Live data from Hacker News

Security Lessons Learned From The Diaspora Launch

kalzumeus.com

141–142 of 142 posts

Re: Security Lessons Learned From The Diaspora Launch

#141

One more bug in the first code snippet is their use of find_by_id means that @album could be nil, causing an error when they attempt to edit it. Most people would use @album.find and then catch the error/show a 404. I realize these guys are in college, but they really should have (a) brought people's expectations in line with their abilities and (b) reached out to experienced developers to help them out. Intridea pro…

Totally, their lives would be so much better now if they had just asked 2-3 experienced Rails developers to review their work before releasing it like this. Actually, the fact that they didn't think to do that kind of illustrates a problem.

They shared a space with Pivotal Labs. Either they were lazy and didn't think to ask about stuff that matters - ui is nice[1], but securing your app is more important - or the Pivotal Labs guys dropped the ball big time.

I'm inclined to think it was neither and they just didn't think anyone would notice. It happens.

[1] http://www.joindiaspora.com/2010/07/01/one-month-in.html

Re: Security Lessons Learned From The Diaspora Launch

#142
post #54

Earlier quoted context omitted.

Similarly: "...secret squirrel double-plus alpha unrelease..." Mind if I use that? It would be a terrific title for an animal fighting game I've been itching to make.

It's a snowclone of a line from Animal House .

...which also references 1984 and a Hanna Barbera cartoon. Of course it's less funny now that I've analyzed it, but still a good joke.
Post reply on HN