Renfei's Blog 2020 Major Update
By habit I do one major update of my personal site's program every year, and the 2020 one is here. This year's theme is speed — a summary of a year's technical progress and site optimization.
TagAll posts
#Ops
173 posts
More Posts
Page 8 of 18Explaining the DMCA, Using My Cracked-Software Sharing as a Cautionary Tale
Traffic surged a few months ago when I started sharing cracked Mac software. Now the bill is slowly coming due — what goes around comes around. Let me use this as a cautionary tale to explain the Digital Millennium Copyright Act.
What I Learned From Sharing Cracked Software, and Why I'll Slow Down Until I Stop Completely
Sharing cracked software was a new experiment on my personal blog — alongside other experiments like current news, movie sharing, and various IT mirror downloads. Today I'll talk about what I learned from those experiments; I'll cover the others another day.
How I Implement Download Hotlink Protection
Download sites were very popular several years ago, but because bandwidth and traffic were expensive, many download sites began hotlinking — visitors click download on someone else's page but use my server's traffic, causing huge bandwidth theft. So hotlink protection is a required course for download sites.
Digging Further into Who the Past Owners of My Domain Were
Earlier I tried to find out who the past owners of the domain I currently use were, curious about what they had used it for. Following up on 'The Story of My Domain: Digging Through Its Past and Present,' I continue to explore who those past owners were.
Chrome 85 Will Again Hide More Address Bar Info, Trying Not to Show the Full URL
After strengthening the address bar in 2018, Google Chrome hid the HTTP protocol field and the WWW field by default. In Chrome 85, Google again adds a series of new flags aimed at removing the full URL from the address bar.
Running a Website Doesn't Make Money but Loses It? Exposing the Lucrative Gray Industry Protected by the Internet Court: Infringement Claims
With growing copyright awareness and an improving copyright law, plus the establishment of internet courts, a brand-new gray industry was born: infringement claims. The targets are media platforms such as websites, official accounts, and Weibo platforms, with images and fonts as bait for batch lawsuits claiming infringement.
Baidu Officially Shuts Down MIP — Another Project Axed After Bear Palm (Xiongzhang)
Baidu has officially shut down the MIP feature; the MIP entry on the webmaster tools platform is closed, and by June 30, 2020 the MIP Cache service will be gradually retired. Baidu is now pushing mini-programs, and MIP is another project axed after Bear Palm (Xiongzhang). MIP stands for Mobile Instant Pages — a mobile web acceleration protocol launched by Baidu, mirroring Google's AMP (Accelerated Mobile Pages). Its main function is to accelerate mobile web page loading by standardizing HTML code, JS code, and Cache caching.
Pitfalls in Login and Forgot-Password Logic — Don't Reveal That an Account Doesn't Exist
Every system has a login feature, and it's an indispensable battleground that developers, users, and even hackers all target first. The login logic has been discussed a lot online, but there's one pitfall beginners easily forget: the message returned in the login or forgot-password feature reveals whether an account exists.
[Security Advisory] Fastjson <=1.2.68 Remote Code Execution Vulnerability in All Versions
Fastjson has a remote code execution vulnerability; the restriction of the autotype switch can be bypassed, and a chained deserialization attacker can craft a deserialization exploit chain, ultimately achieving remote command execution. This vulnerability itself cannot bypass Fastjson's blacklist restriction; it needs to be combined with a deserialization exploit chain not on the blacklist to complete the full exploitation.
