defer to the rails core dev here :) The linked vuln report gives the impression that regular parameter handling is vulnerable.
63.
by chrismsnz 14y ago
That's a bug/exploit in Authlogic, a third party library for rails, not rails. However, that bug/exploit is based on the rails vuln and was patched in authlogic exactly how the Rails report instructed people to work around it (casting the p
64.
by chrismsnz 14y ago
Please provide a source for your claims. From looking at it, it seems that ANY HTTP parameter (e.g. POST or GET - which are completely user-controlled) can be manipulated if you know how it's going to be used in the code, e.g. an obvious ob
65.
by chrismsnz 14y ago
To continue the metaphor, it seems that in their mission to make the meal taste better for the customer they neglected to clear the poison. Lets not pretend that Ruby/Rails doesn't make major architectural decisions in favour of ease of use
66.
by chrismsnz 14y ago
Interesting - hadn't seen that before. My own attempts at brewing something together with PHP's posix and pcntl libs were feeble. Thanks for the link.
67.
by chrismsnz 14y ago
Yeah, same. You really do need supervisord to manage the process, though. My background processes lean on supervisor's functionality quite a lot. Most of them don't run any longer than 5 mins or so.
68.
by chrismsnz 14y ago
AFAIK it was Apple that held back features from Google Maps. The previous Maps app was written by them (using Google's data).
69.
by chrismsnz 14y ago
Yeah, I'm disappointed with that. I bought the phone because it was popular and I was sure it was going to have support. Guess I was wrong. Always buy a nexus!
70.
by chrismsnz 14y ago
Check out Varnish's configurable grace period. It will basically instruct it to continue to serve content that it considers "stale" (up to a point) until it is able to update it.
71.
by chrismsnz 14y ago
I have noticed some image persistence issues on mine as well. Any idea on how to fix/minimise it?
72.
by chrismsnz 14y ago
I think the PHP's standard library is as inconsistent as the next guy, but I kind of appreciate there just being a function when just a function is needed. i.e. Python's standard library provides objects where appropriate, but often they wi
73.
by chrismsnz 14y ago
I've been spending some time to try and pick up Haskell and I just thought I'd mention that I found "Real World Haskell"[0] to be a bit more understandable and accessible to me than "Learn you a Haskell". Different strokes, obviously, but j
74.
by chrismsnz 14y ago
Something that seems easy to verify with a digital signature?
75.
by chrismsnz 14y ago
It's in the article. "and that’s a particular worry for Oren Falkowitz, one of the developers of the database, who has left the NSA to start Sqrrl, a company that seeks to build a business around Accumulo in much the same way Red Hat built
76.
by chrismsnz 14y ago
I get the gist of what you're saying but Go's compile speeds are ridiculously fast. Switching into the terminal takes me longer for my projects.
77.
by chrismsnz 14y ago
It's fine now until someone hacks their site or poisons their DNS.
78.
by chrismsnz 14y ago
Exactly, this is what infuriates me about the arguments and whining against PSR-2. Spaces, Tabs, OTBS, whatever. It doesn't matter which one was chosen, just that something was chosen. Ask the Pythonista's what PEP8 did for their developer'
79.
by chrismsnz 14y ago
Not sure how that example is indicative of Socialism. More generally I would say it was interventionist, but very poorly handled. The issue is because they don't know what they're doing, rather than that they are subscribed to a certain sty
80.
by chrismsnz 14y ago
FYI, the author of Flask was the same person who proposed and published the PEP on the byte str changes.
81.
by chrismsnz 14y ago
My favourite is probably: Say you want to add a product to an existing order in the database... $orderProduct = new OrderProduct(); $order = OrderPeer::retrieveByPK(1); $order->addOrderProduct($orderProduct); Now, if ANYWHERE after this
82.
by chrismsnz 14y ago
Not as of yet!
83.
by chrismsnz 14y ago
If you think that your project is going to grow into a substantial code base, I would NOT recommend Propel. A lot about their active record implementation violates POLA with various gotchas and code generation gets tedious and unwieldy with
84.
by chrismsnz 14y ago
Check out webfaction, their virtualenv support is a _little_ wonky but the python environment is per-app so you don't really need it. I run half a dozen Django apps for less than $10/mo but they support any WSGI system, postgres or MySQL an
85.
by chrismsnz 14y ago
I'm not the OP but almost any PHP project these days has me reaching for Symfony 2[0] or her little brother Silex[1] paired with Doctrine 2[2]. [0]. http://symfony.com/ [1]. http://silex.sensiolabs.org/ [2]. http://www.doctrine-project
86.
by chrismsnz 14y ago
I use 'git commit --amend' which does basically the same thing. Both have to be done before pushing to remote, anyway.
87.
by chrismsnz 14y ago
That's what I did when I migrated our application to bcrypt some time ago. I had some questions about whether using an md5sum as the bcrypt input, with much less keyspace (only hex characters) had any impact on security but nobody could/wou
88.
by chrismsnz 14y ago
> Google could have just as easily bargained for the same kind of terms that Apple gets on iOS devices with carriers. Right, and what about the hundreds of other manufacturers of Android phones?
89.
by chrismsnz 14y ago
It's not just Steam, I had a CS filesystem and could not install Starcraft 2 either.
90.
by chrismsnz 15y ago
RPython, perhaps?

More ›