you are viewing a single comment's thread.

view the rest of the comments →

[–]fschmidt[S] 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (5 children)

Why does one need a fancy build system? I just use "make" or compile all.

Why did you link to JNDI? I replaced Log4j.

All modern libs are bloated, you can't blame Java for that. Java with my libs is lean enough.

Rust looks really horrible to me. No garbage collection, for example. Also see this.

[–]fatman 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (4 children)

When you gonna put HTTPS in front of your website? On plain old HTTP every middleman who handles this traffic gets to see everything in fulltext (and modify it maliciously while it's in-transit).

It's free and simple to self-sign a SSL certificate and stick it in front of your site.

[–]fschmidt[S] 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (3 children)

Never, of course. This is exactly the kind of pointless complexity that should be rejected. No one is going to bother maliciously modifying my site in-transit.

By the way, my site is implemented in Luan which allows adding HTTPS with 1 line of code, but I still won't do it.

[–]fatman 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (2 children)

You won't write 1 line of code to protect your userbase and keep their browsing habits private? As Joe Biden says, "C'mon, man!"

HTTPS is not perfect security of course. But it will prevent an entire class of exploits and snooping techniques.

[–]fschmidt[S] 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (1 child)

Their browsing habits are tracked by the browser and sent to Google or Apple, so HTTPS doesn't keep this private.

[–]fatman 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

Would you rather have Google and Apple know (and any government who got a warrant)... or would you rather have EVERYBODY know?