7 Security Risks and Hacking Stories for Web Developers 

You can use other people's bugs, or create your own from scratch.

@@Fireship Even if you create completely vulnerability free code there are still hardware vulnerabilities like Meltdown and Spectre.

Until your code meet someone that knows ASM and debug your code. Rewrite your masterpiece and deploy a patch!

You better start writing your assembly code or you will never get done ;)

@@TheBadFred that's why i like to build my pc from ground up by soldering individual transistors

Totally agree

Seeing my favorite youtuber for nativescript tutorials commenting here, proves that this channel provides a good content!

Janno Tabamo that’s so awesome! I’m glad you left that comment. Yes, this channel is pretty great - videos are top notch; great production and value.

ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-nPCfL_fuUk4.html looks like linkedin clone with firebase as well easy explanation with github repo

hahaha

hahaha

Frick

lol

I don't know how I laughed at this...

So if you block ip, how would your server respond with human verification?

@@arnoldas9730 Blocking an IP is a server-side operation, and can be reverted immediately. What I am talking about is this: - Attacker sends a lot of requests - Server notices, and sends a verification - Verification is not received, any more packets from that ip are blocked - Another IP, this one not an attacker, sends a lot of requests - Server notices, and sends a verification - The new IP responds with verification - Server allows higher than normal requests temporarily - If this IP continually sends a large amount of packets, it may be throttled.

that is the basic way to solve dos, NOT ddos

​@@HuyTran-wv3tzcaptcha for everyone then

Can you explain the reasoning for it?

@@OmerMD That could lead to enormous costs.

Yeah, he definitely didn't quite go into it. But I guess the main point there was that scaling can be the needed solution if your service just cannot go down. You can set an upper bound on how high your services will scale. And of course, you should do other things as well and not just rely on scaling.

Yep, I would say self-taught or on-the-job learning over the last 10 years. I has not been a quick or easy journey.

@@Fireship Thanks , you are the only YTr that inspires me to think of becoming a creator. This video is particularly well done, its like nerdwriter for code. I think it's inspiring me to think of how to help open source with security services. So essentially free doesn't mean safe

@@Fireship Yeah tell me about it, i'm on that road right now. New Subscriber. I imagine that 10 years ago it was a lot more difficult. I have the added difficulty of being born in Venezuela though :P

😂😂😂

😅😅😂

ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-nPCfL_fuUk4.html looks like linkedin clone with firebase as well easy explanation with github repo

it's an introduction to the subject, not a course.

Hai bro, are u form TN

@@hariharan-wt6qk Yes, I am

Naanum Tamil Nadu tha anna

@@hariharan-wt6qk Ok Thambi..

@@aravind.a Na college first year padekuren Neeinga developer ah anna

NodeJS is already used by corporations like RU-vid, Google, Facebook, Instagram, etc.

They usually refund those things, not everytime though

The guy who ok’d the refund probably got fired.

Don't antropromorphise companies, they can neither be good or bad.

ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-nPCfL_fuUk4.html looks like linkedin clone with firebase as well easy explanation with github repo

Andrei IR, Can you please explain me?

I accidentally leaked a Twilio key a few months ago, it cost us $5000 in one day :( But yeah it's good to hear that other people do it, makes me feel a lot less bad about myself.

@@BlazeBubble It is part of the learning process. and btw amazing gesture from the companies to actually notify you and then forgive you for these kind of mistakes (happened to me at least)

@@B1TCH35K1LL3R Yes thank god I was able to keep the job, they understood it was an accident and even the best of developers do mistakes.

Weird, I never mentioned him by name. The algorithm just knows.

Yeah. 😂 Thanks for the amazing videos, always! I absolutely love your content and the quality of images/animations. Much appreciated.

What is stopping you?

@@DevAcademyCom Most likely the cost of the course itself, even with the discount code it's over 400 USD, that's the amount of money equivalent to two months worth of living costs for a student like me.

@@emanuelfarauanu1760 Why over 400 USD? With the discount, it should be 350 USD. Did they apply some taxes?

@@DevAcademyCom Yes, UK Taxes

@@emanuelfarauanu1760 If you provide a valid VAT ID, the tax will not be added.

env files are usually put in .gitignore file, hence they are not pushed to remote origin like github. They just remains on your local machine

Well, unless you specifically write a script to dump all of your environment variables *before* pushing to a Git repository, then its because environment variables are stored within your *shell*, not your project, so something like Bash, sh, ksh, csh, and many other UNIX shells.

Environment variables stay on your local computer/server. There is no "file" to be published on Github so that's usually a safe place for information like this.

Google Cloud Armor and Cloudflare both serve as good protection against DDoS attacks, but also making your own web applications detect DDoS attacks and automatically deny is a (not that) decent way of protection as it'll at least reduce time spent processing requests since they're just rejected. Sure, it's not a 100% foolproof method, but you could cut the cost of the attack way down with this

@@NoorquackerInd at the moment it hits the software layer, it's already too late

@@kas-lw7xz what does this mean?

Hi, you can email contact@angular-academy.com or ask here. What do you want to know?