Coding Horror

https://www.reddit.com/r/ProgrammerHumor/

is an absolute treat at the moment with this missile alert test

ThisRegard

Rologyro wrote: »

I find this thread sort of depressing. In what other industry would you find a boards thread dedicated to making fun of other peoples mistakes?

I'm a software developer three years out of college and I will put my hand up and say I have written bad code. On the other hand I love what I do and improve all the time. The one thing that discourages me from working in this area is some of the people...

I find the industry to be full of arrogant willy-wavers who get a kick out of pointing out other people's lack of knowledge or mistakes. The same people who are actually impossible to work with because they loathe admitting their own mistakes.

Well, when new grads come in looking to improve, you know what I'm going to do? Help and encourage them (revolutionary I know).

Take a look at the Plumbing and Electrical forums, they've stickies for highlighting such mistakes. Don't take it so personally, you've a long road ahead of you, and you may find things educational.

fritzelly

AlmightyCushion wrote: »

I don't think there is a developer on this thread who hasn't looked at some old code they've written and tried to figure out what the hell they were thinking when they wrote it.

Aint that the truth - been there, done that and ended up just rewriting it when it still made no sense

Capt'n Midnight

Wombatman

Met Eireann Website still using classic ASP :eek:

https://www.met.ie/default.asp

bpmurray

Wombatman wrote: »

Met Eireann Website still using classic ASP :eek:

https://www.met.ie/default.asp

Yes, but it's really fast!

GarIT

bpmurray wrote: »

Yes, but it's really fast!

That's the fastest loading webpage I've seen in a long time. I'd rather that than a fancy looking page with a 1-3 second delay.

BrokenArrows

Jesus it really is fast.

Maybe we should all go back to basics. Make the internet great again!!. :pac::pac::pac:

html tables, some flashing marquee and some fancy gifs!!

matrim

BrokenArrows wrote: »

Jesus it really is fast.

Maybe we should all go back to basics. Make the internet great again!!. :pac::pac::pac:

html tables, some flashing marquee and some fancy gifs!!

Bring back the blink tag

Capt'n Midnight

BrokenArrows wrote: »

Jesus it really is fast.

Maybe we should all go back to basics. Make the internet great again!!. :pac::pac::pac:

html tables, some flashing marquee and some fancy gifs!!

There's a lot to be said for KISS

Buford T Justice

Earthhorse

I work with c# and it's the only one I don't get.

BrokenArrows

Earthhorse wrote: »

I work with c# and it's the only one I don't get.

Me too

28064212

Earthhorse wrote: »

I work with c# and it's the only one I don't get.

Best guess is a camelCase reference?

Capt'n Midnight

BrokenArrows

A new service i came across today.
I wont post the name because it might cause them trouble.

When signing up you need to verify your phone number. You receive an SMS and enter the verification code on the website.

When you submit the verification code the site sends a API request and returns JSON containing the correct code and validates it in the browser!!!

SO you just need to do one invalid lookup to see the valid code return in the background which is easily visible with the Developer Tools.

Smart guys! Ive sent them an email.

Raging_Ninja

BrokenArrows wrote: »

A new service i came across today.
I wont post the name because it might cause them trouble.

When signing up you need to verify your phone number. You receive an SMS and enter the verification code on the website.

When you submit the verification code the site sends a API request and returns JSON containing the correct code and validates it in the browser!!!

SO you just need to do one invalid lookup to see the valid code return in the background which is easily visible with the Developer Tools.

Smart guys! Ive sent them an email.

Christ

Buford T Justice

BrokenArrows wrote: »

A new service i came across today.
I wont post the name because it might cause them trouble.

When signing up you need to verify your phone number. You receive an SMS and enter the verification code on the website.

When you submit the verification code the site sends a API request and returns JSON containing the correct code and validates it in the browser!!!

SO you just need to do one invalid lookup to see the valid code return in the background which is easily visible with the Developer Tools.

Smart guys! Ive sent them an email.

Wonder are they offering rewards for security flaws found.

But seriously, what teenager did they hire for that?

daymobrew

I inherited a WordPress/WooCommerce site that uses the Divi theme. It's running about 70 plugins.
The developer bumped the version numbers in a number of plugins so that actual newer versions would never be shown as available.

The site also included a plugin that tweaked the names of most of the menu items in the WordPress admin area. This plugin caused issues when using Divi's visual editor.
Furthermore, that same plugin hid itself from the list of installed plugins.

BrokenArrows

BrokenArrows wrote: »

A new service i came across today.
I wont post the name because it might cause them trouble.

When signing up you need to verify your phone number. You receive an SMS and enter the verification code on the website.

When you submit the verification code the site sends a API request and returns JSON containing the correct code and validates it in the browser!!!

SO you just need to do one invalid lookup to see the valid code return in the background which is easily visible with the Developer Tools.

Smart guys! Ive sent them an email.

I'm gonna have to go check something I wrote last year...

GarIT

BrokenArrows wrote: »

A new service i came across today.
I wont post the name because it might cause them trouble.

Can you tell us the type of service, was it something simple like a clubcard signup or something more serious like a bank or email provider? Who is at risk, the company or the individual?

BrokenArrows

GarIT wrote: »

Can you tell us the type of service, was it something simple like a clubcard signup or something more serious like a bank or email provider? Who is at risk, the company or the individual?

Its not as serious as a bank but they are providing service which gives you a free initial spend amount when you sign up.

GarIT

BrokenArrows wrote: »

Its not as serious as a bank but they are providing service which gives you a free initial spend amount when you sign up.

At least it is the company that is at risk rather than someone verifying themselves as someone else for nefarious purposes.

BrokenArrows

Found another bug which allowed me to read anyones messages on their internal messenger. They fixed that one immediately!!!
At this point im just poking around to see what else they have done!

Q_Ball

BrokenArrows wrote: »

Found another bug which allowed me to read anyones messages on their internal messenger. They fixed that one immediately!!!
At this point im just poking around to see what else they have done!

I've found 7 serious issues with your web service! Number 5 will shock you!

Irish man uses this secret security flaw to get rich quick!

:pac:

Seriously though, might be time to start charging!

Buford T Justice

BrokenArrows wrote: »

Found another bug which allowed me to read anyones messages on their internal messenger. They fixed that one immediately!!!
At this point im just poking around to see what else they have done!

You should tell us so we can all poke around too.;)

Wheety

Buford T Justice wrote: »

You should tell us so we can all poke around too.;)

A free pen test service? I'm in!

srsly78

BrokenArrows wrote: »

Its not as serious as a bank but they are providing service which gives you a free initial spend amount when you sign up.

Oh ho.... There is some useless bank in america that doesn't verify peoples email addresses AT ALL. So some gob****e with a similar name to me signs up using MY email address - and now I constantly get notifications about every purchase etc he makes. And yes there is a password recovery option which could be used to hijack account.

AlmightyCushion

srsly78 wrote: »

Oh ho.... There is some useless bank in america that doesn't verify peoples email addresses AT ALL. So some gob****e with a similar name to me signs up using MY email address - and now I constantly get notifications about every purchase etc he makes. And yes there is a password recovery option which could be used to hijack account.

Send the bank an email informing them of this. Then automatically forward all mail from them to the same email address. They'll eventually sort it.

srsly78

Already did. They don't seem to care. Now I have just blocked them as spam.