427
you are viewing a single comment's thread
view the rest of the comments
[-] Buffalox@lemmy.world 89 points 7 months ago

How is this funny? 8 Upvotes at current writing???

[-] bjoern_tantau@swg-empire.de 164 points 7 months ago

It's kind of funny because it looks like it is nonsense dreamt up by a non-programmer. But it actually works.

[-] mac@infosec.pub 147 points 7 months ago

I thought it was poking fun at the tutorial saying instead of learning to code, import a library from someone who knows how to code.

[-] lowleveldata@programming.dev 41 points 7 months ago

That's what libraries are for. I'm no security expert and the sensible thing to do is using a library instead of taking a class.

[-] bort@sopuli.xyz 25 points 7 months ago* (last edited 7 months ago)

I’m no security expert and the sensible thing to do is using a library instead of taking a class.

Counterpoint: "not knowing your libraries" + "blind trust in the maintainer" will give you stuff like this: https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in

(the thread itself is worth a read. But also very impressive is the list of big players who fell for exactly this mentality)

[-] gears@sh.itjust.works 7 points 7 months ago

Jesus that was one hell of a thread

[-] anguo@lemmy.ca 3 points 7 months ago

I dont want to see the words "low quality tooling" ever again.

[-] unique_hemp@discuss.tchncs.de 4 points 7 months ago

Love the part where he claims that if your users are authenticated, it's not untrusted input. I mean, surely you trust all of your users to run any code on your server, right?

[-] Gabu@lemmy.ml 3 points 7 months ago

Impressive and unsurprising. As soon as you start getting complex libraries with multiple dependencies it becomes nearly impossible to review everything. At one time I had an interest in contributing to some AI libraries, but they're a mess as soon as you go looking for points of improvement.

[-] bjoern_tantau@swg-empire.de 24 points 7 months ago

Works as well.

[-] billwashere@lemmy.world 7 points 7 months ago

Which is funny because when I first started my CS degree in the late 80s (get off my lawn) we used to make fun of the beginning Java classes because it seems 90% of coding was to import the right library.

[-] WolfLink@lemmy.ml 5 points 7 months ago

That is a large part of coding

load more comments (16 replies)
load more comments (22 replies)
this post was submitted on 03 Apr 2024
427 points (89.2% liked)

Programmer Humor

32386 readers
690 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS