Skip to main content

Posts

Showing posts from September, 2020

API Security Architect

API Security Architect source: https://apiacademy.co/category/api-tutorials/api-security/ 1. Introduction to API security 1.1 API Audience Private, Public, Partner 1.2 API Security Domain EndUser, Administrators, Developers - several interconnection endpoints APIs increase the attack surface  1.3 Common Web Attacks Cross-Site Scripting Denial of Service Man in the Middle Cross-Site Request Forgery SQL Injection Overflow     Security organization: OWASP Open Web Application Security Project 1.4 Mitigating API Threats Rate Limiting Message Validation Encryption and Signing TLS Trust Attacks Certificate Authority Vulnerabilities Human Vulnerabilities Man in the Middle Access Control HTTP Access Control Basic Authentication Digest Authentication 1.5 Best Practices for API Security Security - Authentication and Authorization Protection - OWASP API vulnerabilities Throttling - quota on requests and retries Continuous API Monitoring Resquest/Response Payload Validation Error Handling 2. Intro

How To Set Permanent DNS Nameservers in Ubuntu and Debian

How To Set Permanent DNS Nameservers in Ubuntu and Debian source: https://www.tecmint.com/set-permanent-dns-nameservers-in-ubuntu-debian/ Install $ sudo apt install resolvconf $ sudo systemctl status resolvconf.service $ sudo systemctl start resolvconf.service $ sudo systemctl enable resolvconf.service $ sudo systemctl status resolvconf.service Configure $ sudo nano /etc/resolvconf/resolv.conf.d/head add nameserver 1.1.1.1 nameserver 1.0.0.1 system restart $ sudo systemctl start resolvconf.service