Aggregator

两个多月以前，我写了一篇文章 介绍我是如何优化我的博客的，但是我对于博客的白屏时间仍然不满意。过去一个月我在博客上进行了一系列优化实践，终于成功将博客的白屏时间减少了将近 50%，这篇文章就来记录优化的过程和方案。

个人隐私保护

完结篇：上线与发布，代码重构，绩效考核，OKR，TGIF，20%自由时间，谷歌双雄。

茶飘香，酒罢去，聚朋友，再回楼

The world of user experience and design can teach us to think differently about attackers, vulnerabilities, and users.

一点漏洞发现的思考和实践

Cybersecurity Awareness Month Helps Us All be #BeCyberSmart October is Cybersecurity Awareness Month, which is led by the National Cyber...

The post Cybersecurity Awareness Month Helps Us All be #BeCyberSmart appeared first on McAfee Blog.

本报告部分引自Week in OSINT栏目，每周推荐好玩实用的工具，站点，技巧，文章等，适用于任何领域的研究人员，分析测试人员。

我们可以说公司某个老板是否有良心，但公司本身不存在良心；也可以说某个领导有人情味，但单位同样不存在人情味。公司和员工之间就是一种“等价交换”、“你情我愿”，“愿打愿挨”的契约关系。只有更客观地看待员工与公司的关系，才能更好地去谋划自身发展。

如今各种h5应用场景越来越多也变得越来越复杂，满足了用户的各种需求，但是也存在一些安全方面的问题，小游戏、小程序、招聘网站、旅游都存在登录、注册、支付、交易、信息展示等功能，如果这些业务所依赖的js代码被人轻易的破解哪么应用将面临的安全问题

目录: 一、为什么要对JS代码进行保护？ 二、js代码保护前世今生 三、js虚拟保护方案与技术原理 四、总结 一、为什么要对JS代码进行保护？ 1.1、H5应用场景 由于H5的跨平台优势，大大提高了用户体验，无需下载，只需要点开就可以观看，不需要下载后占据内存，简化流程。在传播的效率上也得到了很大的

银针嘉宾中秋福利来袭！转发并附上你银针安全沙龙的评价，送中秋礼盒~！

As a region, it's very diverse and dynamic, with a lot to experience. Although I'm based in the Beijing office, I have opportunities to collaborate closely with my colleagues in Japan, India, Singapore and Australia. We find synergies and uniqueness in each market, and constantly share ideas and best practices. It's fun, but it's also an enriching learning experience to live and work in such an exciting region.

This was also presented at BSides Singapore 2020. The slides are here and YouTube link is here. The origins of the Shadowbunny A few years ago, around 2016, I went on a relaxing two weeklong vacation. It was great to disconnect from work. I traveled to Austria, enjoying hiking in the mountains, and exploring Vienna. When I came back to the office, the team had placed a giant bunny teddy into my chair.

Career change? Cybersecurity companies are hiring. If you’re thinking career change or career shift, there’s a field that has an...

The post Career change? Cybersecurity companies are hiring. appeared first on McAfee Blog.

JWT brings performance to identity assertion and is being widely adopted, but it’s also garnering the attention of cybercriminals.

本报告部分引自Week in OSINT栏目，每周推荐好玩实用的工具，站点，技巧，文章等，适用于任何领域的研究人员，分析测试人员。

This year one of my goals was to learn about machine learning and artificial intelligence. I wrote about my journey before - including what classes I took and books I read, the models and systems I built and operationalized, threat modeling it to learn about practical attacks and defenses. My goal is to be knowledge enough in the AI/ML space enough to be able to help bridge the gap between research and operational red teaming - by doing practical things with life systems.