NAGBABIVE

@joshua.ai.builder

16.4K followers · usually 783 views a post

Views

20.5K

Likes

1.3K

Comments

11

Shares

89

SoundTikTok sound · original sound - joshua.ai.builder

View velocity

+1.2K views over 5.1d · ~234/day · 5 observations

Promoted product

Claude Code Masterclasshttps://claudecode.aiempoweredclub.com/ ↗

Why it worked

The video addresses common security vulnerabilities in app development, particularly relevant for developers using AI tools and platforms like Supabase. By breaking down complex security concepts into three actionable points with clear explanations and examples, it provides valuable and practical advice to its target audience.

Summary

The video discusses three crucial security issues to consider when building applications, especially those using AI. It highlights the importance of rate limiting API endpoints, ensuring row-level security in databases like Supabase, and preventing insecure direct object references to protect user data.

Structure

1Introduction to app security concerns
2Issue 1: Rate limiting API endpoints
3Issue 2: Row-level security in Supabase
4Issue 3: Insecure direct object references
5Conclusion: Security is paramount

Product placement

Supabase: A backend-as-a-service platform that provides database, authentication, and storage solutions. It ACTS as the backend for the app being discussed. Removing it would change the video's topic. Claude Code Masterclass: A course or program related to AI and coding, likely taught by Joshua Ladero. It APPEARS as the destination of the creator's bio link. Removing it would not change what happens in the video.

Original caption

AI can build your app fast, pero may security issues na madaling makaligtaan. Ito yung tatlong dapat mong i-check. #ArtificialIntelligence #CodingTips #SaaSBuilder #Cybersecurity #AppDevelopment

More from @joshua.ai.builder

Call to action

Follow natin ang ang simple ang AI automation and app building.

On-screen text

NAGBABIVE MASYADONG GUMAGANA FRONTEND INS LIKOD WALANG ITO SECURITY KAILANGAN BANTAYAN. WALANG YUNG ENDPOINTS KAYANG AI API MINSAN OPEN SO TAO NA IHIT ENDPOINTS TIMES MALALAMAN KAPAG SERVER NAGCRASH MAY NAGPACATERING KA BARANGAY KA LIMITING GAMIT MINUTES ISET NUMBER OFF SUPABASE GUMAGANA MO IN MUKHANG PERO WALANG RLS POLICIES MA ISANG DATA TAO. PERO SECUIRTY DAPAT BATMAN. FOLLOW NATIN ANG AUTOMATION APP

Transcript

NAGBABIVE Kung nagba-vibe code ka ng app, wag ka masyadong gumagana ng app, wag ka masyadong gumagana. Kasi gumagana siya. Minsan maganda yung front end, smooth yung logins, tapos sa likod parang walang ito. Ito yung tatlong security issue na kailangan bantayan. Number one, walang yung rate limiting yung API endpoints mo. Kayang gumawa ng AI ng working API, minsan open yan. So pwedeng may isang tao o bot na paulit-ulit ihit yung endpoints mo thousands of times. Malalaman mo kapag server nag-crash, nag-crash. May nagpacatering ka para sa buong barangay. Ka. Maglagay ka ng rate limiting middleware. Kung Express ang gamit mo, ilang minutes lang naman yung i-set up. Number two, naka-off yung row level security sa Supabase. Pwedeng gumagana mo, in mukhang okay lahat. Pero kapag walang RLS policies, ma-access ng isang user yung data ng ibang tao. Yung login mo secure, pero yung data mo masyado open-minded. Enable RS at table at gumawa ng sariling ng sariling data lang yung user. Pwede o. Number three, insecure object reference or halimbawa may gumagamit user record URL mo. Pinalitan yung user one, makita yung data ng ibang tao. Unit yan. Porket ka may access card sa building, pwede sa lahat ng unit. Kaya sa bawat request mo, i-verify mo kung user owner hinhingi yung data. Lesson dito, hindi sapat yung gumagana lang yung app. Dapat iniisip mo rin paano abusuhin yung app kasi yung app idea mo pwedeng mabuo AI. Pero yung security, dapat Batman. Follow natin ang ang simple ang AI automation and app building.

AI ang trabaho ko. Nagtuturo ako ng AI at araw-araw ko itong ginagamit. Pero hin

Claude Code Masterclass

40.7Kviews@joshua.ai.builder

Hindi lahat ng mabilis gawin, madaling i-maintain. Bago mo gawing default ang an

49.2

37.6K2.0K54

Supabase

37.6Kviews@joshua.ai.builder