proomt

Search

Search posts, papers, and topics

All posts

SitePointJhon-Harry5 min readtutorialintermediate

The E-Signature Pricing Models That Bite You in the Production

Read on sitepoint.com

Summary

This tutorial demonstrates building a browser-based file integrity checker using JavaScript's Web Crypto API. It calculates a SHA-256 hash of a local file and compares it against a provided trusted hash, all client-side without server interaction.

  • The Web Crypto API's `crypto.subtle.digest()` generates SHA-256 hashes client-side from `ArrayBuffer` data.
  • Use `file.arrayBuffer()` to read local files into memory for hashing within the browser.
  • Normalize user-provided hashes (trim, lowercase, remove spaces) for robust comparison.
  • Implement file size limits to prevent performance issues with very large files, as `arrayBuffer()` loads the entire file.

Frontend engineers can use the Web Crypto API to implement client-side file integrity checks for downloads or sensitive documents, enhancing user trust without server load.

6/10
securityfrontendjavascriptweb cryptotutorialhashing

Related reading

  2. WebAuthn Passkey Recovery: Building Account Fallbacks and Backup Codes in Node.js

    A step‑by‑step tutorial for building a zero‑trust WebAuthn passkey recovery flow in Node.js/TypeScript. It covers generating 128‑bit backup codes, hashing them with Argon2id, rate‑limited verification, time‑boxed JWT recovery sessions, and orchestrating new credential registration with @simplewebauthn/server while revoking lost credentials and rotating codes.

    SitePointsitepoint.com19 min

  4. When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts

    Cloudflare’s Page Shield uses a graph‑neural‑network (GNN) to model JavaScript as a syntax‑tree graph, followed by a lightweight LLM for second‑opinion triage and an ensemble of frontier models for deep analysis. This pipeline caught eight malicious payloads across four distinct affiliate‑theft and backdoor techniques that traditional scanners missed, demonstrating the need for runtime, behavior‑…

    Cloudflarecloudflare.com21 minHN2

  5. webaudio fingerprinting on alibaba

    Firefox made WebAudio output deterministic in v118, collapsing most variance to three CPU‑dependent buckets (x86 without FMA, x86/x64 with FMA, ARM NEON). Telemetry shows 99.24% of users fall into these buckets; a long tail of 23 distinct values affects <0.1% of users. Ongoing bugs aim to merge the remaining buckets. Alibaba’s fingerprint script was extracted (two SHA‑256 hashes) and shown to be…

    Mozilla Automation Teamritter.vg3 min

  6. SQLite Across Every Port: One Contract, One Encrypted File Format

    Codename One now ships a single, tested SQLite contract that works natively on Android, iOS, Windows, Linux, and in browsers via WebAssembly, with built‑in SQLCipher‑4 encryption supporting three key models. A conformance suite guarantees identical behavior across platforms, and migration helpers let legacy apps opt‑in. The update also adds a proper watch‑app model, DOM‑based text for JavaScript,…

    CodeName Onecodenameone.com11 min