romaniv

75 ms·

721.
by romaniv 14y ago
Perhaps annoying websites that didn't use real links were more "memorable", because they caused issues and required workarounds. Personally, though, I've seen more of them that I would have liked to.
722.
by romaniv 14y ago
What is so bad about a little Javascript? What's so bad about having a declarative way of doing something that a lot of people will find useful? And, how does one get sufficiently customisable incremental updates without having to standa
723.
by romaniv 14y ago
This is like asking why we should bother having any (new?) HTML or CSS standards at all, when you could write a custom rendering engine in JavaScript for every website. There is tremendous value in having a solid, usable foundation for web
724.
by romaniv 14y ago
Why do standards like WebSockets don't include anything that can be used in pure HTML? This would be a great tool for building efficient dynamic apps, if you could "submit" forms without going to a new page, and then get incremental page up
725.
by romaniv 14y ago
Java was never in a similar position to JavaScript. Java applets were never properly implemented as an integrated browser component that you can rely on. For example, you couldn't use Java to manipulate DOM and CSS.
726.
by romaniv 14y ago
That sounds like hell to a front-end developer. Its bad enough learning coffeescript or other dialects if a company uses them, but other languages too? As a full stack web developer I have to know multiple languages and constantly learn n
727.
by romaniv 14y ago
I think the main concern with a keyczar-like API is that we won't be able to create one that significant numbers of websites would actually use. Why not try to create one that significant number of users will use? Stuff like automatic v
728.
by romaniv 14y ago
It's not about naming. This class actually does what its name says. That's the best part. The methods and their JavaDoc descriptions are pretty hilarious as well. And it's not about the language per se. (You can write clean, simple code in
729.
by romaniv 14y ago
I would very much rather see higher-level crypto, especially crypto that could be used declaratively, without JavaScript. (Something similar to Enigmail, but for browsers.) Heck, there isn't even a standard way to verify a hash on downloade
730.
OWASP ZAP: Semi-Automated Security Testing Tool(code.google.com)
2 points by romaniv 14y ago|0 comments
731.
by romaniv 14y ago
I can give you many counterexamples, at least in computer gaming circles. You need to have something in addition to cynicism, though.
732.
by romaniv 14y ago
SF is not "social", quite slow and is more difficult to use for developers. However, I feel that it is more end-user friendly. Maybe not inherently, but because of the differences in culture. There are tons of software there that I can just
733.
by romaniv 14y ago
Yours is a typical "everything is uncertain and hard" excuse. There are plenty of cases when developers do avoidable things that will almost certainly cause issues. And then those things do cause issues. And then developers change nothing
734.
by romaniv 14y ago
Considering that this will make password-related code much shorter and more readable, I think it's a good idea regardless of what level of competence you expect from the developers.
735.
by romaniv 14y ago
Unit testing can easily lead to arbitrary modularity or code fracturing, which makes code harder to use and reason about. Good code should be designed for solving problems, easy use and readability. If your code is designed primarily fo
736.
by romaniv 14y ago
Not always. The GP post is more insightful than it might appear. A lot of reasoning used for arguing in favor of adding more unit tests is circular. "Good code is unit testable, so unit testable code is good." Very often, optimizing certain
737.
by romaniv 14y ago
I hope not. Two-factor auth ties you down to a cellphone (or physical token) while giving you only marginal improvement in real-life usage scenarios. (You are not going to enter a new token every time you check your email or Facebook.) We
738.
by romaniv 14y ago
More than that, even if a single person without any reputation reports a security issue, there should be some standard mechanism in the company to evaluate it and fix the problem if it's real.
739.
by romaniv 14y ago
The first Unix server I've set up was FreeBSD. I was able to go from zero to multiple services working in a sensible manner with next to no Unix experience, using only the Handbook and Running Linux as my guides. Mind you, that was done via
740.
by romaniv 14y ago
Of one of those major CDNs get hacked (rather than fail on accident), the problem will be far worse than some outdated Wordpress blogs.
741.
by romaniv 14y ago
What usability issues were introduced by using XFCE?
742.
by romaniv 14y ago
Sounds like a lot of effort, or at least a lot of things to consider. I wonder how many people were completely locked out of their accounts because they enabled 2-factor auth and didn't do all the right things. The root problem in this stor
743.
by romaniv 14y ago
Exactly. It horrifies me that there are still programmers who don't understand this after so many years of OOP advocacy. The benefits of a properly designed (not Java-like, but C# or PHP like) exception system stems from the fact that in th
744.
by romaniv 14y ago
if err := http.ListenAndServe(":8080", nil); err != nil { panic(err) } I've seen this kinds of stuff in PHP database APIs, and I've seen how much smaller and more readable the codebase becomes with proper use of exceptions.
745.
JavaScript Botnet Created by Researchers(darkreading.com)
2 points by romaniv 14y ago|0 comments
746.
by romaniv 14y ago
This would be awesome if it wasn't coming from Google. If they control the browser, a good chunk of websites/services and the delivery mechanism, there are just too many opportunities for abuse. Although, maybe this will force other telec
747.
by romaniv 14y ago
That article is probably the most frequently cited piece of bad engineering advice in the world. Bad and unneeded advice, since most corporate environments are already extremely hostile to any kind of rewrites. Heck, there are companies tha
748.
by romaniv 14y ago
Although I fully agree with the author's critique of cookies for instance, the idea of replacing them with something "better" frankly scares the crap out of me. Especially when the word "identity" is being used. Ever heard of evercookie?
749.
by romaniv 14y ago
What practical problems, aside from address range exhaustion, does it solve? I've read some technical articles about benefits of IPv6, but most of them keep returning to address size problem.
750.
by romaniv 14y ago
sometimes it's important to get people to lift their heads up from the day to day adding value and look at new technologies. Many times developers are so focused on the bug/feature du jour, that they aren't aware there are other ways to do

More ›