mirror of
https://github.com/Dichgrem/Blog.git
synced 2025-02-23 14:08:37 -05:00
172 lines
9.3 KiB
HTML
172 lines
9.3 KiB
HTML
|
<!DOCTYPE html>
|
|||
|
|
<html lang="en">
|
|||
|
|
|
|||
|
|
<head>
|
|||
|
|
<title>Dich'blog</title>
|
|||
|
|
|
|||
|
|
<meta http-equiv="content-type" content="text/html; charset=utf-8">
|
|||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1">
|
|||
|
|
<meta name="robots" content="noodp"/>
|
|||
|
|
|
|||
|
|
<link rel="stylesheet" href="https://blog.dich.bid/style.css">
|
|||
|
|
<link rel="stylesheet" href="https://blog.dich.bid/color/blue.css">
|
|||
|
|
|
|||
|
|
<link rel="stylesheet" href="https://blog.dich.bid/color/background_dark.css">
|
|||
|
|
|
|||
|
|
<link rel="stylesheet" href="https://blog.dich.bid/font-hack-subset.css">
|
|||
|
|
|
|||
|
|
<meta name="description" content="">
|
|||
|
|
|
|||
|
|
<meta property="og:description" content="">
|
|||
|
|
<meta property="og:title" content="Dich'blog">
|
|||
|
|
<meta property="og:type" content="article">
|
|||
|
|
<meta property="og:url" content="https://blog.dich.bid/weekly/zhoubao-9/">
|
|||
|
|
|
|||
|
|
<meta name="twitter:card" content="summary_large_image">
|
|||
|
|
<meta name="twitter:description" content="">
|
|||
|
|
<meta name="twitter:title" content="Dich'blog">
|
|||
|
|
<meta property="twitter:domain" content="blog.dich.bid">
|
|||
|
|
<meta property="twitter:url" content="https://blog.dich.bid/weekly/zhoubao-9/">
|
|||
|
|
|
|||
|
|
<link rel="alternate" type="application/atom+xml" title="Dich'blog Atom Feed" href="https://blog.dich.bid/atom.xml" />
|
|||
|
|
|
|||
|
|
|
|||
|
|
<link rel="icon" type="image/png" href=/dich.webp />
|
|||
|
|
|
|||
|
|
</head>
|
|||
|
|
|
|||
|
|
<body class="">
|
|||
|
|
<div class="container">
|
|||
|
|
|
|||
|
|
<header class="header">
|
|||
|
|
<div class="header__inner">
|
|||
|
|
<div class="header__logo">
|
|||
|
|
|
|||
|
|
<a href="https://blog.dich.bid" style="text-decoration: none;">
|
|||
|
|
<div class="logo">
|
|||
|
|
|
|||
|
|
Dich'blog
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</a>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<nav class="menu">
|
|||
|
|
<ul class="menu__inner">
|
|||
|
|
<li><a href="https://blog.dich.bid">blog</a></li>
|
|||
|
|
|
|||
|
|
<li><a href="https://blog.dich.bid/tags">tags</a></li>
|
|||
|
|
|
|||
|
|
<li><a href="https://blog.dich.bid/archive">archive</a></li>
|
|||
|
|
|
|||
|
|
<li><a href="https://blog.dich.bid/about">about me</a></li>
|
|||
|
|
|
|||
|
|
<li><a href="https://blog.dich.bid/links">links</a></li>
|
|||
|
|
|
|||
|
|
<li><a href="https://blog.dich.bid/search">search</a></li>
|
|||
|
|
|
|||
|
|
<li class="active"><a href="https://blog.dich.bid/weekly">weekly</a></li>
|
|||
|
|
|
|||
|
|
<li><a href="https://github.com/Dichgrem" target="_blank" rel="noopener noreferrer">github</a></li>
|
|||
|
|
</ul>
|
|||
|
|
</nav>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
</header>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="content">
|
|||
|
|
|
|||
|
|
<div class="post">
|
|||
|
|
|
|||
|
|
<h1 class="post-title"><a href="https://blog.dich.bid/weekly/zhoubao-9/">谈天说地:狄奇周刊(九)</a></h1>
|
|||
|
|
<div class="post-meta-inline">
|
|||
|
|
|
|||
|
|
<span class="post-date">
|
|||
|
|
2024-08-08
|
|||
|
|
</span>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="post-content">
|
|||
|
|
<p>前言 这里是Dich的周刊,通过博客的形式讲述每周互联网形势,以及分享一些文章。</p>
|
|||
|
|
<span id="continue-reading"></span><h1 id="shi-ji"><strong>事记</strong></h1>
|
|||
|
|
<h2 id="yi-wei-rui-xin-xuan-bu-comyu-ming-jiang-yu-9yue-1ri-qi-zhang-jia"><strong>一.<a href="https://t.me/xhqcankao/12469">威瑞信宣布.COM域名将于9月1日起涨价</a></strong></h2>
|
|||
|
|
<p>运营 .COM 的域名注册局威瑞信将于9月1日将批发价从9.59美元提高到10.26美元。大多数域名注册商都会在此基础上加价，但有些注册商会向客户收取批发价。因此，许多注册商都会提高价格。这是 .COM 域名价格连续第四年上涨7%，这是威瑞信与互联网名称与数字地址分配机构签订的合同以及与美国政府达成协议允许的最高涨价幅度。总而言之，自四年前以来，威瑞信已将 .COM 域名批发成本提高了31%。对于域名注册者来说，好消息是威瑞信未来两年内不得涨价。但此后该公司可以连续四年每年涨价7%。</p>
|
|||
|
|
<h2 id="er-wei-ruan-authenticator-ying-yong-bei-pu-she-ji-que-xian-zhang-hao-bei-fu-gai-suo-ding"><strong>二.<a href="https://www.csoonline.com/article/3480918/design-flaw-has-microsoft-authenticator-overwriting-mfa-accounts-locking-users-out.html">微软 Authenticator 应用被曝设计缺陷，账号被覆盖、锁定</a></strong></h2>
|
|||
|
|
<p>微软的 Microsoft Authenticator 身份验证应用存在设计缺陷，用户在扫描QR码添加新账号后，应用会覆盖之前的账号，导致多重身份验证（MFA）被锁定。</p>
|
|||
|
|
<p>这个问题的核心在于，Microsoft Authenticator 会用相同的用户名覆盖账户。由于多数用户的用户名是电子邮件地址，这个问题尤为严重。</p>
|
|||
|
|
<p>而Google Authenticator等应用通过添加银行、汽车公司等信息来避免此问题。覆盖账号后，系统难以识别哪个账号被覆盖，可能导致新旧账号均出现验证问题。用户可能在几周或几个月后才发现账号被注销。</p>
|
|||
|
|
<h2 id="san-ma-lai-xi-ya-zheng-zai-qiang-zhi-jie-chi-dns-qing-qiu-yi-zu-zhi-yong-hu-fang-wen-bei-ping-bi-de-wang-zhan"><strong>三.<a href="https://t.me/xhqcankao/12531">马来西亚正在强制劫持 DNS 请求以阻止用户访问被屏蔽的网站</a></strong></h2>
|
|||
|
|
<p>马来西亚互联网服务提供商 (ISP) 似乎实施了透明 DNS 代理，即强制所有互联网流量返回到其本地 DNS，即使使用谷歌和 Cloudflare 等替代 DNS 也是如此。实施该策略的 ISP 包括 Time、Maxis、U Mobile、CelcomDigi 和 Unifi。通过透明 DNS 代理，ISP 可以拦截并重定向 DNS 请求至本地 DNS。</p>
|
|||
|
|
<p>为了遵守规定，所有电信公司/互联网服务提供商都必须通过其本地 DNS 阻止被认定为违法的网站。目前尚不清楚这项针对本地服务的透明 DNS 代理实施时间，但由于已有四家以上的电信公司实施，因此这似乎是针对所有电信公司的全国性指令。据称该指令早在今年2月就已发布。 马来西亚监管机构尚未对此有关的询问作出回应。</p>
|
|||
|
|
<p>—— SoyaCincau、Sinarprojec</p>
|
|||
|
|
<h2 id="si-1passwordfa-xian-gao-wei-an-quan-lou-dong-macyong-hu-xu-li-ji-sheng-ji-dao-zui-xin-ban-ben"><strong>四.<a href="https://www.landiannews.com/archives/105295.html">1Password发现高危安全漏洞，Mac用户需立即升级到最新版本</a></strong></h2>
|
|||
|
|
<p>知名密码管理器1Password的Mac版本被发现存在一个高危安全漏洞，该漏洞允许恶意软件绕过进程间的通信保护，窃取用户的解锁密钥。</p>
|
|||
|
|
<p>这一安全问题由参与DEFCON黑客大赛的安全研究人员发现，并计划在一次演讲中公开。1Password已经收到通知并及时修复了这一漏洞，敦促用户升级到8.10.38或之后的版本以确保安全。</p>
|
|||
|
|
<p>该漏洞被标识为CVE-2024-42219，目前没有证据表明它已被恶意黑客利用，更多关于该漏洞的细节将在DEFCON大会上演讲后公布。</p>
|
|||
|
|
<h1 id="wen-tui"><strong>文推</strong></h1>
|
|||
|
|
<p><a href="https://www.velasx.com/am/6237">当你不再是宇宙的正中央</a></p>
|
|||
|
|
<p><a href="https://ssshooter.com/font-and-charcode/">你在电脑上看到的字到底是怎么显示出来的？</a></p>
|
|||
|
|
<p><a href="https://sspai.com/post/85420">放轻松 | 治愈「被互联网影响的心智」</a></p>
|
|||
|
|
<hr />
|
|||
|
|
<h1 id="xiang-mu"><strong>项目</strong></h1>
|
|||
|
|
<p><a href="https://github.com/ccbikai/BroadcastChannel">将你的 Telegram Channel 转为微博客</a></p>
|
|||
|
|
<p><a href="https://github.com/jianjianai/FList">FList：静态页面生成的一个简洁的在线文件列表</a></p>
|
|||
|
|
<p><a href="https://github.com/forthespada/CampusShame">互联网仍有记忆！那些曾经在校招过程中毁过口头offer、意向书、三方的公司</a></p>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="pagination">
|
|||
|
|
<div class="pagination__title">
|
|||
|
|
<span class="pagination__title-h">Thanks for reading! Read other posts?</span>
|
|||
|
|
<hr />
|
|||
|
|
</div>
|
|||
|
|
<div class="pagination__buttons">
|
|||
|
|
<span class="button previous">
|
|||
|
|
<a href="https://blog.dich.bid/weekly/zhoubao-8/">
|
|||
|
|
<span class="button__icon">←</span>
|
|||
|
|
<span class="button__text">谈天说地:狄奇周刊(八)</span>
|
|||
|
|
</a>
|
|||
|
|
</span>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<span class="button next">
|
|||
|
|
<a href="https://blog.dich.bid/weekly/zhoubao-10/">
|
|||
|
|
<span class="button__text">谈天说地:狄奇周刊(十)</span>
|
|||
|
|
<span class="button__icon">→</span>
|
|||
|
|
</a>
|
|||
|
|
</span>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<footer class="footer">
|
|||
|
|
<div class="footer__inner">
|
|||
|
|
<div class="copyright">
|
|||
|
|
<span>©
|
|||
|
|
2025
|
|||
|
|
Dichgrem</span>
|
|||
|
|
<span class="copyright-theme">
|
|||
|
|
<span class="copyright-theme-sep">:: </span>
|
|||
|
|
Theme: <a href="https://github.com/pawroman/zola-theme-terminimal/">Terminimal</a> by pawroman
|
|||
|
|
</span>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</footer>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</body>
|
|||
|
|
|
|||
|
|
</html>
|