Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers

Zpravodajství

Technologické zprávy

Technika

Hasty Treat - Forms, Captchas, Honeypots, Dealing With Malicious Users and the Sad State of Contact Forms

Syntax - Tasty Web Development Treats

Full Stack Developers Wes Bos and Scott Tolinski dive deep into web development topics, explaining how they work and talking about their own experiences. They cover from JavaScript frameworks like React, to the latest advancements in CSS to simplifying web tooling.

<p class="has-line-data" data-line-start="7" data-line-end="8">In this Hasty Treat, Scott and Wes talk about forms, captchas, dealing with malicious users, and more!</p> <h2 class="code-line" data-line-start="9" data-line-end="10"><a id= "LogRocket__Sponsor_9" name="LogRocket__Sponsor_9"></a>LogRocket - Sponsor</h2> <p class="has-line-data" data-line-start="10" data-line-end="11"> LogRocket lets you replay what users do on your site, helping you reproduce bugs and fix issues faster. It’s an exception tracker, a session re-player and a performance monitor. Get 14 days free at <a href= "https://logrocket.com/syntax">logrocket.com/syntax</a>.</p> <h2 class="code-line" data-line-start="12" data-line-end="13"> <a id="Show_Notes_12" name="Show_Notes_12"></a>Show Notes</h2> <p class="has-line-data" data-line-start="14" data-line-end="15"> 02:00 - So you made a form:</p> <ol> <li class="has-line-data" data-line-start="16" data-line-end="17"> Contact form</li> <li class="has-line-data" data-line-start="17" data-line-end="18"> Sales form</li> <li class="has-line-data" data-line-start="18" data-line-end="19"> Email signup for newsletter</li> <li class="has-line-data" data-line-start="19" data-line-end="20"> Bug report</li> <li class="has-line-data" data-line-start="20" data-line-end="21"> Sign up for an account</li> <li class="has-line-data" data-line-start="21" data-line-end="23"> Password reset</li> </ol> <p class="has-line-data" data-line-start="23" data-line-end="24"> 03:00 - Now someone is going to:</p> <ol> <li class="has-line-data" data-line-start="25" data-line-end="26"> Have a bot that submits it</li> <li class="has-line-data" data-line-start="26" data-line-end="28"> Maliciously write a bot that submits thousands</li> </ol> <p class="has-line-data" data-line-start="28" data-line-end="29"> 04:14 - So what can you do?</p> <p class="has-line-data" data-line-start="30" data-line-end="31"> 4:54 - Honey pot</p> <ul> <li class="has-line-data" data-line-start="32" data-line-end="33"> This is a field that is either hidden or you tell the user not to fill in</li> <li class="has-line-data" data-line-start="33" data-line-end="34"> Can goof up autofill</li> <li class="has-line-data" data-line-start="34" data-line-end="36"> Works in many cases</li> </ul> <p class="has-line-data" data-line-start="36" data-line-end="37"> 07:37 - IP Throttle</p> <ul> <li class="has-line-data" data-line-start="38" data-line-end="39"> Only allow each IP to do an action a certain number or times inside a window</li> <li class="has-line-data" data-line-start="39" data-line-end="41"> You may only try signing up once per 10 mins</li> </ul> <p class="has-line-data" data-line-start="41" data-line-end="42"> 09:48 Block known ASN</p> <p class="has-line-data" data-line-start="43" data-line-end="44"> 12:37 - Captcha</p> <ul> <li class="has-line-data" data-line-start="45" data-line-end="46"> Soft captcha: “What is 1 plus 1?”</li> <li class="has-line-data" data-line-start="46" data-line-end="47"> Annoying captcha: Type these letters</li> <li class="has-line-data" data-line-start="47" data-line-end="48"> Google captcha: Train our self driving cars</li> <li class="has-line-data" data-line-start="48" data-line-end="49"> Hidden captcha</li> <li class="has-line-data" data-line-start="49" data-line-end="51"> Cloudflare hCaptcha</li> </ul> <h2 class="code-line" data-line-start="51" data-line-end="52"> <a id="Links_51" name="Links_51"></a>Links</h2> <ul> <li class="has-line-data" data-line-start="52" data-line-end="53"> <a href="https://www.cloudflare.com/">Cloudflare</a></li> <li class="has-line-data" data-line-start="53" data-line-end="54"> <a href="https://www.digitalocean.com/">Digital Ocean</a></li> <li class="has-line-data" data-line-start="54" data-line-end="55"> <a href="https://www.google.com/recaptcha/intro/v3.html">Google reCaptcha</a></li> <li class="has-line-data" data-line-start="55" data-line-end="56"> <a href="https://blog.cloudflare.com/tag/hcaptcha/">Cloudflare hCaptcha</a></li> <li class="has-line-data" data-line-start="56" data-line-end="58"> <a href="https://cloudinary.com/">Cloudinary</a></li> </ul> <h2 class="code-line" data-line-start="58" data-line-end="59"> <a id="Tweet_us_your_tasty_treats_58" name= "Tweet_us_your_tasty_treats_58"></a>Tweet us your tasty treats!</h2> <ul> <li class="has-line-data" data-line-start="59" data-line-end="60"> <a href="https://www.instagram.com/stolinski/">Scott’s Instagram</a></li> <li class="has-line-data" data-line-start="60" data-line-end="61"> <a href= "https://www.instagram.com/LevelUpTutorials/">LevelUpTutorials Instagram</a></li> <li class="has-line-data" data-line-start="61" data-line-end="62"> <a href="https://www.instagram.com/wesbos/">Wes’ Instagram</a></li> <li class="has-line-data" data-line-start="62" data-line-end="63"> <a href="https://twitter.com/wesbos">Wes’ Twitter</a></li> <li class="has-line-data" data-line-start="63" data-line-end="64"> <a href="https://www.facebook.com/wesbos.developer">Wes’ Facebook</a></li> <li class="has-line-data" data-line-start="64" data-line-end="65"> <a href="https://twitter.com/stolinski">Scott’s Twitter</a></li> <li class="has-line-data" data-line-start="65" data-line-end="66"> Make sure to include <a href= "https://twitter.com/SyntaxFM">@SyntaxFM</a> in your tweets</li> </ul>

In this Hasty Treat, Scott and Wes talk about forms, captchas, dealing with malicious users, and more!
 LogRocket - Sponsor LogRocket lets you replay what users do on your site, helping you reproduce bugs and fix issues faster. It’s an exception tracker, a session re-player and a performance monitor. Get 14 days free at logrocket.com/syntax.
 Show Notes 02:00 - So you made a form:
  Contact form
 Sales form
 Email signup for newsletter
 Bug report
 Sign up for an account
 Password reset
  03:00 - Now someone is going to:
  Have a bot that submits it
 Maliciously write a bot that submits thousands
  04:14 - So what can you do?
 4:54 - Honey pot
  This is a field that is either hidden or you tell the user not to fill in
 Can goof up autofill
 Works in many cases
  07:37 - IP Throttle
  Only allow each IP to do an action a certain number or times inside a window
 You may only try signing up once per 10 mins
  09:48 Block known ASN
 12:37 - Captcha
  Soft captcha: “What is 1 plus 1?”
 Annoying captcha: Type these letters
 Google captcha: Train our self driving cars
 Hidden captcha
 Cloudflare hCaptcha
  Links  Cloudflare

 Digital Ocean

 Google reCaptcha

 Cloudflare hCaptcha

 Cloudinary

  Tweet us your tasty treats!  Scott’s Instagram

 LevelUpTutorials Instagram

 Wes’ Instagram

 Wes’ Twitter

 Wes’ Facebook

 Scott’s Twitter

 Make sure to include @SyntaxFM in your tweets

Aplikace Youradio Talk

Hasty Treat - Forms, Captchas, Honeypots, Dealing With Malicious Users and the Sad State of Contact Forms

Poslechněte si podcast