Aggregator

聊聊读书的需求，以及微信读书这个产品。

Television remotes have gotten little attention as a potential attack vector ? despite being one of the most common household devices you can find.

At Akamai, we talk a lot about DDoS attacks. It's because we're pretty good at handling them. We've stopped many of the world's biggest attacks. And, while less common, they get a lot of attention. But we can also stop the world's smallest attacks. And we stop lots of them. It's these smaller attacks that we're talking about today.

Cybersecurity attacks surged during the pandemic, with large jumps in DDoS and password login attacks against online retailers and APIs.

Cybersecurity Awareness Month: If You Connect It, Protect It October is Cybersecurity Awareness Month, which is led by the U.S....

The post Cybersecurity Awareness Month: If You Connect It, Protect It appeared first on McAfee Blog.

本报告部分引自Week in OSINT栏目，每周推荐好玩实用的工具，站点，技巧，文章等，适用于任何领域的研究人员，分析测试人员。

SharpOSS-利用阿里云OSS实现内网渗透中的快速文件上传

两个多月以前，我写了一篇文章 介绍我是如何优化我的博客的，但是我对于博客的白屏时间仍然不满意。过去一个月我在博客上进行了一系列优化实践，终于成功将博客的白屏时间减少了将近 50%，这篇文章就来记录优化的过程和方案。

个人隐私保护

完结篇：上线与发布，代码重构，绩效考核，OKR，TGIF，20%自由时间，谷歌双雄。

茶飘香，酒罢去，聚朋友，再回楼

The world of user experience and design can teach us to think differently about attackers, vulnerabilities, and users.

一点漏洞发现的思考和实践

Cybersecurity Awareness Month Helps Us All be #BeCyberSmart October is Cybersecurity Awareness Month, which is led by the National Cyber...

The post Cybersecurity Awareness Month Helps Us All be #BeCyberSmart appeared first on McAfee Blog.

本报告部分引自Week in OSINT栏目，每周推荐好玩实用的工具，站点，技巧，文章等，适用于任何领域的研究人员，分析测试人员。

我们可以说公司某个老板是否有良心，但公司本身不存在良心；也可以说某个领导有人情味，但单位同样不存在人情味。公司和员工之间就是一种“等价交换”、“你情我愿”，“愿打愿挨”的契约关系。只有更客观地看待员工与公司的关系，才能更好地去谋划自身发展。

如今各种h5应用场景越来越多也变得越来越复杂，满足了用户的各种需求，但是也存在一些安全方面的问题，小游戏、小程序、招聘网站、旅游都存在登录、注册、支付、交易、信息展示等功能，如果这些业务所依赖的js代码被人轻易的破解哪么应用将面临的安全问题

目录: 一、为什么要对JS代码进行保护？ 二、js代码保护前世今生 三、js虚拟保护方案与技术原理 四、总结 一、为什么要对JS代码进行保护？ 1.1、H5应用场景 由于H5的跨平台优势，大大提高了用户体验，无需下载，只需要点开就可以观看，不需要下载后占据内存，简化流程。在传播的效率上也得到了很大的