rip747

I've been doing ColdFusion for well over 13 years now. The reason I choose it was because at the time the only other web technology that looked promising was ASP and I _hate_ Visual Basic with a passion. Today I'm focusing all my attention on C# and Ruby.

That all said, if I had to start over today... I wouldn't be programming, I go back to networking. As much as I love programming, it just doesn't amaze me anymore. I guess its the lack of physical interaction. I'm starting to dread typing on a keyboard for a living.

I look at all my friends in networking and see all the cool toys they get to play with and want to jump in the sandbox.

every post this guy has about the security holes he has found are impressive to say the least.

"We don't ask doctors, plumbers or auto mechanics to "just get the job done". We ask them to do it right."

We're building software here, not saving lives or building something physical. Software is virtual, it can be refactored and fixed numerous times until the desired performance and bugs are all worked out.

Doctors and anyone building something physical don't have this luxury. You can't tell a doctor to "refactored" a heart transplant so they have to get it right the first time.

"I'm not proud of this legacy code,"

"This cron has been keeping ffmpeg in check for over 6+ years in a production environment at this point... it processes thousands of videos a day using a custom queuing and reviewing system."

why do we programmers always feel we need to apologize for something that we did quickly, but has been running without incident for a number of years.

take a bow my friend. that was an awesome patch you came up with all those years ago.

To quote the source: ====================

Verify: the email address of the Registered Name Holder (and, if different, the Account Holder) by sending an email requiring an affirmative response through a tool-based authentication method such as providing a unique code that must be returned in a manner designated by the Registrar, or

the telephone number of the Registered Name Holder (and, if different, the Account Holder) by either (A) calling or sending an SMS to the Registered Name Holder's telephone number providing a unique code that must be returned in a manner designated by the Registrar, or (B) calling the Registered Name Holder's telephone number and requiring the Registered Name Holder to provide a unique code that was sent to the Registered Name Holder via web, email or postal mail.

In either case, if Registrar does not receive an affirmative response from the Registered Name Holder, Registrar shall either verify the applicable contact information manually or suspend the registration, until such time as Registrar has verified the applicable contact information. If Registrar does not receive an affirmative response from the Account Holder, Registrar shall verify the applicable contact information manually, but is not required to suspend any registration. ====================

So there are other methods that ICANN outlines in order to verify the account holder information to activate the domain, not _just_ an email address like the article states.

I really don't like the fact that they tout using VS to create and publish apps right there on the homepage however you have to purchase the ultimate package at $119 a month in order to do this. you would think that every package would include this feature if its their main advertised feature.

just purchase the railstutorials.org at http://ruby.railstutorial.org/

full disclosure: i purchased the course for rails 3

IIS integration period the end.

well that was argument awhile back. nowadays with products like Helicon Zoo (which i use for development), it make integrating a rails (or php, python, cfml) site with IIS a breeze. seriously, if you're using IIS and want to run a rails site, you should have looked at Helicon Zoo.

so a week ago it was CFML and this week its Ruby. is there going to be any week that the languages i program in doesn't get bashed on the net ;)

+1 for Railo!

seeing how there was quite a bit of CFML bashing going on yesterday, i doesn't surprise me that ColdFusion has that many dislike votes.

BTW, its CFML, NOT ColdFusion. ColdFusion is a product, CFML is the language. it would be the same as having JRuby on the list instead of Ruby. if you're going to have a poll on programming languages, then at least label said languages correctly.

we need a package manager (aka bundler). just passing that along :)

CFWheels has that already built into it, but I'm convinced that its a problem with the framework itself and not anything the author did.

the issue seems coming from this line:

https://github.com/cfwheels/cfwheels/blob/v1.1.8/wheels/even...

basically when wheels throws an error, it will try to send out an error email containing the environment and framework information. In this case there seems to be no smtp server defined, so CFML itself is spitting up its skull.

The error handling can be reworked so that the $mail() call is wrap in a try/catch so the 500 page will just be shown.

disclosure: part of wheels core.

actually firefox took off because it wasn't IE :) remember that those were the days that you either used IE on windows or nothing since netscape was dead and there weren't too many choices out there for a free browser that worked well.

pud's latest project is still on the homepage of HN and he wrote it in CFML: https://news.ycombinator.com/item?id=6519743 Just because project X is not written in your language of choice, means absolutely nothing. Its all about execution and this project is pretty impressive.

this project has always impressed me. keep telling myself that i need to browse the source to see how it was all done. congrats jake!

a dentist friend of mine gave me a floss card once (looks like a credit card only has floss in it). still have it and i don't know what i'm going to do when it runs out, it has literally been a life saver for me. if there is one thing i hate in life is having something caught between your teeth all day.

Edit: thank you google! http://www.flosscard.com/order-retail-10-packs/

this is the same thing in almost any community. You have a handful of people who are dedicated to the open source movement of the language and the reset just sit by the sidelines.

There's nothing wrong with this though. Not everyone has spare time in their lives to dedicate to open source.

that's my point. as someone who had no idea of this, i would think that the author was a raving lunatic or something. at the very least put the thing in quotes and have a citation at the end.

WTF is am reading on the demo site for this project?

https://github.com/daviferreira/medium-editor/blob/master/de...

http://daviferreira.github.io/medium-editor/

this doesn't surprise me in the least.

reading the comments, this thread is turning into a paypal bashing which it shouldn't. what happened is not paypal's fault or some insider attempt at stopping the project from happening as some laughable comments have suggested.

paypal's top priority is to their customers, not the merchant. if you look at this from their perspective this is the right move as what would happen if the project just took the money and never delivered?

asking them for a detailed list of `itemized budget and your development goal dates for your project` is something that any smart investor would ask for and they should have had this done already so i don't see why this is cause for concern.

`And code on GitHub gives no insight into how someone might fit into a company culture.`

github does give you this insight if you look at how the person participates in discussions in the issue tracker and code reviews. remember github's old moto, social coding? i think the author is hung up on the coding part and missing the social part.

blogspam. just one big advertisement for their product

as much as i'm loving that coldfusion (my primary language of choice) is included on this chart and ranked in the top 10, i would really like to see how the job market compares to the other languages on the chart.

on a side note: really? xslt is second on the list? i remember using it to create a code generator years ago. probably one of the poorer decisions i've made in my life :P

i keep forgetting about bugmenot

really? a site that is centered around local news that doesn't have miami or fort lauderdale as an available area for florida?

you'd figure the first thing they would do is have all the major markets covered

the real question is what now happens to all the people who were responsible in getting the false confessions?

I hate to say it, but if history repeats itself, the people responsible will either never face persecution or get a slap on the wrist.

it's funny that something like this existed in CFML for a while now (CFTRACE), yet CFML is looked down upon. its cool though to see this functionality in another programming language.

just use Google Analytics. It's a free and extremely powerful reporting. Trying to roll your own solution is a total waste of time.

The only thing you should be doing with your logs are archiving them in case of a security breach so your can try to pin point how the attach happened.

Don't waste the space on your lan either for the log archives. Get an S3 account, zip them up and store on S3.

just drag the email into the primary tab and it will always put it there