Скачать или смотреть Maine apne Hardcoded API Keys GitHub par almost exposed kar diye (iOS Security Mistakes Hindi)

Maine apne API keys directly iOS app source code mein hardcode kar diye aur almost unhe public GitHub par push kar diya. Ye security mistake ne mere project ko Day 2 par almost destroy kar diya tha - aur maine iOS Keychain se kaise fix kiya.

⏱️ TIMESTAMPS:
0:00 - Maine almost API Keys expose kar diye
1:15 - Claude ka Security Alert ne bachaya
2:30 - Hardcoded API Keys kyun dangerous hain
4:00 - iOS Keychain Tutorial: Secrets kahan actually jaate hain
6:20 - Core Foundation Constants explained
8:45 - Mock Authentication trap
11:00 - Security Testing: Galat passwords se test karna
12:30 - Git History clean karna bahut늦e se pehle
15:00 - GitHub ka Automatic Secret Scanner
16:45 - Episode 3 Preview

💀 COMMON SECURITY MISTAKES JO MAINE KIYE:
❌ Source code mein API keys hardcode karna
❌ Sensitive files ke liye .gitignore nahi
❌ Production code paths mein mock authentication
❌ Sirf correct passwords se test karna (galat wale se nahi!)
❌ Git commits ko push se pehle review nahi karna
❌ iOS Keychain vs Info.plist ka difference nahi samajhna

✅ KAISE MAINE INHE FIX KIYA:
✔️ Secrets ko iOS Keychain mein move kiya
✔️ .gitignore properly set up kiya
✔️ Git history ko git reset se clean kiya
✔️ Security testing add ki
✔️ GitHub secret scanning enable ki
✔️ Build-time secrets ke liye environment variables use kiye

🔐 iOS MEIN SECRETS STORE KARNE KE 3 TARIKE:
1. Environment Variables (sirf build-time)
2. Info.plist + .gitignore (API keys, user tokens nahi)
3. iOS Keychain (user passwords, tokens, sensitive data)

🔗 RELATED VIDEOS:
Episode 1: The Impossible Dream
Episode 3: 5 SwiftUI Mistakes

💬 TUMNE BHI YE MISTAKE KI HAI?
Almost sabhi log initially API keys hardcode karte hain. Comment mein batao ki tumne kaunsi security mistake time par catch kar li!

#HardcodedAPIKeys #iOSSecurity #GitHubSecurity #iOSKeychain #SecurityMistakes #iOSDevelopment #HindiTutorial #IndianDevelopers