359 reputation
316
bio website gaman.pl
location Upper Silesia, Poland
age 35
visits member for 2 years, 3 months
seen Jul 4 at 10:05

I'm just an average person, that uniquely combines strict, engineering mind with a non-schematic, humanistic and magical way of looking on life and surrounding world.

Add a little bit of madness, and you'll get entire picture of me! :]

I'm a developer, both desktop and mobile, with 15+ years of experience and 50+ small-to-big projects on account. In the very same time I'm a writer with similar experience and a lot of books, articles, blog posts or own blogs ideas on account.


Jun
28
comment Translating views in MVC
I don't know, if I can expect better, more professional and straight-to-the-point answer. Thank you.
Jun
22
comment MVC Best practices (view acquiring data directly from model) and Yii Framework
I have just realized, that I based my question on completely wrong assumption and therefore I made myself an complete idiot! :]
Jun
22
comment MVC Best practices (view acquiring data directly from model) and Yii Framework
Thank you for your effort in trying to answer my question, however I have just realized, that I based my question on completely wrong assumption and therefore I made myself an complete idiot! :] Voting to close/delete my own question.
Feb
25
comment What data should QR-Code contain to serve both my own and external QR-Code reader
So, it seems, that encoding URL in QR-Code and stripping anything, except code, if such URL is decoded by "own" scanner is the only way to satisfy users using both external and built-in QR-Code scanners. If you agree, then consider to reformulate your comment to full-featured answer, so I can accept it and bring you some reps.
Feb
24
comment When should I pass setting-like value as class' variable and when as an assoc. array?
Thanks for a great answer. Do you have any source of this "good practice"? I can't understand, how using extra constants for keys in assoc. array could benefit code or me?
Feb
4
comment Security through obscurity and storing unencrypted passwords
I agreed with Phoshi, that in general definition, poor encryption is by far worse than no encryption at all, because it is only an illusion of real protection. But, don't forget, that in my simple, private manner it is exactly opposite. Since, I share my software with my friends, I would prefer to have my Google Account password encrypted. But, as we all agree, I can't expect mentioned program author to change general point of interest toward my personal case. Thank you all for participation in this very interesting discussion.
Feb
3
comment Security through obscurity and storing unencrypted passwords
@Phoshi OK... I see your point. Thanks! :]
Feb
3
comment Security through obscurity and storing unencrypted passwords
@Phoshi Well... ignorance is the key to the world! :> Again, from general, attack-scenario point of view, you're right. But, In my private case, you're not. My friends got access to my FTP (using passwords!), to my software and... to my Google Account password. I don't like that. I don't care, if this is StO. I don't care, if a hacker could break that encryption within 10 minutes. For me, personally, in this case, having password encrypted is way better, than not having at all. Now, I have to decide, stop using program or let my friends see my GA password. There is no hacker in this equation.
Feb
3
comment Security through obscurity and storing unencrypted passwords
I still don't get you (need coffee!). Only because this example falls under StO definition, it is OK, that anyone can have access to my Google Account password, stored in some creepy program in a plain-text without any encryption. Only, because it would took you 10 minutes to break that encryption, there is no need to implement it? How then I can protect my Google Account password, on system as insecure as Windows? Stop using this program at all or face the fact, that it stores my password (not to program itself, but to well known service) insecure? I must be missing something very obvious.
Feb
3
comment Security through obscurity and storing unencrypted passwords
@Phoshi That's your point of view and I respect it. However, you haven't convinced me to change my mind. I think your ship is going quite a wrong wave. Since I'm giving any program my Google Access password, it is that author's responsibility to keep it secure. It has nothing to do with securing (or not) my backups. I repeat once more. If that would be password used only to that program, I would agree with yours and Yannis argumentation. But since this is a external, 3rd party service (Google Account) password kept insecure, I again say, that this is very, very wrong to put it to plain text.
Feb
3
comment Security through obscurity and storing unencrypted passwords
Look at my comment-based discussion to above answers. I'm a semi-pro computer geek with 20+ years of experience, but I would most certainly fail to do, what you wrote, not only within 10 minutes, but also within 10 hours. But I wouldn't fail to read password out of unencrypted, plain-text configuration file. Plus: we're talking about storing passwords for external service (Google Account), not internal, this-program only passwords, which changes the case a little bit in my opinion. Plus, read about non-atack scenario above, where my friends are getting access to my GA password, by accident.
Feb
3
comment Security through obscurity and storing unencrypted passwords
@Phoshi No way! If password would be encrypted and someone would gain access and run that program, all he or she could do, would be to download some *.apk files (Android's applications installation files), because that is all this program is able to do. With storing unencrypted, plain-text password, anyone who has access to my ZIP file / program can do anything with my Google Account. Do you now see my point?
Feb
3
comment Security through obscurity and storing unencrypted passwords
@YannisRizos Again, in general, you're right. In details, I think you're wrong. Read first sentence of my question. We're talking about program that helps me manage my Google Account. And it kepts my Google Account's password unencrypted. So, in this particular case, attacker only need access to configuration file, to gain access to my Google Account. It does not need access to the tool itself! If I'm getting you right, your logic would be complete and correct, if that tool would store its own password unencrypted. But it stores external, 3rd party service's password completely insceure way.
Feb
3
comment Security through obscurity and storing unencrypted passwords
It seems, that your point of view is centralized on attack scenario ("If someone has access..."). In this point of view, I agree with you. But, try to look my way. This is a Windows program. I occasionally archive (backup) software, that I use, on my home server. I granted access to this server to about 3-5 my close friends. This program hasn't got any installer, it is just zipped. So, my password is stored there, unencrypted. Though I like my friends really much and trust them (that's why they do have access) I don't want them to unzip this program and see my password. Period.
Dec
16
comment Program unable to write data (read-only file) and losing it — a bug or a feature?
@Bobson Sorry, but I think, I didn't underlined that enough. How we're going to name this particular case, will lead us to an answer, whether program's author should or shouldn't fix it? Calling it a "bug" would insist fixing it. Calling it "poor design", "bad user experience", "feature request", "UI suggestion", "error recovery" could be easily "shot back" by program's author, that he doesn't share this feeling and isn't going to fix this. This is the key in my question -- whether such thing should or shouldn't be fixed?
Dec
16
comment Program unable to write data (read-only file) and losing it — a bug or a feature?
@all: I thought my question would bring a little bit more interest. But a downvote is something, that actually surprised me. Would the downvoter take care to express, what he or she doesn't like in my question?
Dec
16
comment Program unable to write data (read-only file) and losing it — a bug or a feature?
Thank you for a short, but explain-everything answer. Person, I'm referring to, forces me to call it a "feature", not a "bug", because that takes the pain of fixing it out of his shoulders. Would this be, what you call "contractual obligations"?
Nov
12
comment The clock problem - to if or not to if?
@GlenPeterson Thank you for providing answer opposite to others. Though Mason Wheeler's and others' answers did changed my point of view (previously it was similar to yours), it is always a great added value to the discussion, if someone cares to show different opinion. Thanks, again!
Nov
12
comment The clock problem - to if or not to if?
Thank you for providing great answer and reminding me, what I know quite well, only in different version: "Premature optimization is the beginning of all hell!" :]
Nov
12
comment The clock problem - to if or not to if?
@lwburk Congratulations on using words like "silly questions" and other hard-and-nearly-offensive language, while having only 101 rep in the very same time. I could say quite the same to all those "experienced developers" (like you?), that simply forgot, that once upon a time, long, long time ago, they're also newbies asking only silly, if not stupid questions.