|
w****g
发帖数: 597 | 2 China’s Zombie PCs
Rapid expansion in computer adoption and first-time Internet users makes China
a ripe target for hackers.
April 6, 2005
Hackers are turning personal computers in China into “zombies” faster than
anywhere else in the world, researchers at CipherTrust said Wednesday.
Each day some 150,000 computer users lose control of their machines to
attackers. More than 20 percent of those computers are located in China,
statistics show. Computers that can be remotely controlled by hackers a |
|
w****c
发帖数: 2667 | 3 各位如果对Functional Programming和Higher Level Abstraction感兴趣的的话，有两
本书和一篇文章是经典中的经典，必看的。而且不管是学哪种语言，都管用的。就是：
1. SICP: http://mitpress.mit.edu/sicp/
2. HTDP: http://www.htdp.org/
3. How To Become A Hacker: http://www.catb.org/~esr/faqs/hacker-howto.html
Some quotes from ESR's "How To Become A Hacker":
（这就是现代的“禅”了：）
To follow the path:
look to the master,
follow the master,
walk with the master,
see through the master,
become the master.
（这是黑客的信仰：）
So, if you want to be a hacke |
|
|
c*********e
发帖数: 16335 | 5 但是，真正用oauth来登录的人多吗？即使是用gmail,facebook什么的用户名和密码来
登录，那hacker能知道gmail,facebook的用户名和密码，以后一样能用它来登录啊,而
且还能把你的google contacts,google drive data给全部拿到,在你的facebook上乱发
文。hacker要的是能登录你的帐号就行，不管是用什么方法。何况，现在password在
hacker眼里根本就是渣。
---------------
一个是SSO，一个是本地罢了。 |
|
c*********e
发帖数: 16335 | 6 据说可以这样，hacker创建一个女性帐户，在profile里面加入一些javascript或者
tags,这样每个点击她帐号看她profile的人的cookie信息就给了hacker,比如用户名，
密码之类的。然后hacker用csrf来攻击网站。或者，干脆这就是个sql injection,把数
据库给hack出来了。 |
|
O*******d
发帖数: 20343 | 7 cookie的加密和解密，可以在服务器端做。 跟browser没有任何关系。 hacker可以把
你加密的密码照原样送到服务器，服务器无法知道这是合法的密码还是被盗窃的密码。
但是用户的信息，即使被盗窃了，hacker无法解密，就无法使用。 hacker也无法知道
加密的内容是什么。如果有大量cookie，更无法知道哪个是有用户信息的。
现在用的较多的是OAuth方法来从第三方网站登录。 主要思想是用access token。
token是加密的，有用户信息。 第三方网站无法知道其内容，只能照原样传回去。 |
|
c***z
发帖数: 6348 | 8 然后是什么是data scientist呢？
我之前的director说，data scientist是hacker，scientist和artist的结合。我之前
觉得他在忽悠我。现在说来，还是很有道理的。尤其是hacker这个部分。
Hacker不管什么manual的，只管什么interesting就做什么。你拿到data，也没什么
manual，教材上面也从来没有说这样的data，这样的项目该怎么做。
Scientist就是说，你要知道自己做的是什么。Make sure you are doing what you
think you are doing.这个就是数学和统计的功底了，大家都不会差的。
Artist我不懂。我自己加上了engineer，因为你要做的是产品，而不是idea；还有
salesperson，好的sales都是似乎站在客户这边说话，替客户发现产品的价值的。
以上纯属个人胡猜的。当然，忽悠的能力也是很重要的。 |
|
l*h
发帖数: 4124 | 9 Yahoo! Mail accounts of journalists and activists hacked in China
Mar. 31, 2010 (11:04 am) By: John Brownlee
The attacks on Google GMail servers, allegedly by the Chinese government,
have gotten a lot of press lately, ultimately leading to Google pulling out
of China and transferring their search engine to their uncensored Hong Kong
site, but let’s not lose sight of the cold hard fact that the Chinese
government is still employing hackers, and these hackers are still going to
try to attack the w |
|
|
p*********w
发帖数: 23432 | 11 change.org 申明：网站被 DDOS ｚｚ
http://blog.change.org/2011/04/chinese-hackers-attack-change-or
Attackers use distributed denial of service attack to bring down the world’
s fastest growing social action platform after more than 90,000 people in
175 countries call for release of Chinese dissident artist.
Chinese hackers temporarily brought down the world’s fastest-growing social
action platform after more than 90,000 people in 175 countries endorsed an
online call for the release of internationally ac... 阅读全帖 |
|
c***s
发帖数: 70028 | 12 2003年到2010年期间，原文作者Matt Welsh 是哈佛大学工程和应用科学学院的计算机科学系教授。 2010年加入Google，是一名高级工程师。他当前的工作重点是广域网性能和健壮性。下文由Matt所写，文章对比了Matt在Google和哈佛大学时的一天作息，译文由伯乐在线编译。
最近我在想，和在哈佛时的院系工作相比，在Google上班日子到底有多么不同。最大的差别就是，相比之下，我曾在哈佛比较幸运，一周花半个小时做编程相关的事。而在Google，我花费将近(或超过)90%的时间在编写代码。另外，我拖延所耗费的时间和浏览大量“无意义”网站的时间更少了，这大致是因为我更享受工作带来的乐趣。
下面就是我在Google典型一天的过程：
6：30 - 起床、把儿子叫起床、洗漱、早餐、带狗遛公园。
8：30 - 去上班(大多数时间是乘地铁)。
9：00 - 到公司。输入6个不同的窗口密码，让我的工作场所返回正常状态。检查邮件。检查我在不同数据中心的几个部署任务的状态，然后接着昨天的工作。
9：30 - 10：15 - 开始编码，给我所在的系统增加请求的功能。一直调试，直至正常运作，编写一... 阅读全帖 |
|
u****n
发帖数: 7521 | 13 The hacker managed to get into the server that hosted the site, and wiped
out all of the site’s data. The hacker also changed the code that was used
to build the site. As a result, the FFPC website is currently inoperative
and it will cost up to $20,000 to rebuild it, wdbo.com said. |
|
f***s
发帖数: 799 | 14 PayPal cuts WikiLeaks from money flow
BERLIN (AP) -- The online payment service provider PayPal has cut off the
account used by WikiLeaks to collect donations, serving another blow to the
organization just as it was struggling to keep its website accessible after
an American company stopped directing traffic to it.
PayPal said in a blog posting that the move was prompted by a violation of
its policy, "which states that our payment service cannot be used for any
activities that encourage, promote... 阅读全帖 |
|
m**********n
发帖数: 27535 | 15 (Reuters) - The Canadian government was hit by an unprecedented cyber attack
from Chinese-based computers last month that penetrated two key economic
ministries, the Canadian Broadcasting Corp reported on Wednesday.
The CBC cited sources as saying the hackers broke into computer systems at
the Finance Department and Treasury Board. Once the attack was detected,
Internet access in both ministries was cut off.
The Finance Department is preparing the federal budget, which will be
delivered next mon... 阅读全帖 |
|
g**1
发帖数: 10330 | 16 Morgan Stanley hit by China-based hackers: report
(Reuters) - Morgan Stanley experienced a "very sensitive" break-in to
its network by the same China-based hackers who attacked Google Inc's
computers more than a year ago, Bloomberg reported, citing leaked emails
from an Internet security company.
The emails from the Sacramento, California-based computer security firm
HBGary Inc said that Morgan Stanley -- the first financial institution
identified in the series of attacks -- considered details o... 阅读全帖 |
|
o****y
发帖数: 26355 | 17 老夫当年进来的时候，是主要反HACKERS的。
后来年纪大了，也跟不上HACKERS的步伐了。
就做PENCIL PUSHER的工作了。 |
|
s*********8
发帖数: 901 | 18 WASHINGTON – Secretary of State Hillary Rodham Clinton said Thursday that
Google's allegations of Chinese hacking of its email system are "very
serious" and will be investigated by the FBI.
Google said the hundreds of accounts affected by the breach included
personal email belonging to senior U.S. officials.
"These allegations are very serious," Clinton told reporters. "We take them
seriously. We are looking into them."
She declined to comment further on the matter, referring questions to both
G... 阅读全帖 |
|
w*********g
发帖数: 30882 | 19 周一公布的报告:经济衰退，每五名美国人中有一人家庭收入至少减少了四分之一
2011年11月28日
【钜亨网编译郭照青】
根据周一公布的报告显示，每五名美国人中，便有逾一人在严重经济衰退中，家庭
收入至少减少了四分之一，因而缺少足够的经济支撑。
这种情况让他们陷入了经济不安全感。根据耶鲁大学教授Jacob Hacker所创造的经
济安全指数最新数据显示，由2008年至2010年，逾20%的美国人陷入了这种情况，大幅
高于1986年的14.3%。去年，约有6200万美国人面临了经济不安全感。
严重经济衰退造成了这些缺少安全感的人惨重损失，2009年，这群人收入下降的中
间水準达到46.4%，创新高。
去年与一群研究人员共同推出经济安全指数的Hacker，根据三项指标决定不安全感
：1.主要收入损失，2. 医药费用支出，3.缺少储蓄。他认为可支配收入是支付医疗成
本与债务后的现金。
经济下滑使得2010年美国贫穷率上升到15.1%，创1993年以来最高水準。去年中间
水平家庭收入下降至49445美元，经通货膨胀调整后，创1996年以来最低。 |
|
d****j
发帖数: 293 | 20 http://www.abs-cbnnews.com/-depth/04/30/12/hackers-continue-att
MANILA, Philippines - Filipino hackers have continued to deface Chinese
government websites despite calls from the Philippine government to end the
attacks.
On Monday, posts on the "PrivateX," "Anonymous #OccupyPhilippines" and "
Anonymous Butuan" Facebook pages reported fresh attacks on websites in China.
马里拉, 菲律宾 - 菲律宾黑客们继续更换中国地方政府的网站,尽管在菲律宾政府电话
要求他们结束这场攻击行动.
下面的网站全部遭到攻击(不一定全), 大家有能力且愿意的话:
1. 通知地方政府遭受黑客攻击, 协助恢复网站
2. 宣传此次遭受攻击情况, 让更... 阅读全帖 |
|
s*********8
发帖数: 901 | 21 Your government is spying on your life. And as I learned last week, it wants
to know a lot more about you…
Before 9/11, you just had to worry about hackers accessing your family's
personal data and using it against you… like stealing $32,000 out of your
online bank account (which happened to a family member of mine).
But after 9/11, your government can now know everything about you… under
the guise of Homeland Security… completely ignoring the Fourth Amendment to
the Constitution. (The Fourth Am... 阅读全帖 |
|
g**8
发帖数: 4951 | 22 LOL, 今晚看到一篇网上最新报道，开始说中国是故意暴露了，意在告诉美国其网战实
力以达到威慑作用，我靠，这逻辑，到了极致了，呵呵。还是那句话，中国人里面多些
石原莞尔型的人才，好好反驳一下对方吧。而我对网上有些人就知道极端意识形态窝里
斗互相整人那套非常反感。
那个报道里有这几段:
While accusations continue to fly and denials resound, there are now some
who believe China may actually have meant to be caught.
“They're very careful not to cover their tracks very well,” Yael Shahar,
an Israeli cybersecurity expert at the International Institute for Counter-
Terrorism, told the National Journal. “It's a projection of power; it's not
th... 阅读全帖 |
|
|
w*********r
发帖数: 42116 | 24 NEW YORK/WASHINGTON (Reuters) - FBI Director James Comey said on Wednesday
that hackers behind the cyberattack on Sony Pictures Entertainment provided
key clues to their identity by sometimes posting material from IP addresses
used exclusively by the North Korean government.
The hackers, who called themselves "Guardians of Peace," sometimes "got
sloppy" and failed to use proxy servers that would hide their identity,
Comey said at the International Conference on Cyber Security in New York. |
|
|
b*****d
发帖数: 61690 | 26 How the U.S. thinks Russians hacked the White House
Washington (CNN)Russian hackers behind the damaging cyber intrusion of the
State Department in recent months used that perch to penetrate sensitive
parts of the White House computer system, according to U.S. officials
briefed on the investigation.
While the White House has said the breach only ever affected an unclassified
system, that description belies the seriousness of the intrusion. The
hackers had access to sensitive information such as r... 阅读全帖 |
|
|
T**********e
发帖数: 29576 | 28 Researchers: 'Deep Panda' behind hacking of federal data
The hacker group, believed to be aligned with the Chinese government, has
also been implicated in attacks on health insurers Anthem and Premera.
The massive data breach that affected the records of 4.1 million current and
former federal employees is linked to a Chinese state-backed hacker group
known as “Deep Panda,” which recently made similarly large-scale attacks
on the health insurers Anthem and Premera, according to cybersecurity
rese... 阅读全帖 |
|
|
|
b********n
发帖数: 38600 | 31 https://www.apple.com/customer-letter/
February 16, 2016 A Message to Our Customers
The United States government has demanded that Apple take an unprecedented
step which threatens the security of our customers. We oppose this order,
which has implications far beyond the legal case at hand.
This moment calls for public discussion, and we want our customers and
people around the country to understand what is at stake.
The Need for Encryption
Smartphones, led by iPhone, have become an essential par... 阅读全帖 |
|
|
m**c
发帖数: 7349 | 33 Users of the Linux operating system are being urged to update it to remove a
"serious" bug that hackers could use to hijack systems.
Known as the Dirty Cow bug, the vulnerability has been present in many
versions of Linux for almost a decade.
The warnings come as malicious hackers start exploiting it to take over
vulnerable computers.
The vulnerability gets its name from the Linux sub-system, called Copy-On-
Write or COW, in which it appears. |
|
g**1
发帖数: 10330 | 34 Facts force Washington Post to backtrack on report that Russia hacked US
power grid
https://www.rt.com/usa/372448-washingtonpost-retracts-russian-hackers/
Editor’s Note: An earlier version of this story incorrectly said that
Russian hackers had penetrated the U.S. electric grid. Authorities say there
is no indication of that so far. The computer at Burlington Electric that
was hacked was not attached to the grid. |
|
w*p
发帖数: 16484 | 35 【 以下文字转载自 USANews 讨论区 】
发信人: bigBalls (), 信区: USANews
标 题: RUSSIAN HACKING 是 DNC 一手导演的
发信站: BBS 未名空间站 (Tue May 30 22:45:00 2017, 美东)
1。SETH RICH 或者其同谋，一直在窃取DNC的EMAIL，并且输送给WIKILEAKS。
窃取的EMAIL一直持续到 5／25／2016
2。DNC终于知道了这件事情。不光是知道EMAIL被窃，
而且知道WIKILEAKS得到了这些EMAIL。
这很可能是政府情报人员截获后通知DNC的；DNC本身没有这个能力。
3。DNC采取措施终止了LEAK。
但是很明显，WIKILEAK失去线人后，很快就会公布EMAIL。
DNC需要制定一个策略来缓解这些EMAIL带来的负面影响。
不能承认是内部吹哨子的。决定把这件事栽赃给俄罗斯
－－是海外敌对势力破坏我们民主制度的阴谋。
4。DNC在 6／14 宣布自己被HACK；
他们雇佣的 CROWDSTRIKE 网络安全公司在 6／15 发表报告，
声称是RUSSIA HACKER。... 阅读全帖 |
|
|
s******r
发帖数: 5309 | 37 614G的美帝海龙计划的全部资料，霉菌海底电子战数据和战争计划。这些值多少亿？
China hacked a Navy contractor and secured a trove of highly sensitive data
on submarine warfare
Chinese government hackers have compromised the computers of a Navy
contractor, stealing massive amounts of highly sensitive data related to
undersea warfare — including secret plans to develop a supersonic anti-ship
missile for use on U.S. submarines by 2020, according to American officials
.
The breaches occurred in January and February, the officials said, s... 阅读全帖 |
|
|
r**********n
发帖数: 5281 | 39 【 以下文字转载自 USANews 讨论区 】
发信人: Forbes (福布斯), 信区: USANews
标 题: 坐牢提示：FBI首次起诉干涉美国选举的外国人
发信站: BBS 未名空间站 (Sat Oct 20 01:07:05 2018, 美东)
喷子们说话要注意了，如果你不是美国国籍，在社交网络乱喷候选人是要坐牢的。FBI
态度已经很明确了，就看别人是不是举报你了。我们看看谁会成为第一个在美国坐牢的
五毛水军。
A Russian national has become the first person charged by the U.S. for
conspiring to interfere in the 2018 midterm elections, according to the FBI
and Justice Department. Elena Alekseevna Khusyaynova is alleged in the
indictment to have participated in a conspiracy to "sow discord in ... 阅读全帖 |
|
发帖数: 1 | 40 Chinese Hackers Breach U.S. Navy Contractors
Dec. 14, 2018 5:30 a.m. ET
WASHINGTON—Chinese hackers are breaching Navy contractors to steal
everything from ship-maintenance data to missile plans, officials and
experts said, triggering a top-to-bottom review of cyber vulnerabilities.
A series of incidents in the past 18 months has pointed out the service’s
weaknesses, highlighting what some officials have described as some of the
most debilitating cyber campaigns linked to Beijing. |
|
B*********L
发帖数: 700 | 41 5G就是四类应用：
1.移动物联网。每粒沙子的数据量都很少，但是5G要把每粒沙子纳入移动网。
2.远程实时操控。非常小的latency和非常高的可靠性。
3.传统数据语音视频业务。应付高客户密度，比如super bowl，麦加朝圣。
4.再有就是运营商的网络本身可制定可编程，提供类似Virtual Machine的Virtual
mobile network。商业上，存在更多的创新。
其中3更适用于亚洲这样的人口高密度地区。在安全性上与LTE并没有特别的不同。
1，2，和4可以带动新产业，比如远程监控，远程医疗，自动驾驶，自动物流，自动交
通网，自动能源网等等。过去的hacker只能操控软件，拥有5g控制权的hacker可以实时
控制软件和硬件。理论上，将来谁控制了5G网络，谁就可以控制一个国家所有的设备和
人，可以主宰这个国家每一个人，每一个公司，每一条产业链的生与死。 |
|
e****n
发帖数: 370 | 42 哇，5g真是了不起。
想想以后红绿灯都没了。十字路口双向200公里的车流，全部空隙间穿过，双向不用减
速。简直跟科幻片一样，居然成真了！
: 5G就是四类应用：
: 1.移动物联网。每粒沙子的数据量都很少，但是5G要把每粒沙子纳入移动网。
: 2.远程实时操控。非常小的latency和非常高的可靠性。
: 3.传统数据语音视频业务。应付高客户密度，比如super bowl，麦加朝圣。
: 4.再有就是运营商的网络本身可制定可编程，提供类似Virtual Machine的
Virtual
: mobile network。商业上，存在更多的创新。
: 其中3更适用于亚洲这样的人口高密度地区。在安全性上与LTE并没有特别的不同。
: 1，2，和4可以带动新产业，比如远程监控，远程医疗，自动驾驶，自动物流，
自动交
: 通网，自动能源网等等。过去的hacker只能操控软件，拥有5g控制权的hacker可
以实时
: 控制软件和硬件。理论上，将来谁控制了5G网络，谁就可以控制一个国家所有的
设备和
|
|
|
q******g
发帖数: 3858 | 44 http://www.guardian.co.uk/technology/2011/aug/03/china-cyber-ha
Dozens of countries, companies and organisations, ranging from the US
government to the UN and the Olympic movement, have had their computers
systematically hacked over the past five years by one country, according to
a report by a leading US internet security company.
The report, by McAfee, did not openly blame any country but hinted strongly
that China was the most likely culprit, a view endorsed by analysts.
China has previouslyb... 阅读全帖 |
|
