The Weekly Dev - 202217

Command Line Security Checks

Everyone seems lo like shiny GUIs, but they often come with a cost: you typically have no idea what happens behind the scenes.

Web GUIs, you will eventually have to figure out what they do when they break.

They depend on software that depends on other software that depends... you get me.

Also shiny clients come and go: it's the command line that stay for good, let us make them good friends of ours.

API and Certificates

"For Linux and Unix users, you may find a need to check the expiration of Local SSL Certificate files on your system. OpenSSL comes with an SSL/TLS client which can be used to establish a transparent connection to a server secured with an SSL certificate or by directly invoking certificate file."

How To Check SSL Certificate Expiration with OpenSSL

Source: computingforgeeks.com

"The web-based tools often employ JavaScript. If you don't trust the JavaScript magic that the web-based tools rely on, you can take matters into your own hands and use a command line DNS tool to check your validating resolver yourself."

How to check DNS records for DNSSEC signatures

Source: dnsinstitute.com

checkdmarc is a Python module and command line parser for SPF and DMARC DNS records: checkdmarc

Source: domainaware.github.io

Data-Intensive Systems

*" Presto allows querying data where it lives, including Hive, Cassandra, relational databases or even proprietary data stores. A single Presto query can combine data from multiple sources, allowing for analytics across your entire organization.

Presto is targeted at analysts who expect response times ranging from sub-second to minutes. Presto breaks the false choice between having fast analytics using an expensive commercial solution or using a slow "free" solution that requires excessive hardware."*

Distributed SQL Query Engine for Big Data: PrestoDb

Source: prestodb.io

Boring Security

*"It has long been believed that IP addresses and Cookies are the only reliable digital fingerprints used to track people online. But after a while, things got out of hand when modern web technologies allowed interested organizations to use new ways to identify and track users without their knowledge and with no way to avoid it.

BrowserLeaks is all about browsing privacy and web browser fingerprinting. Here you will find a gallery of web technologies security testing tools that will show you what kind of personal identity data can be leaked, and how to protect yourself from this."*

browserleaks.com

Source: browserleaks.com



[certificate] [linux] [java] [privacy] [git] [api] [cassandra] [python] [security]