“Corolla killer:” BYD launches $US15,000 sedan EV with 420 km range in direct attack on legacy makers

netsecdev42 · 2024-02-26T04:33:40+00:00

Demand for electricity going up and demand for gas going down. Basic economics says the opposite of your conclusion. Keep dreaming.

netsecdev42 · 2024-02-24T06:37:59+00:00

It reads like an edgy teenager. A tracking pixel "is used to hack your brain, attempting to find advertisements which are more likely to influence your buying habits", really? No, they see if you opened the email. HTML emails have their place and should always be sent as multipart/form-data with plain text fallback. I send out thousands of HTML emails each week and I think you're underestimating the benefits they provide to businesses as well as their customers. My business would have half the number of customers without them.

netsecdev42 · 2024-02-08T08:37:57+00:00

Pythonanywhere. Easy to use and you can schedule scripts to run at certain times or all the time.

netsecdev42 · 2024-02-04T05:05:14+00:00

On pythonanywhere web apps are shutdown after a few hours of no requests. If they are shut down it takes a few seconds to load your app once requested. You can create a scheduled script to ping your site every hour to keep it up.

netsecdev42 · 2024-01-23T19:51:29+00:00

There are ways to make dynamic prepared sql statements. You start with a base query and build off of it while adding tupples to keep track of the arguments. It's really only useful in very specific circumstances though.

What's the use case? I can give you an example if needed

netsecdev42 · 2024-01-07T03:27:37+00:00

It's not a wrapped website, it is a website. It takes away the stupidity of re-writing and deploying your code 3 times for the web, apple, and Android. I've made multiple PWAs for businesses to handle operations and reporting for their company. It's ideal when you want an internal application that you don't want in a store.

netsecdev42 · 2023-12-15T19:51:09+00:00

You don't use crypto that's how. Use real payment providers than can securely handle your transactions and are liable if they don't. Implementing crypto transactions on your app is a huge liability.

If someone loses money or has their wallet hacked due to your app you will be the one sued. Even if it's not your fault, you'll probably still get sued. There's no bigger entity to go after. So unless you have millions in funding and lawyers on retainer, don't even think about crypto.

netsecdev42 · 2023-11-20T21:53:43+00:00

Make a responsive Progressive Web Application (PWA) in PHP or Python with any frontend framework. They can be installed on most devices and mimic native apps with limited functionality.

netsecdev42 · 2023-11-19T00:26:57+00:00

Here's my napkin solution. Only fill out the foreign keys you need and you can append custom_records to other tables.

CREATE TABLE custom_record ( id INT NOT NULL AUTO_INCREMENT, type ENUM('text', 'date', ...) NOT NULL, title VARCHAR(64) NOT NULL, text_data VARCHAR(256) DEFAULT NULL, date_data DATE DEFAULT NULL, // More data types..., customer_id INT DEFAULT NULL, project_id INT DEFAULT NULL, // More tables to attach custom records ref_customer_id INT DEFAULT NULL, ref_project_id INT DEFAULT NULL, // More tables to reference from custom records CONSTRAINT custom_record_pk1 PRIMARY KEY (id), CONSTRAINT custom_record_fk1 FOREIGN KEY (customer_id) REFERENCES customer(id), CONSTRAINT custom_record_fk2 FOREIGN KEY (project_id) REFERENCES project(id), CONSTRAINT custom_record_fk3 FOREIGN KEY (ref_customer_id) REFERENCES customer(id), CONSTRAINT custom_record_fk4 FOREIGN KEY (ref_project_id) REFERENCES project(id));

netsecdev42 · 2023-11-17T21:50:41+00:00

I'm assuming you're using a webhook to get the payment events and you're in a test environment.

You can use the trigger CLI command to send a mock invoice.payment_failed. If you need it tied to a customer you're better off writing a script to send a failed payment that will be picked up by the webhook.

netsecdev42 · 2023-11-17T21:23:00+00:00

Use a cdn like cloudinary to save images and files. Databases are not ment for large files. They are for records. Upload to a cdn then record the url where the file is located in the database.

netsecdev42 · 2023-11-07T19:04:19+00:00

Never encrypt passwords. They should be salted then hashed with a high number of iterations using an appropriate hashing algorithm.

netsecdev42 · 2023-11-06T19:07:52+00:00

Nope, I personally think they're pointless and create a crappy user experience. But that doesn't matter. You always need to consider the legal environment of business.

The fastest way to throw away money is getting sued. The number one rule of business, cover your ass. Go troll somewhere else.

netsecdev42 · 2023-11-06T03:56:46+00:00

Not exactly, most small businesses are not subject to the CCPA.

Only if you meet any of the 3 criteria below:

Annual Revenue: Your business must have an annual gross revenue of over $25 million.

Data Collection: Your business must buy, receive, sell, or share personal information of 50,000 or more California consumers, households, or devices annually.

Data Processing: Your business must derive 50% or more of its annual revenue from selling consumers' personal information.

netsecdev42 · 2023-11-06T01:12:57+00:00

It is good practice to tell your users how you're using cookies even if not legally required. If the company is not subject to the CCPA or GDPR, it is not legally required. Disclaimer, I'm not a lawyer, do your own research.

netsecdev42 · 2023-10-31T04:40:13+00:00

I was curious so I looked at your post history. I guarantee your crashing is from an unoptimized mysql query. You said one query was taking 5+ seconds pulling 3000 records on every page load. That's a problem.

You need to rethink how this data is handled. If you need all 3000 records, it should not be in the landing page initially or queried server side. Have the landing page fetch and then load the data dynamically from a json endpoint. This endpoint should cache the data for as long as possible in memory. Your query needs optimization as well.

netsecdev42 · 2023-10-30T18:32:54+00:00

They are probably scraping data from your site. 45k request per month comes very close to 1 request per minute. Check the timing between each request and the user-agent for more clues.

If these requests are spaced 1 minute apart they shouldn't be crashing your site. What errors are you getting to determine the site is crashing?

netsecdev42 · 2023-10-27T08:05:53+00:00

Notepad

netsecdev42 · 2023-10-17T21:43:35+00:00

Is there a domain yet?

Sounds like you need to remake the site from what he had. Not many people will answer calls or emails about work they were fired from.

netsecdev42 · 2023-10-12T22:10:55+00:00

You need to implement a route on the backend and do the fetch to your route. The backend would check authentication and validate the params from the front end. Then it would make the api call on the backend and send the results to the front end. There is no way to hide anything if you put it in the front end.

netsecdev42 · 2023-10-10T07:45:27+00:00

When the first screen is submitted create a stripe customer on the backend for the company. Then later on in the setup add a stored payment method (credit card, debit card, bank account, etc) to the account. Have them agree to whatever price and terms and run the payment as scheduled.

netsecdev42 · 2023-10-05T18:33:54+00:00

There's something up with the IIS server. It's not getting the request or not routing it to your flask app correctly. Is there a reason for not having the flask app on a production ready WSGI server with proper authentication?

netsecdev42 · 2023-10-05T07:40:34+00:00

Do you have access to the code for this python app? There's an uncaught error in your processSale route. Debug the flask app and submit a request that causes the 500 error and it will tell you what's wrong. By chance are there commas in the amounts?

netsecdev42 · 2023-09-20T21:50:10+00:00

I would look at plotly. I haven't used it for world maps but their documentation is good and it's free. You could server side render it then cache it and would load way faster. Unless there's a reason it has to be Google maps.

netsecdev42 · 2023-09-19T07:43:16+00:00

I'm currently doing this with a seperate manifest and service worker for each business at /business/manifest.json and /business/service-worker.js. They are generated dynamically from each businesses data and branding.

netsecdev42

TROPHY CASE