The Insider News

4-Dec-17 13:46

MSDN Magazine[^]:
Modernize a .NET App with Docker and Windows Server Containers, A Developer’s Guide to the New Hamburger Menu in Windows 10, Visual C++ Support for Stack-Based Buffer Protection, etc.

Windows Containers, protecting your stack, AI, and (as always) so much more

Sorry, that Stephen Toub article on C# 7.2 coming in the "special issue" on Dec 15.

Jeremy Falcon4-Dec-17 20:07

Jeremy Falcon

4-Dec-17 20:07

MSDN Magazine still exists? OMG | :OMG:

Jeremy Falcon

Marc Clifton5-Dec-17 1:50

5-Dec-17 1:50

Jeremy Falcon wrote:
MSDN Magazine still exists?

Yesterday a coworker has a subscription (printed version) that he never reads and asked if I was interested in them. I said "sure!" Sigh. The ads were more interesting than the articles, but only for a few seconds. I miss the days of Byte magazine, when it was a 500 page tome filled with cool software tricks and cooler DIY hardware stuff. But times change, and for that I now look at the IoT online mags, where some of the hobbyist aura I so loved about this field when I was a kid is happily having a reincarnation. And they say you can't relive your childhood. Big Grin | :-D

Latest Article - Class-less Coding - Minimalist C# and Why F# and Function Programming Has Some Advantages

Learning to code with python is like learning to swim with those little arm floaties. It gives you undeserved confidence and will eventually drown you. - DangerBunny

Artificial intelligence is the only remedy for natural stupidity. - CDP1802

Jeremy Falcon5-Dec-17 5:38

Jeremy Falcon

5-Dec-17 5:38

Marc Clifton wrote:
where some of the hobbyist aura I so loved about this field when I was a kid is happily having a reincarnation

Yeah man... paper is out. Apparently this digital stuff is catching on.

Marc Clifton wrote:
And they say you can't relive your childhood.

As they say, growing old is mandatory but growing up is optional. Big Grin | :-D

Jeremy Falcon

RTek235-Dec-17 14:40

RTek23

5-Dec-17 14:40

BYTE was a great magazine, with the Circuit Cellar my favourite part. That part lives on in a magazine called Circuit Cellar Ink, although the original author Steve Ciarcia has since retired.

Ken

Marc Clifton6-Dec-17 2:35

Extend your desktop application with Windows 10 features using the new Visual Studio Application Packaging Project

6-Dec-17 2:35

RTek23 wrote:
That part lives on in a magazine called Circuit Cellar Ink

Forgot about that. Seems their site is down:

Error establishing a database connection

Kent Sharkey4-Dec-17 13:46

Visual Studio 2017 Version 15.5, Visual Studio for Mac Released

4-Dec-17 13:46

Building apps for Windows[^]:
Visual Studio 2017 15.4 introduced the new Windows Application Packaging project to help you modernizing your application by using the new Windows 10 App Deployment Stack.

Your users will be so happy you don't support their version of Windows any more

Kent Sharkey4-Dec-17 13:46

Re: Visual Studio 2017 Version 15.5, Visual Studio for Mac Released

4-Dec-17 13:46

Visual Studio blog[^]:
This update contains major performance improvements, new features, as well as fixes for bugs reported by you.

I still think they need a longer version name

Maybe throw a build number or adjectivey South African animal or something into it?

David O'Neil5-Dec-17 13:58

David O'Neil

5-Dec-17 13:58

Don't forget: 'Uranus' needs to be in any truly professional product!

The forgotten roots of science | C++ Programming | DWinLib

Windows Update is broken for some Windows 7 users

Kent Sharkey4-Dec-17 13:31

Can you hear this silent gif bouncing? Here’s why

4-Dec-17 13:31

ZDNet[^]:
Some Windows 7 and Windows Server 2008 users are reporting they can't check for updates using Windows Update and Microsoft Update. No word yet on a Microsoft fix.

That's odd - it seems to be working for Windows 10. What are the odds?

Kent Sharkey4-Dec-17 9:46

Re: Can you hear this silent gif bouncing? Here’s why

4-Dec-17 9:46

The Verge[^]:
The phenomenon may be more common than we think

The brain is a weird thing, I think

Marc Clifton4-Dec-17 11:10

Re: Can you hear this silent gif bouncing? Here’s why

4-Dec-17 11:10

I didn't hear thudding. I heard the twanging and snapping of the wires. Wink | ;)

Joe Woodbury4-Dec-17 13:07

Joe Woodbury

4-Dec-17 13:07

I heard Godzilla.

(Actually, I did experience a faint thudding [it was more like the compression sound the thud would make as though my ear drums were preparing for a loud sound], even when I told myself not too. Damn brain.)

Re: Can you hear this silent gif bouncing? Here’s why

Dan Neely5-Dec-17 3:35

Dan Neely

5-Dec-17 3:35

The Verge's Clickbait Writer wrote:
Look at this GIF. There’s no sound, but most people who see it hear a “thudding” in their head each time the bouncing structure hits the ground. Why?

The researcher that was interviewed for the article said:
Though movement-hearing synesthesia isn’t well-researched, one of their lab’s recent studies suggests that up to 20 percent of people experience vEAR — which is much higher than the 2 to 4 percent number for other forms of synesthesia, says Fassnidge.

Did you ever see history portrayed as an old man with a wise brow and pulseless heart, weighing all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius

Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt

Bobby Tables

Kent Sharkey4-Dec-17 9:31

4-Dec-17 9:31

Clean Code blog[^]:
I want you to think about just what a supremely bad idea it is to use a textual data access language. Such a language can pass through the user interface of a system and provide unauthorized access to all the data contained within.

When in doubt, throw the baby out with the bath water

I can't imagine why he doesn't have comments enabled on that one.

raddevus4-Dec-17 9:38

raddevus

4-Dec-17 9:38

Robert Martin wrote:
supremely bad idea it is to use a textual data access language

As soon as I read that I thought, "SQL?"
Then I clicked the link and read that quote:

Robert Martin said:
SQL is demon spawn, and no self-respecting software developer should ever use it.

It is crazy, but you could solve most of this by requiring all SQL to be run only via Stored Procs too.
Never let dynamic SQL be passed in. Ugh!!!

Richard Deeming5-Dec-17 2:13

Richard Deeming

5-Dec-17 2:13

raddevus wrote:
you could solve most of this by requiring all SQL to be run only via Stored Procs too.

Stored procedures aren't a magical defence against SQLi. If you're not using a properly parameterized query, they're just as vulnerable to SQLi as any other query.

And if you've spent any time in QA, you'll know that it's perfectly possible to write a stored procedure that contains its own SQLi vulnerability. Smile | :)

The only defence is to parameterize everything. And if you find yourself hitting one of the few things that can't be parameterized (table and column names, for example), and you can't find a way to avoid it, then use the system views to validate the crap out of the user input, preferably ditching the user input in favour of the values returns from the views.

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Dominic Burford4-Dec-17 10:40

Dominic Burford

4-Dec-17 10:40

We never run raw SQL from our applications.....ever! And this is one of the reasons why. We execute stored procedures against the data. This is far more secure.

"There are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies, and the other way is to make it so complicated that there are no obvious deficiencies. The first method is far more difficult." - C.A.R. Hoare

Home | LinkedIn | Google+ | Twitter

Marc Clifton4-Dec-17 11:15

4-Dec-17 11:15

Kent Sharkey wrote:
I want you to think about just what a supremely bad idea it is to use a tex~~tual data access language~~.

You mean like JSON in client-side POST/GET commands? Wink | ;)

Gartner’s guide to successful DevSecOps

Joe Woodbury4-Dec-17 13:14

Joe Woodbury

4-Dec-17 13:14

So, you create an API and access the data... but there is no data since we chucked the database.

The far better solution is to have no data. This has the additional advantages of not having to write any code at all, nor having to design a UI. Heck, we can then get rid of project managers and executives will stop complaining about the annoying nerds, er, engineers. The amount of money saved is in the trillions world-wide.

Kent Sharkey4-Dec-17 9:16

Nobel prize-winning economist says Bitcoin “Ought to be outlawed”

4-Dec-17 9:16

SD Times[^]:
In a recent survey conducted by Gartner, the organization found that the highest-ranked strategy for a successful DevOps approach was collaboration with information security.

Step 0: don't

Kent Sharkey4-Dec-17 9:16