nsa whistleblower

#-----------------------------------------------------------------------Discovery service start, stop immediately, find information on the Internet, find the installation to disable SELinux before installing MySQL, the steps are:1. Turn off SELinux and restart the system;2. Install MySQL (MySQL server should be able to boot up);3. Enable SELinux, restart the system, and then MySQL server will start normally.To enable the Disable SELinux method is:Vi/etc/selinux/config (also some people say is th

about 30-40%.6. Improve Linux Exim server performanceThere are many ways to improve server Exim performance, one way is to use the DNS cache daemon, which reduces the bandwidth and CPU time required to resolve DNS records, and the DNS cache improves network performance by eliminating the need to find DNS records every time from the root node, Djbdns is a very powerful DNS server with DNS caching capabilities, DJBDNS is more secure than the BIND DNS server, performs better, can be downloaded dir

somewhat insecure), or command-line commands, so memory usage can be reduced by about 30-40%.6. Improve Linux Exim server performanceThere are many ways to improve server Exim performance, one way is to use the DNS cache daemon, which reduces the bandwidth and CPU time required to resolve DNS records, and the DNS cache improves network performance by eliminating the need to find DNS records every time from the root node, Djbdns is a very powerful DNS server with DNS caching capabilities, DJBDNS

How to protect your Linux operating system Guide In this modern time, the security of Linux operating system is very important. But you have to know how to do it. A simple antimalware software is not enough, you need to take other measures to work together. Then try these methods. using SELinuxSELinux is used to secure Linux, and with it, users and administrators can gain more control over access control. SELinux adds finer granularity control to access control.

CentOS system quickly shuts down SELinuxSELinux is an enforced access control (MAC) security system based on the domain-type model (DOMAIN-TYPE), which is written by the NSA and designed into kernel modules, and some of the corresponding security-related applications have been patched by SELinux, and finally there is a corresponding security policy. Although the CentOS system is relatively safe and stable compared to the other. My experience in long-

SELinux (security-enhanced Linux) is the United States National Security Agency (NSA) implementation of mandatory access control, is the most outstanding new security subsystem in the history of Linux. Under the restriction of this access control system, the process can only access files that are needed in his tasks. SELinux is installed on Fedora and Red Hat Enterprise Linux by default.Although SELinux is very useful, in most cases we turn it off bec

Configure Nginx today and then always prompt permission, clearly gave 777 permissions. Always still not, re-installed a few times, the last thought may be the result of SELinux. Just turn off SELinux and everything is fine.It's not clear what SELinux is, it's just that the security Linux is meant to make Linux more secure, but this thing can cause some problems. So a lot of people turn it off first.SELinux Introduction.SELinux is an enforced access control (MAC) security system based on the doma

0 des IntroductionIn the late the 1960s, IBM established a Computer cryptography research project by Horst Feistel. The project was concluded in 1971 after the design of the algorithm Lucifer. Lucifer was sold to Lloyd's in London for use in a cash-distribution system developed by IBM. Lucifer is a group cipher with a packet length of 64 bits, a key length of 128 bits, and a Feistel structure . Because Lucifer was very successful, IBM decided to develop a commercial cryptographic product suitabl

This article is a way to calculate the length of the message for Sina Weibo. Yes (please follow the Community Convention and enter 119 words). Copy Code code as follows: var getmessagelength = (function () { var bytelength = function (b) { if (typeof B = "undefined") { return 0; } var a = B.match (/[^x00-x80]/g); return (B.length + (!a? 0:a.length)); }; return function (message) { message = Message | | ''; message = Message.replace (/rn/g, "n"); var c = 41, d = 140, e

characters, same as MD4. MD5 is more complex than MD4, and slower, but safer, and better at resistance to analysis and differentiation. (3) SHA-1 and others The SHA1 is designed by the NIST NSA to work with DSA, which produces a 160bit hash value for inputs that are less than 264 in length, and therefore has a better anti-poor (brute-force) nature. The SHA-1 design is based on the same principle as the MD4 and imitates the algorithm. The applicati

Tag: Run is not required for reference require NSA BSP STS EXCEHow to annotate things: @TransactionalWhen marked in front of a class, all methods in the marked class are handled by the object, for example:1 @Transactional public class Testservicebean implements Testservice {}When certain methods in a class do not require things:1 @Transactional 2 public class Testservicebean implements Testservice { 3 private Testdao DAO; 4 Public void Set

by the NIST NSA to be used with the DSA, which produces a hash value of 160bit in length for inputs of less than 264, thus providing better anti-brute-force. The SHA-1 design is based on the same principles as the MD4, and mimics the algorithm.A hash table inevitably conflicts (collision) Phenomenon: keyword may get the same hash address as Key1≠key2, and hash (key1) =hash (Key2) for different types. Therefore, when building a hash table, you should

, before even happened to hack bitcoin wallet client to get Bitcoin event.To avoid this problem, someone has come up with a new way of creating a Bitcoin key and then remembering it in your own mind. the way to generate a Bitcoin key is not difficult, the initial key is just a string of 256 bits of binary digits, toss more than 200 coins can be obtained. But to remember that more than 200 0 and 1 is too complex, the key to the concept of the brain purse is to use the hashing algorithm SHA-256 th

encryption mode, some of the encrypted traffic can be secretly decrypted. For more information, please refer to the above link. A new version of the browser client can mitigate bease attacks. It is recommended that you disable all TLS 1.0 passwords and only use RC4. However, [RC4 has an ever-increasing list to prevent attacks], and (http://www.isg.rhul.ac.uk/tls/) Many of them intersect theory with reality. And that's why the NSA has cracked the RC4

platform. And Valve also created its own Open-source operating system--steam os--to create a Linux based gaming platform. By the end of 2015, its partners had started to market the Steam OS-equipped machines. a release for privacy: Tails Privacy protection has become an important issue in the years when there is a lot of monitoring and marketers tracking that anonymous tracking of target content is usually acceptable. If you want to get out of the monitoring and tracking of government or mar

in this directory(7)/selinux:selinux is a domain-type model (DOMAIN-TYPE)-based mandatory access control (MAC) security system, which is written and designed by the NSA as a kernel module included in the kernel, and corresponding security related applications are also SElinux patches, Finally, there is a corresponding security policy.(8)/etc/: Global configuration file storage directory. Systems and programs can generally be configured by modifying t

So, what is a cloud fortress machine? Generally speaking, the operation of the fortress host is a powerful defense and security audit capabilities of the server. Based on the concept of springboard, as a security audit monitoring point in the internal and external network, in order to achieve the security of all sites to focus on a server to solve, thus saving time and effort. At the same time, the operation of the fortress host also has, the operation of the remote logins for the central manag

OBJECTIVE-C implementation of MD5 and SHA1 algorithm is relatively simple, you can directly call the system's C/s + + shared library to implement the callMD5 is the message Digest algorithm 5 (Information-Digest algorithm 5), which is used to ensure complete consistency of information transmission. is one of the most widely used hashing algorithms in computersThe SHA, Secure Hash algorithm (safe hashing algorithm) is a series of cryptographic hash functions issued by the National Institute of St

Public key pinning is a certificate chain must contain a public key in a whitelist, which means that only the certificate issuing authority (CA) that is listed on the whitelist can issue a certificate for a domain *.example.com, not any CA stored in your browser can be issued for them. This article describes the background of this mechanism and provides examples of configurations on Apache, LIGHTTPD, and NGINX.HTTP Public key fixed extension Use the bank you use as an example, and it has been u

hash function mainly has the following two points: one is the one-way of function, the other is the randomness of function innuendo. Two, common hash function Now commonly used several hash algorithms have MD-5, SHA, etc., we focus on the SHA algorithm to explain this kind of algorithm: SHA (Security Hash algorithm) is the United States NIST and the NSA designed a standard hash algorithm, SHA for digital signature of the standard algorithm in the