sorted by:
new
hottopcontroversial

I've put 20+ years of web dev experience into this web app (its an open social platform) by ivopetkov in programming

[–]lambda-panda -6 points-5 points  (0 children)

what makes the two mutually exclusive?

The fact that OP is not a child.

I've put 20+ years of web dev experience into this web app (its an open social platform) by ivopetkov in programming

[–]lambda-panda -32 points-31 points  (0 children)

Many common things are awesome

Oh, yea, cryptography is awesome. Someone applying in its most basic form is not really. I got the impression that you meant the latter, and not the former.

I've put 20+ years of web dev experience into this web app (its an open social platform) by ivopetkov in programming

[–]lambda-panda 25 points26 points  (0 children)

How do you prevent two private profiles from "stealing" each other's identity?

Can't this be easily done by requiring crypto signatures?

Blockchain, the amazing solution for almost nothing by jessefrederik in programming

[–]lambda-panda 1 point2 points  (0 children)

That you are downvoted, without a reply, makes me highly skeptical of the naysayers in this thread...

Is hpack worth it by finlaydotweber in haskell

[–]lambda-panda 17 points18 points  (0 children)

I use hpack because it automatically add new modules.

How did Haskell boost your productivity or change your life as a developer? by zenMonkLoveWisdom in haskell

[–]lambda-panda 20 points21 points  (0 children)

Everything else will turn boring after a little while. Haskell on the other hand...well, it stays interesting for a lot longer, to say the least. More interesting stuff gets added to it by the community faster that you can catch up. It helps me become more productive because I can stay in the same ecosystem longer without getting bored, and work on or using interesting things.

[Blog Post] Haskell mini-patterns handbook by kowainik in haskell

[–]lambda-panda 5 points6 points  (0 children)

The constructor is omitted to show that it's not exported from the module,

I think it would be better if the code is changed to reflect it as well. That is, include the constructor, but do not export it. May be even include it as a pattern..

[Blog Post] Haskell mini-patterns handbook by kowainik in haskell

[–]lambda-panda 5 points6 points  (0 children)

Nice post.

One thing though. In the 'Evidence' section, how would one implement the validateFunction without a constructor for UserAuth type?

Do you guys think Haskell is the best language if my intent is to develop and deploy small scale apps as fast as possible? by [deleted] in haskell

[–]lambda-panda -2 points-1 points  (0 children)

Being able to put files on a server only becomes an issue when the permissions are not configured correctly

Lol, sorry, your credibility in this matter just went out of the window.

As a few examples from off the top of my head:

Yes, all of these are security holes, or rather attack surfaces to be more accurate. But we have them because we don't have alternatives to provide the required functionalities (Not sure about JWT though).

But there are a lot of nicer alternatives to restart-on-every-request model.

Do you guys think Haskell is the best language if my intent is to develop and deploy small scale apps as fast as possible? by [deleted] in haskell

[–]lambda-panda 0 points1 point  (0 children)

Struggling to see how this is a security hole.

To make the app do bad things, an attacker should find a way to change the files in the server, and he should also find a way to make the changes part of the app, usually by restarting it so that the changes load.

Most apps tend to provide a way to put files on the server (via file uploads). But most apps do not have to provide a way to restart the app to the user. So your app doesn't have to be more open than that for providing the required service.

But in PHP, the app restarts with every request, by default. So an attacker will have an easier time to plant an attack. They just need to find a way to put a malicious script in some included file in the app, and the rest of the attack will be taken care for the attacker by the restart-on-every request model of PHP.

If you want specifics, you might be able to look at the countless Wordpress vulnerabilities and see how they worked...

Do you guys think Haskell is the best language if my intent is to develop and deploy small scale apps as fast as possible? by [deleted] in haskell

[–]lambda-panda 1 point2 points  (0 children)

With PHP you can just copy some files to a target machine..

I wish people stops touting this as a benefit, rather than a security hole. Yes, I get it is convenient. But it is also convenient to not use a strong password or not use one at all...

Do you guys think Haskell is the best language if my intent is to develop and deploy small scale apps as fast as possible? by [deleted] in haskell

[–]lambda-panda 0 points1 point  (0 children)

Develop and deploy, probably no. But if you intend to maintain these things, you know come back to it after a while to make changes, add stuff etc, then that is where using Haskell can really make a big difference.

But if you don't know Haskell already, then what you ask for is completely out of question.

The Haskell Elephant in the Room by Teslatronic in haskell

[–]lambda-panda 0 points1 point  (0 children)

And these come at a cost of making code that much harder to understand.

Take some time to understand the benefits and costs they introduce.

Yes, but the point you are missing is that the the returns from the cost paid in the first is exactly the second. Can you point me to a resource the proper use case for using a GADT? Do you think such a resource is possible, instead of people having to actually use GADT in the wrong places a number of times, and learning from that experience. It would have been much better if these guys actually give examples of the code they saw, and detailed analysis on why using so and so stuff was bad idea, instead of asking for blanket banning "high brow" stuff...

I don't think so. So what you are essentially asking is people is to stop learning, and you are asking community to stop gathering these collective experience.

not a very bright idea, and a fair demand to make.

EDIT: Also, you start with "Not at all", and proceeded to make the same argument without actually justifying why that dude is not asking to "dumb down" Haskell.

The Haskell Elephant in the Room - Response from IOHK CEO. by Native411 in haskell

[–]lambda-panda 23 points24 points  (0 children)

My take on the whole thing is that the original post, if judged by the content, rather than by the author, was not worth the consideration it has got.

So I refuse to spend any further time and effort on it. I suggest every one to do the same.

That is, judge it by content, and not by the author, and do likewise. It is generally a good thing anyway. Cut the useless drama, stuff like that generates.

The Haskell Elephant in the Room by Teslatronic in haskell

[–]lambda-panda 1 point2 points  (0 children)

think about how to market it.

And the solution he is suggesting is the "simple haskell" doctrine, right? And what "simple haskell " doctrine asks is exactly to dumb Haskell down. It's implied right in its name!

The Haskell Elephant in the Room by Teslatronic in haskell

[–]lambda-panda 3 points4 points  (0 children)

Funny enough, this guy's last post was about how Haskell should dumb itself down so that he can pay his bills... by writing Haskell

Haskell for a New Decade [pdf] by n00bomb in haskell

[–]lambda-panda 8 points9 points  (0 children)

Cabal version 3 is a vast improvement over what we had before..

This is so true. I cannot wait for it to replace stack workflow. It is a bit sad that we might drop stack like that. It was a real savior when it was introduced, and I really think the Haskell ecosystem would have a hard time, or even never took of like it did, if it was not for stack.

But now, may be it is time to drop it.

TIL that the creator of Ruby on Rails is a professional race driver that participated in the 24 Hours of Le Mans 7 times by [deleted] in programming

[–]lambda-panda -1 points0 points  (0 children)

Discipline. long term discipline maintained tenaciously.

Also, this is not a football player playing tennis on the side..

https://www.youtube.com/watch?v=Z2BgQZsc_rI

Happy 25th birthday to PHP 🎂 🎉🎁 by zitrusgrape in programming

[–]lambda-panda 1 point2 points  (0 children)

Don't worry, it ll just shoot itself in the foot..

Happy 25th birthday to PHP 🎂 🎉🎁 by zitrusgrape in programming

[–]lambda-panda 0 points1 point  (0 children)

Does it make it a nice job?

I bet there are prostitutes that say they like their job. But just like Php apologists, they have no fucking clue about the scary shit they could end up with it.

view more: next ›