HN user

jebronie

359 karma
Posts0
Comments98
View on HN
No posts found.

I don't understand why your post is flagged. You are 100% right. The point of CSRF protection is that -you can't trust the client-. This new header can just be set in curl, If I understand correctly. Unlimited form submissions here I come!

I just tried to submit a contact form with it. It successfully solved the ReCaptcha but failed to fill in a required field and got stuck. We're safe.

You can save a lot of headaches by forcing thoughtless designers to use texts with different lenghts. Everyone can make a nice design with lorem ipsum. Making a design that actually works well is a skill.

Twitter was down 3 years ago

One of the criticisms against the old twitter engineering team was that they failed to set up proper dev and testing environments. A leaker exposed all of this and it was later confirmed by Musk in a Twitter Spaces call.

Its just bad. The commercetools projects I have seen are all slow, broken clusterfucks. In one instance they apparently used the search api, that commercetools provides, and the requests take more than 3 seconds in some cases. Maybe they just implemented it badly, but I suspect its a mix of bad implementation and bad api. When I talked with the people that implemented that, about doing more complicated stuff than a run-of-the-mill facetted search, they could not offer a solution. Commercetools apparently uses elastic-search under the hood, but either its not possible to use that directly or not supposed to be used directly. @cnj please correct any misinformation, I confess I haven't spend any time researching this (I was turned off right away).