₦airaland Forum

qtguru:
I'll make a research on it and let you know, I have an app to make as an example, so I'll try one of the state management libs.

Glovo app is an app that i love their state management and how everything just works.

From same registration page, right into ordering food then remembering my mobile number is not yet verified and verifying same all within the order page.

The order page then seamlessly completes the order, updates itself about the order status and migrates into a map tracking app when the delivery is on its way, all without me clicking unnecessary buttons.

It was like watching a movie.

That is the kind of experience i hope all my apps would give.

tosinhtml:
In 1 - 2 Months, Flutter, it is easier to learn. But as they said if you're looking for money, React Native offers more opportunities and the reason is because Facebook came out with it in 2015, a lot of companies have adopted it therefore trying to maintain an existing codebase.

It is a very crazy market honestly.

1 to 2 months for flutter is very optimistic, especially for someone who is asking that question.

Depending on his previous programming background and ability to grasp Dart, he could be up and running in few days creating UI.

However, a real app in 2023 is now more than just the UI and a real Flutter dev (or any dev for that matter) must be able to handle a lot more than Text(‘I am a flutter dev’).

I would say, he should budget minimum of 4 months and start from Dart proper, if he is new to programming, else he will just keep coming back to the same dart that he skimmed over.

qtguru:
Everything you said resonates with me, RN is headache compared to Flutter especially if you know some Java too. You'd recommend Riverpod over Bloc ?

Riverpod doesn’t depend on context but stays at the very top of the widget tree, wrapping even MyApp() in a ProviderScope widget.

Since it owns the whole building instead of being a co-tenant, it logically seems not to be fighting against the tree.

RiverPod 2.0 is out and even better.

I chose RiverPod because it was developed by the guys who actually built Provider and its seen as a ‘correction’ of the ‘lapses’ that they noticed.

I heard a lot of Flutter devs just stick to ChangeNotifier() and deploy jejely. I dont like leaks and vulnerabilities which is why I believe variables should not just be everywhere not needed.

I consider myself a greenhorn in Flutter.

My choice of RiverPod might not be the best and i would gladly appreciate if the professors and deans of Flutter here can advise on the best package in this regards.

qtguru:
I have a major tasking coming soon, migrate 2 Svelte projects to TypeScript One project has close to 50k Lines of Code, and the other is not much, I plan to explore the idea of an AST Tool that parse JavaScript and see how we can write to TypeScript but in Svelte.

Each Prject has like 400+ files and a large code, I've written code on this base for like 2 years, and it was alot to understand.

I will update more here

Have you considered sveltekit with its new directory routing system?

Makes it easier to scale and manage.

With server and client hooks, and a lib/server that is never exposed to the client side and the new page/page.ts/page.server.ts/layout.ts files, everything is in its place and a place for everything

Flutter has so many snippets and amazing in-code documentation that you feel like a spoilt child.

It is hard to miss road in flutter….until you get to state management. Na there all road go scatter…until riverpod and go_router comes to save you (or shave you depending on their mood)

If you have a strong state management background, then you should sail through easily.

If you have a background in React, then you might lean logically towards React Native but i would still advise you consider Flutter as dart is a very sweet language.

Either one you choose, you are still on the right track. Theres not a single road to the village market.

Cheers

QuoteJustOnce:
I thought as much. Well in that case, what you want is a log drain or log sink; as it's technically called. AWS has something called CloudWatch. Not saying you should use it though, but mentioned it as a pointer to what you need.
There's also DataDog and New Relic. Just connect your app to any of those and let the traffic flow through them. You don't need to maintain a blacklist, as they will log and sort every request for your in very nice formatted charts and what nots; which could be exported; so you can analyse all you want.

Ok. I would look into your suggestions now.

Thanks so much.

QuoteJustOnce:
Quick question: how do you intend to handle this blacklist? because it will grow exponentially over time. It's easier to manage a whitelist because it will have fewer entries to traverse than a blacklist with say, 200k IP addresses, which means on every request, you will be potentially looking up 200k ip addresses?

if you already have a whitelist, then there is no need for a blacklist; or what is the need? i want to hear your thought process.

You are very right.

If the blacklist should grow to a huge size, then i don get serious timeout problem be that.

I created a blacklist so that i can harvest any potential rouge IP for later analysis and inspection. The blacklist would serve as a log of all rouge IPs, if any that exists.

This would allow me know if any attempt is being made against the server and by which IP.

However, i am not expecting the blacklist to grow. A length of 0 is hoped for. If i have 200,000 blacklisted IPs, then blacklist size is no longer my main problem.

Instant checks of the blacklist (i get an email any time an entry is made into the blacklist) would hopefully assist to catch this at the budding state.

airsaylongcome:
Tell you an experience we had at work yesterday. (Yes some of us started the grind yesterday). So because I'm in telephony, our systems are frequent targets, especially by bots from China and.....Palestine. The aim of the bots are to initiate international calls to premium numbers abroad. Think "seks" hotlines and OF lines. Or to Palestinian mobiles (don't know how the Palestinians profit from this but they are huge). So my colleague in Buenos Aires (lawyer turned techie) opened the well-known RDP port on his home router so he can access his work PC while way from home. Omo! Dem run the guy street. They used up his voip.ms account leaving him with a debt of $2k. I accomplish the same scenario (RDP access to my work PC) using a software service called Tailscale. Now, I have to train the rest of my colleagues how to use Tailscale.

So I fully understand how frustrating it would have been for you dealing with the hack attempts

Wow.

There are a lot of chinese routers out there with known backdoors which is available for sale on the dark web.

One of the greatest threats to cybersecurity currently is not just TikTok but these routers.

They are sold for very cheap and are currently deployed in the millions worldwide.

The best approach is to treat everyone else apart from you as a potential intruder and gate-keep access to allow only those you explicitly allow and for the resources you have granted access. No extras.

Lampert505:
Counter reducer has been fixed. I’m yet to learn backend languages. I’m not so sure I can implement maintaining current count using local storage ❤️

You dont need backend for local storage.

Just read up this article and test it out.
https://www.w3schools.com/jsref/prop_win_localstorage.asp

Update:

I have created a whitelist and using cors(), i bounce off every request not coming from my apps.

I have created a blacklist where IPs that are running scripts on the endpoint are added. This array is global and prevents access to all resources permanently.

I have also updated the endpoint to a custom endpoint instead of the generic one issued by railway.

Finally, i have secured every single route with an additional token layer.

Sleekcode:
The earlier you stop copying codes, the better for you.

Still don't see any reason why someone would want to hack your valueless app.

Can you see how this aged?

I brought down your own site.

Turned the crap into a white only page.

Lol

Sleekcode:
All these Quacks

Who uses a 2012 MacBook in 2022?

I bet you've never gotten a gig higher than $100

I still brought down your personal website. Guess what? I used a small Lenovo X270 for that.

Sleekcode:
Just saw this... we're basically saying the same thing lol.
I was just sick and tired of backend guys seeing themselves as gods lols.



Let me ask you personally and I hope you answer honesty.


How many times have you say share a code/middleware/ between your different projects?

You can basically copy and reuse same code very often in the backend.



Say you have a middleware that authenticates a user in App-A, You can 100% of the time use that same code in APP-B with just moderate changes.

Or say you have a middleware that stringifies user inputs in request... you can basically reuse that same piece of code between apps...


You can reuse lots of codes on the backend which will in turn make your job easier

Says the person whose site I brought down in less than an hour.

Frontend babu
Backend babu
Opsec babu

Paper horse oshi

Sleekcode:
Now you're copying from ChatGPT

next thing we'd hear is your site is under cyber attack.

Now whose site has been brought down?

Where is your DSA knowledge to help you now?

Sleekcode:
This polo alone cost N30k+

The Jean 35k+


ENOUGH to buy 2 of your decade old MacBooks lol


Do a lot more googling and research.


That bona9jaa domain the original .com extension is more than 8 years old.






See this overgrown kid and hungry nulled script peasant.


U wan rub shoulders with bonatheripper

See werey talking about clothes as if they are achievements.

Now that i have brought your site down in less than an hour, what do you say now?

Unfortunately, na only todo list dey your repos and your crappy site.

Now what were you saying again?

You are very lucky that you dont have any client else i would have brought their sites down too

I now own you sleekcode.

Who can suggest what I should post on his crappy platform?

Should i turn it into a porn site?

Your crappy site is down

Sleekcode:
Still waiting for your BIG reveal

NOW YOUR SITE IS DOWN

Mister Web Developer.

Sleekcode:
Olodo Mentioning me graduating from FUTO as if it's something I should be ashamed off.


I even graduated from one of the hardest departments in sciences.


Which school u even attend this Quack?


U want to compare yourself with Bonatheripper?

Pig

Dont rush.

Your footprints are everywhere.

Still in Afikpo Street, Calabar?