Hacker News new | ask | show | jobs
by hyperion2010 1143 days ago
> What's more, the price is calculated by the client(!)

Somewhere between a chuckle and a facepalm.

2 comments

The article framed it as a client-calculated price double-checked by server, but I think a better interpretation is that it was a server-calculated price with a preview price computed by client.
How is this any different from javascript validating input forms? The backend clearly verified the input, meaning the client would not end up paying the wrong amount due to change of conditions or discongruency between the server and client. Exceedingly smart and simple, and the objections towards it demonstrates the modern cargo culting of "let the server handle everything it always knows best".