Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
![](/static/devrant/img/pipeless-devrant-banner-white.png)
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Search - "iban"
-
Using web2py, I wrote an SMS center for an African country and my company sold it for 1 Million dollars. I guess it was a success as it took me 10 days to develop it's initial release.3
-
This fucking stupid asshole developer, wrote every single SQL execution with string formatting. Made me a full sleepless night fixing this shit. Isn’t this a classical SQL injection sample?15
-
Security rant ahead, you have been warned!
As part of a scholarship application, our government requires a scan/copy of the applicant's credit card. Since the IBAN is now on the back, you have to send both sides.
The back is also where the CVC (security code) is. Any bank will strictly tell you NOT TO EVER SHARE IT - not even with them!
To make things even more fun, you now have the option to send this over email which is, of course, NOT ENCRYPTED!!!!!
I'm basically sending all the info needed to steal all my money over an unencrypted connection to an underpaid secretary, who will print it out and leave it on their desk for anyone with decent binoculars to see.
These people are fucking insane!!!!9 -
So... did I mention I sometimes hate banks?
But I'll start at the beginning.
In the beginning, the big bang created the universe and evolution created humans, penguins, polar bea... oh well, fuck it, a couple million years fast forward...
Your trusted, local flightless bird walks into a bank to open an account. This, on its own, was a mistake, but opening an online bank account as a minor (which I was before I turned 18, because that was how things worked) was not that easy at the time.
So, yours truly of course signs a contract, binding me to follow the BSI Grundschutz (A basic security standard in Germany, it's not a law, but part of some contracts. It contains basic security advice like "don't run unknown software, install antivirus/firewall, use strong passwords", so it's just a basic prototype for a security policy).
The copy provided with my contract states a minimum password length of 8 (somewhat reasonable if you don't limit yourself to alphanumeric, include the entire UTF 8 standard and so on).
The bank's online banking password length is limited to 5 characters. So... fuck the contract, huh?
Calling support, they claimed that it is a "technical neccessity" (I never state my job when calling a support line. The more skilled people on the other hand notice it sooner or later, the others - why bother telling them) and that it is "stored encrypted". Why they use a nonstandard way of storing and encrypting it and making it that easy to brute-force it... no idea.
However, after three login attempts, the account is blocked, so a brute force attack turns into a DOS attack.
And since the only way to unblock it is to physically appear in a branch, you just would need to hit a couple thousand accounts in a neighbourhood (not a lot if you use bots and know a thing or two about the syntax of IBAN numbers) and fill up all the branches with lots of potential hostages for your planned heist or terrorist attack. Quite useful.
So, after getting nowhere with the support - After suggesting to change my username to something cryptic and insisting that their homegrown, 2FA would prevent attacks. Unless someone would login (which worked without 2FA because the 2FA only is used when moving money), report the card missing, request a new one to a different address and log in with that. Which, you know, is quite likely to happen and be blamed on the customer.
So... I went to cancel my account there - seeing as I could not fulfill my contract as a customer. I've signed to use a minimum password length of 8. I can only use a password length of 5.
Contract void. Sometimes, I love dealing with idiots.
And these people are in charge of billions of money, stock and assets. I think I'll move to... idk, Antarctica?4 -
Fucking hate it when the moment I sleep, the "spaceX is live" notification awakens me and after 15 minutes of waiting, that bitch says "the plan rescheduled for next week". Don't you really know your fucking rocket has problems 10 minutes before takeoff? really? shit, Now I have to read some idiot rants to sleep again. Fuck my life.4
-
Most unprofessional exp. at work:
A lead developer working on personal projects at work, in plain view of directors. Also openly talking about his business venture when possible. -
I bought a Thinkpad E470 laptop for my wife' bday. Because she loves Linux, My first obvious choice was a Thinkpad. I chose the model from Ubuntu Certified Laptop list and installed Ubuntu 16.04 (Based on their recommendation)
now:
THE FUCKING UBUNTU IS UNABLE TO DETECT WI-FI ADAPTOR. LIKE WHAT THE FUCK YOU WERE THINKING WHEN YOU PUT THE LAPTOP MODEL ON THAT FUCKING STUPID LIST? I WANT TO EXACTLY UNDERSTAND WHAT THE FUCK YOU WERE THINKING AND WHY YOU UPGRADED YOUR FUCKING KERNEL WITHOUT REVIEWING YOUR FUCKING LIST?
AND I WANT TO KNOW WHAT THE FUCK LENOVO THOUGHT WHEN THEY RECOMMEND UBUNTU. WHY THEY STILL SELL THIS SHIT BASED ON THINKPAD' REPUTATION AND WHY THEY STILL SUGGEST THIS IS A LAPTOP FOR DEVELOPERS? NO THIS FUCKING SHITHOLE IS NOT FOR ME. IT'S DESIGNED FOR MASTERBATION WITHOUT INTERNET! BECAUSE IT'S NOT ABLE TO CONNECT TO INTERNET! YOUR MOTHER FUCKERS.
GARBAGE23 -
No! I don’t have any problems that you are deprecating various libs that I used in my software. Just don’t fucking insist that your code is production ready and stable and backward compatible. Please
-
"Manager,, can we change the names of our master branch to main"
"It might upset the muscle memory of others"
👍 Our entirely white team.👍5 -
Dear hex.pm website, please fire the developer who programmed this email and employ me. I grantee you I am better than this asshole.
-
Our fucking life is short, we all going to die sooner or later, thats sad. To make the matter worse, every fucking software will eventually be written in Javascript. Fuck.1
-
Today I noticed how incredibly insecure IBANs are.
You give it to anyone who wants to transfer money to your bank account, and all you need to perform a transaction is an IBAN, the account holders name and his signature.
So anyone who has your IBAN, your name and your signature (which all can occur in a single mail) can just send himself money from your account, cash out and move away. Noone can prove that it wasn't you who did the transaction and you couldnt find the guy.
And this is what all the banks in Europe use? What am I missing here?... how can a system this important be this insecure?10 -
The account manager who only appears when a problem arises comes into the room.
I can tell apart the majority of my office by the sound of their footsteps and the way they open the door.2 -
When I search desperately for a missing package that prevents me to compile some Python package on an old Freebsd system and turned out the answer in SO was my own answer.
-
Python is my wife, Elixir is my sexy girlfriend. While I love my life, the gf presents me what my wife cant. ReactJs/Rxjs is a lovely classic porn. The question is: what the fuck devRant is here???6
-
One of ur staff writes email body as subject and the body is always empty or her signature. Give a reason why I shouldn't kill myself.1
-
I am an stupid human being. How many times should I experience the same problem to learn from it? I don’t know why should I possibly be obsessed by latest MacOS updates? This fucking error ruined my day. Those fucking idiot coders in Apple must use some unit tests (including transparent iTerm in second display). Fuck you all. My £1600 Macbook pro is literally useless until some fucking coder finds what is wrong in their NEW update.3
-
Developer vs. user experience: it's 2024, tech is used by the masses, and still, every day, I see messages that something "failed", an "error occurred" or that I did something wrong trying to use something supposedly simple like entering a phone number or a bank account IBAN into a web form.
Worse, I remember being part of teams coding and releasing antipatterns like that, spending time in hour-long best practice discussions and still failing to deal with user "errors" in the end.
AI, the deus ex machina supposed to obsolete developers, does the exact opposite of development: fail and err, but always find some positive and polite words to gaslight its users and make them feel happy.
AI will replace developers just because it's better in being nice.6 -
I blame developers for Windows epidemic. If no one develop for windows, there will be no software for that shit, and there for, there will be no user for that shit.11
-
Install Adobe suit and your internet will be fucked off. The solution is to find all startup items of com.adobe.* and remove them. I don't understand why they put their files across all system. Adobe: please be normal and act normal. It's 21 century.2
-
Anyone uses Tmux and Vim with NON ASCII Right to Left Lang (Persian/Hebrew, ..)? That combination is a shit and gets worse if you enable mouse on vim and tmux. Every insert made screen to dance and characters to tumble. switched to Screen.2
-
Not super ranty but what I’m interested in how passwords are managed in your organisation?
I feel dirty receiving passwords through slack and having a spreadsheet on a shared drive seems like madness.
I’ve worked at organisations before that have a single login to a password manager. However theoretically I still have access to that as no one would have changed the password.
Organisational password manager softwares are really expensive!14 -
switched job. found out today that my qa - soon to be promoted to senior - does not know what a csrf token is.
*stares out of window*2 -
Tried to buy some dogecoin today (for fun, no investment). Several people recommended okcoin. Unfortunately, I did not figure out how to deposit money there as the bank details they gave me did not include an IBAN and only some weird account numbers for a bank account in Malta.
Either I‘m stupid or they are.3