.Net Core

ESK8BST - Electric Skateboard Buy / Sell / Trade

Monday, September 3, 2018

The Finished Product Raison D’etre Structure Front End React Components Pages Services FindThread.ts GetNewestData.ts Determining BST Status Determining Price and Currency Determining Product and Company Other Data Backend .NET Core Database ScanData Subscribers Preconfirmed Third-Party Services Netlify Firebase AWS Serverless / Lambda Serverless Project Functions Logging MailGun Types of Email Email Deliverability Email Services Mailgun’s Services Double Opt-In + Unsubscribe Automated Security Scan Privacy and Security Firebase Rules / Service Accounts Reddit triggering Tracking Protection The Finished Product Available at https://esk8bst.com, the site is a simple display of all relevant posts from the monthly Buy/Sell/Trade thread. Items are presented in reverse chronological, meaning newest first. …

Lyricall Security

Tuesday, May 22, 2018

This is the Security Model for lyricall.net as of May 22nd, 2018. Security Model tl;dr: The servers are secure The services are secure Connections are secure Data is validated Ownership is checked todo: Encrypt db at Rest Automatically rotate dbhost/dbname/dbuer/dbpassword values Spin out authentication server from api server Spin out client server from api server Server Provisioning All machines are provisioned in the standard manner: SSH key only access, no password authentication allowed Standard SSH port is changed to be non-standard below 1024 to stop automated attacks on port 22 Ports below 1024 are privileged and can’t be re-bound by another service. No Root sign-on. Root only available via sudo su from an authenticated user Access is done under an unprivileged user with an entry in sudoers UFW is running with only the necessary service ports open. ssh whichever applications are running Data Boundaries Any time a data-boundary is crossed, that boundary is treated as adversarial, and all data traveling across is verified before committed or consumed. …

Lyricall Architecture

Tuesday, May 22, 2018

This summary of the architecture was correct upon its initial posting (November 2017). Changes have since been made. There is no guarantee that this post remains accurate into the future. Table of Contents Architecture of lyricall.net Technology tl;dr: App Overview Front End TypeScript Why TypeScript Redux React Why React Back End Database - PostgreSQL Why Postgres Database Schema Lyricall Tables Straggler Tables ASP.NET / Entity Framework Tables Server - .NET Core 2.0 / ASP.NET Core 2.0 Why .NET Core Intermission - the DotNetStandardSpotifyWebApi library Intermission - the ASP.NET Security Project API Server Architecture Entity Framework vs Hand Crafted SQL Automatic Timed Services Services Models Validation Scanning Hosting Digital Ocean Security Backups CI/CD Microsoft Azure Backups CI/CD Let’s Encrypt Architecture of lyricall.net …