apolishch / bibifi Goto Github PK

The bank-atm secret key is hardcoded in the source code:
https://github.com/apolishch/bibifi/blob/dadario_development/ruby_scripts/common.rb#L11

Bank secret need to be stored privately, away from the reach of attackers.

According to the Security Model (https://coursera.builditbreakit.org/static/doc/fall2015coursera/spec/index.html) the bank auth file is out of the reach of attackers. However the source code is not:

The source code for atm and bank will be available to attackers, but not the auth file. The card file may be available in some cases, depending on the kind of attack.

assumes answers are used for #1 as initially suggested, will need to be updated after team discussion
RVM
Ruby 2.2.3
ruby-gems
postgresql
ruby c ffi compatible c install such as gcc (for bundler)

• pick language (Ruby?)
• pick stack (Rails?)
• pick provisional (if needed) database system (PostgreSQL?)
• pick provisional (if needed) front end framework (React?)

this will let us track work in slack