Logo Ricky
  • Home
  • About
  • More
    Skills Experiences Education Projects
  • Posts
  • Notes
  • Activities
  • Running
  • English
    English Chinese
  • Dark Theme
    Light Theme Dark Theme System Theme
Logo Inverted Logo
  • Tags
  • AI
  • Ansible
  • APP
  • BASH
  • Browser
  • Byte
  • Chart
  • Checklist
  • Chrome OS
  • CI
  • Cloudflare
  • Command Line
  • Config
  • Container
  • CURL
  • Data
  • Debug
  • Docker
  • Emoji
  • EMQX
  • GIN
  • Git
  • Github
  • Gitlab
  • Go
  • Golang
  • Google
  • GraphQL
  • HTTP
  • Infra
  • Infrastructure
  • Introduction
  • ITerm2
  • Kubernetes
  • Leetcode
  • Lightweight
  • Linux
  • Llm
  • Lua
  • Machinelearning
  • MacOS
  • Markdown
  • MQTT
  • Network
  • Nginx
  • Ollama
  • Prometheus
  • Protobuf
  • Proxy
  • Push
  • Python
  • QRCode
  • Redis
  • Regex
  • Security
  • SFTP
  • SHELL
  • Slides
  • Snow
  • Software
  • Ssh
  • String
  • Switch
  • Synology
  • Terminal
  • Timeout
  • Travel
  • Tunnel
  • URL
  • Video
  • Visualization
  • VScode
  • Web
  • Youtube
  • Zero Trust
  • 台語
Hero Image
I use Zip Bombs to Protect my Server

I use Zip Bombs to Protect my Server What happens is, they receive the file, read the header that instructs them that it is a compressed file. So they try to decompress the 1MB file to find whatever content they are looking for. But the file expands, and expands, and expands, until they run out of memory and their server crashes. The 1MB file decompresses into a 1GB. This is more than enough to break most bots. However, for those pesky scripts that won’t stop, I serve them the 10MB file. This one decompresses into 10GB and instantly kills the script.

Saturday, May 3, 2025 Read
Hero Image
Objective-See: 一个关于 Apple 设备隐私与安全的开源项目组织

Objective-See: 一个关于 Apple 设备隐私与安全的开源项目组织 今天搜小工具的时候发现他们做了一堆 macOS 上的开源软件,基本都是和隐私与安全相关的。 KnockKnock: 查看你的 Mac 上有哪些后台进程、守护进程、启动项、内核扩展、登录项、浏览器插件等等。能看到的比那个「Login Items」详细的多(有的软件通过其他方式自启动) LuLu: 一个开源的 macOS 上的网络防火墙,可以让你详细的控制每个软件的网络连接。(类似 Hands Off!) TaskExplorer: 一个增强版的任务管理器,可以看到应用的签名、打开的文件、网络连接等等,还可以根据 sha256 自动帮你搜索 VirusTotal 结果。 Do Not Disturb: 可以阻止你的 Mac 被打扰(没错),当你的 Mac 被别人打开盖子时可以发送警告、执行脚本、检测设备变化之类的。 BlockBlock: 可以阻止后台的持久化安装,RansomWhere 可以检测文件被加密的行为,还有一些杂七杂八的独立工具。 https://objective-see.org

Wednesday, November 13, 2024 Read
Hero Image
Supply chain attack

Go articles 提高警惕,供应链攻击就在你我身边 github.com/siruspen/logrus false github.com/sirupsen/logrus true

Friday, September 13, 2024 Read
Hero Image
Container security fundamentals

Container security fundamentals

Wednesday, October 4, 2023 Read
Navigation
  • About
  • Skills
  • Experiences
  • Education
  • Projects
Contact me:
  • zeyanlin@outlook.com
  • linzeyan
  • Ricky
  • Ricky
  • Ricky