安全实践规范:从注入到密钥管理
安全缺陷的修复成本随发现阶段递增:性能问题可以延后调整,泄露的数据无法收回,被入侵系统的信任损失同样难以恢复。安全控制应前移到编码与代码评审阶段;上线后补充的安全需求,多数是对已发生事故的补救。
11 min read
Loading…
Loading…
Quote of the day · October 26 · 关于意义 · Rick and Morty
Nobody exists on purpose. Nobody belongs anywhere. Everybody's gonna die. Come watch TV?
Notes on Agent runtimes — design decisions laid open: why it is this way, what it costs, and when it stops being true.