Why Do Devs Joke with Security???

Few tips that will save you 1. Hash password, session tokens 2. Encrypt data 3.enable limit rate and rps,ddos data from client shouldnot be in plain text 5. Do not upload files directly aways convert to base 64 at client and verify base 64 at server.

Listable directories and the robots.txt be showing a lot to hackers.

Hmmmm

😂😂😂😂😂😂

Heheheheh wetin be dis

Nice one, boss. 🫡 As a backend developer, I started taking validation more serious because I know how I curious I can be as a user (and there are 999+ others like me 😂). And that SQL injection ehnn, e dey scare me sometimes. I would love to watch you talk on it as well. 🙏

Tech prophet Do you offer classes for people with zero knowledge in cybersecurity but who want to learn?

Yes

I Dm you my prophet

I always emphasize the importance of Security In-Depth and Zero Trust principles to my team. Security is most effective when it's built into the system from the ground up, not added as an afterthought.

Just so y'all know I run pentests for solo devs free of charge🤝🏽

I once build Laravel API wey I no hash data, logs later expose users 😭. Since that day I dey hash everything like say na password. Security na real life lesson. 🚀🚀

Brada always dey cook for one corner 😆🤣🤣🤣🤣🤣

Please, sir, if you wouldn't, mind, i would like to be your student. Do you have a class where you teach people,

Tech prophet, I be wan talk about the excellent idea of sanitization of input field for validation, but wait what? Importing production database inside development server? 😂

Heheheheh dey play o.... i don see people do am well

Wow! 😂

Hackers in the database

Love these your new videos, they are super educative. Pardon my English. 🤭

Thanks boss

Most of the issues mentioned come down to the fact that most people don't settle down to learn these things; everyone just wants to make money (which is not bad, though). I have spent the last 5 years learning every best practice I could find, from documentation to codebases on GitHub and so on. I only started applying for a job this year.

learnt this rate limiting and it has been helping limit requests to the server know the type of response error code to retry request and also i always do something for every request has a tracking id in the header.if the response of that particular id is still in the cache return

Oga will lik to put my son in ur class

I do all the basic security checks, but that rate limiting is something i don’t know yet. Well ive not had reasons to be concerned about bots yet

As a backend developer the first thing I work on is my security and this days I am learning more 😂😂 I no wan hear story See this rate limiting I don’t joke with it Currently implanted it in my 3 tier rbac project Different rate limit for different tier

😂😂

I don't joke with data inputs, make sure they're properly validated, also preventing leaks on browsers dev tools and the database is secured enough to prevent penetrations, all data are properly hashed or encrypted. Good video @AmosPikins

Thanks boss

That ratelimiting is very interesting when you come across X-Ratelimiting:999 in response what do you think in your minds =Bypass Rate limiting due to massive login via password reset,otp bypass

But anyone who stores passwords as plain text, even in Development, shouldn't be called a developer

I like your content We can not talk enough about some of these issues and what people do in the industry. Kudos.

Wetin we go do these hackers sef?

Insightful as always 😂😂😂

I don’t even touch passwords or Authentication bro. I outsource that chaos to services Auth0 and Clerk... If you’re still storing passwords in plain text, you deserve whatever digital hell your database ends up in... I hope it finds peace in the next data breach

First question boss, why you like Jollof Rice... for all your videos you go de mention Jollof Rice. 😂😂

🤣🤣🤣🤣 e sweet na and 3 dey relatable

Don’t ever joke with security,and don’t depend on Cloudflare,Imperva and Akamai there are payload which sweep them like water,which I have bypassed some many time .sometime an endpoint can just bring a lot of user when you come across api/v1/user/ranking in login page

Some developers go even console.log password

🤣🤣🤣🤣

😂😂😂👌👌

new version of devs

I don run go tighten my project security very well. Thank you boss.

and the best way nah anthentication login or sign in that one day more secure

Some would even leave me it in console logs and print statements. You’ll be seeing free keys everywhere and their entire architecture

This is no joke because why I was told I was over engineering at a job and all I wanted to do was add authorization Imagine the first endpoint for login returning all user information and I raised an alarm, got told I should focus on my tasks