Youtube comments of Metalstorm (@M3t4lstorm).
-
474
-
199
-
SO is just a glorified forum, forums have been around for decades and are are mostly just CRUD operations. There is no real-time'iness about it, no huge amounts of data (think IoT, streaming, personalization/suggestions, etc). There doesn't seem to be any integrations with other large systems (CRMs, data warehouses, BI, ML, etc). They don't protentially lose large amounts of money if a number of users can't login/create a post. It's extremely read heavy, that's the easiest to design for. They are not dealing with financials/transactions/money, if something is out of date or data is slightly wrong it doesnt matter. SO still has downtime/maintenance basicslly every week or so, i wonder why...it's a sinple architecture because its a simple system.
39
-
21
-
21
-
17
-
8
-
7
-
7
-
6
-
5
-
4
-
4
-
3
-
 @marcioaso some pretty bad takes, ofcourse the FE wants to know what permissions the users has, if the user doesn't have the 'delete X' permission then you hide/disable the button that the user would click to 'delete X'. The API that actually 'deletes X' should be the thing validating that the user has that permissions. I don't think anyone in this thread has said that the permissions should be enforced/checked/validated in the FE...that would obviously be silly because it's easily bypassed, trust nothing from the FE, only server-authoritative, etc. A JWT is not a cookie, both literally and figuratively, so that whole section is basically moot. Also, a lot of people are assuming the client is a web browser, sure most of the time it is, but the same principles/architectures are used when the client is something else, like another application, service, CLI, a 'raw' request from something like CURL.
3
-
3
-
3
-
3
-
3
-
3
-
3
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
 @fxfighter ye then you need to rack it, maintain hardware backups, redundant locations (different countries at least - currencies, tax, processes, laws, etc), pay someone to manage and maintain all of this security/vulnerabilities, networking, storage, patching, etc...infra engi easily 50k+ a year.
1