Security
List of Security Response Centers at Major Companies (ALL SRC LIST)
· β˜• 2 min read
1. Industry Standards [TPSA19-22] SRC Industry Security Testing Standard: https://security.tencent.com/announcement/msg/180 2. SRC List No. Launch Time SRC Name 01 2012 TSRC (Tencent) 02 2013 ZSRC (Zhubajie) 03 2013 NSRC (NetEase) 04 2013 KSRC (Kingsoft) 05 2013 JSRC (JD) 06 2013 BSRC (Baidu) 07 2013 ASRC (Alibaba) 08 2013 360SRC (360) 09 2014 YSCR (EZVIZ) 10 2014 CSRC (Ctrip) 11 2014 MISRC (Xiaomi) 12 2014 SSRC (Sina) 13 2014 YSRC (JOYY) 14 2014 SGSRC (Sogou) 15 2014 QSRC (Qunar) 16 2015 VSRC (Vipshop) 17 2015 SNSRC (Suning) 18 2015 PSRC (Ping An) 19 2015 LYSRC (Tongcheng-Elong) 20 2016 SNSRC (Tuniu) 21 2016 JJSRC (Jingji World) 22 2016 DSRC (DiDi) 23 2016 100TALSRC (TAL Education) 24 2016 ESRC (Ele.

How to Integrate Kata into a Kubernetes Cluster
· β˜• 6 min read
1. What Problem Kata Solves Security and isolation are what make Kata Container stand out from Docker Container. Kata Container comes from the merger of the Intel Clear Containers and Hyper runV projects. Intel Clear Containers used Intel VT-x technology to provide containers through lightweight virtual machines, solving the security problem while delivering excellent performance.

Incomplete Data When Using Base64 to Decode JWT Playload
· β˜• 2 min read
When Base64-decoding a JWT, I found that the JSON data was incomplete. This article mainly introduces the relevant knowledge and solves this problem. 1. Introduction to JWT JWT passes authentication by setting Authorization: Bearer <token> in the Header. A JWT Token is a Base64-encoded string joined by dots, something like

Certificates in Kubernetes
· β˜• 3 min read
I am using Kubernetes 1.15.3; the way different versions handle this may vary. 1. About Certificates A root certificate is self-signed A root certificate is issued by itself. Browsers have the CA certificates of common certificate vendors built in. That is why browsers trust the next-level certificates issued by those vendors.

How to Prevent XSS in Web Rich Text
· β˜• 4 min read
1. How XSS Works and Several Common Attack Types An XSS attack is an attack that executes malicious scripts to steal a user’s login state, hijack a session, and so on. The input sources for malicious scripts include Cookies, Post forms, Get requests, HTTP header content, and more. We usually call a code fragment used for an XSS attack an XSS vector.