April, 2009的归档


April
24th
2009

24款别出心裁的马克杯

创意无限 没有评论

评分: 很差劲不怎样还可以还不错太棒了
Loading ... Loading ...

1、笑脸杯Smilecups

Psyho工作室设计的创意十足的笑脸杯。

mugs01

2、馋嘴P先生杯 Mr.P Lick Mug

mugs02


April
23rd
2009

关闭Apache的目录浏览功能

实用技巧 没有评论

评分: 很差劲不怎样还可以还不错太棒了
Loading ... Loading ...

默认情况下,Apache是打开目录浏览功能的,其配置文件/etc/httpd/conf/httpd.conf中有如下参数:

Options Indexes FollowSymLinks
……

也就是说,在目录下没有默认首页面(如:index.html index.php等)时,可以让用户直接浏览web目录架构,这可能会导致一些重要的目录或配置文件被公开。
通常在Web应用上也会做一些安全考虑,一些目录下会有类似的文件:

# cat inc/index.php
<?php
die (’Access Denied’);
?>
这样,可以避免用户直接浏览该目录时,看到整个目录结构。但如果访问它下面的子目录就没什么作用了,所以,这还是不太安全。

安全起见,我建议还是把Indexes选项关闭比较好,方法有两种:


April
16th
2009

你是一个好的IT安全顾问吗

信息安全 没有评论

评分: 很差劲不怎样还可以还不错太棒了
Loading ... Loading ...

为公司找寻合适的IT安全顾问有一点像找寻一个好的家庭医生,你需要聘用的人必须是聪明的、理解能力强的、分析问题深刻的,并且还要具有良好的沟通能力。想要知道你面试的人是否清楚其专业领域的知识,你就必须提出一些别出心裁的并且棘手的问题来考他们。

以下提供的十个问题可以帮助你来找寻合适的IT安全顾问:


April
14th
2009

斯诺克吃库击球攻略

Snooker 没有评论

评分: 很差劲不怎样还可以还不错太棒了
Loading ... Loading ...

吃库击球是台球中比较难的技术,在9球和16球中吃库击球入袋应用比较多,而在snooker中虽然吃库击球入袋不多,可是用这种方法来解球还是比较常见和实用。本文包括了大多数吃库的技巧,但是有一些在snooker中不太常用的技巧就没有写出来,比如加塞母球撞目标球目标球吃库后的路线方面的技巧没有写出来,简单的说就是加塞翻袋。
理论可以帮助你建立知识体系,但是要真正掌握一定要苦练。


April
1st
2009

Take Steps to Avoid April 1st Virus

信息安全 没有评论

评分: 很差劲不怎样还可以还不错太棒了
Loading ... Loading ...

The Conficker worm, a nasty computer infection that has poisoned millions of PCs, will start ramping up its efforts Wednesday to use those machines for cybercrimes. It’s unclear whether everyday PC users will even notice, but this is as good an excuse as any to make sure your computer is clean.

There are some easy ways to figure out whether a computer has the Conficker worm, and free tools available for getting rid of it.

One scary thing about Conficker is that it spreads without human involvement, moving from PC to PC by exploiting a security hole in Microsoft Corp.’s Windows operating system. The hole was fixed in October, but if your computer doesn’t get automatic updates from Microsoft, you could be vulnerable.

Lots of computer worms disable antivirus software outright, which can be a tip-off that something is wrong. But Conficker doesn’t do that. Instead, Conficker blocks infected PCs from accessing the antivirus vendors’ and Microsoft’s Web sites, so victims won’t get automatic updates and can’t download the Conficker removal tools that those companies have developed.

So see what Web sites you can visit. If you can navigate the Internet freely except for sites owned by Microsoft or antivirus vendors such as Symantec Corp., McAfee Inc. or F-Secure Corp., your PC might have Conficker or a similar bug.

Fixing the problem gets a little trickier.