@MechMK1 True story. Apparently that simple fact is something that I forget too easily sometimes (ironically, you just posted something about that topic recently...)
Interestingly, he got a reasonable answer from John Zhau. It was reasonable enough that I decided to take the opportunity to give him an upvote. There was a second where I was like, "Kinda wish there was somewhere on the internet for people to ask and answer all the overly broad questions they want". Then I remembered that that describes literally every other forum and discussion board everywhere...
@MechMK1 something about how if you don't understand people who are new to security then you should try reading about [link to detailed post on some other site]
A well-designed language makes the correct solution also the obvious one. A badly-designed language makes the wrong solution the obvious one, and even worse, makes a bad solution almost indistinguishable from a good solution.
That doesn't mean every PHP application is bad, or that people who develop in PHP are bad/incompetent/stupid/etc...
You can write good PHP. But it's much easier to write bad PHP.
PHP is a surprisingly polarizing topic. There are plenty of people who love it, but there are also a very large number of people who think that it is the worst thing to happen to the internet.
is nodejs a better solution nowadays?... i just think the idea is great, using the same lange for server and client side web-development.. but i have no experince ..
Personally I think PHP is actually a good language to use for web development, but I'm definitely in the minority around here. That being said, I'm trying to leave PHP - I'm not convinced the long term job prospects are good. Popularity is decreasing, and in my experience PHP jobs don't pay as well
@coffeekid I can't comment on Node.js. I have no experience with that either
If you want to make everything easy for the sake of being as easy and as friendly to everyone, you will inevitably run into people writing horrible code.
But my problem is that some design decisions, such as the == operator, are just AWFUL
Like, how often have you used == on purpose to get the desired effect?
@coffeekid I would say that it is at least worth consideration now. Whoever looked at ES2015 and thought "Man, I really wish I could program my backend in this" was a crazy person.
With modern JavaScript though, or typescript, it is more reasonable.
i didn't really spend a lot time with leaning programing.... i once tried to get into js nodejs and typescript, but to me it was not easy to wrap my head around it. python, php had been a lot easier...
The better question is, "Does this particular language have good support for running web applications"
Some of the most commonly used languages for web applications are (in no particular order and not exhaustive): PHP, Python, Java, JavaScript, TypeScript, Ruby (almost always as Ruby on Rails)
Go and Rust are two newer ones that are gaining popularity
If you used any of those languages, you would find lots of tools to help develop a web application
I personally wouldn't recommend Java. I think it has seen its heyday and is starting on a slow decline. I also wouldn't recommend PHP for the same reason, even though I personally like it.
However, I'm just one guy, and this is a very opinionated topic
So definitely don't take any of this as gospel
Did I miss any popular ones?
If you're interested in penetration testing then your best bet is to actually learn a couple, and definitely learn javascript
yeah, i see... thank you for your opinion. thats all i am asking for. when i tried nodejs.. i realized that there is a lack of libraries.. .. for example in python there is this great library for object-relational mapping sql alchemy... in nodejs there was one orm-library. but it was still experimantal.. not ready to use i think.. i don't know what happend after i tried it... few years passed... assuming.. that is something you consider a tool..
I am trying to create a logo where this text is inside this shape but I want it to be within the shape, including the eyes and teeth, I cannot figure out how to do so. The eyes and teeth are just filled white here and the client doesn't want any words missing, maybe I can space it in such a way??...
just read a post from a german newspaper.... (don't know about the behaviour of people from other countrys) ... apperantly the 5 passwords of people living in germany are 1. "12345"(same as last year), 2. "12345678", 3. "1234567", 4. "123456", 5. "password" ... not shure if that is true.. because i don't expect people to be that stupid... if they are even smart enough to write password in the english language, lol... no just kidding...
don't know why i am posting that... but seems to be no secret... it was in the news.. lol
Not surprisingly, the most common passwords are always silly ones. The question is, how often are those passwords used? For instance if everyone in the world was using strong random passwords, but 2 people still insisted on using "password", then "password" would by definition be the most common password
Although considering that my company got hit by ransomware this year because we had an open RDP connection and most of the office was using "password" as their password, it's probably also true that such easy-to-guess passwords are actually still fairly commonly used...
@MechMK1 I'm 90% sure that windows itself still doesn't have a way to easily blacklist passwords. I would list the windows OS as "common services", and also very important.
Generally people don't get opportunity to try password spraying against windows accounts... unless you're silly enough to put a server on the internet with an open RDP connection, or if your network gets compromised, or if...
i actually doubt that post myself now... and the seriousness of the newspaper.. it was a news app i just tested on my smartphone from a newspaper with not that bad of a reputation.. i googled the title of that post in a browser.. and i found the heading of that post, but not in the newspaper i expected .. but from a different newspaper with the poorest reputation in germany... now i am totally confused... they seem to be related now somehow... i didn't know... sorry...
Hope it does not sound as a surprise to anyone that modern Web and its security, with the many layers and technologies, is pretty confusing and difficult to learn well. For someone with a good perspective on the history of Web's design and development, was there anything that, in hindsight, could...
