[KJPT]谷歌在补丁发布日前披露Windows漏洞微软怒了 (转载) - 未名空间MITBBS历史存档

[KJPT]谷歌在补丁发布日前披露Windows漏洞微软怒了 (转载)# Programming - 葵花宝典

Y*n2015-01-13 08:01

1 楼

Update:
Reeived the approval emails on July 19th, received the welcome notices on
July 22nd.
Received two cards on July 23rd. Changed the address to Carlifornia.
*********
Got phone and email messages for two cards last night.
NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
with EVL and job discription. Changed job again in 2010 in a different state
. No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
everybody to request a SR or do something, then USCIS will not waste any
visa number this year.

l*o2015-01-13 08:01

2 楼

麻麻说：作为一个mm, 腰要细一点才好看
脸也要瘦一点比较好
美女还要配鲜花
但是我最喜欢的还是躺在地上耍无赖！

a*u2015-01-13 08:01

3 楼

☆─────────────────────────────────────☆
jiangfushu (Fushu Jiang) 于 (Mon Jan 12 00:15:21 2009) 提到:
这是我刚听到的一个complaint。大家发表一下高见:
转发:
我太太练了严新气功(严新生命科技)后, 脾气越来越暴躁了:
一谈到严新的不足，比如，是否搞错科学概念，就暴跳如雷。
但这毕竟是从他的讲话中看到的啊, 至少可以探讨啊。
对佛教，道教官方网站上的文章很抵触，决不看，说现代人写的不看，也坚决不
与现代学佛学道的善知识来往接触。
最多只看古人写的。可又基本上没时间看，因为气功的各式各样的
活动安排把他们的业余时间精力几乎全占了(是否是一种变相的
邪教式的对外封闭呢？虽然大师门面上口口声声说广才儒释道)。都十多年了，也没看
几本。
更重要的是对这些古代著作的理解，完全按照气功师(却是个现代人)
对佛道资料的解释来理解。而这些解释有些又确实不同于一些高僧高道的讲解,
我听着就觉得这些解释看起来好像挺片面。
而从网上的资料看，宣化上人早就指出了气功不同于佛教，于是她就回避，不敢看宣

g*g2015-01-13 08:01

4 楼

【以下文字转载自 ScitechNews 讨论区】
发信人: inews (inews), 信区: ScitechNews
标题: [KJPT]谷歌在补丁发布日前披露Windows漏洞微软怒了
发信站: BBS 未名空间站 (Tue Jan 13 00:29:53 2015, 美东)
编者按：微软和Google的关系在近几日急转直下，原因在于，Google披露了一个Windows 8.1 的安全漏洞，而微软还未对此做出更新。
Google旗下的Project Zero项目小组上周公布了微软Windows 8.1的一个漏洞，该漏洞能允许低级别的账户成为系统管理员，从而得以访问计算机内敏感数据。
其实，Project Zero很早就发现了该漏洞，并与2014年10月31日告知了微软。按照Project Zero的说法，如果告知后90天内微软没有做出修复，该漏洞就会被公开。
为什么Google有这样的权力？Google在今年7月宣布Project Zero计划，它由一组安全研究人员负责，唯一的目标就是追踪和修复漏洞，维护所有互联网用户的安全。
项目小组主要针对“零日漏洞(zero-day)”。“零日漏洞”是目前互联网普遍存在的一项威胁，这些漏洞常常尚未被公开，因而用户无法及时得到对应的补丁。
Windows 8.1的漏洞被披露后，微软表示，1月13日是微软的系统补丁发布日，微软也曾要求Google在这个日子之前不公开漏洞。但是，Google在该日期前两天公开了漏洞细节。
Project Zero的使命是保护互联网安全，但微软认为它并不友好。微软安全响应中心高级总监Chris Betz在声明中说，修复漏洞是复杂而耗时的，不是每一个漏洞都能在 90 天之内得以解决。
“Google的做法基于原则，而不是用户的安全，我们强烈呼吁Google以保护我们共同的用户为目标。”

y*u2015-01-13 08:01

5 楼

cong

g*g2015-01-13 08:01

6 楼

NeverLearn还嘲笑OpenSSL哪？你软两个半月都不作为。跟OpenSSL打补丁的速度差太多
了。

a*y2015-01-13 08:01

7 楼

GXGX

N*n2015-01-13 08:01

8 楼

OPENSSL的用户都被BREACH了，你丫还舔着脸吹速度？微软打补丁一个UPDATE
跑下来就都补上了。OPENSSL那里全靠手工，不知道要多久才补完。你省省吧，
http://www.v3.co.uk/v3-uk/news/2339914/heartbleed-canada-revenu
"Based on our analysis to date, social insurance numbers of
approximately 900 taxpayers were removed from CRA systems by someone
exploiting the Heartbleed vulnerability."

【在 g*****g 的大作中提到】

: NeverLearn还嘲笑OpenSSL哪？你软两个半月都不作为。跟OpenSSL打补丁的速度差太多
: 了。

l*52015-01-13 08:01

9 楼

cong.!

g*g2015-01-13 08:01

10 楼

你丫真够不要脸的，这也不过一个用户被搞而已。PC, PC Server有多少肉鸡还要我复
述吗？有补丁不补是用户的事，你三个月才能做出补丁那是能力问题。所有的
production Server都没有自动打补丁的，自动打补丁会使得系统不稳定。

【在 N********n 的大作中提到】

:
: OPENSSL的用户都被BREACH了，你丫还舔着脸吹速度？微软打补丁一个UPDATE
: 跑下来就都补上了。OPENSSL那里全靠手工，不知道要多久才补完。你省省吧，
: http://www.v3.co.uk/v3-uk/news/2339914/heartbleed-canada-revenu
: "Based on our analysis to date, social insurance numbers of
: approximately 900 taxpayers were removed from CRA systems by someone
: exploiting the Heartbleed vulnerability."

a*e2015-01-13 08:01

11 楼

cong! baozi!

N*n2015-01-13 08:01

12 楼

“不过一个用户被搞”个鸟啊，被坑爹的随便一抓就一大把，还泥马死撑。
"The following sites have services affected or made announcements
recommending that users update passwords in response to the bug:
Akamai Technologies, Amazon Web Services, Ars Technica, Bitbucket,
BrandVerity, Freenode, GitHub, IFTTT, Internet Archive, Mojang,
Mumsnet, PeerJ, Pinterest, Prezi, Reddit, SourceForge ....
Platform maintainers like the Wikimedia Foundation advised their
users to change passwords... ..."

【在 g*****g 的大作中提到】

: 你丫真够不要脸的，这也不过一个用户被搞而已。PC, PC Server有多少肉鸡还要我复
: 述吗？有补丁不补是用户的事，你三个月才能做出补丁那是能力问题。所有的
: production Server都没有自动打补丁的，自动打补丁会使得系统不稳定。

B*k2015-01-13 08:01

13 楼

cong.!

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

g*g2015-01-13 08:01

14 楼

这就是小心起见。你丫真是没脑子。被搞那是大规模信用卡被盗之类的。你软bug都指
出来了三个月fix不了，你丫还有脸来叫板？OpenSSL就算真的影响大也是说明用的地方
多，fix bug才体现engineer的能力。

【在 N********n 的大作中提到】

:
: “不过一个用户被搞”个鸟啊，被坑爹的随便一抓就一大把，还泥马死撑。
: "The following sites have services affected or made announcements
: recommending that users update passwords in response to the bug:
: Akamai Technologies, Amazon Web Services, Ars Technica, Bitbucket,
: BrandVerity, Freenode, GitHub, IFTTT, Internet Archive, Mojang,
: Mumsnet, PeerJ, Pinterest, Prezi, Reddit, SourceForge ....
: Platform maintainers like the Wikimedia Foundation advised their
: users to change passwords... ..."

a*r2015-01-13 08:01

15 楼

cong! baozi!

N*n2015-01-13 08:01

16 楼

泥马大规模信用卡被盗还是小事啊？丢人都丢到家了。微软修错让ADMIN跑一趟
UPDATE就行了。OPENSSL分散在各地，得人工去打补丁。微软靠机器，开源看人
品, 高下显然立分。看人家的评论, "Fixing OpenSSLwill take MONTHS".
http://www.theregister.co.uk/2014/04/22/heartbleed_repairs_may_

【在 g*****g 的大作中提到】

: 这就是小心起见。你丫真是没脑子。被搞那是大规模信用卡被盗之类的。你软bug都指
: 出来了三个月fix不了，你丫还有脸来叫板？OpenSSL就算真的影响大也是说明用的地方
: 多，fix bug才体现engineer的能力。

a*e2015-01-13 08:01

17 楼

re

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

g*g2015-01-13 08:01

18 楼

尼玛哪里大规模信用卡被盗了？你软那bug，修都修了三个月，打补丁还不知道要多少
年才能都打完呢。满世界的windows肉鸡。有补丁不会打那是管理员吃屎，有bug打不出
补丁那是你软的程序员吃屎呀。

【在 N********n 的大作中提到】

:
: 泥马大规模信用卡被盗还是小事啊？丢人都丢到家了。微软修错让ADMIN跑一趟
: UPDATE就行了。OPENSSL分散在各地，得人工去打补丁。微软靠机器，开源看人
: 品, 高下显然立分。看人家的评论, "Fixing OpenSSLwill take MONTHS".
: http://www.theregister.co.uk/2014/04/22/heartbleed_repairs_may_

B*g2015-01-13 08:01

19 楼

baozi

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

N*n2015-01-13 08:01

20 楼

打补丁没完没了的就是你们开源JAVA啊，自己屁股臭烘烘还冲别人叫个鸟。这三
年数据显示JAVA每次都是名列前茅的烂。

【在 g*****g 的大作中提到】

: 尼玛哪里大规模信用卡被盗了？你软那bug，修都修了三个月，打补丁还不知道要多少
: 年才能都打完呢。满世界的windows肉鸡。有补丁不会打那是管理员吃屎，有bug打不出
: 补丁那是你软的程序员吃屎呀。

L*a2015-01-13 08:01

21 楼

cong
baozi

g*g2015-01-13 08:01

22 楼

你软内部发现的bug不算bug，跟人开源的比个屁呀。还有脸出来说。

【在 N********n 的大作中提到】

:
: 打补丁没完没了的就是你们开源JAVA啊，自己屁股臭烘烘还冲别人叫个鸟。这三
: 年数据显示JAVA每次都是名列前茅的烂。

l*q2015-01-13 08:01

23 楼

baozi

g*r2015-01-13 08:01

24 楼

cong!

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

G*e2015-01-13 08:01

25 楼

恭喜恭喜

a*d2015-01-13 08:01

26 楼

Cong~

c*42015-01-13 08:01

27 楼

gxgx

m*g2015-01-13 08:01

28 楼

gxgx!

w*n2015-01-13 08:01

29 楼

GONGXI

d*82015-01-13 08:01

30 楼

Cong!

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

l*e2015-01-13 08:01

31 楼

gx!
baozi

d*92015-01-13 08:01

32 楼

cong

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

y*w2015-01-13 08:01

33 楼

cong
baozi

y*n2015-01-13 08:01

34 楼

cong. Baozi

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

w*n2015-01-13 08:01

35 楼

gxgx

z*62015-01-13 08:01

36 楼

gx

w*42015-01-13 08:01

37 楼

cong!

w*e2015-01-13 08:01

38 楼

Cong!

m*u2015-01-13 08:01

39 楼

gxgx, Baozi

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

z*62015-01-13 08:01

40 楼

gx

A*r2015-01-13 08:01

41 楼

cong! baozi!

t*e2015-01-13 08:01

42 楼

GXGX

o*e2015-01-13 08:01

43 楼

gongxi gongxi!!
deng baozi

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

s*g2015-01-13 08:01

44 楼

big congs!

c*r2015-01-13 08:01

45 楼

gxgx!

y*w2015-01-13 08:01

46 楼

恭喜
排包子

w*02015-01-13 08:01

47 楼

恭喜恭喜！

r*r2015-01-13 08:01

48 楼

gx

m*s2015-01-13 08:01

49 楼

gxgx

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

m*32015-01-13 08:01

50 楼

cong!

z*62015-01-13 08:01

51 楼

gxgx

n*n2015-01-13 08:01

52 楼

GX

state

【在 Y***n 的大作中提到】

: Update:
: Reeived the approval emails on July 19th, received the welcome notices on
: July 22nd.
: Received two cards on July 23rd. Changed the address to Carlifornia.
: *********
: Got phone and email messages for two cards last night.
: NSC PD 11/10/2006. Changed job in 2008, got RFE in 2009, then filed AC21
: with EVL and job discription. Changed job again in 2010 in a different state
: . No RFE this time, one FP in 2007. Called for SR on 07/12/11. I suggest
: everybody to request a SR or do something, then USCIS will not waste any

W*G2015-01-13 08:01

53 楼

GXGX,PAI BAO ZI

G*r2015-01-13 08:01

54 楼

cong
baozi

d*92015-01-13 08:01

55 楼

cong.!

w*r2015-01-13 08:01

56 楼

恭喜恭喜

m*n2015-01-13 08:01

57 楼

GX GX