News for hackers. Stuff that matters.
Re:Using React, Redux and SSR to acommodate users without Ja... by 734129837261 on Sunday June 07, 2020 @08:16AM (#23446839)
You rely on client-side JS to secure checkouts?

Everywhere I've worked doesn't really care about the frontend (it is merely the first line of defense); everything is validated and authorized on the backend.

Re:Using React, Redux and SSR to acommodate users without Ja... by 0xy on Sunday June 07, 2020 @08:34AM (#23446907)
Anti-fraud is somewhat different than traditional web application security. With anti-fraud, it's about recognizing behaviors and patterns that are likely to result in a fraudulent transaction (stolen credit card, mismatched information, sketchy browser, script/bot-like behavior etc).

In large scale ecommerce, fraudulent transactions in the 5 figures is so common it's not even notable. So using JS to reduce this even by half saves the company literally millions of dollars.