[–] 17 points 2 weeks ago

Not related to the PHP thing. It's e-mudhra incident. They were (yes, they voluntarily shutdown their business) a Certificate Authority (Who sell SSL certificates like Cloudflare or Let's Encrypt). They generated 8 security keys that were something like 4, 8, ... Which can be guessed easily. In effect when you go to your bank's website, how do you know the website is actually your bank and not some scammer pretending to be? Based on the SSL certificate. Usually to prove this, websites use a 384-digit number that cannot be guessed easily by anybody else. '4' is easy to guess and can be used by other people to pretend to be your bank.

  • source
  • parent
  • context
  • [–] 1 point 1 month ago* (last edited 1 month ago)

    the grand unifying architecture of the fronted is either wrapping a 40x inside a 200; or for everything.

    ^/s^

    Edit: But on a serious note, yes that's how I have always simplified webdev for myself. I have been reluctant to enter the js ecosystem only dipping my toes into react frontend as recently as two months ago.

    My goto backend is python + flask. Naturally I started with jinja templates for the frontend. I have now gravitated away from fully relying on templates into having a partially REST API with JSON payloads and asynchronous requests. This is nicely fits with the three layering transformation that this blog endorses and is optimal from a manageability perspective.

  • source
  • [–] 3 points 1 month ago*

    Modern society is built on destruction and cruelty. Doesn't mean I can advice somebody to give up living in society and sound smart.

    To suggest that "compromising on ideals for practicality" is the same as "roll-over and accept it" is dishonest and only done by people who want to win the argument by attrition so they get what they want.

  • source
  • parent
  • context
  • [–] 0 points 1 month ago

    Replying from my alt:

    I was trying to make a joke but seems it rubbed off the wrong way. Although I do think there's a philosophical discussion of complexity to be had here.

    The problem with thinking "We have now simplified xyz software" is software developers have this bad habit of often assuming that the world updates to the latest and greatest version of software the moment they deploy it and they erase any semblence of past versions, shortcomings, or even workarounds that others may have deployed and trained their muscle memories on.

    Complexity actually goes up the more versions of software that are released in the world.

    You now have neovim <= 0.12, <= 0.13, 0.13 to keep in your head if someone comes to you for advice on how to setup this cool editor on their distro and they may or may not be able to upgrade to the latest version.

  • source
  • parent
  • context
  • view more: next ›