nikic

14 ms·

121.
by nikic 13y ago
Yes, of course in the end everything runs on machine code. That does not imply though that it is reasonable to write your web applications in machine code or assembly or C or C++. I'm not arguing whether or not C++ is actually suitable
122.
by nikic 13y ago
crypt() is not extremely easy to use. Actually, it's fairly hard and easy to get wrong. The two things that people usually get wrong is a) salt generation and b) fixed-time comparison.
123.
by nikic 13y ago
I'm seeing it too. Probably people have used domains like amazon.XYZ for phishing in the past.
124.
by nikic 13y ago
> You can use the private repositories for anything you want. Does that include using them for purposes that are not directly related to your education?
125.
by nikic 13y ago
> PHP version 5.5 (not yet released) will support Bcrypt natively via its password_hash() function. Use it. This makes it sound like PHP didn't support bcrypt before 5.5. It did. PHP always has bcrypt support in 5.3 and 5.4. In older ve
126.
by nikic 13y ago
I also come to the conclusion that Ruby-like languages are just not the right tool for this kind of problem, but it should be pointed out that you would have been able to solve the 10^14 data set easily, even with Ruby. I was solving that p
127.
by nikic 14y ago
I think he is mocking the general pattern of over-engineering and PHP just happens to be the language he wrote this in. At least PHP is not a language known for massive over-engineering. Usually people associate the exact contrary with PHP.
128.
by nikic 14y ago
DLLs for PECL exts are currently available here: http://windows.php.net/downloads/pecl/ Not for all of them, but some of the more important ones. If you want something added to the list it's usually as simple as pinging Pierre on IRC :)
129.
by nikic 14y ago
ZO+ will replace APC, only the user-cache from APC will be left (see also this comment: http://news.ycombinator.com/item?id=5343883 ). Object literals and scalar type hints won't be in 5.5. Scalar type hints may be in the next version (it'
130.
by nikic 14y ago
We will provide a separate extension (currently called "apcu") which contains only the user-cache part of APC. ZO+ and that extension together should behave the same way as APC currently does. This will actually work even better, because bo
131.
by nikic 14y ago
For those wondering what the new features for PHP 5.5 are at this point, here is a small (not complete) list: Large language changes: * Generators and coroutines ( https://wiki.php.net/rfc/generators by me) * `finally` blocks ( https://wik
132.
by nikic 14y ago
Most people just miss the common C++ idioms that solve many of the exception issues in very elegant ways (and give a lot of benefits at the same time). E.g. the example with file open + close in the presentation is laughable. Every C++ prog
133.
Why objects usually use less memory than arrays in PHP(gist.github.com)
4 points by nikic 14y ago|1 comments
134.
by nikic 14y ago
PHP has changed a lot over time. It moved from a C-style procedural language to very Java-esque object oriented language. "PHP" hasn't been "PHP" for a long time already. It's always hard to do large language changes, but it's not impossibl
135.
by nikic 14y ago
Which classes are you specifically missing?
136.
by nikic 14y ago
I think this is (once again) just a question of finding the right balance. Using polymorphism to avoid manual conditionals is a practice that can often improve readability and maintainability. One just shouldn't drive it too far. I do agree
137.
by nikic 14y ago
3 and 4 are weak because we have pretty good heuristics on how passwords are composed so it wouldn't take much longer to brute-force them than it would to do password123.
138.
by nikic 14y ago
I've seen this story on a few sites now, and none of them bothered to show just where exactly in that image the part is supposed to be. Very helpful.
139.
by nikic 14y ago
Context: http://en.wikipedia.org/wiki/Shor%27s_algorithm
140.
by nikic 14y ago
The RFC was accepted. So it will be in PHP 5.5 (unless some serious flaw with it comes to light in the meantime).
141.
by nikic 14y ago
Just to clarify a bit more: Usually you need more (a lot more) code than this on pre 5.5. In particular you can't normally assume that `openssl_random_pseudo_bytes` is available. Instead you'll go through various entropy sources (typically
142.
by nikic 14y ago
I wanted to watch the video on the page, but it told me to install QuickTime. Yeah, sure...
143.
The new Secure Password Hashing API in PHP 5.5(gist.github.com)
159 points by nikic 14y ago|84 comments
144.
by nikic 14y ago
I'm not really sure what I should with this comment. It doesn't make sense to me. Generators and coroutines are a well-known concept implemented in many languages, in particular Python and C#. It is also part of ECMAScript Harmony as far as
145.
by nikic 14y ago
Just because you can, doesn't mean that you have to. Look at Google. That's a nice company, which keeps the patent trolling down.
146.
by nikic 14y ago
1. Opened http://docs.phalconphp.com/en/latest/reference/tutorial.html 2. Saw lots and lots of static method calls 3. Closed page again. This way of judging frameworks has never failed me.
147.
by nikic 14y ago
I don't think that this is the judges fault. The law (at least to some degree) dictates the decision. If that decision is not good for the general public, then it is the law that needs change. (And we all agree that it does.)
148.
by nikic 14y ago
I like this attitude. It is better to lurk than to reply with low-quality posts :)
149.
by nikic 14y ago
I think the app looks very nice :) One thing that I'm missing here are the Terms Of Service. Uploading stuff on other people's servers is always a legally problematic business. It should be made clear that the uploader retains all rights on
150.
by nikic 14y ago
What are the reasons for hiding it?

More ›