7,478 reputation
1544
bio website bill-landers.blogspot.com
location Ohio
age 38
visits member for 4 years, 2 months
seen Nov 9 at 19:29

.net developer


Sep
17
comment ASP.NET how to handle external application settings
Under what circumstances, and how often do these get changed? How do you currently deal with the differences in cache expiration over time?
Sep
17
comment Using JOIN keyword or not
I never encountered that, and searching with the asterisk never ends well, do you have an example?
Dec
6
comment I failed FizzBuzz, would you hire me?
I really don't want to hire someone that spends a lot of time analyzing stuff that the compiler or a quick execution can show you where you failed. More importantly, he didn't write something god awful like a 100 case switch statement. I can help someone code better, but I usually find it hopeless to try and teach someone how to think about the problem correctly.
Aug
19
comment What is it called when a website URL replaces WWW with something else, and what purpose does it serve?
Most browsers can do that with certificate scopes and such... There are a lot of reasons that you can do this, these are just the ones that happen the most and are explainable. Tokenized subdomains or CDN internals with shortest response DNS are another good use here, but explaining the how of that gets confusing to many people in my experience.
Aug
13
comment Cookie access within a HTTP Class
are you trying to build a fluent style request constructor or what? Knowing the end goal would be helpful. There is built in functionality for all of this and there has to be a reason you are avoiding / encapsulating it.
Aug
5
comment How do I manage the technical debate over WCF vs. Web API?
also remember that WCF can do json pretty decently in most cases as well
Aug
1
comment Why does the US government disallow dynamic languages for secure projects?
Honestly, my experience with these tools has generally been awful. Probably something along a 1/200 to 1/1000 rate of finding something actually worth discussing. Also, when I get a false positive that I know is something used in thousands of spots in the codebase or the framework and it has only identified it a handful of times I am not exactly filled with confidence. The problem is that you are effectively implementing a Negative proof when you build one of these tools unless you start out with a formal language like spec#.
Jul
12
comment Tools that can catch “fake coverage”?
peers rather than team leads... got it. I may be reading into the OP's issue to far, but I suspect to have enough of this problem that he is looking for tools to identify it then he does not have a majority of the team doing it in a trustworthy/acceptable manner. I had misunderstood and thought that you were single-handedly enforcing it on an uncooperative team of 30 which to my experience would be about a 15+ hr a day task.
Jul
11
comment Tools that can catch “fake coverage”?
so you are doing, on average, 10+ code reviews a day? or you assign ask 30 people to the same task, or I am not understanding you correctly. The way my teams tend to work you would have some really long days just to get 10 dine a day with no other work, and I really cannot imagine 30 people on what I consider a task not stepping on reach other
Jul
10
comment Tools that can catch “fake coverage”?
Are you saying the reviews are a few days work every sprint?
Jul
10
comment Tools that can catch “fake coverage”?
Pair programming in this situation would either amount to one of the pair being a test writer or a bunch of infighting. You need to examine the root issue unless you just want to pair each dev with a jr dev minion that only writes tests.
Jul
9
comment Implementing Digitally signed data in a Web Application
I missed your comment here until now. You answered my question, but to answer yours there are many cases where you might want a UI server to sign a message to a underlying system. I used to work on a fair bit of financial stuff that did things like this. The browser is the client to a webserver, but the webserver is a client so a service so there is a security concern at both tiers potentially unless you are running your production system in an isolated subnet. Did you ever come up with a solution you were happy with here?
Jul
1
comment Should testers approve releases, or just report on tests?
in addition to maple_shaft's point I often see the final call on this left to whoever is in the customer role unless there is something terrible identified. it is ultimately their deliverable and they are most likely to have the right point of view on risk assuming your provide them with accurate information.
Jul
1
comment Should testers approve releases, or just report on tests?
my experience with testing teams has lead me to fall on the other side of this. To me QA should have no expectation of being able to block a deploy without making their case to the rest of the team or getting the owner to override the team.
Jul
1
comment Should testers approve releases, or just report on tests?
in addition to what Jan said, in many methodologies there would be schedule or cadence here. some folks deploy every candidate that survives the initial smoke test to UAT, some auto deploy anything checked into the candidate branch, some everything that is checked into main. ideally you have been showing the stakeholders progress as you go somehow so there shouldn't be much of a surprise at the end. in some of these cases you end up showing the stakeholders what the QA people have been dragging you through the coals on and they just say "who cares" and it is over.
Jun
17
comment Is using subprocedures to logically separate my code a bad idea for structured programming?
@DanPichelman while it is for a different reason these days there are still places where there is a noticeable cost either in performance or complexity. Heavy iteration in .net for example can be faster under the Linq variants (.foreach(x=> ...) rather than the old foreach(x in y) let alone PLinq) because of the reduction in overhead and better optimization and throwing subs in there can detract from that. From the tone of the question I doubt this is the case here, but the idea still exists for some modern uses.
Jun
12
comment Implementing Digitally signed data in a Web Application
I have never done it that way, but if the service endpoint you were posting to was requiring a client certificate and the remainder of the site was not I think you would achieve the result you are looking for in that regard. That is why I specified the client cert part on the service endpoint only.
Jun
10
comment Implementing Digitally signed data in a Web Application
Just to make certain I am reading this correctly, your requirement is to do the signing on the client end in their browser before the initial post? or just that it is signed by the time it reaches the underlying accounting/transaction/batch system?
May
21
comment Is it completely impossible to have total separation without leakage of any kind in a design?
In the one service you have an IoC, in the other service you have whatever serialized representation that any other client calling a service would have, they are two different things. Also at this point I am going to point out like the other folks, you are probably making this issue more difficult by trying to define Unit of Work in an unnatural way.
May
20
comment Is it completely impossible to have total separation without leakage of any kind in a design?
I may not be following you correctly, but: If you are writing everything into the service layer then the only thing you should be repeating is the device/format specific UI interactions with the services. I am not certain I would want a phone app with ALL of it's business logic on a remote server, but if that is what you are doing then the only thing that sounds weird is that your service is not designed for the lowest common denominator.