140 posts
Firefox announced that Firefox 87 introduces a stricter, more privacy-preserving default referrer policy. From now on, Firefox will trim path and query string information from the Referer header by default, preventing sites from accidentally leaking sensitive user data.
As the web has evolved, more sites are served over HTTPS. The discuz-ucenter-api-for-java library that connects Discuz's UCenter to Java runs into trouble over HTTPS: it's a very old project that hasn't been updated in ages and doesn't support HTTPS endpoints. So I updated it.
This is a decade-old vulnerability in the sudo tool that can grant any local user root access on Unix-based systems, including macOS Big Sur and earlier. Improper operation grants root privileges to arbitrary local users. To trigger it, a user only needs to rewrite argv[0] or create a symbolic link.
Baidu quietly launched another tool: Baidu ZhenZhan, offering site diagnostics including a "Baidu search heat score", browser behavior, site certificate information, site security scanning, and site company information lookups.
Recently it emerged that the domain of the well-known Chinese blog Lu Songsong, lusongsong.com, had its DNS resolution suspended because the site carried content in violation of regulations. After the offending content was removed, the block was lifted and access restored.
An IPA signed with an iOS enterprise certificate can't be listed on the App Store. It can only be distributed out-of-band — for instance, by putting a QR code on your company website that Apple users scan to install. Between the IPA file and the QR code you need a plist file describing your app, and installation goes through the itms-services protocol. That's what this tutorial covers.
Plenty of webmasters wonder how much site ads really earn. I was curious too, but few seem willing to share — maybe because income is a sensitive subject. The big players can't be bothered, and those doing poorly are embarrassed to admit they make a few cents a month. I have no such shame, so let me lay it out for other webmasters: how much can you actually earn running Google AdSense?
Exited just means the container has stopped. The argument is always about the number that follows — 125, 126, 127, 128, 130, 137, 143. Here's where those numbers actually come from.
I've wanted my own membership system since the site launched, but eight years ago I lacked the skill to protect members' accounts from everything out there on the internet, so registration stayed closed. Now, in year nine, it's here: encrypted transmission and storage of passwords, SMS login, TOTP two-factor authentication, login/logout sync with the PHP Discuz forum, automatic lockout on password brute force, and Google's page-behavior bot detection.
I connected my Spring Boot main site with a Discuz! forum so login and logout are synchronized, and member data from Discuz! can be shown back on my site. I also modified the previously open-sourced discuz-ucenter-api-for-java to fit the way Spring Boot is written today.
