Chrome将修复存在23年的历史记录窥探漏洞
Chrome 136版本将首次彻底解决存在23年的"浏览器历史嗅探"漏洞。该漏洞允许网站通过一定BUG推断用户访问记录。尽管15年前已有缓解措施，但攻击者仍能通过多种方式绕过防护。
谷歌工程师表示，新方案采用"三重密钥分区"技术，将访问记录与来源网站绑定，从根本上阻断跨站查询。该修复标志着浏览器架构的重要演进，有望结束这场持续二十余年的隐私攻防战。
The Register
📮投稿 ☘️频道 🌸聊天
BY 科技圈🎗在花频道📮
However, analysts are positive on the stock now. “We have seen a huge downside movement in the stock due to the central electricity regulatory commission’s (CERC) order that seems to be negative from 2014-15 onwards but we cannot take a linear negative view on the stock and further downside movement on the stock is unlikely. Currently stock is underpriced. Investors can bet on it for a longer horizon," said Vivek Gupta, director research at CapitalVia Global Research.
Telegram’s stand out feature is its encryption scheme that keeps messages and media secure in transit. The scheme is known as MTProto and is based on 256-bit AES encryption, RSA encryption, and Diffie-Hellman key exchange. The result of this complicated and technical-sounding jargon? A messaging service that claims to keep your data safe.Why do we say claims? When dealing with security, you always want to leave room for scrutiny, and a few cryptography experts have criticized the system. Overall, any level of encryption is better than none, but a level of discretion should always be observed with any online connected system, even Telegram.
在花软件新闻投稿频道 from us