1,159 reputation
311
bio website qwerky-qwerky.blogspot.com
location Berkshire, England, United Kingdom
age
visits member for 3 years, 3 months
seen Mar 13 at 13:32

Software developer with 13 years experience. At the moment I'm mainly interested in:

  • java
  • eCommerce
  • encryption
  • security

Check out my new GitHub at https://github.com/qwerky


Mar
25
comment Search on multiple values
@Blrfl - not a problem, Solr already has mechanisms for this
Jan
29
comment MVC exposes database primary keys?
+1 - its a common and well documented security problem, see owasp.org/index.php/Top_10_2010-A4
Jan
4
comment Why does Java MessageDigest.getInstance() have a String as a parameter?
It does; docs.oracle.com/javase/6/docs/api/java/security/…
Jan
4
comment Why does Java MessageDigest.getInstance() have a String as a parameter?
If you had something like MessageDigest.getMD5Algorithm(); then the class would have to be updated everytime it needed to support a new algorithm, and there are a lot of algorithms.
Dec
17
comment I failed FizzBuzz, would you hire me?
Have a look at my thoughts on Fizz Buzz qwerky-qwerky.blogspot.co.uk/2012/07/… you wouldn't fail for one mistake, but you'd fail if you couldn't write a unit test to pick that mistake up.
Dec
10
comment I failed FizzBuzz, would you hire me?
+1 for No? Well let's test it. I ask candidates to write fizz buzz in interviews. I also get them to write a unit test. Sometimes their fizz buzz fails, but their unit test detects this, leading them to fix it - this is fine. The guys that get rejected are the ones who write a failing solution and then write a test that fails to detect this. I ask them, are you happy with this test, if they are, thats when they fail.
Jun
27
comment Is it a security flaw to log the class and method name when an exception occurs?
In summary, logging the class/method is a good thing. Allowing the log (or a stacktrace) to escape is a bad thing.
Jun
1
comment exact answer for “what is j2ee?” - job interview
Who cares what the exact official definition is? So long as you can talk about JEE and what kind of things are in it, then this should be enough.
May
10
comment How should I test randomness?
Testing for randomness is impossible. Every possible valid outcome of your shuffle could be achieved, and in one shuffle all outcomes have an equal probability, no matter how improbable they may appear. The most you can ever do is hint at how probable the result is. For example a shuffle that results in the same order is possible (and just as probable as any other order). However if you repeat the test 100 times and the order is the same after shuffling every time, then the shuffle is very unlikely to be random.
Jan
13
comment What are the chances of getting a good development job without the training in solving programming puzzles?
+1 for Read up on fundamental algorithms and data structures...
Jan
13
comment How to avoid “DO YOU HAZ TEH CODEZ” situations?
This should be top answer - help him to help himself.
Nov
24
comment Use open-source programs in your company?
+1 - Use whatever tool is best suited for the job. Sometimes open source is a factor in this, sometimes not.
Nov
11
comment Is “White-Board-Coding” inappropriate during interviews?
We're not looking for perfect syntax. makes it reasonable, in fact I'd say recommended! It is unreasonable to criticise syntax errors on whiteboard coding.
Nov
7
comment Should I accept to write unsecure code if my employer requests me to do so?
+1 - cover your back. Document your objections and reasoning as to why you think this is bad. Document your managers response. Print this out and file it carefully in case the heat comes back to you.
Oct
13
comment What is a reasonable and secure password requirement for user registration?
@mouviciel I trust it enough to put things like my wallet and phone in there, which I value more than nearly every online account I have.
Oct
12
comment What is a reasonable and secure password requirement for user registration?
In the situation where you are at work, write it down on a post-it and lock the post-it in your desk drawer. Keep the drawer key in your pocket. Think of it as a physical password manager.
Oct
12
comment What is a reasonable and secure password requirement for user registration?
Writing down passwords does not defeat the purpose. If I have a really complicated password written on a post-it stuck on my monitor then the only way someone can access my account is if they have broken into my house and are sat at my desk in my study. In this situation I have a far, far bigger problem than someone being able to track my UPS deliveries.
Oct
7
comment From Slashdot: Does being a loyal developer pay?
+1 for Try talking to your current boss about it, explain what's happened, what you're thinking and see if it can be resolved without the risk of moving.; telling your boss that you got another (better) offer will soon show you how much you are valued.
Sep
15
comment Is it common to separate back-end and front-end into two positions on web development projects?
+1 for if you have a startup, don't assign roles. Better hope that you assembled a good self organizing team. If everybody knows each other, everybody knows who does what the best.
Aug
12
comment Are there any notable examples of business disasters directly attrutible to open-source software?
@FarmBoy In that case your opening statement should be "In the following companies I have worked for ......, there is a strong prejudice towards proprietary software. Even in the following large business I have worked for ...... that use Java, MySQL or PostgreSQL weren't used, and WebSphere and WebLogic are strongly preferred over JBoss or Tomcat."