Learn By Doing (It Wrong)
summary
Code contains a single = in PHP that makes any logged‑in user able to edit other profiles; a dev publishes a production DB password to GitHub; a homemade mailer keeps adding recipients and sends the same message a thousand times; logs pile up into millions of lines because exceptions are caught and ignored; a deploy copies half a branch and serves mixed versions; rsync wrapped via npm exposes rsync --delete all and wipes user files so 100000 user photos are lost; recommended fixes: env secrets, hashicorps vault, datadog/ELK, atomic or blue‑green deploys, clear APIs and safer send functions.
AI-written summary · about
chapters (9)
- 0:00Learning by doing it wrong
- 1:03Mistakes for growth
- 4:35Zero-day in user profiles
- 11:10Database password on GitHub
- 17:29Mail bombing mailing list
- 21:19Hiding errors
- 31:22Half feature branch in production
- 36:57Deleted 100K user photos
- 42:12Conclusion
related talks
46mCode is not important... or is it?
09mImprove Your Life with Hacky Side Projects
33mCode Archaeology: Becoming Indiana Jones
32mCommunity, PHP and us: Growing up
48mMind of a Hacker
14mAn always upto date Developer's CV
34mUser-driven Apps: Securely Build for Defined DBMS Users
49mUnlocking Success: Navigating the Code of Life with GitHub CoPilot