BestHub
Sign in
Tagged articles

security

2473 articles · Page 23 of 25
Python Programming Learning Circle
Python Programming Learning Circle
Oct 29, 2018 · Backend Development

Essential PHP Backend Best Practices for Clean, Secure, and High‑Performance Code

This guide outlines key PHP backend practices—including abandoning deprecated mysql_ functions, avoiding unnecessary reference passing, writing efficient queries, validating user input, and embracing modern tools and languages—to help developers produce clean, secure, and high‑performance applications.

Backendbest practicescode quality
0 likes · 6 min read
Essential PHP Backend Best Practices for Clean, Secure, and High‑Performance Code
Efficient Ops
Efficient Ops
Oct 25, 2018 · Backend Development

Designing Scalable Web Architecture: From Front‑End to Data Center

This article outlines a comprehensive, multi‑layer web architecture covering front‑end optimization, application‑level frameworks, service‑oriented components, storage solutions, backend analytics, monitoring, security measures, and data‑center design for building highly scalable and reliable websites.

Scalable Designfrontendload balancing
0 likes · 12 min read
Designing Scalable Web Architecture: From Front‑End to Data Center
JD Tech
JD Tech
Oct 11, 2018 · Information Security

Multi‑Architecture Fuzzing Technique Presented by JD Security Lab at BRUCON

JD Security researchers attended the BRUCON conference to unveil a new fuzz‑testing operation that extends AFL with custom instrumentation, enabling faster testing across multiple CPU architectures and overcoming the limitations of existing fuzzers for closed‑source and non‑x86 systems.

BRUCONFuzzingJD Security
0 likes · 5 min read
Multi‑Architecture Fuzzing Technique Presented by JD Security Lab at BRUCON
58 Tech
58 Tech
Oct 10, 2018 · Information Security

Account Integration Solutions for 58 Group: Merging, Linking, and Cloud Account Platform

This article examines the challenges of unifying multiple independent account systems within 58 Group and presents three technical approaches—full account merging, account linking with single sign‑on, and a unified cloud account platform—detailing their benefits, difficulties, and implementation considerations.

Authenticationaccount-integrationcloud account platform
0 likes · 11 min read
Account Integration Solutions for 58 Group: Merging, Linking, and Cloud Account Platform
Efficient Ops
Efficient Ops
Oct 9, 2018 · Operations

How Tencent Scales Automated Operations for Massive Services

Tencent’s architecture platform team explains how they monitor, automate, and secure billions of daily operations across storage, CDN, and live services, using multi‑dimensional metrics, real‑time and instant computation, AI‑driven anomaly detection, and a custom control platform for safe changes.

AIOpsautomationcapacity planning
0 likes · 23 min read
How Tencent Scales Automated Operations for Massive Services
Tencent Cloud Developer
Tencent Cloud Developer
Oct 9, 2018 · Cloud Native

A Comprehensive List of 50+ Useful Docker Tools

This guide catalogs over fifty essential Docker‑related tools—including orchestration platforms like Kubernetes and Swarm, CI/CD services such as Jenkins and GitLab, monitoring solutions like Prometheus, logging utilities, security scanners, storage plugins, and networking options—helping developers, DevOps, SREs, and architects select the right solution for each stage of container development.

CI/CDDevOpsDocker
0 likes · 27 min read
A Comprehensive List of 50+ Useful Docker Tools
Tencent Cloud Developer
Tencent Cloud Developer
Oct 8, 2018 · Artificial Intelligence

How Blockchain Can Transform Artificial Intelligence

Blockchain’s decentralized, secure ledger can empower AI by enabling open data sharing, trustworthy model licensing, and auditable provenance, while AI contributes decision‑making and pattern recognition, together creating a decentralized operating system that enhances security, transparency, and scalability across sectors such as healthcare, finance, and beyond.

Artificial IntelligenceTrustblockchain
0 likes · 8 min read
How Blockchain Can Transform Artificial Intelligence
MaGe Linux Operations
MaGe Linux Operations
Oct 5, 2018 · Cloud Native

How Does Kubernetes Power Secure, Scalable Microservices in Financial Cloud?

This article provides a comprehensive technical guide on using Kubernetes and OpenShift for container‑cloud deployment, covering architecture, multi‑tenant isolation, security, load balancing, logging, monitoring, CI/CD, storage options, and best practices especially for financial‑industry microservice workloads.

KubernetesOpenShiftcontainer cloud
0 likes · 38 min read
How Does Kubernetes Power Secure, Scalable Microservices in Financial Cloud?
Architects Research Society
Architects Research Society
Sep 30, 2018 · Backend Development

Microservice Architecture: Benefits, Challenges, and Trade‑offs

The article examines the advantages and disadvantages of microservice architectures, discussing flexibility, scalability, autonomy, monitoring, build and release complexity, security, and data replication, while highlighting practical trade‑offs and lessons learned from real‑world implementations.

autonomydata replicationmicroservices
0 likes · 8 min read
Microservice Architecture: Benefits, Challenges, and Trade‑offs
Efficient Ops
Efficient Ops
Sep 18, 2018 · Operations

Mastering Internet Operations: Roles, Responsibilities, and Evolution

This article provides a comprehensive overview of internet operations, detailing how service‑centric stability, security, and efficiency are achieved through infrastructure management, monitoring, risk mitigation, and continuous optimization, while outlining the various operational roles, their duties, and the evolution of ops practices.

DevOpsInfrastructureoperations
0 likes · 21 min read
Mastering Internet Operations: Roles, Responsibilities, and Evolution
Tencent Cloud Developer
Tencent Cloud Developer
Sep 18, 2018 · Backend Development

MQTT: The Nervous System of IoT – Overview and Key Features

MQTT is a lightweight, open‑source publish/subscribe protocol that powers the IoT’s global nervous system by delivering small‑header messages over TCP/IP with configurable QoS, low bandwidth, and optional TLS security, making it ideal for battery‑constrained devices, scalable deployments, and real‑time applications such as home monitoring.

IoTMQTTMessaging Protocol
0 likes · 10 min read
MQTT: The Nervous System of IoT – Overview and Key Features
360 Quality & Efficiency
360 Quality & Efficiency
Sep 12, 2018 · Fundamentals

Generic Architecture and Key Differentiators of IoT Platforms

The article translates and explains a typical IoT platform architecture, outlining its core Gather‑Analyze‑Act functions, common building blocks such as device interfaces, messaging brokers, storage and analytics layers, and highlights key differentiators like multi‑tenancy, protocol support, security, and extensible rule engines.

AnalyticsDevice onboardingIoT
0 likes · 7 min read
Generic Architecture and Key Differentiators of IoT Platforms
Java Captain
Java Captain
Sep 8, 2018 · Information Security

Understanding Single Sign-On (SSO) Mechanism and Its Java Implementation

This article explains the fundamentals of HTTP's stateless nature, session handling, and login state, then introduces the challenges of multi‑system environments and presents a detailed overview of Single Sign‑On (SSO) concepts, flow, deployment, and step‑by‑step Java code examples for both client and server sides.

BackendJavaSSO
0 likes · 15 min read
Understanding Single Sign-On (SSO) Mechanism and Its Java Implementation
MaGe Linux Operations
MaGe Linux Operations
Sep 5, 2018 · Information Security

Essential Linux Hardening: 12 Practical Commands to Secure Your System

This article walks through twelve essential Linux security techniques—from console access restrictions and password aging to SSH hardening, Tripwire intrusion detection, firewalld and iptables configuration, compiler restrictions, immutable files, SELinux auditing, and more—providing concrete commands to fortify a system against evolving threats.

LinuxSSHTripwire
0 likes · 16 min read
Essential Linux Hardening: 12 Practical Commands to Secure Your System
Big Data and Microservices
Big Data and Microservices
Aug 27, 2018 · Industry Insights

What Makes Large‑Scale Websites Tick? Architecture Principles and Best Practices

This article outlines the key characteristics of large‑scale websites and presents a comprehensive set of architectural goals, patterns, and techniques—including performance tuning, high availability, scalability, extensibility, security, and agile operations—to guide the design of robust, user‑centric online platforms.

Agilearchitecturehigh availability
0 likes · 10 min read
What Makes Large‑Scale Websites Tick? Architecture Principles and Best Practices
Didi Tech
Didi Tech
Aug 20, 2018 · Information Security

How Kemon Reinvents macOS Kernel Monitoring and Bypasses Built‑in Limitations

This article examines the shortcomings of macOS's native kernel monitoring subsystems, details the design and implementation of the open‑source Kemon framework with inline hooks and pre/post callbacks, and showcases its practical applications and vulnerability discoveries presented at major security conferences.

Kemoninline hookkernel monitoring
0 likes · 9 min read
How Kemon Reinvents macOS Kernel Monitoring and Bypasses Built‑in Limitations
Efficient Ops
Efficient Ops
Aug 8, 2018 · Cloud Computing

Why China's Public Cloud Market Is Growing Over 50% and What It Means for the Future

China’s 2018 Cloud Computing Development White Paper reveals that the public cloud market grew over 50% in 2017, predicts continued rapid expansion, highlights fierce competition among industry clouds, the rise of hybrid and multi‑cloud strategies, growing security concerns, open‑source adoption, and evolving policy and technology trends.

Cloud ComputingPolicyhybrid cloud
0 likes · 10 min read
Why China's Public Cloud Market Is Growing Over 50% and What It Means for the Future
Big Data and Microservices
Big Data and Microservices
Aug 4, 2018 · Information Security

How CAS Enables Secure Single Sign-On: Architecture and Workflow Explained

CAS (Central Authentication Service) is an open‑source, enterprise‑grade single sign‑on solution that centralizes user authentication across trusted systems, offering reduced login time, improved security, and streamlined user management, with a clear protocol flow involving service tickets, redirects, and encrypted cookies.

AuthenticationCASSSO
0 likes · 5 min read
How CAS Enables Secure Single Sign-On: Architecture and Workflow Explained
Programmer DD
Programmer DD
Aug 2, 2018 · Cloud Native

What’s New in Istio 1.0? A Deep Dive into Features, Gateways, and Security

Istio 1.0, released on August 1, brings the first production‑ready service‑mesh platform with major enhancements in networking, policy & telemetry, out‑of‑process adapters, and security features such as mTLS and JWT, while introducing the IstioGateway to replace the legacy Ingress model.

IstioKubernetesmicroservices
0 likes · 9 min read
What’s New in Istio 1.0? A Deep Dive into Features, Gateways, and Security
Qunar Tech Salon
Qunar Tech Salon
Jul 31, 2018 · Operations

Best Practices for Container Operations: Logging, Monitoring, Security, and Immutability

This article outlines essential container operation best practices—including native logging, JSON log formatting, sidecar aggregators, stateless and immutable design, avoiding privileged containers, effective monitoring, health checks, non‑root execution, and careful image tagging—to help developers build secure, maintainable, and observable workloads on Kubernetes.

Kubernetesbest practicescontainers
0 likes · 17 min read
Best Practices for Container Operations: Logging, Monitoring, Security, and Immutability
Full-Stack Internet Architecture
Full-Stack Internet Architecture
Jul 30, 2018 · Information Security

Understanding OAuth2.0 Authorization Code Grant Flow

This article explains the OAuth2.0 authorization code grant flow, using a Douban‑QQ login example to illustrate the three-step process from client request to token exchange and user information retrieval, and provides a simple reference implementation on GitHub.

AuthenticationAuthorization CodeOAuth Flow
0 likes · 7 min read
Understanding OAuth2.0 Authorization Code Grant Flow
MaGe Linux Operations
MaGe Linux Operations
Jul 30, 2018 · Information Security

How Tiny Docker Misconfigurations Can Cripple CI Security: A Deep Dive

This article examines how seemingly minor Docker configuration errors in CI/CD pipelines—especially within AWS CodeBuild and Docker‑in‑Docker setups—can expose severe security risks, demonstrates practical attack techniques, and offers concrete mitigation steps to harden the build environment.

AWS CodeBuildDevOpsDocker
0 likes · 12 min read
How Tiny Docker Misconfigurations Can Cripple CI Security: A Deep Dive
Qunar Tech Salon
Qunar Tech Salon
Jul 27, 2018 · Information Security

Design and Features of an Anti‑Crawling Platform for Large‑Scale Services

The article describes the goals, architecture, core functions, and key characteristics of a comprehensive anti‑crawling platform that systematizes strategy management, data cleaning, monitoring, and rapid response to protect APIs and improve data reliability for large‑scale online services.

BackendPlatformanti‑crawling
0 likes · 10 min read
Design and Features of an Anti‑Crawling Platform for Large‑Scale Services
Java Captain
Java Captain
Jul 15, 2018 · Fundamentals

Key Concepts of Web and Network Protocols: GET/POST, DNS, Idempotence, Cookies vs Session, TCP Handshake, HTTP, and HTTPS

This article explains the fundamental differences between GET and POST requests, the dual TCP/UDP usage of DNS, the meaning of idempotence, the contrast between cookies and sessions, causes and solutions for TCP packet fragmentation, the three‑way handshake and four‑way termination, the complete HTTP request flow, long‑connection handling, TCP reliability mechanisms, detailed HTTP structure, the distinction between URI and URL, and how HTTPS secures data transmission.

DNSHTTPNetworking
0 likes · 18 min read
Key Concepts of Web and Network Protocols: GET/POST, DNS, Idempotence, Cookies vs Session, TCP Handshake, HTTP, and HTTPS
Java Architect Essentials
Java Architect Essentials
Jul 15, 2018 · Cloud Native

Top 10 Challenges of Microservice Architecture and Their Solutions

The article outlines ten major challenges faced when adopting microservice architecture—such as data synchronization, security, version control, discovery, data expiration, debugging, testing, monitoring, DevOps support, and fault tolerance—and presents practical solutions using cloud‑native tools and patterns.

DevOpsKubernetescloud-native
0 likes · 5 min read
Top 10 Challenges of Microservice Architecture and Their Solutions
Efficient Ops
Efficient Ops
Jul 9, 2018 · Databases

How YY Scaled Its Database Platform: From Manual Ops to Intelligent Automation

This article details YY's journey in transforming its database operations—from early quality and efficiency challenges to a multi‑stage platform that automates resource pooling, high‑availability proxy, cost control, quality monitoring, and security, outlining future intelligent extensions.

cost optimizationdatabase operationshigh availability
0 likes · 16 min read
How YY Scaled Its Database Platform: From Manual Ops to Intelligent Automation
ITPUB
ITPUB
Jul 2, 2018 · Information Security

Top 8 Free Antivirus Solutions for Linux: Features and Comparison

This guide reviews eight free Linux antivirus tools—ClamAV, ClamTk, ChkrootKit, Rootkit Hunter, Comodo, Sophos, BitDefender, and F‑PROT—detailing their key capabilities, platform support, and how they help protect servers and workstations from malware and rootkits.

AntivirusLinuxRootkit
0 likes · 7 min read
Top 8 Free Antivirus Solutions for Linux: Features and Comparison
Efficient Ops
Efficient Ops
Jun 24, 2018 · Databases

Unlocking MySQL: DBA Daily Tasks and Proven Performance Optimization Strategies

This article walks through a DBA’s daily responsibilities, outlines a step‑by‑step MySQL performance‑tuning workflow, highlights key optimization areas such as application access, hardware selection, OS and instance settings, and shares practical automation practices for backup, monitoring, failover, security auditing, and log management.

MySQLdatabase administrationperformance tuning
0 likes · 18 min read
Unlocking MySQL: DBA Daily Tasks and Proven Performance Optimization Strategies
MaGe Linux Operations
MaGe Linux Operations
Jun 24, 2018 · Information Security

Top 10 Python Security Pitfalls and How to Fix Them

Discover the ten most common Python security flaws—from input injection and XML parsing attacks to unsafe assert statements and vulnerable third‑party packages—and learn practical remediation techniques such as using ORM safeguards, defusedxml, safe YAML loading, secrets.compare_digest, and proper dependency management.

Vulnerabilitiesbest practicessecure coding
0 likes · 10 min read
Top 10 Python Security Pitfalls and How to Fix Them
ITPUB
ITPUB
Jun 3, 2018 · Big Data

Spark vs Hadoop: Which Distributed System Fits Your Data Needs?

An in‑depth comparison of Hadoop and Spark examines their architectures, performance, cost, security, and machine‑learning capabilities, helping readers decide which open‑source distributed processing platform best matches their batch, streaming, and analytical workloads.

HadoopSparkbig data
0 likes · 13 min read
Spark vs Hadoop: Which Distributed System Fits Your Data Needs?
ITPUB
ITPUB
Jun 3, 2018 · Cloud Native

11 Docker Mistakes to Avoid for Reliable Container Deployments

This article outlines eleven common Docker anti‑patterns—ranging from storing data inside containers to using the latest tag—and provides practical guidance on building lightweight, secure, and maintainable images for production environments.

DevOpsDockerImage Optimization
0 likes · 6 min read
11 Docker Mistakes to Avoid for Reliable Container Deployments
Architects Research Society
Architects Research Society
May 11, 2018 · Information Security

IoT Security and Edge Computing Trends Forecast for 2018

The article examines how the rapid growth of IoT devices in 2018 raises significant security concerns, predicts large‑scale attacks and data challenges, and highlights a shift toward edge computing and tighter IT‑OT collaboration to manage the expanding data and protect networks.

AIData AnalyticsIoT
0 likes · 6 min read
IoT Security and Edge Computing Trends Forecast for 2018
MaGe Linux Operations
MaGe Linux Operations
May 1, 2018 · Fundamentals

Designing Clean Python Library APIs: A Practical Checklist

This article, based on a 2017 PyCon talk, presents a comprehensive checklist for building Python library APIs, covering simplicity, consistency, flexibility, and security with concrete examples and actionable guidelines to help developers create intuitive and reliable interfaces.

API DesignConsistencyLibrary
0 likes · 11 min read
Designing Clean Python Library APIs: A Practical Checklist
Architects Research Society
Architects Research Society
Apr 30, 2018 · Blockchain

Understanding the Misconceptions and Security Implications of Blockchain Smart Contracts

This article clarifies that blockchain smart contracts are neither traditional contracts nor inherently smart, explains transaction fundamentals, explores how platforms like Ethereum enable programmable conditions, and examines the security, confidentiality, integrity, and availability challenges they introduce.

cryptocurrencydecentralized ledgersecurity
0 likes · 10 min read
Understanding the Misconceptions and Security Implications of Blockchain Smart Contracts
Architecture Digest
Architecture Digest
Apr 30, 2018 · Backend Development

Modern Backend Developer Roadmap: A Step‑by‑Step Guide

This article presents a comprehensive, sequential roadmap for aspiring backend developers, covering language selection, practice projects, package managers, standards, security, testing, databases, frameworks, caching, APIs, authentication, messaging, search, Docker, web servers, WebSockets, GraphQL, graph databases, and continuous learning.

Backenddatabasesprogramming
0 likes · 10 min read
Modern Backend Developer Roadmap: A Step‑by‑Step Guide
21CTO
21CTO
Apr 18, 2018 · Information Security

Why Linus Torvalds Rages at Intel, C++, and the Tech Industry

The article explores Linus Torvalds' outspoken criticism of Intel's CPU security flaws, his harsh opinions on C++, GCC, GNOME, Java, Mach, and XML, and how his fiery remarks reflect deep technical frustrations rather than personal vendettas.

Linus TorvaldsLinuxsecurity
0 likes · 10 min read
Why Linus Torvalds Rages at Intel, C++, and the Tech Industry
Architecture Digest
Architecture Digest
Apr 13, 2018 · Frontend Development

2018 Frontend Performance Checklist

This article presents a comprehensive 2018 frontend performance checklist that guides teams from establishing a performance culture and selecting metrics to optimizing build processes, static assets, HTTP/2, security, and monitoring, while offering quick‑win actions for immediate impact.

ChecklistOptimizationWeb
0 likes · 20 min read
2018 Frontend Performance Checklist
Alibaba Cloud Native
Alibaba Cloud Native
Mar 29, 2018 · Information Security

Understanding Meltdown: How Intel CPUs Leak Kernel Data via Side‑Channel Attacks

The article explains the Meltdown vulnerability affecting Intel CPUs, detailing how malicious unprivileged code can exploit out‑of‑order execution and a Flush+Reload side‑channel to read kernel memory, describing the attack path, secret channel construction, page‑fault handling, probe array setup, and code examples.

IntelMeltdownSide-channel
0 likes · 9 min read
Understanding Meltdown: How Intel CPUs Leak Kernel Data via Side‑Channel Attacks
ITPUB
ITPUB
Mar 14, 2018 · Databases

Boost MySQL Security: Set Proper datadir Permissions, Secure Socket Placement, and Use login‑path

This guide explains three practical steps to harden MySQL installations: configuring strict datadir permission modes, relocating the MySQL socket file into the datadir with safe permissions, and leveraging the login‑path feature via mysql_config_editor to store credentials securely while simplifying client access.

MySQLSocketdatabase administration
0 likes · 6 min read
Boost MySQL Security: Set Proper datadir Permissions, Secure Socket Placement, and Use login‑path
21CTO
21CTO
Mar 13, 2018 · Blockchain

How Blockchain Is Revolutionizing IoT—from Smart Homes to Shipping

This article explores how integrating blockchain with the Internet of Things enhances security, enables decentralized value exchange for devices, and drives innovative applications across industries such as manufacturing, smart homes, logistics, digital payments, and transparent voting systems.

IoTSupply Chainblockchain
0 likes · 5 min read
How Blockchain Is Revolutionizing IoT—from Smart Homes to Shipping
Architecture Digest
Architecture Digest
Mar 8, 2018 · Blockchain

An Overview of Blockchain Technology: History, Definition, Architecture, Characteristics, and Security

This article provides a comprehensive introduction to blockchain technology, covering its origins, development milestones, formal definition, structural classifications, key characteristics such as decentralization and immutability, as well as security mechanisms and current limitations, supported by references and illustrative diagrams.

DefinitionTechnologyarchitecture
0 likes · 26 min read
An Overview of Blockchain Technology: History, Definition, Architecture, Characteristics, and Security
Java Backend Technology
Java Backend Technology
Feb 27, 2018 · Backend Development

Mastering Large-Scale Website Architecture: 10 Essential Patterns Explained

This article outlines ten fundamental architecture patterns for high‑traffic websites—including layering, partitioning, distribution, clustering, caching, asynchronous processing, redundancy, automation, and security—explaining their goals, benefits, challenges, and best‑practice constraints to help engineers build scalable, reliable, and maintainable systems.

Backend PatternsCachingautomation
0 likes · 11 min read
Mastering Large-Scale Website Architecture: 10 Essential Patterns Explained
Java Backend Technology
Java Backend Technology
Feb 23, 2018 · Frontend Development

How Chrome Teams and Web Developers Can Co‑Create a Faster, Safer Web

The article explores the collaborative relationship between Chrome teams and the web development community, outlining high‑level goals for accessibility, performance, security, privacy, overall platform openness, and calls for transparent cooperation, best‑practice guides, and shared tools to build a faster, more reliable web for everyone.

Chromeaccessibilityperformance
0 likes · 11 min read
How Chrome Teams and Web Developers Can Co‑Create a Faster, Safer Web
Qunar Tech Salon
Qunar Tech Salon
Jan 25, 2018 · Blockchain

Understanding Blockchain Technology and Its Potential Applications in the Tourism Industry

This article explains the fundamentals of blockchain technology, its key features such as decentralization, smart contracts, and security, examines its advantages and drawbacks, and explores practical applications and challenges of implementing blockchain solutions in the tourism sector, including ticketing, ride‑hailing, and hotel reservations.

Financial Technologysecuritysmart contracts
0 likes · 22 min read
Understanding Blockchain Technology and Its Potential Applications in the Tourism Industry
MaGe Linux Operations
MaGe Linux Operations
Jan 22, 2018 · Information Security

Essential Linux Penetration Testing Cheat Sheet for Security Professionals

A comprehensive cheat sheet of Linux commands covering system enumeration, package management, user handling, compression, file operations, Samba access, shell tricks, miscellaneous utilities, bash history clearing, filesystem permissions, and interesting files for effective penetration testing.

EnumerationLinuxPenetration Testing
0 likes · 3 min read
Essential Linux Penetration Testing Cheat Sheet for Security Professionals
21CTO
21CTO
Jan 20, 2018 · Backend Development

Master Nginx Rate Limiting: From Basics to Advanced Configurations

This guide explains how Nginx's rate‑limiting works, covering the leaky‑bucket algorithm, basic directives, burst and nodelay options, whitelist handling, logging, custom error codes, and advanced configuration examples for securing and optimizing HTTP request traffic.

Nginxconfigurationload balancing
0 likes · 13 min read
Master Nginx Rate Limiting: From Basics to Advanced Configurations
AntTech
AntTech
Jan 20, 2018 · Artificial Intelligence

Ant Financial ATEC Conference Highlights: AI, Blockchain, Security, IoT, and Computing Initiatives

The Ant Financial ATEC Conference in Silicon Valley showcased leading fintech experts discussing the company’s BASIC strategy—spanning Artificial Intelligence, Blockchain, Security, IoT, and Computing—while presenting new open‑source services and outlining future global technology outreach.

Ant FinancialArtificial IntelligenceFinTech
0 likes · 6 min read
Ant Financial ATEC Conference Highlights: AI, Blockchain, Security, IoT, and Computing Initiatives
WeChat Backend Team
WeChat Backend Team
Jan 18, 2018 · Information Security

How WeChat Detects Anomalous Users at Billion‑Scale: Inside Its Fast, Scalable Framework

This article explains how WeChat’s security team builds a scalable anomaly‑detection framework that partitions billions of user accounts, weights suspicious attributes, computes similarity graphs, and leverages Spark optimizations and graph‑partitioning techniques to efficiently identify malicious user clusters.

Large-Scale GraphSpark optimizationanomaly detection
0 likes · 18 min read
How WeChat Detects Anomalous Users at Billion‑Scale: Inside Its Fast, Scalable Framework
dbaplus Community
dbaplus Community
Jan 11, 2018 · Cloud Native

Essential Docker Ecosystem Tools: A Comprehensive Guide for Developers and Ops

This article provides a detailed, curated list of the most popular Docker‑related tools across categories such as orchestration, CI/CD, monitoring, security, storage, networking and management, including brief descriptions, official links and cost information to help developers, DevOps engineers and platform architects choose the right solutions for every stage of the container lifecycle.

CI/CDStoragecontainer
0 likes · 29 min read
Essential Docker Ecosystem Tools: A Comprehensive Guide for Developers and Ops
Programmer DD
Programmer DD
Jan 8, 2018 · Information Security

Essential Linux MySQL/MariaDB Security Practices Every Admin Should Follow

This guide outlines twelve practical steps to harden MySQL and MariaDB on Linux, covering secure installation, network binding, disabling unsafe features, changing defaults, enabling logging, proper permissions, history cleanup, safe credential handling, application‑specific users, security plugins, password rotation, and regular package updates.

Database HardeningLinuxMariaDB
0 likes · 8 min read
Essential Linux MySQL/MariaDB Security Practices Every Admin Should Follow
DevOpsClub
DevOpsClub
Jan 4, 2018 · Operations

How Capital One Revolutionized DevOps: Pipeline Design, Security, and Speed

This article analyzes Capital One's five‑year DevOps transformation, detailing its background, organizational shifts, high‑quality fast delivery goals, pipeline construction principles, measurement practices, security and compliance enhancements, and the impressive performance results achieved.

DevOpsbankingpipeline
0 likes · 12 min read
How Capital One Revolutionized DevOps: Pipeline Design, Security, and Speed
MaGe Linux Operations
MaGe Linux Operations
Dec 23, 2017 · Operations

2017 Ops Tech Landscape: From Microservices to Intelligent Automation

This article surveys the evolution of operations technology, covering microservices, SRE, DevOps, containerization, orchestration, automation, intelligent monitoring, infrastructure, database and big‑data ops, as well as security, game and fintech operational challenges, highlighting current trends and future directions for 2017.

DevOpscontainerizationmicroservices
0 likes · 14 min read
2017 Ops Tech Landscape: From Microservices to Intelligent Automation
Architecture Digest
Architecture Digest
Dec 22, 2017 · Big Data

Redesign and Optimization of the WeChat Pay Transaction Record System

This article presents a comprehensive case study of how WeChat Pay rebuilt its transaction record storage system to handle massive data volumes, improve performance, ensure data completeness, support flexible queries, and strengthen security through distributed key‑value storage, data partitioning, and operational safeguards.

Data PartitioningWeChat Paybig data
0 likes · 11 min read
Redesign and Optimization of the WeChat Pay Transaction Record System
ITPUB
ITPUB
Dec 18, 2017 · Operations

Which Four Essential Skills Must Linux Professionals Master in 2018?

The article outlines four crucial abilities—security awareness, practical DevOps knowledge, programming competence, and strong soft‑communication skills—that every Linux specialist should develop this year to stay effective and adaptable in the evolving IT landscape.

DevOpsLinuxcareer development
0 likes · 7 min read
Which Four Essential Skills Must Linux Professionals Master in 2018?
Efficient Ops
Efficient Ops
Dec 17, 2017 · Information Security

How Android Security Works: Threats, Models, and Protection Strategies

This article examines the current Android security landscape, outlines the platform's security model, discusses program, data, and system vulnerabilities, analyzes a tampered APK case study, and presents comprehensive protection techniques such as obfuscation, shelling, and integrity verification.

APK protectionAndroidmobile security
0 likes · 11 min read
How Android Security Works: Threats, Models, and Protection Strategies
Architects Research Society
Architects Research Society
Dec 16, 2017 · Blockchain

Four Enterprise Use Cases for Blockchain Technology

The article outlines four enterprise blockchain applications—autonomous markets, reduced transaction friction, encrypted private records, and product provenance—illustrating how distributed ledger technology can add flexibility, security, and efficiency to B2B processes while hinting at Oracle's blockchain cloud service.

distributed ledgersecurityuse cases
0 likes · 7 min read
Four Enterprise Use Cases for Blockchain Technology
JD Retail Technology
JD Retail Technology
Dec 14, 2017 · Information Security

Android Signature Verification and JNI Registration: Security Challenges and Mitigation Strategies

This article explains the background of Android app signing, outlines the core security objectives of confidentiality, integrity and availability, compares static and dynamic JNI registration methods, demonstrates native signature verification and certificate integrity checks, and summarizes common cracking techniques together with practical hardening solutions.

AndroidJNINative
0 likes · 16 min read
Android Signature Verification and JNI Registration: Security Challenges and Mitigation Strategies
21CTO
21CTO
Dec 8, 2017 · Backend Development

What PHP 7.2 Brings: Argon2i Hashing, libsodium, and Key Improvements

PHP 7.2 introduces major security upgrades like Argon2i password hashing and built‑in libsodium, removes the outdated mcrypt extension, refines count() behavior, adds object type hints, and fixes hash and array key handling, offering developers a more robust and modern backend language.

7.2Argon2ibackend development
0 likes · 3 min read
What PHP 7.2 Brings: Argon2i Hashing, libsodium, and Key Improvements
360 Zhihui Cloud Developer
360 Zhihui Cloud Developer
Dec 7, 2017 · Operations

How 360’s Private Cloud Powers Elasticsearch: Architecture, Security, and Scaling

This article explains how 360’s Hulk private cloud platform deploys Elasticsearch with a dedicated master architecture, load‑balancing, per‑business isolated clusters, SearchGuard security, dynamic tokenization, self‑service user features, and advanced monitoring to achieve high‑performance, scalable search services.

Elasticsearchmonitoringprivate cloud
0 likes · 6 min read
How 360’s Private Cloud Powers Elasticsearch: Architecture, Security, and Scaling
Java Backend Technology
Java Backend Technology
Dec 2, 2017 · Fundamentals

Why IPv6 Matters: Benefits, Deployment Plans, and How It Works

This article explains China's IPv6 deployment initiative, the technical differences between IPv4 and IPv6, various IPv6 address representation methods, and the numerous advantages of IPv6 over IPv4, highlighting its massive address space, routing efficiency, security improvements, and support for emerging technologies.

IPv6Internet Protocoladdressing
0 likes · 8 min read
Why IPv6 Matters: Benefits, Deployment Plans, and How It Works
iQIYI Technical Product Team
iQIYI Technical Product Team
Nov 24, 2017 · Information Security

Risk Control System for Live Streaming: Real‑time Interception (Pluto) and Big Data Analysis (Mars)

iQIYI’s live‑stream risk‑control platform combines the real‑time interception engine Pluto with the big‑data analytics system Mars to curb black‑market registration fraud and red‑packet abuse, processing over a billion daily requests through adaptive filters, Kafka‑Spark pipelines, and clustering algorithms that now limit fake popularity to 10‑30 % and red‑packet capture to under 3 %.

MarsPlutobig data
0 likes · 11 min read
Risk Control System for Live Streaming: Real‑time Interception (Pluto) and Big Data Analysis (Mars)
MaGe Linux Operations
MaGe Linux Operations
Nov 19, 2017 · Information Security

How to Crack Sliding Puzzle Captchas with Simple Python Image Analysis

This article explores the security weaknesses of sliding puzzle captchas by collecting multiple samples, performing qualitative and quantitative image analysis, and presenting a Python script that automatically identifies the puzzle gap using pixel differences and statistical thresholds.

CAPTCHAPythonimage processing
0 likes · 7 min read
How to Crack Sliding Puzzle Captchas with Simple Python Image Analysis
Java Backend Technology
Java Backend Technology
Nov 13, 2017 · Backend Development

Transforming Monolithic Websites to Scalable, High‑Performance Distributed Systems

Learn how early monolithic websites evolve into distributed architectures by splitting applications, services, and data, implementing load balancers, reverse proxies, caching, CDN, database sharding, and security measures, while focusing on performance, high availability, scalability, and extensibility for robust, high‑traffic sites.

Performance Optimizationdistributed systemshigh availability
0 likes · 11 min read
Transforming Monolithic Websites to Scalable, High‑Performance Distributed Systems
MaGe Linux Operations
MaGe Linux Operations
Nov 9, 2017 · Information Security

How to Exploit and Secure Python's eval: Bypass Tricks and Whitelist Defenses

This article explains how Python's eval can execute arbitrary code, demonstrates multiple bypass techniques—including __import__, __builtins__ manipulation, and object subclass exploitation—and shows how to safely restrict eval using whitelist globals or ast.literal_eval to prevent code injection and denial‑of‑service attacks.

EvalPythoncode injection
0 likes · 9 min read
How to Exploit and Secure Python's eval: Bypass Tricks and Whitelist Defenses
ITPUB
ITPUB
Oct 17, 2017 · Information Security

10 Linux Commands That Can Wipe Your System – Handle With Extreme Care

This article lists ten dangerous Linux commands, explains how each can irreversibly destroy data or crash a system—especially when run as root—and provides safety tips such as using rm -i aliases and testing only in virtual machines.

dangerous commandsrm -rfsecurity
0 likes · 8 min read
10 Linux Commands That Can Wipe Your System – Handle With Extreme Care
ITPUB
ITPUB
Oct 7, 2017 · Operations

13 Must‑Have Linux Ops Tools and Quick Installation Guides

This guide introduces thirteen essential Linux operation utilities—including Nethogs, IOZone, IOTop, IPtraf, IFTop, HTop, NMON, MultiTail, Fail2ban, Tmux, Agedu, NMap and Httperf—providing brief descriptions, download links and step‑by‑step commands to install and use each tool for monitoring, performance testing, security and session management.

Linuxmonitoringsecurity
0 likes · 12 min read
13 Must‑Have Linux Ops Tools and Quick Installation Guides
21CTO
21CTO
Sep 29, 2017 · Backend Development

How to Survive Flash‑Sale Traffic: Backend Strategies for 100k QPS

This article examines the technical challenges of handling massive concurrent requests during flash‑sale and ticket‑buying events, offering practical backend design, performance tuning, anti‑cheat measures, and data‑safety techniques to keep web systems stable under extreme load.

High ConcurrencyRedisbackend optimization
0 likes · 16 min read
How to Survive Flash‑Sale Traffic: Backend Strategies for 100k QPS
21CTO
21CTO
Sep 26, 2017 · Operations

Why You Should Never Trust Any Component in Your System—and How to Protect It

In programming and operations, every element—from services and dependencies to requests, machines, data centers, power, networks, and humans—can fail unexpectedly, so you must assume distrust and implement defensive measures such as monitoring, redundancy, rate limiting, fallback strategies, backups, and automated deployment.

fault tolerancemonitoringoperations
0 likes · 9 min read
Why You Should Never Trust Any Component in Your System—and How to Protect It
Meituan Technology Team
Meituan Technology Team
Sep 14, 2017 · Information Security

Android Binder Vulnerabilities and Exploitation Techniques Using Drozer

The article reviews real‑world Android Binder vulnerabilities—including lock‑screen bypasses, Samsung shutdown eavesdropping, theme escalation, and system DoS—explains the Binder IPC architecture, and demonstrates how the drozer framework can be used for automated fuzzing, AIDL‑based, reflection‑based, and shell‑script exploitation of high‑privilege services.

AndroidBinderDrozer
0 likes · 14 min read
Android Binder Vulnerabilities and Exploitation Techniques Using Drozer
Programmer DD
Programmer DD
Sep 11, 2017 · Backend Development

Understanding Java Session and Cookie: A Hands‑On Spring Boot Demo

This article explains the fundamentals of HTTP Session and Cookie mechanisms in Java web applications, provides a minimal Spring Boot controller example that stores and retrieves a browser identifier via session, demonstrates behavior across Chrome and 360 browsers, and highlights the security risk of tampering with the JSESSIONID cookie.

CookieJavaSession
0 likes · 8 min read
Understanding Java Session and Cookie: A Hands‑On Spring Boot Demo
BiCaiJia Technology Team
BiCaiJia Technology Team
Sep 9, 2017 · Information Security

Top 12 Tomcat Hardening Steps to Secure Your Java Web Server

Learn how to harden Apache Tomcat by disabling default users, removing unnecessary webapps, preventing directory listings, enforcing HttpOnly cookies, securing shutdown ports, hiding version info, disabling auto‑deployment, setting proper file permissions, enabling access logs, customizing error pages, and configuring custom application paths.

Tomcatconfigurationhardening
0 likes · 10 min read
Top 12 Tomcat Hardening Steps to Secure Your Java Web Server
ITPUB
ITPUB
Sep 8, 2017 · Fundamentals

7 Common Linux Misconceptions Debunked – What You Need to Know

This article dispels seven widespread myths about Linux, covering its user base, origins, usability, security, aesthetics, gaming support, and cost, while highlighting real-world adoption, community initiatives, and practical ways to experience the operating system.

Desktopmisconceptionsoperating system
0 likes · 11 min read
7 Common Linux Misconceptions Debunked – What You Need to Know
DevOps
DevOps
Sep 7, 2017 · Cloud Computing

Understanding Cloud Computing, ALM, and DevOps Best Practices

The article explains how cloud computing supports Application Lifecycle Management, outlines the benefits and risks of various cloud service models, and describes DevOps practices such as Infrastructure as Code, automated provisioning, continuous integration, and knowledge sharing that help mitigate cloud‑related challenges.

ALMCloud ComputingDevOps
0 likes · 13 min read
Understanding Cloud Computing, ALM, and DevOps Best Practices
ITPUB
ITPUB
Sep 7, 2017 · Operations

Essential Command-Line Tools Every Linux Sysadmin Should Know

Sysadmins need reliable command-line utilities to keep services running 24/7, and this guide compiles the most commonly used networking, security, storage, logging, backup, performance, efficiency, package-management, and hardware inspection tools on Linux, explaining each command’s purpose and typical use cases.

CLI toolsmonitoringsecurity
0 likes · 15 min read
Essential Command-Line Tools Every Linux Sysadmin Should Know
MaGe Linux Operations
MaGe Linux Operations
Sep 5, 2017 · Operations

Top 19 Linux & DevOps Interview Questions You Must Master

This article compiles a comprehensive set of 19 Linux, security, networking, and Python interview questions covering basic commands, file handling, process management, load balancing, HTTP headers, cookies vs sessions, TCP handshakes, and common security vulnerabilities, providing a solid study guide for system administrators and DevOps engineers.

LinuxNetworkingPython
0 likes · 6 min read
Top 19 Linux & DevOps Interview Questions You Must Master