Mitch Edwards (@valhalla_dev)
Mitch Edwards (@valhalla_dev)
  • 284
  • 256 165
Unprotected API endpoints can RACK UP your server bill
It's pretty easy to design your backend badly, but a lot of folks don't know it can be expensive and dangerous to do so as well. In this video, we go through an (oversimplified) example of an unprotected endpoint and how to fix it and design your backend better.
Twitter:
valhalla_dev
Discord:
discord.gg/fngHNW9Bnd
--
Key terms:
nextjs,reactjs,next js,appsec,application security,unsecure api,api security,nodejs api security,nodejs,nodejs api,web application hacking,web application security,web hacking,coding,software development,software engineering,backend design,backend
--
#cybersecurity #appsec #nextjs
Переглядів: 725

Відео

Rust Malware Development - Running System Commands with Rust
Переглядів 322День тому
The malware development content is coming back, I promise. Twitter: valhalla_dev Keywords: #rust #coding #softwaredevelopment
This is how easy it is to get hacked - Web Application Security
Переглядів 2,4 тис.День тому
Keep your secrets off the client, folks! Dev CheatSheets - Social Media and Personal Knowledge Management for Devs: devcheatsheets.io Twitter: valhalla_dev Level up your dev skills with CodeCrafters (Sponsor): app.codecrafters.io/join?via=vikingSec Keywords: security,information security,web security,web application security,infosec,hacking,hacking web applications,environment varia...
Dev CheatSheets Devlog - Destroying my startup's database
Переглядів 103День тому
Backend development is hard and frontend development is ugly... Full-stack development woes came in heavy this week! Join the Dev CheatSheets waitlist: devcheatsheets.io Twitter: valhalla_dev Level up as a developer with CodeCrafters (Sponsor): app.codecrafters.io/join?via=vikingSec Keywords: coding,software development,devlog,startup,social media startup,social media for developers...
Mid-Tier Software Developers are MISSING OUT
Переглядів 8772 дні тому
Check out CodeCrafters via my Partner Link below: app.codecrafters.io/join?via=vikingSec Mid-tier developers are one of the most ignored demographics in the software development education industry. CodeCrafters offers a great solution for that problem. With project-based learning that will challenge you with awesome projects that are worth putting on a resume, I was incredibly impressed at Code...
An Absolutely Locked In Devlog - Building Social Media for Developers
Переглядів 56714 днів тому
After two weeks of being sick, we finally had a good one boys. Dev CheatSheets Waitlist: devcheatsheets.io Keywords (ignore): dev cheatsheets,coding,software development,devlog,development log,software engineer,web application,saas,saas development,social media,web application development,web app development,day in the life,day in the life of a developer #softwaredevelopment #coding #startup
Rust Iterators 3 - The For Each Function
Переглядів 3121 день тому
Rust handles arrays/lists a bit differently than languages like Python, opting for a separate type called an iterator. I'm doing a short mini-series covering some of the functions you can run over rust iterators, this week bringing us to the For Each function. Head over to the Discord: discord.gg/5EDvEyAGbc #rustlang #coding #rust
Rust Iterators 2 - The Map Function
Переглядів 57Місяць тому
Rust Iterators 2 - The Map Function
I built and launched a web app in 4 hours and 15 minutes
Переглядів 179Місяць тому
I built and launched a web app in 4 hours and 15 minutes
1 Hour of Coding a SaaS 0x01 - Populating the File Metadata Database
Переглядів 91Місяць тому
1 Hour of Coding a SaaS 0x01 - Populating the File Metadata Database
Rust Iterators 1 - The Filter Function
Переглядів 80Місяць тому
Rust Iterators 1 - The Filter Function
Dev CheatSheets Devlog 2 - File Upload and the Future of Personal Knowledge Management
Переглядів 46Місяць тому
Dev CheatSheets Devlog 2 - File Upload and the Future of Personal Knowledge Management
Launch a Startup FAST with ShipFast
Переглядів 454Місяць тому
Launch a Startup FAST with ShipFast
AI versus The Free and Open Internet
Переглядів 201Місяць тому
AI versus The Free and Open Internet
Dev CheatSheets Devlog 1 - My Pre-Launch Went Viral?
Переглядів 115Місяць тому
Dev CheatSheets Devlog 1 - My Pre-Launch Went Viral?
I ditched AWS for Vercel and I'm not looking back
Переглядів 2,1 тис.Місяць тому
I ditched AWS for Vercel and I'm not looking back
I used AI to write Rust for 3 months. It sucked.
Переглядів 2,6 тис.Місяць тому
I used AI to write Rust for 3 months. It sucked.
I'm Releasing My Next Big SaaS Application
Переглядів 101Місяць тому
I'm Releasing My Next Big SaaS Application
Google Makes it SUPER SIMPLE to Stop Spam with CAPTCHA
Переглядів 194Місяць тому
Google Makes it SUPER SIMPLE to Stop Spam with CAPTCHA
BIGGEST Mistake New React Developers Make (Myself Included)
Переглядів 4254 місяці тому
BIGGEST Mistake New React Developers Make (Myself Included)
Progress on the Freelance Landing Page! (10 Web Apps, 1 Year Devlog Ep. 1)
Переглядів 2414 місяці тому
Progress on the Freelance Landing Page! (10 Web Apps, 1 Year Devlog Ep. 1)
Software Generalism - Write Malware, Develop Web Apps, Just Make Good Software!
Переглядів 2185 місяців тому
Software Generalism - Write Malware, Develop Web Apps, Just Make Good Software!
I'm releasing 10 Web Applications in 1 Year. Here's Why.
Переглядів 7285 місяців тому
I'm releasing 10 Web Applications in 1 Year. Here's Why.
[Announcement] GrabbrApp Intelligence Feeds!
Переглядів 785 місяців тому
[Announcement] GrabbrApp Intelligence Feeds!
Bevy Game Engine - Button Bundles Explained
Переглядів 2606 місяців тому
Bevy Game Engine - Button Bundles Explained
Iterators in Rust Explained!
Переглядів 1496 місяців тому
Iterators in Rust Explained!
Announcing DAN - Decentralized Analyst Network for OSINT and Cyber Security Researchers
Переглядів 1536 місяців тому
Announcing DAN - Decentralized Analyst Network for OSINT and Cyber Security Researchers
Stealing Google Search Traffic with Artificial Intelligence?!
Переглядів 1917 місяців тому
Stealing Google Search Traffic with Artificial Intelligence?!
Creating REST API's with the Rust Poem Crate
Переглядів 8548 місяців тому
Creating REST API's with the Rust Poem Crate
Vectors in Rust!
Переглядів 698 місяців тому
Vectors in Rust!

КОМЕНТАРІ

  • @valhalla_dev
    @valhalla_dev 4 дні тому

    Join the discord, let's learn and research malware together: discord.gg/7zJ2EzRXKt

  • @davorfister
    @davorfister 5 днів тому

    can somone tell me if there are any advantages to using rust istead of C since i dont really feel like learning a new language

  • @jessemaa
    @jessemaa 6 днів тому

    Does Shipfast come with prebuilt paywalls or just Stripe payments? Would I have to create user restriction (aka check if user.hasPaid === true) myself?

  • @ardamoin3859
    @ardamoin3859 7 днів тому

    Clear, concise and useful. Keep up the great work man!

  • @negativerfan
    @negativerfan 8 днів тому

    yeah no shit

  • @SamzyDevTrial
    @SamzyDevTrial 8 днів тому

    Great content man! Keep it up 💪💪

  • @salahuddin_dev
    @salahuddin_dev 9 днів тому

    i loved the video keep the content creation up!!!

  • @netssrmrz
    @netssrmrz 9 днів тому

    It's good to keep reminding devs about security issues but this should have been titled "...- Next.js Security". In my opinion, this is an 80's SSR problem and you can add it to list of reasons why SSR was dumped so long ago.

  • @Scarhandtunes
    @Scarhandtunes 9 днів тому

    Hope your light is all good man 😂

  • @SamzyDevTrial
    @SamzyDevTrial 9 днів тому

    Nice!

  • @krissradev6708
    @krissradev6708 9 днів тому

    Amazing man , thanks for ure content

  • @crftr-com
    @crftr-com 9 днів тому

    Don’t let the allure of a polished DX blind you to the long-term costs and pitfalls. Be smart, stay vigilant, and remember that at the end of the day, Vercel’s loyalty is to their bottom line, not your project's success.

  • @Sweet_Solos
    @Sweet_Solos 9 днів тому

    Ive seen alot of these stories as well where even people get request boted and their aws bill goes bonkers specially if you dont have a protection layer like cloudflare, but i remember in this ladys case vercel actually warned about the increased traffic but she ignored the emails .

  • @82TheKnocKY
    @82TheKnocKY 10 днів тому

    This is such a clickbait title for something that every other tutorial online warns about. I made the same mistake for my first project as well, and google itself even found that my firebase key was accessible in a public repo. I get youre making content for beginners, but calling this "cybersecurity" is a joke. If youre such a beginner that you make a mistake like this, no one is gonna be hacking your backend anyway. The worst case is someone will steal your openAPI credit.

    • @valhalla_dev
      @valhalla_dev 10 днів тому

      1) it’s a clickbait title because nobody has the intellectual capacity to click on anything else. 2) every other tutorial warns about it because people keep doing it. Exposed API keys and feeds affect hundreds or thousands of products every year. It is still a problem. I know this because i work in security. Products get shipped with this problem all the time. You admitting that you do it is, oddly enough, proof of this. 3) if you’re making this mistake nobody is going to hack you - see Rabbit R1 exposing their keys for proof that’s not true. If you don’t like the content, stick around for something else. If you don’t like the content and feel like being bratty in the comment section, find another channel. V simple. Have a good one!

  • @PeterSvP
    @PeterSvP 10 днів тому

    In general just don't use huge bloated frameworks like react

    • @REAL_J0KER
      @REAL_J0KER 10 днів тому

      So what do you use?

    • @tumbleweed_wagon2113
      @tumbleweed_wagon2113 10 днів тому

      You mean, don't use bloated frameworks like NextJs. React is a library bud.

    • @valhalla_dev
      @valhalla_dev 10 днів тому

      This is a video about not putting API keys in your front end. That can happen in literally any stack.

    • @PeterSvP
      @PeterSvP 10 днів тому

      @@tumbleweed_wagon2113 that's why every time I create react app using npm, then deleting the node_modules folder takes ages... Even worse with next js... I just prefer plain old node with minimal dependencies.

    • @dog4ik
      @dog4ik 10 днів тому

      @@REAL_J0KER rust

  • @valhalla_dev
    @valhalla_dev 10 днів тому

    Level up your dev skills (and don't get hacked) with CodeCrafters (Sponsor): app.codecrafters.io/join?via=vikingSec

  • @KrisRogos
    @KrisRogos 11 днів тому

    Part of my default project template has 6 default columns every table gets. It's one of those mistakes you don't want to learn twice.

  • @martinacosta6850
    @martinacosta6850 11 днів тому

    I need to do this

  • @valhalla_dev
    @valhalla_dev 11 днів тому

    Hop on the Dev CheatSheets weekly newsletter: devcheatsheets.io

  • @valhalla_dev
    @valhalla_dev 11 днів тому

    Sign up for the Dev CheatSheets waitlist and newsletter: devcheatsheets.io

  • @valhalla_dev
    @valhalla_dev 12 днів тому

    Join the Valhalla Den Discord: discord.gg/fngHNW9Bnd

  • @krissradev6708
    @krissradev6708 13 днів тому

    we dont need morals man we need money. pls drop more stuff like this

    • @valhalla_dev
      @valhalla_dev 11 днів тому

      This might be the best comment I've ever gotten on UA-cam

    • @krissradev6708
      @krissradev6708 10 днів тому

      hahah goes both ways, i rly enjoyed your streams where is an appropriate msgnger to chat with you?

    • @valhalla_dev
      @valhalla_dev 10 днів тому

      @@krissradev6708 should be a discord link on my channel!

  • @eugenebazhin8204
    @eugenebazhin8204 13 днів тому

    It's silly. When people should to think? We don't want to be a screw in another person business

  • @danielmarco7863
    @danielmarco7863 13 днів тому

    Enjoyable video, didn't even care that it was an ad.

  • @seanbm39
    @seanbm39 13 днів тому

    no

  • @WebDevCody
    @WebDevCody 13 днів тому

    Don’t listen to these hateful comments. This video is by far a lot better than some of the others I’ve seen from you so good job on those improvements. The next thing I would recommend is looking into your audio. It sounds like you have a fan going in your background and it’s not necessarily bad. I just think your audio could be better. Also take note at the sarcastic part of your video where you talk poorly about type script. That’s the type of humor. You need to add at the beginning as your hook, even though this video had a great hook, adding humor can really also keep someone interested in watching more. Last suggestion again, get a color light behind you your brown shirt blends into your back brown bookshelf and I think it could be better

    • @danamne
      @danamne 13 днів тому

      It's really nice when people instead of attacking actually offer positive and constructive feedback (especially from another experienced UA-camr)

  • @roycohen.
    @roycohen. 13 днів тому

    when you spend 6 minutes only to get an ad read

    • @valhalla_dev
      @valhalla_dev 13 днів тому

      When you pay attention to an entire video and toss it all out when you hear someone say the word “partner”

    • @WebDevCody
      @WebDevCody 13 днів тому

      @@valhalla_dev just heart and move on, it’s better for your mental health

  • @arterius169
    @arterius169 13 днів тому

    Project-based learning is not the same as tutorial-based learning. You either take the hard route and really learn, or you follow a tutorial and still end up sucking.

  • @opkp
    @opkp 14 днів тому

    Damn, nice work, I'm working on something similar too lol

    • @black_n_brown
      @black_n_brown 14 днів тому

      Yo, nice bro . I’m also working on something similar

  • @krissradev6708
    @krissradev6708 14 днів тому

    why the background music bro

  • @valhalla_dev
    @valhalla_dev 15 днів тому

    Don't want to write buggy software? Subscribe to the Dev CheatSheets weekly newsletter! devcheatsheets.io

  • @WebDevCody
    @WebDevCody 15 днів тому

    Good setup tweaks! I’m curious how your view metrics might change from these changes

    • @valhalla_dev
      @valhalla_dev 15 днів тому

      Yeah I'm curious too! I've got some colored lights coming in the mail and I'm trying out some new editing styles

  • @relaxation1411
    @relaxation1411 15 днів тому

    woooo!

  • @valhalla_dev
    @valhalla_dev 16 днів тому

    Join the Dev CheatSheets wait list: www.devcheatsheets.io/

  • @stanislavsmetanin1307
    @stanislavsmetanin1307 17 днів тому

    speaking of keeping curent.. You should check errors in the AI help, maybe..

  • @WebDevCody
    @WebDevCody 18 днів тому

    I think this is a good video and you're good at talking without needing many edits. My tips for this video. Title could be maybe "Starter kits are completely changing the way we ship software", or "Investing in a starter kit was my best investiment". I highly recommend trying to buy a colored light or improve your scene a bit. There is a lot going on in your background, and you blend into it. Work on your intonation, get more excited about stuff, get frustrated about past experiences.

  • @samasrujan
    @samasrujan Місяць тому

    How does that affect !! Its all cuz of taxation !! Tax profits in usa but no tax on earnings outside so companies are opening shops outside selling stuff from outside and skipping to pay tax inside usa !!

    • @valhalla_dev
      @valhalla_dev Місяць тому

      I have no idea what you’re talking about

  • @izatt82
    @izatt82 Місяць тому

    I agree the trust is gone.

  • @ThePirate193
    @ThePirate193 Місяць тому

    But im lazy!

  • @OliverG_daddy
    @OliverG_daddy Місяць тому

    Considering the recent outlook hacks this doesn't sound good

  • @thecasualpkm8534
    @thecasualpkm8534 Місяць тому

    You’re not my Daddy. You can’t tell me what to do 😂

  • @wvg.
    @wvg. Місяць тому

    if you buy the stock the day before, does that count as insider trading?🤔

  • @anvde8541
    @anvde8541 Місяць тому

    Wall street betts kinda stuff 😂, but i like it ( im a degenerate)

    • @lennart-oimel9933
      @lennart-oimel9933 Місяць тому

      what is it?

    • @anvde8541
      @anvde8541 Місяць тому

      @@lennart-oimel9933Professional Investment Tips. ( Remember 90% of Gamblers quit right before they hit big 🤣)

  • @none4964
    @none4964 Місяць тому

    Windows AP being more complex than Quantum Physics 💀🙏

  • @norbs993
    @norbs993 Місяць тому

    Of course it's stupid. Everyone knows that JavaScript is the best programming language 🙃

  • @epicujjwal
    @epicujjwal Місяць тому

    true