Clik here to view.
Holiday gift ideas for paranoids
There is a way to be Black Friday's clever Final Girl: Do not partake in privacy or security negligent practices, and study the traps laid by companies who care more about bottom dollars than putting...
View ArticleClik here to view.
RTC Extensions Workshop How to fix SSL protocol errors preventing connection ...
Since some time now I started to run into a blocking issue with the Extensions workshop . I was not able to find a solution so far. Today a colleague saw the same and asked for help. Here what I...
View ArticleClik here to view.
FourAndSix: 2 Vulnhub Walkthrough
FourAndSix: 2 is the sequel for previously solved vulnerable machine FourAndSix by Fred uploaded on vulnhub. It is not mandatory but is advised to read the prequel of this labhere. You can download...
View ArticleOMSCS CN Network Security Notes
title: Networking Essentials: Network Security published: false description: What is Traffic Engineering? tags: Networking ― This is the eleventh and last in a series of class notes as I go through the...
View ArticleClik here to view.
Password Hashing And Why We Need It
As a web developer, you must have come across the term password hashing at least once. Let us quickly understand what is password hashing and why we even need it. What is Password Hashing? Password...
View ArticleClik here to view.
New Wormhole Wallet Can Create Tokens and Crowdsales in Minutes
Technology & Security 1 min ago| By Jamie Redman - | New Wormhole Wallet Can Create Tokens and Crowdsales in Minutes On Friday, Nov. 23, the developers behind the Wormhole project announced the...
View ArticleHow Security Champions Can Build an Alliance With Developers
Introduction Although the term Security Champion is still relatively new, it has already become a mainstay within security and development circles, with a definition that has begun to evolve. Security...
View ArticleTop 5 Best Practices for Third-Party Security
Introduction With the digital transformation of our communication systems and the development of cloud and edge computing, the enterprise perimeter is fuzzier than ever. This has helped to open up...
View ArticleClik here to view.
三方对接心路历程
从业这几年，因业务的需要，对接过不少三方，有大公司也有小公司，其中感受颇多，这里回顾以及总结一下。 初入职场即与某大型X公司进行业务对接，其实很简单，我只需将公司内部数据提供一个接口给对方调用即可，然而没想到跟我对接的人疑似为对方公司的运营类人员，我按照对方要求完成接口开发，并顺利提供给对方使用，后来对方找到我们说是还需要接口提供其它字段云云，后因公司之间的一些博弈不了了之了，这件事给我的印象是：...
View ArticleClik here to view.
感恩节黑客也搞起了黑五大促，但甩卖的是你的信用卡
是不是还沉浸在黑五海淘的氛围中无法自拔？提醒你下，别被打折冲昏了头脑，其实暗网上也在搞黑五！你的信用卡或个人信息可能正在暗网上打折甩卖呢。 来自 FBI、英国网络防御机构和大型网络安全公司的安全专家最近都发了警告，他们认为黑五和网络星期一购物节期间，会有大量网络罪犯蠢蠢欲动，他们从黑客手上采购了大量个人信息，准备在网络上进行大规模欺诈活动。 去年英国民众在黑五时就疯狂购物，平均每秒会砸出超过 1...
View ArticleIn Space, No One Can Hear You Scream
The following was published in Via Satellite : In Space, No One Can Hear You Scream Bob Gourley Complexity is the enemy of cybersecurity. Complexity introduces risk in ways that are hard to predict....
View ArticleClik here to view.
百度杀毒停止下载，个人PC杀毒软件真的走到尽头了吗？
在时代浪潮的席卷下，不适应的服务和产品终将被淘汰。诺基亚如此，杀毒软件亦是如此。就在近日，久久沉寂的杀毒软件市场被投下一颗重磅炸弹――百度杀毒软件官网PC端不再提供下载，但手机端依然提供下载和杀毒服务。与此同时，官网首页中间写着“百度杀毒感谢一路有你”，意味着这一杀毒软件正式离场。...
View ArticleClik here to view.
Open sourcing BuzzFeed’s single sign-on experience
Many security teams are plagued by the eternal question of whether to “ build” or “ buy” technical solutions for the complex challenges they face. At BuzzFeed, our security infrastructure team...
View ArticleThe frustratingly simple techniques of ‘human hacking’ ― and how to fight the...
Technology has changed the meaning of how we interpret security and privacy in this digital millennium. We’ve made tools that can prevent major vulnerabilities, with years of research, and debugging,...
View ArticleClik here to view.
Santa’s best present? A new career, thanks to these sub $10 courses!
Just because you’ll spend the entire month of December buying gifts for others doesn’t mean you shouldn’t be looking out for yourself too. Obviously, you could grab a new TV or some other tasty tech...
View ArticleClik here to view.
WordPress Plugin Quizlord 2.0 XSS漏洞复现与分析
前言 WordPress是使用php语言开发的博客平台，用户可以在支持PHP和mysql数据库的服务器上架设属于自己的网站。也可以把 WordPress当作一个内容管理系统（CMS）来使用。 WordPress经常爆出漏洞基本都是它的插件存在安全问题。 漏洞复现 首先搭建worepress，我的版本是4.4。然后进入后台下载插件Quizlord，版本是2.0。 下载、安装完成后，需要点击启用插件。...
View ArticleProtecting Laravel Sites with IP Intelligence
From the moment you publish a website, you need to be wary of security. From hackers to script-kiddies, you can’t always be sure of where the next attack could come from. So, as developers, we are...
View ArticleClik here to view.
卓识网安杯全国第四届工控系统信息安全攻防竞赛拉开帷幕
【北京，2018年11月24日】由公安部信息安全等级保护评估中心、华北电力大学信息安全工程实验室、中国电力企业联合会科技开发服务中心联合主办，北京卓越蓝军信息安全技术发展有限公司承办，北京卓识网安技术股份有限公司独家冠名的“卓识网安杯全国第四届工控系统信息安全攻防竞赛暨能源网络安全高峰论坛”再起硝烟。...
View ArticleClik here to view.
AWS Security Profiles: Quint Van Deman, Principal Business Development Manager
In the weeks leading up to re:Invent , we’ll share conversations we’ve had with people at AWS who will be presenting at the event so you can learn more about them and some of the interesting work that...
View ArticleClik here to view.
Cynet：全方位一体化安全防护工具
1999年，布鲁斯施奈尔曾说过：“复杂性是安全最大的敌人。”彼时还是19年前，而现在，网络安全已然变得更加繁杂。 近日我在网上冲浪过程中发现了这么一个平台性质的软件，看似具有相当强的防护能力。...
View Article
