2017年11月9日 星期四

The Planning Fallacy

REF: https://blog.trello.com/planning-fallacy-overloaded-at-work
Planning Fallacy Work Overload Problems
You look down at your to-do list and your heart starts racing. Why? You’ve just had that brutal realization that there is absolutely no way you’re going to be able to get everything done.

2017年11月5日 星期日

ResourceSpace: new search & workflow

TrendLabs: ZNIU Found Distributing New Variant

Figure 1 config profiles
Figure 1. Screenshot of an unsigned profile (left) and a signed profile (right). In English translation, the right photo describes 51 Apple Helper, an iOS app store that provides games, software, and wallpaper.
REF: https://blog.trendmicro.com/trendlabs-security-intelligence/app-stores-formerly-coddled-zniu-found-distributing-new-ixintpwnyjsnpi-variant/

2017年11月3日 星期五

Overlooked Biases That Creep Into Your Work

REF: https://blog.trello.com/7-overlooked-biases-that-creep-into-your-work-and-undermine-its-success
Overlooked Biases that Creep Into Work
From cooking dinner to deciding which new project to tackle at work, you make a lot of decisions throughout the day. Some of these decisions are so automatic that you don’t even think about them. And the decisions that you do think about (and put hours of research into) may not be as objective and rational as you may think.

2017年11月2日 星期四

About WPA2 compromised protocol

  OpenBSD was notified of the vulnerability on 15 July 2017, before
  CERT/CC was involved in the coordination. Quite quickly, Theo de Raadt
  replied and critiqued the tentative disclosure deadline: In the open
  source world, if a person writes a diff and has to sit on it for a
  month, that is very discouraging. Note that I wrote and included a
  suggested diff for OpenBSD already, and that at the time the tentative
  disclosure deadline was around the end of August. As a compromise, I
  allowed them to silently patch the vulnerability. In hindsight this was
  a bad decision, since others might rediscover the vulnerability by
  inspecting their silent patch. To avoid this problem in the future,
  OpenBSD will now receive vulnerability notifications closer to the end
  of an embargo.

REF: https://marc.info/?l=openbsd-misc&m=150815942414653&w=2

2017年11月1日 星期三

TrendLabs: Coin Miner Mobile Malware

The following malicious apps were found on Google Play and are connected to this threat:
SHA256 hashApp namePackage nameDetection name
22581e7e76a09d404d093ab755888743b4c908518c47af66225e2da991d112f0Recitiamo Santo Rosario Freeprsolutions.rosariofacileadsANDROIDOS_JSMINER
440cc9913d623ed42563e90eec352da9438a9fdac331017af2ab9b87a5eee4afSafetyNet Wireless Appcom.freemo.safetynetANDROIDOS_JSMINER
d3c0bed627edab9ac1bbc2bcc6e8c3ff45b4708afa527790e42a4a6fe2c045f0Car Wallpaper HD: mercedes, ferrari, bmw and audicom.yrchkor.newwallpapersANDROIDOS_CPUMINER
REF: http://blog.trendmicro.com/trendlabs-security-intelligence/coin-miner-mobile-malware-returns-hits-google-play/

2017年10月31日 星期二

Wowza ClearCaster appliance

cc-roadshow-san-francisco.png
Wowza ClearCaster is an exciting new appliance, purpose-built to ensure successful broadcasts on Facebook Live. Designed in collaboration with Facebook, this rack-mountable device easily integrates with your existing production workflow. Just plug it in, and ClearCaster auto-configures to provide highly reliable, broadcast-quality streams.