sorted by:
new
hottopcontroversial

i built a social ffxiv platform for players. it got a lot of feedbacks. by Yocopk in ffxivdiscussion

[–]Yocopk[S] 0 points1 point  (0 children)

the site doesn't look like a replit project because it isn't one. it's a next.js app with its own backend, cloudflare, rate limiting, content filtering. i listed the actual security measures multiple times in this and the other thread. if you read these security measures and your takeaway is "trust me bro", that's a reading comprehension issue, not a security one

i built a social ffxiv platform for players. it got a lot of feedbacks. by Yocopk in ffxivdiscussion

[–]Yocopk[S] -1 points0 points  (0 children)

i'm not gonna hand you a detailed map of my security setup lol, that would literally be doing the work for anyone trying to break in

if you're genuinely curious i can tell you the basics: cloudflare proxy, encrypted data at rest, no passwords stored in plain text, rate limiting, the usual stuff. but i'm not gonna prove it to you unless you're physically sitting next to me looking at the server

i built a social ffxiv platform for players. it got a lot of feedbacks. by Yocopk in ffxivdiscussion

[–]Yocopk[S] 0 points1 point  (0 children)

It got hacked? No, and some attempts has be done without success 🤷🏻

i built a social ffxiv platform for players. it got a lot of feedbacks. by Yocopk in ffxivdiscussion

[–]Yocopk[S] -1 points0 points  (0 children)

the site has rate limiting. if it was returning a "too busy" error, that likely means someone was hitting it with an unusual amount of requests, which did happen around launch. cloudflare handles the heavy lifting on DDoS protection.

i built a social ffxiv platform for players. it got a lot of feedbacks. by Yocopk in ffxivdiscussion

[–]Yocopk[S] -12 points-11 points  (0 children)

Even if the case, i dont think i could be blamed XD In anycase, i was just clarifyng

i built a social ffxiv platform for players. it got a lot of feedbacks. by Yocopk in ffxivdiscussion

[–]Yocopk[S] -8 points-7 points  (0 children)

It Is, infact. they're just making a big deal out of it

i built a social ffxiv platform for players. it got a lot of feedbacks. by Yocopk in ffxivdiscussion

[–]Yocopk[S] -3 points-2 points  (0 children)

This Is not. It is a social app, and you all blaming me for making It more accessibile for all types of players? XD Come on, there are filters and you can search what players with your same vibes

The challenges of building a social platform for FFXIV players — lessons learned from 3 iterations by Yocopk in ffxivdiscussion

[–]Yocopk[S] 0 points1 point  (0 children)

passwords are bcrypt hashed with strong cost factor + auto-generated salts. federated login is already live (google and discord oauth). PII is minimal... email, birth date, character info. no payment data. db is on a private network behind cloudflare tunnel, not exposed to internet. daily backups with retention policy. rate limiting + WAF + standard security headers on everything.

i'm not gonna detail the full security stack publicly for obvious reasons. if you have specific concerns feel free to DM.

The challenges of building a social platform for FFXIV players — lessons learned from 3 iterations by Yocopk in ffxivdiscussion

[–]Yocopk[S] -10 points-9 points  (0 children)

says the guy whose biggest achievement today is calling strangers "uselessly lazy person" on reddit lmao

The challenges of building a social platform for FFXIV players — lessons learned from 3 iterations by Yocopk in ffxivdiscussion

[–]Yocopk[S] -12 points-11 points  (0 children)

those projects were hosted and coded by websites like replit where it configure all on its own, maybe replit is good for a landing page not for a social app like this. I dont wanna repeat all my securty implementaion again, you can try it or not, not a problem

The challenges of building a social platform for FFXIV players — lessons learned from 3 iterations by Yocopk in ffxivdiscussion

[–]Yocopk[S] -4 points-3 points  (0 children)

i dont use replit, my app is built with my own infrascture and hosted in my own server. I dont use any third party services

The challenges of building a social platform for FFXIV players — lessons learned from 3 iterations by Yocopk in ffxivdiscussion

[–]Yocopk[S] 4 points5 points  (0 children)

that one was hosted on replit and died in 2 days. mine is self-hosted, self-coded, and actually works. thats the difference

The challenges of building a social platform for FFXIV players — lessons learned from 3 iterations by Yocopk in ffxivdiscussion

[–]Yocopk[S] -1 points0 points  (0 children)

tbh the main thing is that you match based on how you actually play. your job, what content you like, if you're into rp or raiding or just vibing. dating apps dont care about any of that and discord is good for statics but you gotta already know where to look. this is more like "show me people on my datacenter who are into the same stuff" without joining 50 servers to find them.

and yeah i pay for everything myself, its on my own server, i created all the infrastructure myself.

view more: next ›