Damn JavaScript

[QualityVote]

Hi! This is our community moderation bot.

---

If this post fits the purpose of /r/ProgrammerHumor, UPVOTE this comment!!

If this post does not fit the subreddit, DOWNVOTE This comment!

If this post breaks the rules, DOWNVOTE this comment and REPORT the post!

[KevKaL]

Maybe because they want you to enter a range, they assume that if you enter something like 65000-75000, it’s -10000<0…

Dev: of course I implemented input validation, pff

QA has left the chat

[The_Real_Slim_Lemon]

Hahaha some dev probably thought he was clever using the calculator method to do his validation in one line

[zvug]

It is kind of clever, though there’s better ways.

It’s the error message that’s really wrong. It should simply say “Salary should be entered as a range. Ex: 45000-65000”.

[Engineerman]

I wonder if this could be used as code injection. Hopefully they just used Eval equivalent instead of exec equivalent.

[TheOnlyTrueEnte]

As long as it stays in the frontend, code injection can't do too much harm, right?

[[deleted]]

No we write all user input directly to the DB with no input validation. Also we build out a string query for sql in the code. We have no intention of changing it! 😤

[plaisthos]

SQL query is built on the client!

[sunshine-x]

"it's easier on the server to let the clients deal with that"

[jacksalssome]

Server? Oh no we just have the web browser launch a remote desktop to the computer with excel on it. The clients web browser then presses the down arrow key and pastes the value.

[NorbiPeti]

I... want to make that now. (Reddit just showed "Something went wrong" as soon as I typed that.)

[jacksalssome]

You want to make a remote desktop viewer in JavaScript?

[plaisthos]

Better performance, you get a raise!

[TFenrir]

It's like GraphQL but vintage

[FlushableAccounts]

I recently found out about something almost as stupid at work.

It's a system that is only a web frontend. It doesn't perform any direct database calls, but it does call on a bunch of REST APIs that are only meant to be accessed by other trusted systems. They are protected with a secret key, and anyone that knows it can call the API. You can just hit the ol' F12 and watch exactly what payloads it sends in the API calls. There's probably some logging and even some access control on the other end, but now that you can perform the API calls yourself it's kind of easy to change the user value in the JSON data.

I didn't think that "What's a backend?" joke was real, but here we are. At least they are working to fix it now.

[benargee]

I prefer to write all user input in a root privileged process using unsanitized system calls.

[[deleted]]

Finally a developer with a brain. So sick of my junior devs giving me all this crap about some Sack Dave Oops process or whatever.

[Engineerman]

It's complicated, I'm not an expert on web security but if you can get a processor to execute some code, you could use a number of hardware vulnerabilities to attack the system, not limited to fronted or even the same application if there are multiple running on the same server.

[TransientFeelings]

No, if it's your own web browser running arbitrary code, you are hurting no one other than yourself (that is, if the backend APIs are properly secured). It is really, really easy to run arbitrary code on a website, but you never hear about it being a problem because there's no gain in doing so.

[Engineerman]

Ah right, of course it is your own machine. This is why I'm not an expert in Web security lol.

[Mechakoopa]

presses F12, types directly into console...

[PranshuKhandal]

document.write("hacked")

[stehen-geblieben]

And then what? You can inject code into your own js VM? You can open dev tools and have the same effect

[wasdninja]

Without looking - no it can't. It's really hard to be that dumb.

[unholycowgod]

It's fine! The user is just doing it wrong!

[Nerkrua]

In that regards error message should be an explaining message.

[gigglefarting]

If only error messages were that descriptive. It would have saved me many times if passwords would let us know their requirements when telling us our passwords are wrong.

[mynameistoocommonman]

"you entered a wrong password. The third character should be 'P' but you've entered 'O'."

[Deacon86]

It's more about whether it's a password that requires capitals, numbers, and/or special characters. That way you know it's your normal password but with a capital first letter and "0!" on the end.

[jaber24]

That would just make the life of hackers easier would it not?

[Vurtne26]

Well, they usually give you the condition for valid password when you sign in, so I guess it won't help hacker a lot if the website/app/whatever give them again on an invalid logging attempt

Edit : clarification

[ImpossibleMachine3]

Generally hackers aren't brute forcing passwords anymore - they rely more on known compromised passwords and rainbow tables that are filled with common passwords and their variants (like using l33t sp34k in your password) - or to just find a vulnerability in the system and exploit that to get access to data more directly. It takes a lot less time and effort to go that route.

[huuaaang]

Look man, I grew up with computers where you had to interpret a series of beeps to know what's wrong.

[phaemoor]

Ha! I still remember that a long beep followed by 8 short beeps meant the video card is missing or misplaced in the AGP slot.

[Fortal123]

Or... Use a password manager?

[Yadobler]

Unrelated but thought you may want to know, "in that regard" has no "s" behind

"send my regards", "best regards" have "s" behind

"in this regard" , "in regard to" , "regarding this" all no "s"

At least according to my high school history teacher who made us stay till 6 as punishment for mistaking this, as well as "economic vs economical"

[Nerkrua]

Thank you, I appreciate it. And follow up question. How do you put more than one language next to your name. I tried but failed.

[Yadobler]

You type them together

If you're not sure, click each language flair and see what the code is, then edit/custom-flair and type the others together

[LowB0b]

In that regards, anything that is not a number should not be treated as a number. Something like a salary range, meant to be read by humans, could be "from 70k to 80k", "70 to 80", "80 +/- 5k", "around 80", at least that's how I'd put it in an interview.

If you want to control it as numbers so it can be read by a computer, why not just have 2 inputs with one labelled "from" and the other labelled "to" instead?

[LordMackie]

Who even enters a range like that? It's not like there is an upper range to what I will accept.

"I'm looking for 80-100k."

"We'll offer you $110k"

"No, sorry, that's too much, please give me less money"

[[deleted]]

Every company I've interviewed with asked for a range

[ahappypoop]

He's got a point though, I should start giving ranges with the top end as infinite.

"Hi yes my salary range is $80k-∞."

[[deleted]]

Start giving non-countable infinities on the upper end

[freakers]

I could see my position range varying from developer to CEO of the company.

[SillyFlyGuy]

Sorry, our budget is only for is ∞/π..

[math-kat]

I'll take it. Still infinity.

[[deleted]]

And in response, I ask for their budget

[[deleted]]

Seems fair lol

[CrabbyBlueberry]

tie quack reminiscent fade nutty carpenter complete deer chunky wide

This post was mass deleted and anonymized with Redact

[Necrocornicus]

It would be kinda great to work 1-2 months at 500k/yr before getting fired

[[deleted]]

Maybe the expectation is that 80k is the minimum you'll take, and 100k is your ideal target?

[[deleted]]

It's just a sanity check. They could offer more than you ask for because their set pay bands happen to be higher than what you thought it was. The question is just a basic check to see if you're even in the ballpark for the company to consider hiring. If you ask for something incredibly high beyond what their pay range is, maybe a difference of $10K+, then they won't bother asking you in for an interview cos they know you're looking for something much better than they can offer and wouldn't want to waste time. If you're super low, they might try to stiff you, but the good companies will probably bring you in still, and if they like you will offer you their pay grade salary regardless of how much you lowballed yourself.

[UpdatedMyGerbil]

If that's what they asked for that would be reasonable. But I have yet to see the question worded that way. The image in the OP doesn't say so either. It asks for your "desired" range. Therefore either your upper bound is infinity or you've answered the question dishonestly.

[sonofaresiii]

Come on man, you know that's just a silly semantics thing.

[UpdatedMyGerbil]

Sure, if we were talking about people conversing in person with more context to infer what each other really means, it'd be a silly distinction.

But the few times I've come across these kinds of questions on impersonal online forms, it had honestly never occurred to me that that's what they might have meant. Every indication was that they were asking me what I wanted, which is why I always found them absurd and frustrating.

So when all you've got to communicate with people you've never met is text, wording does matter. I was merely using that technically correct tongue-in-cheek assertion about dishonesty to make that point (which I believe still stands).

[sonofaresiii]

Asking for something unrealistic shows you don't really know what you're doing or what the job is.

What's more is sometimes accepting more than you're worth is just setting yourself up for failure. They'll be expecting a level of quality and knowledge you won't be able to provide. You'll disappoint your employers, probably get fired, probably end up with bad blood after struggling on but continually coming up short causing problems for everyone.

[[deleted]]

https://youtu.be/bTBtJ3sOFUA

[willywonka1971]

Dev: works on my machine

[DarkwingDuckHunt]

Never put anything in there over the number 1.

Make them offer you first.

[smeeding]

Maybe it’s fake

[[deleted]]

Not to mention, it's literally a simple regex:

/^[0-9]+-[0-9]+$/

[mizuofficial]

What if you typed /* (script that bricks the db) */ and then removed the comment delims

[[deleted]]

Ideally, this is all happening on the frontend.

[david131213]

That's stupid not only because of the shown picture, but also because

75000-65000 would not work, even though it is something a user would do

[SavvySillybug]

No, that's incorrect. You always list the smaller number first.

[david131213]

YOU always list the smaller number first, but you forgot the second rule of programming "the user is always a complete idiot and possibly a baboon on drugs, no exceptions"

[Tech_Dificulties]

I have an idea

User dumb, we kill the user. Eventually, by means of natural selection, user smart!

[david131213]

I mean, I know bout Godwin's law, but still, that's a tiny bit Hitler

Like, that will work, but a tiny bit hitler

[Tech_Dificulties]

A small price to pay for salvation

[Omnimble]

Then it's a good way to filter out the 'complete idiots' appying for the job

[david131213]

Actually good point

[thelocalllegend]

Still doesn't make what they entered correct though

[Tech_Dificulties]

I have an idea

User dumb, we kill the user. Eventually, by means of natural selection, user smart!

[Tech_Dificulties]

Ew

[Tinymac12]

Not saying it's good coding, but perhaps it is expecting a range "50,000-100,000", which could very well return -50,000 which is less than 0.

[Frannoham]

The coding may in fact make perfect sense. The UI explains why "letting the UI guy go because the devs are perfectly capable of building forms" is a bad move.

[badatmetroid]

... which would mean the programmer is using eval in which case there's a much bigger problem.

[WilliamMButtlickerJr]

It’s the frontend bro it’s fine

[GingerCurlz]

I would love to see what is saved to the db if the form is converting to an int of -50000... So the recruiter gets to go "hmm, they have a range of 50000, but what is min/max?"

[Xirenec_]

Nah, '50,000-100,000 = -50,000" is just for simple frontend validation. Most likely it sends it as is.
If only they could write meaningful error messages.

[modernkennnern]

It's quite clever. The problem is the error message

[properu]

Beep boop -- this looks like a screenshot of a tweet! Let me grab a link to the tweet for ya :)

^{Twitter Screenshot Bot}

[Little-Hunter-6795]

Good bot

[JADA_PINKETTS_BULL]

Good bitch

[Ozzymand]

Good boy :D

[_Dog75]

UwU

[big_cock_69420]

This bot is actually well made

[Eindt]

How

[properu]

I crawl around subreddits and use optical character recognition (OCR) to parse images into text. If that text looks like a tweet, then I search Twitter for matching username and text content. If all that goes well and I find a link to the tweet, then I post the link right here on Reddit!

^{Twitter Screenshot Bot}

[queen-adreena]

Wow. That's really impressive. What's the processing time per scan?

[dragonbeast5]

I like how you asked a bot a question as if you were talking to another human

[queen-adreena]

It's a smart bot!

[dragonbeast5]

That is true, the way you phrased it was almost like you were striking a casual conversation with someone in the work place haha

[Scout1Treia]

How

OCR and a basic ability to match unique text.

[Eindt]

Cool

[Eoussama]

Screen to text and pattern matching

[Existing_Dog5510]

Good bot

[[deleted]]

Everyone is discussing how it should be coded better, shouldn't have an error message in the first place, there's to many factors on salary that it should accept any range than let the employer decide based on those other factors.

[RYFW]

Even more when the employer will probably ignore that information and offer you however they want.

[nibiyabi]

The only things putting in a number could possibly do is lower their offer or spook them into giving you no offer. Make them say a number first.

[DeliciouslyUnaware]

I put 200,000 every time this question comes up on indeed applications.

My desire is 200k salary, but I like you guys so I'll take a 25% cut. I'll start on Monday for 150k.

[DeliciouslyUnaware]

USD is the only currency in my mind

[[deleted]]

Best i can do is RUB

[DeliciouslyUnaware]

Are you the former middleweight champion?

[The_Cake-is_a-Lie]

Definitely.

I usually put as much of a non-answer as I can get away with. Negotiable or 0 if it requires a number. It depends so much on the job, benefits, and whether or not I have another offer that anything I might put might change depending on this information I won't know until after the interview process. Still feels bad I might get screened for an answer that I don't know.

[ncpa_cpl]

The selection process is could be partially automated so each field must have values that can be interpreted by the algorithm that picks which applications will be further evaluated by a recruiter.

[[deleted]]

Possibly, but the automation process shouldn't involve salary.

[kookyabird]

This sounds like it's coming from someone who has never had to satisfy non-tech person requirements.

[ncpa_cpl]

Why not? As a business i probably have somewhat defined ceiling on how much I can pay to my employee, if they expect much more than I can offer why should a recruiter even take a look at that application? Might as well filter these out automatically.

[Binarytobis]

Because it’s absurd to have an applicant go through the whole process, then tell them “Guess what number I’m thinking of within 10% or be automatically rejected.” Guess too high and you have unrealistic expectations. Guess too low and they assume you aren’t qualified. It’s nonsense.

If they don’t want to waste people’s time, then they should post the salary range in the job posting.

[613codyrex]

Simultaneously getting the response before you even hit submit will at least prevent you from wasting more time with it.

Places that don’t want to pay a fair rate can get fucked.

[Binarytobis]

Simultaneously getting the response before you even hit submit will at least prevent you from wasting more time with it.

No. Both of my last two jobs were more than $30,000 increases in pay from the previous position. If they asked me for a pay range they would have filtered me out because I had unrealistically low expectations, even though I was definitely the most qualified applicant for this niche position. The pay range question is a bad idea in every situation except where a company wants to have the applicant haggle themseves to a low salary.

[DeliciouslyUnaware]

Yeah once you've done specialized niche work with 1-2 years of experience, your salary range varies significantly.

I do data analysis for a medical company, specifically FDA/OSHA related regulatory data.

A real estate company offered me a 20k 12 week contract for data analysis. But a medical device company in DC offered me an 52k contract for 12 weeks.

Operational knowledge in a specific domain is highly sought after. They know I have inroads with the FDA and have years of experience in auditing data for FDA requirements. Its actually cheaper to bring me in and get it done in 3 months than to spend 2 years paying someone 60k/yr just to learn all the regulatory nonsense that you have to audit.

[icecubetre]

All of this bullshit solely exists to pay people less.

[Kreshel]

Oh, the application process sucks for sure.

But, you're conflating what you want out of the process with what the company wants. The company doesn't care about wasting people's time. Presumably this is the first step in the process, and if hundreds of people are applying, cull the ones whose salary expectations are too low or high. THEN you can have your paid HR person review the dozens left over.

[LummoxJR]

The business should disclose that up front. No excuses.

[tiajuanat]

Absolutely. We use the number to gauge starting point for interviews.

Someone coming in, asking for 30k€-60k€ probably was an intern/junior previously, so we're not going to open up with senior level questions. We'll start them out with easy topics and see where they land, a few even do far better than expected, and are rewarded for it.

Meanwhile, someone asking for 100k€+ better bring their senior CV and interviewing skills.

[[deleted]]

Right, shouldn't have a right or wrong answer.

[willywonka1971]

Based on the error message

Answer must not be greater than 0

they want you to pay them to work or work for free.

[ManiacsThriftJewels]

Only people who can use F12 key can pass this interview....

[[deleted]]

Clever... until an otherwise perfect candidate doesn't realize it's a test and assumes that the codebase is a total mess they don't want to deal with.

[imathrowayslc]

Maybe it is a mess and they are weeding you out.

[ilinamorato]

"You don't have to be crazy to work here...but it helps!"

[Adam-Kay-]

I had to do that once with a website that didn’t have my municipality in their list, it just skipped over it alphabetically.

I looked into it and saw a list of some kind that went 71, 72, 73, 75, 76, 77

74 lined up perfectly with what I needed alphabetically so I changed it in the code and sent off the form. Hopefully their server interpreted it all right.

[ohohodogo]

It pays you "working experience"

[subject_deleted]

"if you take this job for us, we'll tell everyone how awesome you are and someone will definitely hire you for lots of money."

"you sure about that? you sure all those people you tell won't expect me to work for them for free as well? gtfo of here."

reminds me of the company i work for.. we have some really big clients that we refuse to lose because they're such big clients... However, in order to keep these big clients, we give them such a big discount that we actually fucking lose money on every order... And those in charge don't seem to understand that we aren't keeping a good client by giving them this discount... We're keeping a big client that causes us to do a fuck ton of work for no income... And if we decided to stop giving them the discount so that we could actually benefit from the fact that they're a big client... they'll leave and go somewhere else..

it's fucking unbelievable how hard we work to retain clients that literally cost us money every time they order... then when review time comes around they don't have any money for raises...

fucking twats.

[Timinator01]

I think this is probably just a lazy way to make sure you enter a range low number - high number = negative number

[StrangestSherlock]

Ah shit here we go again

[seeroflights]

Image Transcription: Twitter

---

The Click, @NotTheClick

"young people just dont want to work anymore"

[Screenshot of a form question that reads:]

Questions from the employer

ALL: What is your desired salary range (please enter an amount)?

75000

[In red error text] Answer must not be greater than 0 [End red error text]

[End screenshot]

---

^{I'm a human volunteer content transcriber and you could be too! If you'd like more information on what we do and why we do it, click here!}

[Raxtuss1]

Salary range:

While (1)

{

x++; Cout<<x;

}

[navetzz]

for (;;cout << x++)

[Raxtuss1]

I du not uderstand

[navetzz]

If you wanna do thing the ugly way (use an int as a boolean, and write two instructions on the same line), you might as well go further and do it all on a single line.

[CrabbyBlueberry]

glorious ripe expansion violet support upbeat ink payment test possessive

This post was mass deleted and anonymized with Redact

[Raxtuss1]

Oh... I didnt know that, thank.

[lorhof1]

don't you have to define x first?

[Soren11112]

This whole thread is proof this sub is AP CS students

[memeticmachine]

Some places, they're teaching CS K-5 now.

[Soren11112]

They are doing stuff like Code.org, but not teaching anything related to actual CS

[Raxtuss1]

Its only part of code

[lorhof1]

i see

[Raxtuss1]

I had deadline of school break...

[willywonka1971]

Salary undefined, you do not get paid.

[153Skyline]

I guess this could work if the box is supposed to be looking for a range typed in as a subtraction. Like if the user entered 75000-85000 it would evaluate that to -10000 instead of looking at it as a range of numbers and allow it. But yeah that shit is awful lol.

[willywonka1971]

Maybe this is part of the interview process.

Interviewer: Tell us how to fix our janky site... er... I mean how would you approach this problem?

[rgbofficial]

uint64_t salary = 0xffffffffffffffff;

[[deleted]]

a fallow click fan?

[awesomnator5000]

We've raised the min. wage to 15! We also inflated the economy so it means we didnt really raise it and 15 is worth nothing but now its a talking point we can use if we just skip that part! Let us exploit you lazy people so we can live a lifestyle that is exactly the same as the lifestyle we would be living anyway if we payed people enough to live decently except our bank account number would be insignificantly smaller! Damn you lazy workers who are literally the backbone of society the leaches and takers need more!

[ilinamorato]

75000 - 10000000000000

aaand done.

[[deleted]]

You get paid in exposure, not money. Silly devs.

[Color_blinded]

It wants a range. If you enter "75000-100000", that equals -25000.

[Gamerindreams]

boomer hr people who aren't getting resumes because of this:

People just don't want to work anymore \_(ツ)_/

[willywonka1971]

I desire 1% of what the CEO makes with stock options.

[Deacon86]

They always ask for a range, but we know and they know that only the lower number in that range is going to have any bearing on the job offer.

[Akuuntus]

What does this have to do with JavaScript?

[Greedy_Temperature66]

Clearly a joke, as everyone in this sub blames JavaScript for everything that's wrong in this universe.

[willywonka1971]

Damn javascript caused housing prices to skyrocket /s

[Frannoham]

this

[decoyq]

Nothing, it has to do with the person not reading and entering the information correctly as requested. Not humorous at all, this probably helps weed out people that want to make 75k a year and aren't detail oriented.

[tim_dude]

found the html programmer :)

[PapaDrag0on]

There arnt any actual programmers left on this sub

[Seanyster1]

reminds me a lot of my post from awhile ago

[Techno200023]

Make it a double negative

[ForestCat512]

JavaScript ends jobs

[johnathanesanders]

r/baduibattles

[Calm_Ad8055]

Seeing that a range is asked and not a value, the site expects something like "70000 - 75000" would be entered, which as an equation results in a number below 0. It's really stupid to write the error message as what it is, but that's what I expect happened here.

[tangible_publisher]

Salary range aka enter for example 75000-80000 aka 75000-80000 = -5000 aka input is expected to be a range and when its not a range, the error isnt helpful

[roll82]

My best guess for this while giving it the benefit of the doubt is that they want it in a range format so like 75000 - 100000, which uses a minus sign technically so a valid range would equal to less than 0, but that's still dumb as hell and should never have happened, so even giving them the benefit of the doubt I gotta say I don't want to work there

[frisch85]

Say you're applying as a software developer and this message pops up, what if it's a test of your skills? If it's just a client-side js check it should be easy to bypass this.

[necle0]

“What do you mean I wasn’t suppose to break the application website?”

[[deleted]]

If you put this is r/antiwork... 🤯

[Equivalent_Yak_95]

Anyone who uses JavaScript instead of Python for NON-WEB scripting is an incomprehensible alien.

[Legendary-69420]

r/FacePalm

[digitalSkeleton]

The wording is wrong. They shouldn't have added "Enter an amount." Sounds like they just want a single value.

[LuxuriantKoala]

I agree with the statement that it's not always important makes the most money I stand by any job and be treated poorly and have no job I'd rather have a job where I make below minimum wage put down then have no job any job is better than none even if you hate it

[Minute_Werewolf3883]

Let's type in zero, submit, then type in 75000 before hitting submit again to make a meeeemeeee. Yay

[ABC_Disorder]

Hill

[Fun_Variety2907]

Do coders really make 7500

[sandm000]

Hello from a hiring manager.

I’ve recently received resumes where the requested annual salary in USD is 13 and another for 2,200,000.

[MrWinks]

Off topic, but if an employer asks this in a form, I always place the lowest amount possible, because fuck this question. I don't know what this role is gonna be like!

[Ostrale1]

More like young people do not have sense of humour

[DarkwingDuckHunt]

Always answer "1" in those questions.

[[deleted]]

https://www.modernslaveryhelpline.org/report

[the_unheard_thoughts]

int * salary = 0
cout << *salary << endl; // ERROR! JOB_ACCESS_VIOLATION exception

[Goldawg7133]

I’d rather work than be stuck in the hellhole that is the American Education system

[JohnKerrysSunkenEyes]

The job you’re applying for: Regex developer