I have seen that this is still a problem, even in established enterprise companies.
Comment on Is there something better than SQL?
cwagner@lemmy.cwagner.me 1 year ago
Maybe a hot take, but if SQL injection is still an issue, you have no business developing anything. This is a solved issue and had been for years.
boo@lemmy.one 1 year ago
cwagner@lemmy.cwagner.me 1 year ago
How? I never worked in a big company, but do they just have absolute beginners without any guidance writing code that’s then never checked?
DirigibleProtein@aussie.zone 1 year ago
I worked in several big companies, and the answer is “often”.
The database at the backend of the web page that allows customers to order widgets online is written and maintained by DBAs, with functional specifications and agile and program managers and Gantt charts and all that stuff.
The database used by the system administrators to keep track of servers and parts; or by managers to keep track of hours worked; or by the network engineers to keep track of wifi repeaters; those databases are written by someone who did an online course once, or by whoever on the team possessed insufficient reluctance when the idea came up in a meeting.
And when we see on the evening news that personal records of 7.5 million people have been stolen by hackers, it doesn’t matter which side of the line the programmers are on, the shit is evenly distributed all over IT, whether they were involved or not.
Semi-Hemi-Demigod@kbin.social 1 year ago
I've worked in various support roles for sysadmins and the fact that things work at all is amazing to me. I've encountered so many people whose skills make me wonder how they got their job working at huge important corporations and organizations with extremely sensitive data.
For example, how can you consider yourself a senior DBA if you don't know how to read a log file to figure out an error? Most of my workday is filled with supporting basic computer literacy, and I'm working with the people who are supposed to know this shit.
Anders429@programming.dev 1 year ago
And yet, it still happens all the time.
onlinepersona@programming.dev 1 year ago
“If you don’t know what I know, you shouldn’t be here”
“I don’t make mistakes that end up #3 on the vulnerability list, and if you do, I don’t want you around me”
I find that a gate keeperish attitude.
cwagner@lemmy.cwagner.me 1 year ago
Alas, that’s not what I said
Miaou@jlai.lu 1 year ago
Gates exist for a reason