Sci-Hub插件没啥用，但《全国图书馆参考咨询联盟》有用。假设某不能公开免费下载的文献在联盟里能搜到，发邮件联系，对方很可能将文献发给你，免费。我不是科研狗，但我们家有一条，所以听说了此事，分享给尚不知道的狗狗们。全国图书馆参考咨询联盟

学校群里家长会在老师面前"积极表现"。若是老师明确要求了的，我一般都很配合，都是一份工作，与人为善。若老师没有明确要求，即便换着花样暗示家长，我也不怎么理会。管不了别人的卷，管好自己的卷，不要一边吐槽内卷，一边又在为卷之事业添砖加瓦，做个逻辑一致的人。

上海解封在即，梦的内容也与时俱进了：昨晚梦到跟队调查一个犯罪窝点但是72小时核酸过期了不能进（？），找到一个扫随申码的自助核酸机（？）但是bug频出卡住了，于是抄出一个笔记本开始现场接线debug（？），还没debug完队友动手了在呼叫增援，于是扔下电脑直接冲了下去...

sigh

简单的口算就可以。 99分解成两个最接近的数11*9，（11/a)*(9*a)=99，11/10<a<10/9。  有理数逼近，最佳工具连分数，这个范围数据有点太简单体现不太出来连分数的威力。更复杂的范围连分数都可以轻松搞定。 11/10=1+1/10 10/9=1+1/9 最佳逼近取a=1+1/(9+1/2)=21/19 99=209/21*189/19。

Re @kasua02 @jonasLyk =D

Mitmproxy2Swagger - Automagically Reverse-Engineer REST APIs Via Capturing Traffic

Re @historydefined è così bello

Re Ave Maria @AndreaBocelli

Con te … partirò

Hmm, the MSRC advisory for CVE-2022-21921 contains no useful information to determine what was fixed and what it does. I long for the days when MSRC a...

Going to make a bug bounty hunting course where I go over everything in my two books but in video form. Probably going to charge around $150 for it . ...

CVE-2022-24967 Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS).

CVE-2022-31796 libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because t...

CVE-2022-1928 Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.

CVE-2022-1927 Buffer Over-read in GitHub repository vim/vim prior to 8.2.

Re @DefConScavHunt @TAIKOPROJECT Synergy.

RT DefCon ScavHunt: Re @defcon @TAIKOPROJECT And we’ll tack on points to the #defconscavhunt if you demonstrate climbing a rope at our table as seen ...

RT Cloud Village: 💥Heads up folks💥 Last week for #cfp submissions at #cloudvillage is here. Submission form - #cfp #infosec #cloudsecurity #defc...

Re @stats_feed @engineers_feed Few seem to realize that China is leading the world in renewable energy generation and electric vehicles. Whatever you ...

Re @aikald1 @xuchonglang2022 整租一居室要快3000SGD了

Lockbit ransomware group claims to have ransomed a hospital in Spain.

vx-underground members @kasua02 and @jonasLyk have unveiled a new process injection technique. You can check out "Nls Code Injection Through The Regis...

Re @vxugpassword ty for ur service m8

Hakoriginfinder - Tool For Discovering The Origin Host Behind A Reverse Proxy. Useful For Bypassing Cloud WAFs!

If you want to make money bug bounty hunting or if you want to learn something new check out my two books where I explain the methodology I use to fin...

Next level. When an org hasn't fixed phishing but is fixing info disclosures. Talk about next level threat modeling.

Re @Bandrel Kek, but if it was, why would you host it in RU? Just saying.

............................................

So my PC tells me that Flipper One . Zero is hosted in RU...?

RT Hacking Articles: Pic of the Day #infosec #cybersecurity #cybersecuritytips #pentesting #oscp #redteam #informationsecurity #cissp #CyberSec

RT Dan: This is huge. S3-compatible storage with no egress fees. You could store 100GB of data and serve to 1,000,000 people and it would cost you $1....

RT Vincent Yiu : What do people do with 64 GB RAM on a laptop?

Re @conor64 The “critics” seek not to critique, but rather to virtue signal. They are out of touch with the people and so lose their credibility wit...

Re @PPathole @EvaFoxU @ICannot_Enough @JohnnaCrider1 Yes

Re @ICannot_Enough @JohnnaCrider1 Weird

CVE-2022-1729: Linux Kernel Privilege Escalation Vulnerability

A New Exploit Method for CVE-2021-3560 PolicyKit Linux Privilege Escalation

Attacks on Cryptocurrency Exchanges

LEAF - Linux Evidence Acquisition Framework

hakoriginfinder: discovering the origin host behind a reverse proxy

Understanding CVE-2022-22972 (VMWare Workspace One Access Auth Bypass)

Rikkei Finance Hack: Explained

Stunner - Tool To Test And Exploit STUN, TURN And TURN Over TCP Servers

HTB: AdmirerToo

EnemyBot malware adds exploits for critical bugs in VMware, F5 BIG-IP

Heap BINARY EXPLOITATION w/ Matt E! (Tcache attack) + target PicoCTF -> Cache Me Outside ,exploit in python (use PWN)

冲冲冲

真正“七六年后银幕第一吻”是《生活的颤音》。不仅时间上更早，吻的也比较正式，不像《庐山恋》那么潦草。这片子的背景是“四五运动”（注意不是“五四运动”）。所以虽然里面有爱情，但气氛不像《庐山恋》那么轻松。这其实是一部彩色片。不过导演故意把某个时间点之前发生的画面都用黑白色调来表 ...全文

因为时运也好，因为才德也好，总之大部分人都会度过默默无闻的一生。但有些人又不甘于默默无闻，总想干点大事。然而，干正经事儿太难了。哪怕是下棋打乒乓球能在小区里排进前三，写个开源软件能吸引二百个用户，都太难了。更别提给祖国建设添砖加瓦为中华民族伟大复兴做贡献了。所以这些不甘于平凡 ...全文