2,702 reputation
11224
bio website schlueters.de
location
age
visits member for 2 years, 9 months
seen Jul 6 at 10:45

Software Developer at a large international IT corporation, working on databases and programming languages, sometimes digging into other things. Can often be found riding one of his bikes.


Jun
10
comment How does session middleware generally verify browser sessions?
Use http only sessions (no javascript based exploits that easily), use https (harder to intercept cookie), regenerate often (short time frame for attacker)
Jun
10
comment How does session middleware generally verify browser sessions?
IP addresses change constantly - I switch between Wifi and mobile networks as I go and expect services to continue etc. and simulating HTTP headers to claim to be the same browser is the first thing an attacker does ;-)
May
4
comment Computer Science and the IT industry
Mind that Oracle sells HR and payroll software, so the ones developing those are most likely in their R&D department ;-) (but I'm aware of nitpicking here)
May
1
comment Where can I find “SVN for Git Users” resources?
In short: a) there is no index, b) svn up = git pull, c) svn commit = git commit && git push d) branches are emulated by directories ... ;-)
Apr
16
comment Is it common for the founder of a web app to lack technical expertise to scale it?
@ArTs and others lost as they spent too much time on making their architecture "scalable" instead of bringing value to the user ;-) you have to navigate your path ..
Apr
11
comment people fork my project but don't fetch from upstream - what can I do?
Even when open sourcing it it is valid to ask for social rsponsibility. That asside I don't see the big issue: The fork links to the upstream repo, anybody who can judge the code should be able to follow.
Apr
9
comment What is the coding standard for a long parameter list?
Aside from picking a style: Tryy to avoid this, wrap them in an object or use creator pattern or something
Mar
30
awarded  Booster
Mar
25
comment Is displaying an HTML email a security risk?
@GlennNelson hopefully no mail client executes javascript, but the question was about "dumping the email content into a <div>". Simply dumping the HTL mail in a <div> in a web mailer will execute javascript which is embedded in a mail.
Mar
25
comment Is displaying an HTML email a security risk?
Some limit to plain text or very limited HTML, many are broken :-/
Mar
25
revised Is displaying an HTML email a security risk?
added 1 characters in body
Mar
25
answered Is displaying an HTML email a security risk?
Mar
24
comment Are header files actually good?
Also ind that C++ headers not only contain the "ovious" public interface, part of that interface is also the object size, thus all private members and for templates even the full implementation ..
Mar
21
answered How to write descriptive conditionals for ifs?
Mar
3
answered What exactly is Virtual Machine Bytecode?
Mar
3
comment Usage of mix licensies in commercial use
"But the GPL only applies to distribution of software. When you provide the software as a service, you don't distribute the software." -- mind that one is still distributing the JavaScript code, thus if a JavaScript uses GPL this might affect all other JavaScript parts (depending on legal interpretation of derived work in interpreted languages)
Mar
1
awarded  Announcer
Mar
1
comment Was there ever a serious push for partial classes in java
@radai well, the language could add support for that instead of partial classes, I think this could become cleaner
Mar
1
comment Was there ever a serious push for partial classes in java
Another approach might be traits/mixins en.wikipedia.org/wiki/Mixin
Mar
1
answered Java for a perfect Media Player?