Alex Bogdanovski albogdano

I hereby claim:

I am albogdano on github.
I am albogdano (https://keybase.io/albogdano) on keybase.
I have a public key whose fingerprint is DFE3 1314 C10B 8C67 E891 DD0A A95C EA0C 995D AA0F

To claim this, I am signing this object:

Database

Use encryption for data identifying users and sensitive data like access tokens, email addresses or billing details if possible (this will restrict queries to exact match lookups).
If your database supports low cost encryption at rest (like AWS Aurora), then enable that to secure data on disk. Make sure all backups are stored encrypted as well.
Use minimal privilege for the database access user account. Don’t use the database root account and check for unused accounts and accounts with bad passwords.
Store and distribute secrets using a key store designed for the purpose. Don’t hard code in your applications.
Fully prevent SQL injection by only using SQL prepared statements. For example: if using NPM, don’t use npm-mysql, use npm-mysql2 which supports prepared statements.

Ensure that all components of your software are scanned for vulnerabilities for every version pushed to production. This means O/S, libraries and packages. This should be automated

	#!/bin/bash

	# Run this script from inside the Para ./data folder, or wherever para.mv.db is located

	OLD_H2_VERSION="2.0.202"
	NEW_H2_VERSION="2.2.224"
	PARA_USER="para"
	PARA_PASS="secret"

	wget -q -O h2-$NEW_H2_VERSION.jar https://search.maven.org/remotecontent?filepath=com/h2database/h2/$NEW_H2_VERSION/h2-$NEW_H2_VERSION.jar && \

	/*
	* Copyright 2013-2016 Erudika. https://erudika.com
	*
	* Licensed under the Apache License, Version 2.0 (the "License");
	* you may not use this file except in compliance with the License.
	* You may obtain a copy of the License at
	*
	* http://www.apache.org/licenses/LICENSE-2.0
	*
	* Unless required by applicable law or agreed to in writing, software

	#!/usr/bin/env zsh
	#local return_code="%(?..%{$fg[red]%}%? ↵%{$reset_color%})"

	#
	# Oh My Zsh! theme
	#

	setopt promptsubst

	autoload -U add-zsh-hook

	# First verify the version of Java being used is not SunJSK.
	java -version

	# Get the latest Sun Java SDK from Oracle http://www.oracle.com/technetwork/java/javase/downloads/jdk7-downloads-1880260.html
	wget http://download.oracle.com/otn-pub/java/jdk/7u51-b13/jdk-7u51-linux-x64.rpm

	# Install Java
	sudo rpm -i jdk-7u51-linux-x64.rpm

	# Check if the default java version is set to sun jdk