-
A hundred years later, communication was ready to receive phone call again.
Preface: When you read the newspaper, you will found some news, some prophet had prophecy alien may visit to our earth in 2023. Like a fiction. But coincidentally SITA also prepare for advance civilization communications. MAVEN, is an orbiter dedicated to studying Mars’ atmosphere. MAVEN launched in November 2013 and arrived at Mars in September…
-
CVE-2023-2728: Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin (3rd Jul 2023)
Preface: When you know there is a vulnerability on the tool. Perhaps, your security awareness level will decrease. Maybe that makes sense, if you don’t use the tool, the risk is nullified.But sometimes it’s exceptions and coincidences. Something similar happens in the Kubernetes environment as well. Background: Ephemeral containers differ from other containers in that…
-
NVIDIA empower Artificial Intelligence competence. At the same time, vendor urge staying alert for product vulnerability (2nd Jul 2023)
-
CVE-2023-22886: Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider (30th June 2023)
Preface: Airflow is a platform to programmatically author, schedule, and monitor workflows. Specifically, it is used in Machine Learning to create pipelines. Background: Apache Airflow™ is an open-source platform for developing, scheduling, and monitoring batch-oriented workflows. This open-source platform most suitable for pipelines that change slowly, are related to a specific time interval, or are pre-scheduled.…
-
CVE-2023-21220: Outdated communication methods burden modern Androids (29th June 2023)
Preface: Since the official announcement did not contain details. Perhaps the situation describe here is one of the possible reasons for encountering such vulnerabilities. Background: SMS messages are sent in plain text. Rich Communications Services (RCS) is a communication protocol that will ultimately replace MMS and SMS messages on Android devices.Android Pie (codenamed Android P during development),…
-
Can you foresee how much AI and machine learning infrastructure there will be in the next few years? (28th June 2023)
Preface: ChatGPT Memory uses the Redis vector database to store an embedded conversation history of past user-bot interactions.The first interaction between the user and bot is critical to the user experience, said Microsoft.There are 1482 Companies currently using OpenAI, it also include Adobe and Schneider Electric. Background: ChatGPT, the full name of Chat Generation Pre-training…
-
CVE-2023-20892, CVE-2023-20893, CVE-2023-20894 and CVE-2023-20895, CVE-2023-20896: Double confirm to your admin, vcenter server has patch applied. (27th June 2023)
Preface: VMware published multiple vulnerabilities on 22nd June 2023. It make the reader dazzled. Since the actual attack exploit technique did not released by VMware.However they told vulnerability caused by DCEPRC. So, let us take a closer look of DCEPRC protocol. See whether it will lure your interest? Background: (DCERPC) Distributed Computing Environment / Remote…
-
About CVE-2023-32434, CVE-2023-32435 and CVE-2023-32439: When those vulnerabilities details shown, it made me think of a software (Redux) (25th June 2023)
Preface: The state in Redux is stored in memory. This means that, if you refresh the page the state gets wiped out. The state in redux is just a variable that persists in memory because it is referenced by all redux functions. Background: Safari is a web browser developed by Apple. It is built into…
-
CVE-2023-2431: Bypass of seccomp profile enforcement.About access control logic on cloud (22nd Jun 2023)
Preface: Information security driven role base access control. But when cloud service provider design or implement access control. It will be sophisticated. If access control include virtual machine technology under hierarchical structure. In order to harden the effectiveness of the control.Cloud resources are organised hierarchically, where the organisation node is the root node in the…
-
About CVE-2023-3220 An issue was discovered in the Linux kernel through 6.1-rc8 (20th June 2023)
Preface: AI Engines are built from the ground up to be software programmable and hardware adaptable. There are two distinct design flows for any developer to unleash the performance of these compute engines with the ability to compile in minutes and rapidly explore different microarchitectures.As of today, current technology are capable On-device intelligence powered by…