Search for a command to run...
No comments yet. Be the first to comment.
Node.js is an engine that allows us to run JavaScript outside the browser. Many applications today are powered by Node.js, offering numerous advantages and a few drawbacks. However, my intention today is not to introduce Node.js or JavaScript. Today,...
Hey 👋, I'm back with a new blog post after a long break! This past week, I’ve been diving deep into integrating push notifications into a mobile app. If you've ever wondered how they work and why they’re so effective, this post is for you! What Are ...
Node.js is an engine that allows us to run JavaScript outside the browser. Many applications today are powered by Node.js, offering numerous advantages and a few drawbacks. However, my intention today is not to introduce Node.js or JavaScript. Today,...
I have said many times that computer science is a huge field in which everyone can find themselves. Being a computer science student has its advantages and benefits, and one such advantage is what GitHub offers with its GitHub for Education program a...
Open Graph is an Internet protocol created by Facebook to standardize the display of metadata on social networks. What advantages does it bring? Open Graph brings advantages when displaying a website on social networks. Open Graph makes our posts mor...
I'm back again with a new blog post. The idea for this post came very spontaneously. I'm currently investing a lot of time in my new development project, and I came up with how to further secure the application.
As a solution to this issue, quite a few options were available. About each option, I will present what disadvantages it brings and what advantages it brings.
Cookies are a straightforward and common option for detecting whether a specific user has already logged in to a specific browser on a specific device.
However, cookies expire or are deleted by the user, based on which we cannot know without a doubt whether the user's identification information is still valid. In addition, cookies may also be subject to attacks such as identity theft or cookie spoofing.
Another way to detect devices is through IP addresses. Each device has its unique IP address that can be used for identification, but this only applies to private IP addresses.
However, the use of IP addresses may be restricted due to the use of VPN servers or proxy servers, which may hide the user's real IP address. In addition, multiple users can access the Internet through the same IP address, which can cause identity confusion.
Browser fingerprints are based on collecting information about browser configuration and user behaviour, such as browser versions, operating systems, installed plugins, etc.
This method can be very accurate in identifying a device, but users may be aware of their fingerprints and consciously alter or hide them, reducing the effectiveness of this method. However, in my opinion, one of the better ways of detection.
Two-step or multistep authentication (2FA or MFA) is a process that requires the user to provide an additional form of verification in addition to the normal password, for example via an SMS message, an authentication application or a physical security key.
This method provides an additional layer of security. It can prevent unauthorized access to the account but can also cause a bit more complexity for users and hinder them from accessing the application quickly.
Which method is most appropriate depends on the specific needs and requirements of the application and the compromise between security and user experience. It is also important to take into account any legal requirements or regulations that determine methods of protecting user data.
