Skip to main content

Posts

Deploy Rails Application on Amazon Elastic Bean

First Sign into the consle of the Amazon Web Services ( AWS ) and  In the Navigation pane Select ElasticBean Click on Applications and then on the Create Applicataion button and  Name the appliation and click on Create The will create the Application  Now you need to Create the environment. You need to select the Ruby version. I selected 2.6 It is must same as the the Ruby version in your local and the Ruby version on the AWS must be same otherwise it will fail while deploying Also you need check the puma version it must also be that of the AWS.  The PUma version is mentioned in the GEM file of the Rails app. . Leave the rest and now click on Create  Deploying the Application. Go to your Local folder of the Rails project and run eb init on the root of the app. This will create ebbeanstalk environment folder  You will be prompted to use Code Commit  Choose Yes Then run git add  Then you will be prompted to create a repo . Create a new one  The...

Amazon Web services elastic bean Django (Python) + ReactJS in production in Amazon Web Services, Elastic Bean, S3

  Merging Django & React App Production   React App Scenario 1.     In the .env file ·         Add PUBLIC_URL = [s3 url] This will create absolute path of the CSS and JS files in the index.html of the production build, by default it will be relative links. S3 URL is the Amazon S3 Bucket URL 2.      Run npm run build at the root of the React app. This will create a production Build Django App Scenario 1.      pip3 install django-storages (third party app for storage for Django in S3 ) 2.      Add the following in the settings.py ·          Debug = False ·          Add ‘'storages'’ in the INSTALLED_APPS Mention the AWS OPTIONS ·          AWS_S3_REGION_NAME   = "us-east-1" ·       ...

YouTube Bug : Disclose Private Featured Channels

I don't know what wrong with the Bug bounty programs but I've found that due to this  COVID-19  situations they wantedly closing the reports as duplicates. I reported a bug in the YouTube  Channels. There is an option for the user to set his featured channels to private. Featured channels are meant to be Public actually. Ironic!! there is private button if you visit your Channel's Featured Channels. Visit Channel settings and toggle off the button for the "Customize your Channel". Then, check the tick off the Private button. You see that the Featured channels will not be shown to the users who visit your channel page.  But here's the bug if you keep visiting or reloading the featued channels page. For example this URL :  Load it repeatitively you find your featured channels get disclosed. some times. That's the story of this weired bug.  That's a bummer as reply given by those Google Engineers. This was the second bug that was closed as duplicate. I th...

Facebook Group Bug | Muted members can edit the events

Workplace is Facebook's child.  It has community and within it there could be groups. Now there could be groups that are created outside the community. The Group of Workplace has a feature called Events , that can let its members to create Events as well as edit them.  When a user has created an Event in a Group and later if he is kept in mute, he could change the details like the Name of the Event and locaiton. But while muting a user this is the alert shown in the UI What it says is it only allows to VIEW the group. When it says why it allowed the Group to be edited.. Now, when the same member is muted in the group he can only view the contents in the Group. Here's something which is ironic, THE STATUS. When the event editing isn't allowed the status also must be the same. So, when a user has updated a status in the Group and edits it and captures the HTTP request. THe HTTP Request would be as follows.  POST /webgraphql/mutation/?doc_id=1396480790477967 HTTP/1.1 Host: m...

Facebook Mesenger Bug - Set nick name for a Facebook Page from Messenger

I've been submitting a couple of bugs that are being found by me in the User's Messengers or a   Facebook Pages 's inbox, the tricky thing from the team is the bugs are not at all getting accepted just because of COVID . One of bugs in my previous post was about the Setting emoji but it was reported as duplicated just because they were already aware or they don't want to get the user's paid and escape the payments as the U.S is already in Depression and because of leadership ๐Ÿ˜œ Let's get into the bug details.. For users it is  normal for setting nicknames for the friends who are in their chat list. But for  Facebook Pages the option doesn't appear. There is actually no UI for setting the Names for the FB Page. All the options that appear for the Messenger for a normal user are: Setting Emoji Setting Nick Name Setting Theme There are different roles for Facebook Pages : Admin, Editor, Moderator who could access the Page's Inbox. The HTTP Request that is...

Facebook Messenger bug. React to any message on behalf of a Facebook Page

Reacting to Facebook Messages  An Admin can interact with his Facebook Page through Facebok page's Inbox, there is no UI to react to the messages like HAHA, LOVE etc.  Reply to the messages . You must be knowing about the WhatsApp messenger's Reply feature where you can reply to a particular message. There is something for Facebook messenger too. You can reply to message by hovering over the message and there will be "Reply" option. Click on that.  Now type some random message and click on "Send" and intercept the request. You can find in the HTTP Request that there is a parameter "message_id" in the message body. Change to some other message_id that doesn't belong to chat that you currently opened. Now I sent the request. There was an error that was thrown saying .. "The content is longer available".  Now my next adventure to try to find a bug in the Messaging continues. If you have a conversation with your girlfriend you can alway...

Facebook comments Spam Bypass

Facebook comments doesn't allow you to post same comment all the type and this is the story how I bypassed this spam protection. It was very hot afternoon and I was scrolling the news feed of my Facebook News Feed which is flooded by the posts of the actors and others.  I was continuously posting the video URL of YouTube . Actress and Other Facebook Pages  allow commenting. So when I was commenting the same URL on lot of posts including the actors. Suddenly there was a pop up that was shown saying You can't post at this time and it was going against our terms of service. So I thought in my mind I need to bypass this. I just posted another URL of the video. Now it allowed me to post !!! What a surprise!! It allowed me to post a different URL. I was curious to know why it happened and next I posted the previous URL that I was posting continuosly once again. Again there was an alert popup saying the same message about spam. If you are aware about the Linkshim that facebook uses...