LIST: Web Services (Part 2)

A friend of mine pointed me to a series of posts from the Infosec Institute focusing on the Web Services Penetration Testing subject:

·         Part 1: Introduction

·         Part 2: An Automated Approach With SoapUI Pro

·         Part 3: Automation with AppScan and Webinspect

·         Part 4: Manual Testing with SOA Client

·         Part 5: Manual Testing with soapUI

·         Part 6: Fuzzing Parameters with Burp

·         Part 7: More Fuzzing with Burp

PS: Thanks to J. Monteiro, P. Lourenço

LIST: Web Services Security Resources

The top 5 google search links returned me very interesting results that are must reads for anyone working with SOA/Web Services - either developing and deploying or testing. Some are from people I know very well (not the NSA ones). 

1. https://www.nsa.gov/ia/_files/factsheets/soa_security_vulnerabilities_web.pdf (NSA classification for vulnerabilities)
2. http://www2.informatik.uni-freiburg.de/~accorsi/papers/igi-chapter.pdf (model based security)
3. https://eden.dei.uc.pt/~mvieira/dsn_ws.pdf
4. http://www.infosectoday.com/Articles/webservices.pdf
5. https://www.blackhat.com/presentations/bh-europe-07/Bhalla-Kazerooni/Whitepaper/bh-eu-07-bhalla-WP.pdf

PS: Not in any particular order.

Arduino Starter Kit on DX.com

Interesting stuff for an interesting price:
http://www.dx.com/p/diy-basic-starter-kit-for-arduino-deep-blue-multicolored-297567#.VHNWL4usURM

Priceless?

Extracting Audio From Videos Online

Useful link for quick and dirty audio extraction (possibly losing quality but for most purposes it should be good enough):

http://convert2mp3.net/en/index.php

PS: If you want to extract audio as is on video probably you should look for specific tools for the specific video format you have in hands.

Apple Continuity and Samsung Flow

Apple Continuity and Samsung Flow are interesting trends for sure.

In PT here and in EN everywhere else (google for it):
http://shifter.pt/2014/11/a-apple-criou-o-continuity-e-a-samsung-copiou/

The Raspberry Pi Model A+

THE RASPBERRY PI FOUNDATION has issued another piece of capable low cost hardware, the Raspberry Pi Model A+:
http://m.theinquirer.net/inquirer/news/2380390/freshly-harvested-raspberry-pi-model-a-hits-stores

Coooooool!

MS and mobile doc editing

In an interesting developing story (and a change of position), Microsoft comes to the top... at the iTunes store. It all makes sense if we think it over: Office remains the golden egg chicken for Microsoft and enabling users on new platforms is a way to keep MS Office relevant.
More on this topic:
http://www.cnet.com/news/microsoft-word-mobile-version-shoots-to-top-of-itunes-charts/