纠缠的网
A tangled web
Lucy Maud Montgomery · 初版 1931 年
2人推荐
2位读者提及
5次提及
一切始于贝基姑婆和她那臭名昭著的珍贵财产：一个传奇的传家宝罐子。她去世后，人人都想要它。但新主人的名字要一年后才会揭晓……在接下来的十二个月里，达克和彭哈洛两个家族内部丑闻、争吵和风流韵事层出不穷——而罐子始终是这一切的中心。婚约被解除；终生的相互仇恨绽放成浪漫；多年前分离的恋人重聚。但随后，那个夜晚来临，古怪女族长的遗愿即将揭晓——两个家族都将迎来他们最大的惊喜……
Hacker News 上怎么说
正在加载完整评论……
……比起学习如何正确构建 Web 应用，它更是学习如何攻破 Web 应用的好资源。它会教你几乎所有可分类的漏洞以及如何找到它们。《A Tangled Web》更适合学习前一本书中提到的各种问题的根本原因，以及学习如何预防它们。每章末尾都有极好的实用检查清单，用于……
…better resource for learning to break web applications than for learning to build them properly. It will teach you every about almost every vulnerability that can be classified and how to find it. The Tangled Web is better for learning the underlying causes of various issues presented in the former book and for learning how to prevent them. It has excellent, practical checklists at the end of every chapter for…
……对源代码审查尤其有指导意义。4. Security Engineering（Ron Anderson）补充第 3 点。对于将安全性注入整个 SDLC 以及设计安全软件非常有指导意义。5. 《A Tangled Web》出色的历史背景，以及对许多信息安全主题的高层概述。每个工程师都应该读，即使他们不从事安全领域。6. Gray Hat Python 非常动手……
…Especially instructive for source code review. 4. Security Engineering (Ron Anderson) Supplements #3. Very instructive for injecting security into the overall SDLC and designing secure software. 5. The Tangled Web Excellent historical background and good high level overview of many information security topics. Every engineer should read this, even if they don't work in security. 6. Gray Hat Python Very hands…
你可以试试《A Tangled Web》。我只读了前几章，但至少那些看起来不错。http://nostarch.com/tangledweb
You might try The Tangled Web. I've only read a few of the early chapters, but those at least seem good. http://nostarch.com/tangledweb
^^ 证据 A：你想先试试去工作的公司之一 :) 他们可能也会发/你会想读：- Gray Hat Python（用 Python 进行调试和模糊测试）- 《A Tangled Web》（Web 浏览器安全与不安全）- The Art of Software Security Assessment - 圣经，你真的很想读，因为它是基础文本。非常密集，但你读完后会知道如何……
^^ Exhibit A: One of the firms you'd want to try your hand at working for first :) They might also send / you'd want to read: - Gray Hat Python (debugging and fuzzing with Python) - The Tangled Web (web browser security and insecurity) - The Art of Software Security Assessment - the bible, which you really want to read as it's a foundational text. Very dense, but you'll come out of it knowing how…
《The Tangled Web》里我没读到那部分。它确实讲了攻击，但也是一本为开发者加固防御的可靠指南。回到你的问题——nginx 开箱即用就相当稳健，但《The Tangled Web》会涵盖额外的……
I didn't read that out of The Tangled Web. It did cover attacks, but it was also a solid guide on shoring up defenses for developers. To circle back to your question - nginx is fairly robust out of the box, but The Tangled Web will cover extra…