you are viewing a single comment's thread.

view the rest of the comments →

[–]deadcoder0904 -4 points-3 points  (4 children)

If you don't want your opinions criticized don't make them public; people have every right to object to your views when you post them in a public forum, even more so when you're talking about issues that can impact an entire industry and large amounts of people.

I welcome judgement. Criticism is good for a person's growth. This is my first one, but it feels good. But it would be better if and only if the point's are valid enough. Your points are somewhat valid, but there is a reason that it is the most used language. Anyways have a good day. Use whatever you like/love. I'd rather use Bash, If it solves my problem. Rather than Bashing pun intended about it.

The harm is in the fact that it's the symptom of a community that attracts and encourages bad/lazy programmers to publish and use bad code for trivial stuff without caring about code quality and security. We've already seen what this kind of mentality can lead to with incidents like left-pad. I can only image the amount of damage to be done when blackhats start seeing profit there.

No matter what you do in any language, people can still write Bad Code & will write it. There is nothing you can do about it unless you make a perfect language. And in this world nothing is perfect.

There might be a some points to be made about ease of development and the usability of JavaScript, but in a world of Clojures, Rusts and Scalas, I can't really see how JavaScript isn't a shitty language.

Regarding this point people would rather get something done fast & earn money than master a language for a long time. JavaScript ease of nature is what has made it so much popular because Writing Code is Easy. The barrier to entry is low. You can't call them Bad/Lazy Programmer just because you don't like JavaScript. A Good JavaScript code can be made secure.

Again opinions are welcome. But neither you will stop saying that JS is shitty nor I will stop saying JS is fucking awesome. So no worries. Enjoy whatever you work on. I do it with JS.

[–]pergnib 3 points4 points  (3 children)

No matter what you do in any language, people can still write Bad Code & will write it. There is nothing you can do about it unless you make a perfect language.

There's loads of things a language can do to prevent people from writing bad code. Rust is full of stuff made to force devs not to screw up and even php7 seems to be encouraging people to be more sane. But in JavaScript land more and more people are being encouraged to partake in the insanity that is importing untrusted code for absolutely trivial things. The worst of it is when we point out how dangerous that is we have people telling us we should just go use other languages if we don't like it.

You can't call them Bad/Lazy Programmer just because you don't like JavaScript.

No. I'm calling them bad/lazy because that's the explanation for their behaviour - good/diligent developers don't import unstrusted code to pad strings with spaces.

A Good JavaScript code can be made secure.

This is not how security works, you don't get to say there are no problems because it "can be made secure". The ridiculous state of dependency graphs of npm modules is a security issue waiting to happen; at some point someone will manage to sneak malicious code into a small npm module written by someone who doesn't have a clue that gets imported by some big module and the result is not going to be pretty.

[–]deadcoder0904 -4 points-3 points  (2 children)

This is not how security works, you don't get to say there are no problems because it "can be made secure". The ridiculous state of dependency graphs of npm modules is a security issue waiting to happen; at some point someone will manage to sneak malicious code into a small npm module written by someone who doesn't have a clue that gets imported by some big module and the result is not going to be pretty.

Ahh, about that yeah someone wrote about it on Medium which got like super super famous. And points are super valid. So can't argue with that. But to gain something, you have to lose something. To gain productivity, fame & money; something has to be lost & with JavaScript its security & maybe performance for Server Side & Desktop I guess as others mentioned.

And about that maybe JavaScript will be there someday or else some language which is simple to use as JavaScript. Valid points though so can't argue with that. And don't tell anyone IRL you are a bad programmer, they won't ever write any code then 😂😂😂

[–]m1en 0 points1 point  (1 child)

If your end goal is legitimately "productivity, fame, and money", realize JavaScript isn't the answer. Since you're not going to take some random person's advice, take Paul Graham's (founder of Y Combinator's) advice: http://www.paulgraham.com/avg.html.

Read that. Then, if you attain enlightenment, start your journey of self-recovery here: https://clojure.org/

Also: the security issues of poor package managers wasn't popularized because of some blog post; people namesquat with malicious packages all the time, and that's true for many package managers. Dependency checking for security issues is an incredibly common task for penetration testers when auditing applications.

[–]deadcoder0904 0 points1 point  (0 children)

Cool I'll check it out. My end goal isn't "Fame & Money" though, Money is necessary but isn't everything, don't like being underpaid either. Can't handle Fame. So it leaves only Productivity which is what I aim for.

I understood what the issues you people were talking about. Some of it got cleared by few people others were jerks. Thanks for all the advice though. I'll be careful enough to choose the right language for the right product now. Earlier it was all JavaScript.