PLejeck
Joined 15 years ago
Joined 15 years ago
Remote: Temporarily, not long-term
Willing to relocate: Yes
Technologies: Ruby/Rails, HTML/CSS/SCSS/etc., ES6, Docker, EmberJS (intermediate), ReactJS (intermediate), Elixir (beginner), Swift (beginner)
Resume: http://careers.stackoverflow.com/nuck
Email: [email protected]
---
I started programming at 7, learning BASIC on my mom's classroom computer. Aside from a brief stint as a designer in college and a few dark years caused by Perl, I've been programming ever since. Also my the way I've picked up ample devops and UX knowledge.
I help maintain a few gems right now (Hooloo https://github.com/NuckChorris/hooloo , doorkeeper-grants_assertion https://github.com/doorkeeper-gem/doorkeeper-grants_assertio... , sidekiq-debounce https://github.com/NuckChorris/sidekiq-debounce), with a few more in the process of being extracted from the existing codebase of hummingbird.me (namely, libraries for interfacing with MyAnimeList and AnimeNewsNetwork, as well as JSONAPI::Resources integrations with Chewy and Pundit).
I've been working with Rails for 3 years, with a focus on applying UX concepts to API design. I'm looking for a startup that can use my skills and help me develop new ones like native app dev or more thorough functional testing.
Next year I'm sure they'll be arguing for decimal time.
In my experience, AniDB is effectively unmaintained code. They have developers, the developers just don't know the codebase well and they don't mess with old stuff. I've heard this is because it's a behemoth Perl script, but I don't know for sure.
But to cover your main point of "an API checking file hashes/fingerprints against episodes to add to your list", I just wanna say that this is kind of a silly system: you can easily extract that data from a filename.
For example, the desktop app Taiga has an open-source parser which extracts lots of data effectively (https://github.com/erengy/anitomy) and I myself wrote a simple regex-based one for my own client. Both are capable of extracting at least the episode number, subber, and series title.
So why would Hummingbird want to store hundreds of thousands of MD5 checksums when there's better options?
Additionally, MAL has lots of minor bugs, and how can you trust a site that hasn't been maintained in 5 years to store your password correctly? 2009 was a scary place.
This is pure speculation, but I wouldn't be surprised if MAL is storing passwords as MD5+salt. They do just email it to you in plaintext when you register.
And recovery is a 6 digit pin, which is totally plenty of entropy.
But still, if your frontend hosts can't reach your database, you have far bigger problems than your sessions not working.
It's as simple as that. Never assume that anything transmitted over HTTP is safe, because that assumption will come back to bite you.
Also, doesn't cryptographically signing (or fully encrypting, in Rails 4) the cookie just add more time to processing than using a database? I always assumed cryptography is slower than IO