惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Google DeepMind News
Google DeepMind News
爱范儿
爱范儿
J
Java Code Geeks
L
LangChain Blog
V
V2EX
大猫的无限游戏
大猫的无限游戏
S
SegmentFault 最新的问题
博客园 - Franky
Microsoft Azure Blog
Microsoft Azure Blog
Jina AI
Jina AI
Blog — PlanetScale
Blog — PlanetScale
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
The Cloudflare Blog
博客园 - 司徒正美
B
Blog
G
Google Developers Blog
Stack Overflow Blog
Stack Overflow Blog
罗磊的独立博客
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Apple Machine Learning Research
Apple Machine Learning Research
Engineering at Meta
Engineering at Meta
MyScale Blog
MyScale Blog
有赞技术团队
有赞技术团队
Hugging Face - Blog
Hugging Face - Blog

Stonecharioteer on Tech

I Traced My Traffic Through a Home Tailscale Exit Node What Was I Reading Last? In Three Not-So-Easy Pieces Dogfooding Is Hard Code blocks in your books, finally GoForGo v0.9.0 Merrilin - We built an app to read books I use a Macbook now Data Structures & Algorithms - Preparing for Interviews Using a local DNS namespace for local service discovery Direction KOllector - Publishing KOReader Highlights gbt: branches touched in the last 24 hours A Soiree into Symbols in Ruby Some Smalltalk about Ruby Loops Ruby Blocks Returning from Ruby Blocks, Procs and Lambdas My Linux Laptop Finally Works: How Claude Helped Me Fix Years of Annoyances TIL: Watchexec - Modern File Watching for Development Workflows A Less Busy Mind GoForGo - Learn Go through live examples Migrating My Old Blog to Hugo with Claude The Qtile Window Manager: A Python-Powered Tiling Experience Read the RFCs that Built the Internet Py-x-Protobuf - Or How I Learned to Stop Worrying and Love Protocol Buffers Python Reverse a List New Beginnings Leaving ChainSafe Systems Screen Lock for Cinnamon Desktop using Zenity and Terminal Commands Crews Not Teams A System for Getting Better at LeetCode
TIL: Benford's Law, Web Security Headers, Event Sourcing,...
2021-05-01 · via Stonecharioteer on Tech

Benford’s Law - Statistical Fraud Detection

Benford’s law - Wikipedia

Fascinating mathematical principle used in fraud detection and data analysis:

The Principle:

In many real-world datasets, the digit 1 appears as the first digit about 30.1% of the time, while 9 appears only 4.6% of the time. This follows a specific logarithmic distribution.

Applications:

  • Fraud Detection: Accounting fraud often violates Benford’s Law
  • Election Auditing: Detecting manipulated voting data
  • Scientific Data: Validating experimental results
  • Financial Analysis: Spotting suspicious financial reporting

Why It Works:

Natural datasets often span multiple orders of magnitude, creating this counter-intuitive but mathematically predictable pattern.

CSRF, CORS, and HTTP Security headers Demystified

Comprehensive guide to understanding web security vulnerabilities and protections:

Key Topics:

  • CSRF (Cross-Site Request Forgery): How attackers exploit user trust
  • CORS (Cross-Origin Resource Sharing): Managing cross-domain requests safely
  • Security Headers: Content Security Policy, X-Frame-Options, etc.
  • Attack Vectors: Real-world examples and mitigation strategies

Event Sourcing Pattern

Event Sourcing pattern - Cloud Design Patterns | Microsoft Docs

Microsoft’s comprehensive guide to Event Sourcing architecture:

Core Concepts:

  • Immutable Events: Store state changes as sequence of events
  • Event Store: Append-only storage for all domain events
  • Projection: Building current state from event history
  • Temporal Queries: Query system state at any point in time

Benefits:

  • Complete audit trail
  • Ability to replay events
  • Support for complex business scenarios
  • High performance and scalability

Web Security

Mozilla’s authoritative guide to web application security:

Coverage:

  • Authentication & Authorization: Best practices for user management
  • Transport Security: HTTPS, HSTS, certificate management
  • Content Security: CSP, XSS prevention, input validation
  • Security Headers: Comprehensive header configuration
  • API Security: RESTful API security considerations

Essential reference for any web developer serious about security.