network profile
| bio | website | nathanlongmusic.com |
|---|---|---|
| location | Charlotte, NC | |
| age | ||
| visits | member for | 2 years, 6 months |
| seen | May 10 at 18:14 | |
| stats | profile views | 157 |
I code mostly in Ruby and Javascript, though I still have to bring out the PHP skills now and then.
I like pineapples.
|
May 10 |
comment |
My customer wants me to record a video of how I develop his software product "How to explain to him that it is not an usual practice for the freelancers to record the videos of their daily work" A link to this page will do nicely in the future to demonstrate that nobody else will be willing to do this, either. |
|
Mar 28 |
awarded | Notable Question |
|
Mar 2 |
answered | Why shouldn't a GET request change data on the server? |
|
Jan 18 |
accepted | How would you assess a programmer's Github profile? |
|
Jan 11 |
comment |
Why is it often said that the test cases need to be made before we start coding? "it forces you to think about your code from a perspective of testing": yes, which means "as a user of the code." You can write your tests as though you had easy-to-use code and then write it that way. This includes things like "but I don't want to do a bunch of test setup", which will push you to fewer dependencies. |
|
Dec 5 |
answered | How do you balance between “do it right” and “do it ASAP” in your daily work? |
|
Dec 5 |
comment |
How do you balance between “do it right” and “do it ASAP” in your daily work? I'd say this is true only if by "emergency" you mean "something that happens no more than once every six months" and by "when you have time" you mean "within a week or so". Otherwise your follow up question becomes "help, the client needs something ASAP, but the code I have to change is a confusing mess and it will take me weeks to sort out!" |
|
Nov 27 |
comment |
How to implement a safe password history @mattz - good point about a note in a wallet. A note stuck on a monitor in a publicly-visible area is another story. My point is, consider how people are likely to cope with a password policy and whether the end-result may be worse. |
|
Nov 27 |
comment |
How to implement a safe password history @KevinVermeer - Sorry, I wasn't clear; I was assuming we'd check edit distance only between the old and new passwords, both of which we have in the clear, as Brian suggested, and otherwise check that they didn't reuse an exact previous password. I agree with you that generating all possible similar passwords, hashing them, and seeing if any of them match any previous password hash is unacceptable. But it's what the "can't be similar to any previous password" requirement pushes you toward - that, or not hashing the passwords, which is very bad for security. I just think it's a bad policy. |
|
Nov 27 |
comment |
How to implement a safe password history I'm very skeptical that such a password policy improves security; IMHO, it increases the chances that people will resort to keeping their password on a sticky note. Kevin's link is a good discussion. @KevinVermeer - you actually can measure the amount of change as Levenshtein distance (en.wikipedia.org/wiki/Levenshtein_distance), also known as "edit distance". |
|
Nov 27 |
comment |
How to implement a safe password history Yes. If their current password is potatoSalad1 and they want to update to potatoSalad2, you tell the change is too small because you have both plain text passwords at that moment. But further back than that, you have only hashes, and the nature of hashes is that you can't tell whether two hashes had similar or completely different plain text as input. |
|
Nov 19 |
comment |
When do you typically write a software module yourself vs. buying an existing product? What about option #3, "use an open source library?" That can actually be a compromise, because you can tweak it to your needs. |
|
Nov 13 |
awarded | Nice Answer |
|
Nov 8 |
comment |
Why is Java version 1.X referred to as Java X? @haylem - "your speed of incrementing version numbers is too fast or too inconsistent" is arguably bad. "I don't know which version you mean when you say version 2" is definitely bad. |
|
Nov 6 |
awarded | Yearling |
|
Oct 23 |
comment |
“Never do in code what you can get the SQL server to do well for you” - Is this a recipe for a bad design? @JimmyHoffa - I wasn't asserting that you couldn't; I just wanted to know how you have done it. :) I'm on a different tech stack than you, but I'm sure we could do this if need be. |
|
Oct 23 |
comment |
“Never do in code what you can get the SQL server to do well for you” - Is this a recipe for a bad design? @JimmyHoffa - if your business logic is in the database, how do you keep it under version control, update it on deploy, etc? |
|
Oct 23 |
comment |
Why didn't “cloud computing” offer appear earlier? Yes. The internet was invented to solve the problem "how do we let researchers in different locations share their expensive computing resources?" The books "Inventing the Internet" and "Where Wizards Stay Up Late" tell the story. |
|
Oct 22 |
awarded | Nice Question |
|
Oct 21 |
answered | Is perfectionism a newbie's friend or enemy? |
