jamesfinlayson

6 ms·

91.
by jamesfinlayson 4mo ago
I remember an old colleague telling me at a previous job they'd moved all business logic into triggers and stored procedures because their database was on their most powerful server. And then one day it wasn't and the database sta
92.
by jamesfinlayson 4mo ago
Oh yeah - I remember working with a guy who absolutely insisted that we build application-level sharding into what we were working on (i.e. each primary key would have some metadata that our application logic would use to route traffic to t
93.
by jamesfinlayson 4mo ago
Me too, and it put me off ever using stored procedures or triggers. I've worked at places where stored procedures are big but they were much more organised about it.
94.
by jamesfinlayson 4mo ago
I don't disagree, though I should have been more specific - I updated dependencies at extremely short notice because that's what security wanted. I would have updated the dependencies sooner or later anyway because I know that per
95.
by jamesfinlayson 4mo ago
No I think he was just looking to raise his profile, not to help.
96.
by jamesfinlayson 4mo ago
Yeah I completely understand their intent, but I might get 30 vulnerabilities across a multiple repos flagged in a week. It is already tedious to check them all and assess if they're worth worrying about let alone having to update them
97.
by jamesfinlayson 4mo ago
Pretty much - I don't know too much about the CVE process but if ReDoS stuff was flagged at the CVE level as "exploitable only with unconstrained inputs" then great - I know my tests have sane inputs, so I'll close thank
98.
by jamesfinlayson 4mo ago
Yep, I've updated dependencies with an RCE that can't be exploited in my codebase just to keep my security team happy. Not worth the multiple arguments about it not actually being an issue.
99.
by jamesfinlayson 4mo ago
Yep. I remember years ago seeing the website for some guy who proudly listed all the CVEs he'd discovered. Clearly he'd written some scanning tool to look at regexes in open source projects and was creating CVEs for anything that
100.
by jamesfinlayson 4mo ago
I tried to raise that with my internal security team recently - don't clutter my vulnerability dashboard with issues in dev dependencies. They somewhat rightly pointed out that malware needs to be dealt even if it's a dev dependen
101.
by jamesfinlayson 4mo ago
In Australia any sort of gambling payment on a credit card is treated as a cash advance. If you use PayPal on top of your credit card, the credit card company still manages to introspect it and apply a cash advance fee.
102.
by jamesfinlayson 4mo ago
I thought sleepers Steam account was already a thing to work-around something - matchmaking limitations in Dota 2 maybe?
103.
by jamesfinlayson 4mo ago
I think the Xbox 360 online stuff was only shut down... two or three years ago? It hung around for a long time.
104.
by jamesfinlayson 4mo ago
Yeah so does Australia Post. I've dug too deeply but Google Maps on face value seems to provide it as well.
105.
by jamesfinlayson 4mo ago
Totally doable - I remember talking with a guy that worked at a sports betting company and they flagged any accounts with any duplicated fields as requiring further investigation (to clamp down on gaming bonus bets and deposit matches).
106.
by jamesfinlayson 4mo ago
I know someone who is an accountant for very wealthy people and quite a few seem to have useless children whose failing businesses they bankroll.
107.
by jamesfinlayson 4mo ago
No idea if it's true but I remember that people are still using the Visual Studio 6 IDE because it's so much faster than the latest Visual Studio (though using latest Visual Studio compiler).
108.
by jamesfinlayson 4mo ago
I thought in the deep dark paste it used to take you to filext.com but it's been probably 20 years since I intentionally clicked on the link.
109.
by jamesfinlayson 4mo ago
Yeah this - I know my container is pushing a lot of things to containers (I think customer-facing web stuff is a reasonable use for containers) but stuff like ActiveDirectory controllers, Exchange servers - pretty much any Microsoft thing r
110.
by jamesfinlayson 4mo ago
Yeah I'm at a place that is kind of sucking it up, but there is a work-stream to move more stuff into the cloud and another work-stream to move more stuff on-prem but Kubernetes running on bare-metal. There's also work to stop usi
111.
by jamesfinlayson 4mo ago
Oh I'm sure it is. In any case, it was 2013 and at that point he still had to fly to Sydney I think to deliver a tender. Maybe it's enough to cut the number of offshore companies applying to an easier to manage number.
112.
by jamesfinlayson 4mo ago
Somewhat related but I remember an old boss telling me that some government departments weren't allowed to specify Australian companies only when tendering for a work, but they were perfectly within their rights to ask for tender appli
113.
by jamesfinlayson 4mo ago
I haven't looked at the comics in a physical newspaper in a while but it was still there maybe 12 years ago (in Australia at least).
114.
by jamesfinlayson 4mo ago
I have a couple of people in my team at work whose first port of call for any hard question is to ask AI, and they proudly proclaim that AI said it can be done - all you need to do is x, y and z. Having had to actually work on something tha
115.
by jamesfinlayson 4mo ago
Unfortunately GitLab has no such useful features.
116.
by jamesfinlayson 4mo ago
Recalculate percentage of each language in the repo, recalculate top contributors, recalculate the stats for the committer's profile etc etc.
117.
by jamesfinlayson 4mo ago
I'm bottom of the ladder but have seeing the option to do it for at least a year.
118.
by jamesfinlayson 4mo ago
Yep, at work my team's vulnerability dashboard constantly shows hundreds of critical and high vulnerabilities. Fortunately/unfortunately, 99% of these issues are for Javascript dependencies in websites that are not server-side ren
119.
by jamesfinlayson 4mo ago
I remember working with a guy who apparently deleted more code than he added in his time at the company. I think it said more about the codebase than anything but it was good that someone was trying to make it better.
120.
by jamesfinlayson 4mo ago
Yeah an old colleague told me that a decommissioned mainframe where he'd worked had reportedly been sold for scrap metal.

More ›