【創業大冒險】9/17(五)新創基地課程📣遠距辦公也要平步青雲!
面對疫後辦公形式的轉變,#遠距辦公 將逐漸普及化,遠端連線及資訊存取已形成潛在的防護漏洞。
本次活動將分享中小及新創企業應該如何依各發展階段的需求,善用「雲」應用,讓遠端協同合作更彈性、安全管理自動化,用靈活的創新解決方案,打造未來新工作模式!
🎯活動日期:9/17(五)
🎯活動時間:14:00-16:00
🎯活動地點:社會創新實驗中心1樓107教室 (臺北市仁愛路三段99號)
👉報名傳送門:https://pse.is/3huy5e
📍若報名人數超過30人,本活動將轉為線上進行,使用平臺為Google Meet,活動連結將於前三日公布。
#趨勢學 #資安議題
#新創圓夢網 #TaiwanStartupHub新創基地
【Startup Adventure】Information security and the importance of telecommuting
Due to the COVID-19 outbreak, telecommuting becomes a popular option for SMEs and startups; however, remote connection and information access have formed information disclosure vulnerability.
This time, speakers will share how enterprises can make remote collaboration more flexible and set up automatic security management according to each development stage.With flexible and innovative solutions, we will show you how to build the new work model in the future!
🎯Date: September 17th, 2021
🎯Time: 14:00-16:00
🎯Location: Rm. 107, 1F., No.99, Sec. 3, Ren’ai Rd., Da’an Dist., Taipei City 106085, Taiwan (R.O.C.)
👉Registration Link: https://pse.is/3huy5e
📍If the event has registered more than 30 people, the physical event will be held online. We will use Google Meet as online system, and send you the event link beforehand.
同時也有14部Youtube影片,追蹤數超過5萬的網紅Imagine Scent,也在其Youtube影片中提到,FTC Disclosure: This is NOT a sponsored post. All opinions expressed in this video are entirely my own. Some of the below links are affiliate links,...
「information disclosure」的推薦目錄:
- 關於information disclosure 在 經濟部中小企業處 Facebook 的最佳解答
- 關於information disclosure 在 矽谷牛的耕田筆記 Facebook 的精選貼文
- 關於information disclosure 在 Apple Daily - English Edition Facebook 的最佳解答
- 關於information disclosure 在 Imagine Scent Youtube 的最佳解答
- 關於information disclosure 在 Imagine Scent Youtube 的最佳貼文
- 關於information disclosure 在 Imagine Scent Youtube 的精選貼文
information disclosure 在 矽谷牛的耕田筆記 Facebook 的精選貼文
本篇文章探討的也是資安系列問題,而這次的目標主角則是 MAC 系統上廣為流傳的 Homebrew 系統。
結論:
作者透過觀察 Homebrew 的 Github Action 流程,成功得上傳一個會列印一行的程式碼到 iterm2 套件中,讓所有安裝的使用者都會於 Terminal 上看到一行作者客製化的訊息。
本次的漏洞是作者刻意從 Homebrew 的 Vulnerability Disclosure Program 專案中去嘗試尋找可能的問題,所有的操作都有跟官方專案的人探討過流程,並且一切的 PoC 都是單純證明該攻擊的可行性,所以有興趣研究的人請遵循一樣的想法去做,不要認真的想攻擊。
原因:
1. Homebrew 透過 Github Action 執行 CI/CD 動作
2. Homebrew 撰寫了一個自動合併 Pull Request 的 Action
3. CI 內會透過一個Ruby的 Git Diff 第三方函式庫來驗證,只要符合下列條件就可以自動合併
- Modifying only 1 file
- Not moving/creating/deleting file
- Target filepath matches \ACasks/[^/]+\.rb\Z
- Line count of deletions/additions are same
- All deletions/additions matches /\A[+-]\s*version "([^"]+)"\Z/ or - -\A[+-]\s*sha256 "[0-9a-f]{64}"\Z
- No changes to format of versions (e.g. 1.2.3 => 2.3.4)
作者一開始想要從該規則下手,找尋有沒有可能塞入惡意攻擊並且騙過系統讓其自動合併,然而這些規則看起來沒有什麼太多問題,於是作者轉往其他領域去找尋問題,其中一個想法就是到底該 Ruby 的 Git Diff 是如何實作,也許從實作下手更有辦法去欺騙這一切。
很順利的是,作者真的於該函式庫中找到問題,對於一個 Git Diff 的結果來說,該函式庫會透過 +++ "?b/(.*) 這樣的正規表達式來判別檔案路徑的資訊而並非程式修改內容,譬如下列 diff
```
diff --git a/source file path b/destination file path
index parent commit hash..current commit hash filemode
--- a/source file path
+++ b/destination file path
@@ line information @@
Details of changes (e.g.: `+asdf`,`-zxcv`)
```
作者就開始思考,如果讓程式碼可以符合 +++ "?b/(.*) 的規則,是否有辦法讓程式碼不被視為一個檔案的修改,因此就可以修改多行程式碼但是讓 CI 系統認為只有一行程式碼於是進行自動合併
作者最初的想法如下,第一行用來放惡意程式碼,第二行用來偽裝檔案路徑,經過一番嘗試後作者真的成功塞入了類似 PRINTF 的程式碼到環境中並觸發自動合併。接者各地使用者透過 brew 安裝 iterm 版本都會看到使用者塞入的程式碼。
```
++ "b/#{Arbitrary codes here}"
++ b/Casks/cask.rb
```
原文還有更多作者的思路過程,有興趣的不要錯過
原文:
https://blog.ryotak.me/post/homebrew-security-incident-en/#fn:7
測試用PR:
https://github.com/Homebrew/homebrew-cask/pull/104191
information disclosure 在 Apple Daily - English Edition Facebook 的最佳解答
An appeals court in China dealing with a case involving the disclosure of information related to Chinese President Xi Jinping's family has not provided defense lawyers with the full body of evidence, leading to suspicions that the court is preparing to deliver its verdict in writing behind closed doors.
Read: https://bit.ly/3tVCPcL
被指公開國家主席習近平女兒習明澤和姐夫鄧家貴的個人資料,導致24人被集體判刑的「惡俗維基」案,二審期限將屆,被告的代表律師要求查閱案中卷宗被拒,懷疑二審法院圖以書面形式,秘密宣判案件。
#EsuWiki #China #XiJinping
________
📱Download the app:
http://onelink.to/appledailyapp
📰 Latest news:
http://appledaily.com/engnews/
🐤 Follow us on Twitter:
https://twitter.com/appledaily_hk
💪🏻 Subscribe and show your support:
https://bit.ly/2ZYKpHP
#AppleDailyENG
information disclosure 在 Imagine Scent Youtube 的最佳解答
FTC Disclosure: This is NOT a sponsored post. All opinions expressed in this video are entirely my own. Some of the below links are affiliate links, which earn me a small commission on purchases made. Thank you for reading. SUPER AFFORDABLE + MASS APPEALING SUMMER FRAGRANCE - Light Blue Intense Pour Homme Review
Check Out FragranceNet here!
https://www.fragrancenet.com/?mv_pc=imaginescent3&utm_source=imaginescent3&utm_medium=social&utm_campaign=youtube
Check Out Light Blue Eau Intense here!
https://www.fragrancenet.com/cologne/dolce-and-gabbana/d-and-g-light-blue-eau-intense/eau-de-parfum?mv_pc=imaginescent3&utm_source=imaginescent3&utm_medium=social&utm_campaign=youtube
---------------------------------------------------------------------------------------------------------
==RATING SYSTEM INFORMATION==
-Definitions-
Uniqueness - How much the scent stands out from the current market.
Practicality - How often and how much you would actual reach for the fragrance.
Versatility - How many occasions can it be use in.
Longevity - How long the fragrance last on skin.
Projection - How strong and how long the fragrance projects.
Mass Appeal - The potential to get compliments or avoid negative feedback.
Quality - How smooth the ingredient comes off in the scent.
Presentation - Bottle design and, when relevant, box design.
-Tier Information-
S Tier - Near perfect stats across the board. These are typically once in a decade all stars that can do it all. Highest recommendation to own a full bottle if price is right.
A Tier - Typical high performance, versatility, and practicality. These are must consider fragrances for general users. Only lacking bits and pieces in a few area. Overall, very solid fragrances.
B Tier - Typically lacking in one major category or average in most. These are good fragrances and can be a nice addition to the collection.
C Tier - Typically lacking in a couple major categories or below average in most. These are okay fragrances, some of which could be novelties or simply has too many competitions. These can be fun to to own, but typically not practical.
D Tier - Typically lacking in many categories. These fragrances are most likely not the most practical to own, and possibly has many competitions that out performs it in variety of aspects.
F Tier - Likely impractical to own, poor performance, and lack luster stats across the board. These could be extreme novelties, or outright beaten out by even the lowest ranked fragrances. Do not recommend owning.
-Tier Qualification-
S Tier: 95+ Points
A+ Tier: 90-94 Points
A Tier: 85 - 89 Points
A- Tier: 80 - 84 Points
B+ Tier: 75 - 79 Points
B Tier: 70 - 74 Points
B- Tier: 65 - 69 Points
C+ Tier: 60 - 64 Points
C Tier: 55 - 59 Points
C- Tier: 50 - 54 Points
D Tier: 45 - 49 Points
F Tier: Below 45 Points
---------------------------------------------------------------------------------------------------------
==ALL TIME FAVORITE DESIGNERS==
https://bit.ly/2AGqAHE
https://bit.ly/2PYcbLz
https://bit.ly/2FNq51W
https://bit.ly/2qPIuCh
https://bit.ly/2zvTTMH
https://bit.ly/2DrTNbm
https://bit.ly/2zndGNV
https://bit.ly/2DSwlVR
https://bit.ly/2QV8vvx
https://bit.ly/2DJgMQn
https://bit.ly/2PLXHDF
---------------------------------------------------------------------------------------------------------
==WORLDWIDE SHIPPING ON DECANTS==
https://www.decantboutique.com/?ref=imaginescent
---------------------------------------------------------------------------------------------------------
- All My Favorite Gears
https://amzn.to/2JaIHHw
- My Ridiculous Wish List
https://amzn.to/2r5nZlM
---------------------------------------------------------------------------------------------------------
WHAT I USE TO MAKE VIDEOS
Best Camera Ever- http://amzn.to/2kVevr3
Best Wide Lens- https://amzn.to/2K0d3gZ
Affordable Wide Lens- http://amzn.to/2lmrSSe
Lens for Cinematic Close Up Shots- https://amzn.to/2Jap4PS
Amazing Microphone- http://amzn.to/2ktZ8VQ
Affordable Lighting- https://amzn.to/2JaHgJg
Best Editing Software- https://amzn.to/2qJXYs5
---------------------------------------------------------------------------------------------------------
- CONNECT WITH ME THROUGH SOCIAL MEDIA
Facebook: https://www.facebook.com/imaginescent/
Instagram: https://www.instagram.com/imaginescent/
#imaginescent
- MUSIC
https://www.epidemicsound.com/
- SUBSCRIBE FOR MORE AWESOME REVIEWS
https://www.youtube.com/c/imaginescent
Stay tune for more Top 10 Best Men Fragrances, Most Complimented Fragrances, Best Designer Fragrances, Best Niche Fragrances, Brand Reviews, and much much more.
information disclosure 在 Imagine Scent Youtube 的最佳貼文
FTC Disclosure: This is NOT a sponsored post. All opinions expressed in this video are entirely my own. Some of the below links are affiliate links, which earn me a small commission on purchases made. Thank you for reading. EXTREMELY OBSESSED ABOUT THIS FRAGRANCE - Hugo Boss Bottled Intense Edp Review
For the passed three days I've been wearing this fragrance NON-STOP! I constantly throw it on and refresh throughout the day. The opening in this is so insanely good I couldn't put it down. But what are my full thoughts on it? And how does it stack up to the other fragrances on the market today?
Try it here- https://bit.ly/36cebKf
---------------------------------------------------------------------------------------------------------
==RATING SYSTEM INFORMATION==
-Definitions-
Uniqueness - How much the scent stands out from the current market.
Practicality - How often and how much you would actual reach for the fragrance.
Versatility - How many occasions can it be use in.
Longevity - How long the fragrance last on skin.
Projection - How strong and how long the fragrance projects.
Mass Appeal - The potential to get compliments or avoid negative feedback.
Quality - How smooth the ingredient comes off in the scent.
Presentation - Bottle design and, when relevant, box design.
-Tier Information-
S Tier - Near perfect stats across the board. These are typically once in a decade all stars that can do it all. Highest recommendation to own a full bottle if price is right.
A Tier - Typical high performance, versatility, and practicality. These are must consider fragrances for general users. Only lacking bits and pieces in a few area. Overall, very solid fragrances.
B Tier - Typically lacking in one major category or average in most. These are good fragrances and can be a nice addition to the collection.
C Tier - Typically lacking in a couple major categories or below average in most. These are okay fragrances, some of which could be novelties or simply has too many competitions. These can be fun to to own, but typically not practical.
D Tier - Typically lacking in many categories. These fragrances are most likely not the most practical to own, and possibly has many competitions that out performs it in variety of aspects.
F Tier - Likely impractical to own, poor performance, and lack luster stats across the board. These could be extreme novelties, or outright beaten out by even the lowest ranked fragrances. Do not recommend owning.
-Tier Qualification-
S Tier: 95+ Points
A+ Tier: 90-94 Points
A Tier: 85 - 89 Points
A- Tier: 80 - 84 Points
B+ Tier: 75 - 79 Points
B Tier: 70 - 74 Points
B- Tier: 65 - 69 Points
C+ Tier: 60 - 64 Points
C Tier: 55 - 59 Points
C- Tier: 50 - 54 Points
D Tier: 45 - 49 Points
F Tier: Below 45 Points
--------------------------------------------------------------------------------------------------------
==ALL TIME FAVORITE DESIGNERS==
https://bit.ly/2AGqAHE
https://bit.ly/2PYcbLz
https://bit.ly/2FNq51W
https://bit.ly/2qPIuCh
https://bit.ly/2zvTTMH
https://bit.ly/2DrTNbm
https://bit.ly/2zndGNV
https://bit.ly/2DSwlVR
https://bit.ly/2QV8vvx
https://bit.ly/2DJgMQn
https://bit.ly/2PLXHDF
---------------------------------------------------------------------------------------------------------
==WORLDWIDE SHIPPING ON DECANTS==
https://www.decantboutique.com/?ref=imaginescent
---------------------------------------------------------------------------------------------------------
- All My Favorite Gears
https://amzn.to/2JaIHHw
- My Ridiculous Wish List
https://amzn.to/2r5nZlM
---------------------------------------------------------------------------------------------------------
WHAT I USE TO MAKE VIDEOS
Best Camera Ever- http://amzn.to/2kVevr3
Best Wide Lens- https://amzn.to/2K0d3gZ
Affordable Wide Lens- http://amzn.to/2lmrSSe
Lens for Cinematic Close Up Shots- https://amzn.to/2Jap4PS
Amazing Microphone- http://amzn.to/2ktZ8VQ
Affordable Lighting- https://amzn.to/2JaHgJg
Best Editing Software- https://amzn.to/2qJXYs5
---------------------------------------------------------------------------------------------------------
- CONNECT WITH ME THROUGH SOCIAL MEDIA
Facebook: https://www.facebook.com/imaginescent/
Instagram: https://www.instagram.com/imaginescent/
#imaginescent
- MUSIC
https://www.epidemicsound.com/
- SUBSCRIBE FOR MORE AWESOME REVIEWS
https://www.youtube.com/c/imaginescent
Stay tune for more Top 10 Best Men Fragrances, Most Complimented Fragrances, Best Designer Fragrances, Best Niche Fragrances, Brand Reviews, and much much more.
information disclosure 在 Imagine Scent Youtube 的精選貼文
FTC Disclosure: This is NOT a sponsored post. All opinions expressed in this video are entirely my own. Some of the below links are affiliate links, which earn me a small commission on purchases made. Thank you for reading. BEASTLY MINT ?? BEST CHEAP MINT FRAGRANCE ON THE MARKET - AZZARO WILD MINT REVIEW
Hi guys, today we are reviewing one of the best mint fragrance on the market right now in terms of affordability and quality. Wild Mint by Azzaro is rich, unique, cheap, and quality all in the same fragrance.
---------------------------------------------------------------------------------------------------------
==RATING SYSTEM INFORMATION==
-Definitions-
Uniqueness - How much the scent stands out from the current market.
Practicality - How often and how much you would actual reach for the fragrance.
Versatility - How many occasions can it be use in.
Longevity - How long the fragrance last on skin.
Projection - How strong and how long the fragrance projects.
Mass Appeal - The potential to get compliments or avoid negative feedback.
Quality - How smooth the ingredient comes off in the scent.
Presentation - Bottle design and, when relevant, box design.
-Tier Information-
S Tier - Near perfect stats across the board. These are typically once in a decade all stars that can do it all. Highest recommendation to own a full bottle if price is right.
A Tier - Typical high performance, versatility, and practicality. These are must consider fragrances for general users. Only lacking bits and pieces in a few area. Overall, very solid fragrances.
B Tier - Typically lacking in one major category or average in most. These are good fragrances and can be a nice addition to the collection.
C Tier - Typically lacking in a couple major categories or below average in most. These are okay fragrances, some of which could be novelties or simply has too many competitions. These can be fun to to own, but typically not practical.
D Tier - Typically lacking in many categories. These fragrances are most likely not the most practical to own, and possibly has many competitions that out performs it in variety of aspects.
F Tier - Likely impractical to own, poor performance, and lack luster stats across the board. These could be extreme novelties, or outright beaten out by even the lowest ranked fragrances. Do not recommend owning.
-Tier Qualification-
S Tier: 95+ Points
A+ Tier: 90-94 Points
A Tier: 85 - 89 Points
A- Tier: 80 - 84 Points
B+ Tier: 75 - 79 Points
B Tier: 70 - 74 Points
B- Tier: 65 - 69 Points
C+ Tier: 60 - 64 Points
C Tier: 55 - 59 Points
C- Tier: 50 - 54 Points
D Tier: 45 - 49 Points
F Tier: Below 45 Points
---------------------------------------------------------------------------------------------------------
==ALL TIME FAVORITE DESIGNERS==
https://bit.ly/2AGqAHE
https://bit.ly/2PYcbLz
https://bit.ly/2FNq51W
https://bit.ly/2qPIuCh
https://bit.ly/2zvTTMH
https://bit.ly/2DrTNbm
https://bit.ly/2zndGNV
https://bit.ly/2DSwlVR
https://bit.ly/2QV8vvx
https://bit.ly/2DJgMQn
https://bit.ly/2PLXHDF
---------------------------------------------------------------------------------------------------------
==WORLDWIDE SHIPPING ON DECANTS==
https://www.decantboutique.com/?ref=imaginescent
---------------------------------------------------------------------------------------------------------
- All My Favorite Gears
https://amzn.to/2JaIHHw
- My Ridiculous Wish List
https://amzn.to/2r5nZlM
---------------------------------------------------------------------------------------------------------
WHAT I USE TO MAKE VIDEOS
Best Camera Ever- http://amzn.to/2kVevr3
Best Wide Lens- https://amzn.to/2K0d3gZ
Affordable Wide Lens- http://amzn.to/2lmrSSe
Lens for Cinematic Close Up Shots- https://amzn.to/2Jap4PS
Amazing Microphone- http://amzn.to/2ktZ8VQ
Affordable Lighting- https://amzn.to/2JaHgJg
Best Editing Software- https://amzn.to/2qJXYs5
---------------------------------------------------------------------------------------------------------
- CONNECT WITH ME THROUGH SOCIAL MEDIA
Facebook: https://www.facebook.com/imaginescent/
Instagram: https://www.instagram.com/imaginescent/
#imaginescent
- MUSIC
https://www.epidemicsound.com/
- SUBSCRIBE FOR MORE AWESOME REVIEWS
https://www.youtube.com/c/imaginescent
Stay tune for more Top 10 Best Men Fragrances, Most Complimented Fragrances, Best Designer Fragrances, Best Niche Fragrances, Brand Reviews, and much much more.