Bad Firebase Security Practices

preview_player
Показать описание
How To Firebase:

  1. Chris Esplin
  2. Firebase
  3. JavaScript
  4. Google Cloud Platform
  5. Security
Рекомендации по теме
Bad Firebase Security 0:03:53

Bad Firebase Security Practices

Firestore Security Rules 0:10:05

Firestore Security Rules - How to Hack a Firebase App

Security Rules! 🔑 0:22:39

Security Rules! 🔑 | Get to know Cloud Firestore #6

Firebase Security Rules 0:52:47

Firebase Security Rules

Why my chat 0:05:33

Why my chat app broke… a cautionary tale

Nesting 'If Statements' 0:01:00

Nesting 'If Statements' Is Bad. Do This Instead.

3-9 Firebase Security 1:53:35

3-9 Firebase Security Rules

React, Redux & 0:10:34

React, Redux & Firebase App Tutorial #32 - Firestore Security Rules

STOP using this 0:05:05

STOP using this Two-Factor Authentication (2FA) method!

Coding for 1 0:00:24

Coding for 1 Month Versus 1 Year #shorts #coding

Data types and 0:13:17

Data types and global objects in Firebase security rules - Firecasts

Keeping your app 0:14:22

Keeping your app secure with App Check

The HARDEST part 0:00:28

The HARDEST part about programming 🤦‍♂️ #code #programming #technology #tech #software #developer...

what it’s like 0:00:25

what it’s like to work at GOOGLE…

NEVER buy from 0:00:46

NEVER buy from the Dark Web.. #shorts

Kiosk mode Bruteforce 0:00:40

Kiosk mode Bruteforce Evasion with Flipper Zero

Best Programming Languages 0:00:16

Best Programming Languages #programming #coding #javascript

Mr. Robot Sucks 0:00:55

Mr. Robot Sucks

Firebase CTF vulnerability 0:12:08

Firebase CTF vulnerability

Why Prisma Might 0:05:44

Why Prisma Might Not Be a Good Choice for Your Project

Programming Language Tier 0:00:55

Programming Language Tier List

Serverless security modeling 0:21:26

Serverless security modeling in Firebase

The Problem with 0:07:10

The Problem with Using Layouts for Auth

Why node.js is 0:05:48

Why node.js is the wrong choice for APIs (and what to use instead)

Комментарии
Автор

Absolutely bang on! Bro, every word you said is 100% true. But even after going through your tutorials I still can't imagine a perfectly locked down DB. For example if a user has permission to update his name & score on a Leader board, he can always do so via the JS on the web right? .. Again & again with wrong data?!

yoapps
Автор

I don't think it's *only* laziness. Rules are a pain to test and people (project managers & developers) usually underestimate the time it takes to develop security rules.

marcelcoelho
Автор

Exactly why i don't install apps from unknown developers xd

lmneozoo