whenever someone at work says they have trouble with a web service or api I’m like “Idk I can curl it just fine, what’s your request look like” and you would not believe how many developers get confused by this question. It’s so goddamn frustrating
I get the same confusion when I prove someone wrong using a universal curl example. The same guy that parses JSON by hand (rather than use a library) can’t remember how to fucking use curl.
The same guy that parses JSON by hand (rather than use a library)
Of course I know him. He’s me.
Or a past version of me anyway that was too dumb for its own good and also tried to do datetime stuff and several other complex things. Daft moron, that guy. Glad I don’t have to work with such idiots any-
whenever someone at work says they have trouble with a web service or api I’m like “Idk I can curl it just fine, what’s your request look like” and you would not believe how many developers get confused by this question. It’s so goddamn frustrating
They know how to use Postman and that is it.
Hey that’s not fair, plenty of them also know how to upload hardcoded secrets to postman.
Make sure to save all your secrets in git and then upload from git to postman, that way your security incident is way more repeatable
Security compromise as code.
UPTaaS: Unsolicited Penetration Tests as a Service
I get the same confusion when I prove someone wrong using a universal
curlexample. The same guy that parses JSON by hand (rather than use a library) can’t remember how to fucking usecurl.Of course I know him. He’s me.
Or a past version of me anyway that was too dumb for its own good and also tried to do datetime stuff and several other complex things. Daft moron, that guy. Glad I don’t have to work with such idiots any-
Looks at coworkers
Glad I can now look down on such-
Looks at own work
You know what, never mind.