ropman76's comments

Since this is a .net core project, I am a little puzzled as to why they didn't use the .net AES-GCM classes. It's part of .net core 3.1. There should be no reason to use AES-CBC mode in a newer application.

"Explanations exist; they have existed for all time; there is always a well-known solution to every human problem—neat, plausible, and wrong." -- H. L. Mencken I am not saying that the ideas you have listed are not without merit, however to say they will fix the 21 Century is a bit over reaching.

Absolutely true. However we also need people who do have solutions/ideas to these problems running for office even if they don’t know how to flip bits. It would be nice to see technology enabling skilled candidates rather than troll farms.

A small issue with number 5. How is an average technologist going to do any better with things like tax policy, immigration policy, energy or foreign policy than an account, lawyer or civil engineer? I wonder if we would all be better of trying to use technology to get good candidates in office that are not beholden to large agenda driven donors.

Like all things in life it depends on the team and workflow. I have my PM’s make tickets because many times I am in the middle of a different feature or bug and don’t want to have to have the mental load of remembering what the issue was. Secondly I work with very solid PM’s who document the ticket very well and it saves me time having to reproducing the issue. My team does have a lot of tickets but we make it work for us and our process flow.

I agree with this approach for software devs in any business. One of the cool things one of my employers (a manufacturing company) did was send me out for a day to a plant and have me see how everything worked. It made some of the websites I was building for our plant workers much easier when I already had a good idea of what they needed it for.

Have you tried looking into applications with training toilets for kids. The clean up on those things is horrible.

They already do. Many logistics companies have a "brokerage" area where try and get trucking companies (or truckers) to bid on loads going from x to y. I used to support software that did this. Not a fan of the software, but the people where blast to work with. In the area I worked with, it could get pretty crazy (lots of yelling across the room and the yelling at people on the phone LOL). They occasionally had less than ethical truckers holding loads hostage for more money....

Or even a turn based game, where click speed does not matter...

I used to work at a manufacturing company. I know the company tried renting some robots for putting items on a rack and getting them off said rack. On the surface it seemed like a good idea since this job is repetitive and boring for a human. Sadly it didn’t work out. The amount of change in the parts being put on the rack proved to be a challenge for the robot and the company ended up ending the rental agreement.

After all this time the joke “Jon Skeet has already written a book about C# 5.0.

It’s currently sealed up.

In three years, Anders Hejlsberg is going to open the book to see if the language design team got it right.” still cracks me up.

One of the most frustrating things about dealing with situations like this is actually getting ahold of someone with enough experience to say where the issue is to begin with even if it’s out of the provider’s control.

I have sent a lot of log files to cloud vendor trying to find why their web hosted application was so slow (6-10 second response times on a CRM app they provided). If someone would have responded with an actual answer (your firewall is blocking traffic or try this setup etc) I could have worked with that. Instead we got nothing but stealth ticket closes and “sorry we don’t know why this is slow” responses. This article hit a nerve because you really do dance to someone else’s tune when you go to the “cloud”.

While this a great service for the aircraft parts industry, I am not seeing why this couldn’t be done with a database and a properly secured REST API.

"After several years of trying to manage these issues with Kerberos, we decided to redesign the system from the ground up.." I am curious, is there anyone who went the opposite direction direction and implemented a new Kerberos library or setup?

I understand this situation applies if the “developer resource” is a direct report. However in many instances the dev may have multiple projects going on at once and there is some miscommunications on project priorities. Yes, this has happened to me and it’s why I abhor the phrase “developer resource”

The thing that I enjoyed being the solo developer most is that I got to make all of the software design choices. I set up the project the way I wanted to and code in way I felt would best to ship the product. Loved that aspect of it.

That being said I would do two things differently. 1. Be hyper about testing. If you are the only dev working on a project test,test and test more. Write good unit tests. Have your fellow co-founders test and sign off on a feature before going to prod. If you are working hard it's easy to miss the obvious. Test it all.

2. Find good ways to communicate where you are and what you are doing. Some features take longer than others. It drives non-technical people crazy (Why did this feature take an hour and this one a week?) but that is the hard fact of software dev. Use a Jira board or an email, whatever will let your co-founders know what features are where. It really saves on the annoying status update requests in person or over email that disrupt your day. Good Luck :)

I am moving in this direction after having taken a few coding challenges and not heard anything back from the company. If I am going to spend time on a coding challenge, I am expecting at least an acknowledgment that I am no longer being considered for the position. Coding challenges are a time commitment and if a company can't even be bothered to commit to at least being polite about it, then it's a clear indication of how they view employees.

There is a blog post from 2015 about an API for security and compliance motoring. https://www.microsoft.com/en-us/microsoft-365/blog/2015/04/2...

I respect that fact that CrowdStrike and others have spent the time with the api and made life a lot easier for others. As someone who has spent more time than he wanted with the Office 365 API I am a fan of people who make my life easier. That being said I am not buying the drama that these API's have been hidden.

I can understand about being suspicious of the NSA after the whole Dual_EC_DRBG fiasco. However these designs are not unknown throughout the industry (ARX having gotten some heat lately from the Keccak people). Is there some technical reasons these designs should be disallowed aside from "We don't like the NSA".

If your goal is to make money on something, then yes I agree with the author's points. However the whole goal of side projects is to have fun with new languages, frameworks etc.