I've seen `eval()` in production code of several applications. The biggest vulnerability is more often than not the programmer :)
143 karma · joined February 15, 2014
Much like fashion or music, the state of the art of a period consolidates into a style that becomes a design choice.
The API can't be easily modified -and sometimes XML responses have info JSON don't-, the website is stuck on being served through the framework instead of relying on a modern API... They even have an "old" and "new" database for albums, so when you query some of the albums through the API they come back with no tracks because the API is in the old codebase. It's a mess. And from my experience with Django, it feels a lot like the difficulties we had trying to scale and improve our existing code. It's not that you can't do things: it's just that Django isn't agile enough to adapt. You end up adapting to Django and its -beautiful and magical- ways.
Of course we could blame it on poor design choices, lack of Django knowledge or just call it technical debt... but I believe the framework is the major culprit.
For context: I haven't worked for last.fm, but I manage a third-party client (Open Scrobbler). I've been using their API for more than five years now, had interactions with their devs, read many replies in the API support forum and even tried to find undocumented endpoints that could help me (during this time I found some old profiles and test pages where you can even see screenshots of Django logs!).
Long time ago -for a personal project- I used CherryPy, which is simpler and easy to learn. I don't know where it stands today, but it's another option.
https://github.com/elamperti/dotfiles/blob/master/docs/ffmpe...
Moreover, last.fm also has an issue with unicode characters and some artists/albums may have two or more different profiles. It's a mess!
Unknown vulnerabilities won't need your consent.
I've found positive outcomes from playing the game as well, beyond gaming: for example it helped me realize that you can have a lot of things (in game: build materials) but it doesn't mean anything if you don't use them (in game: build something!). It also helped me reconnect with old friends (we play together in our server, hop into a voice channel sometimes and we also share unrelated stuff outside the game). I know it helped some people get through the pandemic.
It's also a good motivation for kids (and grown-ups!) to learn basic server administration, plugin development, community moderation, and some people also like to fiddle with textures as well.
The game is a creativity source, very much like Lego bricks. The things you do in-game may not have much value, but I'd say it yields great results in the players :)
It's not "X browser", it would be just Firefox with its workaround. And it's common practice to design websites with support for major browsers, so it shouldn't be such a huge burden letting users pick a browser.