Загрузка видео...
Не удалось загрузить видео
Who Leave Admin Panel Open? One Misconfiguration, Big Disaster
112,625 просмотров • 10 месяцев назад •via X (Twitter)
Комментарии: 36

lol I owe most of my crazy security awareness to this man right here 😂😂 Even my own code dey log me out when I so rubbish 😂 na there I know say yes yes e Dey work 😂😂

nice one.. as good as this is.. this ur podcast go limit to tech pple wey understand wetin u dey speak.. expand ur codebase na.. add images depicting wetin u dey talk it will also help non tech people.. and hopefully invite smal experience pple to com talk bout security too

Thank you. Also no forget say I been full time software engineer, that time never too Dey but I go plan am. Thanks boss

Besides finding your videos educational, you're also very funny. Which one be “Welcome Admin, please destroy the company”? 😂😂

😂😂😂 once you see Bitcoin address for your DB begin dey cry

Hehehehehe

I am where I need to be as that guy who wants to be Soo cracked on the backend🫰🏾

As I dey enjoy your content make I still drop this one here. I'm a Data scientist with experience work end to end projects and also model deployment with 2 years of experience, currently in need of a role. Top notch content once again 😁

I know a 1 trillion naira company that uses admin as username and password.

Na that Error message part really hit me We need to be careful with Our Error Handlers and Error logging

😂😂😂

Omo, some Hackers crazy gan, see how I humble watch the whole thing. You don open my eye to things wey bin no dey obvious to me.

You finished the job here boss @AmosPikins I understand this better because this part concerns me more as a DevOps engineer. I will contribute this, for Env files use AWS Secrets Manager with least privilege when deploying on production infra

I was just laughing watching this🤣😂 My first PHP fullstack website, mehn, did all this error. It was later on I noticed my mistakes. @grok summarize all security measures in the video into a list

Well done chief 👏 I recently saw Django Debug page with full stack trace on a government site. Instead of a custom error page. They forgot to set DEBUG to False in production. I just shook my head in disbelief.

was just waiting for "dey with me" 🫡💯

God!! I know nothing… I never learn anything, I still Dey css… God !!! 😭

Pt2 So I'm native to cursor yh. I knew how even more foolish I was when my nigga clowns me for being WordPress @nerdjango. Which I shamelessly glazed by the way. Forgive me I was optimising for the path of least resistance you can't even imagine what and how I had to learn this

Omo

😅😂😂😂, it’s a different kind of joy when you can relate to everything you say in all your videos … a different kind of kind of feel 😂😂😅

I dey take note of your security measure series. ✅✅

I love ip whitelisting

I really enjoy your videos

Great one

@asemota I like your posts. Can you talk about the recent Shai-Hulud 2.0 worm that has compromised hundreds of packages, including popular projects from AsyncAPI, Zapier, PostHog, and Postman.

You no "clock it". I don pull the ear of my partners based on this Oga posts. Thanks for this 🙏

One bad config can bankrupt the entire system

Talk to me directly 😂😭😭😭

I plaster,i no really get knowledge of most of the things you dey teach so no way to verify if you dey right or wrong but till then I plaster

lol

Pt7 I think So my stack Next js or react Sprinkle some Vue in there if you must.. Eww who does that Use supabase for database There's tons of auth systems, shit you can even use boilerplates guy, I just dey stress my life since dey go back and forth with ai like stubborn 🐐

As a rule , don't even use /admin in your admin route.. use something else. Make it harder for hackers to predict you

Thank you boss for this

I remember being obsessed with securing my VPS server that I locked myself out. I couldn't get it, nothing was working. Made me realise it takes a simple effort to secure your infrastructure but some people just wave it off like it's not as important as the product they're building which is a very big fallacy.

@AmosPikins, I haven’t received any post notifications from you for days now, and I also noticed you didn’t join the App Secs & Devs space. Hope everything is okay? 😔

Boss love what you are doing here... ❤️❤️

