Software Development and Programming Careers (Official Discussion Thread)

Joined
Apr 3, 2014
Messages
71,910
Reputation
17,058
Daps
305,945
I just read about pypart malware package, has anyone been affected from the numerous hacks,malware. I remember a few years ago my boss account got hacked while he with the it team at an it security conference:mjlol:





Not that I know of.... but isn't one of the features of malware the fact that you could be infected and wouldn't even know it?
 

Renkz

Superstar
Supporter
Joined
Jun 12, 2012
Messages
7,822
Reputation
2,310
Daps
18,045
Reppin
NULL
Not that I know of.... but isn't one of the features of malware the fact that you could be infected and wouldn't even know it?
That's malware, but now you're seeing it also in software deemed, that is possibly using another technology that has been compromised. Just last week they had to turn off the print spooler because of the vulnerability. Open source is getting quite dangerous.
 

Obreh Winfrey

Truly Brehthtaking
Supporter
Joined
Nov 18, 2016
Messages
20,852
Reputation
25,252
Daps
131,941
That's malware, but now you're seeing it also in software deemed, that is possibly using another technology that has been compromised. Just last week they had to turn off the print spooler because of the vulnerability. Open source is getting quite dangerous.
But hasn't the danger always been there? You rely on the community to identify and fix these types of vulnerabilities but the larger the project, the harder it becomes.
 

Renkz

Superstar
Supporter
Joined
Jun 12, 2012
Messages
7,822
Reputation
2,310
Daps
18,045
Reppin
NULL
But hasn't the danger always been there? You rely on the community to identify and fix these types of vulnerabilities but the larger the project, the harder it becomes.
All true, You expect naively that community would've picked much earlier the college programmer uploading malicious code in GitHub. I been second guessing myself more installing packages from nuget though. Open source doesn't have standards to deal with this like big tech, think Microsoft suggest something about I doubt it'll be practiced.
 

Obreh Winfrey

Truly Brehthtaking
Supporter
Joined
Nov 18, 2016
Messages
20,852
Reputation
25,252
Daps
131,941
I'm coming across some nightmare quality legacy code right now. Code currently in production and being used by a few million users over the lifetime of the product. This is something you would see from an average to less-than-average Comp Sci student. The most recent example is along the lines of this:
Code:
public class SomeClass {
  SomeObj someObj;

---snip---
  public SomeObj getObjProfile(SomeObj s) {
    this.someObj = someObj;
---snip---
   return someObj;
   }
}
Now... the method is clearly intended to operate on s. But they never touch s at all. I'm not the best programmer, I can raise my hand and admit that. But the shyt I'm seeing here is something that should have gotten somebody fired and blacklisted.
 

Rev Leon Lonnie Love

damned mine eyes, DAMNED mine eyes!!
Joined
Nov 11, 2017
Messages
21,906
Reputation
5,468
Daps
88,974
I'm coming across some nightmare quality legacy code right now. Code currently in production and being used by a few million users over the lifetime of the product. This is something you would see from an average to less-than-average Comp Sci student. The most recent example is along the lines of this:
Code:
public class SomeClass {
  SomeObj someObj;

---snip---
  public SomeObj getObjProfile(SomeObj s) {
    this.someObj = someObj;
---snip---
   return someObj;
   }
}
Now... the method is clearly intended to operate on s. But they never touch s at all. I'm not the best programmer, I can raise my hand and admit that. But the shyt I'm seeing here is something that should have gotten somebody fired and blacklisted.
It looks bad from the outside., but there could be many reasons why that ended up there.
- Maybe the person working on that code at the time was working under pressure, depressed, overworked, and had no one to review and catch that mistake they made.
- Maybe that person people were pre-occupied with other shyt that it slipped into production without being caught.
- Maybe it was intentional, the person was an unhappy employee already one foot out the door and decided to fukk up the code base knowing no one else was competent enough to catch it before they left.

Many reasons could have caused it, I think its important to have a little more empathy looking at old code because you dont have enough context of the time it was written.

Asking them to be fired or blacklisted is a bit too harsh and elitist, in my opinion.

I've seen these silly lines of code made by developers I respected who I knew for sure are smart and capable people. I've learnt not to be too judgemental when looking at legacy code.
 

Rev Leon Lonnie Love

damned mine eyes, DAMNED mine eyes!!
Joined
Nov 11, 2017
Messages
21,906
Reputation
5,468
Daps
88,974
On the upside tho, a New York company reached out to me for another Senior position recently just off the strength of my Github profile and open-source contributions........so we will see :yeshrug:
They liked me, didnt have to take any technical interview. Went straight to just chatting with the team over zoom.....but they are taking their sweet time setting things up and look into visas and consultancy....i'm getting impatient and starting to think they are letting me down easy without saying it :francis:



on the other hand, I have an interview with a FAANG company next week, and have zero confidence left in me from all these final round rejects. its like a breh gotta be a unicorn developer to get these dream jobs at this point :mjcry:
 

bammtronics

man sit 'cho ass down!
Joined
Jun 15, 2017
Messages
2,221
Reputation
520
Daps
12,175
Reppin
Long Beach
So...

Can't fathom going through 140 pages (:damn:) to find something relevant to chime in on, but I feel like I gotta do more than just talking shyt in TLR :mjlol:

I'm a web app dev, and have been doing web dev (and related) work for 20+ years :flabbynsick:

If you think I can help you or contribute in any way, hit me up :salute:
 

null

...
Joined
Nov 12, 2014
Messages
29,225
Reputation
4,894
Daps
46,440
Reppin
UK, DE, GY, DMV
I'm coming across some nightmare quality legacy code right now. Code currently in production and being used by a few million users over the lifetime of the product. This is something you would see from an average to less-than-average Comp Sci student. The most recent example is along the lines of this:
Code:
public class SomeClass {
  SomeObj someObj;

---snip---
  public SomeObj getObjProfile(SomeObj s) {
    this.someObj = someObj;
---snip---
   return someObj;
   }
}
Now... the method is clearly intended to operate on s. But they never touch s at all. I'm not the best programmer, I can raise my hand and admit that. But the shyt I'm seeing here is something that should have gotten somebody fired and blacklisted.

code analysers .. compiler warnings .. unit tests ..

the management should be lambasted for that BUT (as is too often the case) they most like don't actually understand the technology that they are "managing" ... :hhh:
 

Rev Leon Lonnie Love

damned mine eyes, DAMNED mine eyes!!
Joined
Nov 11, 2017
Messages
21,906
Reputation
5,468
Daps
88,974
Been getting my feet dirty with Golang lately. Any Go developers in here? I know Golang has BIG following in Kenya, Rwanda and Nigeria. Seems like brehs over there only code in that language.
 

Mike809

Veteran
Supporter
Joined
Oct 15, 2015
Messages
16,101
Reputation
3,651
Daps
82,108
Reppin
Bronx
So im about to start my capstone project next week, i can either come up with my own project or have one assigned to me.
I would like to come up with one , but the ideas i have dont seem to be that ambitious.
 

Rev Leon Lonnie Love

damned mine eyes, DAMNED mine eyes!!
Joined
Nov 11, 2017
Messages
21,906
Reputation
5,468
Daps
88,974
So im about to start my capstone project next week, i can either come up with my own project or have one assigned to me.
I would like to come up with one , but the ideas i have dont seem to be that ambitious.
what are the requirements? What kind of project? What is the scope?
 
Top