This article explains what HTTP cookies are, their basic operation via Set‑Cookie and Cookie headers, the standard cookie format and attributes, how to view them in browsers, and how cookies enable seamless cross‑domain redirects, illustrated with PHP code examples.
The 58 Group Technical Salon on April 23, 2019 presented a comprehensive overview of account system design, risk control, gateway authentication, multi‑active data synchronization, overseas account handling, cloud account platform capabilities, and security strategies, offering practical insights for building robust and secure user authentication infrastructures.
This article explains token authentication, the structure and claims of JSON Web Tokens (JWT), their relationship with OAuth, and demonstrates how to create, sign, and verify JWTs in Java using the JJWT library, while also covering security best practices and useful tooling.
This article explains how to build high‑performance, highly‑available, scalable, extensible, and secure recommendation services by outlining background concepts, defining quality criteria, discussing design challenges, and presenting concrete architectural principles and practical strategies.
This article presents Meituan's real‑world experience with Apache Druid, detailing the platform’s current usage, the usability, security and stability challenges faced, the principles and architecture of Druid SQL, the enhancements made to schema inference, logging, query safety, and the custom security extensions implemented to achieve fine‑grained access control and SSO integration.
This roundup covers GoDaddy's open‑source Kubernetes External Secrets project, free CNCF cloud‑native courses for Chinese developers, major Kubernetes performance and security enhancements, Knative and Istio updates, containerd improvements, a shift from rich‑container ops to cloud‑native practices, and recommended open‑source and reading resources.
This article analyses various client‑side authentication scenarios, classifies tokens into password, session, and API categories, compares their natural and controllable attributes, and proposes a four‑layer hierarchical token architecture to improve security, usability, and decoupling across multiple platforms.
An in‑depth guide walks through the essential layers of modern website architecture—including front‑end optimization, application frameworks, service distribution, storage solutions, backend processing, monitoring, security, and data‑center design—offering practical strategies for building high‑performance, scalable web systems.
The article surveys authentication from ancient token methods to modern password and session techniques, explains OAuth 2.0 flows and their adaptation for WeChat Mini‑Programs—including access‑token retrieval, simplified client‑credentials grants, and cloud‑call automation—while also previewing future trends such as biometrics, blockchain‑based decentralization, and AI‑driven trust models.
This guide outlines practical Linux operations standards, covering safe testing, backup habits, multi‑user coordination, security hardening, continuous monitoring, performance tuning methods, and the right mindset to avoid costly mistakes in production environments.
This article examines how small configuration errors in Docker‑based CI pipelines, especially when using services like AWS CodeBuild and Docker‑in‑Docker, can expose severe security risks, demonstrates real‑world attack steps, and provides practical mitigation strategies to harden the build process.
This article explores the full spectrum of modern operations, covering environment deployment, troubleshooting, backup, high availability, monitoring, security, automation, virtualization, and cloud services, while highlighting essential tools and best practices for both Linux and Windows environments.
This article explains how to extend the default OAuth2 token response by adding business-related fields such as tenant, user, and department IDs, and walks through the relevant Spring Cloud source code that generates and enhances tokens for improved performance and security.
This article provides an in‑depth overview of Android permission architecture, covering permission categories, permission groups, the evolution of permission handling across API levels, special system permissions, custom permissions, common compatibility pitfalls on various OEM ROMs, and a unified design for dynamic permission requests.
This article explains how the default OAuth2 check‑token flow creates a performance bottleneck, then shows how to extend JWT tokens with user details via a custom TokenEnhancer and replace RemoteTokenServices with a custom ResourceServerTokenServices, including configuration, code examples, and the security trade‑offs of using JWT.
This article explains how software teams can select, combine, and interpret nine essential metrics—including lead time, cycle time, team velocity, defect rates, MTBF, MTTR, and security incident counts—to drive continuous improvement, align with business goals, and ultimately achieve successful outcomes.
The article analyzes an arbitrary URL redirect flaw caused by unchecked returnUrl parameters, demonstrates how Java's URL.getHost() can be misused through backslash and hash bypasses, and provides a robust validation code snippet that works across JDK versions.
This guide explains the end‑to‑end home network architecture, common Wi‑Fi problems, and practical optimization, security, and testing methods so you can achieve smooth, high‑speed wireless performance across any household layout.
This article explains the principles of forward and reverse proxy servers, illustrates their roles with everyday analogies, outlines their typical use cases such as bypassing access restrictions, improving speed, hiding IP addresses, load balancing, and enhancing security, and compares the two approaches.
This article outlines ten critical npm security best practices—from avoiding secret leaks and using lockfiles to enabling two‑factor authentication and understanding typosquatting—helping front‑end and back‑end developers safeguard their projects against common package‑related vulnerabilities.
This article explains how to protect Spring Cloud microservices using OAuth2 by configuring an API gateway, an authorization server, and a simple account service, providing a complete token‑based security solution with code examples and testing instructions.
This article analyzes the evolving demands of modern databases, outlines essential features for remote management tools, compares open‑source and cloud‑based solutions, and evaluates Tencent Cloud’s console, DMC, and integrated phpMyAdmin, highlighting strengths, shortcomings, and future development directions.
This article reviews recent Elasticsearch data breaches and presents practical security strategies—including network isolation, non‑root operation, custom ports, and free Search Guard authentication—to help engineers safeguard their search clusters against common attacks.
This guide outlines practical steps and command examples for Linux administrators to identify compromised machines, examine logs, verify user files, monitor login activity, capture abnormal traffic, and recover deleted logs using lsof and /proc information.
During the 2019 Chinese New Year Gala, Baidu mobilized a massive technical operation—scaling cloud resources, isolating traffic, and deploying AI‑driven security—to flawlessly process over 9 billion red‑packet interactions despite unprecedented traffic spikes and login surges.
The paper presents a highly scalable, low‑overhead Host‑based Intrusion Detection System architecture designed for hundreds of thousands of servers, emphasizing cluster high‑availability, strong consistency via a CP‑oriented etcd backend, Go‑based agents with efficient resource management, modular sandboxing, and robust process monitoring to ensure reliable, secure operation at massive scale.
This guide explains how to use Linux shell commands and a custom Bash script to view, modify, save, and restore file timestamps, enabling attackers to hide forensic evidence while also showing administrators how timestamps can be forged and why they must remain vigilant.
This guide explains how enterprises can build a comprehensive Azure governance scaffold—covering hierarchy, naming standards, policies, initiatives, identity and access management, security, monitoring, cost control, automation, and DevOps—to balance agility with control and risk mitigation across cloud workloads.
The article reflects on Huawei’s public letter urging a comprehensive upgrade of software‑engineering practices, explaining concepts such as IPD, the project‑management triple constraint, architecture, technical debt, security, and cultural change, while emphasizing the need for trustworthy, high‑quality software development.
This guide outlines critical operational practices for Linux server management, emphasizing thorough testing, cautious command execution, regular backups, strict access controls, comprehensive monitoring, performance tuning, and a disciplined mindset to avoid costly incidents and ensure system stability.
This guide walks you through installing JumpServer 3.0 on CentOS, configuring its dependencies, setting up users, assets, and permissions, and accessing the bastion host via web and SSH, providing a complete, step‑by‑step tutorial for a secure jump‑server deployment.
This article warns about ten extremely dangerous Linux commands—such as rm -rf, fork bombs, and direct writes to /dev/sda—explaining how they work, the potential damage they can cause, and safety measures to avoid catastrophic system failures.
This cheat sheet compiles essential Linux commands for penetration testing, covering system enumeration, package management, user handling, compression, file operations, Samba access, shell tricks, Python tips, miscellaneous utilities, bash history clearing, filesystem permissions, and notable files for privilege escalation.
This article recounts several real incidents where disgruntled engineers or admins deleted critical databases as retaliation, highlighting the severe consequences and stressing that proper backups and cautious use of destructive commands are essential for any organization.
The podcast examines AI’s rapid integration into entertainment, security and personalization, highlighting its use in automated video editing, facial-recognition tagging of celebrities and non-celebrities, while debating ethical concerns such as echo-chambers, emotional nuance, and the technology’s transformative yet limited role across industries.
The article revisits the early days of physical server deployments and virtualization, explains how containers emerged as a lightweight alternative to VMs, discusses their security trade‑offs, and promotes a DevOpsLIVE event on Windows‑Linux containers and Azure Kubernetes.
The draft "Internet Personal Information Security Protection Guideline" issued by China's Ministry of Public Security outlines comprehensive management mechanisms, technical safeguards, and business processes to help internet enterprises protect personal data throughout its lifecycle, and invites public feedback via the national security platform.
This comprehensive guide presents 25 practical Linux hardening techniques—from BIOS protection and disk partitioning to SELinux configuration, firewall rules, and user account management—helping system administrators strengthen server security and defend against potential attacks.
This guide presents practical Dockerizing techniques—including choosing lightweight base images, installing only necessary packages, handling file permissions, defining user privileges, exposing ports, configuring entrypoints, externalizing data, and managing logs—to help developers build secure, efficient container images.
This article explores the evolution of authentication and authorization from monolithic to microservice architectures, comparing traditional session-based methods with modern token solutions like JWT and OAuth2, and provides practical guidance on implementing secure, scalable access control across dozens of services.
This article walks through twelve essential Linux security techniques—including console access restrictions, password aging, sudo notifications, SSH hardening, Tripwire intrusion detection, firewalld and iptables firewall management, compiler restrictions, immutable files, SELinux reporting, and sealert usage—providing commands and configuration tips to fortify a system.
This guide walks you through configuring a Python environment, installing essential packages such as virtualenv, IPython, requests, BeautifulSoup, and pwntools, and demonstrates how to perform network communication, binary manipulation, encoding, and C library integration, empowering you to develop security exploits efficiently.
The article explains how the popular Node.js package event-stream was transferred to a new maintainer who injected a malicious flatmap-stream module that steals Bitcoin, outlines the timeline of the supply‑chain attack, and provides steps for developers to detect and remediate the infection.
The article explains how Alibaba leveraged large‑scale IPv6 deployment during the 2018 Double 11 shopping festival, detailing the end‑to‑end network architecture, big‑data‑driven optimization, security measures, and the strategic reasons behind moving from IPv4 to IPv6 across cloud, mobile, and IoT ecosystems.
Alibaba’s campus face‑recognition system, handling over 200,000 daily scans, combines hardware upgrades, software image‑quality management, algorithmic grouping, and database‑photo enhancements to cut mis‑recognition to 0.1%, illustrating large‑scale AI deployment in security and payment scenarios.
This article introduces thirteen practical Linux operation tools—including Nethogs, IOZone, IOTop, IPtraf, IFTop, Fail2ban, and more—providing concise descriptions, download links, and step‑by‑step installation commands to help system administrators monitor performance, network traffic, and protect against attacks.
This article surveys multiple double‑spend attack vectors discovered on major public blockchains such as Bitcoin, EOS, and NEO, classifies them into verification flaws, VM execution inconsistencies, and consensus weaknesses, and proposes an efficient mitigation method based on write‑operation hashing.
This article recounts a Redis server hijack incident, detailing the detection, forensic investigation, removal of malicious files and cron jobs, and provides practical hardening recommendations to prevent similar attacks on Linux environments.
This article presents a comprehensive guide on strengthening Linux systems by applying console restrictions, password policies, sudo notifications, SSH hardening, Tripwire intrusion detection, firewalld and iptables firewall management, compiler restrictions, immutable files, and SELinux tools such as aureport and sealert.
This article explains the OAuth protocol, its role in providing secure third‑party access to user resources, describes the overall authorization architecture, outlines the involved parties and step‑by‑step flow, and details the four main grant types along with token refresh mechanisms.
This article explores Deno—a runtime created by Node.js co‑founder Ryan Dahl—covering its recent releases, TypeScript support, security roadmap, and how it aims to replace Node.js as a modern, secure backend platform.
This article outlines comprehensive Linux security measures—including account hardening, remote access protection, file system safeguards, rootkit detection tools, and step‑by‑step post‑attack response—to help system administrators strengthen server defenses and quickly recover from compromises.
This guide walks Linux administrators through common signs of server compromise, shows how to examine logs, user files, active processes, network traffic, and demonstrates using lsof and /proc to recover deleted log files, all with concrete command examples.
This article outlines the overall architecture of a generic open platform, detailing its web server, API gateway, portal, management services, service registry, security components, OAuth, service composition, and best‑practice security measures for building a robust backend system.
This article explains why open platforms emerged, outlines their essential functional modules such as service gateways, management, proxy, security, OAuth, registration, sandbox, and developer portals, and discusses future trends and technology evolution for open API platforms.
This guide outlines key PHP backend practices—including abandoning deprecated mysql_ functions, avoiding unnecessary reference passing, writing efficient queries, validating user input, and embracing modern tools and languages—to help developers produce clean, secure, and high‑performance applications.
This article outlines a comprehensive, multi‑layer web architecture covering front‑end optimization, application‑level frameworks, service‑oriented components, storage solutions, backend analytics, monitoring, security measures, and data‑center design for building highly scalable and reliable websites.
JD Security researchers attended the BRUCON conference to unveil a new fuzz‑testing operation that extends AFL with custom instrumentation, enabling faster testing across multiple CPU architectures and overcoming the limitations of existing fuzzers for closed‑source and non‑x86 systems.
This article examines the challenges of unifying multiple independent account systems within 58 Group and presents three technical approaches—full account merging, account linking with single sign‑on, and a unified cloud account platform—detailing their benefits, difficulties, and implementation considerations.
Tencent’s architecture platform team explains how they monitor, automate, and secure billions of daily operations across storage, CDN, and live services, using multi‑dimensional metrics, real‑time and instant computation, AI‑driven anomaly detection, and a custom control platform for safe changes.
This guide catalogs over fifty essential Docker‑related tools—including orchestration platforms like Kubernetes and Swarm, CI/CD services such as Jenkins and GitLab, monitoring solutions like Prometheus, logging utilities, security scanners, storage plugins, and networking options—helping developers, DevOps, SREs, and architects select the right solution for each stage of container development.
Blockchain’s decentralized, secure ledger can empower AI by enabling open data sharing, trustworthy model licensing, and auditable provenance, while AI contributes decision‑making and pattern recognition, together creating a decentralized operating system that enhances security, transparency, and scalability across sectors such as healthcare, finance, and beyond.
This article provides a comprehensive technical guide on using Kubernetes and OpenShift for container‑cloud deployment, covering architecture, multi‑tenant isolation, security, load balancing, logging, monitoring, CI/CD, storage options, and best practices especially for financial‑industry microservice workloads.
The article examines the advantages and disadvantages of microservice architectures, discussing flexibility, scalability, autonomy, monitoring, build and release complexity, security, and data replication, while highlighting practical trade‑offs and lessons learned from real‑world implementations.
This article provides a comprehensive overview of internet operations, detailing how service‑centric stability, security, and efficiency are achieved through infrastructure management, monitoring, risk mitigation, and continuous optimization, while outlining the various operational roles, their duties, and the evolution of ops practices.
MQTT is a lightweight, open‑source publish/subscribe protocol that powers the IoT’s global nervous system by delivering small‑header messages over TCP/IP with configurable QoS, low bandwidth, and optional TLS security, making it ideal for battery‑constrained devices, scalable deployments, and real‑time applications such as home monitoring.
This guide walks you through creating a Raspberry Pi‑based Python tool that automatically detects inserted USB drives, logs their file names and paths to a text file, and sends the information to a designated WeChat account, while explaining the required hardware, Linux setup, and code details.
This article explains why Jenkins' HTML Publisher Plugin often fails to load custom CSS and JavaScript due to its default Content Security Policy, and provides two solutions: temporarily disabling CSP via a Groovy command and permanently applying the change using a startup-triggered job.
This article presents a comprehensive set of Linux interview questions covering basic file handling, process management, networking, security concepts, HTTP protocols, load balancing, and Python scripting, providing clear tasks and explanations for each topic.
The article translates and explains a typical IoT platform architecture, outlining its core Gather‑Analyze‑Act functions, common building blocks such as device interfaces, messaging brokers, storage and analytics layers, and highlights key differentiators like multi‑tenancy, protocol support, security, and extensible rule engines.
This article warns about ten powerful Linux commands—such as rm -rf, fork bombs, and direct disk writes—that can cause irreversible damage if misused, especially with root privileges, and offers safety tips for each.
This article explains the concept of FUZZ testing, describes its two main techniques, presents the design and core functions of a self‑developed FUZZ testing tool, showcases real‑world test results on SQL and HTTP interfaces, and outlines future enhancements for broader applicability.
This article explains the fundamentals of HTTP's stateless nature, session handling, and login state, then introduces the challenges of multi‑system environments and presents a detailed overview of Single Sign‑On (SSO) concepts, flow, deployment, and step‑by‑step Java code examples for both client and server sides.
This article walks through twelve essential Linux security techniques—from console access restrictions and password aging to SSH hardening, Tripwire intrusion detection, firewalld and iptables configuration, compiler restrictions, immutable files, SELinux auditing, and more—providing concrete commands to fortify a system against evolving threats.
This article outlines the key characteristics of large‑scale websites and presents a comprehensive set of architectural goals, patterns, and techniques—including performance tuning, high availability, scalability, extensibility, security, and agile operations—to guide the design of robust, user‑centric online platforms.
This article examines the shortcomings of macOS's native kernel monitoring subsystems, details the design and implementation of the open‑source Kemon framework with inline hooks and pre/post callbacks, and showcases its practical applications and vulnerability discoveries presented at major security conferences.
The explosive growth of big‑data applications is forcing storage vendors to redesign architectures for petabyte‑scale capacity, real‑time latency, high IOPS, security compliance, and cost efficiency, while also addressing flexibility, data longevity, and the needs of both large and small users.
The article explains the so‑called “jaeden” flaw in the ERC‑20 approve function, illustrates how transaction ordering can lead to double‑spending attacks, and offers two practical mitigation strategies for developers to write safer token contracts.
China’s 2018 Cloud Computing Development White Paper reveals that the public cloud market grew over 50% in 2017, predicts continued rapid expansion, highlights fierce competition among industry clouds, the rise of hybrid and multi‑cloud strategies, growing security concerns, open‑source adoption, and evolving policy and technology trends.
CAS (Central Authentication Service) is an open‑source, enterprise‑grade single sign‑on solution that centralizes user authentication across trusted systems, offering reduced login time, improved security, and streamlined user management, with a clear protocol flow involving service tickets, redirects, and encrypted cookies.
Istio 1.0, released on August 1, brings the first production‑ready service‑mesh platform with major enhancements in networking, policy & telemetry, out‑of‑process adapters, and security features such as mTLS and JWT, while introducing the IstioGateway to replace the legacy Ingress model.
This article outlines essential container operation best practices—including native logging, JSON log formatting, sidecar aggregators, stateless and immutable design, avoiding privileged containers, effective monitoring, health checks, non‑root execution, and careful image tagging—to help developers build secure, maintainable, and observable workloads on Kubernetes.
This article explains the OAuth2.0 authorization code grant flow, using a Douban‑QQ login example to illustrate the three-step process from client request to token exchange and user information retrieval, and provides a simple reference implementation on GitHub.
This article examines how seemingly minor Docker configuration errors in CI/CD pipelines—especially within AWS CodeBuild and Docker‑in‑Docker setups—can expose severe security risks, demonstrates practical attack techniques, and offers concrete mitigation steps to harden the build environment.
This article demystifies the OAuth2.0 Authorization Code Grant by explaining its core concepts, illustrating the login flow with real‑world examples like Douban and QQ, and providing a simple GitHub demo project to help developers implement the protocol correctly.
The article describes the goals, architecture, core functions, and key characteristics of a comprehensive anti‑crawling platform that systematizes strategy management, data cleaning, monitoring, and rapid response to protect APIs and improve data reliability for large‑scale online services.
This article examines the evolution of a data‑sharing exchange platform—moving from slow JDBC‑based transfers to storage‑level copying, introducing a two‑stage DistCp workflow, and securing cross‑cluster access with Kerberos‑based trust managed by the Guardian component.
This article explains the fundamental differences between GET and POST requests, the dual TCP/UDP usage of DNS, the meaning of idempotence, the contrast between cookies and sessions, causes and solutions for TCP packet fragmentation, the three‑way handshake and four‑way termination, the complete HTTP request flow, long‑connection handling, TCP reliability mechanisms, detailed HTTP structure, the distinction between URI and URL, and how HTTPS secures data transmission.
The article outlines ten major challenges faced when adopting microservice architecture—such as data synchronization, security, version control, discovery, data expiration, debugging, testing, monitoring, DevOps support, and fault tolerance—and presents practical solutions using cloud‑native tools and patterns.
This article explains Python's hashlib module, demonstrates basic MD5 hashing, shows how to compute file checksums, and discusses secure password storage with salting techniques, providing complete code examples for each use case.
This article details YY's journey in transforming its database operations—from early quality and efficiency challenges to a multi‑stage platform that automates resource pooling, high‑availability proxy, cost control, quality monitoring, and security, outlining future intelligent extensions.
This guide reviews eight free Linux antivirus tools—ClamAV, ClamTk, ChkrootKit, Rootkit Hunter, Comodo, Sophos, BitDefender, and F‑PROT—detailing their key capabilities, platform support, and how they help protect servers and workstations from malware and rootkits.
This article recounts a step‑by‑step migration of a 2010‑era Nginx‑based multi‑site environment and two MySQL databases to a cloud server, highlighting security risks, performance bottlenecks, backup commands, failed restore attempts, and practical lessons learned.
This article walks through a DBA’s daily responsibilities, outlines a step‑by‑step MySQL performance‑tuning workflow, highlights key optimization areas such as application access, hardware selection, OS and instance settings, and shares practical automation practices for backup, monitoring, failover, security auditing, and log management.
Discover the ten most common Python security flaws—from input injection and XML parsing attacks to unsafe assert statements and vulnerable third‑party packages—and learn practical remediation techniques such as using ORM safeguards, defusedxml, safe YAML loading, secrets.compare_digest, and proper dependency management.
This article explains how Alibaba's Pandora Lab discovered a kernel space mirroring vulnerability in Android 8 that defeats PAN and KASLR defenses, allowing arbitrary kernel writes and full system compromise through precise page‑table manipulation and a single‑write primitive.
This article explains the different MySQL storage engines, describes the various lock types and their granularity, and provides a comprehensive list of practical measures to improve MySQL security and protect the database from common attacks.
An in‑depth comparison of Hadoop and Spark examines their architectures, performance, cost, security, and machine‑learning capabilities, helping readers decide which open‑source distributed processing platform best matches their batch, streaming, and analytical workloads.
This article outlines eleven common Docker anti‑patterns—ranging from storing data inside containers to using the latest tag—and provides practical guidance on building lightweight, secure, and maintainable images for production environments.
The article examines how the rapid growth of IoT devices in 2018 raises significant security concerns, predicts large‑scale attacks and data challenges, and highlights a shift toward edge computing and tighter IT‑OT collaboration to manage the expanding data and protect networks.
