Aggregator

记录了一次简单的渗透过程，多种工具配合使用。

This is the first in a multi-part blog series on cryptography and the Domain Name System (DNS). As one of the earliest protocols in the internet, the DNS emerged in an era in which today’s global network was still an experiment. Security was not a primary consideration then, and the design of the DNS, like […]

The post The Domain Name System: A Cryptographer’s Perspective appeared first on Verisign Blog.

今天我们将从三个方面来探讨一下MQTT的安全性，分别是登陆认证问题、权限控制问题以及Broker自身安全性的问题。

Freebsd提供了一个有意思的安全功能，fork的进程号可以随机化。

At Akamai, we all contribute to our diverse, inclusive, and engaged culture. One in which we each have a voice and are empowered to have a meaningful impact on our business and its direction. It's by fostering this culture across teams that we're able to achieve the company's guiding principles. For all of us, it means putting our clients, employees and communities front and center in our daily work.

今天在某技术群里看到大家都在讨论一个技术文章，然后就点击去看了下。

Freebsd的jail模型是一个纯粹的沙箱模型，用来限制进程的一些行为，是一种安全机制。

阿里云爬虫风险管理（Anti-Bot Service，简称Anti-Bot）针对原生App端提供安全SDK解决方案。为App提供可信通信、防机器脚本滥刷等安全防护，有效识别高风险手机、猫池、牧场等特征。

在昨日(2021/1/5)，Apache Flink发布安全更新，修复了由蚂蚁安全非攻实验室发现的2个高危漏洞

We considered the shape of the coming year in cybersecurity. Phishing, APTs, malware, old vulnerabilities… it’s not all bad … well, actually, it is.

目录: 一、行业背景 二、Anti-Bot简介 三、Anti-Bot安全SDK SGAVMP逆向分析 四、总结 一、行业背景 爬虫最早源于搜索引擎，它是一种按照一定的规则，自动从互联网上抓取信息数据的脚本程序，“爬虫本身不生产数据，它只是数据的搬运工”。搜索引擎是善意的爬虫，它爬取网站的所有页面，提

从云上攻防入手剖析攻击者的利用手法，进而站在攻击者的视角去思考防御改进，再从体系化的角度谈谈如何建立蓝军（Red Team）并在企业内部付诸实践，最后站在基础架构安全层面介绍一些业界最佳实践及如何从根本上解决常见的攻击风险。

As I reflect on 2020 and the way in which the pandemic affected the business world, what stands out to me is the incredible increase in streaming content consumed on the internet. We've seen launches of some of the highest-profile streaming services to date between late 2019 and 2020. People are continuously streaming content and we need to consider the impact that increased viewership is having on the world. When you sit down to catch a movie or binge watch that latest series, do you consider the effect that streamed content has on the rest of the world? We will continue to see an uptick in carbon emissions from the power required to serve online content: servers, network hardware, and the energy needed to keep it all cool.

At long last, Blue Water Farm is generating revenue! Around 20 acres of our land consists of dense, mature hardwood of oak, maple, and beech, and we were able to contract to sell 65 maple and 25 oak trees to a logging company. I won't be retiring from Akamai any time soon from our logging windfall, but it's nice to see some revenue from our land, and clearing mature trees is a part of good responsible forest management.

​如果团队成员连自己在做的事情都无法清晰理解，就极其容易陷入一种不知道方向何在的迷失中去——你可能根本不知道自己除了手边那些琐碎的工作还需要去思考什么，还需要积累学习什么，以及未来你的方向何在。

ATT&CK框架更新的速度较快，在一年的时间内发布了三次大的更新.