RT @netzpolitik@twitter.com

In meinen Vorträgen hab ich diese Probleme bisher immer theoretisch beschrieben. Der Lidl-Thermomixer bestätigt eindrucksvoll, dass wir zuwenig Verbraucherrechte im Smart Home verankert haben.

Es darf nicht sein, dass solche Massenprodukte so unsicher verkauft werden.

🐦🔗: https://twitter.com/netzpolitik/status/1140965834225008641

"Big-Tech"-Konzerne wie Google und Facebook sind das Ergebnis von hunderten Unternehmensfusionen. Von den meisten Unternehmenskäufen bekommt die Öffentlichkeit gar nichts mit. Aber das ändert sich gerade. Die New York Times haben einmal visuell aufbereitet, wie #Google und #Facebook so fett geworden sind.
https://www.nytimes.com/interactive/2019/06/07/opinion/google-facebook-mergers-acquisitions-antitrust.html

(Addendum to "spec first": Sometimes, even an "elevator pitch" -- up to two paragraphs that describe what the application does -- is enough.)

19.2. Gherkin is your friend to understand expectations

Gherkin is a test description format which points "Given that <a system is in a certain state>, When <something happens>, then <this is expected>". Even if you don't use any testing tool that reads Gherkin, it will give you a good understanding of what it is expected from the app.

19.1. Write steps as comments

If you have no idea how to start, describe the flow of the application in high level, pure English/your language first. Then fill the spaces between comments with the code.

Better yet: think of every comment as a function, then write the function that does exactly that.

19. Spec first, then code

If you don't what you're trying to solve, you don't know what to code.

Write something specifying how the application works before writing any code.

"Without requirements or design, programming is the art of adding bugs to an empty text file." -- Louis Srygley

18. Shortcuts are nice, but only in the short run

A lot of languages/libraries/frameworks add a way to make things shorter, reducing the number of things you need to type.

But, later, that will bite you and you'll have to remove the shortcut and do the long things.

So learn what the shortcut does before using it.

(Addendums to "magical number":

1. Today, psychologists talk more about the magical number FOUR, not seven.

2. Think function composition, not function calling.)

17 1/2. The Magical Number Seven, Plus or Minus Two

"The magical number" is a psychology article about the number of things one can keep in their mind at the same time.

If you have a function, that calls a function, that calls a function, that calls a function, that calls a function, that calls function, you may be sure it will be a hell to read later.

Think more about: I'll get the result of this function, then pass it to the second function, get its result, pass to the third an so on.

17. Cognitive Dissonance is the readability killer

"Cognitive dissonance" is a fancy way of saying "I need to remember two (or more) different things at the same time to understand this."

For example, adding booleans to count the number of True values is a mild cognitive dissonance 'cause one can think "What do you mean True plus True equals 2?"

(Addendum to types: This is what most people get wrong about adding booleans to check the number of True values.)

15 1/2. The best secure way to deal with user data is not to capture it

You can be sure that, at some point, the data will leak, either by some security flaw or human interference.

If you don't capture any user data -- or store it in anonymized way -- you won't have any problems.

15. Think of the users

Think how the data you're collecting from your users will be used -- this is more prevalent on these days, where "privacy" is a premium.

If you capture any used data, remember to protect it against unauthorized use.

(Holy cow, I'm _really_ enjoying this. And I think I have more than 50 minutes of presentation going on here.)