Coding for fun, for living, for life.
- (Almost) Full-stack developer
- Web for job, Native for self
- Working hard to be a real engineer
It's a English nickname, do not use in Japanese Romaji.
Migrated
Home Page: https://github.com/xd-meal/xd-meal-backend
为了保证安全(阻止彩虹表暴力猜解密码),我们这里使用 SHA + 32 位随机 salt 保证即使管理员也无法反向猜解出密码
bcrypt 相对 SHA 更麻烦一点,性能更差极端情况下(参数设置不合理)加密时间可能长达 80ms以上,node 本身对于这种 cpu 密集的运算能力就十分不友好(node v8 引擎无法在这里识别并在 JIT 优化,所以相比较 java/go 可以慢一个数量级)但是更安全,或许目前SHA已经足够安全?
为什么不添加额外的 configSalt
密码加 salt后 长度已经到达最少 40 位绝大多数的彩虹表并不会包含如此数量的密码
randomString 是否足够随机以保证安全?
randomString 的随机程度并不足够,因为依靠 math.random 这个函数本身随机性存在问题
而 crypto.getRandomBytes 同样有问题,他在高位数部分存在显著的偏移
考虑是否使用 SHA 做 CSPRNG 来创建一个 密码学安全的散列 salt ?
admin 操作是否需要使用 IP + 操作者 + 操作时间记录每一次操作?
因为没有设置上线,所以目前是可以暴力猜解密码的
根据给定餐次范围,给出每个餐次中不同wework_corpid的人数
统计选择餐次范围内的所有已点记录中每种餐品的总数
mongo
(自助可能需要单独解析)
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.