Live data from Hacker News

How not to check the validity of an email address

dellsystem.me

1–10 of 243 posts

Re: How not to check the validity of an email address

#2
I've had something similar delivered to me on a project I hired out. The most frustrating part was not the code but the developers reaction to why it was so bad. He had no idea what the big deal was and thought I was being nitpicky.

Worse yet, was an initial claim that it was more efficient to do it that way. That was followed up with a claim that doing it differently wasn't possible.

Needless to say, I stopped working with that team of "developers".

Re: How not to check the validity of an email address

#6

I've had something similar delivered to me on a project I hired out. The most frustrating part was not the code but the developers reaction to why it was so bad. He had no idea what the big deal was and thought I was being nitpicky. Worse yet, was an initial claim that it was more efficient to do it that way. That was followed up with a claim that doing it differently wasn't possible. Needless to say, I stopped worki…

>The most frustrating part was not the code but the developers reaction to why it was so bad. He had no idea what the big deal was and thought I was being nitpicky.

This is always the worst. I've had experiences like that on many an occasion, where the person is simply like "huh? what's wrong?"

You can't really fix that level of sheer incompetence, ignorance, and arrogance all wrapped into one.

Re: How not to check the validity of an email address

#7
Gradebusters / Making the Grade, or something with names like that, used to use a Java applet to "secure" the web site with student grades. You could just download the applet and decompile it to figure out their trivial encoding of the IDs and PINs (which were just params in the HTML).

Or you could figure out just an ID (typically a student ID number, although more than a few were social security numbers, apparently), and use "1066" since they had a backdoor PIN in quite a few releases. Battle of Hastings, eh?

Want to know how users did web security instead of asking their admins for a proper .htaccess/server-level config setup? That's how.

Post reply on HN