this post was submitted on 14 Apr 2024
820 points (97.2% liked)

Programmer Humor

19817 readers
899 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS
 

cross-posted from: https://jlai.lu/post/6002282

He revealed the secrets !

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 5 points 8 months ago (1 children)

As someone who has written a DB handle... that shit is hard, I had to be extremely careful to protect against SQL injection. Everyone rolling their own is how we return to the Era of XSS and SQL Injection on every website. I'd prefer to have young devs use libraries and contribute as they gain knowledge.

[–] [email protected] -3 points 8 months ago (1 children)

that shit is hard, I had to be extremely careful to protect against SQL injection

People need to learn to be careful

[–] [email protected] 4 points 8 months ago (1 children)

They do... but the road to naturally learning that lesson comes with the cost of enabling botnets and destroying businesses. Maybe there should be a qualification exam to be a developer but when there isn't we need to make sure more junior developers have the best tools they can get to fight against foot guns.

Also, on the topic of security, a lot of good senior level developers don't have the specialized knowledge to do shit like build a password validation system that isn't vulnerable to a timing attack or know what a timing attack is...

And timezones, fuck timezones, I've written code that correctly handled timezones (and subsequently threw it away when Canada decided to DST on a different weekend). Imagine how shitty it'd be if we constantly had to reinvent the wheel when it came to timezones.

Oh, and forget about databases... do you know how fucking hard it is to write an ACID compliant WAL? The reason postgres is the default open source database (and why so many databases are just layers built on top of postgres's engine) is because it's fucking hard. Mongo still (IIRC) has consistency issues, they were a tech darling for half a decade and can't manage to NoSQL as well as Postgres.

Also, good luck building a GUI with anything more complicated than curses style box art characters.

I started mildly disagreeing with you but I disagree even more that I've thought about other tools people would need to roll on their own.

[–] [email protected] -1 points 8 months ago

a lot of good senior level developers don’t have the specialized knowledge to do shit like build a password validation system that isn’t vulnerable to a timing attack or know what a timing attack is

Please don't tell me that. It's terrifying