Value: My Thoughts on Investing

Joseph Muniz / Amir LakaniPosts & Telecom Press2014

No rating yet
Word count
413 words
Chapters
17
Series
Turing Programmer Series
ISBN
9787115363152

Tags

Computing Programming Web SecuritySecurity AuditTesting WorkflowPenetration TestingVulnerability ExploitationSocial EngineeringCybersecurityRisk AssessmentPractical Guide

Summary

Value: My Thoughts on Investing is the first book by Zhang Lei, founder and CEO of the investment firm Hillhouse, published by Zhejiang Education Publishing House in 2020. It runs to about 216,000 Chinese characters and is divided into three parts and ten chapters. Zhang Lei lays out more than twenty years of study, entrepreneurship, and investment experience. Part One recalls the foundations of his upbringing and his introduction to investing: meeting his mentor David Swensen while studying at Yale, his exposure to the Yale endowment fund, and his early journey after returning to China to found Hillhouse and "bet big on China." Part Two systematically sets out his investment methodology and self-cultivation, covering research-driven investing, understanding the value of time, "there is only one moat in the world"—namely, continuously creating value—and the ecological model of investing. It also presents investment philosophies such as "stay upright, use the unconventional," "of the three thousand weak waters, take only one ladle," and "peaches and plums do not speak, yet a path forms beneath them," along with the first public disclosure of the "Seven Hillhouse Formulas." Part Three expands to the framework of innovation, discussing walking alongside people with a grand vision, building excellent organizations, value investing amid industrial change (life sciences, consumer transformation, the intelligent era), and longer-term topics such as talent, education, and a scientific outlook. The book concludes with numerous speeches and articles and includes hand-drawn color illustrations and photographs that complement the main text. It does not offer specific stock-picking formulas but focuses on helping readers understand companies, understand time, and turn "long-termism" into a way of thinking that can be practiced.

Editor's review

不少人在虚拟机里装好 Kali，面对满屏工具却不知道先动哪个。这本书的价值就在于：它没有把 Kali 当作“黑客软件合集”来介绍，而是把工具嵌进一条完整的作业链条——侦察、目标测试、漏洞利用、提升权限、保持访问，最后落到防御与报告，八章首尾相接，读完能形成一套可复用的方法论。 作者约瑟夫·穆尼兹是思科的系统安全工程师，阿米尔·拉卡尼长期为国防与情报机构设计攻防机制，两人都写过大量实战文档，因此书中工具的选择带有明确的“任务导向”：讲侦察就集中在公开信息源、Shodan、Google Hacking 与 Nmap，讲服务器端攻击就把 Webshag、Skipfish、OWASP ZAP、Metasploit、w3af 的适用场景讲清楚，讲客户端攻击则把 SET、中间人代理与 hashcat、Ophcrack 一类的口令破解放在同一章权衡。 两点容易被忽略的特色：一是它专门用一章讲防御与取证，攻击与加固对照着看，才知道每个漏洞该用什么手段堵；二是它把“报告”当成正式章节，给出可套用的文档模板，这对靠交付物吃饭的安全从业者很实用。需要提醒的是，原书成书于 2013 年前后，书中不少工具的界面、参数与默认配置已经变化，读者应当把它当作方法论读物，实际操作时对照最新官方文档。

Who it's for

A good fit for

Not a good fit for

Reading tips

  1. 先在虚拟机中装好 Kali 并按第 1 章完成环境配置，边读边在授权靶场练习。
  2. 把五个阶段（侦察、测试、利用、提权、保持访问）当作笔记主线，为每章工具建立对照表。
  3. 读到具体工具时同步查阅官方文档，核对命令与参数，避免照搬书中旧版本操作。
  4. 第 7、8 章不要跳过：防御对策与报告模板往往是实际工作中最容易被认可的部分。

About the publisher

Posts & Telecom Press China · Founded in 1953

Posts & Telecom Press is known for its strengths in science and technology, computing, and information and communications titles, and has extended its publishing into photography, art, software learning, and inspirational growth, giving it a fairly diverse range. Its catalog includes computing and communications works such as Refactoring and Patterns (Revised Edition) and Huawei Switch Learning Guide (Second Edition), alongside bilingual collector's editions such as The Little Prince (Chinese-English-French illustrated collector's edition), The Great Gatsby, and Three Days to See. Beijing Ten Years: 1980-1990 and Ghost Blade: WLOP Personal Illustration Collection reflect its presence in photography and art. Its authors include Antoine de Saint-Exupéry, Helen Keller, Joshua Kerievsky, Wang Da, Zhang Zhaozeng, and WLOP.

Contents

  1. Preface: This Is a Path of Long-Termism
  2. Part One The Journey in Search of Value
  3. Chapter 1 The Foundation of Value
  4. Chapter 2 An Introduction to Value Investing
  5. Chapter 3 First Trials in Value Investing
  6. Part Two The Philosophy and Cultivation of Value Investing
  7. Chapter 4 Methods and Philosophy of Value Investing
  8. Chapter 5 The Self-Cultivation of Value Investors
  9. The Hillhouse Formulas
  10. Part Three The Innovative Framework of Value Investing
  11. Chapter 6 Walking with People of Grand Vision
  12. Chapter 7 Excellent Organizations That Continuously Create Value
  13. Chapter 8 Value Investing Amid Industrial Change
  14. Chapter 9 Practical Explorations in Value Investing
  15. Chapter 10 Always Pursue a Rich and Meaningful Life
  16. Afterword: Be a Friend of Time
  17. Appendix: My Speeches and Articles

FAQ

这本书讲的是哪个版本的 Kali Linux？ 对应的是 2013 年 3 月发布的 Kali Linux 早期版本（原书 2013 年出版），书中工具界面、参数和默认配置与现在的 Kali 已有较大差异，建议把它当作流程与思路教材，具体操作以官方文档为准。
没有渗透测试基础能直接读吗？ 书中明确假设读者已具备 Web 应用、网络基础和渗透测试方法论的基本了解。零基础读者建议先补 Linux 命令、HTTP 协议与网络基础，再用本书串流程。
这本书的作者和译者是谁？ 原著作者为美国安全专家约瑟夫·穆尼兹（Joseph Muniz）与阿米尔·拉卡尼（Aamir Lakhani），中文版由涵父翻译，人民邮电出版社 2014 年出版，属“图灵程序设计丛书”。
书里有讲防御和报告撰写吗？ 有。第 7 章讲防御对策，涵盖安全基线、STIG、补丁管理、密码策略，以及抵御中间人攻击、拒绝服务、Cookie 攻击和点击劫持，并介绍数字取证；第 8 章专门讲渗透测试执行报告的格式、模板与报表工具。
书中的攻击技术可以随意练习吗？ 不可以。渗透测试必须在获得明确书面授权的范围内进行，未授权扫描或攻击他人系统可能触犯法律。练习请使用自建靶机或合法靶场环境。

This site is an index: you start “Search all sources” in your browser, and the entries it lists all point to third-party sites; please judge their availability yourself.

About the author

Joseph Muniz Author

Joseph Muniz is an author whose work has been introduced in the fields of computing and programming design. Public information about him is currently limited, and details such as his background, nationality, and dates of birth and death remain unclear. Based on the library's holdings, one of his representative works is Web Penetration Testing: Using Kali Linux, a book that addresses practical methods of Web security testing and is aimed at technical readers who wish to understand penetration testing processes and tool usage. The subject falls within computer security and focuses on explaining operational approaches using Kali Linux as a platform, offering considerable practicality and hands-on value. Given the available information, Muniz's writing style tends toward technical practice and tool application, making it suitable for readers interested in network security.

Amir Lakani Author

Amir Lakani is an author about whom limited public information is available; what can be confirmed centers mainly on his representative work, Web Penetration Testing with Kali Linux. The book falls under computer and programming design titles and focuses on the practical methods of using the Kali Linux penetration testing platform to conduct web security testing. Judging from the subject matter, Lakani is concerned with the hands-on side of cybersecurity and addresses readers who wish to understand penetration testing processes and techniques. Because his dates of birth and death, nationality, education, and professional career are not reliably documented, his personal biography cannot be expanded, and the present introduction can only take his work as its central thread. On the available evidence, this book is the main basis for understanding his writing direction and reflects his interest in the field of web security testing.