http://tech.it168.com/a2014/1215/1690/000001690298.shtml
http://infosec.blog.51cto.com/226250/1554614