57 posts
Every system has a login feature, and it's an indispensable battleground that developers, users, and even hackers all target first. The login logic has been discussed a lot online, but there's one pitfall beginners easily forget: the message returned in the login or forgot-password feature reveals whether an account exists.
v2ray-core before v4.23.2 has a major security vulnerability consisting mainly of two flaws: HTTP camouflage has a potential fingerprinting risk (#2537), and a vmess protocol design and implementation flaw that lets servers be actively probed and fingerprinted (with PoC) (#2523). As of this writing, the latest version is v4.23.4, which has fixed both flaws. Please update as soon as possible.
On Tuesday, Google was hit with a class-action lawsuit: it was accused of tracking users' internet usage through Chrome set to "Incognito" mode, violating the privacy of millions of users. The plaintiffs say that even when users use Incognito mode, Google still collects information about the web pages they browse.
Fastjson has a remote code execution vulnerability; the restriction of the autotype switch can be bypassed, and a chained deserialization attacker can craft a deserialization exploit chain, ultimately achieving remote command execution. This vulnerability itself cannot bypass Fastjson's blacklist restriction; it needs to be combined with a deserialization exploit chain not on the blacklist to complete the full exploitation.
Earlier I wrote "Key-Exchange Logic for Encrypting Interface Data in Front-End/Back-End Separated Projects (RSA, AES)", explaining the encryption/decryption strategy when front and back ends exchange data. As my understanding and grasp of network programming grew, two months later I had to write another addendum to patch my previous article, because improper use still can't achieve absolute security. The previous article didn't mention the man-in-the-middle attack, so I'm adding it here.
According to foreign media ZDNet, a Huawei L20 chief security expert published a Linux kernel hardening patch called HKSP on GitHub. Interestingly, the patch was quickly found by the development team grsecurity to have an "easily exploitable" vulnerability, immediately sparking heated discussion.
According to foreign media, security researchers recently discovered a new security vulnerability that could make millions of computers manufactured before 2019 easily susceptible to physical attack, targeting a common component: the Thunderbolt port. According to researcher Bjorn Ruytenberg, the so-called "Thunderclap" vulnerability exploits the direct memory access (DMA) granted by Thunderbolt peripherals to access the target device. Unless proper protections are in place, hackers can use this access to steal data, track files, and run malicious code. "Hackers can read and copy data on a PC within minutes, even when the computer is locked or sleeping."
According to US cybersecurity firm ZecOps, researchers announced Wednesday that they found two zero-day vulnerabilities in Apple's iPhone and iPad Mail apps. Researchers say variants of these two vulnerabilities can be traced back to iOS 6 released in 2012, meaning hackers have used them to attack iPhone and iPad users for eight years. If a device is infected, the user may not even know they're being hacked.
In front-end/back-end separated projects, sensitive info such as passwords and amounts often needs to be transmitted. Signature/verification algorithms only guarantee data isn't tampered with, but can't keep data confidential. If the user's password is transmitted in plaintext, it can be intercepted by nodes in the network. Although most network operators don't intercept transmitted content, you can't rule out whether the WiFi the user connects to is a phishing network, so sensitive info needs encryption when transmitted. This article discusses how to securely let the client and server exchange keys.
In daily development, passwords are generally just simply MD5'd, and some systems even store users' plaintext passwords directly. If a hacker drains the database and downloads the entire thing, they can log into any account and do dangerous, even irreparable, things. So encrypt passwords properly to protect user account security.
