Reputation
7,016
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 20 38
Impact
~615k people reached

Apr
28
revised What advantages do continuous integration tools offer on a solo project?
Add addendum about the next 6 years worth
Apr
8
answered Advice: Switching to MVC from Webforms Web designer vs UI designer
Mar
1
revised Migrating large silverlight business application to MVC
Add another random thought
Feb
29
answered Migrating large silverlight business application to MVC
Feb
29
comment What cannot be unit-tested in mobile app?
@hotpaw2 there's a terminology problem here, this should not be a problem for "unit" testing as that's about units of functionality. However you're absolutely right in terms of the overall test plan which should attempt to reflect real world usage.
Feb
24
comment “Flexibility” - Multiple ways for users to do the same thing
I tend to agree - but not enough for a full answer. Basically the direction chosen currently ignores YAGNI and DRY and in any case I think most consumers want reasonably opinionated (prescriptive even) tooling assuming, of course, that the opinions are sensible...
Feb
23
answered Best practice for creating defined versions in git
Feb
23
comment Modern recommendations for password recovery
I'm sympathetic, but then the only secure thing is to not be connected to the network and to not have users... you can work round almost any reasonable security so its about balance of risk not about absolute mitigation.
Feb
23
comment Modern recommendations for password recovery
These are real and consistent use cases for me (not least because password resets seem to fall into spam filters). Pragmatically if you're using a mobile device then the IP change is highly likely and a lot of people use a mobile device. In the same context you can see that there might be a delay between requesting a change and being able to use the link and that you might change device - request reset on phone prior to getting in the car to drive home, respond to request at home on a device with a better keyboard. Easy to find common, realistic, cases.
Feb
23
comment Modern recommendations for password recovery
@all You need to go find Troy Hunt talking on the subject - he's better at this than I am erm, here: troyhunt.com/2012/05/everything-you-ever-wanted-to-know.html
Feb
23
comment Modern recommendations for password recovery
That assumes that I'm going to reset the password from the same location/device I requested the change - that the mail delivery will be immediate, that I can respond to said delivery immediately and that nothing has changed in the meantime.
Feb
23
comment Modern recommendations for password recovery
Only thing I would add is that don't, at any point on your website, own up to whether you recognise the email address or not. If you get a password request for an email you don't recognise the actions at the website should be the same as for one you do. You can reasonably send a different email (e.g. "not associated with an account, do you want to create one?"). Window for using the recovery link needs to be > 1 hour (speaking as someone who regularly has to go pull said links out of spam traps...)
Feb
22
comment Relational databases and iterative development
@Tibo you build the schema from scratch by running the same sequence of scripts. That's how you manage the problem. Given that as a standard you can get from any instance of the database - including one that doesn't exist yet - to a current schema and have confidence that its the same. There is no need to have two ways as per your example. (At least not given a consistent baseline - the first step is to establish the baseline and once you get to that baseline the problem goes away.)
Feb
19
answered Why not commit unresolved changes?
Feb
8
comment How to improve our source control process
Note that TeamCity can be the package repository i.e. the packaged artifacts from a build can be published directly in/from TeamCity with no need for any other server.
Jan
22
answered REST API vs directly DB calls in Desktop Application
Jan
22
answered Questions about developing for azure
Jan
20
answered How can I store incomplete records but enforce data correctness?
Jan
20
comment Combining GitHub and TFS / Visual Studio Team Services
What do you perceive you're getting from github that you're not from VSTS and git ? Assuming git across the board using both is not really a huge issue apart from discussions of how to keep it all neatly synchronised.
Jan
19
comment Why use XML in Android?
To agree and expand a bit - by "simpler" we generally mean a higher level of abstraction - it will (should!) take less XML to describe the desired result than it would take Java (or similarly XAML and C#) because the XML is in effect a domain specific language for layout etc. This should also mean that its easier to understand the intent i.e. layout from the XML than from the equivalent java code.