Reputation
37,438
Next tag badge:
121/100 score
19/20 answers
Badges
5 76 138
Impact
~1.6m people reached

Feb
21
comment What is the purpose of planning poker in a sprint?
@Kyralessa no, I like it. Scrum is just not agile. It has more pointless rules and processes than the old waterfall-style developments I used to do.
Feb
20
awarded  Nice Answer
Feb
20
comment How to sell DRY architecture
@Snowman I have seen many, many, many wheels reinvented, usually because of NIH, but never in a single team!. I think in this case the devs are just too inexperienced to know how to do this properly.
Feb
20
comment How do you handle database security from a desktop application?
You can prevent a user from updating someone else's records - by using a stored procedure as the only way to update the records and using the user who is running the proc as part of the query. See CURRENT_USER
Feb
20
comment How do you handle database security from a desktop application?
I suppose you could wait until someone hacks you before changing it, but on the bright side, at least then you'll have no problems getting your boss to fund the re-architecting :-)
Feb
20
answered How to sell DRY architecture
Feb
20
comment How do you handle database security from a desktop application?
You shouldn't be using your ORM as a direct mapping between business objects and DB entities anyway, its a poor approach that makes for fragile interfaces. Make requests to a business layer that gets raw DB entities and returns only the required data to the client.
Feb
20
comment How do you handle database security from a desktop application?
Even better, if (or when) someone hacks your desktops (or webserver in a web-based equivalent) the attacker may have full access to the OS, but they still do not have any access to the DB. And so they cannot then run "select * from users" piped to a file that they take away, crack at their leisure and let your CEO explain to the media why your secure system was compromised. If you also use sprocs on the DB that only allows execute access, then the attacker can hack your app sever too and they still can't get your entire user database.
Feb
20
answered Embedding extremely basic scripts in application
Feb
19
comment Get inspired by real world objects and their interactions
I know "analysis paralysis" is a real thing, but sometimes you can get a lot of insight from real world objects.
Feb
19
answered Persistent RESTful state on client without cookies
Feb
19
comment Persistent RESTful state on client without cookies
@JonathanvandeVeen yes, of course you store it. But the idea is that you update the state of the resource, not pass it around. So the basket is a resource in itself that is updated via POST requests. If the basket is held in a cookie, Logging in on a different client will not show my basket. Don't mix up per-user (ie connections) and per-user (ie per-user-secured resource).
Feb
19
answered Get inspired by real world objects and their interactions
Feb
18
comment What is the purpose of planning poker in a sprint?
Ah, but that's the whole point of Agile - if you want fixed deadlines, go waterfall. If you want iterative development, where you regularly shipping/demo progress to your customer and they keep updating their requirements then go Agile. Never combine the two!
Feb
18
comment Logging function names on systems with few (memory and space) resources
no, its just using RAII to ensure the equivalent of your #defines are set and unset correctly. People will make cut and paste errors in putting those #defines in, and then your logs will report the wrong function. Always happens.
Feb
18
comment What is the purpose of planning poker in a sprint?
In my experience sprint planning meetings go on for some time, and while discussing the stories is a good thing its something that doesn't need to be done up-front, it is better done continually.
Feb
18
comment What is the purpose of planning poker in a sprint?
The order of development is nothing to do with sprint planning, that's backlog planning... and its simply better to prioritise the entire backlog and tell the devs to work their way through in (roughly) that order And so it doesn't matter how many you'll get done in a sprint and how many spill over into the next sprint. The customer gets what he gets when the total time/budget runs out or until the backlog is completed. Planning it all will not change any of that.
Feb
18
answered What is the purpose of planning poker in a sprint?
Feb
18
revised Logging function names on systems with few (memory and space) resources
added 3 characters in body
Feb
18
answered Logging function names on systems with few (memory and space) resources