57 posts
Weimob stated that this incident severely impacted merchants' operations, and the company's management feels deep self-blame and guilt over it. To address this, Weimob has prepared a 150 million RMB compensation reserve.
Everyone is familiar with train tickets — we've all taken the train. Now tickets are sold under real-name rules, and the ticket carries your ID number, name, and other real-name information. The ID number is masked with asterisks for four digits, but do you think it's safe to throw it away? As a programmer, I want to tell you that a program can quickly compute your possible ID numbers.
Recently I updated my site's code to add the rel=noopener tag to friendly links and external links, so today let's discuss why we use the rel=noopener tag. In fact, this is a security vulnerability — JavaScript provides window.opener to get the Window object that created the window, and that's where the problem begins. Let's take it step by step.
Since you're reading this, you're probably already familiar with Nginx, so I won't repeat its installation and configuration. We'll go straight to integrating Nginx with Naxsi. If Nginx is still new to you — you don't know where the config file is or how to compile — this article isn't for you yet; please get comfortable with Nginx installation, configuration, and compilation first.
Today, for those with no security background, I'll roughly explain how these three types of attacks form. Once you know the principles, you can defend. Since everyone uses different languages and frameworks, this intro focuses on how the attacks form and how to defend — so there's little concrete code; you'll implement it per your own situation.
