1. Founding Time and Author Founding Time:<span>hashlib</span> module was first released as part of the Python core library with Python 2.5 in September 2006, replacing the older <span>md5</span> and <span>sha</span> modules. Core Developers: Gregory P. Smith: Core Python developer, main implementer of hashlib Python Security Team: Includes cryptography experts like Christian Heimes Open Source Community … Read more
The Botan library is an open-source cryptographic library primarily designed to provide implementations of cryptographic algorithms, formats, and protocols. It is written in C++11 and is licensed under the Simplified BSD License (a permissive open-source license), allowing for extensive commercial and non-commercial use. The goal of Botan is to become the best choice for encryption … Read more
Django is one of the most mature web frameworks in Python, featuring a complete set of functionalities such as built-in ORM, template engine, permission system, and backend management, making it very suitable for building medium to large web applications. One of the most confusing questions for beginners when creating a Django project is: “What are … Read more
If you are new to Rust and notice the version number has changed from <span>1.91.0</span> to <span>1.91.1</span>, a common reaction might be: “Isn’t this just a minor patch? There probably isn’t much to see, right?” However, the official Rust blog makes it clear: 1.91.1 is not about adding new features, but rather urgently fixing two … Read more
Botan is an open-source cryptography library written in modern C++, providing a rich set of encryption algorithms and security protocol support. Below, I will introduce the main features of Botan 3.10.0 and demonstrate how to use it for common encryption operations through practical code examples. 🔑 Comprehensive Guide to the Botan Cryptography Library: From Basics … Read more
1. What is SSTI? SSTI (Server Side Template Injection) is a web security vulnerability where an attacker injects malicious code into a template engine, causing the server to execute unintended operations. Template engines are used in web development to separate user interface from business data, enhancing code reusability and development efficiency. The server uses the … Read more
Mitigating Slow HTTP Denial of Service Attacks on Nginx These attacks exploit the server’s resource allocation for each connection, consuming connection pools, workers, or memory. 1. Mitigation Strategies (Nginx Level Defense) 1. Limit Request Header and Body Timeouts Set reasonable timeout values to prevent long-term connection occupation. http { # Limit the time to read … Read more
Today’s tech world can be described as two extremes— on one hand, Python has introduced a delayed import mechanism that promises to significantly enhance startup speed, while on the other hand, a critical vulnerability in React has been revealed, threatening millions of developers. Meanwhile, a wave of innovative open-source projects is quietly emerging. Let’s take … Read more
Linux User and Group Management: From Creation to Permission Control1. Basics of the Linux User System2. Core User Management Commands3. User Group Management Commands4. Password Management5. User Information Query Commands6. Configuration File Details7. Password Policies and Security8. Practical Cases9. Best Security Practices10. Troubleshooting11. Summary Linux User and Group Management: From Creation to Permission Control In … Read more
Wayland and X11 (also known as the X Window System) are two different display server protocols used to manage graphical interfaces in Linux and Unix-like operating systems. Their main differences lie in design philosophy, architecture, and performance. Here are the key distinctions:1. Design Philosophy and ArchitectureX11: Historical Background:X11 has been the standard display server protocol … Read more