人和吞食者

人和吞食者刘慈欣吞食者 【吞食者】 (《科幻世界》杂志 2002年11月第11期) 一、波江座晶体 即使距离很近,上校也不可能看到那块透明晶体,它飘浮在漆黑的太空中,就如同一块沉在深潭中的玻璃。他凭借晶体扭曲的星光确定其位置,但很快在一片星星稀疏的背景上把它丢失了。突然,远方的太阳变形扭曲……

Continue reading

全频带阻塞干扰

【全频带阻塞干扰】(中国版) (国内未发表,被收入台湾天海文化事业有限公司2003年出版的《爱因斯坦赤道》一书,名称为《全频道阻塞干扰》) 第一章 溏沽前线 在战场电磁干扰形式选择上,本手册主张采用对某一特定频率或信道所进行的瞄准式干扰,而不主张同时干扰一个较宽频带的阻塞式干扰,因为后者……

Continue reading

乡村教师

【乡村教师】 (《科幻世界》杂志 2001年1月第1期) 他知道,这最后一课要提前讲了。 又一阵剧痛从肝部袭来,几乎使他晕厥过去。他已没能气力下床了,便艰难地移近床边的窗口。月光映在窗纸上,银亮亮的,使小小的窗户看上去象是通向另一个世界的门,那个世界的一切一定都是银亮亮的,象用银子和不冻……

Continue reading

鲸歌

(《科幻世界》杂志 1999年6月第6期) 沃纳大叔站在船头,望着大西洋平静的海面沉思着。他很少沉思,总是不用思考就知道怎样做,并不用思考就去做,现在看来事情确实变难了。 沃纳大叔完全不是媒体所描述的那种恶魔形象,而是一副圣诞老人的样子。除了那双犀利的眼晴外,他那圆胖的脸上总是露着甜密……

Continue reading

西洋

[刘慈欣] 西元1420年,非洲,索马利亚,摩加迪沙沿海 这是明朝舰队打算到达的最远的地方,永乐皇帝也只让走到这里,现在,二百多只船和两万多人,静静地等待着返航的命令。 郑和沉默地站在“清和”号的舰首,他面前,印度洋笼罩在热带的暴雨中。四周一片雨雾,只有闪电剌破这一片朦胧时,舰队才在青……

Continue reading

太原之恋

[刘慈欣] 诅咒1.0诞生于2009年12月8日。 这是金融危机的第二年,人们本来以为危机快要结束了,没想到只是开始。社会处于一种焦躁的情绪中,每个人都需要发泄,并积极创造发泄的方式,诅咒的诞生也许与这种氛围有关。 诅咒的作者是一个女孩儿,18岁至28岁之间,关于她,后来的IT考古学家……

Continue reading

如何处理有难度的场景

概述 工作中经常会遇到各种各样的困难,或者是艰难场景,如果处理不好,会对同事,工作,项目造成影响。 常见的一些类型 目标冲突 一个人给出的目标与另一个人共享的目标相冲突, 比如员工的个人职业规划和安排的工作目标有冲突。 角色冲突 当某人要执行一项不属于他们通常的角色或职责的任务时,或者当他们被……

Continue reading

Cacheable SSL Page Found

Issue Cacheable SSL Page Found Risk It is possible to gather sensitive information about the web application such as usernames, passwords, machine name and/or sensitive file locations Cause Sensitive information might have been cached by your browser Fix Prevent caching of SSL pages by adding “Cache-Control: no-store” and “Pragma: no-cache” headers to their responses. Possible solution you can also change the HTTP method from GET to POST if it is NOT a page but a rest API.……

Continue reading

Cookie With Insecure or Improper or Missing SameSite Attribute

Issue Cookie with Insecure or Improper or Missing SameSite attribute Risk Prevent cookie information leakage by restricting cookies to first-party or same-site context, Attacks can extend to Cross-Site- Request-Forgery (CSRF) attacks if there are no additional protections in place (such as Anti-CSRF tokens). Cause Sensitive Cookie with Improper or Insecure or Missing SameSite Attribute Fix Review possible solutions for configuring SameSite Cookie attribute to recommended values for K8s, you may edit the ingress configuration, set samesite value nginx.ingress.kubernetes.io/session-cookie-samesite: "Strict" ……

Continue reading

Blind Sql Injection

Security Risk: It is possible to view, modify or delete database entries and tables Cause: Sanitation of hazardous characters was not performed correctly on user input Fix: Review possible solutions for hazardous character injection Reasoning: The test result seems to indicate a vulnerability because it shows that values can be appended to parameter values, indicating that they were embedded in an SQL query. In this test, three (or sometimes four) requests are sent. The last is logically equal to the original, and the next-to-last is different. Any others are for control purposes. A comparison of the last two responses with the first (the last is similar to it, and the next-to-last is different) indicates that the application is vulnerable. How to fix https://sequelize.org/v5/manual/raw-queries.html make sure to ‘replace’/‘bind’……

Continue reading