-
Ccache technical matter , whether it will bring your attention? (13th Mar 2023)
Preface: Multiphysics Object-Oriented Simulation Environment (MOOSE) – An open-source, parallel finite element framework. Background: ccache is a compiler cache that speeds up recompilation by caching previous compilations and detecting when the same compilation is being done again. ccache can deliver significant speedups when developing MOOSE-based applications, or working on the framework itself.Multiphysics Object Oriented Simulation…
-
About CVE-2022-46394 – know a little bit about it (9th Mar 2023)
Preface: The Android Neural Networks API (NNAPI) is an Android C API designed for running computationally intensive operations for machine learning on Android devices. NNAPI is designed to provide a base layer of functionality for higher-level machine learning frameworks, such as TensorFlow Lite and Caffe2, that build and train neural networks. The API is available…
-
CVE-2022-4904 : Does C-ares weakness impact chrome. Perhaps it has fixed. (8th Mar 2023)
Preface: Google Chrome employ a feature, Async DNS. The objective is avoid traditional way using public DNS function. When google (Chrome) running, all the resolving domain name activities will be point to google DNS server.In Security point of view, it is good. At least it reduced unknown trap intend to hunting victim. It benefits to…
-
About CVE-2023-23916 – Don’t take vulnerabilities lightly (8th Mar 2023)
Preface:HTTP/1.1 – The current resource must finish downloading before making another request; each has a delay of one round-trip-time (RTT).HTTP/2 solves the HOL Blocking problem with multiplexing that uses streams which can be prioritized. Background: Curl attempts to provide a unified model through which applications belonging to different platforms and languages can communicate. The simple…
-
Whatever it was, no details were officially provided. Are you talking about this feature? (7th Mar 2023 GMT+9)
Preface: In Android 11, its automatically resetting permissions for apps you haven’t used for an extended period of time.In Android 13, app makers can go above and beyond in removing permissions even more proactively on behalf of their users.How do I stop Android from removing app permissions? Go into your system settings, go to app…
-
KB5019180: Urged by Microsoft on Intel former CPU vulnerability this month (2nd Mar 2023), we should staying alert. (6th Mar 2023 GMT+9)
Preface: Windows 10’s market share jumped from 68.86% in January 2023 to 73.31% in February 2023. Windows 11’s market share increased as well, but only by 1.01% to 19.13% in February 2023, said ghacks[.]net.Remark: Windows 10 continues to be supported by Microsoft until October 2025. Background: Some said, Intel microprocessors use direct I/O. Yes, Direct…
-
Security Focus: CVE-2023-20857 – vmware Workspace ONE Content (3rd Mar 2023 GMT+9)
Preface: It’s always easy to forget things. Forget even your girlfriend’s birthday. So, whatever security alerts, after more than a year, become worthless. It seems nothing. Maybe not for you. But I totally agree. Background: If Android phone OS taken unofficial modified (ROOTED) . Users can install and run applications that can only be done…
-
CVE-2023-23005: Closer look of Linux kernel design weakness (memory-tier[.]c) – 2nd Mar 2023
Preface: A NUMA system is a computer platform that comprises multiple components or assemblies each of which may contain 0 or more CPUs, local memory, and/or IO buses. Background: On new design Systems servers running Linux, a set of the PCIe slots support a unique feature called 64-bit direct memory access (DMA). DMA improves I/O…
-
CVE-2023-20937 Digging a little more, is this exactly where the problem occurs. (1st Mar 2023)
Preface: Top Programming Languages for Android App Development in 2023 · Most Popular Programming Languages for Android · Kotlin · Java · C# · C++/C · Python. What is C language use-after-free. Use-After-Free (UAF) is a vulnerability related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program…
-
CVE-2023-23518 Design Weaknesses – How to lead to evasion of sandbox controls (28th Feb 2023)
Preface: Sandbox evasion techniques. Common evasion techniques include the use of specific assembly instructions, and looking for specific registry keys or file names. Background: iOS and iPadOS help ensure runtime security by using a “sandbox,” declared entitlements, and Address Space Layout Randomization (ASLR).All third-party apps are “sandboxed,” so they are restricted from accessing files stored…