However this mode should not be used in live deployment as it could give an attacker a lot of information about the services that you export.
但是在该模式下你导出的服务的许多信息都暴露给了攻击者，真正部署的时候应该避免使用这种模式。
Police in Helmand said the attacker attended a police academy in Kandahar, southern Afghanistan, and had been working as an officer in the Nad-e-Ali area for three years.
赫尔曼德省的警察说，袭击者曾就读于阿富汗南部坎大哈（Kandahar）的一所警察学校，并在德阿里地区做了三年的警官。
Once so compromised, a computer can surreptitiously download other code that can log a victim's key strokes, giving an attacker a path to potentially wide network access.
一旦入侵成功，电脑能够暗中下载其它代码，这些代码会记录入侵电脑的键击数据，这将给攻击者一条潜在宽广网络进入权。
The attacker threatened them with a gun.
袭击者用枪威胁他们。
If your program is a viewer or editor of data—such as a word processor or an image displayer—that data might be from an attacker, so it's an untrusted input.
如果您的程序是数据的浏览器或者编辑器——比如文字处理器或者图像显示器——那么那些数据有可能来自攻击者，所以那是不可信的输入。
Luckily, Zhang had just learned how to escape from an attacker, a person who plans to hurt someone.
幸运的是，张刚学会了如何从计划伤害他人的袭击者手中逃脱。
The attacker then calls a customer service representative at the site, posing as the shopper and providing personal information.
攻击者接下来在网站上调用客户服务，作为购物者登录并且提供个人信息。
The sophisticated attacker finds a weakness in a similar type of software, and tries to use that to exploit the system.
富有经验的攻击者可以发现同类软件的缺点，并且尝试利用这些弱点来进入系统。
A common scenario is that the attacker calls the shopper, pretending to be a representative from a site visited, and extracts information.
一个常见的场景是攻击者打电话给购物者，假装是购物者所访问站点的代表，并且提取信息。
The attacker then sends a packet full of SACK options designed to force the other host to scan that entire queue to process each option.
然后攻击者发送一个充满SACK选项的包，目的是使另一方主机扫描整个队列以处理每个选项。
But missile attacks on ships are rare, so it is difficult to know just how safe a ship really is-especially if an attacker launches a dozen or so missiles at once.
但舰船受到导弹攻击的案例非常少，因此很难判断一条战舰躲过导弹攻击的劫数有多大，特别是在攻击者一次发射十多枚导弹的情况下。
Determining the identity of the attacker was a matter of narrowing down the line of potential suspects.
确定攻击者的身份需要逐渐缩小一连串嫌疑人的范围。
Because the percent sign (%) itself can be URL encoded, an attacker can submit a carefully crafted request to a server that is basically double-encoded.
由于百分号(%)本身可以是URL编码的，所以攻击者可以向服务器提交一个精心制作的、基本上是双重编码的请求。
An attacker who can convince a user to access a URL supplied by the attacker could cause script or HTML of the attacker's choice to be executed in the user's browser.
攻击者诱导用户访问由攻击者提供的URL，从而导致在用户的浏览器中执行攻击者选择的脚本或HTML。
If the exploit is run while the program is running as root, then the attacker will get a root shell.
如果程序以root权限执行时执行了利用指令码，则攻击者将得到rootshell。
Essentially, if you allow an attacker to run code on such a machine through any means, the attacker can completely take over the machine.
从本质上说，如果您允许攻击者在这样的机器上以任何方式运行代码，则攻击者完全可以接管该机器。
But once an attacker can run code on such a machine, the attacker instantly attains complete control.
但是，一旦攻击者可以在这样的机器上运行代码，就可以立即获取完全控制。
It is particularly dangerous because the attacker does not need a powerful machine or a powerful network connection to perform this attack.
因为攻击者不需要功能强大的机器或高速的网络连接来执行这种攻击，所以它特别危险。
Even if an attacker broke into a game program, all he could do would be to change the score files.
即使攻击者攻击并进入了一个游戏程序，所有他能做的事情将是修改分数文件。
If this occurred, the sequence Numbers would definitely be different than what we expected. This also protects us from an attacker dropping a message.
如果他这么干，则序列号一定和我们所期待的不一样，这就保护了我们不受攻击者们扔消息的攻击。
If an attacker can cause a buffer to overflow, then the attacker can control other values in the program.
如果攻击者能够导致缓冲区溢出，那么它就能控制程序中的其他值。
Let us assume an attacker succeeded in filling a page containing malicious script to the Web site for the subscribed members.
让我们假设攻击者成功地将一个包含恶意脚本的页面填入到订阅成员使用的网站上。
In this scenario, the user unknowingly executes scripts written by an attacker when they follow a malicious link in a mail message.
在本方案中，当用户执行邮件消息中的恶意链接时，就会不知不觉地执行攻击者编写的脚本。
Your application might need a few more, but limit them -- don't accept data from a potential attacker unless it's critically needed.
您的应用程序可能还需要更多，但是要限制它们 ——除非是特别需要，否则不要接受潜在的攻击者的数据。
The problem is that if an attacker can control the underlying libraries used by a program, the attacker can completely control the program.
问题是，如果攻击者可以控制程序用到的底层库，那么攻击者就可以控制整个程序。
If it said "the user name you entered has not been found", an attacker could automatically compile a list of user names.
如果显示的错误信息是“用户名没有被找到”，那么攻击者就会自动编制一份用户名名单。
By splitting systems apart like this, you avoid the probability (or at least lessen the risk) of an attacker breaching a server and getting access to data or even internal systems.
通过以这种方式分开系统，就可以避免(至少降低了风险)攻击者进入服务器，然后访问数据或内部系统。
In most cases, if you create a list of "illegal" characters, an attacker will find a way to exploit your program.
在绝大多数情况下，如果您创建了一个“非法”字符的列表，攻击者还是可以找到利用您的程序的方法。
If a system authenticates based solely on fingerprints, an attacker could reasonably construct a fake hand after carefully gathering fingerprints of an authorized user of the system.
如果系统认证仅基于指纹，则攻击者可以在仔细搜集了系统已认证用户的指纹后适当地构造一只假手。
The second step is to identify vulnerabilities that a hacker or attacker could maliciously exploit.
第二步是确定电脑黑客或攻击者可能恶意攻击的漏洞。
应用推荐