446 reputation
410
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 3 years, 9 months
seen Jun 20 at 12:49

Security expert and experienced Windows programmer


Aug
23
comment Should a stack trace be in the error message presented to the user?
Wow. Just... wow. "Unfortunately there has been some kind of "Security audit"" - Seriously? What kind of attitude is that? The security audits are for your benefit - to make your systems better, to find the problems before the bad guys do. You should really consider trying to work with them, not against them. Also, you could try to get more information on the security PoV over at Information Security.
Aug
23
comment How to explain that sample size does not influence project length
@ScottWhitlock no, because there are inherently two parts: building + traffic. The requirements may change the building slightly, but the linearly-affected traffic part is the much smaller of the two.
Aug
23
comment How to explain that sample size does not influence project length
As @MarkJ said, this analogy doesnt quite work. Because the purpose of the project isnt "building a road", it's "getting 1000 car to the other end" (or 1000000). I believe I gave another car analogy that works a bit better.
Aug
23
answered How to explain that sample size does not influence project length
Jun
8
awarded  Caucus
Feb
22
awarded  Civic Duty
Oct
22
awarded  Yearling
Jul
25
comment The difference between best practices and common sense?
Oh, and if you're not familiar with the best practices, you don't have common sense, either.
Jul
25
comment The difference between best practices and common sense?
Cognitive bias... again. And that's why you need to be an acknowledged expert, before you rely on your common sense...
Jul
25
answered The difference between best practices and common sense?
Jun
28
awarded  Citizen Patrol
Jun
14
comment Dealing with a developer continuously ignoring edge cases in his work
@ironcode you are correct(ish), in Microsoft for example there is a whole different set of roles (with a parallel career plan) for SDET - Software Development Engineer in Test. I said "-ish", because some of them are really good, not necesarily inexperienced or less competent.
May
11
comment Why is Google blocking users from accessing their local file system in Chromium?
If you want, you can try this over at security.stackexchange.com
Apr
27
comment Source code stolen\hacked by rival company
@Viktor, consider moving this to IT Security.
Apr
12
comment What do programmers at security firms do?
it sounds like the company you work for consistently cheaps out and takes the hacks, who talk a good game but don't really get the point. Besides myself, and the other answerers here, I have worked with, and trained, many that do it right. Admittedly, I've probably met more of the kind that you've had, too...
Mar
18
awarded  Critic
Mar
2
comment Convince developer to use IDE
I think Bill should go one step further, and fire John himself. Don't wait around for it happen by itself... Also, I'm curious how this wasnt discovered during interviews?
Feb
17
answered Which online/hosted bug tracking tool do you use for your own work and projects?
Feb
10
comment What are some good practices before checking in source code?
@pydave you could, and you should - but you don't have to, since it's not that important. In fact, some say that you should commit before you start testing and such, just like you would always save beforehand. This way, there is a record of what you originally wrote, what was wrong with it, how you fixed it, etc. But in general I would agree with you, though that's mostly because my head isnt completely wrapped around DVCS yet...
Feb
8
comment What are some good practices before checking in source code?
@Robert, I agree about Kiln - actually, that's what I'm using, and it is FANTASTIC. Of course, the integration with FB doesn't hurt...