Forwarded from bupt.moe
#canokeys #security
Canokeys Pigeon 2022.5 版本来了！
081100Z 开始发售，请各位耐心等待
https://item.taobao.com/item.htm?id=664914723920
@canokeys
Canokeys Pigeon 2022.5 版本来了！
081100Z 开始发售，请各位耐心等待
https://item.taobao.com/item.htm?id=664914723920
@canokeys
Forwarded from bupt.moe
Forwarded from bupt.moe
#security
Google Pixel 内置截图编辑器存在严重的隐私泄露bug。
当编辑截图时，编辑器仅仅覆盖原文件相应的区域而不是全部重写，另外由于裁剪过的图片一般小于原图片，于是原图片的部分数据还存留在文件里。
1. https://vxtwitter.com/itssimontime/status/1636857478263750656
2. @Henryzhao
Google Pixel 内置截图编辑器存在严重的隐私泄露bug。
当编辑截图时，编辑器仅仅覆盖原文件相应的区域而不是全部重写，另外由于裁剪过的图片一般小于原图片，于是原图片的部分数据还存留在文件里。
1. https://vxtwitter.com/itssimontime/status/1636857478263750656
2. @Henryzhao
Forwarded from bupt.moe
Forwarded from bupt.moe
#security
完全无法想象
省流：Facebook收了一个VPN公司，然后给用户装CA来解密竞争对手的App流量以用作分析。
https://techcrunch.com/2024/03/26/facebook-secret-project-snooped-snapchat-user-traffic/
完全无法想象
省流：Facebook收了一个VPN公司，然后给用户装CA来解密竞争对手的App流量以用作分析。
https://techcrunch.com/2024/03/26/facebook-secret-project-snooped-snapchat-user-traffic/
TechCrunch
Facebook snooped on users' Snapchat traffic in secret project, documents reveal | TechCrunch
A secret program called "Project Ghostbusters" saw Facebook devise a way to intercept and decrypt the encrypted network traffic of Snapchat users to study their behavior.
Forwarded from bupt.moe
#security
OpenSSH 发现 RCE。影响范围
https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt
OpenSSH 发现 RCE。影响范围
8.5p1 <= OpenSSH < 9.8p1 。https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt