57 posts
According to foreign media ZDNet, a Huawei L20 chief security expert published a Linux kernel hardening patch called HKSP on GitHub. Interestingly, the patch was quickly found by the development team grsecurity to have an "easily exploitable" vulnerability, immediately sparking heated discussion.
ip.renfei.net pairs with DDNS dynamic DNS resolution for resolving dynamic IPs. In a dynamic-IP environment, it conveniently updates domain resolution records in time. On Linux, use curl ip.renfei.net to quickly query the public outbound IP. In a browser, use JavaScript to request ip.renfei.net to get the user's public IP address.
You can't directly see the public IP on a computer or server—only the internal IP is visible—so a program cannot know the address of its Internet exit. I wrote another app to obtain the public IP address. It is implemented using serverless function compute, with good availability and speed, so I'm sharing it for everyone to use.
Since you're reading this, you're probably already familiar with Nginx, so I won't repeat its installation and configuration. We'll go straight to integrating Nginx with Naxsi. If Nginx is still new to you — you don't know where the config file is or how to compile — this article isn't for you yet; please get comfortable with Nginx installation, configuration, and compilation first.
Today, for those with no security background, I'll roughly explain how these three types of attacks form. Once you know the principles, you can defend. Since everyone uses different languages and frameworks, this intro focuses on how the attacks form and how to defend — so there's little concrete code; you'll implement it per your own situation.
