Reputation
31,921
Next tag badge:
112/100 score
19/20 answers
Badges
5 66 116
Newest
 Electorate
Impact
~1.1m people reached

Jul
16
revised Isn't there a substantial problem with SVN tags?
added 140 characters in body
Jul
16
answered Isn't there a substantial problem with SVN tags?
Jul
16
answered How to handle OSS license on GitHub with non-OSS pictures
Jul
16
answered Delete unused source code from the repository or keep an archive folder?
Jul
16
comment My coworker commits and pushes without testing
@Marco its cool, I've worked those places too, but regardless of the isolation of roles, you were wrong to say support doesn't care about architecture or quality. They certainly care that they receive a crappy product that needs more supporting!
Jul
15
comment Why use a unique hashkey for form submissions?
@MichaelT, true, adding a timestamp and sending a new hash with every response is a good idea to keep an attacker from reusing an old hash token. This will still work with stateless requests, you're simply persisting the authentication status. Most websites work like this with persistent auth stored in a cookie (don't they?)
Jul
15
comment Why use a unique hashkey for form submissions?
hashing algorithms are designed to be very hard to decrypt. They're called "one way encryption" for a reason. Look up SHA256 for an example of one.
Jul
15
comment Why use a unique hashkey for form submissions?
Try This SO question's answers for some insight. You only need a special has that you can compare against one created during authentication so you know subsequent requests are from that user (or really, are not from anyone else)
Jul
15
answered Reading using non-blocking IO on a fd asynchronously in C++ (moving from Node.js)
Jul
15
comment My coworker commits and pushes without testing
@Marco most places I've worked Support is provided by Dev anyway. Who says Support doesn't care about code quality or architecture? Support guys are usually more concerned with correctness - after all, its them who get woken up when something goes wrong. Not every dev team subscribes to writing unit tests either. You make so many assumptions your comment is just wrong. Don't be so disparaging about dedicated people who work hard (eg support).
Jul
15
comment Is there a standard way to indicate that a function returns a new pointer?
if you'd tagged your question C rather than C++ you might get answers in keeping with your original intent. Returning a smart pointer is the right way in C++, in C, there's no convention for naming except to write documentation, eg strdup.
Jul
14
answered How to manage ongoing data migrations?
Jul
14
comment TDD in theory in only
@MetaFight so you dislike writing architecture and design docs, yet you admit you are writing architecture and design docs. I'm not sure what you're saying, unless its that you have a prejudice against some traditional documentation descriptions.
Jul
14
comment Determining game item prices based off of player trades/in-game economy
In a way the price should fluctuate in individual shops (or small, localised areas) This can be updated as goods are bought or sold - eg a shop with a glut of bananas may sell them at a discount, though it might be easier to set the price for the town with all those bananas in it. No reason to limit prices though so they move slowly, might be easier to simply cap the calculation as goods are traded each time, and impose different caps according to the goods shelf-life.
Jul
13
comment My coworker commits and pushes without testing
Let us continue this discussion in chat.
Jul
13
comment My coworker commits and pushes without testing
@BillWoodger is this the 18th century? Cashier takes money, puts it in till, till records the entry. Cashier puts money in safe. Nice, easy auditable process. Someone else will always be responsible for tallying the takings in the safe with those entered by the cashier. (except: the cashier could easily take money and put it directly in pocket even in your audited process). With software its the same, code will only get to staging via the SCM, build server and automated process so there is always an audit trail, even if the support guy did the work rather than a dev guy.
Jul
13
comment My coworker commits and pushes without testing
@BillWoodger I doubt that. If support can edit a dev file and get it rolled out to production, then that is fine.. as long as it is traced (ie the support guy's changes can be tracked on what he did). Auditors are only concerned that there is a process for managing this, not that the support guy might also be a dev guy. If there is a process for 'emergency fixes' to be performed by support, then that's all fine and dandy as far as audit is concerned. Auditors are only concerned about the process - that its sensible, and is followed.
Jul
13
comment My coworker commits and pushes without testing
@BillWoodger I'm not sure what you're saying. Production teams I know usually have their own rollout processes that include a test environment (just to check for silly errors first). In a small team, there's no reason why this test system cannot be shared by dev and support. No changes are allowed to it anyway - its populated by dev via automation and consumed by support. No different to giving them a zip of the same code. Auditors are concerned with processes, not the implementation of those processes (except that they're followed, of course)
Jul
13
comment C++ object design
implementation looks no different to a std::map to me.
Jul
13
answered Determining game item prices based off of player trades/in-game economy