Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Our Django Book is Launched

pydanny.com

Post reply on HN
Print view View original

61–70 of 136 posts

Re: Our Django Book is Launched

#61

Post by lifeisstillgood »

alinajaf wrote: post #46
lifeisstillgood wrote: post #18

One of my big concerns is user / session security. I have tried to follow and reason through discussions on stackoverflow and much of tpatchek's notes. I would be interested in how "high level" the security chapter is from anyone who has shelled out already. For example I assume I will 1. only use persona or openid (avoids storing passwords in my servers thus making a lot of things much much easier) 2. sessions - sto…

If you're interested in security and have been following tptaceks notes, then no doubt you will have seen his recommendation for reading The Web Application Hackers Handbook . I'm just a rank-and-file web developer, but I would also strongly recommend reading this book, regardless of what language or framework choice you've made.

Thank you - it seems to ring a bell so I will try my google-fu

Re: Our Django Book is Launched

#62

Post by gits1225 »

pydanny wrote: post #53
gits1225 wrote: post #49

It always puts a bad taste in my mouth when information/knowledge is locked behind a pay-wall. It frustrates me when I think that someone somewhere is getting turned down from what they want to learn from because they had no money to pay for it or doesn't have the means to pay for it. I know the authors should profit but why can't they do something like https://mitpress.mit.edu/sicp/ or http://debian-handbook.info/ o…

Disclaimer: I'm one of the authors. First, if you can't afford to buy the book, then do as we asked on http://django.2scoops.org . Email us and we'll send you a copy. Money should never be in the way of education. Second, this book took hundreds of hours to write. For weeks we've put in 12-14+ hour days putting it together. We did it instead of working in an office or doing consulting. If we don't charge then we can'…

You misunderstood me. I wasn't asking for a free copy or that you shouldn't charge for it.

Re: Our Django Book is Launched

#63

Post by jonknee »

lifeisstillgood wrote: post #60
jonknee wrote: post #47

Earlier quoted context omitted.

Yes, if you change the defaults and don't read the docs it is possible to get in trouble.

That seems disingenuous - a read of the docs indicates to me that the default is to store a lot of app specific info on an encrypted cookie - what is stored on that cookie? Admin rights? Total credit in dollars? Discount codes? That's app specific but if the implication is its trustable then a lot of attack vectors just opened up. who chooses the encryption? Is a new key generated per user / session? If so how is tha…

https://docs.djangoproject.com/en/1.5/topics/http/sessions/

> "By default, Django stores sessions in your database"

Re: Our Django Book is Launched

#65

Post by rburhum »

pydanny wrote: post #44
kefs wrote: post #38

Considering purchasing since I was thinking of diving into django for my next project.. If I buy the PDF now, and you eventually release an EPUB or other format, will I get access to those files (with updates) as well?

Honestly, I don't know enough about ePub distribution to answer you. I would love to do that though.

Well, I am hoping you do release the ePub version to people buying the PDF because I am buying the book right now :)

Re: Our Django Book is Launched

#66

Post by kroger »

gits1225 wrote: post #62
pydanny wrote: post #53

Earlier quoted context omitted.

Disclaimer: I'm one of the authors. First, if you can't afford to buy the book, then do as we asked on http://django.2scoops.org . Email us and we'll send you a copy. Money should never be in the way of education. Second, this book took hundreds of hours to write. For weeks we've put in 12-14+ hour days putting it together. We did it instead of working in an office or doing consulting. If we don't charge then we can'…

You misunderstood me. I wasn't asking for a free copy or that you shouldn't charge for it.

So what did you mean?

Re: Our Django Book is Launched

#67

Post by lifeisstillgood »

jonknee wrote: post #63
lifeisstillgood wrote: post #60

Earlier quoted context omitted.

That seems disingenuous - a read of the docs indicates to me that the default is to store a lot of app specific info on an encrypted cookie - what is stored on that cookie? Admin rights? Total credit in dollars? Discount codes? That's app specific but if the implication is its trustable then a lot of attack vectors just opened up. who chooses the encryption? Is a new key generated per user / session? If so how is tha…

https://docs.djangoproject.com/en/1.5/topics/http/sessions/ > "By default, Django stores sessions in your database"

Please see above edit - and thanks for pointing out the same thing three times till I actually processed it

Re: Our Django Book is Launched

#69

Post by wifarley »

pydanny wrote: post #59
wifarley wrote: post #57

Just finished the first chapter and I'm probably not putting it down again (after I write this comment). This feels like something Django really needed (or I needed for Django), despite its extensive documentation. I find analogies are very helpful for my understanding and the ice cream one is perfect. The fact that "Each Chapter Stands On It's Own" is the great too!

I'm one of the authors. Can we use "I find analogies are very helpful for my understanding and the ice cream one is perfect." as a quote on the site?

Of course! I really appreciate the time you all put in this book and I keep finding huge changes I can make in my code (ch.2 on db and ch.3 on layout -a very difficult topic to research a few months ago) I'm at webpowerlabs.com for reference. Thanks again and great job!

Re: Our Django Book is Launched

#70

Post by kroger »

pydanny wrote: post #5
megaman821 wrote: post #2

Will it be available on the Kindle or as an ePub or solely PDF and print?

I'm one of the authors. Because of the formatting issues of Kindle and ePub, the negative reviews Python books get when formatting breaks in those formats, we're not sure yet it we'll publish it in mobi/epub. That said, if you have any advice on getting Python to look good in those formats, we would love to hear it. :-)

Just bought the book, congrats!

I've written about using Sphinx to write technical books, you may find it useful: http://pedrokroger.net/2012/10/using-sphinx-to-write-books/

I see you used Pages to write the book. AFAIK Pages can export to ePub automatically (but I don't know if the result is any good). Maybe you could consider to export the ePub and distribute it with the PDF even if the ePub is a "beta" version. I think it could be useful for a lot of people.

Post reply on HN