API security testing – tips to prevent getting pwned | Hacker News Reader