OTC CatchUp #138 Summary

We conducted OTC Talks #4 - Files, DAGs and the Yardstick, with Krishna Gadia as our speaker.

General introductions.

Harsh Kapadia talked about how he created a basic Git Server that uses SSH.

We talked about Self-XSS, where users are persuaded to run malicious code on their browsers by social engineering.

We discussed why someone would save JWT in the database and how it kills the purpose of not reading the database to get user information.

Wilfred Almeida asked if it is a good idea to store user status (blocked, admin, etc) in the JWT token.

Ayush Singh asked for help to deploy his React.js and Express.js web app on a Virtual Private Server (VPS) for a company and we suggested deploying it using a platform like Vercel as it is much easier to deploy and manage.

Kartik Soneji explained how company licensing works in India.

Wilfred Almeida asked how he can build a system where he can find the number of times a request was made by the user and charge them accordingly.

We talked about why companies don’t update their internal tools and why they are incentivized not to update them.