اگر در NodeJS برای وب سرورتون Auth service مینویسید و اگر فرایند Auth شما بر پایه password باشد. معمولا به این صورت مقایسه پسورد صورت میگیرید.

if (hashed\_pass\_from\_db === hashed\_pass\_from\_input) { console.log("sucess") }

این تکه کد یک مشکل امنیتی خطرناک داره که به چشم نمیاد به راحتی. این مشکل هم دقیقا بخاطر استفاده از "===" هست.
حالا این مشکل چیه و چطور رفعش کنیم. به این باگ امنیتی میگن Timing attack.
اینطور کار میکنه که با استفاده brute force هربار یک پسورد رو سمت back-end ارسال میکنند و با استفاده از زمان response حدس میزنند که چندرصد این پسورد درسته و اینقدر این کار میکنن تا پسورد درست رو بدست بیارن.
اگر از کتابخونه های bcrypt استفاده میکنید معمولا به روش امن براتون پسورد رو چک میکنند اما اگر از scrypt که قبلا توضیح دادم استفاده میکنید شما باید از یک function کمکی در ماژول crypto استفاده کنید.

crypto.timingSafeEqual(Buffer.from("a"), Buffer.from("a"))

این فانکشن زمان مقایسه رو constant میکنه. یعنی زمان مقایسه پسورد اشتباه با درست همیشه یکی هست و اینطوری attacker نمیتونه حدس بزنه. بدون این موضوع شخص attacker یکم تلاش کنه با تفاضل بین پسورد ها به راحتی به پسورد میرسه.

این ویدیو خیلی قشنگ این مشکل امنیتی رو توضیح میده و خودش براتون با مثال یک timing attack هم انجام میده ‌( ویدیو به زبان پایتون هست ولی حتما ببینید )
https://www.youtube.com/watch?v=XThL0LP3RjY

YouTube

Cracking passwords using ONLY response times | Secure Python

Security in programming is difficult to achieve. Try Anvil: https://anvil.works/mcoding In this video, we take a look at a class of attacks called "Timing Attacks" that use the amount of time that it takes a server to respond in order to gather secret information…

https://youtu.be/za2FZ8QCE18?si=hd5J9IaoqgXHEUSu

YouTube

How React ACTUALLY works (DEEP DIVE 2023)

Are you already working with the JavaScript framework React? Or do you want to learn it? No matter how much experience you have, this video will teach you how React work in detail! Some of the topics include, what is React, how can it be used in existing…

eloquentjs.ir
جاوا اسکریپت شیوا:

#js #book
@amiria703_channel

برای کانتربیوت کردن روی ترجمه‌ی wtfjs پی ام بدید:
@Amirrezarazi

Embedded Systems and ARM-based Processor Programming Specialist
Our company, a leading provider of innovative and technology-driven projects, is currently seeking an experienced Embedded Systems and ARM-based Processor Programming Specialist. In this role, you will utilize your knowledge and experience in C, C++, and ARM-based processor programming to successfully execute our company's projects.
Responsibilities:
• Develop software using C and C++ languages on ARM-based microcontrollers and processors.
• Manage microcontroller projects using Keil or similar compilation and debugging tools.
• Facilitate hardware and software interaction in embedded systems.
• Meet the programming requirements of embedded systems in terms of programmability, speed, and reliability.
• Integrate sensors and actuators for data collection, control, and processing.
• Pay attention to system-level requirements such as hardware connectivity, memory management, and power consumption.
• Prepare software documentation and deliver technical reports.
Requirements:
• Minimum of 1 year of experience with ARM-based microcontrollers and processors.
• Proficiency in C and C++ programming languages.
• Ability to use Keil or similar compilation and debugging tools.
• Experienced in the design, development, and debugging of embedded systems.
• Strong understanding of hardware-software interaction and optimization.
• Basic knowledge of electronic circuits, sensors, and actuators.
• Strong problem-solving skills, analytical thinking, and ability to work in a team.
• Excellent communication skills and ability to comprehend technical documents.
• Bachelor's degree or equivalent experience in a related field is preferred.
About Our Company:
Our company is a pioneer in technology-focused projects and is constantly growing. Our mission is to provide our customers with the highest level of quality service. With state-of-the-art equipment and talented employees, we successfully complete our projects.
If you are interested in this exciting opportunity, please submit your application and

salary range from: 60m (Toman)

Type of coopration: Remote - Full Time

@graph_ql

Frontend Developers (Angular 6+)
Have you ever wondered how it would be like to work for Daimler, owner and manufacturer of brands like Mercedes-Benz, AMG, Maybach, Smart and many others? Do you want to be a part of an ambitious new team to test and grow your skills? Are you passionate about developing new software solutions that will be rolled out and used globally? Do you find the challenge of building something completely new and from scratch exciting and rewarding?
Then continue reading…
We are looking for exceptionally talented individuals and offer you the chance to become a member of the newly formed and highly ambitious Daimler Mobility Global Tech-Hub that will be based in Istanbul but delivering solutions to all of our group entities globally. We are seeking teammates at different experience levels such as Junior Developers, Developers, Senior Developers and Lead Developers/Architects.
We create outstanding solutions with technical excellence and offer a great place to work - come join us!
More about Daimler Mobility AG: https://www.daimler-mobility.com/en/
Responsibilities:
• Develop and deliver world-class modern digital solutions for our global operations leveraging latest technologies and design patterns
• Help translating our internal clients’ business requirements into digital solutions to realize our digitalization strategy
• Collaborate and work closely with business partners, architects and delivery teams throughout the globe and entire solution lifecycle
• Assist with the maintenance and support of new as well as existing solutions
• Research new technologies and develop potential scenarios that build on and enhance the existing landscape
Qualifications/Experience:
• Our working language is English. Therefore, excellent command of English (written and verbal) is a must, German would be an asset
• Bachelor's degree in a related discipline
• Expert level knowledge of Angular 6+ is a must
• Experience with JavaScript, TypeScript, RxJS, state management, routing
• Experience in web technologies such as HTML5, CSS3, CSS frameworks like Bootstrap or alternatives, SASS, LESS, Micro Frontend Architecture
• Hands-on experience with APIs (OpenAPI or GraphQL)
• Profound experience with .NET framework/.NET core and/or Spring Framework (Spring MVC, Spring Boot, Spring Data)
• Working knowledge of one or more of the following is also highly desirable: React, Docker, Kubernetes, Azure, AWS, Design Patterns (MVVM, Repository, Unit of Work, IoC Container, Dependency Injection, etc.), TDD (xUnit, NUnit, MSTest), Test Automation (Cucumber, Selenium), Atlassian products (JIRA Software, Confluence, Bitbucket), Business Process Modeling Language (BPML), Low Code Development with OpenText Appworks, Abbyy FlexiCapture 12, Abbyy MobileCapture SDK
• Good understanding of project management, system/software development lifecycle (SDLC) techniques and various industry standard agile practices (DevOps, Continuous Delivery, Continuous Integration, Scrum, Kanban)
• Ability to work in international teams
• No restriction for international travel
• No military obligation for male candidates

salary range from: 60m (Toman)

Type of coopration: Remote - Full Time

@graph_ql

3D Modeling and Graphic Design Specialist
Company: Our company operates as a leading provider of innovative and creative 3D modeling and graphic design services. We are currently seeking an experienced specialist in 3D modeling and proficient in graphic design software, with a minimum of 2 years of experience, to join our team.
Responsibilities:
• Manage and ensure the quality of 3D modeling projects from start to finish.
• Analyze requirements and provide 3D modeling solutions that meet client demands.
• Implement visual effects, animations, and other graphic design elements.
• Perform rendering processes and ensure the quality of final outputs.
• Support 3D printing processes to ensure technical compatibility of designs.
• Collaborate within the team and provide project coordination.
Requirements:

• Minimum of 2 years of experience with expertise in 3D modeling.
• Proficiency in 3D modeling software such as Maya, 3ds Max, Blender.
• Skills and experience in graphic design software (Photoshop, Illustrator, etc.).
• Strong problem-solving skills and ability to work in a team.
• Ability to manage the creative thinking process and complete projects within deadlines.
Application:

If you are interested in working on exciting projects, sharing your creative ideas, and being part of a leading 3D modeling and graphic design company, please submit your resume and portfolio to the following email address:

salary range from: 60m (Toman)

Type of coopration: Remote - Full Time

@graph_ql

برای شرکت مطرح ترکیه ای ۳ تا نیرو لازم داریم، Requirement ها رو میذارم لطفا دوستانی که علاقه دارن رزومشون رو بفرستن پیوی:
@graph_ql

https://www.youtube.com/watch?v=aXOChLn5ZdQ

@IrJsDevs

YouTube

JavaScript for the Haters

Why does everybody hate JavaScript so much? A complete roast of JS that highlights the strongest criticisms against the world's most popular programming language. #javascript #roast #comedy ***🔥*** Black Friday Discount https://fireship.io/pro ***🔥*** Use code…