Derek Brown derekbrown

I hereby claim:

I am derekbrown on github.
I am derekbrown (https://keybase.io/derekbrown) on keybase.
I have a public key whose fingerprint is B07D 1340 26B7 1E65 E843 B6EC 43F7 A7B6 E800 D6E9

To claim this, I am signing this object:

	Think hard step by step and examine this codebase.

	Do not code, but act as a staff-level security engineer who specializes in preventing data breaches and protecting users of this app.

	Review the entirety of the codebase.

	Highlight any security issues, ranking them in priority from critical to low.

	Provide a mitigation plan for each, with the plan not taking more than 180 characters per issue.

	# Interview

	## Instructions
	With the given data in `transactions.json`, we need to perform the following:

	1. Remove bank transfers, third-party transfers, and ATM withdrawals.
	2. Remove transactions with empty merchant data.
	3. Remove transactions if their merchant is in an Exeq-defined blacklist.
	4. Get the merchant from the transaction.
	5. Create a list of merchants whose format matches the following:

	{
	"transactions": [
	{
	"_account": "XARE85EJqKsjxLp6XR8ocg8VakrkXpTXmRdOo",
	"_id": "0AZ0De04KqsreDgVwM1RSRYjyd8yXxSDQ8Zxn",
	"amount": 200,
	"date": "2014-07-21",
	"name": "ATM Withdrawal",
	"meta": {
	"location": {

	# app deps
	sudo yum install git
	sudo yum install wget

	# erlang deps
	sudo yum groupinstall "Development Tools"
	sudo yum install ncurses-devel openssl-devel

	# erlang
	wget http://www.erlang.org/download/otp_src_19.2.tar.gz

	package models
	import play.api.libs.json._
	import reactivemongo.bson.BSONObjectID
	import play.modules.reactivemongo.json.BSONFormats._

	case class Message(
	_id: BSONObjectID = BSONObjectID.generate,
	subject: String,
	sender: String,
	participants: Seq[BSONObjectID],

	let features: NSArray = CTFontCopyFeatures(font!)!
	print("properties = \(features)")

	#!/bin/sh

	if ! type "node" > /dev/null; then
	echo " "
	echo "Node not installed. Please visit http://nodejs.org to download and install the correct Node package."
	exit 1
	else
	echo " "
	echo "Node installed correctly; continuing..."
	fi