HNHacker News
TopNewBestAskShowJobs

dscrd

608 karma · joined May 19, 2012

submissionscomments
dscrd··on Bitcoin exchange hacked via WordPress hosted on production machines
>Having said this, I've found limited proof that a particular language is any safer than another as it comes down to safe coding policies and risk mitigation strategies.

Proof is right there in the article. To have PHP on the live server is a security risk, period.

dscrd··on Bitcoin exchange hacked via WordPress hosted on production machines
1. That you do not require any part of Go (except the obvious ones that are inside the compiled binary) to exist on the live server.

2. That Go is designed as a programming language.

dscrd··on Bitcoin exchange hacked via WordPress hosted on production machines
Why would they have a host with PHP installed on the same server where money is handled?! Totally irresponsible.

I'm being serious. Unless you have Facebook's resources (and probably not even then) DO NOT USE PHP FOR ANYTHING THAT REQUIRES SECURITY! If you are, start a migration process today. Whatever you think it'll cost, it'll be worth it.

If you cannot decide from the billions of choices out there, go with Go. It's hardly perfect, but way better and simple.

dscrd··on The Life of a PHP Developer
"I don't like language arguments."

Well, if you like PHP, how could you like language arguments? After all, they always end up destroying your beliefs.

dscrd··on The Life of a PHP Developer
> Any respectable PHP developer nowadays uses a decent framework, and there are many.

"There are many" equals "almost all are bad".

dscrd··on The Life of a PHP Developer
No, you're quite wrong there.
dscrd··on Laravel 5 released
No, they also suffer from the pattern misuse pattern and are also slow as hell.
dscrd··on The Life of a PHP Developer
"If PHP developers are made to feel terrible, they will leave and there will be less and less great developers working with PHP."

I don't quite see how this might be a problem. Does the author think those people would be less great in another environment? Does PHP own these people?

"Often times, people are just complaining about PHP because it’s a popular thing to do."

No. We do not complain about PHP because it's popular. We complain about PHP because it sucks and we are forced to use it.

dscrd··on What makes Nim practical?
There are worse things than PHP out there :)

Many of the so-called 4th generation languages (i.e. business shits derived from Cobol with DB support bolted in) are totally crazy in this sense. Not only are identifiers often case insensitive, they can also be abbreviated!

Yet people make massive amounts of money with them.

dscrd··on 10yr+ PHP Dev Wondering: Python vs. PHP for Web Applications?
PHP seems to fall apart in the seams when trying to reach a higher abstraction level. For instance, Symfony 2 tries very hard to include modern OO techniques in there, but the end result is that its performance is incredibly bad. Also, the OO basis is ripped from Java (which is not a perfect fit in some places, given that Java is a more static language), which I do not enjoy at all.

Python isn't the fastest dog out there, but doesn't fare so badly with the abstractions, and its OO style suits a dynamic language better. It doesn't try to be a Java.

Neither language will give you much protection against programming errors, nor optimize your code very well like many of the new hip languages (Rust, Go, Nim) do.

dscrd··on Most of America’s rich think the poor have it easy
"Poor people today have it easy because they can get government benefits without doing anything in return" vs "Poor people today have hard lives because government benefits don't go far enough to help them live decently".

If you focus on the latter part of the sentences, I can see how it's easy to be a bit confused about which is the correct answer.

dscrd··on OpenBSD 2014 by the numbers
>I wonder if keeping CVS is not one of the smartest things the OpenBSD project does now.

Given that OpenBSD is supposed to be a security-oriented OS, it's slightly weird that they are using a version control system that does not guarantee that what you put in the repo actually stays there, unchanged. Git guarantees that.

> They are arguably one of the best projects at doing it.

What makes you think that?

dscrd··on OpenBSD source tree moved to version 5.7-beta
>It would actually promote bad behavior.

Can you elaborate on that?

dscrd··on OpenBSD source tree moved to version 5.7-beta
Even though I fully know that I'm being superficial and silly, I cannot help but find it hard to take seriously projects that do not use either git or mercurial for the sources in 2015.
dscrd··on Ask HN: What language will you learn in 2015?
Rust and/or Nim, depending on which will feel better as I learn more.
dscrd··on Ask HN: What are specific tangible benefits of learning Haskell?
http://www.paulgraham.com/know.html

Learning Haskell adds to the mass of things you know, and the volume of that mass determines the level of your general expertise.

You asked for tangible things, but it's harder to see what those may be. Perhaps your perception will be enhanced: perhaps you will better see and care about side-effects, opportunities for pure functions, etc.

I don't think any learning effort that leads to increased knowledge can be a waste of time.

dscrd··on NixOS 14.12 released
"they should probably steal some more ideas from FreeBSD"

Which ideas would you think are worth stealing from there?

dscrd··on A tiling window manager written in Rust
A language is often not improved by adding features. Rust has a relatively clean slate (for now), which makes it a vastly better experience.
dscrd··on New Paypal gateway UI susceptible to spoofing
Did Paypal just remove the issue reporting page or is the link in the article just wrong? https://www.paypal.com/webapps/mpp/security/report-problem
dscrd··on Ewww, You Use PHP? [2010]
>one of which became rather infamous years later lol

mtgox? :)

>TBH if a "developer" cringes their nose at a very capable tool, just because it is not the latest "cool" thing, It tells me a lot about them.

This is called the straw man fallacy. You wrongly assume that the lack of coolness is why people dislike PHP and you dismiss the whole argument based on that.

Doing great stuff with PHP is like building a skyscraper using nothing but a hammer and a screwdriver and a few rotten planks. It's the builder who's amazing (albeit a bit crazy), not the hammer, the screwdriver or the planks. Imagine what he might've made with proper equipment?

Would you like to live in such a skyscraper?

dscrd··on Drug addiction: The great American relapse
If misery causes drug abuse, like it seems to do, then obviously making misery more rare is the solution. Legality is one easy step towards that goal, other steps include societal acceptance (i.e. drug users not immediately being regarded as worse people) and increased wealth.
dscrd··on Is Docker ready for production?
Have you tried CBSD? Does it compete well against Docker? The documentation seems quite lacking, but then again, so is docker's at the moment too.
dscrd··on Haskell Communities and Activities Report – November 2014 [pdf]
The Haskell ecosystem seems to be horribly broken, at least in its default current form. The symptom is that for just about every interesting program out there (let's say, git-annex or yesod), your typical "cabal install" command will fail for some reason or another.

The stackage is there to fix this, but it's not yet the default.

dscrd··on Launching in 2015: A Certificate Authority to Encrypt the Entire Web
... and then you do rm .ssh/known_hosts and try again :P
dscrd··on Nokia N1 Android Tablet Revealed
So Nokia sold their worthless Windows Phone part and started making android devices a year later? Their strategy is suddenly making sense.
dscrd··on PostgreSQL vs. MS SQL
Tangentially, can anyone recommend a good book for learning PL/PGSQL and other ways to procedurally program on psql?
dscrd··on Baron is a Bitcoin payment processor that anyone can deploy
Javascript as a language for handling serious amounts of money? I don't know...
dscrd··on Foo.Bar with Google?
I apologize for going all reddit on you but: Duh.
dscrd··on AngularJS: The Bad Parts
> Whatever the reason is for Angulars popularity, it isn’t that it’s a great framework.

Something similar to this seems to be true for every piece of programming technology that is popular. How did it come to this? Other professions don't go in masses towards the worst solutions, do they?

dscrd··on A Quick Intro to Rust Macros
"Those are toy scores and one should not take them seriously."

People keep saying that about The Shootout, but I don't think so. They reflect the combination of two qualities: the main implementation of the language, and the community around the language. It's way too cynical to say that the results cannot be taken seriously -- they just have to be taken carefully.

For instance, we can see that the Rust community was able to make their runs quite snappy quite easily, even though the implementation isn't even ready yet. That's impressive!

Page 1 of 12Next →