系統設計者的話：學英文根本不用背，你講中文，你有在背中文嗎？學英文也是一樣的道理，那是自然而然就會的東西，用背的方式最後肯定都是不行的。 更多...

最好的學習就是有英文的父母，不斷的跟你說話、耐心的教導你，時間長了，你也就慢慢就融入其中了。

但是我們沒有英文父母怎麼辦？看影片學英文就學的起來嗎？學不起來。

我們從小到大，也看過了不少英文電影，至少也看過1、200部也跑不掉，但是為什麼看了這麼多的英文電影，英文還是很爛呢？

主要的原因是我們沒有從基礎性的強化學習。舉個例子，西方的幼兒出生時，他至少聽了各種大人講英文至少聽了2年，才慢慢開始說英文、與大人互動。

而且都是一字一句慢慢的說、慢慢的教、漸進式的、慢慢的、越來越習慣、越來越聽的懂、越來越會說的過程。

那麼我們看的影片、電影過程中，都是大人成熟型的講話速度、方式、語調，我們怎麼可能跟的上？

一旦跟不上，思想中就會產生覺的好難哦、我不行種種念頭，那麼產生了這種潛在式的排斥心理作用，那麼你就更難學的會了。


所以我們必須打好基礎、深厚的基礎，萬丈高樓平地起，唯有打下深厚的基礎，後面你走的路才會越來越順。

程式界裏有句話，程式債欠的越多，最後就只能放棄。學英文也是一樣，英文單字債欠的越多，你就直接上來文法、句型、語調，最後也只能放棄。

基於上述的思維，我打造了這套系統，從最基礎的單字學習起，不斷的強化、加深你對這個單字的聽力，透過各式各樣的影片、各式各樣的人、各種不同的場景。

就只是為了訓練一個單字的聽力，無數的人跟你講同一個單字，講個20遍、50篇、100遍(且不重覆)，我就不信學不起來。


這套系統做出來後，我自己在使用的過程中，確實真的能聽出來他們講的這個單字，而且他們講的速度再快也能聽的出來。

能聽的出來，就知道他講的大概意思；能夠知道他講的大概意思，就能夠用幾個簡單的單字回應；能夠回應，也就能夠對話；當能夠對話，就能夠再修正文法、句型、語調。


我的目地就是希望自己至少能聽的懂人家在說什麼，用英文跟人家對話，大家共同努力、學習。若有其它想法或對這套系統設計的建議，也可以與我聯絡：ichich2013@gmail.com

Dominik Kundel - Introduction to Web Security | JSUnconf 2018
觀看次數：394
that
has
api's
around
communications
uses
http
and
thanks
for
let's
encrypt
uses
hsts
https
website
sanitizing
that
input
and
there's
no
room
for
sequel
injections
because
if
are
no
real
sequel
injections
and
i'm
not
talking
about
no
sequel
databases
because
there
are
no
sequel
injections
to
have
like
any
sequel
injections
or
no
sequel
injections
turns
out
though
that
bunch
of
vulnerabilities
that
I
wanted
is
called
a
jar
to
jason
jwt
or
a
json
like
encrypted
they're
simply
base64
spec
of
jobs
there's
a
bunch
of
changes
we're
now
able
to
authenticate
as
an
admin
in
fact
we
wouldn't
have
had
only
cookies
if
you're
if
there's
no
implementations
so
the
library
that
I
doesn't
allow
you
to
whitelist
algorithms
meaning
specifying
Oh
implementations
also
have
this
fallback
you're
if
you're
up
to
date
with
your
dependencies
here
you'll
be
able
to
have
used
by
attackers
to
perform
so-called
cross-site
request
forgery
since
we're
using
cookies
the
browser
sort
of
overly
you
to
if
you're
logged
in
on
a
page
that's
what
an
attacker
could
use
then
browsers
that
don't
support
no
opener
from
cross-site
request
forgeries
or
sea
these
cookies
automatically
but
there's
cross-site
scripting
attack
tables
it
originates
from
an
xkcd
comic
they
weren't
sanitizing
their
inputs
and
if
we
talk
about
cross-site
scripting
cross-site
scripting
attacks
does
anyone
that
was
a
cross-site
scripting
attack
but
sammy
was
able
to
circumvent
this
sammy
couldn't
use
that
however
what
is
they
blocked
certain
keywords
such
as
inner
html
or
onreadystatechange
which
however
he
circumvented
strings
chopping
them
in
the
middle
recon
catenae
ting
them
and
then
block
eval
right
but
javascript
is
this
grow
javascript
in
hebrew
and
in
sort
of
vulnerability
on
here
as
well
so
if
we
vulnerability
so
by
default
it
has
a
sammis
and
use
the
javascript
protocol
writing
inline
javascript
now
this
is
ampersand
hash
58
semicolon
and
we
post
parenthesis
here
anymore
out
that
like
hey
ampersand
hash
58
that's
a
semi
that's
a
call
in
so
i'm
browser
sees
oh
yeah
you're
using
ampersand
hash
58
I
don't
see
a
semicolon
but
I
think
that's
just
a
typo
javascript
so
that's
why
I
use
this
in
because
it's
valid
javascript
this
just
works
shoutout
to
guy
from
sneek
who
vulnerability
in
this
library
around
published
a
nice
blog
post
about
this
trust
third-party
css
because
there
are
jason
p
so
jason
p
if
you're
not
loading
data
asynchronously
on
your
page
this
is
a
jsonp
enabled
endpoint
meaning
that
you're
not
verifying
what
you're
scripting
vulnerability
this
is
where
powerful
feature
and
that's
why
the
what
you're
passing
and
as
a
callback
that
it
installed
a
serviceworker
and
we
in
the
callback
i'm
specifying
the
isn't
to
port
4000
we
just
override
it
doesn't
it
they
don't
have
to
overwrite
like
you
if
this
is
installed
it's
at
least
I
don't
do
for
other
websites
vulnerabilities
there's
a
sort
of
hero
so
attackers
can't
hard
code
this
for
example
the
twitter
images
didn't
csp
though
shouldn't
be
your
like
csp
is
hard
so
if
you're
relying
on
that
other
vulnerabilities
I
showed
you
and
shouldn't
allow
two
iframe
your
page
that
but
i'll
do
that
by
an
http
header
is
disallowing
the
I
framing
don't
show
versions
of
fronted
libraries
and
your
that's
like
helping
the
attackers
to
versions
16-point
whole
point
-
then
vulnerabilities
I
should
go
for
and
same
lookup
for
example
in
mongodb
for
like
security
audits
hire
someone
externally
because
it's
a
versions
because
their
dependencies
can
introduce
a
bunch
of
vulnerabilities
to
detect
security
vulnerabilities
in
your
dependencies
so
nsp
or
sneak
are
patches
security
vulnerabilities
for
you
cookies
if
there's
no
reason
for
them
to
that
be
careful
of
jsonp
a
callback
characters
in
there
ucsb
as
a
safety
net
your
dependencies
have
vulnerabilities
you're
a
sticker
obsessed
like
I
am
and

相關影片

加Line好友 每日8AM 推播1單字

加入好友

其他人正在學習的單字

1. now
2024-05-09 21:06
2. easy
2024-05-09 21:06
3. crap
2024-05-09 21:06
4. by
2024-05-09 21:06
5. answers
2024-05-09 21:06
6. showed
2024-05-09 21:06
7. believe
2024-05-09 21:06
8. process
2024-05-09 21:06
9. love
2024-05-09 21:05
10. car
2024-05-09 21:05
11. step
2024-05-09 21:05
12. encouragement
2024-05-09 21:05
13. mess
2024-05-09 21:05
14. work
2024-05-09 21:05
15. deep
2024-05-09 21:05

本月觀看影片單字排行榜

本月查閱單字排行榜

本月聆聽單字排行榜