BestHub
Sign in
Tagged articles

security

2428 articles · Page 15 of 25
Sohu Tech Products
Sohu Tech Products
Nov 2, 2022 · Information Security

Handling XSS Vulnerabilities in Spring Boot: Request Wrapper, Filters, and Jackson Custom Serialization

This article documents a step‑by‑step solution for preventing XSS attacks in a Spring Boot application, covering input validation, a custom HttpServletRequestWrapper, filter registration, and Jackson serializers/deserializers to escape malicious HTML both on request parameters and JSON payloads.

Input ValidationJacksonRequestWrapper
0 likes · 16 min read
Handling XSS Vulnerabilities in Spring Boot: Request Wrapper, Filters, and Jackson Custom Serialization
Top Architect
Top Architect
Oct 27, 2022 · Databases

Techniques for Fuzzy Query on Encrypted Data

This article examines the challenges of performing fuzzy searches on encrypted data and compares three categories of solutions—naïve, conventional, and advanced—detailing their implementation methods, performance trade‑offs, storage costs, and security implications for real‑world applications.

DatabaseEncryptionFuzzy Search
0 likes · 12 min read
Techniques for Fuzzy Query on Encrypted Data
MaGe Linux Operations
MaGe Linux Operations
Oct 26, 2022 · Information Security

Why Google’s New Passkey Is Replacing Passwords on Android and Chrome

Google announced that Android and Chrome will adopt Passkey, a biometric‑based, public‑key login system that replaces traditional passwords, offering cross‑platform support, phishing resistance, and cloud‑backed recovery, with developers able to integrate it via WebAuthn and Google Play Services.

AndroidAuthenticationChrome
0 likes · 4 min read
Why Google’s New Passkey Is Replacing Passwords on Android and Chrome
ByteDance SYS Tech
ByteDance SYS Tech
Oct 24, 2022 · Cloud Native

How veLinux Boosts Cloud‑Native Performance and Security on x86 & ARM

veLinux, an open‑source Linux distribution from Volcano Engine, delivers a stable, high‑performance, and secure operating system for cloud workloads on both x86 and ARM, offering multiple editions, deep kernel optimizations, fast boot, and extensive security features tailored for modern cloud‑native environments.

Performancekernel optimizationsecurity
0 likes · 17 min read
How veLinux Boosts Cloud‑Native Performance and Security on x86 & ARM
Open Source Linux
Open Source Linux
Oct 23, 2022 · Fundamentals

100 Essential Networking Fundamentals Explained

This article provides concise explanations of 100 core networking concepts—from basic link definitions and OSI model layers to protocols, topologies, security measures, and hardware components—offering readers a comprehensive overview of computer network fundamentals essential for IT professionals and students alike.

OSI modelprotocolssecurity
0 likes · 32 min read
100 Essential Networking Fundamentals Explained
Open Source Linux
Open Source Linux
Oct 23, 2022 · Information Security

How a 23‑Year‑Old Curl Cookie Bug Evaded Detection Until 2022

This article recounts the 23.9‑year lifespan of a curl cookie handling vulnerability, tracing its origins in 1998, the evolution of cookie specifications, the discovery of the CVE‑2022‑35252 bug, and the eventual fix that finally eliminated the flaw after nearly 9,000 days.

CVEHTTPRFC6265
0 likes · 9 min read
How a 23‑Year‑Old Curl Cookie Bug Evaded Detection Until 2022
Laravel Tech Community
Laravel Tech Community
Oct 18, 2022 · Information Security

Linux Kernel Remote Code Execution Vulnerability (CVE-2022-42721)

A remote code execution vulnerability (CVE-2022-42721) affecting Linux kernel versions 5.1 through 5.19.14 allows local attackers to inject malicious WLAN frames that corrupt the mac80211 BSS handling list, enabling execution of arbitrary code, and can be mitigated by upgrading to kernel 5.19.15 or later.

Remote Code ExecutionVulnerabilitycve-2022-42721
0 likes · 2 min read
Linux Kernel Remote Code Execution Vulnerability (CVE-2022-42721)
Programmer DD
Programmer DD
Oct 17, 2022 · Information Security

Can Google’s Passkey Login Finally End Passwords?

Google’s new Passkey system, introduced in Android and Chrome, combines biometric verification with public‑key encryption to create a cross‑platform, phishing‑resistant login method that syncs across devices and promises to replace traditional passwords.

AndroidFIDOPasskey
0 likes · 4 min read
Can Google’s Passkey Login Finally End Passwords?
Architect's Guide
Architect's Guide
Oct 16, 2022 · Backend Development

Understanding API Gateways: Concepts, Design Principles, and Comparison of Popular Implementations

This article explains what an API gateway is, why it is needed in micro‑service architectures, outlines key design ideas such as request routing, service registration, load balancing, resilience and security, and compares major open‑source gateways like OpenResty, Kong, Zuul and Spring Cloud Gateway.

API-gatewayMicroservicessecurity
0 likes · 28 min read
Understanding API Gateways: Concepts, Design Principles, and Comparison of Popular Implementations
MaGe Linux Operations
MaGe Linux Operations
Oct 14, 2022 · Information Security

How Dapr Secures Service Calls and Pub/Sub with mTLS and Access Policies

This article explains Dapr's security foundation, covering end‑to‑end mTLS for service invocation, configurable access control policies for services and Pub/Sub components, trust domains, SPIFFE identities, and practical examples of policy configurations and deployment steps for both local and Kubernetes environments.

Access ControlService Invocationdapr
0 likes · 17 min read
How Dapr Secures Service Calls and Pub/Sub with mTLS and Access Policies
Python Programming Learning Circle
Python Programming Learning Circle
Oct 14, 2022 · Information Security

Essential Legal Knowledge Every Programmer Should Know

This article highlights the importance of legal awareness for programmers by presenting real‑world incidents, outlining key labor‑law rights and obligations, and offering practical guidance on protecting personal and corporate assets while avoiding illegal activities and black‑gray industry involvement.

Legalemploymentprogrammers
0 likes · 6 min read
Essential Legal Knowledge Every Programmer Should Know
Aikesheng Open Source Community
Aikesheng Open Source Community
Oct 14, 2022 · Databases

SQLE 1.2210.0-pre1 Release Notes: New MySQL Audit Rules, Enhanced Scanning Filters, and UI Improvements

The SQLE 1.2210.0-pre1 preview release introduces new MySQL audit rules prohibiting rename/change operations and requiring LIMIT clauses, adds filter options to the intelligent scan task list, refines work‑order progress styling, and provides a detailed list of features, optimizations, and bug fixes.

Database AuditingMySQLSQLE
0 likes · 5 min read
SQLE 1.2210.0-pre1 Release Notes: New MySQL Audit Rules, Enhanced Scanning Filters, and UI Improvements
Cloud Native Technology Community
Cloud Native Technology Community
Oct 12, 2022 · Cloud Computing

Key Insights from the HashiCorp 2022 State of Cloud Strategy Survey: Multi‑Cloud Adoption, Security Priorities, and Operational Challenges

The 2022 HashiCorp State of Cloud Strategy Survey reveals that 60% of organizations have already adopted multi‑cloud strategies, security and automation are now top priorities, and skill gaps, complexity, and cost overruns remain the biggest obstacles to effective cloud operations.

Cloud ComputingCloud StrategyMulti-Cloud
0 likes · 10 min read
Key Insights from the HashiCorp 2022 State of Cloud Strategy Survey: Multi‑Cloud Adoption, Security Priorities, and Operational Challenges
Laravel Tech Community
Laravel Tech Community
Oct 11, 2022 · Information Security

Label Studio <1.6.0 SSRF Vulnerability (CVE‑2022‑36551)

Label Studio versions prior to 1.6.0 contain an SSRF flaw that allows authenticated users to access arbitrary files on the server via the data import module, with self‑registration enabled by default, and a proof‑of‑concept exploit is publicly available.

CVE-2022-36551Label StudioSSRF
0 likes · 3 min read
Label Studio <1.6.0 SSRF Vulnerability (CVE‑2022‑36551)
IT Architects Alliance
IT Architects Alliance
Oct 11, 2022 · Information Security

Understanding SSO: When to Choose SAML vs OAuth2 & OIDC

This article explains the fundamentals of Single Sign‑On (SSO), compares the two most common protocols—SAML and OAuth2 (with OpenID Connect)—covers their terminology, workflows, benefits, and provides guidance on which to use in different scenarios.

AuthenticationIdentity ManagementOAuth2
0 likes · 10 min read
Understanding SSO: When to Choose SAML vs OAuth2 & OIDC
DevOps
DevOps
Oct 11, 2022 · Operations

Key Findings from the 2022 Accelerate State of DevOps Report: Security, Software Supply Chain, and Cloud Adoption

The 2022 Accelerate State of DevOps Report reveals that while application‑level security scanning in CI/CD pipelines is widely adopted, organizational culture, cloud adoption, and performance metrics significantly influence DevOps effectiveness, with overall performance declining amid pandemic‑related challenges.

Cloud ComputingDORA reportDevOps
0 likes · 6 min read
Key Findings from the 2022 Accelerate State of DevOps Report: Security, Software Supply Chain, and Cloud Adoption
Liangxu Linux
Liangxu Linux
Oct 10, 2022 · Operations

Essential Linux Ops: 10 Hard‑Earned Rules for Safe Server Management

This article shares practical Linux operations guidelines—including thorough testing, cautious use of destructive commands, strict backup policies, security hardening, continuous monitoring, performance tuning, and a disciplined mindset—to help avoid costly incidents and maintain stable production environments.

LinuxPerformance Tuningsecurity
0 likes · 11 min read
Essential Linux Ops: 10 Hard‑Earned Rules for Safe Server Management
DataFunTalk
DataFunTalk
Oct 9, 2022 · Big Data

Software Localization and the Future of Big Data Platforms in China

The article examines why software localization is essential for China’s data technology, outlines the challenges and current state of domestic operating systems, databases and big‑data platforms, discusses migration and upgrade strategies, and introduces NetEase DataFun’s self‑developed big‑data platform with its features and support.

Big DataChinaPlatform Migration
0 likes · 11 min read
Software Localization and the Future of Big Data Platforms in China
Top Architect
Top Architect
Oct 7, 2022 · Information Security

OAuth 2.0 Overview: Protocol Basics, Core Concepts, Grant Types and Token Flow

This article provides a comprehensive overview of OAuth 2.0, covering its protocol basics, core concepts, the four grant types, token issuance and refresh processes, request and response examples, and security considerations for implementing authentication and authorization in modern applications.

access-tokengrant-typessecurity
0 likes · 23 min read
OAuth 2.0 Overview: Protocol Basics, Core Concepts, Grant Types and Token Flow
MaGe Linux Operations
MaGe Linux Operations
Oct 1, 2022 · Information Security

Mastering PHP One‑Line Webshell Evasion: Techniques & Payloads

This article explores various PHP one‑line webshell payloads, compares eval and assert functions, and presents multiple evasion techniques such as XOR, base64, rot13, string concatenation, variable obfuscation, and version‑specific tricks to bypass WAFs and antivirus detection.

EvasionObfuscationOne-liner
0 likes · 16 min read
Mastering PHP One‑Line Webshell Evasion: Techniques & Payloads
AntTech
AntTech
Sep 30, 2022 · Artificial Intelligence

Ant Group’s 2022 Technical Highlights: Open‑Source Privacy Computing, OceanBase 4.0, AI Security, and Research Achievements

In 2022 Ant Group announced the open‑source privacy‑computing framework “YinYu”, launched OceanBase 4.0 with a single‑node distributed architecture, earned multiple AI and security awards, released AI risk‑detection platforms, open‑sourced the high‑performance graph database TuGraph, and published several papers at top AI conferences, showcasing its broad innovations across privacy, AI, and data infrastructure.

Ant GroupDatabaseOpen Source
0 likes · 14 min read
Ant Group’s 2022 Technical Highlights: Open‑Source Privacy Computing, OceanBase 4.0, AI Security, and Research Achievements
ITFLY8 Architecture Home
ITFLY8 Architecture Home
Sep 29, 2022 · Information Security

Understanding SSO: When to Use SAML vs OAuth2 & OIDC

This article explains single sign‑on concepts, compares SAML, OAuth2 and OpenID Connect, outlines their benefits and typical workflows, and provides guidance on choosing the right protocol for different security and user‑experience scenarios.

AuthenticationOAuth2OpenID Connect
0 likes · 9 min read
Understanding SSO: When to Use SAML vs OAuth2 & OIDC
Selected Java Interview Questions
Selected Java Interview Questions
Sep 28, 2022 · Backend Development

Design and Implementation of a SpringBoot‑Based API Gateway with High Performance, High Availability, and Security

This article presents a comprehensive guide to building a SpringBoot API gateway that covers core capabilities such as authentication, routing, standardized responses, and custom error handling, while achieving high performance with NIO2, high availability with Alibaba Sentinel, and robust security features like IP black‑listing.

API-gatewayMicroservicesNIO2
0 likes · 14 min read
Design and Implementation of a SpringBoot‑Based API Gateway with High Performance, High Availability, and Security
21CTO
21CTO
Sep 27, 2022 · Backend Development

Mastering API Design: From Basics to Rate Limiting, Versioning, and Security

This article shares practical insights on API design, covering fundamentals, rate limiting, version management, security considerations, and inter‑team integration, illustrated with code snippets and diagrams to help developers build clear, standardized, and robust backend interfaces.

API designVersioningrate limiting
0 likes · 17 min read
Mastering API Design: From Basics to Rate Limiting, Versioning, and Security
Selected Java Interview Questions
Selected Java Interview Questions
Sep 20, 2022 · Backend Development

Comprehensive Guide to Building an OAuth2 Authentication Server with Spring Boot, MySQL, Nacos, and Gateway Integration

This tutorial walks through designing an OAuth2 authentication architecture, configuring Spring Boot services, setting up MySQL schemas, integrating Nacos discovery, implementing security with JWT tokens, and connecting microservices through a Spring Cloud Gateway, while demonstrating all four OAuth2 grant types with code examples.

GatewayMicroservicesNacos
0 likes · 26 min read
Comprehensive Guide to Building an OAuth2 Authentication Server with Spring Boot, MySQL, Nacos, and Gateway Integration
Alipay Experience Technology
Alipay Experience Technology
Sep 19, 2022 · Frontend Development

How Yuque Built a Secure, High‑Performance Desktop App with Electron

This article details Yuque's desktop client architecture, covering its multi‑layer design, security measures, incremental update strategy, reusable components, delivery efficiency, performance optimizations, and stability practices that enable a fast, offline‑capable, and user‑friendly productivity tool.

Desktop applicationElectronIncremental Update
0 likes · 15 min read
How Yuque Built a Secure, High‑Performance Desktop App with Electron
MaGe Linux Operations
MaGe Linux Operations
Sep 18, 2022 · Information Security

How to Build a Python Wi‑Fi Brute‑Force Cracker (CLI & GUI)

This tutorial walks through creating a Python Wi‑Fi password brute‑force tool, starting with a command‑line script that reads passwords from a dictionary, then adding network scanning for flexibility, and finally wrapping the logic in a Tkinter graphical interface while highlighting potential multithreading improvements.

TkinterWiFibrute-force
0 likes · 20 min read
How to Build a Python Wi‑Fi Brute‑Force Cracker (CLI & GUI)
21CTO
21CTO
Sep 15, 2022 · Information Security

How govulncheck Helps Go Developers Spot Real Vulnerabilities

The new govulncheck tool leverages the Go vulnerability database to pinpoint actual vulnerable function calls in code, reducing noise and addressing developer challenges around error handling and third‑party library security, while recent surveys highlight the growing need for such solutions.

GoStatic Analysisgovulncheck
0 likes · 6 min read
How govulncheck Helps Go Developers Spot Real Vulnerabilities
MaGe Linux Operations
MaGe Linux Operations
Sep 14, 2022 · Backend Development

What Go Developers Really Think About Generics, Security, and Tooling in the 2022 Q2 Survey

The 2022 Q2 Go developer survey of 5,752 respondents reveals rapid adoption of generics, limited awareness of fuzz testing, security concerns centered on third‑party dependencies, mixed feelings about new features, and insights into tooling, IDE preferences, and workspace usage that guide the Go team's future priorities.

Developer SurveyFuzzingGo
0 likes · 17 min read
What Go Developers Really Think About Generics, Security, and Tooling in the 2022 Q2 Survey
vivo Internet Technology
vivo Internet Technology
Sep 14, 2022 · Information Security

Web Crawling, Anti‑Crawling, and Anti‑Anti‑Crawling Techniques: Principles, Frameworks, and Code Examples

The article explains web‑crawling basics, Python and Scrapy examples, then surveys common anti‑crawling defenses such as CSS offsets, image camouflage, custom fonts, dynamic rendering, captchas, request signatures and honeypots, and finally presents anti‑anti‑crawling countermeasures—including CSS‑offset reversal, font decoding, headless‑browser rendering and YOLOv5‑based captcha cracking, while stressing legal compliance.

CAPTCHAPythonScrapy
0 likes · 25 min read
Web Crawling, Anti‑Crawling, and Anti‑Anti‑Crawling Techniques: Principles, Frameworks, and Code Examples
Top Architect
Top Architect
Sep 13, 2022 · Information Security

Implementing Data Masking in MySQL and Java with MyBatis-Mate Sensitive Jackson

This article demonstrates how to mask sensitive data such as phone numbers and ID cards using SQL functions, introduces Java masking libraries, and provides a complete MyBatis-Mate Sensitive Jackson example with configuration, custom strategies, entity annotations, controller endpoints, and sample responses.

JavaMyBatisSQL
0 likes · 11 min read
Implementing Data Masking in MySQL and Java with MyBatis-Mate Sensitive Jackson
Top Architect
Top Architect
Sep 9, 2022 · Fundamentals

System Architecture Concepts Illustrated with Relationship Metaphors

The article uses a series of relationship‑based analogies to explain fundamental system‑architecture concepts such as cold backup, hot standby, disaster recovery, load balancing, multi‑cluster scaling, CDN, DDoS protection, IDS/IPS, SIEM, VPN, reverse engineering, stress testing, data analysis, parallel computing, big‑data processing, containerization, virtualization, and more, while also providing promotional links to related resources.

cloudload balancingsecurity
0 likes · 16 min read
System Architecture Concepts Illustrated with Relationship Metaphors
Programmer DD
Programmer DD
Sep 7, 2022 · Cloud Native

Master Docker: 10 Essential Best Practices for Secure, Efficient Java Containers

This guide walks you through ten practical Docker best‑practice steps—from using deterministic image tags and minimal base images to multi‑stage builds, non‑root users, PID‑1 handling, graceful shutdown, .dockerignore usage, container‑aware JVM settings, and cautious adoption of automation tools—ensuring your Java applications run securely and efficiently in production containers.

DockerJavabest practices
0 likes · 15 min read
Master Docker: 10 Essential Best Practices for Secure, Efficient Java Containers
Senior Brother's Insights
Senior Brother's Insights
Sep 5, 2022 · Backend Development

How a Hidden Ternary Operator Triggered Massive Data Deletion in a Java Backend

After taking over a system via a server image, the author uncovered malicious modifications that used a ternary expression to force id=1, causing MyBatis to generate a “where 1=1” clause that deleted the entire T_QUART_DATA table, and later discovered cron jobs that removed core jars, illustrating a thorough forensic debugging process.

JavaLinuxMyBatis
0 likes · 7 min read
How a Hidden Ternary Operator Triggered Massive Data Deletion in a Java Backend
IT Architects Alliance
IT Architects Alliance
Sep 3, 2022 · Backend Development

Understanding API Gateways: Concepts, Design Principles, and Comparison of Popular Solutions

This article explains the fundamental concepts of API gateways, their design motivations, key architectural components such as routing, service registration, load balancing, resilience, and security, and provides a comparative overview of popular open‑source implementations like OpenResty, Kong, Zuul, and Spring Cloud Gateway.

API-gatewayload balancingsecurity
0 likes · 27 min read
Understanding API Gateways: Concepts, Design Principles, and Comparison of Popular Solutions
Liangxu Linux
Liangxu Linux
Aug 31, 2022 · Operations

Set Up a Private Git Server on Linux in 5 Simple Steps

This guide walks you through installing Git, creating a dedicated git user, configuring SSH keys, preparing a repository directory, initializing a bare repository, and applying essential security hardening to run a private Git server on a Linux machine.

LinuxServersecurity
0 likes · 8 min read
Set Up a Private Git Server on Linux in 5 Simple Steps
Efficient Ops
Efficient Ops
Aug 30, 2022 · Operations

How Minsheng Bank’s DevSecOps Platform Sets New Standards in XOps

The article details Minsheng Bank’s award‑winning DevSecOps platform and performance‑measurement system presented at the 2022 XOps Industry Summit, highlighting its three‑pillar strategy of tiered classification, cloud‑native architecture, and integrated security, as well as the broader Chinese DevOps maturity model and standards.

Continuous DeliveryDevOpsPerformance Measurement
0 likes · 6 min read
How Minsheng Bank’s DevSecOps Platform Sets New Standards in XOps
Liangxu Linux
Liangxu Linux
Aug 29, 2022 · Information Security

How to Harden SSH on Linux: 8 Essential Security Tweaks

This guide walks you through eight practical steps to secure SSH on a Linux server, including disabling root login, changing the default port, restricting empty passwords, limiting authentication attempts, enforcing protocol 2, disabling forwarding, using key‑based authentication, and applying IP‑based access controls.

ConfigurationLinuxSSH
0 likes · 7 min read
How to Harden SSH on Linux: 8 Essential Security Tweaks
Baidu Intelligent Cloud Tech Hub
Baidu Intelligent Cloud Tech Hub
Aug 26, 2022 · Cloud Computing

How Baidu Cloud Flow Log Boosts Network Visibility and Cuts Costs

Baidu Intelligent Cloud's Flow Log product provides real‑time, high‑throughput network flow collection, visualization, and analysis for VPC, dedicated line, and NAT gateways, enabling fault diagnosis, cost allocation, elephant‑flow management, and security inspection across ultra‑large scale cloud environments.

Big DataCloud Computingcost management
0 likes · 10 min read
How Baidu Cloud Flow Log Boosts Network Visibility and Cuts Costs
Top Architect
Top Architect
Aug 26, 2022 · Information Security

Understanding Session Management, SSO, and CAS Implementation in Java

This article explains the challenges of traditional session mechanisms in distributed systems, explores session sharing solutions such as replication and centralized storage, details the design and flow of Single Sign‑On (SSO) using CAS, compares CAS with OAuth2, and provides complete Java code examples for a demo implementation.

CASJavaSSO
0 likes · 14 min read
Understanding Session Management, SSO, and CAS Implementation in Java
Java Backend Technology
Java Backend Technology
Aug 25, 2022 · Information Security

How to Perform Fuzzy Searches on Encrypted Data: Methods, Pros & Cons

This article examines why encrypted data hinders fuzzy queries, categorizes three implementation strategies—from naïve to conventional to advanced—explains their mechanisms, evaluates performance and security trade‑offs, and provides practical references for building searchable encrypted fields.

AlgorithmFuzzy Searchdata privacy
0 likes · 12 min read
How to Perform Fuzzy Searches on Encrypted Data: Methods, Pros & Cons
OPPO Amber Lab
OPPO Amber Lab
Aug 23, 2022 · Information Security

Master CodeQL: From Setup to Advanced Vulnerability Queries

This guide introduces CodeQL, explains how to install the required tools, shows how to generate a source‑code database, and walks through basic and advanced rule syntax with practical C/C++ examples, enabling security researchers to efficiently discover vulnerabilities in large codebases.

C++CodeQLCodeQL Queries
0 likes · 13 min read
Master CodeQL: From Setup to Advanced Vulnerability Queries
Code Ape Tech Column
Code Ape Tech Column
Aug 22, 2022 · Backend Development

Comprehensive Guide to API Gateway Concepts, Design, Types, and Best Practices

This article provides an in‑depth overview of API gateways, covering basic concepts, design principles, functional requirements, traffic vs. business gateways, comparisons of popular implementations such as OpenResty, Kong, Zuul, and Spring Cloud Gateway, and practical recommendations for high performance, availability, and scalability in microservice architectures.

API-gatewayMicroservicesRouting
0 likes · 28 min read
Comprehensive Guide to API Gateway Concepts, Design, Types, and Best Practices
Liangxu Linux
Liangxu Linux
Aug 21, 2022 · Information Security

Master Linux Incident Response: Detect, Remove, and Harden Malware Infections

This guide walks you through a complete Linux incident‑response workflow—identifying suspicious behavior, locating and terminating malicious processes, eliminating virus files, closing persistence mechanisms, and hardening the system to prevent future compromises—using practical shell commands and real‑world examples.

LinuxMalware RemovalSystem Hardening
0 likes · 9 min read
Master Linux Incident Response: Detect, Remove, and Harden Malware Infections
Architecture Digest
Architecture Digest
Aug 21, 2022 · Information Security

Implementing Database Field Encryption and Decryption with MyBatis Plugins

This article explains how to use MyBatis plugins to transparently encrypt specified database fields on write and decrypt them on read, covering the requirement background, system architecture, interceptor design, annotation usage, mapper adjustments, handling of pagination count queries, and practical implementation details.

JavaMyBatisdatabase encryption
0 likes · 17 min read
Implementing Database Field Encryption and Decryption with MyBatis Plugins
21CTO
21CTO
Aug 20, 2022 · Information Security

Mastering Permission Management: From Basic RBAC to Advanced Role Inheritance

This article explains why permission management is essential, outlines common permission models such as RBAC and its extensions, discusses role inheritance, constraints, user groups, organizations and positions, and presents practical database schema designs for both standard and ideal RBAC systems.

Access ControlPermission DesignRBAC
0 likes · 16 min read
Mastering Permission Management: From Basic RBAC to Advanced Role Inheritance
Architects' Tech Alliance
Architects' Tech Alliance
Aug 18, 2022 · Cloud Computing

NVIDIA BlueField DPU Series: Architecture, Features, and Ecosystem Overview

The article provides a comprehensive overview of NVIDIA's BlueField DPU series—including BlueField‑2,‑3, and‑4—detailing their high‑performance architecture, network, security, and storage capabilities, as well as the DOCA development ecosystem that enables programmable acceleration for modern cloud data‑center workloads.

BlueFieldCloud ComputingDPU
0 likes · 12 min read
NVIDIA BlueField DPU Series: Architecture, Features, and Ecosystem Overview
Top Architect
Top Architect
Aug 16, 2022 · Databases

How to Perform Fuzzy Queries on Encrypted Data: Methods, Trade‑offs, and Recommendations

This article examines the difficulty of fuzzy searching encrypted fields and compares three solution families—naïve memory‑loading or tag‑table tricks, conventional token‑based encryption with indexable columns, and advanced algorithmic designs—highlighting their security, performance, and storage implications while recommending the most practical approach.

AlgorithmDatabaseEncryption
0 likes · 10 min read
How to Perform Fuzzy Queries on Encrypted Data: Methods, Trade‑offs, and Recommendations
Ops Development Stories
Ops Development Stories
Aug 16, 2022 · Cloud Native

Master Kubernetes Authentication & Authorization: From Users to RBAC

This article explains how Kubernetes secures its API Server through authentication and authorization, covering user types, authentication methods such as client certificates, bearer tokens, OIDC, and static token files, and then details the RBAC model, role bindings, and service account usage for fine‑grained access control.

CloudNativeKubernetesRBAC
0 likes · 18 min read
Master Kubernetes Authentication & Authorization: From Users to RBAC
MaGe Linux Operations
MaGe Linux Operations
Aug 12, 2022 · Information Security

Master Linux Incident Response: Detect, Remove, and Harden Malware Step‑by‑Step

This guide presents a practical four‑stage Linux incident‑response workflow—identifying suspicious behavior, terminating and deleting malicious processes, sealing persistence mechanisms, and hardening the system—complete with essential shell commands and verification steps to efficiently neutralize Linux‑based malware.

LinuxMalware RemovalShell Commands
0 likes · 10 min read
Master Linux Incident Response: Detect, Remove, and Harden Malware Step‑by‑Step
Sohu Tech Products
Sohu Tech Products
Aug 10, 2022 · Frontend Development

React Security Best Practices: Preventing XSS and Safe Rendering

This article explains how to secure React applications by avoiding dangerous HTML injection methods, using proper sanitization, handling server‑side rendering safely, preventing JSON and URL injection, keeping dependencies up‑to‑date, and applying ESLint security rules.

ReActWeb DevelopmentXSS
0 likes · 6 min read
React Security Best Practices: Preventing XSS and Safe Rendering
IT Architects Alliance
IT Architects Alliance
Aug 9, 2022 · Backend Development

Mastering Consistent API Design: 22 Essential Best Practices

This guide presents 22 practical rules for designing clean, consistent RESTful APIs—including resource-oriented URLs, kebab‑case paths, camelCase parameters, proper use of HTTP verbs, versioning, pagination, field selection, CORS, security, and monitoring—to help developers avoid common pitfalls and improve API usability.

API designHTTP methodsPagination
0 likes · 9 min read
Mastering Consistent API Design: 22 Essential Best Practices
Selected Java Interview Questions
Selected Java Interview Questions
Aug 8, 2022 · Backend Development

Implementing Unified Authorization in Spring Cloud Gateway with OAuth2 Resource Server

This tutorial explains how to centralize URL‑level authentication in a Spring Cloud Gateway by integrating Spring Security OAuth2 Resource Server, defining custom authorization managers, handling token errors, forwarding JWT claims to downstream services, and configuring the gateway with YAML and Java code examples.

GatewayMicroservicesOAuth2
0 likes · 17 min read
Implementing Unified Authorization in Spring Cloud Gateway with OAuth2 Resource Server
ByteFE
ByteFE
Aug 5, 2022 · Frontend Development

Curated Technical Reads: V8 Memory Management, Web3 DApp, Vue3 Compilation, DNS Query, JavaScript Runtime, Software Engineering, Design Patterns, Low‑Code Component Loading, TypeScript Advanced Types, React Security Practices

This collection highlights recent technical articles covering JavaScript engine memory management, building a Web3 decentralized app, Vue 3 compilation improvements, DNS query mechanisms, creating a custom JavaScript runtime, software engineering insights, singleton design pattern, low‑code remote component loading, advanced TypeScript types, and React security best practices.

JavaScriptTypeScriptWeb Development
0 likes · 5 min read
Curated Technical Reads: V8 Memory Management, Web3 DApp, Vue3 Compilation, DNS Query, JavaScript Runtime, Software Engineering, Design Patterns, Low‑Code Component Loading, TypeScript Advanced Types, React Security Practices
macrozheng
macrozheng
Aug 4, 2022 · Information Security

Mastering Access Control: 5 Core Permission Models Explained

This article introduces the design of permission systems and thoroughly explains the five mainstream access control models—ACL, DAC, MAC, ABAC, and RBAC—along with their principles, examples, drawbacks, and practical implementation details for real‑world applications.

ACLAccess ControlRBAC
0 likes · 15 min read
Mastering Access Control: 5 Core Permission Models Explained
Architects' Tech Alliance
Architects' Tech Alliance
Aug 1, 2022 · Fundamentals

Specialized Data Processor (DPU) Performance Benchmark Methodology and Implementation

The whitepaper introduces a comprehensive DPU performance benchmark methodology, detailing evaluation criteria across network, storage, compute, and security dimensions, and provides guidance on building test systems, selecting workloads, and designing metrics to enable fair, open, and objective assessment of diverse DPU products.

ComputeDPUnetwork
0 likes · 10 min read
Specialized Data Processor (DPU) Performance Benchmark Methodology and Implementation
Python Crawling & Data Mining
Python Crawling & Data Mining
Jul 31, 2022 · Information Security

10 Hidden Python Security Pitfalls Every Developer Must Avoid

This article reveals ten little‑known Python security pitfalls—from optimized‑away asserts and directory permission quirks to URL parsing quirks and Unicode normalization issues—explaining each flaw, its impact, and how to mitigate it, helping developers safeguard their code.

Vulnerabilitiesbest practicescode review
0 likes · 17 min read
10 Hidden Python Security Pitfalls Every Developer Must Avoid
AntTech
AntTech
Jul 30, 2022 · Fundamentals

Open Source Core Infrastructure: Ant Group’s Strategy and Key Projects

In his keynote at the 2022 Open Atom Global Open Source Summit, He Zhengyu outlined Ant Group’s open‑source strategy, highlighting over 900 repositories and key projects such as OceanBase, SOFA Mesh, MOSN, BabaSSL, Occlum, and the upcoming TuGraph, emphasizing how open core infrastructure drives industry innovation and ecosystem growth.

Ant GroupOpen Sourcecloud-native
0 likes · 9 min read
Open Source Core Infrastructure: Ant Group’s Strategy and Key Projects
OPPO Kernel Craftsman
OPPO Kernel Craftsman
Jul 29, 2022 · Information Security

How Android’s Binder Uses SELinux to Enforce Secure IPC Permissions

This article examines Android’s Binder inter‑process communication mechanism, detailing how SELinux integrates with the /dev/binder driver, the role of ServiceManager as ContextManager, the definition of binder‑related permissions, and the kernel‑level security hooks that enforce SEAndroid checks during binder transactions.

AndroidIPCSEAndroid
0 likes · 20 min read
How Android’s Binder Uses SELinux to Enforce Secure IPC Permissions
Architect
Architect
Jul 28, 2022 · Information Security

Implementing Data Masking in MySQL and Java Using MyBatis‑Mate Sensitive Jackson

This article demonstrates how to mask sensitive data such as phone numbers, ID cards, and emails in MySQL and Java applications by combining SQL string functions with the MyBatis‑Mate Sensitive Jackson plugin, providing complete configuration, custom strategies, and runnable Spring Boot examples.

JavaMyBatisSQL
0 likes · 9 min read
Implementing Data Masking in MySQL and Java Using MyBatis‑Mate Sensitive Jackson
Programmer DD
Programmer DD
Jul 27, 2022 · Information Security

Secure Your Linux SSH: 8 Essential Hardening Steps

This guide walks through eight essential steps to harden SSH on Linux servers, including disabling root login, changing the default port, restricting password usage, limiting authentication attempts, enforcing protocol 2, disabling forwarding, using key-based authentication, and applying IP-based access controls.

ConfigurationLinuxServer
0 likes · 8 min read
Secure Your Linux SSH: 8 Essential Hardening Steps
DaTaobao Tech
DaTaobao Tech
Jul 26, 2022 · Frontend Development

Evolution of Web Container Architecture: From AEF to CEF and Future Enhancements

The QianNiu client migrated its custom Application Embedded Framework to Chromium Embedded Framework, introducing a multi‑process architecture with isolated browser and render processes, remote RPC components, unified JS injection, render‑group optimization, comprehensive network interception, white‑screen detection, and plans for memory reclamation and further security hardening.

AEFBrowser architectureCEF
0 likes · 12 min read
Evolution of Web Container Architecture: From AEF to CEF and Future Enhancements
DevOps Cloud Academy
DevOps Cloud Academy
Jul 26, 2022 · Operations

9 DevOps Best Practices: What You Should Do and Not Do

This article outlines nine essential DevOps best practices—from fostering a collaborative, blameless culture and adopting CI/CD, automated testing, observability, and IaC, while also highlighting common anti‑patterns such as isolated DevOps teams, hero reliance, and unchecked tool sprawl.

CI/CDDevOpsIaC
0 likes · 13 min read
9 DevOps Best Practices: What You Should Do and Not Do
21CTO
21CTO
Jul 25, 2022 · Fundamentals

Why HTTP/3 and QUIC Are Revolutionizing Web Performance

This article explains how HTTP/3, built on the QUIC transport, improves latency, reliability, and security compared to earlier HTTP versions, outlines its adoption across browsers and CDNs, and lists language libraries for developers to start implementing the new protocol.

HTTP/3QUICnetwork protocols
0 likes · 7 min read
Why HTTP/3 and QUIC Are Revolutionizing Web Performance
ITPUB
ITPUB
Jul 25, 2022 · Information Security

How 58.com Secured Its Business Data with the 金盾 SDK: A Full‑Cycle Testing Blueprint

This article details 58.com’s end‑to‑end approach to securing mobile, H5, and server SDKs—covering security fundamentals, the 5A methodology, the 金盾 architecture, integration steps, data‑flow encryption, comprehensive risk‑based testing, performance evaluation, and release decision making.

EncryptionInformation SecuritySDK
0 likes · 18 min read
How 58.com Secured Its Business Data with the 金盾 SDK: A Full‑Cycle Testing Blueprint
Selected Java Interview Questions
Selected Java Interview Questions
Jul 22, 2022 · Backend Development

WeChat Open Platform QR Code Login Integration with Spring Boot

This article explains how to implement WeChat QR code login using OAuth2.0 in a Spring Boot backend, detailing the authorization flow, required configuration, code examples for obtaining access tokens, user authentication, Spring AOP login verification, and exception handling to securely integrate WeChat login into a Java application.

OAuth2QR LoginSpring Boot
0 likes · 11 min read
WeChat Open Platform QR Code Login Integration with Spring Boot
Alibaba Cloud Native
Alibaba Cloud Native
Jul 21, 2022 · Information Security

Why Ingress Nginx’s Architecture Exposes Critical Vulnerabilities and How MSE Cloud‑Native Gateway Secures Them

The article analyzes three recent high‑severity CVEs in the Kubernetes Ingress Nginx project, explains how its combined control‑plane and data‑plane design creates serious security and stability risks, and demonstrates how the MSE cloud‑native gateway’s separated architecture and xDS‑based configuration provide a safer, more reliable alternative.

CVEKubernetesMSE Gateway
0 likes · 10 min read
Why Ingress Nginx’s Architecture Exposes Critical Vulnerabilities and How MSE Cloud‑Native Gateway Secures Them
Liangxu Linux
Liangxu Linux
Jul 20, 2022 · Information Security

How to Harden SSH on Linux: 8 Essential Security Steps

This guide explains why the default SSH configuration is risky and provides eight concrete actions—including disabling root login, changing the default port, limiting authentication attempts, and using key‑based authentication—to secure Linux servers against common attacks.

ConfigurationLinuxSSH
0 likes · 8 min read
How to Harden SSH on Linux: 8 Essential Security Steps
Liangxu Linux
Liangxu Linux
Jul 19, 2022 · Information Security

Why Linux Often Skips Antivirus and Firewall – Understanding Its Security Model

Linux is generally more secure than other desktop operating systems, so many users wonder whether antivirus software or a firewall is necessary; this article explains the technical reasons why Linux typically does not need them, outlines the limits of protection, and offers practical security tips.

AntivirusLinuxpermissions
0 likes · 8 min read
Why Linux Often Skips Antivirus and Firewall – Understanding Its Security Model
Architect
Architect
Jul 19, 2022 · Information Security

Custom Logback Desensitization Component: Configuration and Usage Guide

This article introduces a Logback desensitization component for Java applications, explains two common masking approaches, compares their pros and cons, and provides step‑by‑step instructions—including Maven dependency, appender replacement, YAML configuration, supported data types, matching rules, custom regex, and jar installation—to securely mask sensitive information in logs.

Loggingdata maskingdesensitization
0 likes · 12 min read
Custom Logback Desensitization Component: Configuration and Usage Guide
ITPUB
ITPUB
Jul 17, 2022 · Backend Development

36 Essential Tips for Designing Robust Backend APIs

This comprehensive guide presents 36 practical recommendations for backend engineers, covering parameter validation, compatibility, extensibility, idempotency, error handling, logging, performance optimization, caching, rate limiting, security, transaction management, and clear communication to help design reliable, maintainable, and scalable service interfaces.

API designValidationbackend
0 likes · 27 min read
36 Essential Tips for Designing Robust Backend APIs
IT Services Circle
IT Services Circle
Jul 17, 2022 · Frontend Development

Bypassing WeChat Mini‑Program JavaScript Interpreter Restrictions with a Bytecode VM Hidden in Images

This article explains how to circumvent WeChat's ban on JavaScript interpreters in mini‑programs by compiling JavaScript to a compact bytecode, embedding the bytecode in an image's alpha channel, and executing it with a lightweight custom virtual machine, while also discussing why such hot‑updates cannot be fundamentally blocked.

Bytecode VMCode Hot UpdateJavaScript
0 likes · 12 min read
Bypassing WeChat Mini‑Program JavaScript Interpreter Restrictions with a Bytecode VM Hidden in Images
AntTech
AntTech
Jul 14, 2022 · Information Security

HyperEnclave: An Open and Cross‑Platform Trusted Execution Environment

The article introduces HyperEnclave, an open and cross‑platform Trusted Execution Environment that overcomes hardware‑binding limitations of traditional TEEs, supports multiple CPU architectures, offers three flexible enclave modes, and demonstrates superior performance across diverse workloads while maintaining strong security guarantees.

HyperEnclavecross-platformsecurity
0 likes · 4 min read
HyperEnclave: An Open and Cross‑Platform Trusted Execution Environment
Open Source Linux
Open Source Linux
Jul 14, 2022 · Information Security

Why Mapping Docker Ports to 127.0.0.1 Isn’t Safe – Exploit and Fix

A recent Docker security issue shows that publishing container ports to 127.0.0.1 does not prevent external access, because Docker adds an iptables rule that forwards traffic to the container’s internal IP, allowing attackers on the same network to reach the service.

Port MappingVulnerabilityiptables
0 likes · 7 min read
Why Mapping Docker Ports to 127.0.0.1 Isn’t Safe – Exploit and Fix
WeDoctor Frontend Technology
WeDoctor Frontend Technology
Jul 14, 2022 · Backend Development

How to Safely Upgrade npm Dependencies and Keep Your Project Healthy

This guide explains why and how to assess the health of npm dependencies, outlines a step‑by‑step upgrade process, highlights tools like npm outdated, npm audit, depcheck, and offers practical advice on changelog review, lock‑file management, and distinguishing dependencies from devDependencies.

Dependency ManagementDevOpsNode.js
0 likes · 13 min read
How to Safely Upgrade npm Dependencies and Keep Your Project Healthy
DevOps Cloud Academy
DevOps Cloud Academy
Jul 11, 2022 · Information Security

Understanding DevOps, SecOps, and DevSecOps: Definitions, Benefits, and Choosing the Right Approach

This article explains the concepts of DevOps, SecOps, and DevSecOps, outlines their core principles and benefits, compares their focus on collaboration, automation, and security, and provides guidance on selecting the most suitable approach for organizations seeking integrated development, operations, and security practices.

DevOpsDevSecOpsSecOps
0 likes · 7 min read
Understanding DevOps, SecOps, and DevSecOps: Definitions, Benefits, and Choosing the Right Approach
Top Architect
Top Architect
Jul 11, 2022 · Information Security

Implementing CAS Single Sign‑On with a Custom Authentication Filter in Spring Boot

This article explains how to integrate the CAS (Central Authentication Service) single sign‑on solution into a Spring Boot backend by adding necessary dependencies, configuring a series of CAS filters, creating a custom MyAuthenticationFilter to handle AJAX requests, and demonstrating a Vue.js frontend that interacts with the authentication flow, complete with screenshots of the login, ticket validation, and logout processes.

AuthenticationCASSingle Sign-On
0 likes · 14 min read
Implementing CAS Single Sign‑On with a Custom Authentication Filter in Spring Boot