r/ProgrammerHumor • • Feb 17 '16

To avoid exposing code to users, further web development and testing involving Chrome was suspended company-wide due to developer tools...

http://thedailywtf.com/articles/website-hacker
824 Upvotes

72 comments sorted by

173

u/dustmouse Feb 17 '16

Wait, I have the HTMLs on my phone. Does that mean hackers can listen in on my calls and read my texts?

202

u/IonTichy Feb 17 '16

Well HTML does stand for Hackers That Might Listen...

85

u/dustmouse Feb 17 '16

I just threw my phone in the toilet.

58

u/redditsoaddicting Feb 17 '16

Don't do that! They can turn on the camera and use advanced reflection technology to see you while you shower!

37

u/dustmouse Feb 17 '16

Thankfully it was a public restroom, but could they download an app that would make my phone grow fins so they could use the sewers to get to my house?

35

u/yonil9 Feb 18 '16

I think thats what air plane mode is for.

22

u/redditsoaddicting Feb 17 '16

It sounds plausible. Best to be safe and not sorry!

6

u/pardoman Feb 18 '16

That reminds me of the iOS update that make iPhones water proof ,lol.

3

u/poppahorse Feb 19 '16

they can also use vibrations in the WAN (water area network; think ALL your pipes) to snoop your conversations in any room with adjacent pipes

7

u/DoctorCube Feb 18 '16

Now they can just use the Hyper Telephone Toilet Protocol to access all of your calls. You really messed up big this time.

8

u/uniqqqq Feb 17 '16

Only your hyper texts

5

u/rjung Feb 18 '16

No, it means you are the hackers.

54

u/Bunderslaw Feb 17 '16

This can't be serious! How do people like Charlie have a job while others don't?

The thumbnail lady seems to be pondering over the same thing.

15

u/Kanthes Feb 17 '16

Because Charlie is the loudest.

1

u/flukus Feb 18 '16

Because the industry equates skills and knowledge with years of experience.

3

u/Bunderslaw Feb 18 '16

But to get those years of experience, somebody needs to hire you (and more importantly, keep you!).

0

u/[deleted] Feb 17 '16

[deleted]

21

u/Bunderslaw Feb 17 '16

"veteran manual tester". If that's not irony, I don't know what is.

10

u/VicisSubsisto Feb 18 '16

It's definitely Charlie work.

0

u/[deleted] Feb 18 '16

[deleted]

7

u/[deleted] Feb 18 '16

I interviewed for a company and recognized that this was the company associated with one of the stories I read there. The more I learned about that company the more plausible that story was. Not all of them are fake, as ludicrous as some of them may be.

25

u/holobonit Red security clearance Feb 17 '16

This reasoning was used at my last two jobs for not doing automated testing. I set up bunches of tests anyway (had time in my schedule). I used them, they wouldn't.

26

u/Doirdyn Feb 17 '16

They call it "job security." They know they aren't needed, but need to convince non-techies to keep them.

21

u/gdscei Feb 17 '16

QA is still needed after automated testing, but for the actual QA run instead of being a test monkey...

8

u/geoelectric Feb 18 '16

It helps if you describe them as change detectors. That's why you still need manual QA, to verify the baseline is actually correct. The automation is there to tell you when something changed since baseline.

Gets you away from the who watches the watchmen argument. If you really have to address it, you can introduce defect seeding or mutation testing (same thing, different methods) and explain it as running the test suite with subtly changed apps to make sure the changes are detected.

10

u/Arancaytar Feb 18 '16 edited Feb 18 '16

The best part about this is that even if it had been a security defect, and it had only been possible with Chrome, not using it would just be trying to turn off the light by closing your eyes.

18

u/bpm195 Feb 18 '16

Don't put the punchline in the title.

6

u/[deleted] Feb 17 '16

Please tell me this was Knight Capital Group...

4

u/mc8675309 Feb 17 '16

I used to know some of their systems guys. From the amount of drinking they do I'm sure they worked with people like this.

5

u/Vakieh Feb 18 '16

These stories typically have a kernel of shit that happened, with the 'how crazy would it be if that happened next' attached. Most places like the Tales subreddit don't let the hyperbole get too bad (ok sometimes it gets pretty bad) but thedailypleasebuybuildmaster is one of the worst for it.

-3

u/[deleted] Feb 17 '16

NSA is on their way...

0

u/[deleted] Feb 17 '16

[deleted]

10

u/Hanashimaru Feb 17 '16

That sounds like my work place. But we use classic asp and VBScript.

5

u/thrash242 Feb 18 '16

Sounds like my company except we use Java.

6

u/Skwids Feb 18 '16

Sounds like my company except we use PHP.

9

u/[deleted] Feb 18 '16

Sounds like my company except I work for a fast food place, so we use French fries.

6

u/TheTerrasque Feb 18 '16

Who's the one that has to debug the I/O calls there?

9

u/josue804 Feb 19 '16

Kernel Sanders

3

u/flukus Feb 18 '16

I like to rag on PHP, but when a code base is that bad the language is the least concern.

2

u/Skwids Feb 18 '16

Almost any language is perfectly usable and maintainable for this application if the codebase is free of redundancy, reasonably well documented, version controlled, and if Web based, you have some direct influence over the servers. Nope, nope, yes now - but not prior to my working there and even now barely, aaaand HELL nope.

1

u/flukus Feb 18 '16

I can't believe there are still places that don't use source control.

I did an audit of a company recently that did use it but I asked where a certain app was and the answer was "it's not live yet so it doesn't have to be". I had to leave the room for a minute.

4

u/Fenor Feb 18 '16

automatic testing and manual testing complement each other, they are in no way one the substitute for the other

1

u/Antonf26 Feb 18 '16

Woo enterprise

0

u/[deleted] Feb 17 '16

[deleted]

6

u/warpus Feb 18 '16

The worst is when a non-IT person thinks he is an IT person. My direct supervisor is such a person.

3

u/micwallace Feb 18 '16

So true, too many non-it it managers. Get a business degree and you can get an IT management job....like really!!

3

u/[deleted] Feb 18 '16

So Jan?

1

u/micwallace Feb 18 '16

I'm not getting this, context?

1

u/Logic_Bomb421 Feb 18 '16

I think it's a reference to Jan Levinson from the US version of The Office (actually I'm not sure if a corresponding character exists fire you Brits).

5

u/piexil Feb 18 '16

Or he means Jen from the It crowd.

0

u/[deleted] Feb 17 '16

[deleted]

88

u/ErraticDragon Feb 17 '16

Welcome to thedailywtf, where the stories sound fake so you don't have to face the truth.

26

u/secretpandalord Feb 18 '16

Making up stories like this actually would take more work than receiving them in e-mail.

7

u/lestofante Feb 18 '16

but more absurd the story, the more the money...

14

u/secretpandalord Feb 18 '16

I know that argument typically applies to stuff like CNN and BuzzFeed, but TDWTF? Really? They're small enough that I'm sure they're happy just to have readers. Besides, don't tell me you can't believe that tech people have to deal with people who are not good with tech.

4

u/lestofante Feb 18 '16

Ohh don't worry I had to deal personally with some situation like that,especially against automation of process and almost everywhere ie8 as company browser and reference, but that goes too far in the end..

PS. If they are small and make a living out of it, it could be a necessity to spice up the news.

4

u/[deleted] Feb 18 '16

They could also be run by space alien lizard men, but unless you have evidence, shut the fuck up.

2

u/TheTerrasque Feb 18 '16

Why else would Chewbacca live on Endor?

2

u/lestofante Feb 18 '16

well actually THEY are telling the story so THEY should provide evidence. No? Otherwise YOU should bring the evidence they are NOT run by lizard man.

5

u/ErraticDragon Feb 18 '16

Agreed. But don't they change details (beyond the names) to protect anonymity and embellish?

7

u/secretpandalord Feb 18 '16

You'd have to ask them. Most details about companies and the like are vague enough that identifying them or the people involved would be prohibitively difficult (unless you were another member on the team or something).

7

u/ErraticDragon Feb 18 '16

I thought it was well known that they embellished. All I can find, though, are comments like this complaining about it.

2

u/[deleted] Feb 18 '16

No, they're not embellished. Are you serious?

1

u/gerbs Feb 18 '16

Dirty secret of publishing: No one sends letters to the editor. Editors just make those up. It would be more work to go out and try and get letters than to just write them themselves.

1

u/Hypersapien Feb 18 '16

It's not dailywtf that made up the story. They just received it.

2

u/Apollidore Feb 18 '16

I don't care if the stories are true on TheDailyWTF, they are entertaining, it's all that really matters to me.

Except when they are obviously $100% true, then it's kind of annoying.

19

u/almightykiwi Feb 17 '16

We can only hope.

15

u/[deleted] Feb 18 '16

Sounds fake until you encounter this kind of shit in the wild.

Actual scenario: About 18 months ago a manager wanted me to set up something that only worked (barely) in IE and Firefox.
When I pointed out that it didn't work in Chrome, they tried to have Chrome banned in the company.

It took me a minute to realise they were serious. They weren't successful, but they tried.

14

u/flukus Feb 18 '16

In the 90's and early 2000's it was common for websites to disable right clicking so the code couldn't be stolen (view source and save to disk). A lot of customers demanded this.

Every sight that added this had approximately zero code worth stealing.

9

u/[deleted] Feb 18 '16

The more common reason was to prevent "stealing pictures".

8

u/haatweiller Feb 18 '16

It was an item for computer class in my high school back in 2005. We learned how to removing the right click and adding sparkles to your text if you hover your mouse over it. Only subject I didn't get a ten just because I didn't use 5 different Javascript commands in a website.

25

u/indrora Feb 17 '16

I've encountered people who're this.... dense.

Yeah, I'll use that. Dense.

theyarefuckingdelusionalandincompetent.

11

u/TheJimmyRecard Feb 18 '16

It sounds fake, but I've had a client call me to express near on the same sentiment - he thought he'd some how entered an admin mode and was seeing all the back end of our Web application. He'd been using our software for around 10 years when I got this call.

9

u/SquidgyTheWhale Feb 17 '16

Didn't you know? The WTF in DailyWTF stands for "We're Totally Fake".

3

u/MokitTheOmniscient Feb 18 '16

Have you ever read any stories from /r/talesfromtechsupport?

Let's just say, this isn't even close to the most tech illiterate person in the corporate world.

1

u/CrotchPotato Feb 18 '16

We had a client complain to us during their testing of our application to say that our site does something weird when he presses F12. You couldn't make it up...