Firebase Security in 100 Seconds

[@NithinJune]

Dude i literally was doing this today, looking at the docs and likike how tf does this work!!!! incredible timing lmao

[@TamLe-sh2ru]

Me too, i cant believe it lol

[@princesharzeel8237]

I am a simple man, I see Fireship's video I hit the Like Button

[@sobhanbera]

Believe me! Currently I am creating a react app and I am confused about firebase realtime database rules. And guess what fireship upload this video. What a coincidence. Thanks very much it helped me.

[@chrisgallardo2130]

Best content for fullstack developers on KZbin. Great work Fireship!

[@HaaniJaber]

Great content and provided in a way no one else has figured out yet. Any updates on the react course? Can't wait!

[@Fireship]

That's my next priority. The official Reactfire just got some updates, so it's time for that course :)

[@PedroTechnologies]

Bro, this channel is just too good!

[@FRONTRUS]

I'm the only one when I go to the video immediately put the like automatically?

[@Fireship]

Appreciate that! I try to make each new video better than the last one.

[@migueldomingos4570]

No

[@vincenz5]

Nah same here

[@FalseDev]

That's code our brain code works while watching fireship.io

[@migueldomingos4570]

Now we need a 100 seconds firebase video :-)

[@briandesign]

Fire vid about firebase by fireship 🔥

[@MarvinTurner]

Worked through your react chat app a couple weeks ago, this helped explain the firebase part! Thanks

[@ninjaasmoke]

The only channel on KZbin who's every video I like

[@fire_boat]

your about to hit 500k and just wanna say I'm an OG viewer :D

[@swapless]

I was soo looking for a quick introduction to firebase security for a hackathon!

[@thetrends5670]

Thanks for this tutorial, I got hired at Palo Alto

[@migueldomingos4570]

Amazing as always

[@haiderjaafer8164]

Great as always... please do more lessons on security rules so can benefit

[@xxwafflez]

bro your videos are amazing but pleaseeeee the background music is ALWAYS too loud, turn it down a bunch and your channel is perfect

[@sir.richardpound]

Can you do a "Websockets in 100 seconds" video?

[@dhivakaranravi5748]

Long Waited ..Thanks Jeff

[@_quick-math]

Notification bell squad assemble! Awesome video as always!

[@YuvrajSingh808]

Just the video I was looking for

[@didair]

You should really cover appwrite.io - its like firebase but without google!

[@willk7471]

lets gooo fireship uploaded 😄

[@SuRFaceGoD]

Please make a video on Firebase Analytics

[@Senaericsson]

So after 3 years I woke up, and back to code, and where the heck is my fav channel "Angular Fireship", oh it's actually this have changed, and grow better and better in explaining

[@alexismandelias]

Great quality as always

[@vankatad]

Great video as always :D. But that's the main reason I left Firebase. The security rules have terrible documentation and on top of that are not that flexible.

[@cakemnstr42]

security rules get tricky when you start validating batch writes and shit like that..

[@mateowang6570]

Yeah, true. At that point, I would just write a Firebase function. Kinda takes the point out of serverless, but I think the security rules logic would be so complex at that point that I don't know if it's even possible.

[@barbacoso]

bold statement "without any vulnerabilities whatsoever", but at least it has a lot more people than me looking at it, and way smarter..

[@sumukhakb2701]

Make some more videos on WASM and react

[@cyberdash]

Awesome!! Thank you!

[@feliwein_cc]

loved it!, sir you sold me

[@vxern2430]

Fantastic video. Thank you

[@Nexus-rt1bm]

Let's gooo more Fireship!!!!

[@devi_buns]

I read an article where the author said they migrated their back-end from firebase to hasura and postgres because of scalability problems. I'm wondering if there are really scalability problems associated with firebase

[@prashoonbhattacharjee8211]

Very informative video!!

[@dennisbarzanoff9025]

Please make 100 seconds of gRPC

[@nukemonk]

I always said that no one could ever know everything. But that was before I met Firebase.

[@pachiyammalm1637]

100s of ML please

[@fariskapo8365]

Gime that !FIRST

[@Fireship]

Gold 🥇

[@TimeoutMegagameplays]

Is it possible to use Firebase Authentication to protect a database outside of Firebase (custom API)?

It is, you can use Firebase Admin in your API to validate the auth token

[@krtirtho]

Want some knowledge for python or other side of the programming world. Do you have any plans about rolling a playlist for a completely different side of programming universe?

[@silverzero9524]

corey schafer has a nice playlist on python/flask/django etc. u should check it out

[@krtirtho]

@@silverzero9524 I really appreciate Corey Schafer's videos & I watched some of them but I'm not only talking about python related stuff. I want some programming knowledge of a total different type of programming language. For example Rust, C# or C++ related stuff which is yet until not available in FireShip...

[@khokon_m]

If I was on youtube 1 hour ago, probably my comment had a love from fireship!

[@abdurahmon2827]

Thansks

[@codingchannels4103]

I am new web developer learning gatsby and jamstack. How do I decide between learning aws vs firebase?

[@shivShaktitech]

How to do complex joins on firebase and entity complex relationships explain pls

[@ofira8328]

Can you do "Polymer JS in 100 Seconds"? 😎

[@mohitsrinivasan5984]

100 seconds well spent

[@g_k_shuvo]

Django in 100 Seconds 🚀 Please

[@guilianog.carbajalh.751]

Consult how I can view the history of the use of the connections for free You can only view the previous 30 days or you have to pay to view them

[@AntiWanted]

Nice

[@mateowang6570]

Is there an equivalent for FaunaDB? What about MongoDB, Algolia, or headless CMS's like Sanity? Or do those other services need a backend to authenticate requests?

[@أحمدفلمار]

الله يرحمها ويغفر لها ويسكنها فسيح جناته ويلهم أهلها وذويها الصبر والسلوان

[@joopie46614]

What's the point of letting the frontend perform database queries anyways? Isn't it better to let a backend do that?

[@mihallex]

the "query" is stil executed on the server by firebase you only get the results of the query

[@migueldomingos4570]

It lets you code a fullstack app wihtout any backend knowledge

[@joopie46614]

@@mihallex Yeah I just researched it more in detail. Might actually use it for some of my experimentation projects. I hope we can get a front-end solution automatically handled by something soon.

[@tanveerabbas26]

is there any way to secure data without Auth implementation ??

[@pm79080]

How does this protect us from Firebase/Google?

[@Fireship]

You just have to learn to love big brother

[@pm79080]

Learned helplessness is behavior exhibited by a subject after enduring repeated aversive stimuli beyond their control. It was initially thought to be caused from the subject's acceptance of their powerlessness: discontinuing attempts to escape or avoid the aversive stimulus, even when such alternatives are unambiguously presented. Upon exhibiting such behavior, the subject was said to have acquired learned helplessness.[1][2] Over the past few decades, neuroscience has provided insight into learned helplessness and shown that the original theory actually had it backwards: the brain's default state is to assume that control is not present, and the presence of "helpfulness" is what is actually learned.[3] In humans, learned helplessness is related to the concept of self-efficacy; the individual's belief in their innate ability to achieve goals. Learned helplessness theory is the view that clinical depression and related mental illnesses may result from such real or perceived absence of control over the outcome of a situation.[4]

[@mataal8770]

Hi brother can u help me pls. I have this security rules for an ecommerce site but why is it that the products are not showing unless I do allow access top the shallowest match path. This line below, knowing if I allow read access to this line then everyone can read all my documents even those I want to set private. match /{document=**} { allow read if false; // I have to set this to true before all products for selling by all users are displayed then I cannot do selective securty if I do set it to true since everything is allowed to be read rules_version = '2'; service cloud.firestore { match /databases/{database}/documents { match /{document=**} { allow read,create,update,delete: if false; match /users/{uid}{ allow read; allow update:if request.auth.uid == uid; match /users/{uid}/products { allow read; allow create: if request.auth.uid != null; match /users/{uid}/products/{product}{ allow read; allow create: if request.auth.uid != null; allow delete,update: if request.auth.uid == uid; } } } } } }

[@hoopdocs]

I have been having the same problem. Nothing works in my app unless I have the most basic rules. But they won't allow the most basic rules. It's tough, I have 2 days to figure it out!

[@TotallyNotZoid]

Where do you get these pc, server and other images ?

[@pm79080]

Firebase is not secure; it is service as a software substitute (SaaSS).

[@marcoscardona989]

If i check for read writre permissions in the backend and not using rules, would it be vulnerable?

[@smorebytes]

hmmmm thoughts: For some reason I don't sense the enthusiasm from this video compared to a lot of the other videos you made. Though I know you have already talked about this topic at length multiple times.

[@BenBandana]

I'm not sure I understand - what stops the user using the Chrome Console to add a million fields to their user document? If they have 'unlimited' and 'schemaless' write rights?

[@itsmeaayush]

Appwrite in 100 seconds 😊

[@aravkc5204]

A question has been bugging be. Can anyone answer me please? "How to do you charge your clients for a firebase project?"

[@stefanpgr]

Looks legit

[@supertech8395]

can't hear from the music

[@CodingCatDev]

Remember you can test all of these locally really easily using the emulator. Keeps those dbs locked 🔐 firebase.google.com/docs/emulator-suite#feature-matrix

[@ludologian]

Coming from c# & .net idk if I should learn JS ? I wanna make mobile apps as well as web development , webassmbly application

[@shelby255]

Hey Fireship pls upload the MeilliSearch with react + firebase on youtube, I'm kid and I can't pay to watch :c

[@OrangutanMonky]

Sir I have a problem my vs code gives unnecessary spaces when saving python script. It breaks my entire script. Can you plz help me. I know this video is not about vs code, but I know you know about vs Code plz help me.

[@neolynxer]

"Now we have 100% secure app"... What if some dude will register and authenticate using the app and then spam any allowed rule you your Google Cloud Services account gets to the budget limit. A Deniel Of Wallet attack, because you pay for reads and writes in Firestore and can not prevent spam via rules without overpaying for rule-reads-writes.

[@kiranprogamer]

So this is an ad for his course 🤔🤔

[@window.location]

👌. repeat(100)

[@jameskulundu8945]

Redux in 100 seconds

[@craft5875]

Dialogflow in 100 seconds?

[@thk936]

Keycloak in 100 seconds

[@jonathanmeira3066]

The only downside of Firebase is he being NoSQL, searching things in database is usually a mess.

[@ibrahimhadi738]

Bitcoin, crytocurrency in 100 sec ?

[@amalirfan]

100s of fireship &wink;

[@japan-flanders1078]

background music

[@ethan_ng]

38 seconds ago damn

[@sainathpoojaryy]

Anybody know how to make fireship.io outro in this video

[@titumeerrahman8197]

I want to work on your youtube channel.video edit, thumbnail, video upload ,on page seo

[@object_null]

redis in 100 sec

[@nikhilpatil8013]

I am 255th😭

[@videoaudio7669]

too slow

[@thecscontent5110]

I also do videos about programming!😁

[@jacksonnadar7223]

firebase emulator in 100 sec

[@EnderDev_]

first

So what :)

[@manmanmanichfindekeinennam7613]

I was considering becoming a pro member on fireship.io. but dude. Arent 25$ per month a bit too much? This is hilarious. I knoe you're making great content and all that, but who has 25$ per month over for that? Maybe I'll get it for one month. Tell me, who has 300 bucks a year for this?

[@tiberiog.c.2632]

first