BestHub
Sign in
Tagged articles

security

2428 articles · Page 9 of 25
Architect
Architect
Apr 12, 2025 · Backend Development

Secure Spring Boot APIs with Hybrid AES‑RSA Encryption, Transparent Request Wrappers, and Response‑Encryption AOP

This article walks through a complete solution for protecting data in Spring Boot applications, covering symmetric, asymmetric, and hybrid encryption schemes, utility classes for AES and RSA, a custom HttpServletRequestWrapper to enable multiple reads of the request body, a filter that transparently decrypts incoming parameters, and an AOP‑based response‑encryption mechanism triggered by a custom annotation.

AESAOPEncryption
0 likes · 45 min read
Secure Spring Boot APIs with Hybrid AES‑RSA Encryption, Transparent Request Wrappers, and Response‑Encryption AOP
Tencent Technical Engineering
Tencent Technical Engineering
Apr 11, 2025 · Information Security

Security Analysis of MCP and A2A Protocols for AI Agents

The article examines critical security flaws in Anthropic’s Model Context Protocol (MCP) and Google’s Agent‑to‑Agent (A2A) protocol—such as hidden tool‑poisoning, rug‑pull, and command‑injection attacks that can hijack AI agents and leak data—while proposing hardening measures like authentication, sandboxing, digital signatures, fine‑grained permissions, and robust OAuth‑based consent to safeguard AI‑agent communications.

A2AAI AgentMCP
0 likes · 26 min read
Security Analysis of MCP and A2A Protocols for AI Agents
php Courses
php Courses
Apr 11, 2025 · Information Security

Best Practices for Securing PHP Files and Directories

This article explains the risks of exposing sensitive PHP files, outlines common security threats, and provides concrete best‑practice measures such as proper permission settings, .htaccess rules, placing files outside the web root, configuration safeguards, and regular security audits to protect web applications.

File PermissionsInformation SecurityPHP
0 likes · 6 min read
Best Practices for Securing PHP Files and Directories
Code Mala Tang
Code Mala Tang
Apr 10, 2025 · Artificial Intelligence

How Google’s A2A Protocol Enables Seamless AI Agent Collaboration

Google’s A2A (Agent‑to‑Agent) protocol introduces a universal language that lets AI agents from different vendors and platforms communicate, cooperate, and jointly complete tasks, addressing the current isolation of agents and reducing integration complexity across cloud environments.

A2AAI AgentsProtocol
0 likes · 8 min read
How Google’s A2A Protocol Enables Seamless AI Agent Collaboration
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Apr 9, 2025 · Backend Development

Master Spring Boot 3: 8 Real-World Cases to Boost Your Backend Skills

This article presents eight practical Spring Boot 3 examples—including Resilience4j protection, custom Actuator endpoints, distributed transactions, caching, asynchronous programming, API gateway, OAuth2/JWT security, and scheduled tasks—each with code snippets and configuration guidance to help developers build robust backend services.

ActuatorGatewayResilience4j
0 likes · 8 min read
Master Spring Boot 3: 8 Real-World Cases to Boost Your Backend Skills
Efficient Ops
Efficient Ops
Apr 7, 2025 · Operations

10 Dangerous Yet Tempting Ops Tricks That Can Ruin Your Career

This article lists ten seemingly efficient but risky operations practices, explains why they feel attractive, details the potential data loss, security breaches, and downtime they can cause, and provides safer alternatives for reliable system administration.

best practicesrisk managementsecurity
0 likes · 10 min read
10 Dangerous Yet Tempting Ops Tricks That Can Ruin Your Career
MaGe Linux Operations
MaGe Linux Operations
Apr 7, 2025 · Information Security

Master SSH Remote Login: From Basics to Advanced Security Practices

This guide explains SSH fundamentals, protocol types, advantages, client and server software, key exchange mechanisms, encryption principles, configuration files, best‑practice hardening steps, and practical commands for secure remote access and file transfer on Linux systems.

OpenSSHRemote Loginsecurity
0 likes · 16 min read
Master SSH Remote Login: From Basics to Advanced Security Practices
MaGe Linux Operations
MaGe Linux Operations
Mar 31, 2025 · Information Security

How to Harden Linux Systems: Practical Security Steps for RHEL7

An in‑depth guide shows how to harden a RHEL 7 Linux server by tightening account permissions, enforcing password policies, limiting login attempts, changing SSH settings, restricting compiler use, protecting log files, applying minimal firewall rules, and enabling SELinux to achieve a B1‑level security baseline.

RHEL7SELinuxhardening
0 likes · 13 min read
How to Harden Linux Systems: Practical Security Steps for RHEL7
Liangxu Linux
Liangxu Linux
Mar 30, 2025 · Operations

Top 10 Server Ops Mistakes That Can Cripple Your Business

A concise guide lists the ten most dangerous server‑administration blunders—from forced power‑offs and reckless experiments in production to poor firewall, SSH, backup, and patch management—explaining real‑world incidents and practical safeguards to prevent costly outages and security breaches.

Server Managementbest practicessecurity
0 likes · 6 min read
Top 10 Server Ops Mistakes That Can Cripple Your Business
macrozheng
macrozheng
Mar 26, 2025 · Fundamentals

What’s New in Java 24? 24 Game‑Changing Features Explained

Java 24, the latest non‑LTS release, brings 24 new features across security, performance, and language enhancements—including KDF APIs, ahead‑of‑time class loading, a new class‑file API, stream gatherers, scoped values, and quantum‑resistant signatures—while previewing Java 25 for September.

JDKJEPJava24
0 likes · 15 min read
What’s New in Java 24? 24 Game‑Changing Features Explained
Java Backend Full-Stack
Java Backend Full-Stack
Mar 18, 2025 · Backend Development

18 Essential Practices for Designing Robust Backend APIs

The article outlines eighteen critical considerations for designing backend interfaces, ranging from documentation format and unified parameter schemas to encryption, idempotency, versioning, and monitoring, providing interview-ready insights that can impress hiring managers.

API designInterviewVersioning
0 likes · 5 min read
18 Essential Practices for Designing Robust Backend APIs
Mingyi World Elasticsearch
Mingyi World Elasticsearch
Mar 18, 2025 · Databases

Six Real-World Enterprise Use Cases of INFINI Gateway for Elasticsearch

The article examines six practical enterprise scenarios where INFINI Gateway enhances Elasticsearch clusters—covering zero‑cost security, intelligent query protection, automated slow‑query circuit breaking, high‑performance proxy architecture, fine‑grained read/write throttling, and end‑to‑end request logging—detailing problems, traditional limitations, and the gateway’s concrete solutions.

ElasticsearchINFINI GatewayLog Auditing
0 likes · 6 min read
Six Real-World Enterprise Use Cases of INFINI Gateway for Elasticsearch
Huolala Safety Emergency Response Center
Huolala Safety Emergency Response Center
Mar 18, 2025 · Information Security

Uncovering MSSQL Attack Chains: Stored Procedures, COM, CLR, Triggers, and Lateral Movement

This article provides a comprehensive technical analysis of MSSQL attack vectors—including vulnerable stored procedures, COM automation, CLR exploitation, sandbox bypass, trigger abuse, proxy jobs, Kerberoasting, and linked servers—detailing prerequisites, step‑by‑step T‑SQL examples, mitigation recommendations, and overall impact on database security.

CLRCOM AutomationMSSQL
0 likes · 19 min read
Uncovering MSSQL Attack Chains: Stored Procedures, COM, CLR, Triggers, and Lateral Movement
Top Architect
Top Architect
Mar 17, 2025 · Information Security

OAuth 2.0 Overview and Spring Boot Implementation Guide

This article introduces OAuth 2.0 fundamentals, explains its roles and four grant types, and provides a step‑by‑step Spring Boot implementation with configuration classes, code snippets, and testing procedures, while also containing promotional material for AI‑related products and services.

APIAuthenticationOAuth2
0 likes · 12 min read
OAuth 2.0 Overview and Spring Boot Implementation Guide
Top Architect
Top Architect
Mar 16, 2025 · Information Security

OAuth 2.0 Overview and Spring Boot Implementation Guide

This article introduces OAuth 2.0 concepts, roles, and grant types, then provides a step‑by‑step Spring Boot implementation with configuration classes, dependency setup, resource server configuration, test controller code, and demonstrates how to obtain and use access tokens, followed by a series of promotional offers.

OAuth2authorizationsecurity
0 likes · 14 min read
OAuth 2.0 Overview and Spring Boot Implementation Guide
Architect
Architect
Mar 15, 2025 · Artificial Intelligence

Why Building Your Own RAG System Is a Costly Mistake

The article explains that developing a custom Retrieval‑Augmented Generation (RAG) solution incurs hidden infrastructure, personnel, and security costs, leads to operational overload and budget overruns, and is rarely justified compared to purchasing a proven vendor solution.

AILLMRAG
0 likes · 11 min read
Why Building Your Own RAG System Is a Costly Mistake
OPPO Kernel Craftsman
OPPO Kernel Craftsman
Mar 14, 2025 · Information Security

Weaver-Enhanced Password Unlock Architecture and Security Analysis on Android

Weaver enhances Android’s password‑unlock system by moving rate‑limiting and secret storage into a Secure Element, protecting the authentication secret when the device is off and throttling repeated guesses with hardware timers, thereby hardening GateKeeper/KeyMint against offline brute‑force attacks despite added OMAPI latency.

AndroidGatekeeperKeyMint
0 likes · 7 min read
Weaver-Enhanced Password Unlock Architecture and Security Analysis on Android
php Courses
php Courses
Mar 14, 2025 · Backend Development

10 Common PHP Development Mistakes That Could Crash Applications in 2025 and How to Avoid Them

This article outlines ten frequent PHP development errors—such as outdated versions, insecure practices, overreliance on third‑party libraries, poor error handling, performance neglect, insufficient testing, maintainability issues, resource mismanagement, ignored user feedback, and flawed scaling strategies—and provides concrete code examples and solutions to prevent application crashes by 2025.

PHPPerformancebest practices
0 likes · 9 min read
10 Common PHP Development Mistakes That Could Crash Applications in 2025 and How to Avoid Them
MaGe Linux Operations
MaGe Linux Operations
Mar 11, 2025 · Operations

Master Nginx Optimization: Hide Version, Tune Workers, Enable Gzip & More

This guide walks through comprehensive Nginx service optimization techniques—including hiding the server version, adjusting user and group settings, configuring cache expiration, automating log rotation, fine‑tuning connection timeouts, scaling worker processes, enabling gzip compression, preventing hotlinking, and an overview of essential modules—providing clear commands and configuration snippets for each step.

nginxsecurityserver optimization
0 likes · 10 min read
Master Nginx Optimization: Hide Version, Tune Workers, Enable Gzip & More
Tencent Cloud Developer
Tencent Cloud Developer
Mar 11, 2025 · Artificial Intelligence

Fine‑Tuning Local LLaMA‑Factory Models and Building Networked AI Applications

The article walks through preparing a GPU‑enabled environment, downloading and LoRA‑fine‑tuning a DeepSeek model with LLaMA‑Factory, merging the adapter, then wrapping the model in a web UI that queries a ChromaDB vector store via crawled web data, illustrating security‑focused use cases and forecasting domain‑specific LLM adoption.

AILLMLLaMA-Factory
0 likes · 17 min read
Fine‑Tuning Local LLaMA‑Factory Models and Building Networked AI Applications
php Courses
php Courses
Mar 10, 2025 · Backend Development

New Major Features in Laravel 12

Laravel 12 introduces a suite of enhancements—including smarter route caching, an improved queue system, optimized database query handling, upgraded Eloquent ORM, tighter default security settings, better testing support, and new Artisan commands—aimed at boosting performance, security, and developer productivity.

PHPPerformanceWeb Framework
0 likes · 6 min read
New Major Features in Laravel 12
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Mar 9, 2025 · Backend Development

Spring Boot 3 Security Tutorial: AOP, Custom Annotations & JWT

This article presents a continuously updated collection of over 100 Spring Boot 3 practical cases, demonstrating how to implement permission authentication using Spring AOP, custom annotations, JWT utilities, interceptors, a global exception handler, a security context, and a custom argument resolver, complete with test examples and screenshots.

AOPJWTJava
0 likes · 12 min read
Spring Boot 3 Security Tutorial: AOP, Custom Annotations & JWT
php Courses
php Courses
Mar 6, 2025 · Databases

10 Essential MySQLi Functions to Boost PHP Development Efficiency and Security

This article introduces ten powerful MySQLi functions—including prepared statements, parameter binding, result retrieval, batch queries, transaction control, charset setting, and connection monitoring—that enhance PHP developers’ ability to write secure, efficient, and maintainable code when interacting with MySQL databases.

DatabasePHPPerformance
0 likes · 6 min read
10 Essential MySQLi Functions to Boost PHP Development Efficiency and Security
Ops Development & AI Practice
Ops Development & AI Practice
Mar 5, 2025 · Cloud Computing

Master Advanced Terraform Techniques: Best Practices for Reliable IaC

This guide presents advanced Terraform techniques and best practices—including code style, modular design, state management, version control, CI/CD integration, security, and monitoring—to help engineers write more professional, maintainable, and secure infrastructure-as-code configurations.

State Managementbest-practicesinfrastructure-as-code
0 likes · 12 min read
Master Advanced Terraform Techniques: Best Practices for Reliable IaC
MaGe Linux Operations
MaGe Linux Operations
Mar 2, 2025 · Operations

Master vsftpd Configuration: 21 Essential Settings for Secure FTP

This guide walks through 21 key vsftpd configuration options—including command port changes, active/passive mode ports, anonymous access, user mapping, chroot restrictions, logging, PAM authentication, connection limits, transfer rates, timeouts, and ASCII mode—to help you securely set up and fine‑tune an FTP server on Linux.

FTPServer configurationsecurity
0 likes · 9 min read
Master vsftpd Configuration: 21 Essential Settings for Secure FTP
Linux Ops Smart Journey
Linux Ops Smart Journey
Feb 27, 2025 · Information Security

Build Military‑Grade Kafka Security in Four Easy Steps

This guide walks you through four progressive stages—basic configuration, SSL encryption, SCRAM authentication, and combined SSL+SASL—showing how to harden Kafka with certificates, keystores, and client settings to achieve financial‑level protection.

Distributed MessagingKafkaSASL
0 likes · 9 min read
Build Military‑Grade Kafka Security in Four Easy Steps
php Courses
php Courses
Feb 26, 2025 · Backend Development

Best Practices for PHP Developers to Enhance User Experience (UX)

This article outlines essential PHP development best practices—including performance optimization, framework utilization, clean coding, security, mobile responsiveness, accessibility, template engines, testing, media optimization, and continuous monitoring—to help businesses build fast, secure, and user‑friendly web applications that drive better engagement and business outcomes.

PHPPerformanceaccessibility
0 likes · 20 min read
Best Practices for PHP Developers to Enhance User Experience (UX)
Java Tech Enthusiast
Java Tech Enthusiast
Feb 23, 2025 · Information Security

Why Windows 11’s UI and Security Flaws Frustrate Users and Developers

The article critiques Windows 11’s cumbersome secondary right‑click menu, weak permission controls that render UAC ineffective, rampant adware, and the platform’s poor developer experience, arguing that these design missteps undermine both user satisfaction and system security.

Developer ExperiencePermission controlWindows
0 likes · 7 min read
Why Windows 11’s UI and Security Flaws Frustrate Users and Developers
php Courses
php Courses
Feb 20, 2025 · Backend Development

Advanced Security Strategies and Tools for Laravel Applications

This article presents a comprehensive guide to securing Laravel applications, covering essential practices such as keeping the framework up to date, implementing CSP and HTTPS, preventing SQL injection and XSS, applying rate limiting, protecting environment files, and leveraging tools like Sanctum, Telescope, and security checkers.

PHPWeb Developmentbest practices
0 likes · 14 min read
Advanced Security Strategies and Tools for Laravel Applications
php Courses
php Courses
Feb 19, 2025 · Backend Development

Improving Development Practices in a Legacy PHP/MySQL Environment Without Version Control

The article recounts a developer’s experience modernizing a legacy PHP and MySQL codebase that lacked version control, detailing the challenges of disorganized code, security risks, and inefficient workflows, and describing the step‑by‑step solutions implemented to introduce backups, local Git, security hardening, and a structured development process.

MySQLPHPWorkflow
0 likes · 10 min read
Improving Development Practices in a Legacy PHP/MySQL Environment Without Version Control
DevOps Cloud Academy
DevOps Cloud Academy
Feb 18, 2025 · Operations

How AI Is Transforming DevOps: 10 Key Benefits

AI is reshaping DevOps by enhancing automation, enabling predictive analytics, optimizing CI/CD pipelines, managing resources intelligently, strengthening security, accelerating incident response, driving data-driven decisions, scaling infrastructure, fostering collaboration, and promoting continuous learning, thereby boosting flexibility, scalability, and reliability of software delivery.

AICI/CDDevOps
0 likes · 8 min read
How AI Is Transforming DevOps: 10 Key Benefits
Mingyi World Elasticsearch
Mingyi World Elasticsearch
Feb 18, 2025 · Operations

Secure and Customize Kibana in One Click with INFINI Gateway

The article explains why exposing Kibana without protection is risky, then shows how to use INFINI Gateway to add Basic Auth, TLS encryption, and flexible routing rules—without changing Kibana itself—providing step‑by‑step configuration, validation screenshots, and ideas for further customization.

Basic AuthConfigurationINFINI Gateway
0 likes · 11 min read
Secure and Customize Kibana in One Click with INFINI Gateway
php Courses
php Courses
Feb 18, 2025 · Backend Development

Comprehensive Guide to PHP 8.4 File System Operations for Beginners

This article provides a thorough introduction to PHP 8.4 file system operations, covering core functions for file handling, directory management, and metadata retrieval, along with practical examples, best‑practice security tips, and real‑world use cases for web developers.

PHPbackend developmentfile system
0 likes · 9 min read
Comprehensive Guide to PHP 8.4 File System Operations for Beginners
Mingyi World Elasticsearch
Mingyi World Elasticsearch
Feb 17, 2025 · Information Security

Secure Elasticsearch with a Single InfinI Gateway: Adding TLS and Basic Auth

By placing an InfinI Gateway in front of Elasticsearch, you can quickly add Basic Authentication and TLS encryption without modifying the ES cluster, enabling unified security for legacy or multi‑version deployments, with step‑by‑step configuration examples, validation commands, and guidance on optional HTTP fallback.

Basic AuthElasticsearchINFINI Gateway
0 likes · 11 min read
Secure Elasticsearch with a Single InfinI Gateway: Adding TLS and Basic Auth
DataFunSummit
DataFunSummit
Feb 13, 2025 · Information Security

Building and Optimizing a Comprehensive Security System: Practices, Innovations, and Future Outlook

This article presents a detailed walkthrough of constructing a robust security architecture, covering single‑person security team strategies, risk perception and quantification, rapid incident response, automated detection, precise strike mechanisms, deterrence tactics, and forward‑looking plans for intelligent, data‑driven risk management.

Security architectureautomationfraud detection
0 likes · 21 min read
Building and Optimizing a Comprehensive Security System: Practices, Innovations, and Future Outlook
Code Mala Tang
Code Mala Tang
Feb 13, 2025 · Backend Development

Node.js 23.7.0 Highlights: TypeScript Integration, FS Glob Boosts, and Performance Gains

Node.js 23.7.0 introduces professional‑grade TypeScript integration with improved error handling, stronger fs module glob patterns with exclusion options, an upgraded test runner, enhanced SQLite support, security and encryption updates, worker thread improvements, performance gains, and detailed migration guidance for developers.

Node.jsTypeScriptfilesystem
0 likes · 3 min read
Node.js 23.7.0 Highlights: TypeScript Integration, FS Glob Boosts, and Performance Gains
php Courses
php Courses
Feb 13, 2025 · Information Security

Comprehensive PHP Security Best Practices: Dependency Management, Session Hardening, CSRF Protection, Input Validation, Type Declarations, Prepared Statements, Error Handling, and Security Testing

This article presents a thorough guide to securing PHP applications by managing Composer dependencies, hardening session handling, implementing CSRF defenses, sanitizing all inputs, enforcing strict type declarations, using prepared statements for database access, concealing sensitive error details, encapsulating critical operations, and incorporating security‑focused testing.

CSRFInput ValidationPHP
0 likes · 16 min read
Comprehensive PHP Security Best Practices: Dependency Management, Session Hardening, CSRF Protection, Input Validation, Type Declarations, Prepared Statements, Error Handling, and Security Testing
AntTech
AntTech
Feb 12, 2025 · Information Security

Selected Ant Group Papers Presented at NDSS 2025

The 2025 NDSS conference in San Diego featured five Ant Group papers covering secure forensics for compromised TrustZone, privacy‑preserving inference for large Transformers, LLM‑driven shell command explanation, a scalable randomness beacon protocol, and enclave construction within confidential virtual machines.

Confidential ComputingNDSSShell Command Explanation
0 likes · 9 min read
Selected Ant Group Papers Presented at NDSS 2025
Efficient Ops
Efficient Ops
Feb 11, 2025 · Information Security

Why Orion-Visor Is the Modern Bastion Host Redefining Secure Operations

This article explains the critical role of bastion hosts for network security, introduces Orion-Visor’s key features such as asset management, web‑based SSH and SFTP, batch operations and scheduled tasks, and provides step‑by‑step installation and configuration instructions.

InstallationOrion-Visorbastion host
0 likes · 4 min read
Why Orion-Visor Is the Modern Bastion Host Redefining Secure Operations
FunTester
FunTester
Feb 11, 2025 · Fundamentals

Reconsidering Java Serialization: Challenges and Modern Alternatives

Java serialization, while convenient for object persistence, suffers from security vulnerabilities, versioning issues, performance constraints, and difficulties handling complex object graphs, prompting developers to evaluate alternatives such as JSON, Protocol Buffers, and Apache Avro, each offering distinct trade‑offs in readability, efficiency, and safety.

Apache AvroJavaPerformance
0 likes · 9 min read
Reconsidering Java Serialization: Challenges and Modern Alternatives
Sanyou's Java Diary
Sanyou's Java Diary
Feb 10, 2025 · Backend Development

10 Essential Backend Optimization Techniques Every Developer Should Master

This comprehensive guide explores ten critical backend optimization strategies—from defensive validation and batch N+1 query elimination to asynchronous processing, parallel execution, caching, connection pooling, compression, message queuing, and design patterns—providing practical examples, Go code snippets, and best‑practice insights to boost performance and reliability.

Design PatternsPerformance Optimizationbackend development
0 likes · 32 min read
10 Essential Backend Optimization Techniques Every Developer Should Master
Baidu Geek Talk
Baidu Geek Talk
Feb 10, 2025 · Artificial Intelligence

How Baidu Cloud Slashes Inference Costs: DeepSeek Model Optimizations Unveiled

Baidu Cloud's Qianfan platform launched DeepSeek‑R1 and DeepSeek‑V3 with ultra‑low inference pricing, leveraging advanced engine performance tweaks, a split Prefill/Decode architecture, and comprehensive security measures that together boost throughput, cut costs, and ensure enterprise‑grade reliability.

AI InferenceBaidu CloudPerformance Optimization
0 likes · 5 min read
How Baidu Cloud Slashes Inference Costs: DeepSeek Model Optimizations Unveiled
Raymond Ops
Raymond Ops
Feb 6, 2025 · Databases

Master MongoDB Config: System Log, Network, Security & More

This article provides a comprehensive overview of MongoDB's configuration file, detailing system log options, process management, network settings, security parameters, storage engine configurations, slow query profiling, replication, sharding, and mongos-specific settings, with explanations of each option and recommended defaults.

DatabaseMongoDBreplication
0 likes · 12 min read
Master MongoDB Config: System Log, Network, Security & More
Top Architect
Top Architect
Jan 30, 2025 · Backend Development

OAuth 2.0 Tutorial with Spring Boot Implementation and Testing

This article introduces OAuth 2.0 concepts, explains its roles and grant types, and provides a complete Spring Boot implementation—including configuration classes, dependency setup, and test endpoints—followed by step‑by‑step testing results with screenshots.

AuthenticationOAuth2backend
0 likes · 13 min read
OAuth 2.0 Tutorial with Spring Boot Implementation and Testing
php Courses
php Courses
Jan 26, 2025 · Backend Development

10 Critical PHP Development Mistakes That Could Break Your Application in 2025

This article outlines ten common PHP development errors—ranging from missing input validation and error handling to outdated versions, insecure session management, and lack of performance optimization—and provides practical recommendations to avoid them and keep applications robust.

PHPPerformancebackend development
0 likes · 5 min read
10 Critical PHP Development Mistakes That Could Break Your Application in 2025
Raymond Ops
Raymond Ops
Jan 24, 2025 · Information Security

Secure Your SSH Login with Google Authenticator: Step‑by‑Step Guide

This tutorial explains how to enhance SSH security by integrating Google Authenticator for two‑factor authentication, covering SSH basics, Google Authenticator overview, Linux installation steps, PAM configuration, client setup on Android, browsers, and Python, with complete command examples.

Google AuthenticatorLinuxPAM
0 likes · 9 min read
Secure Your SSH Login with Google Authenticator: Step‑by‑Step Guide
IT Architects Alliance
IT Architects Alliance
Jan 20, 2025 · Blockchain

How IT Architecture Can Address the Technical Challenges of Web3.0

Web3.0 introduces decentralized, blockchain‑based internet services that create performance bottlenecks, scalability, interoperability, and standardization challenges, and the article outlines how upgraded high‑performance blockchains, edge computing, modular micro‑service designs, cross‑chain solutions, and advanced security measures can help IT architectures meet these demands.

IT architectureWeb3.0blockchain
0 likes · 10 min read
How IT Architecture Can Address the Technical Challenges of Web3.0
Open Source Linux
Open Source Linux
Jan 20, 2025 · Fundamentals

Why Linux Still Struggles on the Desktop: Core Issues Explained

The article examines why Linux desktop environments lag behind modern PCs, highlighting compatibility problems, software distribution challenges, hardware driver gaps, security concerns, and the lack of funding that together create a steep learning curve for non‑technical users.

DesktopHardwareLinux
0 likes · 15 min read
Why Linux Still Struggles on the Desktop: Core Issues Explained
ITPUB
ITPUB
Jan 14, 2025 · Information Security

How a Microsoft Patch Nearly Crashed Linux: Code Review, CFI, and Open‑Source Lessons

A Microsoft‑submitted performance patch for the x86_64 architecture was merged into Linux kernel 6.13 without maintainer acknowledgment, breaking control‑flow integrity and nearly causing a system‑wide failure, prompting swift emergency fixes from Intel and AMD engineers and sparking a broader discussion on open‑source code‑review practices.

CFILinux kernelMicrosoft
0 likes · 5 min read
How a Microsoft Patch Nearly Crashed Linux: Code Review, CFI, and Open‑Source Lessons
php Courses
php Courses
Jan 14, 2025 · Databases

MySQL 8 New Features and Network Communication Course Overview

This course introduces MySQL 8's latest features—including performance optimizations, security enhancements, and new data types—while deeply exploring its network communication mechanisms, advanced optimization techniques, and hands‑on projects to improve database performance and security.

CourseDatabaseMySQL
0 likes · 3 min read
MySQL 8 New Features and Network Communication Course Overview
php Courses
php Courses
Jan 13, 2025 · Backend Development

25 Practical PHP Tips for Performance, Security, and Modern Development

These 25 practical PHP tips cover performance optimization, security best practices, code organization, modern language features, error handling, testing, caching, API development, and debugging, providing developers with actionable guidance to write higher-quality, more efficient, and secure server-side applications.

PHPPerformancebest practices
0 likes · 8 min read
25 Practical PHP Tips for Performance, Security, and Modern Development
Raymond Ops
Raymond Ops
Jan 12, 2025 · Information Security

Master SSL/TLS Certificates: Formats, Generation & OpenSSL Commands

This guide explains common certificate formats (PEM, DER, CRT, CER), shows how to generate a CA key, CSR, and signed certificate with OpenSSL, demonstrates format conversions, and provides commands for inspecting and verifying certificates, all essential for secure operations.

DEROpenSSLPEM
0 likes · 7 min read
Master SSL/TLS Certificates: Formats, Generation & OpenSSL Commands
IT Architects Alliance
IT Architects Alliance
Jan 11, 2025 · Backend Development

Understanding API Gateways: Functions, Implementations, and a Spring Cloud Gateway Case Study

The article explains the rise of microservice architecture, why API gateways are indispensable, details their key functions such as routing, protocol translation, load balancing, caching, and security, compares major implementations like NGINX, Spring Cloud Gateway and Kong, and provides a Spring Cloud Gateway case study with code examples.

MicroservicesRoutingsecurity
0 likes · 18 min read
Understanding API Gateways: Functions, Implementations, and a Spring Cloud Gateway Case Study
Tencent Cloud Developer
Tencent Cloud Developer
Jan 8, 2025 · Backend Development

Best Practices for Designing, Optimizing, Securing, and Maintaining APIs

This guide presents comprehensive best‑practice recommendations for building APIs—defining clear contracts, applying six design principles, optimizing performance through batching, async and caching, enforcing robust security with encryption, signing and rate‑limiting, and ensuring long‑term maintainability via versioning, documentation and structured logging.

API designbackend developmentbest practices
0 likes · 24 min read
Best Practices for Designing, Optimizing, Securing, and Maintaining APIs
Efficient Ops
Efficient Ops
Jan 5, 2025 · Operations

Master Linux Sysadmin: 20 Essential Commands & Solutions Explained

This guide presents 20 practical Linux, security, networking, and Python questions with step‑by‑step command examples, covering bulk image download, file sorting, port monitoring, header retrieval, user account facts, RAID misconceptions, load‑balancer tools, time measurement, rewrite flags, cookie vs session, HTTP versions, common web vulnerabilities, DoS attacks, incident response, TCP handshake, TIME_WAIT optimization, Python range differences, set intersections, and parallel remote execution.

Pythonbashsecurity
0 likes · 15 min read
Master Linux Sysadmin: 20 Essential Commands & Solutions Explained
Architect
Architect
Jan 5, 2025 · Information Security

How to Build a Dynamic IP Blacklist with Nginx, Lua, and Redis

This guide explains how to create a dynamic IP blacklist that blocks malicious crawlers or users by configuring Nginx with Lua scripts and a Redis store, covering requirements, environment setup, design choices, configuration files, Lua code, and advanced usage scenarios.

IP blacklistLuaRedis
0 likes · 9 min read
How to Build a Dynamic IP Blacklist with Nginx, Lua, and Redis
Architecture and Beyond
Architecture and Beyond
Jan 4, 2025 · Backend Development

From ToC to ToB: Key Shifts in SaaS Product Design, Architecture, and Business Logic

This article examines how SaaS products evolve from consumer‑focused (ToC) to enterprise‑focused (ToB) models, detailing differences in target users, pricing, product features, multi‑tenant architecture, scalability, high availability, security, compliance, and API integration strategies required for successful business‑to‑business transformation.

APIToBmulti‑tenant
0 likes · 28 min read
From ToC to ToB: Key Shifts in SaaS Product Design, Architecture, and Business Logic
21CTO
21CTO
Jan 1, 2025 · R&D Management

What Will Shape Open Source in 2025? Rust, New Tools, and Fading Trends

Looking ahead to 2025, this article predicts that Rust will become mainstream in Linux kernel development, emerging tools like jj and uv will reshape version control and Python packaging, while trends such as SBOM, Fair Source licensing, and server‑side WebAssembly are expected to stall, underscoring the resilient yet selective evolution of open‑source software.

Rustpython packagingsecurity
0 likes · 7 min read
What Will Shape Open Source in 2025? Rust, New Tools, and Fading Trends
Java Tech Enthusiast
Java Tech Enthusiast
Jan 1, 2025 · Information Security

Fixing Logback CVE-2023-6378 in Spring Boot 2.7.x

To remediate CVE‑2023‑6378 in a Spring Boot 2.7.x application, you must replace the default logging starter with a direct Logback 1.2.x dependency (e.g., 1.2.13), because Spring Boot 2.7 cannot use Logback 1.3.x due to the removed StaticLoggerBinder class; the only other option is to upgrade the whole stack to Spring Boot 3.x, Logback 1.4.x, and JDK 11.

CVE-2023-6378Dependency ManagementJava
0 likes · 14 min read
Fixing Logback CVE-2023-6378 in Spring Boot 2.7.x
IT Architects Alliance
IT Architects Alliance
Dec 29, 2024 · Fundamentals

Five Common Mistakes in IT Architecture Design and How to Avoid Them

This article outlines five common IT architecture design errors—neglecting connectivity, postponing security, poor compatibility, uncontrolled data duplication, and unsynchronized environments—illustrated with real cases and provides practical strategies to prevent each pitfall and build resilient, efficient systems.

Environment SyncIT architecturecompatibility
0 likes · 11 min read
Five Common Mistakes in IT Architecture Design and How to Avoid Them
dbaplus Community
dbaplus Community
Dec 29, 2024 · Information Security

Why Many Developers Warn Against Using JWTs for Authentication

This article explains what JSON Web Tokens are, outlines their typical usage flow, and critically examines their drawbacks such as size overhead, redundant signatures, revocation challenges, stale data, lack of encryption, and broader security concerns.

AuthenticationJWTSession management
0 likes · 6 min read
Why Many Developers Warn Against Using JWTs for Authentication
IT Architects Alliance
IT Architects Alliance
Dec 25, 2024 · Industry Insights

How IT Architecture Powers the Metaverse: Key Technologies and Future Trends

The article examines how robust IT architecture—encompassing cloud and edge computing, high‑speed networks, AI, blockchain, and security measures—underpins the Metaverse, outlines current core technologies, explores emerging trends, and addresses performance, sustainability, and talent challenges shaping its evolution.

AIEdge ComputingIT architecture
0 likes · 21 min read
How IT Architecture Powers the Metaverse: Key Technologies and Future Trends
Architect
Architect
Dec 23, 2024 · Information Security

How to Implement Enterprise Data Desensitization with MyBatis and Fastjson

This article explains why data desensitization is essential for modern enterprises, compares masking, obfuscation and encryption techniques, and provides step‑by‑step implementations for database, log, and output layers using MyBatis interceptors, Fastjson filters, and Spring MVC configuration.

FastJSONJavaMyBatis
0 likes · 13 min read
How to Implement Enterprise Data Desensitization with MyBatis and Fastjson
php Courses
php Courses
Dec 23, 2024 · Backend Development

Understanding PHP Built-in Objects and Their Practical Use

This article explains what PHP built-in objects are, categorizes them by request handling, file operations, database access, and exception handling, and demonstrates their usage with code examples to write more elegant, secure, and efficient backend code.

DatabasePHPbackend development
0 likes · 5 min read
Understanding PHP Built-in Objects and Their Practical Use
Cloud Native Technology Community
Cloud Native Technology Community
Dec 20, 2024 · Cloud Native

Key Highlights of the Kubernetes 1.32 “Penelope” Release

The Kubernetes 1.32 "Penelope" release, launched on December 11, introduces major enhancements such as improved Dynamic Resource Allocation, pod‑level resource specifications, asynchronous preemption, CEL‑based mutating admission, tighter security controls, graceful Windows node shutdown, full consistency test coverage, and several performance and networking upgrades.

Asynchronous PreemptionDynamic Resource AllocationKubernetes
0 likes · 6 min read
Key Highlights of the Kubernetes 1.32 “Penelope” Release
Radish, Keep Going!
Radish, Keep Going!
Dec 19, 2024 · Information Security

Why “Security Is Our Top Priority” Is Empty Talk—and How to Balance Security with UX

The article critiques hollow security‑first slogans, explores the endless nature of security, the tension between security and user experience, and offers practical risk‑scoring frameworks and phrasing advice for organizations seeking a realistic balance between protection and usability.

Information Securityrisk managementsecurity
0 likes · 10 min read
Why “Security Is Our Top Priority” Is Empty Talk—and How to Balance Security with UX
Huolala Safety Emergency Response Center
Huolala Safety Emergency Response Center
Dec 17, 2024 · Information Security

How Secure Are AI Agents? Risks, Attacks, and Governance Strategies

This article examines the rapid growth of AI agents, outlines their core components and classifications, analyzes a wide range of privacy and security threats—including data leakage, prompt injection, jailbreak, backdoor, hallucination, and memory attacks—and proposes practical governance measures to mitigate these risks.

AI AgentsGovernanceLLM
0 likes · 25 min read
How Secure Are AI Agents? Risks, Attacks, and Governance Strategies
Open Source Tech Hub
Open Source Tech Hub
Dec 17, 2024 · Backend Development

Essential Webman Development Standards and Best Practices

This guide outlines Webman’s latest development conventions, covering PHP version selection, naming rules, memory-resident processes, logging, routing, deployment, controller design, database queries, security measures, and more to help developers write clean, efficient, and secure code.

Database QueriesPHPRouting
0 likes · 22 min read
Essential Webman Development Standards and Best Practices
AntData
AntData
Dec 17, 2024 · Databases

Designing Database Services for Modern Online Business: Scalability, Agility, Security, and Cost Optimization

The article examines how database services must evolve to meet the high‑availability, real‑time response, horizontal scalability, application agility, security compliance, and cost‑optimization demands of modern online businesses, using Ant Group’s multi‑generation architecture and technologies such as distributed middleware, HTAP/HSAP, and polyglot persistence as examples.

Application AgilityDatabase ServicesHTAP
0 likes · 22 min read
Designing Database Services for Modern Online Business: Scalability, Agility, Security, and Cost Optimization
Code Mala Tang
Code Mala Tang
Dec 16, 2024 · Information Security

Avoid These 9 Common Node.js Security Pitfalls and Harden Your Apps

This guide reveals nine frequent security mistakes in Node.js applications—from misconfigured CORS and vulnerable dependencies to weak authentication and missing HTTPS—offering concrete code‑level solutions and best‑practice recommendations to protect your backend.

AuthenticationCORSDependency Management
0 likes · 8 min read
Avoid These 9 Common Node.js Security Pitfalls and Harden Your Apps
Architect's Guide
Architect's Guide
Dec 16, 2024 · Information Security

Understanding the Mechanics of QR Code Login and Token‑Based Authentication

This article explains how QR code login works by describing QR code fundamentals, token‑based authentication, and the step‑by‑step process—including QR generation, scanning, state transitions, and final confirmation—that enables a mobile device to securely authenticate a PC session.

AuthenticationQR codelogin
0 likes · 11 min read
Understanding the Mechanics of QR Code Login and Token‑Based Authentication
MaGe Linux Operations
MaGe Linux Operations
Dec 15, 2024 · Operations

Top Open-Source Tools for Unified Accounts, Automation & Infra Ops

This guide surveys a curated set of open‑source solutions—including LDAP, JumpServer, Ansible, dnsmasq, ApacheBench, PortSentry, Vagrant, Docker, ELK and Smokeping—that together enable unified account management, automated deployment, DNS services, stress testing, security hardening, virtualization, log collection and monitoring for robust operations.

Account Managementautomationinfrastructure
0 likes · 8 min read
Top Open-Source Tools for Unified Accounts, Automation & Infra Ops
php Courses
php Courses
Dec 11, 2024 · Backend Development

Debunking Common Misconceptions About PHP

This article systematically dispels ten widespread myths about PHP—covering threading, project scale, security, modern relevance, usage scope, code quality, performance, object‑oriented support, learning depth, and scalability—showing that modern PHP remains a powerful, secure, and versatile backend technology.

PHPPerformanceWeb Development
0 likes · 8 min read
Debunking Common Misconceptions About PHP
Architecture and Beyond
Architecture and Beyond
Dec 7, 2024 · Information Security

Understanding Multi-Factor Authentication (MFA) and Google Authenticator: Principles, Implementation, and Limitations

This article explains the concepts, importance, various forms, and practical implementation details of MFA and 2FA—including the Google Authenticator TOTP mechanism—while also discussing their limitations, costs, and future directions in modern identity security.

2FAAuthenticationGoogle Authenticator
0 likes · 15 min read
Understanding Multi-Factor Authentication (MFA) and Google Authenticator: Principles, Implementation, and Limitations
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Dec 3, 2024 · Backend Development

Master Advanced Spring Boot 3 Techniques: Output Control, Body Parsing, and Security Context

This article presents a collection of over 50 practical Spring Boot 3 examples, demonstrating how to directly write responses with OutputStream, read request bodies via InputStream, use @Value and SpEL for fixed parameters, combine body and headers with HttpEntity, access security data through @CurrentSecurityContext, and handle Map parameters with @ModelAttribute.

REST APIRequest HandlingSpring Boot
0 likes · 7 min read
Master Advanced Spring Boot 3 Techniques: Output Control, Body Parsing, and Security Context
php Courses
php Courses
Dec 2, 2024 · Backend Development

Using PHP is_executable() to Check File Executability

This article explains the PHP is_executable() function, its definition, parameters, return values, and provides a detailed code example and usage scenarios for checking file executability and improving web application security for developers.

Code ExampleFile PermissionsPHP
0 likes · 4 min read
Using PHP is_executable() to Check File Executability
OPPO Amber Lab
OPPO Amber Lab
Nov 29, 2024 · Information Security

5 Real Android Native Memory Bugs: Heap Overflows, UAF, and Fixes

This article reviews five high‑severity Android native vulnerabilities, detailing how missing length checks, unsigned integer wrap‑around, thread‑lifecycle misuse, unlocked vectors, and out‑of‑scope pointers lead to heap overflows or use‑after‑free bugs, and presents the remediation steps recommended by Google.

AndroidMemory VulnerabilitiesNative
0 likes · 12 min read
5 Real Android Native Memory Bugs: Heap Overflows, UAF, and Fixes
DevOps
DevOps
Nov 28, 2024 · Information Security

The Myths and Challenges of Security Left‑Shift in Software Development

This article examines the origins, questionable cost‑saving claims, and practical challenges of the security‑left‑shift movement, highlighting CISA’s skeptical report, the over‑reliance on tools, and the need for empirical research to validate security integration early in the software development lifecycle.

CISADevSecOpssecurity
0 likes · 11 min read
The Myths and Challenges of Security Left‑Shift in Software Development