ozim

It is just „SQL people” crying out not knowing how to work with ORM. They always claim that devs who use ORM don’t know SQL. But I never seen or hired a dev that doesn’t know SQL and yet for each project we use ORM.

I also never seen anyone claiming that you doesn’t have to know SQL and ORM is enough from the opposite side.

If you really run into spot where your ORM breaks you can always drop to SQL. If you build project „SQL first” you robbed yourself from ORM upsides and you are bound to badly implement your own one in the long run.

I have never seen a dev and we never would hire a dev that doesn’t know SQL and yet we still use ORM for each and every app we develop.

Don't use an ORM.

Highly debatable. When your highest cost is developers salaries.

Don't reinvent a type system by having a single table where each row can mean many different things depending on a "type int" enum col.

Easy to say, harder to not do when you have business requirements on table, customer pressure and budget already gone on discussing with DBA who maybe is right but you are burning money right here and right now. The same with point no. 9

But that’s the problem with AI it is like 16yo script kiddy who will just exfiltrate all your PII and think it did good job. Mature pentester would pop calc.exe make screenshot and be done.

Other problem is setting up air gapped test environment is a lot of work, especially if you expect it to be equal to real thing.

This pentest with AI is not as useful if you set up a single app - it really is useful if you want to find exploitable chains of exploits that seemingly might not be exploitable separately or not leading to full hack separately.

Because the proof is in the pudding.

Real pentests are about showing exploitation, merely enumerating vulnerabilities, that’s vulnerability scan and works on known vulnerabilities.

You can’t confirm a vulnerability by _not exploiting_ it, especially unknown one.

You are conflating „state level actor” with „police level action”.

There is a world of difference if you get searched by your local police and a country level agency.

There are military units dealing with forensic investigations they have 100x or 1000x more budget and much smarter people.

But they don’t care about some drug dealers. They don’t waste time on silly stuff.

Should have get some AI for bait posts :D

Working with anyone who reads a book and treats it as an instruction is not fun.

Just like working with fresh college grads who are ambitious and think college knowledge is an instruction.

Don’t forget months or years later when shit hits the fan, developers will be blamed for being lazy and not the product person. No one will remember Joe said something on one or two meetings we build for 90th percentile - code in git repository will point to a developer who wrote and GitHub will point to the one that approved merge request.

In online discussions people always blame „lazy developers „ like there would be no product owners, testers, business analysts, scrum masters etc.

I find it that in wild it is quite often used by product people to push crap ASAP because they don’t want to spend time finding out even basic constraints in the system they supposed to know like the back of their hand.

Then engineers are on the hook because they run into those constraints while building and everyone always blames „those lazy software developers” ;)

There is not much to compete for. Competitive pressure doesn’t magically spawn out of thin air.

Exactly I have limited time in my life to tinker with stuff.

If something is important for me I can waste hours setting it up and running.

If it is something new to me, if it doesn’t work out of the box I most likely will just move on.

There is no shame and no business there.

We just read a story of someone who didn’t want to pay market price and went DIY.

There are companies doing bowling alley equipment and you can pay them for maintenance.

Is there a single one of those on F500 list? No and people are running those companies and what OP did … he didn’t want to pay market price.

Well yeah those companies are overpriced if you are software engineer who can wire up and program couple of ESPs have own bowling alley and have free time.

What a great example of nice writing. I just liked reading it.

The person who volunteered to do the work used SQLite.

That is a totally valid reason.

Though if you can run it from SQLite there is not much tuning on Postgres that would be needed. I would expect migration to Postgres from MariaDB would be easier.

Exactly, looks like I should have written that down for myself instead of relying on LLM or even better, train my memory instead of depending on crutches ;)

Government is not doing anything for free. Citizens pay taxes.

One up.

To Aristotle and Plato. Where Plato was against writing because people will become forgetful if they don’t train their minds remembering things.

Semantic web is good if you are making web documents not web applications.

  Have a type and: submit a form; reset a form; or not do anything with the related form.  

Native browser controls are not workable in a modern web application. It is not that developers are lazy it is that you get requirements from businesses that no one would pay for implementing using native controls because it would cost too much to do it right, where right means „how customers want it and how they want to use it” not „technically right like some native browser control nerds feel world should work”.

I was unsuccessful in area of automation because of different issue.

By trade I am a .Net software developer so as a lot of people would imagine — I was not able to accept a script that wouldn’t be reusable and flexible, basically over engineered.

I do quite some devops so I finally had to accept the fact that I can write simple script with hardcoded values that will live on a server (where I can copy paste and change values to meet other server) and most likely I will not have to look at that script for years as it will be running with cron doing its job without an issue.

Over engineered scripts designed from get go always required debugging from time to time so lots of time I was just doing stuff manually to make it quicker.

So I started winning when I accepted first script can be really simple and when needed I can move it to be parametrized but if not it will just keep doing it's job there on the server.

Gets me wondering if it is real or they just got a backlog quick fixes dropped so it looks like AI bug hunting really works to prop up their AI bullshit narrative.

Nothing that inbox rules can’t fix. I just pass all LinkedIn mails to dev/null on arrival.

I do know how to write stuff in bash.

I dislike the tooling and debugging experience that is not existing compared to let’s say Python. With Python I have whole IDE which help me set breakpoints and inspect variable state. With bash I have to pipe output to text file and inspect that. Feels like working with Stone Age tooling.

There is bunch of rich and powerful assholes trying to protect their investments.

I am pretty sure rate of improvement will be there quite long in the future — even if it will be smoke and mirrors ;)

I need a bash script for example. I don’t like dealing with bash or debugging scripts written by others.

I have that part covered by AI so I can get multiple servers up and running and then eventually fix some config or networking here and there which I like.

Instead of bashing my head against the wall.

I find a lot of people are actually happy that they can offload mundane parts of job to automatons and to be really busy with the interesting parts.

It is not like you have to give them fun parts of the job.

While being a team lead for people I actually have to do the opposite. Get interesting parts to hand over to people to keep them happy and pick mundane not interesting boilerplate myself.

When you break a leg you can’t start believing it is all good. It doesn’t go away.

As much as you would have aspirations to be a pro soccer player, badly enough broken leg can prevent you from ever being good enough.

Your imagination of being pro player does go away when in reality you’re not fit for the purpose.

You just contradicted your previous comment that was pointing out that fcraaldo is „spending effort in perfectly curating history” … or your comment was a joke with no indication it is a joke.

Just squash everything before merging and call it a day

That is also a line from top comment. Everyone read „perfectly curating git history” and went rage commenting instead of reading and understanding what OP wrote.

But parent wrote:

Just squash everything before merging and call it a day.

He didn’t write „leave a mess”. So it feels you wrote knee jerk comment or just writing whatever you wanted to write disregarding whatever was written.