The Absurdly Underestimated Dangers of CSV Injection

I just tracked down a bug with more twists, turns, and interconnecting weirdness than I’ve seen in years - maybe ever. I feel like I’m going to be telling the story of Olympic-level Bug-Chase-2024 for years, and I feel compelled to write about it. To be clear, the following is a streamlined retelling. I’m omitting the twists, turns and dead-ends...

Preface So far during my career, I’ve designed software developer hiring processes at three different companies. I’ve personally conducted a couple hundred interviews, I’ve run teams that have conducted thousands, I’ve written staffing software, and I’ve spoken on hiring at conferences. I have also mentored people for fifteen years, am involved...

.split-aside { border: 1px solid gray; padding: 0.7rem; margin: 0.7em; margin-left: 0; } @media (min-width: 1024px) { .split-aside { float: right; width: 50%; } } I recently took an offer as a Director of Engineering with BlocPower where I will be working on creating the Building Data Collective. I am writing up my job search...

Recently I was asked in the Operation Code Slack to help someone understand dependency injection. What follows is my answer - as always, editted for clarity and to make me seem like a better writer. This is also in the context of javascript, though the concepts apply regardless. So what is Dependency Injection? This is one of those terms that...

.posts .tdd-with-no-more-tears img, .entry img, .entry figure { margin: 20px; display: flex; flex-direction: column; justify-content: center; align-items: center; } .entry figure img { margin: 0; } .entry .tdd-terms { border: 1px solid gray; display: inline-flex; margin: 0 auto; padding: 10px...