News for hackers. Stuff that matters.
Re:The Importance of Humility in Software Development (2020) by tored on Wednesday May 12, 2021 @06:01PM (#27135689)
Web consists of strings, not types. Somewhere in your pipeline you have string-to-type, if you don't do that correctly you will either have data loss, injection or xss, true for every language.

It is true that some languages makes it easier to go string-to-type than others, but I can do all of that in PHP by creating my own types too.

Re:The Importance of Humility in Software Development (2020) by chriswarbo on Wednesday May 12, 2021 @07:19PM (#27136401)
Web consists of bytestreams, not strings. Somewhere in your pipeline you have bytestream-to-string, if you don't do that correctly you will either have data loss, injection or xss, true for every language.

It is true that some languages makes it easier to go bytestream-to-string than others, but I can do all of that in PHP by creating my own types too.

---

Web consists of bitstreams, not bytestreams. Somewhere in your pipeline you have bitstreams-to-bytestreams, if you don't do that correctly you will either have data loss, injection or xss, true for every language.

It is true that some languages makes it easier to go bitstreams-to-bytestreams than others, but I can do all of that in PHP by creating my own types too.

---

Web consists of voltage fluctuations, not bitstreams. Somewhere in your pipeline you have voltage-fluctuations-to-bitstreams, if you don't do that correctly you will either have data loss, injection or xss, true for every language.

It is true that some languages makes it easier to go voltage-fluctuations-to-bitstream than others, but I can do all of that in PHP by creating my own types too.

---

Web consists of excitations of the electromagnetic field, not voltage fluctuations. Somewhere in your pipeline you have excitations-of-the-electromagnetic-field-to-voltage-fluctuation, if you don't do that correctly you will either have data loss, injection or xss, true for every language.

It is true that some languages makes it easier to go excitations-of-the-electromagnetic-field-to-voltage-fluctuations than others, but I can do all of that in PHP by creating my own types too.

---

Web consists of entanglement of energy quanta, not excitations of the electromagnetic field. Somewhere in your pipeline you have entaglement-of-energy-quanta-to-excitations-of-the-electromagnetic-field, if you don't do that correctly you will either have data loss, injection or xss, true for every language.

It is true that some languages makes it easier to go entanglement-of-energy-quanta-to-excitations-of-the-electromagnetic-field than others, but I can do all of that in PHP by creating my own types too.

---

...

Re:The Importance of Humility in Software Development (2020) by tored on Thursday May 13, 2021 @02:58AM (#27139214)
Nice to see that you agree with me that the web does not consist of proper types and you as a programmer must make that choice. You have your custom library that makes this happen and that is something you and your team has implemented.