Whatsapp web vulnerability

bugs from desktop version / web client:

漏洞利用門檻低，點開聯絡人資訊隨時中招

CheckPoint 安全研究人員 Kasif Dekel 指，WhatsApp 網頁版同樣俱備傳送圖片、音效、位置和聯絡人資訊等功能，而駭客正是利用這些功能，來散布惡意程式感染用戶的電腦。

今次發現的安全漏洞非常容易利用，駭客只需要一個有效的 WhatsApp 帳號，然後將 BAT 檔案偽裝成電子名片（vCard）發送給任意對象，當對方在網頁版中點擊察看時，就會暗中運行 BAT 檔案內的惡意程式碼，感染用戶的電腦。

透過這種方式，駭客可以安裝遙距操控軟件，控制用家的電腦；利用勒索軟體威脅用戶付錢才解鎖電腦；或者是暗中監視用戶電腦的資料和活動，以及利用感染的電腦繼續散播惡意程式等惡意行為。

幸好目前 WhatsApp 安全團隊已經確認該安全漏洞並針對網頁版釋出更新修復，但 V0.1.4881 之前的所有版本均受漏洞影響，WhatsApp 呼籲用戶應確保自己使用最新版本程式避免風險。

hackernews

whatsapp web vulnerability

and whatsapp web client on iPhone and Android devices vulnerability

metrohk

facebook app malware

留言

這個網誌中的熱門文章

CMOS sensor trends and astrophotography, from amateur astronomers perspective

Nowadays, even in low light conditions, digital camera can quality pictures with higher ISO, noise and hot pixels have been gradually reduced. Sony has introduced back illumination process for consumer market. Sony BSI sensors evolved from Exmor to now Exmor RS( stacked) technology. This stacked technology allows further chip size reduction, which has strong demands in smartphone camera market. Digital astrophotography is also benefited from such advances, utilising Back Side Illumination technology Exmor: Within the CMOS sensor, it outputs low-noise digital signals by "on-chip column AD conversion" and "dual noise reduction" to suppress noise in the first half of the process In low light conditions, when a wide aperture is desirable to collect as much light as possible. At apertures wider than f/2.0, back-illuminated Exmor R sensors are significantly more efficient at collecting light than conventional, front-illuminated sensor...

閱讀完整內容

ultrafast rendezvous to ISS

14 Oct 2020, being the first to use a new “ultrafast” rendezvous” scheme with the ISS. Following a flawless ascent to the correct orbit, Soyuz 2 .1a , Soyuz MS-17 caught up with the orbiting laboratory in only two orbits (three hours), halving the time it takes for crew to get to the Station. The three space travelers of the Soyuz MS-17 mission launched on a six-month mission the International Space Station. previous 3/4 orbit rendezvous: Soyuz MS-16 4 orbit rendezvous A three-orbit profile was deemed possible without major flight design changes after inauguration of the Soyuz 2-1A rocket that provides a much higher orbit injection accuracy than its predecessors and would allow the two correction maneuvers on Orbit #2 to be eliminated while the Automated Rendezvous Phase would still remain untouched. The deletion of the Orbit #2 maneuvers was expected to slightly tighten the already restrictive phase angle window from and upper limit of 30-35° to 25-28°...

閱讀完整內容

Scythians 斯泰基塞種西古提人

900 BC - 200 AD British museum Tomb of scythe prince, Buktarma valley, 1200 masl, Google map Herodotus 絲路上的帝國 Biblegeography 哥羅西書 3：11 在此並不分希利尼人、猶太人、受割禮的、未受割禮的、化外人、西古提人、為奴的、自主的．惟有基督是包括一切、又住在各人之內。塞種塞迦 saka 史記漢書西域傳：塞種 ctext 昔匈奴破大月氏，大月氏西君大夏，而塞王南君罽賓。塞種分散，往往為數國。自疏勒以西北，休循、捐毒之屬，皆故塞種也。匈奴列傳 Ctext ：塞王《史記》在《大宛列傳》與《匈奴列傳》中，詳細記錄了中亞至天山一帶的塞種（塞王、塞地）狀況。例如，文中記載了月氏西破走塞王，導致塞人南遷越過懸度（今帕米爾高原及克什米爾一帶） Baike Genetic history Genetics Nih griffin ? Scytho-Siberian world 塞迦 saka wiki Disappeared? Sarmatians （薩爾馬泰，奄蔡史記 , Aorsi ）and goths YouTube

閱讀完整內容

Hello!! It's Joseph

搜尋此網誌