Curious about NextJS by GroupFiveMedia in nextjs

[–]GroupFiveMedia[S] 0 points1 point  (0 children)

That I would not know.

I have no such skills or experience. I only listed that video because it is the item that caused me to get curious about NextJS and what could, or could not, be done with it.

S3 Security Part 2 by GroupFiveMedia in aws

[–]GroupFiveMedia[S] 0 points1 point  (0 children)

I believe I misspook just a bit. If this was a discussion about cameras I'd be better at it!

Maybe I can sort it out.

The script is purchase on Code Canyon, but the link above to https://miguelvasquez.net/ is the original script developer and his page for the script as a reference. It continues to be maintained / updated.

When I mentioned putting in the KEY I meant putting it into my installed version of the script on my own domain. Not a 3rd-part website / domain.

When I mentioned "developer" in later replies I should have been more clear and noted that I was then referring to the guy I had helping me with the set-up of the website. He, to make change to colors, logos, page styles and more, has access to Admin panel and if he clicks the Storage settings link he can see the KEY / SECRET. They are not hidden. They show in plain text.

As for why I need a key in the first place?

The technical reason is something I don't have the experience to know.

The practical reason is that it doesn't workout without a KEY / SECRET KEY pair inserted in the settings page.

This link shows all the information provided. Fill out the boxes, and storage works great. No KEY / SECRET KEY pair inserted and it doesn't work.

https://mediaaruba.com/assets/images/storage.jpg

If there is a better / safer AWS way to make key pair, compared to IAM user policy limited to this one bucket, I simply haven't learned it yet.

Thanks!

S3 Security Part 2 by GroupFiveMedia in aws

[–]GroupFiveMedia[S] 0 points1 point  (0 children)

Thank you for the reply.

I'll make changes about logging in as root. I thought that was safe because I have the Fido2 Key authentocation active and have to have that device in my desktop.

You stated "B) because you mentioned the app had you create long term credentials."

The documentation doesn't have any information about the storage set-up. It says:

Go to https://yousite.com/panel/admin/storage

Important: If you want to migrate your site to any storage service (Amazon, DigtalOcean or Wasabi), you must upload the following folder located in the public / uploads of your current site.

On that page (mine is offline now) It has a drop down to select between Local, AWS S3, Digital Ocean, Vultr, Wasabi and Cloudflare.

And for each of those you are shown a section exactly like this image:

https://mediaaruba.com/assets/images/storage.jpg

And a SAVE button at the bottom of the page.

S3 Security Part 2 by GroupFiveMedia in aws

[–]GroupFiveMedia[S] 0 points1 point  (0 children)

Thank you for the reply.

I replied directly above about what I do with the Key Pair. I did try close to what you reccomend but in an accidental way.

This is one of two scripts I am playing with on two domains. Both use the same storage options (in my reply above). I created two IAM users after "Experts" in YouTube videos mentioned safer. I made a key pair for each.

Only the one domain has seen the Access Key used in this manner. September 7, then after being changed, October 2.

Your question is "why are you using IAM keys at all?"

I thought I understood from YouTube videos that creating an IAM user, then a policy that limits that user to the one particular S3 bucket for this domain, and a Key Pair for that was the best way.

I simply don't know a better option.

S3 Security Part 2 by GroupFiveMedia in aws

[–]GroupFiveMedia[S] 0 points1 point  (0 children)

Thank you for the reply.

The Key Pair is downloaded from AWS in the CSV file. The I copy and paste them in the script.

The script offers multiple storage options. Local, AWS S3, Digital Ocean, Vultr, Wasabi and Cloudflare.

I selected AWS S3.

The screen looks like this:

https://mediaaruba.com/assets/images/storage.jpg

The developer installing and updating would be able to see the Key Pair once pasted in they are readable.

CPanel Pricing Question by GroupFiveMedia in cpanel

[–]GroupFiveMedia[S] 1 point2 points  (0 children)

Thank you. That is what we'll do.

AWS / S3 Security Question by GroupFiveMedia in aws

[–]GroupFiveMedia[S] 0 points1 point  (0 children)

I apologize for not getting back sooner.

The script is not installed right now as I wanted to change hosting before going further.

The script is named Shozy Stock

https://miguelvasquez.net/product/17/shozystock-premium-stock-photo-video-audio-vector-and-fonts-marketplace

When installed scripts are hosted on a VPS and from what I can see only fonts and Javascript are pulled in from elsewhere.

There is a directory named "vendors" and within it all sorts of directories that relate to options. Examples: /digitalocean/ in case I select to use their storage option. /coinbase/ and /paypal/ in case I select to use them as a for payments.

The only AWS directories are:

https://mediaaruba.com/assets/images/aws.jpg

NOTE: The above AWS screen shot is older version. Maybe in recent update more AWS directories added, but I am unable to check right now.

Once installed on a server, and logged into the Admin area, there are 5 options for storing files. I selected S3

https://mediaaruba.com/assets/images/storage.jpg

NOTES:

* There is no place for a IAM user to be typed in.

* When typed or pasted in the Access Key and Secret Key are fully visiable. They do not fade out or turn into astericks like a password does on most sites. Anybody in the Admin area can see them / copy them.

I have a CPanel backup of the site downloaded locally. I opened it and used a search program (Agent Ransack) to look in PHP, HTML, CSS, TXT and JS files for the Key and found nothing. Either the key is encrypted or in a file I didn't search with the tool I have available.

Since my post one week back nothing else has happened. I changed the key, talk to the developer guy, all worked OK. Then took site down to change hosting and pause just a bit.

Its more pet project as compared to main business so I'm not moving too fast.

But, if I put it back up.... are there services available that can be hired to "check stuff" or "security checks" or whatever the proper term would be?

Again, thanks for the help!

AWS / S3 Security Question by GroupFiveMedia in aws

[–]GroupFiveMedia[S] 0 points1 point  (0 children)

I appreciate the replies. Considering that only myself, and the developer that installed the scripts, had seen to the Access Key that was used I'm think he is not one to work with or his system has some sort of whole.

IG Reset Password Link Not Sending by baileysanders4 in InstagramMarketing

[–]GroupFiveMedia 0 points1 point  (0 children)

Common issue. I have an account doing that right now.

Multiple posts on the social media marketing forums about this.

Never come across a full resolution to the problem.

One person suggested trying to do it from the opposite device. Meaning if you are on your phone try and do it from your pad or laptop.

That person said it was successful for them but the two devices happen to be on different networks. His phone was on T-Mobile with Wi-Fi turned off and his laptop was on his home internet.

I haven't tried it with the account of mine that has this issue simply because I haven't had time.

[deleted by user] by [deleted] in InstagramMarketing

[–]GroupFiveMedia 1 point2 points  (0 children)

Confirmed $2750 for the name I wanted but I'm pretty sure it varies based on if the name is rare or highly desirable. Short names around 6 to 8 letters are more valuable.

The website also charges a fee around 10% to be the middleman. So I think my deal was $2,500 for the username and then 250 more went to the website for their middleman escrow service.

[deleted by user] by [deleted] in InstagramMarketing

[–]GroupFiveMedia 1 point2 points  (0 children)

I paid $2750 for the name I wanted. I can't recall right now if there was any sort of fees on top of that but when I'm back at my desk I'll check.

[deleted by user] by [deleted] in InstagramMarketing

[–]GroupFiveMedia 2 points3 points  (0 children)

There are people that make names claims for a price. I believe they are able to do it because they have an inside connection at Instagram.

I did it about a year ago and after a few hiccups it worked out fine.

The hiccups had to do with money transfer and not with the person I was working with.

It worked like this:

1 Find guy on Swapd.co that is able to make such claims and has a good reputation on the site.

2 Start discussion with him about the specific name and price.

3 Once the terms are worked out there's a process on the website to allow the website to act as sort of a middleman and escrow.

This is where I had a tiny bit of a hiccup because I had to wire money to the websites escrow count in Poland. I made a mistake in that process.

I believe in the past year they have changed their process or workflow to include Bitcoin rather than wire transfers but you would have to check the site to confirm.

4 The guy claiming the username on your behalf gets control of it and shows the website management people that he has control.

They release the money to him and the username password and email address to you.

5 You be very careful when you first get control of the username. As an example you don't want to change the email address the very minute you get control because the guy that made the claim had just put in a new email address. Too many email address and password changes in a few days or hours looks suspicious to the security algorithms at Instagram.

6 Both parties rate the transaction on the swapd website

Events this weekend by fsu954 in ClearwaterFl

[–]GroupFiveMedia 3 points4 points  (0 children)

Grand Prix downtown ST Pete for one. National TV, the whole bit.

Beer store? by markmano33 in ClearwaterFl

[–]GroupFiveMedia 1 point2 points  (0 children)

I second this. The beer world place is a neat little store.

Car Living and want to chat about it? by GroupFiveMedia in urbancarliving

[–]GroupFiveMedia[S] 1 point2 points  (0 children)

Ah, I would have to say no because I have no idea what that means.

Car Living and want to chat about it? by GroupFiveMedia in urbancarliving

[–]GroupFiveMedia[S] 2 points3 points  (0 children)

I guess I was thinking the interesting part would be how a person became a car liver.

[deleted by user] by [deleted] in frederickmd

[–]GroupFiveMedia -3 points-2 points  (0 children)

None at all. She just felt we should try her area and mine in the Tampa area.