Web Security - Lecture 02 - HTTP, Cookies, Sessions

แชร์
ฝัง
  • เผยแพร่เมื่อ 21 พ.ย. 2024

ความคิดเห็น • 38

  • @masteringmui
    @masteringmui 4 ปีที่แล้ว +39

    Really amazing you just posted this on TH-cam. Ivy League education really is available to those looking for it. Very much appreciated.

  • @AlexReyesInHD
    @AlexReyesInHD 2 ปีที่แล้ว +4

    Love the lectures! I think my favorite part is that you explain a subject and then immediately go into a demo that I can try at home. It's been a blast watching these videos and messing around with the demos on my computer

  • @xerxius5446
    @xerxius5446 2 ปีที่แล้ว +4

    Came for Security, Learnt how web works - 10/10 amazing content!

    • @Ferossity
      @Ferossity  2 ปีที่แล้ว +7

      That was my secret goal in teaching this course!

  • @patton4786
    @patton4786 4 ปีที่แล้ว

    I am currently doing Stanford cs 142 web application and just finished project 6 yesterday. this class will be my online class. and thank you for posting these good resource.

  • @rohini5294
    @rohini5294 4 ปีที่แล้ว +8

    Thank you so much Feross! This entire series is gold!

    • @bugr33d0_hunter8
      @bugr33d0_hunter8 4 ปีที่แล้ว +2

      Truly made of all precious metals. If the foundation is strong, you can never (G0lang) wrong. Fundamentals are solid, our mindsets rewarded. Keep hunting for bugs 🐛 and sharing our hugs.

  • @storyrory2111
    @storyrory2111 4 ปีที่แล้ว +3

    Feross good job man! You are really good at explaining cookies, http and sessions. I've been learning something new everyday thank you :)

  • @georgeb8637
    @georgeb8637 2 ปีที่แล้ว +9

    2:07 - Client makes a request - DNS server sends IP address for a specific domain
    10:10 - hardcode DNS for testing
    11:45 - how https can help us
    17:39 - HTTPS - the isp would not be able to prove the certificate - hence it could not be done to an HTTPS site
    19:53 dns over https
    35:06 - proxy - when you want a single server to outside world - that powered by multiple servers
    47:32 - Protocol stack
    59:08 - Twitter example

  • @johndoe-lx3zh
    @johndoe-lx3zh 4 ปีที่แล้ว +3

    So much insights in such short video! Thank you!

  • @yamildomenech4358
    @yamildomenech4358 4 ปีที่แล้ว +6

    Hi Feross Aboukhadijeh !, Nice Lectures, Thanks for All your Hard Work and Motivation. I understand you were using a stationary microphone, I humbly advise you to use a Headset Mic. All your future presentations and courses will be on Point in regards to Audio. Just a piece of humble advice. Thank You for the Material and Good Luck, Hope to meet you someday.
    ka1ku from Puerto Rico, Peace! Hack the World !!!

    • @yamildomenech4358
      @yamildomenech4358 4 ปีที่แล้ว +1

      @@Ferossity Great Job Jedi Master, the Force is Strong Within You.

  • @muhammadshariq4164
    @muhammadshariq4164 2 ปีที่แล้ว

    Amazing Lectures, learned a lot thanks for uploading this...This playlist is just incredible!

  • @shashankreddy4748
    @shashankreddy4748 4 ปีที่แล้ว

    does anyone else think he sounds and talks like elon musk?
    or elon musk sounds like sir Feros Aboukhadijeh !!!
    Good work ! Thank you for making it available for everyone out there...real good work !

  • @ПетърТодоров-о7ф
    @ПетърТодоров-о7ф ปีที่แล้ว

    Amazing course! Thank u for sharing it with us!

  • @akshat4976
    @akshat4976 3 ปีที่แล้ว +1

    Awesome lectures. Can you please upload the slides on course website ☺️

  • @seldasorf9583
    @seldasorf9583 ปีที่แล้ว

    i suggest String.trimStart instead of slice to shape the request string.

  • @nickmi91
    @nickmi91 4 ปีที่แล้ว +4

    Thank you, this is really great!

  • @muudus_tv
    @muudus_tv 3 ปีที่แล้ว

    Hi Feross.. Excellent Information.
    I am little stuck in the end of cookie demo.
    I created html and server js file but when I start node server.js
    It's throwing error...
    "internal/modules/cjs/loader.js:818
    throw err;
    Error: Cannot find module 'express'
    "
    Even after installing express through npm.

  • @tnhoang088
    @tnhoang088 3 ปีที่แล้ว +1

    Awesome, thank you sir!

  • @secdive5123
    @secdive5123 3 ปีที่แล้ว +1

    Thank you very much!

  • @muratcan__22
    @muratcan__22 3 ปีที่แล้ว +1

    really nice

  • @LearnWithBahman
    @LearnWithBahman 2 ปีที่แล้ว

    it is possible for non Stanford student to do assignments and check later for good solutions?

  • @shubham_srt
    @shubham_srt ปีที่แล้ว

    Thanks

  • @HungHsunHuang
    @HungHsunHuang 4 ปีที่แล้ว

    For the cool live demo at the end of this course, any guide or modules I can refer to to build something similar with Python?

  • @questreal5812
    @questreal5812 3 ปีที่แล้ว +2

    how can I create an account at lean bank? :D

  • @secdive5123
    @secdive5123 3 ปีที่แล้ว

    I got a question, you mentioned HTTP is stateless - yet when we have a header like "Connection: keep-alive", we're instructing the server to keep that unique connection alive, thus isn't that similar to maintaining a session/state?

    • @leandrodaluz5538
      @leandrodaluz5538 3 ปีที่แล้ว

      Hi, @SecDive it look like HTTPS/2 doesn't suport Connection fields.
      " HTTP/2 does not use the Connection header field to indicate
      connection-specific header fields; in this protocol, connection-
      specific metadata is conveyed by other means. An endpoint MUST NOT
      generate an HTTP/2 message containing connection-specific header
      fields; any message containing connection-specific header fields MUST
      be treated as malformed" datatracker.ietf.org/doc/html/rfc7540#section-8.1.2.2

    • @secdive5123
      @secdive5123 3 ปีที่แล้ว

      @@leandrodaluz5538 Thank you for that. I was just curious about how those headers have been working all this time, before HTTPS/2, since HTTP is stateless, so what's the significance of those connection-specific headers?

  • @VincentY376
    @VincentY376 4 ปีที่แล้ว

    Does the node.js example not work for anyone else?

  • @M4lch4t
    @M4lch4t 4 ปีที่แล้ว

    Thx Man!
    Great Series.

  • @srinathmp4773
    @srinathmp4773 3 ปีที่แล้ว

    Does anyone know where can we access the lecture slides/presentations?

    • @Ferossity
      @Ferossity  3 ปีที่แล้ว +1

      I should add a link to the current year website: cs253.stanford.edu

  • @nishant8880
    @nishant8880 4 ปีที่แล้ว

    Well, I don't know nodejs, (should I really master it as a pentester?) like I am able to read the code and understand it, but can't code it very well, like as a developer.

    • @nishant8880
      @nishant8880 4 ปีที่แล้ว

      I just saw the assignment 0 and course description, it solves my resources problem but the question still bugs me. Thanks in advance if you reply, lol

  • @jay_wright_thats_right
    @jay_wright_thats_right 7 หลายเดือนก่อน

    Some things are left out.

  • @alchemistmd2422
    @alchemistmd2422 ปีที่แล้ว

    audio volume goes up and down