Top all-time · #16963
Data with Bert
Personal blog · bertwagner.com · on HN as bertwagnerdataprogramming
Data with Bert is a personal blog at bertwagner.com about data and programming. Since 2018, 4 different Hacker News readers have linked it 7 times. It is still writing: the last post was on 2026-05-16, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
Commenters discuss the topics of his SQL posts: defense-in-depth against SQL injection beyond WAFs, and using CTEs or temp tables as lookup tables to influence query plans. No comment judges the writing.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
What Hacker News says?
If your security strategy relies on one or two security controls, you're doomed most of the time. We've added SQL filtering as a defense-in-depth measure, having a convenient seat in the architecture, complementing every other mitigation measure proper application developers and DBAs should be doing (and frequently get wrong). Even ORMs get bypassed once in a while: - https://github.com/mysqljs/mysql/issues/342 - ht…
Comment linking /2018/03/06/2-5-ways-your-orm-will-allow-sql-injection/
on “Preventing SQL Injections When WAF’s Not Enough”Submitted Building an IoT Notification Device from Scratch as a story · 86 points
HN discussionIt's not necessarily about locking, it's a way to control what order joins get done in, which, at least in MS SQL, is up to the query engine to decide. By writing to a temp table you can override the query engine's plan, often with huge performance gains. Less known is that you can get the same effect using a TOP N statement where N is a number larger than the rows you might get back. This presumably avoids the addi…
Comment linking /posts/does-the-join-order-of-my-tables-matter/
on “CTEs as Lookup Tables”Submitted Self-Hosting a Photo Server the Whole Family Can Use as a story · 4 points
HN discussionSubmitted 4 Types of SQL Injection as a story · 3 points
HN discussionSubmitted Two Words for Faster (SQL Server) Scalar Functions as a story · 2 points
HN discussionSubmitted Show HN: I made a pulsing conductor's baton as a story · 1 points
HN discussion