profissional - Code Search

docs/pt/docs/advanced/security/http-basic-auth.md

E eles podem tentar de novo sabendo que provavelmente é algo mais parecido com `stanleyjobsox` do que com `johndoe`.

#### Um ataque "profissional" { #a-professional-attack }

Claro, os invasores não tentariam tudo isso de forma manual, eles escreveriam um programa para fazer isso, possivelmente com milhares ou milhões de testes por segundo. E obteriam apenas uma letra a mais por vez.

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Thu Mar 19 18:20:43 GMT 2026

- 5.2K bytes

- Click Count (0)

github.com/tiangolo/fastapi

docs/es/docs/advanced/security/http-basic-auth.md

Y luego pueden intentar de nuevo sabiendo que probablemente es algo más similar a `stanleyjobsox` que a `johndoe`.

#### Un ataque "profesional" { #a-professional-attack }

Por supuesto, los atacantes no intentarían todo esto a mano, escribirían un programa para hacerlo, posiblemente con miles o millones de pruebas por segundo. Y obtendrían solo una letra correcta adicional a la vez.

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Thu Mar 19 18:15:55 GMT 2026

- 5.3K bytes

- Click Count (0)

github.com/tiangolo/fastapi

docs/en/docs/advanced/security/http-basic-auth.md

And then they can try again knowing that it's probably something more similar to `stanleyjobsox` than to `johndoe`.

#### A "professional" attack { #a-professional-attack }

Of course, the attackers would not try all this by hand, they would write a program to do it, possibly with thousands or millions of tests per second. And they would get just one extra correct letter at a time.

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Thu Mar 05 18:13:19 GMT 2026

- 5K bytes

- Click Count (0)

github.com/gradle/gradle

architecture/standards/0009-use-american-english.md

* **Inconsistent API surface**: Public APIs with mixed spelling conventions appear less professional and polished
* **Harder for non-native speakers**: Contributors and users for whom English is a second language benefit from a single, consistent convention

Created: Wed Apr 01 11:36:16 GMT 2026

- Last Modified: Thu Mar 05 12:39:41 GMT 2026

- 3.9K bytes

- Click Count (0)

github.com/apache/maven

api/pom.xml

            <artifactId>maven-javadoc-plugin</artifactId>
            <configuration>
              <tags>
                <tag>
                  <name>provisional</name>
                  <placement>tf</placement>
                  <head>Provisional:</head>
                </tag>
              </tags>
            </configuration>
            <reportSets>
              <reportSet>
                <id>aggregate</id>

Created: Sun Apr 05 03:35:12 GMT 2026

- Last Modified: Sun Jun 29 22:37:39 GMT 2025

- 3.2K bytes

- Click Count (0)

github.com/tensorflow/tensorflow

CODE_OF_CONDUCT.md

*   Conduct which could reasonably be considered inappropriate for the forum in
    which it occurs.

All TensorFlow forums and spaces are meant for professional interactions, and any behavior which could reasonably be considered inappropriate in a professional setting is unacceptable.


## Our Responsibilities

Created: Tue Apr 07 12:39:13 GMT 2026

- Last Modified: Fri Feb 05 18:43:16 GMT 2021

- 5.2K bytes

- Click Count (0)

github.com/tiangolo/fastapi

docs/zh/docs/advanced/security/http-basic-auth.md

#### 反应时间对攻击者的帮助 { #the-time-to-answer-helps-the-attackers }

通过服务器花费了更多微秒才发送**错误的用户或密码**响应，攻击者会知道猜对了一些内容，起码开头字母是正确的。

然后，他们就可以放弃 `johndoe`，再用类似 `stanleyjobsox` 的内容进行尝试。

#### **专业**攻击 { #a-professional-attack }

当然，攻击者不用手动操作，而是编写每秒能执行成千上万次测试的攻击程序，每次都会找到更多正确字符。

但是，在您的应用的**帮助**下，攻击者利用时间差，就能在几分钟或几小时内，以这种方式猜出正确的用户名和密码。

#### 使用 `secrets.compare_digest()` 修补 { #fix-it-with-secrets-compare-digest }

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Fri Mar 20 17:06:37 GMT 2026

- 4.4K bytes

- Click Count (0)

github.com/minio/minio

code_of_conduct.md

* Public or private harassment
* Publishing others' private information, such as a physical or electronic
  address, without explicit permission
* Other conduct which could reasonably be considered inappropriate in a
  professional setting

## Our Responsibilities

Project maintainers are responsible for clarifying the standards of acceptable
behavior and are expected to take appropriate and fair corrective action in

Created: Sun Apr 05 19:28:12 GMT 2026

- Last Modified: Mon Jan 20 18:38:58 GMT 2020

- 3.5K bytes

- Click Count (0)

github.com/tiangolo/fastapi

docs/zh-hant/docs/advanced/security/http-basic-auth.md

#### 回應時間幫了攻擊者 { #the-time-to-answer-helps-the-attackers }

此時，透過觀察伺服器回覆「Incorrect username or password」多花了幾個微秒，攻擊者就知道他們有某些地方猜對了，前幾個字母是正確的。

接著他們會再嘗試，知道它更可能接近 `stanleyjobsox` 而不是 `johndoe`。

#### 「專業」的攻擊 { #a-professional-attack }

當然，攻擊者不會手動嘗試這一切，他們會寫程式來做，可能每秒進行上千或上百萬次測試，一次只多猜中一個正確字母。

但這樣做，幾分鐘或幾小時內，他們就能在我們應用程式「協助」下，僅靠回應時間就猜出正確的使用者名稱與密碼。

#### 用 `secrets.compare_digest()` 修正 { #fix-it-with-secrets-compare-digest }

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Fri Mar 20 17:05:38 GMT 2026

- 4.7K bytes

- Click Count (0)

github.com/tiangolo/fastapi

docs/ru/docs/advanced/security/http-basic-auth.md

Тогда они могут попробовать снова, зная, что правильнее что-то ближе к `stanleyjobsox`, чем к `johndoe`.

#### «Профессиональная» атака { #a-professional-attack }

Конечно, злоумышленники не будут делать всё это вручную — они напишут программу, возможно, с тысячами или миллионами попыток в секунду. И будут подбирать по одной дополнительной верной букве за раз.

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Thu Mar 19 17:56:20 GMT 2026

- 7.4K bytes

- Click Count (0)

Search Options