Comments (7)
The endpoint name does not reveal any private information and all calls are made over HTTPS. You would need a MITM attack with SSL interception to read the payload of the requests as well as the responses.
from opentrace-cloud-functions.
Hi @ryanbnl, Firebase Cloud Functions can either be called directly from the Firebase SDK on a Web or Mobile client or through a REST-style HTTPS call. Each function exposes its own endpoint:
https://$region-$projectname.cloudfunctions.net/$functionname
For more info about calling a Cloud Function from the Client:
https://firebase.google.com/docs/functions/callable
For more info about calling a Cloud Function over an HTTP request:
https://firebase.google.com/docs/functions/http-events
from opentrace-cloud-functions.
Super, that's what I wanted to hear. If they're called over http then that's obviously a pretty big privacy leak even if the message contents is encrypted because the URL is visible during transport and the endpoint name already exposes too much info :)
from opentrace-cloud-functions.
The use of Firebase itself remains a blocker though.
from opentrace-cloud-functions.
Exactly :) However given the level of some of the submissions during the weekend..
from opentrace-cloud-functions.
Which submission?
from opentrace-cloud-functions.
For a start those which haven't distributed source code. The others are obvious if you have a look on social media. I won't want to be too nasty and actually name anyone on github. It was a hackathon after all and part of the aim is to filter... :)
from opentrace-cloud-functions.
Related Issues (20)
- how to implement processUploadedData HOT 1
- Testing without billing information HOT 1
- Analyst Uploaded data HOT 1
- How to get each unique Bluetooth ID HOT 1
- c
- Getting encryption key error HOT 1
- error: functions/lib/index.js does not exist, can't deploy Cloud Functions HOT 1
- Unhandled error { Error: 7 PERMISSION_DENIED: Missing or insufficient permissions. HOT 4
- Cloud Functions use-case? HOT 2
- getUploadToken: ERR_CRYPTO_INVALID_STATE HOT 7
- getEncryptionKeyTest { Error: 3 INVALID_ARGUMENT: Resource ID is not in a valid format HOT 4
- getUploadToken 401 HOT 8
- Error: firebase use must be run from a Firebase project directory. HOT 1
- NOT IDLE HOT 3
- error:- getting encryption key HOT 2
- processUploadedData: File is not streetPassRecords, ignore. HOT 5
- Error while decrypting temp ID. Unsupported state or unable to authenticate data" HOT 5
- How to get user geo localisation ?
- getUploadToken. Error: 9 FAILED_PRECONDITION
- GetTempsIDs: Error: 500
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from opentrace-cloud-functions.