-
Headline news: FAA system outage disrupts thousands of flights across U.S. (12th Jan 2023)
Preface: Thousands of flights across the U.S. were delayed Wednesday after a Federal Aviation Administration pilot alert system failed overnight, prompting a nationwide halt to departures. said CNBC news. Headline news – https://www.cnbc.com/2023/01/11/faa-orders-airlines-to-pause-departures-until-9-am-et-after-system-outage.html Background: The Department of Homeland Security published the following opinion piece four years ago. The GPS system is now considered a “crosssector…
-
CVE‑2022‑42271 Staying alert, Artificial intelligence world! (12th Jan 2023)
Preface: An “intelligent” computer uses AI to think like a human and perform tasks on its own. Machine learning is how a computer system develops its intelligence. One way to train a computer to mimic human reasoning is to use a neural network, which is a series of algorithms that are modeled after the human…
-
Intel security advisory (AV23-015) 10th JAN 2023
Preface: OpenMP (Open Multi-Processing) is an application programming interface (API) that supports multi-platform shared-memory multiprocessing programming in C, C++, and Fortran, on many platforms, instruction-set architectures and operating systems, including Solaris, AIX, FreeBSD, HP-UX, Linux, macOS, and Windows. Background: A LEGO brick is a small plastic part, but it can build a big robot. Similar concept,…
-
CVE-2022-25746: Possible cause of this vulnerability in Snapdragon (9th JAN 2023)
Preface: Qualcomm’s current Snapdragon chips for smartphones are also based on Arm technology. The Snapdragon’s central processing unit (CPU) uses the ARM architecture. Some companies, like Apple, license the ISA from Arm, then design their own physical processor circuits to implement the ISA instructions. Other companies, like Qualcomm historically, also buy the rights to full…
-
CVE-2023-21420 Use of Externally-Controlled Format String vulnerabilities in STST TA (8th JAN 2023)
Preface: What is Samsung TEEGRIS? Samsung TEEGRIS is a system-wide security solution that allows you to run applications in a trusted execution environment based on TrustZone. We present the TEEGRIS architecture for external developers to enable their trusted applications and services. Background: TEEGRIS is a relatively recent TEE OS, introduced by Samsung on the Galaxy…
-
CVE-2022-45857 – FortiManager Incorrect user management (6th JAN 2023)
Preface: Every Fortinet product has a built-in administrator account. Background: Ten years ago, one of the key function is reset function in business contingency program. Refer to textbooks, the objective of disaster recovery is resume the service. So more terms created: Recovery Point Objective (RPO) Recovery Time Objective (RTO) Work Recovery Time (WRT) Maximum Tolerable…
-
Cyber Défense from narrow to broad (5th Jan 2023)
Preface: Sustainability is a buzzword in the modern world in recent years. It applies to business, culture…even our education. A slogan, keep learning. Maybe it’s the Cantonese mantra, One is never too old to learn. Perhaps it also apply to cyber security protection. Background: In last twenty years, computing technology driven growth of the world.…
-
CVE-2022-32635 – Improper input validation for GPS on mediatek chipsets (4th JAN 2023)
Preface: The Global Positioning System (GPS) employs trilateration to calculate the coordinates of positions at or near the Earth’s surface. Trilateration refers to the trigonometric law by which the interior angles of a triangle can be determined if the lengths of all three triangle sides are known. I have a set of coordinates, that I…
-
CVE-2022-42475 A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN (2nd JAN 2023)
Preface: The SSL VPN must be exposed to the Internet. So you can use the service anywhere. This is a basic design. Fortinet has patched a zero day buffer overflow in FortiOS that could lead to remote code execution. There has been a report of active exploitation and organizations should patch urgently. (2 weeks ago…
-
CVE-2022-48198 About Robot Operating System (ROS) Vulnerabilities (2nd Jan 2023)
Preface: If you were a child, you would think of the moon and Mars. Furthermore you will think about robot and extraterrestrial. But you might not think about design weakness, so called vulnerability. Background: Robot Operating System (ROS) is a set of open source algorithms, hardware driver software and tools developed to develop robot control…