A | Vladimir Putin has prepared a cunning new “raw materials trap” relying on Bolivia’s fledgling lithium mining industry, with the trap expected to “snap shut” and leave the West again dependent on Russia for its raw material needs, Welt contributor Tobias Kaufer fears.,Pointing to the Latin American nation’s massive, untapped deposits of lithium, Kaufer expressed concerns over Russia’s interest in helping Sucre tap these resources, which are crucial for the production of batteries for electric vehicles.,According to the US Geological Survey, Bolivia’s proven lithium reserves are the largest in the world, with the country’s 21 million tons ahead of Argentina and Chile (which have 19 and 9.8 million tons-worth of reserves, respectively, and together account for more than 30 percent of global lithium output).,“Those with access to the deposits can have a say in the commodity’s prices and availability. Russia apparently has particularly good chances in Bolivia at the moment,” Kaufer wrote. For Europe, he warned, Moscow’s success in the lithium ‘poker game’ would make the commodity another area where the EU depends on Russia, just like with oil and gas.,Russia’s success will be contingent on “the outcome of the Bolivian political crime thriller,” the contributor stressed, pointing to the raging struggle between President Luis Arce, a member of former president Evo Morales’ Movement for Socialism party, and right-wing forces backed by the US attempting to overthrow leftist forces.,Ex-Bolivian President Jeanine Anez Sentenced to 10 Years in Prison Over 2019 Coup11 June, 01:54 GMT,“This is where Russia comes in. Morales is considered a clear supporter of Vladimir Putin,” Kaufer wrote, recalling the former president’s calls for an “international mobilization to stop the interventionist expansionism of NATO and the United States” in March following the escalation of the crisis in Ukraine, and years of efforts by Sucre to shore up ties with Moscow during his presidency.,“If Moscow now succeeds in supporting the socialist’s return to power, the path to the lithium deposits would be clear. At the very least, Morales could urge President Arce to sign a deal with the Russians,” the Welt contributor believes.,Rosatom, the Russian state nuclear giant, has expressed interest in helping Bolivia tap its lithium riches, and is one of six companies which have applied for their development. Others include Lilac Solutions (a US-based start-up with investments from BMW and Bill Gates’ Breakthrough Energy Ventures), Chinese battery giant CATL, and three other Chinese companies.,Along with its interest in Bolivia’s lithium, Rosatom has teamed up with Norilsk Nickel to mine for lithium ores in Russia’s Murmansk region. Last year, the company also announced plans to build a major lithium ion cell manufacturing facility in Kaliningrad, with the ambitious project hoping to begin churning out up to 4 GWh worth of batteries, or about 0.5 percent of total global demand, by 2024.,Morales' Legacy: Bolivian Joint Nuclear Project With Russia's Rosatom Unique for Latin America10 June 2021, 16:53 GMT。
一键部署OpenClaw
ThinkPHP是国内站长的老朋友，也是老漏洞的重灾区。5.x早期版本暴露过多次高危问题，比如远程代码执行、控制器任意调用。最坑的是很多站上线后没再更新过框架，漏洞一直躺在那儿。
自查第一步是确认版本。ThinkPHP 5.0.x/5.1.x低于特定小版本就要升级。先把composer.lock或者框架目录里的base.php版本号翻出来，再对照官方安全公告。 # 快速查看当前ThinkPHP版本 grep -r "VERSION" vendor/topthink/framework/src/think/App.php # 或者看composer.lock grep -A1 '"name": "topthink/framework"' composer.lock
自查第二步是限制后台入口。把admin、manage这些路径用Nginx做IP白名单或者加HTTP基本认证，别让搜索引擎随便扫到。同时关闭debug模式，runtime目录禁止执行脚本。
B | # Nginx中禁止访问敏感路径 location ~* ^/(application|extend|runtime|thinkphp|vendor)/ { deny all; } # 禁止执行上传目录里的PHP location ~* ^/upload/.*\.(php|php5|phtml)$ { deny all; }
最后一条容易被忽略：不要用默认的应用名和入口。很多扫描器直接请求/index.php/admin/login或者/index.php?s=/admin，你把后台入口改名，就能挡住一大半批量攻击。 数据来源：ThinkPHP官方安全公告及topthink/framework GitHub仓库版本更新记录
申请创业报道，分享创业好点子。
C | 点击此处，共同探讨创业新机遇！。
Current article:http://sacj2.ninyakenhongnian.sbs/ofvb6i8/nvm.html
Published on:15:32:57