BestHub
Sign in
Tagged articles

security

2428 articles · Page 10 of 25
IT Services Circle
IT Services Circle
Nov 27, 2024 · Databases

15 Common MySQL Pitfalls and How to Avoid Them

This article outlines fifteen typical MySQL pitfalls—including missing WHERE clauses, lack of indexes, improper NULL handling, wrong data types, deep pagination, missing EXPLAIN analysis, charset misconfiguration, SQL injection risks, transaction misuse, collation issues, overusing SELECT *, index loss, frequent schema changes, missing backups, and unarchived historical data—and provides concrete examples and best‑practice solutions to improve performance, reliability, and security.

MySQLSQLTransactions
0 likes · 13 min read
15 Common MySQL Pitfalls and How to Avoid Them
Programmer1970
Programmer1970
Nov 24, 2024 · Backend Development

Designing Secure, Efficient, and Maintainable Third‑Party API Calls

The article outlines a comprehensive approach to third‑party API design, covering core principles such as security, reliability, usability and extensibility, detailed key‑management and authentication mechanisms, RESTful API specifications, implementation steps with code samples, and best‑practice recommendations for robust and maintainable integrations.

API designAuthenticationRESTful
0 likes · 16 min read
Designing Secure, Efficient, and Maintainable Third‑Party API Calls
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
Nov 21, 2024 · Information Security

Mastering Single Sign-On (SSO): Principles, Tokens, and Real-World Applications

This article provides a comprehensive overview of Single Sign-On (SSO), explaining its core concepts, authentication flow, token generation and validation, and practical use cases across enterprises, education, finance, and e‑commerce, while also offering insights into security benefits and implementation details.

AuthenticationSSOsecurity
0 likes · 5 min read
Mastering Single Sign-On (SSO): Principles, Tokens, and Real-World Applications
dbaplus Community
dbaplus Community
Nov 18, 2024 · Cloud Native

10 Expert Tips to Master Kubernetes Architecture on Its 10th Anniversary

In this interview, CNCF ecosystem lead Taylor Dolezal shares ten practical recommendations for Kubernetes architects, covering security, resource optimization, observability, high‑availability, multi‑cluster networking, stateful workloads, CI/CD, lifecycle upgrades, documentation, and a learning roadmap for the next one to two years.

CI/CDMulti-Clustercloud-native
0 likes · 21 min read
10 Expert Tips to Master Kubernetes Architecture on Its 10th Anniversary
IT Services Circle
IT Services Circle
Nov 15, 2024 · Backend Development

Best Practices for Designing Secure and Robust API Controller Interfaces

This guide outlines comprehensive techniques for building safe, repeatable, and maintainable API controller interfaces, covering signature generation, encryption, IP whitelisting, rate limiting, parameter validation, unified responses, exception handling, logging, idempotency, request size limits, stress testing, asynchronous processing, data masking, and complete documentation.

APILoggingexception handling
0 likes · 15 min read
Best Practices for Designing Secure and Robust API Controller Interfaces
Java Tech Enthusiast
Java Tech Enthusiast
Nov 15, 2024 · Fundamentals

C++26 Reflections, Safety, and Emerging Security Guidelines

After 22 years at Microsoft, Herb Sutter departs for Citadel while staying ISO C++ chair, declaring 2024 pivotal as C++26 introduces reflection‑driven compile‑time libraries and default safety—potentially the most impactful release since C++11—while U.S. CISA and the FBI urge memory‑unsafe language users to publish safety roadmaps by January 2026.

C++C++26Safety
0 likes · 6 min read
C++26 Reflections, Safety, and Emerging Security Guidelines
Architects' Tech Alliance
Architects' Tech Alliance
Nov 15, 2024 · Cloud Computing

Comprehensive Overview of Computing Power Networks: Definitions, Features, Architecture, and Future Directions

This article provides an in‑depth explanation of computing power networks, covering their definition, key characteristics such as elasticity, agility and security, underlying technologies like SRv6 and network slicing, architectural components including the brain, and emerging trends spanning AI, big data, optical networking and blockchain.

Cloud ComputingEdge ComputingNetwork Architecture
0 likes · 27 min read
Comprehensive Overview of Computing Power Networks: Definitions, Features, Architecture, and Future Directions
Programmer XiaoFu
Programmer XiaoFu
Nov 14, 2024 · Backend Development

Designing Elegant API Controllers: Security, Idempotency, and Best Practices

This guide walks through building robust API controller interfaces by covering request signing, RSA encryption, IP whitelisting, rate limiting, parameter validation, unified response formats, exception handling, logging, idempotent design, request size limits, stress testing, asynchronous processing, data masking, and comprehensive documentation.

API designLoggingbackend
0 likes · 15 min read
Designing Elegant API Controllers: Security, Idempotency, and Best Practices
Java Tech Enthusiast
Java Tech Enthusiast
Nov 13, 2024 · Backend Development

Implementing Image Self‑Destruct Feature with Spring Boot and MySQL

This guide walks through building a Spring Boot and MySQL‑backed “burn after viewing” image sharing service, covering architecture, environment setup, entity and repository design, upload and automatic deletion logic, Thymeleaf UI with burn animation, error handling, optimization, and Docker deployment.

Image BurnMySQLSelf-Destruct
0 likes · 15 min read
Implementing Image Self‑Destruct Feature with Spring Boot and MySQL
Su San Talks Tech
Su San Talks Tech
Nov 12, 2024 · Backend Development

Designing Secure, Reliable API Controllers: Signatures, Encryption, Rate Limiting & More

This article outlines best‑practice techniques for building robust API controller interfaces, covering request signing, RSA encryption, IP whitelisting, rate limiting, parameter validation, unified responses, exception handling, logging, idempotency, record limits, stress testing, asynchronous processing, data masking, and comprehensive documentation.

API designsecurity
0 likes · 16 min read
Designing Secure, Reliable API Controllers: Signatures, Encryption, Rate Limiting & More
Liangxu Linux
Liangxu Linux
Nov 10, 2024 · Operations

50 Essential Ops Troubleshooting & Fix Techniques Every Sysadmin Should Know

This guide compiles fifty practical troubleshooting and remediation techniques covering system, network, application, database, and security layers, enabling operations engineers to quickly diagnose common failures such as high load, service crashes, permission errors, and performance bottlenecks, and apply concrete fixes to maintain stable, secure services.

Operationsnetworksecurity
0 likes · 16 min read
50 Essential Ops Troubleshooting & Fix Techniques Every Sysadmin Should Know
OPPO Kernel Craftsman
OPPO Kernel Craftsman
Nov 1, 2024 · Fundamentals

Highlights of the 19th China Linux Kernel Developers Conference (CLK 2024)

The 19th China Linux Kernel Developers Conference in Wuhan on October 26, 2024 attracted over 80,000 online viewers and nearly 400 developers, showcased five technical sub‑forums—from memory and storage I/O to virtualization and scheduling—featured AI‑focused kernel talks, announced a new open‑source innovation institute, and made all materials publicly available on GitHub.

AILinux kernelOpen Source
0 likes · 9 min read
Highlights of the 19th China Linux Kernel Developers Conference (CLK 2024)
Selected Java Interview Questions
Selected Java Interview Questions
Oct 24, 2024 · Information Security

Guide to Using the Sensitive‑Word Java Library for Sensitive Word Detection and Replacement

This article provides a step‑by‑step tutorial on integrating the Sensitive‑Word Java library via Maven, demonstrates core find/replace APIs, showcases advanced detection features such as email, URL, IPv4 and custom replacement strategies, and includes complete code examples and output results.

JavaMavenSensitive Word
0 likes · 12 min read
Guide to Using the Sensitive‑Word Java Library for Sensitive Word Detection and Replacement
MaGe Linux Operations
MaGe Linux Operations
Oct 23, 2024 · Backend Development

How to Hide Nginx Version and Set a Custom Server Header

This guide walks you through downloading, compiling, and configuring Nginx so that the server version is hidden and a custom Server header is displayed, including step‑by‑step commands, source code edits, and verification methods.

Version Hidingbackendcustom server header
0 likes · 4 min read
How to Hide Nginx Version and Set a Custom Server Header
AntTech
AntTech
Oct 22, 2024 · Fundamentals

Asterinas (星绽) OS: A Rust‑Based Framekernel Architecture Combining Macro‑Kernel Performance with Micro‑Kernel Security

Released by a consortium of Chinese research institutions, Asterinas (星绽) OS is an open‑source, Rust‑written operating system that introduces a novel framekernel architecture, aiming to deliver industrial‑grade security comparable to micro‑kernels while preserving the performance of traditional macro‑kernels for cloud and data‑center workloads.

Cloud ComputingRustkernel architecture
0 likes · 7 min read
Asterinas (星绽) OS: A Rust‑Based Framekernel Architecture Combining Macro‑Kernel Performance with Micro‑Kernel Security
转转QA
转转QA
Oct 21, 2024 · Information Security

Implementation of Static Code Scanning in Zhuanzhuan's DevOps Platform

This article details Zhuanzhuan's practical implementation of static code scanning within its self‑built DevOps platform, covering its significance, architecture, incremental analysis methods, permission management, rule selection, promotion process, and challenges encountered, illustrating how it became a low‑cost, repeatable security safeguard in their CI/CD workflow.

CI/CDDevOpsSonarQube
0 likes · 10 min read
Implementation of Static Code Scanning in Zhuanzhuan's DevOps Platform
Open Source Linux
Open Source Linux
Oct 18, 2024 · Information Security

Why Do TCP Connections Send RST Packets? Causes and Analysis Explained

This article explains what TCP RST packets are, why they appear during connection establishment, data transfer, and termination, and how to diagnose server‑side, client‑side, and firewall‑induced resets by examining sequence diagrams, common error conditions, and TTL differences.

RSTTCPpacket analysis
0 likes · 9 min read
Why Do TCP Connections Send RST Packets? Causes and Analysis Explained
Data Thinking Notes
Data Thinking Notes
Oct 17, 2024 · Artificial Intelligence

Gartner 2024 Emerging Tech Curve: How Autonomous AI Will Transform Enterprises

According to Gartner’s 2024 Emerging Technology Maturity Curve, four disruptive tech themes—autonomous AI, developer productivity, holistic experience, and human‑centric security—are poised to reshape enterprises over the next decade, with autonomous AI moving beyond hype toward practical, self‑directed systems.

autonomous AIdeveloper productivityenterprise technology
0 likes · 6 min read
Gartner 2024 Emerging Tech Curve: How Autonomous AI Will Transform Enterprises
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Oct 17, 2024 · Information Security

Security Incident Analysis and Captcha Strategy for Preventing SMS Spam Attacks

After a night-time SMS spam attack that cost 400 RMB, the team analyzed the breach, evaluated various captcha methods—including text, slider, reCAPTCHA v2/v3, and 2FA—implemented temporary throttling, and ultimately adopted a combined reCAPTCHA and two‑factor authentication approach to strengthen account security.

2FACAPTCHASMS attack
0 likes · 8 min read
Security Incident Analysis and Captcha Strategy for Preventing SMS Spam Attacks
21CTO
21CTO
Oct 15, 2024 · Operations

Why Windows 10’s Support End Is a Critical Turning Point for Users and the Market

With Windows 10 support ending on October 14 2025, users face a year‑long deadline that will force many to consider security risks, hardware upgrades, or alternative operating systems, while Microsoft’s push for Windows 11 adoption raises questions about market share and e‑waste.

Support LifecycleWindows 10Windows 11
0 likes · 5 min read
Why Windows 10’s Support End Is a Critical Turning Point for Users and the Market
Programmer1970
Programmer1970
Oct 15, 2024 · Information Security

Unlocking RSA: The Algorithm’s Inner Workings and Security Guarantees

This article introduces RSA, outlines its mathematical foundation, details key‑pair generation, encryption and decryption steps, discusses security factors such as key length and side‑channel attacks, presents a complete Java implementation, and surveys common application scenarios like HTTPS, digital signatures and VPNs.

EncryptionJavaRSA
0 likes · 13 min read
Unlocking RSA: The Algorithm’s Inner Workings and Security Guarantees
IT Architects Alliance
IT Architects Alliance
Oct 14, 2024 · Frontend Development

Jamstack Explained: Key Benefits, Challenges, and Best Practices

This article explores the Jamstack architecture—its core concepts of JavaScript, APIs, and markup, the essential tooling like static site generators and headless CMS, and examines its performance, security, scalability benefits alongside challenges such as dynamic content handling, build times, and SEO, offering practical best‑practice recommendations.

Frontend ArchitectureJamstackPerformance
0 likes · 10 min read
Jamstack Explained: Key Benefits, Challenges, and Best Practices
php Courses
php Courses
Oct 12, 2024 · Backend Development

Modern Secure Session Management in PHP: Replacing session_register()

This tutorial explains why the legacy PHP function session_register() was deprecated and guides developers through modern, secure session management techniques such as using the $_SESSION superglobal, regenerating session IDs, enforcing expiration, setting secure cookie flags, CSRF tokens, and encrypting session data.

PHPWeb Developmentbackend
0 likes · 8 min read
Modern Secure Session Management in PHP: Replacing session_register()
DevOps Operations Practice
DevOps Operations Practice
Oct 10, 2024 · Operations

Seven Key Truths About Operations: Downtime, Automation, Prevention, Technology as a Tool, DevOps, Communication, and Security

Effective operations management acknowledges inevitable downtime, emphasizes automation, prioritizes proactive prevention, treats technology as a means rather than an end, integrates closely with development through DevOps, relies on strong communication, and continuously addresses pervasive security challenges to minimize business impact.

Operationsautomationdowntime
0 likes · 5 min read
Seven Key Truths About Operations: Downtime, Automation, Prevention, Technology as a Tool, DevOps, Communication, and Security
Test Development Learning Exchange
Test Development Learning Exchange
Oct 7, 2024 · Interview Experience

30 Must‑Know Interview Questions & Answers for Modern Software Development

This article compiles 30 essential interview questions covering fundamentals, API pagination, HTTP status codes, JSON schema validation, CORS, test automation frameworks, pytest parametrization and fixtures, mocking, coverage testing, load and stress testing, Locust and JMeter usage, security testing such as SQL injection, XSS, OAuth2, JWT, CI/CD concepts with Jenkins, GitHub Actions, Travis CI, Docker, and Python code quality tools like static analysis, black formatting, unit testing, refactoring, and technical debt management, each accompanied by concise explanations and runnable code snippets.

APICI/CDInterview
0 likes · 15 min read
30 Must‑Know Interview Questions & Answers for Modern Software Development
Liangxu Linux
Liangxu Linux
Oct 6, 2024 · Operations

Master Linux DNS: From Fundamentals to Advanced BIND9 Configuration

This guide walks Linux system administrators through DNS fundamentals, client configuration files, NetworkManager and systemd-resolved settings, BIND9 server installation and zone setup, plus advanced techniques like DNSSEC, DoH, split views, load balancing, troubleshooting tools, and security best practices.

BIND9networkingsecurity
0 likes · 10 min read
Master Linux DNS: From Fundamentals to Advanced BIND9 Configuration
MaGe Linux Operations
MaGe Linux Operations
Oct 1, 2024 · Information Security

Master Nmap: Essential Commands and Scanning Techniques Explained

This guide walks through common Nmap commands, explains key options such as -A, -T4, and -sn, demonstrates host discovery, port and service detection, OS fingerprinting, and provides practical examples with output screenshots to help readers efficiently assess network security.

OS detectionhost discoverynetwork scanning
0 likes · 15 min read
Master Nmap: Essential Commands and Scanning Techniques Explained
php Courses
php Courses
Sep 30, 2024 · Backend Development

How to Use PHP's setcookie Function to Set Cookies

This article explains PHP's setcookie function, detailing its syntax, parameter meanings, and providing several practical code examples for creating cookies with different lifetimes, paths, domains, and security flags, while also noting how to retrieve cookies using the $_COOKIE superglobal.

PHPWeb Developmentbackend
0 likes · 4 min read
How to Use PHP's setcookie Function to Set Cookies
Python Programming Learning Circle
Python Programming Learning Circle
Sep 29, 2024 · Operations

Resolving Common Jenkins Issues: Plugin Compatibility, CSP, Path Configuration, Clone Timeouts, and More

This guide details eleven frequent Jenkins problems—including Performance plugin incompatibility, CSP restrictions, custom URL paths, Git clone timeouts, jar replacement, CSRF disabling, disk‑space optimization, global environment variables, managed scripts, and lightweight backups—along with step‑by‑step solutions and configuration snippets.

JenkinsPerformanceplugin compatibility
0 likes · 10 min read
Resolving Common Jenkins Issues: Plugin Compatibility, CSP, Path Configuration, Clone Timeouts, and More
Aikesheng Open Source Community
Aikesheng Open Source Community
Sep 23, 2024 · Databases

Misuse of Wildcards in MySQL GRANT Statements Leads to Permission Errors and How to Avoid Them

This article explains how using the '_' and '%' wildcards in MySQL GRANT statements can unintentionally broaden privileges, illustrates the security risks with concrete examples and version‑specific behavior, and provides practical guidance on escaping wildcards, auditing existing grants, and preventing privilege loss.

GrantMySQLWildcards
0 likes · 14 min read
Misuse of Wildcards in MySQL GRANT Statements Leads to Permission Errors and How to Avoid Them
DevOps Operations Practice
DevOps Operations Practice
Sep 22, 2024 · Information Security

How to Disable a User Account on Linux

This step‑by‑step guide explains how to safely disable a Linux user account by opening a terminal, checking the account status, locking the login with usermod, verifying the lock, and optionally re‑enabling the account, all using simple command‑line instructions.

LinuxUser Managementaccount-disable
0 likes · 3 min read
How to Disable a User Account on Linux
Architect
Architect
Sep 20, 2024 · Backend Development

18 Essential API Design Rules Every Backend Engineer Should Follow

This article presents a comprehensive checklist of 18 practical API design rules—including signature, encryption, IP whitelisting, rate limiting, validation, unified responses, exception handling, logging, idempotency, pagination, stress testing, async processing, data masking, documentation, request methods, headers, batch operations, and single‑responsibility principles—to help developers build secure, maintainable, and high‑performance services.

API designValidationbackend
0 likes · 18 min read
18 Essential API Design Rules Every Backend Engineer Should Follow
Selected Java Interview Questions
Selected Java Interview Questions
Sep 20, 2024 · Information Security

Generating and Verifying Java License Files with TrueLicense

This article explains how to generate a Java license using TrueLicense, configure key pairs, create the license file, and integrate verification and installation steps into a Spring Boot application, including detailed code examples and deployment considerations for secure software licensing.

CodeExampleJavaLicense
0 likes · 15 min read
Generating and Verifying Java License Files with TrueLicense
Liangxu Linux
Liangxu Linux
Sep 19, 2024 · Information Security

Encrypt Your Shell Scripts with gzexe: A Complete Step‑by‑Step Guide

This tutorial explains how to use the gzexe utility to encrypt a shell script, covering script preparation, making it executable, running gzexe to produce a compressed encrypted file, verifying and executing the encrypted script, optional decryption, and notes on security limitations and installation.

EncryptionLinuxShell script
0 likes · 4 min read
Encrypt Your Shell Scripts with gzexe: A Complete Step‑by‑Step Guide
iQIYI Technical Product Team
iQIYI Technical Product Team
Sep 19, 2024 · Information Security

01 Background Introduction

The article introduces the concept of an egress gateway, explains why iQIYI’s member‑cooperation services require a unified outbound gateway to handle IP‑whitelisting and external access, critiques the limitations of an Nginx proxy, and describes adopting APISIX with security, traffic‑control plugins and a UI‑driven URL translation layer.

APISIXTraffic Managementegress gateway
0 likes · 13 min read
01 Background Introduction
php Courses
php Courses
Sep 14, 2024 · Backend Development

Using PHP password_hash for Secure Password Hashing

This article explains how to securely hash passwords in PHP using the password_hash function, demonstrates code examples for hashing and verifying passwords, discusses automatic salting, and highlights best practices for protecting user credentials.

Hashingbackendpassword_hash
0 likes · 5 min read
Using PHP password_hash for Secure Password Hashing
Architecture Digest
Architecture Digest
Sep 8, 2024 · Information Security

Combining JWT and Session for Secure Authentication and State Management

This article explains how JWT provides stateless user authentication while Session adds an extra security layer and state management, detailing their respective roles, the reasons for using Session alongside JWT, and offering Java code examples that illustrate their combined implementation.

AuthenticationJWTJava
0 likes · 7 min read
Combining JWT and Session for Secure Authentication and State Management
Java Tech Enthusiast
Java Tech Enthusiast
Sep 4, 2024 · Information Security

Spring and Nacos Security Vulnerabilities and Mitigation Guide

Recent disclosures revealed critical Spring DoS flaws (CVE‑2024‑38809 and CVE‑2024‑38808) exploitable via oversized If‑Match/If‑None‑Match headers and malicious SpEL expressions, plus a Nacos 2.4.1 vulnerability allowing arbitrary file read/write through port 7848, mitigated by upgrading to the patched Spring and Nacos releases or restricting the vulnerable ports.

CVEJavaNacos
0 likes · 7 min read
Spring and Nacos Security Vulnerabilities and Mitigation Guide
php Courses
php Courses
Sep 4, 2024 · Backend Development

Using PHP's is_executable() Function to Check File Executability

This article explains PHP's is_executable() function, its definition, parameters, return values, provides a full code example, discusses usage notes, and outlines common scenarios such as securing uploaded files, checking executable status, and verifying file permissions.

File Permissionsbackendis_executable
0 likes · 4 min read
Using PHP's is_executable() Function to Check File Executability
Java Tech Enthusiast
Java Tech Enthusiast
Sep 1, 2024 · Information Security

XSS Defense in Spring Boot Applications

The article explains how to protect Spring Boot applications from XSS attacks by using custom annotations such as @XSS with an XssValidator and by implementing a request‑filter chain—including XssFilter and XssWrapper—to sanitize input, demonstrating through tests that both approaches reliably secure user data.

JavaSpring BootWeb Application
0 likes · 14 min read
XSS Defense in Spring Boot Applications
Architecture and Beyond
Architecture and Beyond
Aug 30, 2024 · Information Security

Comprehensive Security Strategy for SaaS Startups: External and Internal Measures

This guide outlines a complete security strategy for SaaS startups, covering external threats such as network attacks and data leaks, as well as internal risks like access control, host protection, code safety, log management, and third‑party integration, providing practical solutions and best‑practice recommendations.

External ThreatsInternal Controlscloud
0 likes · 20 min read
Comprehensive Security Strategy for SaaS Startups: External and Internal Measures
php Courses
php Courses
Aug 30, 2024 · Backend Development

New Features and Changes in PHP 8.4 Release (Nov 21, 2024)

PHP 8.4, released on November 21, 2024, introduces performance, usability, and security enhancements such as property hooks, a parenthesis‑free new operator, powerful array functions, an HTMLDocument class, new Sodium algorithms, a request parsing helper, stricter type declarations, JIT optimizations, and migration of several extensions to PECL.

HTML5PHParray-functions
0 likes · 3 min read
New Features and Changes in PHP 8.4 Release (Nov 21, 2024)
Java Tech Enthusiast
Java Tech Enthusiast
Aug 29, 2024 · Backend Development

Comprehensive Backend Interview Guide: Network, Security, JVM, Spring, Redis, MySQL and More

The guide equips candidates for backend interviews by covering essential networking (HTTP/HTTPS, TLS handshake, status codes, headers, OCSP, session resumption, CSRF), RPC frameworks, Java class-loading and JVM memory/GC, OS process/thread scheduling, Spring bean lifecycle, Redis caching pitfalls, and MySQL indexing and query optimization.

InterviewJVMMySQL
0 likes · 44 min read
Comprehensive Backend Interview Guide: Network, Security, JVM, Spring, Redis, MySQL and More
MaGe Linux Operations
MaGe Linux Operations
Aug 29, 2024 · Databases

Database Server Ops: Hardware, Tuning, Backup & Security Best Practices

This guide outlines comprehensive best practices for database server operations, covering hardware selection, OS and kernel tuning, storage choices, MySQL configuration, performance monitoring, backup strategies, security measures, high availability, automation, and systematic maintenance procedures to ensure optimal reliability and efficiency.

Operationsbackupdatabases
0 likes · 7 min read
Database Server Ops: Hardware, Tuning, Backup & Security Best Practices
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
Aug 28, 2024 · Information Security

Understanding Single Sign-On (SSO): Principles, Implementation Steps, Challenges, and Applications

This article explains the concept of Single Sign‑On (SSO), outlines its implementation process—including user redirection, token generation, and cross‑system authentication—discusses challenges such as single point of failure, complexity, and cross‑domain issues, and highlights typical use cases in enterprise and e‑commerce environments.

SSOenterprise architecturesecurity
0 likes · 6 min read
Understanding Single Sign-On (SSO): Principles, Implementation Steps, Challenges, and Applications
21CTO
21CTO
Aug 28, 2024 · Fundamentals

Linus Torvalds on Linux Kernel’s Future: Versions, Rust, AI, and Security

At the 2024 OpenSource Summit China in Hong Kong, Linus Torvalds and Dirk Hohndel discussed the Linux kernel’s development roadmap, release cadence, security practices, the slow adoption of Rust, and the potential role of AI, while sharing candid views on cloud, Kubernetes, and legacy kernel support.

AILinuxOpenSource Summit
0 likes · 12 min read
Linus Torvalds on Linux Kernel’s Future: Versions, Rust, AI, and Security
php Courses
php Courses
Aug 23, 2024 · Backend Development

Regenerating PHP Session IDs with session_regenerate_id for Improved Security

This article explains how to use PHP's session_regenerate_id function to securely regenerate session IDs, discusses the reasons for doing so, provides sample code, and outlines important precautions such as starting the session, using HTTPS, and avoiding excessive regeneration.

PHPbackendsecurity
0 likes · 4 min read
Regenerating PHP Session IDs with session_regenerate_id for Improved Security
大转转FE
大转转FE
Aug 23, 2024 · Information Security

How OAuth2.0 Powers Third‑Party Login: From WeChat to Secure Token Flows

This article explains third‑party authorization login, using WeChat as a concrete example, and provides a detailed walkthrough of the OAuth2.0 protocol, its roles, grant types, token handling, and implementation steps for mobile and web applications.

Access TokenAuthorization CodeOAuth2.0
0 likes · 24 min read
How OAuth2.0 Powers Third‑Party Login: From WeChat to Secure Token Flows
Inke Technology
Inke Technology
Aug 21, 2024 · Information Security

Can You Hide Android App Features from AI‑Based Detection? A Dynamic Obfuscation Guide

This article explores why Android apps are increasingly linked in AI‑driven security assessments, examines academic papers on feature extraction, compares static and dynamic obfuscation techniques, reviews industry protection solutions, and proposes a plug‑in‑based dynamic obfuscation framework that maximizes feature dispersion while preserving app functionality.

AndroidApp ObfuscationDynamic Analysis
0 likes · 40 min read
Can You Hide Android App Features from AI‑Based Detection? A Dynamic Obfuscation Guide
Architect
Architect
Aug 16, 2024 · Information Security

How to Patch Critical Spring & Nacos Vulnerabilities in 2024

This article analyzes recent critical security flaws in Spring Framework (CVE‑2024‑38808 and CVE‑2024‑38809) and Nacos Jraft port, explains their impact, provides version‑specific mitigation steps, code snippets for Spring Boot fixes, and offers additional hardening recommendations for developers and operators.

CVE-2024-38808CVE-2024-38809Nacos
0 likes · 7 min read
How to Patch Critical Spring & Nacos Vulnerabilities in 2024
FunTester
FunTester
Aug 14, 2024 · Backend Development

Mastering Java Agents: Build, Package, and Deploy Runtime Instrumentation

This guide explains what Java Agents are, their core capabilities such as bytecode enhancement, performance monitoring, security checks, and debugging, and provides step‑by‑step instructions for implementing the premain method, creating a ClassFileTransformer, packaging the agent with Maven, and loading it both statically and dynamically.

BytecodeInstrumentationJava
0 likes · 10 min read
Mastering Java Agents: Build, Package, and Deploy Runtime Instrumentation
Architect
Architect
Aug 9, 2024 · Backend Development

Why Nginx Outperforms Others: Deep Dive into Architecture, Modules, and Tuning

This comprehensive guide explains Nginx's high‑performance architecture, module system, multi‑process model, FastCGI integration, configuration best practices, tuning techniques, error troubleshooting, and a known PHP‑related vulnerability, providing practical steps for optimal deployment on Linux servers.

LinuxPHP-FPMPerformance Tuning
0 likes · 47 min read
Why Nginx Outperforms Others: Deep Dive into Architecture, Modules, and Tuning
Java Tech Enthusiast
Java Tech Enthusiast
Aug 8, 2024 · Information Security

Token Authentication Strategies for Java Microservices

The article compares token‑based authentication options for Java microservices—stateless JWTs, OAuth 2.0 with access and refresh tokens, a centralized API‑gateway authority, and internal service‑to‑service schemes—guiding readers on selecting the best approach according to security, scalability, and business needs.

API-gatewayJWTJava
0 likes · 7 min read
Token Authentication Strategies for Java Microservices
Baidu Geek Talk
Baidu Geek Talk
Aug 7, 2024 · Artificial Intelligence

Detecting Time‑Series Anomalies in Embedding Space: A Practical AI Approach

This article presents an embedding‑based method for time‑series anomaly detection in security and anti‑cheat scenarios, explains how to vectorise logs, sample and compute distribution features, details implementation code, and validates the approach with four synthetic experiments showing precision‑recall improvements at day and hour granularity.

ClusteringMachine Learninganomaly detection
0 likes · 12 min read
Detecting Time‑Series Anomalies in Embedding Space: A Practical AI Approach
php Courses
php Courses
Aug 7, 2024 · Backend Development

Using PHP 7.4+ Foreign Function Interface (FFI) to Call C Libraries

This article introduces PHP 7.4's Foreign Function Interface (FFI), explains how to enable it, demonstrates basic usage and advanced examples for calling C functions, discusses performance considerations, security best practices, troubleshooting, and future directions for PHP developers.

C integrationFFIPHP
0 likes · 8 min read
Using PHP 7.4+ Foreign Function Interface (FFI) to Call C Libraries
Wukong Talks Architecture
Wukong Talks Architecture
Aug 5, 2024 · Operations

Comprehensive Case Study of Large‑Scale Desktop IT Management and Automated Fault Detection at Ctrip

This article presents a detailed case study of Ctrip's large‑scale desktop IT management solution, describing the challenges of handling tens of thousands of office PCs, the full‑link architecture built with Rust, Tauri, SpringBoot and Django, automated health monitoring, fault detection, remediation workflows, security measures, performance optimizations, and the measurable operational improvements achieved.

Data CollectionDesktop ManagementIT Operations
0 likes · 16 min read
Comprehensive Case Study of Large‑Scale Desktop IT Management and Automated Fault Detection at Ctrip
IT Services Circle
IT Services Circle
Aug 3, 2024 · Backend Development

Understanding API Gateways: Core Functions and Popular Products

This article explains what an API gateway is, outlines its core functions such as routing, load balancing, security, rate limiting, aggregation and caching, and reviews ten popular gateway solutions—including Amazon API Gateway, Kong, Apigee, NGINX, Tyk, MuleSoft Anypoint, Azure API Management, IBM API Connect, Kubernetes‑native options, and Traefik—highlighting their key features and typical use cases.

API-gatewayKubernetesMicroservices
0 likes · 5 min read
Understanding API Gateways: Core Functions and Popular Products
php Courses
php Courses
Aug 1, 2024 · Information Security

Common PHP Pitfalls and Effective Prevention Strategies

This article examines frequent security and quality pitfalls in PHP development—such as deprecated functions, SQL injection, XSS, insecure file inclusion, poor error handling, session hijacking, hard‑coded credentials, insufficient input validation, outdated versions, and low code quality—and provides concrete best‑practice recommendations to avoid them.

Input ValidationPHPcode quality
0 likes · 8 min read
Common PHP Pitfalls and Effective Prevention Strategies
Efficient Ops
Efficient Ops
Jul 29, 2024 · Operations

Top 19 Essential Linux & Sysadmin Interview Questions with Answers

This article compiles 19 practical Linux, security, networking, and Python interview questions covering command‑line techniques, system monitoring, load‑balancing, HTTP protocols, common vulnerabilities, TCP handshakes, TIME_WAIT optimization, and code snippets to help candidates prepare for sysadmin roles.

InterviewLinuxPython
0 likes · 15 min read
Top 19 Essential Linux & Sysadmin Interview Questions with Answers
JD Tech Talk
JD Tech Talk
Jul 29, 2024 · Backend Development

Best Practices for Service Design and API Development in Enterprise Systems

This article presents comprehensive guidelines for designing robust, secure, and maintainable enterprise services, covering API path conventions, request handling, input/output parameter design, business logic recommendations, exception handling, dependency management, monitoring, degradation strategies, encryption, and system admission practices.

API designEncryptionLogging
0 likes · 19 min read
Best Practices for Service Design and API Development in Enterprise Systems
JD Cloud Developers
JD Cloud Developers
Jul 29, 2024 · Backend Development

Designing Robust Backend Services: Path Standards, Security, Monitoring, and Degradation Strategies

This article outlines comprehensive best‑practice guidelines for designing robust, secure, and maintainable backend services—covering API path conventions, request handling, parameter design, error codes, dependency management, monitoring, degradation strategies, legacy service handling, encryption, access control, and tamper‑proof mechanisms, with practical code examples.

API designEncryptionbackend
0 likes · 18 min read
Designing Robust Backend Services: Path Standards, Security, Monitoring, and Degradation Strategies
Liangxu Linux
Liangxu Linux
Jul 28, 2024 · Cloud Native

Avoid These 10 Common Kubernetes Mistakes to Boost Reliability

This article outlines the most frequent Kubernetes pitfalls—such as missing resource requests, omitted health checks, using the :latest tag, over‑privileged containers, insufficient monitoring, default namespace misuse, weak security settings, absent PodDisruptionBudgets, lack of pod anti‑affinity, and improper load‑balancing—and provides concrete commands, YAML examples, and best‑practice recommendations to prevent them.

AutoscalingKubernetesResource Management
0 likes · 13 min read
Avoid These 10 Common Kubernetes Mistakes to Boost Reliability
Architect's Guide
Architect's Guide
Jul 28, 2024 · Fundamentals

Why Software Quality Is Worse Than a Decade Ago: Causes and Reflections

The article argues that despite advances in tools and practices, modern software quality has declined over the past ten years due to factors such as increasing complexity, lack of focus, superficial engineering culture, and inadequate attention to reliability, usability, and security.

Software Qualitydevelopment practicessecurity
0 likes · 9 min read
Why Software Quality Is Worse Than a Decade Ago: Causes and Reflections
Architect's Guide
Architect's Guide
Jul 27, 2024 · Information Security

Understanding OAuth 2.0: Principles, Architecture, and Implementation

This article explains the OAuth 2.0 authorization framework, its core concepts, architecture, key roles, and implementation patterns for web, user‑agent, and native applications, helping readers grasp how delegated access works without sharing user credentials.

AuthenticationOAuth2authorization
0 likes · 9 min read
Understanding OAuth 2.0: Principles, Architecture, and Implementation
Ctrip Technology
Ctrip Technology
Jul 25, 2024 · Operations

Ctrip's Full‑Chain Desktop Operations Platform for Managing Tens of Thousands of PCs

The article presents a comprehensive case study of Ctrip's full‑chain desktop operations system, detailing its architecture, cross‑platform Rust/Tauri agents, SpringBoot server, security measures, operational challenges, performance optimizations, and the measurable improvements in fault detection and repair across a massive corporate PC fleet.

Desktop ManagementIT OperationsRust
0 likes · 18 min read
Ctrip's Full‑Chain Desktop Operations Platform for Managing Tens of Thousands of PCs
21CTO
21CTO
Jul 24, 2024 · Information Security

Can Rust Replace C/C++ to Prevent the Next CrowdStrike‑Induced BSOD?

The article examines the recent Windows BSOD crisis caused by a faulty CrowdStrike update, argues that memory‑unsafe languages like C/C++ contributed to the failure, and explains how Microsoft and the industry are turning to the memory‑safe Rust language for system, firmware, and cloud components to improve reliability and security.

AzureSystem ProgrammingWindows
0 likes · 8 min read
Can Rust Replace C/C++ to Prevent the Next CrowdStrike‑Induced BSOD?
Open Source Linux
Open Source Linux
Jul 24, 2024 · Operations

Linux Emergency Handbook v1.2: Key Updates & New Incident Response Practices

Version 1.2 of the Linux Emergency Handbook introduces critical updates such as SSH key backdoor checks, detailed command timestamp logs, new journalctl log viewing techniques, enhanced password checks, added data USB guidance, and revamped post‑incident stages including routine security checks, loss assessment, and targeted investigations.

Linuxemergency responseincident management
0 likes · 3 min read
Linux Emergency Handbook v1.2: Key Updates & New Incident Response Practices
Architect
Architect
Jul 23, 2024 · Databases

How to Perform Fuzzy Searches on Encrypted Data: Methods, Pros & Cons

This article examines three categories of techniques—naïve, conventional, and advanced—for enabling fuzzy queries on encrypted data, comparing their implementation steps, performance impact, storage overhead, and security trade‑offs, and provides practical examples and reference links for further study.

DatabaseFuzzy SearchPerformance
0 likes · 11 min read
How to Perform Fuzzy Searches on Encrypted Data: Methods, Pros & Cons
OPPO Amber Lab
OPPO Amber Lab
Jul 22, 2024 · Information Security

Exploiting AIDL and Parcelable Mismatches in Android IPC

This article examines how mismatched read/write implementations in Android's Parcelable and AIDL mechanisms create exploitable IPC vulnerabilities, outlines several historical bug patterns, and discusses potential attack vectors and mitigation strategies.

AIDLAndroidIPC
0 likes · 11 min read
Exploiting AIDL and Parcelable Mismatches in Android IPC
Architecture Development Notes
Architecture Development Notes
Jul 21, 2024 · Backend Development

Rust vs PHP: Which Language Wins for Your Next Project?

This article compares the emerging system language Rust with the veteran web language PHP, examining their core features, performance, safety, learning curves, ecosystems, and deployment considerations to help developers choose the right tool for their specific project needs.

Language comparisonPHPRust
0 likes · 14 min read
Rust vs PHP: Which Language Wins for Your Next Project?
Continuous Delivery 2.0
Continuous Delivery 2.0
Jul 19, 2024 · Operations

Strategic Enhancements for CI/CD Pipelines: Performance, Security, Blue‑Green Deployment, and Infrastructure as Code

This article outlines six practical strategies to upgrade CI/CD pipelines, including performance and device‑compatibility testing, visual regression and accessibility checks, automated security scans with Dependabot, blue‑green deployments, phased testing, infrastructure‑as‑code integration, and automated rollback checkpoints, helping teams deliver higher‑quality software faster.

Blue-Green DeploymentCI/CDDevOps
0 likes · 10 min read
Strategic Enhancements for CI/CD Pipelines: Performance, Security, Blue‑Green Deployment, and Infrastructure as Code
Linux Ops Smart Journey
Linux Ops Smart Journey
Jul 18, 2024 · Operations

How to Install and Secure Docker in Production Environments

Learn step-by-step how to prepare your Linux server, download and install Docker 20.10.24 manually, configure daemon settings, set up systemd service, start and verify the engine, and apply essential security and optimization practices for reliable production deployments.

DockerLinuxProduction Deployment
0 likes · 5 min read
How to Install and Secure Docker in Production Environments
Python Programming Learning Circle
Python Programming Learning Circle
Jul 18, 2024 · Fundamentals

Guide to Using Python's eval() Function

This article provides a comprehensive guide to Python's eval() function, covering its syntax, parameters, execution process, differences between globals and locals, dynamic versus static execution, common use cases, security risks, and alternatives such as ast.literal_eval() and exec().

EvalPythoncode evaluation
0 likes · 15 min read
Guide to Using Python's eval() Function
Java Architect Essentials
Java Architect Essentials
Jul 17, 2024 · Information Security

Why Many Experts Advise Against Using JWT for Authentication

This article explains what JSON Web Tokens are, outlines their typical workflow, and critically examines their drawbacks—including size overhead, redundant signatures, revocation challenges, lack of encryption, and broader security concerns—before concluding with practical recommendations for their use.

AuthenticationJWTWeb
0 likes · 8 min read
Why Many Experts Advise Against Using JWT for Authentication
php Courses
php Courses
Jul 16, 2024 · Backend Development

Using PHP password_hash Function for Secure Password Hashing

This article explains how to securely hash passwords in PHP using the password_hash function, covering the concept of hashing, code examples for creating and verifying hashes, automatic salting, and best practices for protecting user credentials.

backend developmentpassword hashingpassword_hash
0 likes · 5 min read
Using PHP password_hash Function for Secure Password Hashing
Shepherd Advanced Notes
Shepherd Advanced Notes
Jul 16, 2024 · Information Security

Why Developers Are Abandoning JWT for Authentication and Authorization

The article examines JWT's benefits such as statelessness and CSRF protection, then details its drawbacks—including revocation difficulty, XSS risk, and token size—and presents practical solutions like blacklists, short lifetimes, and refresh‑token strategies, helping readers decide when to use JWT versus session‑based authentication.

AuthenticationCSRFJWT
0 likes · 14 min read
Why Developers Are Abandoning JWT for Authentication and Authorization
Alibaba Cloud Native
Alibaba Cloud Native
Jul 15, 2024 · Cloud Native

How AI-Driven Gateways Are Evolving to Meet LLM Demands

The article examines how AI-era large language model (LLM) applications impose new traffic, security, and scalability requirements on gateways, and explains how the Envoy‑based open‑source Higress gateway addresses these challenges with hot configuration updates, token‑based rate limiting, streaming support, and multi‑tenant capabilities.

AIInfraLLM
0 likes · 19 min read
How AI-Driven Gateways Are Evolving to Meet LLM Demands
macrozheng
macrozheng
Jul 12, 2024 · Information Security

Understanding JWT: Secure Token-Based Authentication for Modern Apps

This article explains the evolution from traditional cookie‑session authentication to token‑based JWT, detailing its structure, security mechanisms, implementation steps, advantages, limitations, and practical Java code examples, while also comparing it with modern authentication challenges in web and mobile environments.

AuthenticationJWTJava
0 likes · 15 min read
Understanding JWT: Secure Token-Based Authentication for Modern Apps
JD Retail Technology
JD Retail Technology
Jul 12, 2024 · Backend Development

Service Design Tips and Best Practices for Robust API Development

This article explores essential service design considerations beyond standard guidelines, covering API path structuring, request handling, parameter design, security measures, monitoring, degradation strategies, and code examples to help build flexible, secure, and maintainable backend services.

API designMicroservicesbackend development
0 likes · 19 min read
Service Design Tips and Best Practices for Robust API Development