News for hackers. Stuff that matters.

NotDaveLane

Maybe the people working at YouTube still have a moral and ethical responsibility to minimize the spread of disinformation.
Re:Ask HN: Who is hiring? (July 2019) on Monday July 01, 2019 @03:39PM (#20328958)
SEAS Education | Ruby on Rails Developer, Senior C# Developer | Conway, AR | Full-time | Onsite, Remote

For over 20 years, SEAS has enabled teachers to spend more time with their students and less time on administrative paperwork. We provide staff with the tools to identify individual student learning deficiencies, create individualized goals and objectives for a student, and track student progress as they receive specialized learning services.

Ruby on Rails Developer: https://www.glassdoor.com/job-listing/ruby-on-rails-develope...

Senior C# Developer: https://www.glassdoor.com/job-listing/senior-c-developer-sea...

Re:Ask HN: Who is hiring? (October 2014) on Wednesday October 01, 2014 @03:22PM (#8397044)
Metova | http://metova.com/ | .NET Developers | Little Rock, AR area

3+ years of VB and ASP.NET experience is desirable, but we value intellect over experience. Work out of our Cabot, AR office and build software that is used in school districts across the country to help children with special education needs.

More information: http://metova.com/jobs/net-web-developer/

As a consultant, I've seen a fair share of people building their own "ultra-secure" authentication, authorization, and encryption algorithms. One project simply took plain-text passwords, Base64-encoded them, reversed the result, and called the passwords "encrypted". Plenty of others would execute raw SQL without validating user input. This is an education problem.

Last winter we saw Ruby on Rails vulnerabilities that likely came about because the focus of the Rails framework has not traditionally been security. Rails is "optimized for programmer happiness". I'm cool with that, just know what you're getting in to when you choose to adopt a new framework (stay up to date with security patches and otherwise secure and monitor your web servers as best as you can). Any new framework that becomes widely adopted will likely go through the same type of problems.

With all of that said, I learned nothing about code security until I had to. University did not really touch on it, so most of my education on security came later in a workplace setting when I desperately needed it.

1. Weather 2. Water availability 3. Antibiotic effectiveness
Re:Choosing a Programming Language for Interviews on Wednesday February 05, 2014 @01:40PM (#7185760)
Or... Have people use whatever they want so long as they are able to communicate their ideas, and move the focus to ensuring that they understand how software development works. You can teach syntax much more easily than you can train someone to think like a programmer.
That was meta.

Older »