BestHub
Sign in
Tagged articles

security

2284 articles · Page 23 of 23
Qunar Tech Salon
Qunar Tech Salon
Aug 13, 2016 · Information Security

Android App Security Risks and Protection Strategies Presented at Qunar Tech Carnival

The article outlines common Android security vulnerabilities such as unprotected resources, easily decompiled Java and native code, and proposes protection measures like resource obfuscation, code encryption, native code hardening, and introduces the Qotector platform for APK analysis and reinforcement.

APK analysisapp protectionmobile security
0 likes · 7 min read
Android App Security Risks and Protection Strategies Presented at Qunar Tech Carnival
High Availability Architecture
High Availability Architecture
Jul 15, 2016 · Backend Development

High‑Availability Architecture for Weibo Paid Reading and Tipping Services

The article describes the high‑availability, high‑concurrency backend architecture of Weibo's paid reading and tipping platform, covering layered design, database sharding, asynchronous processing, monitoring, idempotency, distributed transaction handling, and security measures for a large‑scale internet‑finance system.

Monitoringbackenddistributed-systems
0 likes · 8 min read
High‑Availability Architecture for Weibo Paid Reading and Tipping Services
AI Cyberspace
AI Cyberspace
Jul 8, 2016 · Information Security

How CVE‑2016‑4971 Lets Attackers Hijack wget to Install Rootkits

The CVE‑2016‑4971 vulnerability in older wget versions allows attackers to redirect HTTP downloads to malicious FTP resources, causing hidden .bash_profile files to be written and executed, which can grant full host compromise and rootkit installation.

CVE-2016-4971Rootkitftp redirect
0 likes · 5 min read
How CVE‑2016‑4971 Lets Attackers Hijack wget to Install Rootkits
Qunar Tech Salon
Qunar Tech Salon
Jul 6, 2016 · Information Security

Thirteen Ways Containers Are More Secure Than Virtual Machines

The article explains why containers offer stronger security than virtual machines by detailing thirteen best‑practice features such as disabling SSH, limiting ports, short‑lived containers, immutable designs, automated patching, and comprehensive scanning and logging strategies.

CI/CDContainersdevops
0 likes · 5 min read
Thirteen Ways Containers Are More Secure Than Virtual Machines
Efficient Ops
Efficient Ops
Jul 4, 2016 · Operations

What the 5th Annual DevOps Report Reveals About ROI, Culture, and Performance

The fifth‑year DevOps report, based on surveys of over 4,600 global professionals, shows how high‑performing organizations achieve dramatically faster deployments, higher employee loyalty, better quality and security, and substantial cost savings, while highlighting the ROI of DevOps investments and cultural transformation.

Employee loyaltyIT performanceLean Management
0 likes · 15 min read
What the 5th Annual DevOps Report Reveals About ROI, Culture, and Performance
AI Cyberspace
AI Cyberspace
Jul 4, 2016 · Information Security

Master Linux Auditing: Essential Commands and Log Analysis Techniques

This guide explains essential Linux audit commands, log‑viewing techniques, user and process inspection methods, and additional checks such as file integrity, network monitoring, cron jobs, and backdoor detection, providing a comprehensive toolkit for system security and operations.

System Monitoringauditlog analysis
0 likes · 9 min read
Master Linux Auditing: Essential Commands and Log Analysis Techniques
High Availability Architecture
High Availability Architecture
Jun 24, 2016 · Information Security

Xiaomi's Internet Finance Risk Control Practices: Architecture, Rules Engine, and Machine Learning

The article details Xiaomi's evolution of internet‑finance risk control—from early limit and frequency rules that cut bad‑debt by a third, through adopting the Drools rules engine for rapid deployment and gray‑release, to leveraging random‑forest machine‑learning models and extensive user profiling that reduced fraud by roughly 40%, while addressing privacy and operational challenges.

DroolsRandom ForestXiaomi
0 likes · 15 min read
Xiaomi's Internet Finance Risk Control Practices: Architecture, Rules Engine, and Machine Learning
Big Data and Microservices
Big Data and Microservices
May 6, 2016 · Operations

Mastering SNMP: Why It Matters and How to Deploy It on Linux

This article explains the Simple Network Management Protocol (SNMP), its purpose, advantages, core components, message structure, security features of SNMPv3, basic operations, and provides a step‑by‑step guide to installing and configuring net‑snmp on a Linux system.

LinuxNetwork ManagementSNMP
0 likes · 13 min read
Mastering SNMP: Why It Matters and How to Deploy It on Linux
ITPUB
ITPUB
May 5, 2016 · Information Security

Understanding SQL Injection Through a Simple Robot Analogy

The article uses a warehouse‑robot analogy to illustrate how mixing user‑supplied data with commands leads to SQL injection and explains that separating commands from data via parameterized queries prevents this security flaw.

Parameterized QuerySQL Injectionsecurity
0 likes · 5 min read
Understanding SQL Injection Through a Simple Robot Analogy
Big Data and Microservices
Big Data and Microservices
May 5, 2016 · Information Security

Essential Linux Security Audit Checklist: 11 Steps to Detect Compromise

This guide walks you through eleven systematic Linux security checks—including account inspection, log review, process analysis, file integrity, RPM verification, network monitoring, scheduled tasks, backdoor detection, kernel modules, services, and rootkit scans—to help identify potential system compromises.

ForensicsLinuxRootkit
0 likes · 6 min read
Essential Linux Security Audit Checklist: 11 Steps to Detect Compromise
Efficient Ops
Efficient Ops
May 4, 2016 · Operations

How to Build a Scalable OpenLDAP‑Based Unified Identity System for Enterprise Operations

This article walks through the evolution of a unified identity authentication system built on OpenLDAP, covering initial password‑management pain points, design decisions involving PAM and sudo, role‑based access control, multi‑IDC distributed deployment, security hardening with TLS and anti‑brute‑force measures, and practical host‑restriction techniques for reliable, secure operations.

Identity ManagementOpenLDAPPrivilege Management
0 likes · 15 min read
How to Build a Scalable OpenLDAP‑Based Unified Identity System for Enterprise Operations
Qunar Tech Salon
Qunar Tech Salon
May 2, 2016 · Backend Development

Using JDK7 Standard Library for Flexible and Secure File Handling in Java

This article demonstrates how to leverage JDK7's standard library—Path, Paths, Files, and FileSystem—to perform flexible file operations, safe path concatenation, size‑checked reading, automatic resource management, directory traversal with FileVisitor, and security measures for preventing unsafe file access.

File I/OJDK7backend
0 likes · 7 min read
Using JDK7 Standard Library for Flexible and Secure File Handling in Java
MaGe Linux Operations
MaGe Linux Operations
Apr 29, 2016 · Information Security

How to Analyze and Recover from a Linux Rootkit Intrusion

This article walks through a real-world Linux server compromise, detailing the attack symptoms, forensic analysis steps, rootkit discovery, exploitation of an Awstats script vulnerability, and practical remediation measures to restore and harden the affected system.

AwstatsForensicsLinux
0 likes · 14 min read
How to Analyze and Recover from a Linux Rootkit Intrusion
MaGe Linux Operations
MaGe Linux Operations
Apr 21, 2016 · Information Security

Understanding SSL/TLS: From Handshake Basics to Secret Keys Explained

This article provides a comprehensive overview of SSL/TLS, covering its architecture, differences between SSL and TLS, detailed handshake steps, key exchange processes, secret generation, security considerations, proxy handling, and references, aiming to clarify the complex concepts for readers.

EncryptionHandshakeSSL
0 likes · 22 min read
Understanding SSL/TLS: From Handshake Basics to Secret Keys Explained
Efficient Ops
Efficient Ops
Apr 21, 2016 · Information Security

Should Your Enterprise Join an AD Domain? Survey Results and Expert Insights

This article analyzes whether enterprises should adopt Active Directory domains by presenting a survey of 110 companies, highlighting the reasons for and against domain integration, and sharing expert opinions on the benefits, risks, and management considerations involved.

Active DirectoryDomain Adoptionmanagement
0 likes · 13 min read
Should Your Enterprise Join an AD Domain? Survey Results and Expert Insights
Architects' Tech Alliance
Architects' Tech Alliance
Apr 19, 2016 · Fundamentals

An Overview of the Internet of Things (IoT): Architecture, Market Trends, Security, and Network Challenges

This article provides a comprehensive overview of the Internet of Things (IoT), covering its definition, layered architecture, rapid market growth, key application domains, data integration challenges, security concerns, and network load management, highlighting the shift from traditional IT to cloud‑enabled, sensor‑driven infrastructures.

Cloud ComputingIoTNetwork Management
0 likes · 12 min read
An Overview of the Internet of Things (IoT): Architecture, Market Trends, Security, and Network Challenges
Architects' Tech Alliance
Architects' Tech Alliance
Apr 17, 2016 · Big Data

An Overview of Splunk as an IT Search Engine for Big Data Analysis

This article introduces Splunk as a specialized IT search engine for big data, detailing its data collection, indexing, analysis, reporting, security integration, scalability, and practical use cases such as operational troubleshooting, compliance auditing, and application performance monitoring.

Splunkdata analysislog management
0 likes · 7 min read
An Overview of Splunk as an IT Search Engine for Big Data Analysis
Architecture Digest
Architecture Digest
Apr 13, 2016 · Information Security

HTTPS Optimization: Protocol and Configuration Best Practices

This article explains how to improve HTTPS performance and security by optimizing protocol features such as TCP Fast Open, HSTS, session resumption, OCSP stapling, False Start, and SPDY/HTTP2, discusses computational enhancements like ECC and OpenSSL upgrades, and provides practical deployment guidance for large‑scale web sites.

HTTPSWeb Optimizationsecurity
0 likes · 26 min read
HTTPS Optimization: Protocol and Configuration Best Practices
21CTO
21CTO
Apr 13, 2016 · Information Security

Why HTTPS Slows You Down and How It Secures Your Data

The article explains that HTTPS combines HTTP with TLS to provide encryption, authentication, and data integrity, describes TLS versions, key‑exchange algorithms such as RSA and ECDHE, and analyzes the network round‑trip and CPU overhead that HTTPS introduces, while also discussing deployment costs and optimization considerations.

EncryptionHTTPSsecurity
0 likes · 29 min read
Why HTTPS Slows You Down and How It Secures Your Data
21CTO
21CTO
Mar 23, 2016 · Backend Development

Top 17 PHP Best Practices Every Backend Developer Should Follow

This article presents a comprehensive list of 17 essential PHP best‑practice tips—ranging from using absolute paths and custom loaders to proper output buffering, character encoding, session handling, and file permission management—to help developers write cleaner, more maintainable, and secure backend code.

Backend Developmentbest practicescode quality
0 likes · 13 min read
Top 17 PHP Best Practices Every Backend Developer Should Follow
dbaplus Community
dbaplus Community
Mar 15, 2016 · Databases

Unlocking Oracle 12c: Multitenant, In-Memory, and Security Features Explained

This article examines Oracle Database 12c’s key innovations—including multitenant architecture, the Database In‑Memory option, enhanced security controls, and integrated big‑data analytics—while sharing real‑world production experiences, benefits, and practical limitations for enterprises adopting cloud‑ready databases.

Database 12cIn-MemoryMultiTenant
0 likes · 12 min read
Unlocking Oracle 12c: Multitenant, In-Memory, and Security Features Explained
ITPUB
ITPUB
Mar 14, 2016 · Information Security

How to Diagnose and Remove Hidden Malware Causing Network Flood on a Linux Server

A step‑by‑step guide shows how to identify abnormal NIC traffic, locate malicious init scripts and hidden processes, use simple shell scripts and netstat to pinpoint the offending connection, and clean a compromised Linux server to restore normal network performance.

LinuxMalwareShell script
0 likes · 10 min read
How to Diagnose and Remove Hidden Malware Causing Network Flood on a Linux Server
21CTO
21CTO
Mar 8, 2016 · Backend Development

How to Build a High‑Performance, Secure Nginx Web Server on CentOS

This guide walks through why Nginx is preferred over Apache for high‑traffic sites, provides step‑by‑step instructions for compiling and installing Nginx on CentOS, and details extensive performance tuning and security hardening techniques to support tens of thousands of concurrent connections.

CentOSHigh concurrencyLinux
0 likes · 18 min read
How to Build a High‑Performance, Secure Nginx Web Server on CentOS
Efficient Ops
Efficient Ops
Mar 7, 2016 · Operations

How to Build a High‑Performance, Secure Nginx Web Server on CentOS

This guide walks through why Nginx is preferred over Apache, detailed steps to compile and install it on CentOS, and extensive configuration tweaks—including worker processes, kernel parameters, SELinux policies, and request‑filtering rules—to achieve high concurrency and robust security for production web services.

LinuxNGINXWeb Server
0 likes · 17 min read
How to Build a High‑Performance, Secure Nginx Web Server on CentOS
ITPUB
ITPUB
Mar 1, 2016 · Fundamentals

Why Open‑Source Software Still Beats Proprietary Alternatives: 9 Compelling Reasons

The article outlines nine practical advantages of open‑source software—zero cost, instant availability, rapid security fixes, higher security, comprehensive community support, user‑centric customization, extended hardware lifespan, enhanced privacy, and superior overall quality—explaining why it remains a strong competitor to proprietary solutions.

PrivacySoftwarecost
0 likes · 9 min read
Why Open‑Source Software Still Beats Proprietary Alternatives: 9 Compelling Reasons
Architect
Architect
Feb 25, 2016 · Information Security

Proper Password Hashing: Salting, Key Stretching, and Secure Implementation

This article explains why simple password hashing is insufficient, describes common attacks such as dictionary, brute‑force, lookup‑table and rainbow‑table attacks, and provides best‑practice guidance—including random salts, CSPRNGs, key‑stretching algorithms like PBKDF2, bcrypt and scrypt—and complete PHP reference implementations.

PBKDF2PHPcryptography
0 likes · 34 min read
Proper Password Hashing: Salting, Key Stretching, and Secure Implementation
Architect
Architect
Feb 25, 2016 · Information Security

Password Hashing with PBKDF2 in C# (ASP.NET) and Ruby on Rails

The article presents complete, licensed implementations of salted PBKDF2‑SHA1 password hashing for both ASP.NET (C#) and Ruby on Rails, detailing the source code, usage methods, and verification procedures to securely store and validate passwords.

ASP.NETC#PBKDF2
0 likes · 7 min read
Password Hashing with PBKDF2 in C# (ASP.NET) and Ruby on Rails
21CTO
21CTO
Feb 12, 2016 · Backend Development

Key Challenges in Building High‑Traffic Data‑Intensive Web Platforms

This article examines the critical issues of massive data handling, concurrency, file storage, relational design, indexing, distributed processing, AJAX usage, security, clustering, and OpenAPI trends that developers must address when architecting large, high‑interaction web sites.

Data Architecturebackenddistributed systems
0 likes · 8 min read
Key Challenges in Building High‑Traffic Data‑Intensive Web Platforms
21CTO
21CTO
Feb 8, 2016 · Backend Development

10 Proven PHP Best Practices Every Developer Should Follow

This article presents ten expert‑backed PHP best practices—from choosing the right use cases and leveraging multi‑table storage for scalability, to security, caching, IDE usage, filtering functions, framework decisions, batch processing, and enabling error reporting—offering actionable guidance for building robust, high‑performance web applications.

CachingIDEPHP
0 likes · 11 min read
10 Proven PHP Best Practices Every Developer Should Follow
Efficient Ops
Efficient Ops
Jan 26, 2016 · Operations

How Real-Time Log Analytics Transforms IT Operations

This article explains IT Operation Analytics (ITOA), its data sources, use cases, evolution of log management, and how a real‑time log search platform can improve monitoring, security, and business analysis for large‑scale IT environments.

Log AnalyticsMonitoringsecurity
0 likes · 13 min read
How Real-Time Log Analytics Transforms IT Operations
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 15, 2016 · Information Security

Alibaba’s Full‑Site HTTPS Deployment for E‑Commerce: Challenges, Architecture, and Performance Optimizations

The article examines Alibaba’s large‑scale rollout of full‑site HTTPS across its e‑commerce platforms, detailing the technical hurdles of performance, compatibility, and operational planning, and describing the architectural solutions and optimizations that enabled secure, high‑performance user experiences.

AlibabaFull‑Site EncryptionHTTPS
0 likes · 7 min read
Alibaba’s Full‑Site HTTPS Deployment for E‑Commerce: Challenges, Architecture, and Performance Optimizations
Architect
Architect
Dec 24, 2015 · Information Security

macOS Persistence Mechanisms: Launch Daemons, Agents, Cron Jobs, Login Items, and Startup Items

The article reviews macOS malware persistence techniques, summarizing a 2015 Bit9 report and detailing seven startup mechanisms—including launch daemons/agents, cron jobs, login items, and startup items—while providing configuration examples, detection tools, and reference resources for security professionals.

launchdmacOSmalware persistence
0 likes · 11 min read
macOS Persistence Mechanisms: Launch Daemons, Agents, Cron Jobs, Login Items, and Startup Items
21CTO
21CTO
Dec 14, 2015 · Databases

MongoDB Master Russell Smith’s Essential Best‑Practice Checklist

This article compiles Russell Smith’s comprehensive MongoDB best‑practice guide, covering architecture choices, file limits, write safety, schema design, replication, sharding, security, and performance tuning to help engineers avoid common pitfalls and optimize production deployments.

MongoDBPerformance TuningSharding
0 likes · 16 min read
MongoDB Master Russell Smith’s Essential Best‑Practice Checklist
ITPUB
ITPUB
Dec 10, 2015 · Information Security

How Browsers and Servers Negotiate TLS Cipher Suites: A Deep Dive

This article explains the step‑by‑step process of TLS cipher suite negotiation between browsers and servers, covering browser‑side cipher listing, server‑side configuration, the meaning of cipher names, and how the final suite is selected, with practical Wireshark and PowerShell examples.

Cipher SuiteHTTPSWireshark
0 likes · 9 min read
How Browsers and Servers Negotiate TLS Cipher Suites: A Deep Dive
dbaplus Community
dbaplus Community
Dec 4, 2015 · Big Data

Big Data Insights from the 2015 Internet+ Summit: Advertising, Finance & Security

The article compiles detailed notes from the 2015 Internet+ Big Data Summit, highlighting how data monetization reshapes advertising, drives financial analytics, improves operational efficiency, and strengthens security, while presenting real‑world case studies, models, and practical recommendations from industry experts.

AdvertisingData GovernanceData Monetization
0 likes · 17 min read
Big Data Insights from the 2015 Internet+ Summit: Advertising, Finance & Security
21CTO
21CTO
Nov 22, 2015 · Backend Development

Boost Your PHP Projects with 30 Essential Best Practices

Learn a comprehensive set of 30 practical PHP best‑practice tips covering file inclusion, path handling, debugging, output buffering, security, performance, database interactions, session management, and code organization to improve maintainability, efficiency, and reliability of your backend applications.

Backend DevelopmentPHPbest practices
0 likes · 26 min read
Boost Your PHP Projects with 30 Essential Best Practices
Efficient Ops
Efficient Ops
Nov 11, 2015 · Information Security

Why Redis Unauthorized Access Is a Critical Threat and How to Fix It

This article explains a high‑severity Redis unauthorized‑access vulnerability that can let attackers write SSH keys to the host, highlights the risk of exposing Redis to the Internet without authentication, and provides guidance on remediation and network protection.

Network ExposurePATCHRedis
0 likes · 4 min read
Why Redis Unauthorized Access Is a Critical Threat and How to Fix It
Architect
Architect
Nov 8, 2015 · Backend Development

Design Considerations for a Short URL Service

Designing a short URL service involves choosing appropriate key‑value storage, simple incremental or base‑36 encoding for keys, estimating data capacity and sharding strategies, handling concurrent reads/writes with thread‑safe structures or Redis, selecting network event loops, and addressing security concerns such as abuse prevention.

ShardingSystem Designbackend
0 likes · 6 min read
Design Considerations for a Short URL Service
21CTO
21CTO
Nov 4, 2015 · Information Security

Master PHP Encryption: From MD5 to OpenSSL Asymmetric Techniques

This article explains PHP's various encryption methods, covering one-way hash functions like MD5 and SHA1, symmetric algorithms, the rarely used crypt() function, and detailed implementations of asymmetric encryption with OpenSSL, including key generation, encryption, decryption, and practical code examples.

EncryptionHashOpenSSL
0 likes · 15 min read
Master PHP Encryption: From MD5 to OpenSSL Asymmetric Techniques
Java High-Performance Architecture
Java High-Performance Architecture
Oct 29, 2015 · Information Security

How OAuth2 Secures Third‑Party Access: A Complete Guide

OAuth2 provides a secure, open standard that lets third‑party applications obtain limited user access without exposing passwords, using a token‑based flow involving resource owners, clients, resource servers, and authorization servers, illustrated through a step‑by‑step authorization process.

APIAccess TokenAuthorization
0 likes · 4 min read
How OAuth2 Secures Third‑Party Access: A Complete Guide
Suning Design
Suning Design
Oct 12, 2015 · Product Management

15 Ways to Manage Unexpected Requirement Changes

This article outlines fifteen common hidden requirement types—from detail tweaks and cross‑platform adaptations to scalability, security, and content‑operation needs—and offers practical strategies for developers and product teams to anticipate, design for flexibility, and reduce costly changes during development.

product operationsrequirement managementscalability
0 likes · 12 min read
15 Ways to Manage Unexpected Requirement Changes
21CTO
21CTO
Oct 11, 2015 · Information Security

How Single Sign-On (SSO) Works: Storing and Validating Trust

This article explains the concept of Single Sign-On (SSO), why it’s essential for large websites, outlines the core challenges of storing and validating trust, compares client‑side cookie approaches with server‑side solutions, and discusses practical techniques such as encrypted cookies, digital signatures, distributed caches, and whitelist‑based trust management.

SSOsecurity
0 likes · 5 min read
How Single Sign-On (SSO) Works: Storing and Validating Trust
Tencent TDS Service
Tencent TDS Service
Sep 10, 2015 · Mobile Development

Master iOS 9: Secure Your App with ATS and Shrink It with App Thinning

This article explains iOS 9's App Transport Security and App Thinning features, detailing how to configure ATS, use nscurl for diagnostics, and apply App Thinning mechanisms such as Slicing, On‑Demand Resources, and Bitcode to improve security and reduce app size.

App ThinningApp Transport SecurityiOS
0 likes · 9 min read
Master iOS 9: Secure Your App with ATS and Shrink It with App Thinning
21CTO
21CTO
Aug 29, 2015 · Fundamentals

30 Years of Programming: 16 Hard‑Earned Lessons Every Developer Should Know

Drawing on three decades of software development, this article shares sixteen practical lessons about client interaction, security, code simplicity, continuous learning, and evaluation that can help programmers and teams make better decisions and avoid common pitfalls.

Career Advicebest practicesprogramming
0 likes · 10 min read
30 Years of Programming: 16 Hard‑Earned Lessons Every Developer Should Know
ITPUB
ITPUB
Aug 12, 2015 · Operations

Master Splunk: Install, Configure, and Search Logs on Linux and Windows

This guide walks you through installing Splunk on Linux or Windows, configuring automatic startup, indexing diverse log sources, and using Splunk’s powerful search, Boolean operators, and timeline features to troubleshoot and analyze system and network logs efficiently.

InstallationOperationsSearch
0 likes · 15 min read
Master Splunk: Install, Configure, and Search Logs on Linux and Windows
21CTO
21CTO
Aug 10, 2015 · Backend Development

Designing Practical RESTful APIs: Best Practices for Real‑World Apps

This article presents practical guidelines for designing, versioning, securing, and documenting RESTful APIs, covering resource modeling, URL conventions, filtering, sorting, pagination, authentication, rate limiting, error handling, and response formats to help developers build flexible and user‑friendly public APIs.

API designHTTPRESTful API
0 likes · 22 min read
Designing Practical RESTful APIs: Best Practices for Real‑World Apps
21CTO
21CTO
Aug 8, 2015 · Backend Development

9 Essential PHP Practices Every Developer Should Master

This article shares nine practical PHP tips—from security fundamentals like input filtering and output escaping, to efficient coding tricks such as using ternary operators, caching, and modern frameworks—aimed at helping developers write safer, cleaner, and faster backend code.

backendbest practicescoding style
0 likes · 7 min read
9 Essential PHP Practices Every Developer Should Master
High Availability Architecture
High Availability Architecture
Aug 8, 2015 · Information Security

Managing HTTPS Certificates When Using Third‑Party CDN Services

The article explains how HTTPS works, why traditional CDN architectures based on CNAME aliases can conflict with HTTPS certificate validation, and compares two common approaches—custom certificates and shared certificates—highlighting their security implications and performance considerations for web operators.

CDNHTTPSWeb Performance
0 likes · 6 min read
Managing HTTPS Certificates When Using Third‑Party CDN Services
MaGe Linux Operations
MaGe Linux Operations
Jul 30, 2015 · Cloud Native

Essential Docker Tips for Developers: Boost Efficiency and Security

This article shares practical Docker tips covering CLI enhancements, Dockerfile best practices, networking, volume management, and security measures, helping developers who already know the basics to improve container workflows, reduce image size, and secure their Docker deployments.

CLIcontainerizationdevops
0 likes · 11 min read
Essential Docker Tips for Developers: Boost Efficiency and Security
Art of Distributed System Architecture Design
Art of Distributed System Architecture Design
Jul 19, 2015 · Information Security

25 Essential PHP Security Best Practices for Hardened Web Servers

This guide presents 25 practical PHP security best practices, covering configuration files, module management, error handling, file uploads, remote code execution, SQL safety, resource limits, user permissions, SELinux, firewall rules, and additional tools, to help administrators harden PHP deployments on Linux servers.

LinuxPHPbackend
0 likes · 27 min read
25 Essential PHP Security Best Practices for Hardened Web Servers
Architect
Architect
Jun 9, 2015 · Information Security

Why Use bcrypt for Password Hashing Instead of MD5, SHA1, SHA256, etc.

The article explains that general‑purpose hash functions like MD5 and SHA families are fast and vulnerable to brute‑force attacks, while bcrypt’s deliberately slow, work‑factor‑adjustable design makes it a far more secure choice for storing passwords.

bcryptcryptographyhash functions
0 likes · 4 min read
Why Use bcrypt for Password Hashing Instead of MD5, SHA1, SHA256, etc.
Java High-Performance Architecture
Java High-Performance Architecture
Jun 5, 2015 · Frontend Development

Why Static Pages Boost Speed, SEO, and Security – A Practical Guide

Static page generation dramatically improves load times, reduces server load, enhances SEO, and strengthens security by eliminating dynamic processing and database queries, while allowing flexible strategies such as full-page or partial static rendering for high‑traffic pages like homepages and detail pages with dynamic comments.

SEOWeb Developmentfrontend
0 likes · 2 min read
Why Static Pages Boost Speed, SEO, and Security – A Practical Guide
Art of Distributed System Architecture Design
Art of Distributed System Architecture Design
May 30, 2015 · Cloud Computing

Top Technology Trends of the Year: Cloud, Containers, Microservices, DevOps, and More

The article surveys this year's hottest technology trends—including the rise of public cloud, containerization, microservices, multi‑cloud management, endpoint security, machine learning, and the resurgence of DevOps—explaining why they are reshaping enterprise IT and why open source is the common driver behind them.

CloudContainersMicroservices
0 likes · 10 min read
Top Technology Trends of the Year: Cloud, Containers, Microservices, DevOps, and More
MaGe Linux Operations
MaGe Linux Operations
May 12, 2015 · Information Security

Master ZMap: Fast Network Scanning, Installation, Commands, and Advanced Uses

ZMap is a high‑speed network scanner developed at the University of Michigan, and this guide covers its installation on various Linux distributions, core command‑line options, configuration files, advanced extensions like banner grabbing and UDP probes, and discusses its underlying SYN‑RST scanning mechanism and security considerations.

LinuxNetwork ScanningTCP SYN scan
0 likes · 16 min read
Master ZMap: Fast Network Scanning, Installation, Commands, and Advanced Uses
Qunar Tech Salon
Qunar Tech Salon
Mar 25, 2015 · Operations

13 Common Production Pitfalls Developers and Architects Should Avoid

The article outlines thirteen critical production‑related mistakes—from not externalizing configuration and using inadequate test data to neglecting security, documentation, disaster‑recovery planning, and proper capacity planning—providing actionable guidance for developers and architects to improve system stability and performance.

Productionbest practicessecurity
0 likes · 8 min read
13 Common Production Pitfalls Developers and Architects Should Avoid
ITPUB
ITPUB
Mar 19, 2015 · Databases

How 360 Secures Massive Data with Custom NoSQL and Open‑Source Backend

In an in‑depth interview, 360’s web platform architect Wang Chao explains the open‑source and proprietary database technologies, multi‑data‑center NoSQL system Bada, and layered security mechanisms that power 360’s search, cloud storage and other high‑traffic services.

DatabasesNoSQLopen source
0 likes · 11 min read
How 360 Secures Massive Data with Custom NoSQL and Open‑Source Backend
Art of Distributed System Architecture Design
Art of Distributed System Architecture Design
Mar 14, 2015 · Cloud Computing

Hybrid Cloud Architecture and Scalability Analysis of China’s 12306 Railway Ticketing System

The article examines the technical challenges of the 12306 railway ticketing platform, comparing it with e‑commerce systems, and proposes a hybrid‑cloud solution that leverages private and public cloud resources to handle massive, unpredictable traffic while ensuring security, high availability, and elastic scalability.

High concurrencyHybrid Cloudsecurity
0 likes · 16 min read
Hybrid Cloud Architecture and Scalability Analysis of China’s 12306 Railway Ticketing System
Art of Distributed System Architecture Design
Art of Distributed System Architecture Design
Mar 11, 2015 · Backend Development

Understanding Reverse Proxy: Purposes, Deployment Strategies, and Performance Considerations

This article explains what reverse proxy is, compares it with forward proxy, outlines its security, load‑balancing, caching, and concurrency‑control benefits, and discusses various deployment approaches including one‑to‑one setups, separate servers, and clustered architectures for large‑scale web applications.

CachingReverse Proxydeployment
0 likes · 13 min read
Understanding Reverse Proxy: Purposes, Deployment Strategies, and Performance Considerations
Nightwalker Tech
Nightwalker Tech
Jan 4, 2015 · Backend Development

Design and Pitfalls of Internet App Long‑Connection Push Systems and Related Backend Practices

This article surveys the architecture of long‑connection push systems for internet apps, distinguishes connection types, outlines client and server handling strategies, reviews mainstream backend solutions, and shares practical insights on security, API design, operations, queue services, debugging, and NoSQL usage.

Message Queuebackend-architecturedebugging
0 likes · 32 min read
Design and Pitfalls of Internet App Long‑Connection Push Systems and Related Backend Practices
Baidu Tech Salon
Baidu Tech Salon
Oct 17, 2014 · Information Security

How to Hook and Hide JavaScript APIs to Thwart XSS Attacks

This article explores practical techniques for intercepting and protecting JavaScript APIs—such as setAttribute—using MutationObserver, API hooks, random token naming, property hiding, and recursive iframe monitoring to build a resilient front‑end defense against XSS and other injection attacks.

API interceptionHookJavaScript
0 likes · 14 min read
How to Hook and Hide JavaScript APIs to Thwart XSS Attacks
MaGe Linux Operations
MaGe Linux Operations
Sep 5, 2014 · Information Security

Secure SSH with Google Authenticator: Step-by-Step Two-Factor Setup

This tutorial explains how to protect SSH logins by installing Google Authenticator, generating a secret key, configuring PAM and sshd, and using an Android device to provide time‑based one‑time passwords, complete with installation commands, troubleshooting tips, and verification steps.

Google AuthenticatorLinuxTwo-Factor Authentication
0 likes · 8 min read
Secure SSH with Google Authenticator: Step-by-Step Two-Factor Setup
MaGe Linux Operations
MaGe Linux Operations
Aug 30, 2014 · Operations

How CDN Architecture Boosts Performance, Security, and Cost Efficiency

This article explains how leveraging CDN technology—through caching proxies, routing acceleration, security protection, and cost‑saving strategies—can overcome regional network limitations, mitigate DDoS attacks, and optimize storage and load‑balancing, while also comparing open‑source reverse‑proxy solutions and offering practical hardware and software tuning tips.

CDNload balancingopen source
0 likes · 14 min read
How CDN Architecture Boosts Performance, Security, and Cost Efficiency
MaGe Linux Operations
MaGe Linux Operations
Aug 19, 2014 · Information Security

Essential Linux Commands for Incident Response and System Forensics

This guide presents a comprehensive set of Linux commands and practical steps for detecting, analyzing, and responding to compromised systems, covering process identification, file inspection, network checks, log recovery, forensic imaging, and useful tools such as ldd, strace, and nc.

ForensicsLinuxsecurity
0 likes · 13 min read
Essential Linux Commands for Incident Response and System Forensics
MaGe Linux Operations
MaGe Linux Operations
Aug 4, 2014 · Information Security

25 Essential Linux Hardening Tips to Secure Your Servers

This guide lists 25 practical Linux hardening techniques—from BIOS protection and partitioning to SSH configuration, SELinux, firewall rules, password policies, and log management—helping system administrators strengthen server security against attacks and vulnerabilities.

LinuxServerhardening
0 likes · 15 min read
25 Essential Linux Hardening Tips to Secure Your Servers
MaGe Linux Operations
MaGe Linux Operations
Jul 8, 2014 · Information Security

Top 9 Essential Linux Security Practices Every Admin Should Implement

Securing Linux systems requires more than a single anti‑malware tool; this guide outlines nine practical measures—including SELinux, vulnerability alerts, service hardening, log monitoring, port knocking, iptables, default‑deny policies, IDS, and full‑disk encryption—to strengthen system defenses against attacks.

IDSLinuxPort Knocking
0 likes · 6 min read
Top 9 Essential Linux Security Practices Every Admin Should Implement
MaGe Linux Operations
MaGe Linux Operations
Jul 1, 2014 · Operations

11 Essential DevOps Insights Every IT Professional Should Know

This comprehensive guide, originally a white‑paper by Gene Kim, explains what DevOps is, how it differs from Agile, ITIL and visible ops, outlines its core principles, application domains, business value, and practical patterns for integrating security, QA, and continuous delivery into modern IT workflows.

AgileContinuous Deliverysecurity
0 likes · 22 min read
11 Essential DevOps Insights Every IT Professional Should Know