API security testing – tips to prevent getting pwned | Dark Hacker News