News for hackers. Stuff that matters.
[dead]
Re:When security goes right by thaumaturgy on Thursday December 25, 2014 @11:37PM (#8798066)
I'm a PHP programmer too. I've also been a C, C++, Pascal, WFL, COBOL74, 68k assembly, etc. etc. etc. programmer for the last 30ish years (and paid off and on for it for almost 20 now, by all kinds of different places). I also founded a local developer group, and I certainly wasn't the least knowledgeable guy there when it comes to application security.

I get that you didn't intend it as an insult, and you probably didn't have people like me in mind when you made that comment. However, the relatively recent "PHP programmers are stupid" thing has so turned me off to any kind of programming discussion that I now habitually avoid any discussion of programming at all -- for the first time in all my years as a programmer.

Re:When security goes right by mikegioia on Thursday December 25, 2014 @11:52PM (#8798093)
Thank you! I just sent a long email to the HN moderators about this very issue. This pervasive anti-PHP mentality is rampant and actively discourages me (and other PHP devs) from contributing.
Re:When security goes right by mikegioia on Thursday December 25, 2014 @11:22PM (#8798031)
I can't believe I have to say this to you, but suggesting there's a "strong correlation" between PHP developers and idiots is a complete insult. It's actually bigotry in action. To further suggest you held back a better solution because you assumed the PHP developer was too stupid to understand file hashing is both another insult and bad practice.

It doesn't matter if there's 10 or 10 million PHP developers, it's still insulting. You sell a product online, and you've now alienated a large developer community. I'll never recommend or sign up for tarsnap now.

Re:When security goes right by cperciva on Thursday December 25, 2014 @11:29PM (#8798049)
To further suggest you held back a better solution because you assumed the PHP developer was too stupid to understand file hashing is both another insult and bad practice.

It wasn't a better solution. It was one of many alternatives which came to mind; but I offered them the best solution (serve the graphs from a PHP script) and the easiest solution (run a cron job to delete the old graphs).

Re:When security goes right by SamReidHughes on Thursday December 25, 2014 @11:50PM (#8798090)
Using PHP is a choice, it's not innate. You are not defined by the programming language you choose to be.
Re:When security goes right by sarciszewski on Thursday December 25, 2014 @11:03PM (#8798002)
--$respect['cperciva'];

The implication in your word choice came across as unfair and elitist.

> EDIT: To elaborate: I'm definitely not saying that all PHP developers are idiots. But PHP is a much easier language to learn than many others, so it gains a lot of users at the low end of the ability spectrum. There are just as many talented and security-aware Windows users as there are talented and security-aware Debian users, but there are far more untalented and security-unaware Windows users.

Okay, that's a fair statement. I thought you were calling ME an idiot :P

Re:When security goes right by cperciva on Thursday December 25, 2014 @11:22PM (#8798030)
I thought you were calling ME an idiot

Not at all. Until now I didn't realize you were a PHP developer.