Cyber security technical information

Category: Application Development

  • Facebook 6.8 million users’ private photos leaked – Suspected it was happened in developers environment.

    Facebook looks bad luck this year. It is better to invite Chinese Feng Shui master provides suggestion. Yes, it is kidding. Perhaps Facebook intend to improve their image. It immediately let’s public know what is happening in the moment. It is talking about 6.8 million users’ private photos leakage. But suspected that the loophole was…

  • Something 101 – Are you aware Docker containers safety?

    Preface: Docker’s introduction of the standardized image format has fueled of interest in the use of containers in the enterprise recently. A Docker container look likes a Virtual machine. It is without antivirus or malware detector facilities install to Docker container platform. Is that secure? On the market, there is no such product available in…

  • He is a bird – Taiwan supercomputer (Nov 2018)

    Preface: There are many reasons for wanting to combine the two parallel programming approaches of MPI and CUDA. A common reason is to enable solving problems with a data size too large to fit into the memory of a single GPU, or that would require an unreasonably long compute time on a single node. The…

  • Supercomputer – You focus the speed of CPU, but my design goal is efficiency (Nov 2018)

    Preface: The art of driving a car in a race comes from the ability to maximize the performance of the car. Everything you do on a track takes skill when you are reaching the limits of performance. This concept also suitable on computer design. Japan supercomputer rating: Fujitsu ranks supercomputers seventh in the world. Cores:…

  • SWIFT Customer Security Controls Framework

      Preface: All SWIFT users must comply with the mandatory security controls by the end of 2018. Objective: Introduction of new controls or guidelines will take account of strong cybersecurity practices that address the currently known new and arising threats in order to pragmatically raise the security bar. Technical details: Mandatory Security Controls 1. Restrict…

  • Advisory on PHP Vulnerabilities – 12th Oct 2018

    The Multi-State Information Sharing & Analysis Center (MS-ISAC) has released an advisory on multiple Hypertext Preprocessor (PHP) vulnerabilities today (refer below url): https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-php-could-allow-for-arbitrary-code-execution_2018-113/ Perhaps PHP program version will make you frustrated. Why? The vulnerabilities addressed by MS-ISAC only for Version 7.2.11 & Version 7.1.23. However there is another fix coming soon (see below): PHP 7.1.24…

  • Consider how does JQuery affect millions of people confidential data – Sep 2018

    RiskIQ expose one of the possible way how hacker steal customer credit card data of British Airline. Expert speculate the suspects exploit Inject jQuery into a page technique collect the confidential data. BA claim that the data breach only occurs in credit card data. Risk IQ share the proof of concept shown that the technique…

  • About vulnerabilities of PHP – Aug 2018

    PHP is a popular open source general-purpose scripting language. It capable for web development and can be embedded into HTML. Perhaps a fundamental weakness of PHP and therefore we seen common problem especially SQL Injection and Trusting user input to execute code happens in frequent. Below details are the php vulnerabilities found on Aug 2018.…

  • Aug 2018 – Similar to establish new challenge in IT world, mingw-w64 design limitation!

    Address space layout randomization (ASLR) is a computer security technique involved in preventing exploitation of memory corruption vulnerabilities. ASLR function like the last line of defense of the system against cyber attack. Recently, security expert comment that the software application developer might not following guideline issue by CPU vendor. The fact is that an error…

  • Synopsis- NIST plan to retire SMS function deployed for two Factor Authentication

    As of today, we are enjoying the security protection of 2 factor authentication with SMS-based one-time passwords (OTP). This protection mechanism was distributed widely. For instance, online banking, Visa,Master credit card online payment system and mobile application payment system. However NIST plan to retire SMS base 2 factor authentication. This decision has similar a open topic…