yeahbutbut

8 yıl öncediscuss

> This basically was at its root a "theory" vs. "getting it done" argument.

Because worse is better. https://www.jwz.org/doc/worse-is-better.html

yeahbutbut

9 yıl öncediscuss

>> my house is no longer filled with endless cardboard boxes.

> You can throw in in the trash, you know :)

I prefer to build forts for my cats out of my leftover boxes.

yeahbutbut

9 yıl öncediscuss

You're the one deciding what you need out of the material so that's up to you ;-)

yeahbutbut

9 yıl öncediscuss

I was trying to be punny by implying indecision...

edit: also thanks for the link :)

yeahbutbut

9 yıl öncediscuss

Maybe.

yeahbutbut

9 yıl öncediscuss

That should probably be based on access patterns, not on mutability flags. If it's "archived", but has 1K downloads a day it should be in cache.

yeahbutbut

9 yıl öncediscuss

Do people really click on ads on purpose?

yeahbutbut

9 yıl öncediscuss

Found the emacs user! ;-)

yeahbutbut

10 yıl öncediscuss

> If you attempt to read the script in your browser first, and everything's great, then go pipe to bash, the server can send alternate content based on your user agent.

curl | less

Or copy the request "as curl" from the network tab of any modern browser.

yeahbutbut

10 yıl öncediscuss

How did you handle shared writable storage and databases?

yeahbutbut

10 yıl öncediscuss

They could be a shelf full of $2 novels. Owning a few hundred books doesn't cost very much (thanks printing press), and only implies an interest in reading not in being of a high socioeconomic status.

yeahbutbut

12 yıl öncediscuss

That strikes me as being less about controlling the message and more about making sure that the people entering the library know how to handle manuscripts that old (especially the part about not allowing undergraduates...). Digitizing the works opens them up to everyone anyway so it's not as though they're withholding anything for reasons other than lack of the resources to digitize the entire collection (hey, contribute!).

If they wanted to hide something it wouldn't be in a library anyway, it would have been burned or stashed in a private vault somewhere.

That quote seems more like standard preservation concerns, and exactly what I would say if I had a museum of 400+ year old paper documents that I didn't want destroyed by people without adequate respect for their history.

yeahbutbut

12 yıl öncediscuss

It depends on what you mean by "supports". If you use myisam or need DDL statement rollback MySQL is still not a great option.

http://wiki.postgresql.org/wiki/Transactional_DDL_in_Postgre...

http://dev.mysql.com/doc/refman/5.7/en/implicit-commit.html

yeahbutbut

12 yıl öncediscuss

> f.ex. where did the fixed width files come from?

Encrypted and signed files sent over the wire from a company we do business with. Additionally I was just pairing the values up with local names that I chose (the fixed width file had no column names itself, they sent us a word doc (ugh)). And the function that called extract had exactly one local, the array I built representing a row from the file (unused after the initial call to extract).

Extract also lets you prefix the extracted vars, avoid overwriting name collisions, etc. http://php.net/extract

The code from this article is unsafe because it directly operates on user input, was not explicit about what values were required (you can filter an array by key easily enough...) and doesn't isolate the environment it's extracting in. That's the unsafe behavior.

yeahbutbut

12 yıl öncediscuss

You're right, let is a macro so you can't pass binding forms from a variable, my mistake. But surely Scheme has some function for binding variables to the local scope...

My point is that trusting user input is the error, not having the ability to play with the scope.

yeahbutbut

12 yıl öncediscuss

> "Let's make a function that has the side effect of introducing variables into scope. That's a great idea."

And ``let'' is? ;-)

Doing a (let [request] (check-auth ...)) would be equally dumb. Let's not blame the tools.

yeahbutbut

12 yıl öncediscuss

I've found exactly two:

Ghetto templating (using a PHP file as a template). Extract an object from the database into local vars to echo in the "template".

Parsing fixed width files, zip the columns with their names, then extract in the processing function.

In both cases you know exactly which vars are being replaced. The real WTF is extract on $_{REQUEST,GET,POST,SERVER,...}.

yeahbutbut

12 yıl öncediscuss

For two options, almost certainly not ;-)

For N ports, or for a port list defined from a config file however it could be. It's even nicer in python:

    ports = [80, 443, ...]
    if port in ports and http:
        ...

Or with underscore:

    var ports = [80, 443, ...];
    if(_(ports).contains(port) && http) {
        ...
    }

Good collections make it better than manually checking the return code or checking an explicit set of port values. Also configuration > magic_nums.

yeahbutbut

12 yıl öncediscuss

And so far everyone has missed telling the poor OP how to avoid writing two equality checks...

    if( [80, 443].indexOf(port) !== -1 && http === false )

yeahbutbut

12 yıl öncediscuss

The problems can be solved in other languages, the tools are just clunkier. Lisp lets you solve the hard problems simply, and the solutions (not their expression) are what matters.

comments