今天看到的两个安全相关的è¯é¢˜
Google Android SDKå‘现安全æ¼æ´ž
Core Security said Android SDK m3-rc37a and earlier are vulnerable to
several bugs in components that process GIF, PNG and BMP images, and
Android SDK m5-rc14 is vulnerable to a security bug in the component
that process BMP images.
CAPTCHA is dead, long live CAPTCHA
Hotmail, Yahoo, å’ŒGMailçš„CAPTCHAè¿‘æœŸç›¸ç»§è¢«ç ´æŽ‰ï¼Œè™½ç„¶å®ƒä»¬çœ‹èµ·æ¥æ˜¯é‚£ä¹ˆåšä¸å¯æ‘§ï¼š
Google:
![](http://www.codinghorror.com/blog/images/captcha-decoder-7.png)
Yahoo:
![](http://www.codinghorror.com/blog/images/captcha-decoder-9.png)
Hotmail:
![](http://www.codinghorror.com/blog/images/captcha-decoder-8.png)
Google:
![](http://www.codinghorror.com/blog/images/captcha-decoder-7.png)
Yahoo:
![](http://www.codinghorror.com/blog/images/captcha-decoder-9.png)
Hotmail:
![](http://www.codinghorror.com/blog/images/captcha-decoder-8.png)
— ftofficer的一点看法 —
æ£å¦‚æ–‡ç« ä¸æ‰€æåˆ°çš„é‚£æ ·ï¼ŒCAPTCHA对于专业的spamå‘é€è€…å·²ç»è¶Šæ¥è¶Šæ²¡æœ‰é˜²å¾¡åŠ›ï¼Œå®ƒçš„作用å¯èƒ½åœ¨ä¸ä¹…çš„å°†æ¥å°±å°†é€€åŒ–为仅仅为了防script kids了。对于专业的spamå‘é€è€…æ¥è¯´ï¼ŒæŠ€æœ¯æ‰‹æ®µæ˜¯æ— 法防ä½ä»–们的,尤其在ä¸å›½è¿™ç§ä½ŽäººåŠ›æˆæœ¬çš„环境下,真的雇佣人æ¥è¯»CAPTCHA并且解读,都并éžä¸€ä»¶ä¸å¯èƒ½çš„事情。
— /看法完 —