• ono@lemmy.ca
    link
    fedilink
    English
    arrow-up
    33
    ·
    edit-2
    11 months ago

    My (least) favorite in this category is email addresses. It’s astonishing how many developers screw this up by trying to validate an email address by some means other than sending a message to it.

    • pivot_root@lemmy.world
      link
      fedilink
      arrow-up
      26
      arrow-down
      1
      ·
      11 months ago

      100% agree.

      @tld
      user-at-fqdn@domain.tld.
      "user with spaces"@domain.tld
      "user@notdomain"@domain.tld
      endswitha_@domain.tld
      user+tag@gmail.com
      unicodedomain@🤡.tld

      All of those are valid, and the know-it-all developer’s shitty regex won’t cover most of them.

        • ono@lemmy.ca
          link
          fedilink
          English
          arrow-up
          15
          ·
          11 months ago

          “Systems that break email already exist, so let’s add more to the world.”

          Please, no.

    • mrkite@programming.dev
      link
      fedilink
      English
      arrow-up
      13
      arrow-down
      3
      ·
      11 months ago

      The problem is that if you send a message just blindly, you can be tricked into sending spam to millions of addresses. I do one thing that prevents that, but does violate the standard, I verify there’s only 1 ‘@’ in the address… this technically prevents people with '@'s in their name, but they probably find it impossible to do anything with that address anyway.

  • Corngood
    link
    fedilink
    arrow-up
    29
    ·
    11 months ago

    It’s all reasonable stuff except maybe:

    People’s names are all mapped in Unicode code points.

    I don’t see how you could avoid this this in software that needs to ask the user their name.

    I think it’s definitely a good idea to avoid using names wherever possible, and definitely don’t try to do anything clever with them.

    When necessary, software can just be clear:

    • “in unicode, what should I call you?”
    • "in unicode, who is making this credit card transaction?’
      • Corngood
        link
        fedilink
        arrow-up
        13
        ·
        11 months ago

        Haha, yeah, I didn’t mean literally telling them that. More like giving them a text field that can only contain unicode characters, which is pretty standard.

    • Spzi@lemm.ee
      link
      fedilink
      English
      arrow-up
      7
      ·
      11 months ago

      You can do that when you control the frontend UI. Then, you can set up the input field for their name, applying input validation.

      But I would rather not rely on telling the user, in hopes they understand and comply. If they have ways to do it wrong, they will.

    • xmunk@sh.itjust.works
      link
      fedilink
      arrow-up
      15
      ·
      11 months ago

      It’s solid but I’ve always preferred the similar list about date and time - some of the answers to this list are just “Yea, but what do you want us to call you.”