Cesar Berho

Innovator, cool guy, easy going and information security professional. Opinions Expressed Are My Own.

[Linux Handbook @LinuxHandbook]

It's not DNS
There's no way it's DNS
It was DNS

-- AWS

[Corey Quinn @QuinnyPig]

You're doing your web forms wrong.

[Cesar Berho @cberho]

Security control defeated 😂

[Sheel Mohnot @pitdesi]

Oh no... what have we done?

2 years ago, Mexico City ranked as the 76th most expensive city in the Economist's worldwide cost of living survey.

This year, it ranked 16th! More expensive than Milan, Munich and DC.

[Cesar Berho @cberho]

@Aeromexico vuelo 246 a GDL, retrasado casi dos horas; el personal en tierra nos tiene parados sin novedad o mínimo reubicarnos

[Alex Xu @alexxubyte]

Explaining 9 types of API testing. The method to download the high-resolution PDF is available at the end.

🔹 Smoke Testing
This is done after API development is complete. Simply validate if the APIs are working and nothing breaks.

🔹 Functional Testing
This creates a test plan based on the functional requirements and compares the results with the expected results.

🔹 Integration Testing
This test combines several API calls to perform end-to-end tests. The intra-service communications and data transmissions are tested.

🔹 Regression Testing
This test ensures that bug fixes or new features shouldn’t break the existing behaviors of APIs.

🔹 Load Testing
This tests applications’ performance by simulating different loads. Then we can calculate the capacity of the application.

🔹 Stress Testing
We deliberately create high loads to the APIs and test if the APIs are able to function normally.

🔹 Security Testing
This tests the APIs against all possible external threats.

🔹 UI Testing
This tests the UI interactions with the APIs to make sure the data can be displayed properly.

🔹 Fuzz Testing
This injects invalid or unexpected input data into the API and tries to crash the API. In this way, it identifies the API vulnerabilities.

Subscribe to our newsletter to download the 𝐡𝐢𝐠𝐡-𝐫𝐞𝐬𝐨𝐥𝐮𝐭𝐢𝐨𝐧 𝐜𝐡𝐞𝐚𝐭 𝐬𝐡𝐞𝐞𝐭. After signing up, find the download link on the success page: https://t.co/Zx9BH4M3Qm

[Rohit @sec_r0]

OAuth Flow

Authorization Code Flow.

[Cesar Berho @cberho]

Being in the arena…of the desert 🐪

[VCs Congratulating Themselves 👏👏👏 @VCBrags]

Theodore Roosevelt is rolling in his grave

[Matt Johansen @mattjay]

🚨 Wow. Imagine waking up, and your entire company's online presence is erased.

Email. Domain. Documents. Databases. Gone

Poof.

Well, that's what happened to customers of two hosting providers this week. 👇

[Chris Bakke @ChrisJBakke]

My first ad payment from Twitter just hit my bank account!

[Giorgio Bonfiglio @g_bonfiglio]

The Amazon Builders' Library is an hidden gem: it consists of articles written by some of the most senior AWS engineers covering foundational patterns and principles used when building AWS services.

Most learnings can be applied anywhere. Here are my favourite articles:

[World of Statistics @stats_feed]

Average annual hours worked:

🇲🇽Mexico — 2,128
🇳🇬Nigeria — 2,124
🇨🇷Costa Rica — 2,073
🇨🇴Colombia — 1,964
🇨🇱Chile — 1,916
🇰🇷South Korea — 1,910
🇲🇹Malta — 1,882
🇷🇺Russia — 1,874
🇬🇷Greece — 1,872
🇷🇴Romania — 1,838
🇭🇷Croatia — 1,835
🇵🇱Poland — 1,830
🇺🇸United States — 1,791
🇮🇪Ireland — 1,775
🇪🇪Estonia — 1,767
🇨🇿Czech Republic — 1,753
🇮🇱Israel — 1,753
🇨🇾Cyprus — 1,745
🇳🇿New Zealand — 1,730
🇭🇺Hungary — 1,697
🇦🇺Australia — 1,694
🇨🇦Canada — 1,685
🇮🇹Italy — 1,669
🇮🇳India — 1,660
🇮🇩Indonesia — 1,660
🇵🇹Portugal — 1,649
🇪🇸Spain — 1,641
🇱🇹Lithuania — 1,620
🇧🇬Bulgaria — 1,619
🇯🇵Japan — 1,607
🇱🇻Latvia — 1,601
🇸🇮Slovenia — 1,596
🇸🇰Slovakia — 1,583
🇹🇷Türkiye — 1,572
🇨🇭Switzerland — 1,533
🇫🇮Finland — 1,518
🇿🇦South Africa — 1,513
🇸🇦Saudi Arabia — 1,513
🇬🇧United Kingdom — 1,497
🇧🇪Belgium — 1,493
🇫🇷France — 1,490
🇧🇷Brazil — 1,481
🇸🇪Sweden — 1,444
🇦🇹Austria — 1,442
🇮🇸Iceland — 1,433
🇳🇴Norway — 1,427
🇳🇱Netherlands — 1,416
🇱🇺Luxembourg — 1,382
🇩🇰Denmark — 1,363
🇩🇪Germany — 1,349

[Melissa Ⓜ️ @Melissa_Bely]

Vídeo COMPLETO del maestro que pregunta a sus pequeños alumnos cuál fue su desayuno..

He aquí la obra del gran "humanista" que prefiere derrochar el dinero en obras INÚTILES que ya regaló al Ejército..

O en autorizar que se gasten 73 MILLONES de pesos en conciertos en el Zócalo.. porqué todo se hace con el VISTO BUENO del Presidente, según sus palabras..

O en seguir manteniendo HØLG∆Z∆N€S..

Mientras los niños de algunas escuelas pasan por esto..

Todo por sus deseos de venganza y resentimiento contra lo bueno que habían hecho los gobiernos anteriores..

Todo por su odio..

👇

[Cesar Berho @cberho]

“What Is Product Strategy?” https://t.co/W8QrH5fjOL on @Medium

[WIRED @WIRED]

This attack indicates that DDoSers are growing increasingly more powerful. via @arstechnica https://t.co/m2D1KiV6eD

[Juan Carlos Carrillo @juan_carrillo]

Gran columna de ⁦@cibercrimen⁩
La importancia de #PrivacybyDesign y #SecuritybyDesign
Nunca sacrifiques #ciberseguridad por velocidad
#SPbD https://t.co/FOSfIVwqcA

[Cesar Berho @cberho]

“I sold my startup to Airbnb and went all in on developing web3 — here’s why” https://t.co/SroaEDlIrZ on @Medium

[Hacking Articles @hackinarticles]

ISO 27002:2022 Information security controls

https://t.co/u30LI20wct

#infosec #cybersecurity #pentesting #oscp #informationsecurity #cissp #redteam #DataSecurity #CyberSec #cybersecuritytips #infosecurity #CyberSecurityAwareness #mssql #networksecurity #networks #iso27001

[Eric Chiang @erchiang]

Today, we're open sourcing a log4j JAR scanner. Throw it at a filesystem, detect vulnerable JARs, and even rewrite them in place.

Includes a Go API to import the JAR parsing for other applications.

https://t.co/TWC4SJFm3p

[Machine Learning FLX @machinelearnflx]

The Fintech 250: The Top Fintech Companies of 2021 https://t.co/QoabzVl4By #Fintech