« first day (4618 days earlier)      last day (315 days later) » 

12:20 AM
posted on June 07, 2023 by Daniel Gagnon

The Beta channel is being updated to OS version: 15474.14.0 Browser version: 115.0.5790.18 for most ChromeOS devices. If you find new issues, please let us know one of the following ways File a bugVisit our ChromeOS communitiesGeneral: Chromebook Help CommunityBeta Specific: ChromeOS Beta Help CommunityReport an issue or send feedback on ChromeInterested in switching channel

posted on June 07, 2023 by Cole Brown

The Stable channel is being updated to 114.0.5735.119 (Platform version: 15437.42.0) for most ChromeOS devices and will be rolled out over the next few days. This build contains a number of bug fixes and security updates. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS communitiesGeneral: Chromebook Help Community

 
 
11 hours later…
11:43 AM
hello
 
@HarshGaur Welcome to the JavaScript chat! Please review the room rules. If you have a question, just post it, and if anyone's free and interested they'll help. If you want to report an abusive user or a problem in this room, visit our meta.
 
What is the most secure method to authenticate user but stateless
i am building a web application like linkedIn
 
 
3 hours later…
2:48 PM
@HarshGaur do you mean a secure log in authenticator?
If that's what you mean, you could store the user's info in a local database like MariaDB or MySQL. My favorite is MariaDB, because it is free, simple and secure, 3 of my favorite things.
For passwords, you can hash it when the user signs up, and store it in the database so it doesn't get exposed. Otherwise storing it in plaintext form is a horrible idea, it is super unsecure and dangerous.
Then since the password would be completely different, you would let the user enter the real one in the website, send it to the server and hash that one, and check if they both match. This is hashing, a super secure way to authenticate a user through log in without storing their sensitive info in plaintext.
 
hmm
 
If you're really interested, let me know, I'll show you some example code on how to do this in Node.js. If you don't use Node.js, you will have to ask someone else for help or look up some tutorials.
 
more concerned with insinuating that just hashing makes it super secure, ;)
maybe super secure, compared to plain text
 
@KevinB it definetely makes a difference, and yes, there are many other ways to secure it but this is probably the easiest
 
3:11 PM
Hash+salt. Hashing alone still leaves the passwords vulnerable. If anybody gets a hold of your database, they won't be able to read the password directly but can simply do SELECT password, COUNT(password) ORDER BY COUNT(password) and focus on cracking the top most used passwords.
Also, rainbow tables
Plain hashing is a solved problem from attacker perspective. They don't even need to brute force it. Note that it takes a lot of time to brute force each password but if you can spend 2-3 hours of AWS clout processing to crack, say, 5000 duplicated passwords, that is probably worth throwing the few bucks it would cost.
Salting ensures: 1. No rainbow tables can be used 2. The attacker can't just focus on the top duplicates. Or even know there are duplicates.
And ideally you want to keep the salt even more secure.
With all that said, hash using a good algorithm. bcrypt is popular. Makes bruteforcing the crack a huge CPU investment. Argon2 is also good.
 
posted on June 08, 2023 by Ben Mason

Hi everyone! We've just released Chrome Dev 116 (116.0.5817.0) for Android. It's now available on Google Play. You can see a partial list of the changes in the Git log. For details on new features, check out the Chromium blog, and for details on web platform updates, check here. If you find a new issue, please let us know by filing a bug. Erhu Akpobaro Google Chrome

 
4:08 PM
@VLAZ-onstrike- thanks for the backup, forgot the salt lol
 
4:50 PM
posted on June 08, 2023 by Ben Mason

Hi everyone! We've just released Chrome Beta 115 (115.0.5790.24) for iOS; it'll become available on App Store in the next few days. You can see a partial list of the changes in the Git log. If you find a new issue, please let us know by filing a bug. Krishna Govind Google Chrome

 
5:29 PM
Does $q service in angularjs creates a new Thread?
 
Uh, I don't know Angular but I sincerely doubt it. Very few things make new threads in JS. Either a Worker or if you have some sort of IPC where you off-load to some other implementation from a JS API.
Most of the times, you'd just be calling a provided API and that might have concurrent execution. For example calling fetch() will make the browser make a request on behalf of your JS code. That will then run in parallel but also up to a limit. Calling fetch() twice will make two requests and they'll be ongoing at the same time but calling it 500 times will not actually issue 500 requests immediately. The browser manages those. It may run 50 at a time, for example.
 
6:24 PM
@VLAZ-onstrike- actually I'm trying to understand, if we are implementing promises in js, to achieve async. If the new thread is not created then is it the same thread which runs the line of codes?
If i want to delegate a task so tht it is executed independently and since I dont even bother if it runs successfully or not, I want to make it async so that it runs in background and do the stuff and the actual execution is not impacted.
For example, sending email in background so that main thread doesn't have to wait for the email to be sent and wait that long
 
promises don't solve that
 
@KevinB you mean promises only makes ur UI responsive no performance benefits?
 
not necessarily, but they don't make a busy thread not busy on their own.
from the perspective of dealing with code that causes a busy thread, the promise does nothing more to solve than problem than a settimeout would.
 
so async can be called on the MAIN thread or another free thread .. depends upon low level implementation
 
6:40 PM
the only thing that would create a new thread in a way that would be useful to solving your problem is workers in web browsers
or offloading it to a server you can call via ajax
maybe even a separate browser window? dunno. but at that point we're getting into browser implementations and weird workarounds when a more applicable one is available
 
7:22 PM
Promises don't mean concurrent execution. Async code just executes at a different point in time than the current. That's it. There are no extra threads created by default.
Moreover promises are a marker for an already running async operation. They aren't an async operation themselves. If you call fetch() it's the browser handling that and running all the network stuff. Just hands you a promise and the promise tells you when that finishes.
However, the fact that the async operation is done outside the main thread is not a property of async but only the fetch() implementation. Another async API might still just execute in the main thread. Especially if it's code you've written in JS.
 
@VLAZ-onstrike- but if async method runs in the same UI thread then it will make the UI unresponsive
 
yes
and it does
 
so whats the benefit
 
logic
async/await, and promises, are more or less just a more convenient form of callback functions.
 
actually I was expecting tht it might be getting threads from thread pool and run async on tht thread instead. isn't it like tht in .Net
 
7:32 PM
promises were introduced to help flatten giant callback pyramids and callback logic into a more manageable system that can be easily abstracted, async/await further made promises easier to integrate into more traditional logic
like for loops/conditionals
 
^ what Kevin said. Promises are there to support existing asunc code. And that already runs later, thus no need to introduce drastically new modes of operation and the associated many risks of failures
If you need something to happen concurrently, you probably need a Worker
 
unless, the something happens elsewhere (which... i guess is the same as using a worker in the end)
;)
 
Not quite but close enough, yes.
 
ok Thanks guys .. in .Net it actually choose from thread pool so I expected the same in js
 
You can do IPC in order to run threads or whatever you want outside the main engine.
JS !== .NET
And Task !== Promise
Different models of computation.
 
7:37 PM
yes i agree
 
Task is more akin to Future. Although, TBH, I've not actually looked into if there are any differences.
 
8:26 PM
posted on June 08, 2023 by Srinivas Sista

The Stable channel has been updated to 109.0.5414.149 for Windows Server 2012 and Windows Server 2012 R2 only, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. For more details on this change refer here Srinivas Sista Google Chrome

posted on June 08, 2023 by Srinivas Sista

The dev channel has been updated to 116.0.5817.0/.5 for Windows and 116.0.5817.0 for  Mac and Linux. A partial list of changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about com

posted on June 08, 2023 by Release Managers

Hello All, The Dev channel is being updated to 116.0.5804.0 (Platform version: 15489.45.0) for most ChromeOS devices. If you find new issues, please let us know one of the following ways: File a bug Visit our Chrome OS communitiesGeneral: Chromebook Help CommunityBeta Specific: ChromeOS Beta Help CommunityReport an issue or send feedback on Chrome Interested i

 

« first day (4618 days earlier)      last day (315 days later) »