On the evening of October 4, 2014, attempts to access Microsoft account login pages from China triggered invalid SSL certificate warnings, as shown: 颁发对象 公用名 (CN) hotmai.com 组织 (O) hotmail.com 组织单位 (OU) <未包含在证书中> 序列号 29 颁发者 颁发者 公用名 (CN) hotmai.com 组织 (O) hotmail.com 组织单位 (OU) <未包含在证书中> 有效期 颁发日期 14-9-23 截止日期 15-9-23 指纹 SHA-256 指纹 7B AC CB 75 4D A5 BA 45 1F C5 FA E5 10 6B CE 22 34 E3 14 0C 8A 3B 05 9B 36 B0 8C 47 C7 C1 97 2D SHA-1 指纹 30 F3 B3 AD C6 E5 70 BD A6 06 B9 F9 6D E2 41 90 CE 26 2C 67 Copied from Chrome. The "issuer common name being only a domain" and "hotmai.com" (missing 'l') indicate this was an SSL man-in-the-middle attack. The fake certificate content:...
Installing Ubuntu on a Macbook Pro
The macOS is indeed beautiful and smooth. However, VirtualBox runs terribly slow on it, and many functions that are simple to implement on Windows or Ubuntu require significant effort on Mac. Additionally, I've seen online articles showing that Ubuntu scores much higher than macOS in UnixBench tests. Therefore, I decided to install Ubuntu on my Macbook. After researching, I found my Macbook is a mid-2012 model (Macbook 9-2). According to Ubuntu's official wiki, Ubuntu can only coexist with macOS on this model – it cannot be installed alone, otherwise boot issues will occur. Seriously? Mac's bootloader and OS are separate! GParted in Ubuntu's live environment shows macOS created three partitions: a 200MB FAT32 EFI boot partition, an HFS+ formatted system partition,...
I Felt the Deep Malice from Baidu
``` Translation Notes: Title : "我感受到了来自百度深深的恶意" → "I Felt the Deep Malice from Baidu" (Captures the emotional tone and specifies "Baidu" as the source of malice) Categories : "一图流" → "One-Picture Post" (Common translation for image-focused blog/forum content) Tags : "[百度]" → "[Baidu]" (Proper noun retained without translation) Structure Preservation : Frontmatter formatting (e.g., --- , key-value pairs) unchanged Image path ( /usr/uploads/... ) and HTML tag syntax preserved Untranslated elements: date format, image filename ( wow.PNG ), technical paths All non-text elements (dates, URLs, filenames) remain intact per Markdown preservation rules....
Jackie Chan Sends Jaycee Chan Flying 5 Meters: Are You Kidding Me?
According to NetEase News http://ent.163.com/14/0820/20/A449AUVV00031H2L.html , Jackie Chan angrily struck his son upon seeing him, sending Jaycee Chan flying 5 meters through the air. Knocking a grown man 5 meters away? Truly a martial arts family! Let's calculate this using high school physics knowledge first, neglecting air resistance. Method provided by a classmate. If air resistance is neglected, Jackie Chan could kick a soccer ball 700 meters. What is the national team coach doing? Hurry and recruit Jackie Chan to play soccer! With air resistance factored in, a distance of 300 meters (estimated) is still incredibly impressive. Moreover, the force behind Jackie Chan's kick to Jaycee would need to be even stronger. Actually, I just want to ask one thing:...
Using Font Awesome Icon Fonts
Font Awesome is an open-source icon library. Its latest version 4.1 provides 439 vector icons that can match screens of various sizes and resolutions. It exists as a font, and a single 71KB file contains all these icons. These icons feature a unified style and can be conveniently used in various contexts. Installation First, download Font Awesome: https://fortawesome.github.io/Font-Awesome/assets/font-awesome-4.1.0.zip Then unzip the file and upload its contents to your website. Add the following code in the <head> section of your webpage: < link rel = "stylesheet" href = "http://your-website/folder/font-awesome/css/font-awesome.min.css" /> This completes the installation. Usage https://fortawesome.github.io/Font-Awesome/icons/ provides a reference table of icon class names....
Adding an Easter Egg in "Developer Tools"
In Chrome Developer Tools, there's a section called the "Console" where we can add some Easter egg messages, for example: Welcome to Lan Tian @ Blog. If you can see these lines, then you definitely don't have a girlfriend. These messages can be output using JavaScript with the following implementation code: if ( window . console ){ var cons = console ; if ( cons ){ cons . warn ( '%cWelcome to Lan Tian @ Blog.' , 'color:#09f' ); cons . warn ( 'If you can see these lines,' ); cons . warn ( 'then you definitely don \' t have a girlfriend.' ); } } When cons.warn takes only one parameter, it outputs that sentence in the console. If it takes two parameters and the first parameter (the message) starts with %c , then the second parameter is CSS code. Using cons....
Configuring and Enabling SSL and SPDY Access in nginx
Latest news from the CloudFlare blog ( http://blog.cloudflare.com/google-now-factoring-https-support-into-ranking-cloudflare-on-track-to-make-it-free-and-easy ) indicates that Google may factor in SSL support as a positive ranking signal. Therefore, I've enabled SSL for my blog. Applying for a Certificate SSL requires a certificate on the server side. It's best not to generate this certificate yourself, as most browsers will flag it as untrusted. StartSSL is currently the only trusted certificate authority that issues free SSL certificates recognized by most browsers. You can follow the steps in this article: http://www.freehao123.com/startssl-ssl/ . In practice, since StartSSL connections can be slow, following the wizard might cause the process to hang. If it hangs,...
Debian VPS Setup for Sending Emails via SMTP
In a blog, when the author replies to a visitor's comment, it's difficult for the visitor to notice the reply unless they revisit the page. However, with the comment reply email notification feature, visitors receive an email when the author or another visitor replies to their comment, allowing them to promptly learn about the response. In the widely used WordPress blog system, emails are typically sent via the system's default sendmail, which often ends up in spam folders. Therefore, we usually opt for email services like Tencent, Microsoft, or Google that provide domain-specific email solutions, which require sending emails via SMTP. The issue is that sendmail doesn't natively support SMTP, though this can be resolved using plugins within the blog system. However,...
Typecho Display Commenter Country and Browser
Due to the scarcity of plugins for Typecho, I couldn't find one that displays commenters' countries and browsers, so I had to implement it myself. The code is modified from the WordPress plugin Show UserAgent. Download page: https://wordpress.org/plugins/show-useragent/ Prerequisite: Your theme uses custom comment code instead of Typecho's default comment display. Generally, themes meeting this requirement will have code like the following in comments.php or functions.php: <?php function threadedComments ( $comments , $options ) { //blablabla ?> After downloading the Show UserAgent plugin, extract it. Rename the "flags" folder to "country", the "browsers" folder to "browser", and the "ip2c" folder to "lib". Upload these to your theme folder on the server. (Renaming is optional,...
【Rumor Debunked】SAE Domain Forgotten to Renew, Snatched by GoDaddy
Update: SAE has officially debunked the rumor. http://weibo.com/1662047260/Bg8rZ0sGN SAE is Sina's cloud computing platform and one of the earliest cloud platforms in China. It has been running relatively well, but recently they made a big mistake: they forgot to renew the domain name sinaapp.com, which is used to run websites on SAE, and it has been deleted. Moreover, it seems they won't be able to get the domain back anytime soon because the foreign domain registrar GoDaddy quickly snatched the domain upon expiration and renewed it until 2020. No one knows how much GoDaddy will ask for this domain. $ whois sinaapp.com Whois Server Version 2.0 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic....