Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

In LiveView, we keep the state in one place - the server - and it simplifies a lot. But sometimes the state on the client is preferred, or even necessary, and we can't use LiveView for that part. Unless we have a LiveView that runs on the client 👀...

13,537 görüntüleme • 8 ay önce •via X (Twitter)

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

After sourcing and inspecting over 200 cars for clients and companies in the past three years, we've learned that sometimes things don't go exactly as planned. In this case, it was a Toyota Camry 2014 that we sourced for a client. During inspection, everything checked out perfectly and the A/C was cooling properly. In fact no codes on the scan report. My suspicion is that the refrigerant used before the sale wasn't of good quality, which later led to issues. After some time, the client reported that the A/C had stopped working. While in Akure, he was advised to install a manual compressor, which was not the correct solution for this vehicle. It might have been a cheaper fix in the short term, but it wasn't the standard we wanted for our client. We asked him to bring the car down to Lagos, carried out a proper diagnosis, and replaced the compressor and condenser. The repair cost us over ₦650,000, with some support from the dealer involved. At the end of the day, our reputation is worth more than the cost of any repair. We stood by our word, maintained our standards, and made sure the customer got the experience he deserved. The client is happy, the other client who recommended us isn't disappointed, and most importantly, we delivered on our promise even when the issue was beyond our control. We are accountable to ensure we deliver the best value for money when our clients trust us to source and inspect cars for them Anyways warranty plans for cars we source is coming . And it's going to change the game . Ouu. Yes Mr Moses to the rescue as well for the ac fix. No one would have done a better job than him (+2348026941215)

The mechanic

34,875 görüntüleme • 2 ay önce

ABC’s George Stephanopoulos attempted to trip up Secretary of State Marco Rubio by asking the same question about Venezuela three different times. “What is the legal authority for the United States to be running Venezuela?” And three times, Rubio shut him down. RUBIO: “I explained to you what our goals are and how we’re going to use the leverage to make it happen.” “As far as our legal authority on the quarantine, simple. We have court orders. These are sanctioned boats, and we get orders from courts to go after and seize these sanctions. Is a court not a legal authority?” STEPHANOPOULOS: “Is the United States running Venezuela right now?” RUBIO: “Well, I’ve explained once again, I’ll do it one more time.” “What we are running is the direction this is going to move moving forward, and that is we have leverage.” “This leverage we are using and we intend to use. We started using already. You can see where they are running out of storage capacity. In a few weeks, they’re going to have to start pumping oil, unless they make changes.” “That leverage that we have with the armada of boats that are currently positioned, allow us to seize any sanctioned boats coming into or out of Venezuela loaded with oil or on its way in to pick up oil.” “We can pick and choose which ones we go after. We have court orders for each one.” “That will continue to be in place until the people who have control over the levers of power in that country make changes that are not just in the interest of the people of Venezuela but are in the interest of the United States and the things that we care about.” “The legal authority is the court orders that we have.”

Overton

213,086 görüntüleme • 8 ay önce

This is a standard practice for almost all Tier-1 banking applications in Nigeria, and for some fintech applications I’ve previously performed pentests on. Client-side encryption isn’t a total waste, or a waste of compute, as some people have claimed, but rather a measure to protect against API tampering or API request/response manipulation between the client and the server when implemented properly. Even with HTTPS, attackers can capture a decrypted version of web or mobile API data in transit because the browser and the server establish a level of trust during the TLS handshake. Attackers can leverage this trust to capture & proxy already-decrypted traffic, tamper with it, and then forward it to the server. This allows them to override what the user interface or client is originally supposed to send and replace it with data of their choosing. That is why validation needs to be performed on both the client and the server side. To wrap up, encrypting API requests and responses makes it significantly harder for attackers to tamper with data, even if they capture the traffic, unless they have access to the encryption details (algorithm, encryption mode, key size, secret key, and initialization vector), assuming asymmetric encryption is used. In the demo below, you can see how I discovered additional parameters (balance, is_admin) in the API response, captured the registration API request, despite it being sent over HTTPS from the interface, added the discovered parameters, and successfully inflated my balance to 50 billion and also escalated my privileges to admin, and ultimately deleted the accounts of two live users/customers. In the second slide, I captured an API traffic of a bank app, and you can see how difficult the payloads are to read.

Ghost St Badmus

217,804 görüntüleme • 8 ay önce