2013-06-04 19:04:00.920913+00 by meuon 3 comments
Why would anyone publish a RESTful API Interface with CRUD (Create Read/Report Update and Delete) like Oracle's APEX (Application Express) on the public internet... for a mission critical real business application?
It's locked down now, after a quick demonstration of what CRUD is capable of doing. But I'm fighting the urge to really hurt some people.
[ related topics: Net Culture Databases ]
comments in ascending chronological order (reverse):
#Comment Re: made: 2013-06-04 19:18:08.956968+00 by: Dan Lyke
Remember back in the Chattanooga On-Line days when we'd get "colo" boxes (long before "colo" was a word) and we'd warn them that root passwords needed to be something other than "password" and that they should disable telnet, and they didn't listen to us...
...at least until the script kiddies ran roughshod over their boxes and formatted their drives, and then they'd at least make their root passwords "fuck" or "sex" or something slightly less asinine than "password"?
Yeah. Those who do not learn from history...
And I just had a huge education in programmers implementing systems without understanding that an invoice and a receipt are different things...
#Comment Re: made: 2013-06-04 22:53:05.102714+00 by: meuon [edit history]
Add a "statement". Add the complexity that in some countries they mean different things, and in several a "positive" balance on anything is redeemable as cash on demand. Add tracking special government issued transaction ID's like:
You paid 100.
25 goes to invoice 1001, tax id # 100100011111 25 goes to invoice 1100, tax id # 100100014111 45 goes to invoice 23, of which 10 goes to tax id # 1000110111 and 30 goes to tax ID #100110001 and 5 was not taxable.
No, I'm not kidding, we do that kind of thing (and much harder) all day long.
#Comment Re: made: 2013-06-04 23:18:08.51509+00 by: Dan Lyke
That's exactly what this accounting system should do (have you ever tried to read and understand all the taxes and fees on your telephone bill?), but instead it confuses "invoice" and "receipt" and is single-entry at best...