How Three Low-Risk Vulnerabilities Become One High
It’s easy to brush off low-risk vulnerabilities as trivial—until they’re combined to create a deep-impact attack.
Aggregator
Transparency International New Zealand
7 years 11 months ago
The role of Government in protecting New Zealand’s important information - Andrew Hampton, Director, GCSB
第二十九期 全国计算机/电子数据司法鉴定机构名录
8 years ago
本期公众号对全国目前登记在案的计算机/电子数据司法鉴定机构进行了整理和汇总。
ASP.NET + jQuery + AJAX 实现用户登录
8 years ago
用户登录在网站中是不可或缺的功能，常见的方法就是使用Form表单将数据提交给后台，后台对帐号密码进行验证从而实现了用户登录。 随着技术的发展，一些网站开
2017SANS网络威胁情报峰会
8 years ago
第五届SANS网络威胁情报峰会最新材料
ASP.NET 从客户端中检测到有潜在危险的 Request.Form 值
8 years ago
起因 今天在添加数据的时候系统抛出了下面这个错误，初步推断，应该是使用了ueditor编辑器传递的数据里面有未转义的html标签造成的。 System.Web.HttpRequestValidationException: 从客户端(de
The Risk Pivot: Succeeding With Business Leadership by Quantifying Operational Risk
8 years ago
Getting the security investments you need often comes down to making your case to management in terms of operational risk.
ASP.NET 使用 FormData 实现 AJAX 上传图片
8 years ago
图片上传在 Web 开发中应用十分广泛，我们平时发朋友圈、发微博都用到了上传图片。正好在项目中用到了 AJAX 上传图片，就顺便更新下博客。 关于 FormData FormData 是为序列化表以及创建
利用Python实现倒序任意整数 - magic_zero
8 years ago
这是很早以前学习C时候做过的一个练习题，题目的要求大概是把用户输入的三位数倒序输出，比如说用户输入123，然后程序应该输出的结果是321。如果遇到用户输入100，那么程序应该输出1。然后我给扩展一下，这个程序来适应于三位数以上的或者三位数以下的。 那么遇到这个问题，我首先的思路就是想办法把用户输入的
magic_zero
藏在照片里的小秘密—Exif元数据
8 years ago
“诶？这张照片是谁手机拍的？”“我的啊”
“骗人！这张照片里元数据记录的厂商和你现在这个不一样！是不是隔壁小妖精的？”
“是用她手机拍的，听我解释啊~“
Friendly Reminder: App Security in the Cloud Is Your Responsibility
8 years ago
Nearly 200,000 servers are still vulnerable to Heartbleed—and the organizations who own them might surprise you.
智能手机相比电脑，谁更安全？
8 years ago
关公战秦琼，还是吊打小朋友？
OpenSSL update, 1.0.2k
8 years ago
Using F5 Labs Application Threat Intelligence
8 years ago
As security professionals, we often feel like we’re fighting a losing battle when it comes to cyber security.
Trends: Adult Cyberbulling is No Laughing Matter
8 years ago
This past year is one for the digital record books. As incredible as it sounds, adults — not those impulsive,...
The post Trends: Adult Cyberbulling is No Laughing Matter appeared first on McAfee Blog.
Toni Birdsong
指尖上的威胁情报——ThreatPinch
8 years ago
最近看到个好玩的东西ThreatPinch，一个开源情报的Chrome插件。
The Humanization of the Security Leader: What CISOs Need to Be Successful
8 years ago
When someone from the IT group gets promoted into security management, a common first lesson is that “geek culture” is ineffective in the boardroom.
第二十八期 新版司法鉴定文书格式的解读
8 years ago
2016年年底，司法部发布了《司法部关于印发司法鉴定文书格式的通知》，其中包含了《司法鉴定委托书》等7种文书格式。本地将就新旧两版的司法鉴定文书的格式规范的区别展开解读。
装了这个主题包，就被拿system shell?
8 years ago
分享一个有意思的远程system提权漏洞。
The 2016 TLS Telemetry Report
8 years ago
In just four short years, encryption estimates have gone from almost non-existent (in the low single digits before 2013) to just over 50% by the end of 2016. How much of a victory is this?