E be like say with what you said, she enjoyed the sex you had together and probably may want more.

It's best for you to stick to learning javascript before moving to them frameworks, it can be tricky at time but time pass as you continue to learn. When talking web javascript is around the corner. Jquery time has passed. There are books like eloquent javascript PDF to start with.

Each language serves different purpose. Those language are built to solve a particular problem, na we dey generalize them when introduced to us.

nurain150:

Exactly infact I get that it is only Allah swt(Almighty) that is perfect.so far we cofr there must be a loophole

Either from third party or so. Programs are bound to error.

chukxy:

Hi Bahat, in C++ , we use new keyword to create the heap memory and use delete to release it. Malloc() and calloc() are for C and we use free() to release it.

Concerning my question, an example explanation from experienced guys like you would help more in grasping the concept more. Not only for me but others who will read it.

Many thanks.

Oh yeah. I used to work with C not really a cpp fan because it's extended C. Lol

nurain150:

Buffer overflow is also a programming error na failure to check length of expected data type it common with native development .Most exploitation is programming error wether it IOT web native Android IOS or anything we could think about.Buffer overflow is like a virus we can only suppress It.Lol

They curb buffer overflow with some stack and heap guard. But memory still leaks.

You should build yourself a telegram bot That scrap group members add those scrapped memebere to your channel

Karleb:


When you learn, you learn all pros and cons.

How would you learn MYSQL or any SQL and not know about SQL injection?

How on earth would anyone store passwords as plain text even in development.

You don't need to be an expert to know about all these vulnerability, it's common programming sense.

Frameworks to the rescue.

im not talking from web perspective he said buffer overflow that's what interest me . Sql and it's variants are programmers error

It's time it come back to life after all. It's our time to make the section great again by posting good codes and opening meaningful discussion threads.

SegFault:
This is Nigeria man. The only thing most people think about is only money, 98% of their brains are only about money, take am like that. I'm thinking of making a new forum for not only developers or computer scientists but scholars of all fields, where you can post journals and papers on topics related to your field and even give out tutorials and all. The money made from the sight will be shared to all those who post those papers and journals and also to those who teach. The real problem now is... I hate HTML.

Lol. Learn to love html bro, it's the language of the web.

nurain150:
I mean guys in my career part as an hacker I had seen several stupid mistakes a programmer made in their codes.Why how would you write a database program without knowing how it can be attacked.How can you write a program that input user input for data computation without proper validation.How can you fight for XXS with blacklisting words in input field How can you do the same for Sqli injection.I mean how can you store passwords as plaintext.To be honest all programmers cannot be good at what they do expect they are hackers themsellf.Takelesss of buffer overflow.

You shouldn't blame them, most of us don't read function documentation to know how to protect against or better still not use the vulnerable method. It takes years of experience in a language to better to attain such level. How many programmers read security blogs?

chukxy:
@Tim1212, quick question for you. Why should we implement our own custom copy constructor in a class instead of using the default copy constructor in a class in C++. If you explain this with example, I will appreciate.

Secondly, why is the advantage of using heap memory over stack memory in c++? Again, I will appreciate if you explain with example.

Many thanks in anticipation.

If memory serves me right. Heap memory are dynamic memory location allocated with malloc(), extendedby calloc() and freed with free(). Functions use stack memory to save function parameters and local variables.

You use stack memory location in your example codes to store variables declared in the body of your program.

Both stack and heap are used by functions. best to use stack space if you aren't doing something serious. heaps are used to manage resources. You can't allocate a specified memory to what you don't know the exact amount of resources coming through. Both stack and heap are guarded by compiler to guard against memory leakage.
There are good programming practise to using those memory spaces.

If you intend to go far with this cpp thing, you should pick a book on Microsoft cpp coding there you can be sure to write some good programs that run in windows.

Guy learn Java

SegFault:

So they still teach that crap. How funny, like I was asking myself while reading a networking and socket programming book what is the need of those.

I forgot most of those things I read on networking and worked with but isn't those two sessions working with web technology Practically.

Lets do random python discussion under this thread. so far you using python stack {frameworks} to solve some web related problems

i understand this language is good for web scripting, automation, data manipulation and many others. There are other uses of the language with its robust library features second to standard languages. one thing i want to believe is with python getting a freelancing job or actual project work shouldnt be that hard so far you have the cutting edge.
our python enthusiast should randomly get in here and drop some clues and some source codes to some really good functions.

SegFault:

@EvilSec and @Bahat or so I've forgotten his name are hackers on this forum self. They are the first I've met in Nigeria.

The guy forgot we don't have Wi-Fi lying around the corner. This guys have been doing things before we got started here. I still have a long way to go.

SegFault:

I can't ever dream of hacking Linux kernels though I want to learn that so bad but man, remember I can't use the Sudo commands or activate the superuser because of the damned protections in place. Yah termux can't do anything powerful unless you root your phone (get the su binary into the root directory somehow) and I need a laptop for that so I just have to manage. Though I am learning a little about Operating Systems. I'll do some research on this function hooking you speak of.

hmmm God is your strength.

darkdenizen:
Stop decieving urselves.

Nigerian programmers are the worst and that is just the plain truth.

That assertion has been proven time after time. And what the op typed is another proof of the mediocre nature of nigerian programmers.

Just imagine another social network. For what purpose exactly that the existing ones cannot cater to. All you are after is how to charge money for ads. That single thought alone has blocked all the innovative, entreprenuerial, futuristic and problem solving ideas and concepts from filtering through
great indeed
continue decieving urselves. Shior

As a matter of fact we can come up with another chat app like telegram or so if we can come up with the cryptography power to get an end to end encryption which will forever bypass monitoring and filtering but we don't have the funding and after its done I guess the big brothers will come around

SegFault:

I'm learning CS on my own too so what's my business with "cool stuff" (if you are talking about websites and all those normal stuff developers do count me out). The projects I am currently working on are compilers for two new languages, one is a procedural language, with template functions, coroutines, and has a little memory safety (which C lacks greatly). The second uses a register based VM (like the Dalvik VM, don't like stack based VMs), has a garbage collector, is object oriented, uses templates, multithreaded programming, coroutines e.t.c. Though I am kind of in a hook because my laptop spoilt last year and I have been using my phone to learn and build these projects, with termux help though

Yeah that's part of what I meant by cool stuff with those compiler constructions your doing. Next is to write an os probably with another approach different from what open source and Others that's have done it in the past. Mind you carisma has a programming language of his own called "simple language". So bro you doing nothing new but reinventing the wheel. If you're bored you can start hacking the Linux kernel or bsd kernels. Termux does nothing really powerful I guess you can do some function hooking on kernel but that's gonna be though with the recent memory protection in place. Quote me if am wrong.

SegFault:

Honestly bro. I just started programming last year (though I've gone far) so I don't know many hackers plus I'm a loner (it's like a disease or something).

I'm sure you've not gone far with you quoting yourself telling us how far you've gone. I guess you've only done some cool stuffs.

EvilSec:

Also 2FA is mostly bypassed either through phishing with tools like evilginx or modliishka or if the site is crap "lacks rate limiting, etc".

Oh yeah have been checking evilginx phishlet recently

talkcash:
All Nigerian programmers can be better than that of the whites, we can't just sit down on our chairs like a pile of nothing, we have to work hard to achieve success, you know we are all in the I.T generation which means our source of income has to come from the computer, one of the ways we can make money is to code you can also make money by grafics and other computer programs, so today I tell you that all who can program in Nigeria are great, I need five people that can code very well to reply this so that we can join heads together to make an awesome social networking website the languages needed are HTML, CSS, JAVASCRIPT, PHP and MYSQL, so are you in or out, this is a life time opportunity DO NOT MISS IT.

If we should finish with the product how do we make money from it. Mind you we still very far behind our pioneers in Tech. They lead we follow. Leave it or take it.

Nice writeup, I would recommend changing of pass often and not recycle password use on different sites. Although most of us are guilty of password recycle.
Maybe making stronger pass with site recommendation makes decryption more strictier and longer time to decrypt.

Even changing of password is up to the enduser. It's not easy having 10 different passwords on your head.
I remember 2fa is not the best mechanism as its been bypassed on different occasions

EvilSec:
Near the top of most security recommendations is to use "strong passwords". We need to stop doing this.

Yes, weak passwords can be a problem. If a website gets hacked, weak passwords are easier to crack. It's not that this is wrong advice.

On the other hand, it's not particularly good advice, either. It's far down the list of important advice that people need to remember. "Weak passwords" are nowhere near the risk of "password reuse". When your Facebook or email account gets hacked, it's because you used the same password across many websites, not because you used a weak password.

Important websites, where the strength of your password matters, already take care of the problem. They use strong, salted hashes on the backend to protect the password. On the frontend, they force passwords to be a certain length and a certain complexity. Maybe the better advice is to not trust any website that doesn't enforce stronger passwords (minimum of 8 characters consisting of both letters and non-letters).

To some extent, this "strong password" advice has become obsolete. A decade ago, websites had poor protection (MD5 hashes) and no enforcement of complexity, so it was up to the user to choose strong passwords. Now that important websites have changed their behavour, such as using bcrypt, there is less onus on the user.


But the real issue here is that "strong password" advice reflects the evil, authoritarian impulses of the infosec community. Instead of measuring insecurity in terms of costs vs. benefits, risks vs. rewards, we insist that it's an issue of moral weakness. We pretend that flaws happen because people are greedy, lazy, and ignorant. We pretend that security is its own goal, a benefit we should achieve, rather than a cost we must endure.

We like giving moral advice because it's easy: just be "stronger". Discussing "password reuse" is more complicated, forcing us discuss password managers, writing down passwords on paper, that it's okay to reuse passwords for crappy websites you don't care about, and so on.

What I'm trying to say is that the moral weakness here is us. Rather then give pertinent advice we give lazy advice. We give the advice that victim shames them for being weak while pretending that we are strong.

So stop telling people to use strong passwords. It's crass advice on your part and largely unhelpful for your audience, distracting them from the more important things.

Contact me today for your responsive and Mobile App today. Sandcroft Tech at your service

I guess working with framework such as React, vue or angular js for good FrontEnd works combined with some web temaplates makes it easier for the job

I'm also into FrontEnd dev

Back-end devs with nodejs express or python django is also a good start

Here is a github link to learn about the bitcoin technology


https://github.com/Bahat159/bitcoinbook

For all bitcoin developer. Chapter 1&2 doesn't require programming knowledge

Check bitcointalk.org for more information

nurain150:

Good one hacking has segment like codding. People who want hack operating system ,encryptation etc would be more close to the os .People after web based hacking too are in their own niche .Iot hacking too are... I guess it not right to impose the view of a Linux penetration tester on other niche.. . I still stand with my point that there is nothing called a script kiddie.. .It is a derogatory word that has vague defination... .If you feel like stepping up and coding a reverse tcp payload in cop or python.. .You feel like. If you feel like helping the Community by developing packet or network sniffer.. .You feel like. Because they are a whole number of tools out there and this won't propably work in a production enviroment......There is. Significantly nothing called a real hacker because he develops a programming tool.I guess you need to seprate the logic of ethical hacking from programming.. .Kudos. .

It's okay

No company pays for kernel development in Nigeria that I know of. So it's better to stay off it. Cheers

I think I know C to the kernel level with some assembly language in support of it.

nurain150:

I don't know where you guys got script kiddie from.... Why won't you use tools...did you invent your own biro while in school.. .No. . You needed to understand what hacking means... I suggest you buy courses on udemy or take ceh if you have the cash. .. Creating your own tools is only needed for specialized purpose... .And if you want help the community make it open source... . You need more enlightment on this not reading only articles on blog

I already took Ceh someone thought me that, then I dived into the unix community reading, writing and debugging codes while reversing and checking some high level published material. I guess I know what I'm talking about. I'm still learning