my return to life

It's just a pity that two consecutive rounds of vulnerability disclosure did not threaten the core modules of Nuwa's system. After the publicity of Nuwa Labs, the deterrence brought by the OPtron security team has been greatly reduced.

More than half of the netizens who pay attention to this matter are already looking at it for fun.

Only a small number of Nuwa system users who are afraid that their related privacy will appear in the domestic area are still a little uneasy.

…………

Five minutes before 5:[-] pm, the OPtron team announced the security vulnerabilities of the Nuwa system for the third time, this time three.

One of them is a very serious vulnerability.

The documentation shows that it can be attacked silently through the mobile network, and it is a remote executable vulnerability, which can obtain part of the permissions.

Also known as the RCE vulnerability.

On the public cyberspace, the OPtron team's language has become increasingly sharp and direct.

"...This is an ultimatum. The vulnerabilities announced this time are not among the highest-risk vulnerabilities, but they are enough to threaten the security of the system..."

"If Nuwa Lab keeps turning a deaf ear, my team will announce the next batch of high-risk vulnerabilities in 15 minutes. By then, all users using Nuwa's system will be at risk of data theft."

"..."

"I advise you to do it yourself."

"..."

"The OPtron team has been waiting for your communication with us."

"..."

Although, Fang Nian is not too concerned about the vulnerability incident at this time.

Instead, he went to the meeting room where Lu Weiyu and the others were.

Taking out a chair at random and sitting down, Fang Nian asked calmly, "How serious are the internal problems?"

"On the surface, the results are fine. This is only the second leak of information." Lu Weiyu replied after wiping her mouth after eating.

"The information this time is part of the explanation about the latest progress of the pre-research team. There are some key technologies. If leaked, the loss will still be relatively large."

"There is currently no evidence that internal issues are related to the extortion incident."

Speaking of this, Lu Weiyu looked at Fang Nian: "By the way, Guoan also took the initiative to intervene in these two matters."

"Officially, you may get some support."

After hearing Lu Wei's words, Fang Nian's eyelids moved slightly: "You haven't said how many people are currently involved in the case."

"Five inside." Lu Weiyu sighed.

"There are people in the software park to help."

Fang Nian was amazed: "Nuwa's laboratory has become a favorite, a big gang?"

"How much did you sell the materials for the first time, is it worth the risk for so many people?"

Lu Weiyu spread his hands together: "This involves a lot of judicial issues, and I haven't got specific details yet, but judging from the timing, it doesn't seem to have caused any damage to Nuwa Lab."

There were not many thrilling places after the incident.

No one came out of nowhere to beg for mercy.

Anyway, in front of the state apparatus, the crisis Nuwa Lab is facing now is just a trivial matter, not worth mentioning.

Commercial espionage and so on are all paper tigers.

The follow-up judicial affairs are not for the frontier to participate in for the time being. Only when everything is clear and the accountability is pursued can the frontier take part.

Fang Nian thought about it carefully, then looked at Wen Ye and Gu Yu: "Wen Mi, Xiao Gu, let Frontier Company take over the follow-up matters."

"Understood." Wen Ye and Gu Yu nodded in response.

"..."

Before Professor Huang and others were able to analyze the third batch of three vulnerabilities, the OPtron team released the fourth batch of vulnerabilities on time.

It's not that Professor Huang and the others are ineffective, but that they need to conduct a complete analysis of these loopholes to ensure that there are no joint loopholes and other traps.

You can't screw up in full view.

additional……

The disclosure of the fourth batch of vulnerabilities, especially the content of the documentation, quickly triggered a strong reaction from public opinion.

Fang Nian also frowned after reading the documentation.

-

Chapter 654 The West Overwhelms the East Wind (2 more)

"Let Professor Huang and the others do their best to solve the newly announced loophole No. 693."

Without much hesitation, Fang Nian said directly.

"You can ask for foreign aid when necessary. I remember that there is a professor in Fudan, Yang Min, who has a lot of research on malicious code detection and vulnerability analysis."

"Try to solve the problem before seven o'clock in the evening."

After speaking, Fang Nian stood up.

Lu Weiyu thought for a moment: "I will arrange it. Can Nuwa's laboratory leave it like this first and hand it over to the relevant units?"

Fang Nian, who had already reached the door of the meeting room, paused, and said in a deep voice, "Pay attention to the situation in the confidentiality laboratory, just don't be affected by it."

"Contact anytime if you have anything to do."

Lu Weiyu responded without asking Fang Nian where he was going.

Not long after, Fang Nian left Nuwa's laboratory first.

There are no other important arrangements in the afternoon.

Fang Nian was just too lazy to stay in the laboratory.

Although the OPtron team said there is one final, highest-risk vulnerability.

What the other party meant was that the last high-risk vulnerability should be worth 500 million US dollars.

but……

For the other year, the relatively worst results have already appeared.

The main security risks of the security vulnerability compiled by the OPtron team as 693 are:

From this vulnerability, some underlying application permission management can be bypassed, and user application data can be directly read to obtain relevant application permissions.

It doesn't look like it's serious.

Remotely executable code cannot obtain all permissions of the system kernel through this vulnerability.

In general, the most serious vulnerabilities are:

One hair can move the whole body, directly and fully control the mobile phone.

for example.

Nuwa system is like a building, the core is the core control of the building, and each functional module is a room.

The most severe consequences of the now-announced vulnerabilities are:

You can enter through the window of a room that was not closed by accident, use all the things in this room, and because the doors of other adjacent rooms are not closed, you can also go to other rooms for a stroll.

Follow the tone of the OPtron team.

The most serious loophole that has not yet been announced should be able to enter from a room with an open window, all the way to the control hub of the building;

In order to control the entire building, you can do anything, such as take any information and control all facilities.

But it doesn't matter.

The harmfulness of the 693 vulnerability directly caused the most serious attack on the entry threshold of the Nuwa system application store.

The reason why the Nuwa app store is always rarely used, and occasionally it is inexplicably discredited in some IT forums.

The main reason is that the Nuwa system cannot be used to easily obtain various permissions like the castrated version of the Android system and the jailbroken version of iOS in China.

Take 91 Assistant, the largest third-party application distribution platform in China, as an example.

At the beginning, the platform was only responsible for distribution, and chaos occurred frequently.

So much so that it is not easy to sell if you want to sell it, and no one invests if you want to invest.

After the Frontier Angel took the shares, by improving these phenomena from the source, the user experience was improved, and a large number of users were acquired, thereby doubling the value.

And now...

It is basically the style of the Xiongchang Department, with bidding as the main focus.

There is no threshold at all.

Therefore, in China, the Nuwa system is often not liked by a large number of application developers.

Even if jailbreaking is no longer required to use iOS, related application software developers have to adapt to the new rules.

But when it comes to the domestic Nuwa system, a certain group of people think that this broken system is inexplicably "noble".

The reason why the Nuwa system did this can be said to be basically out of Fang Nian's ideal will.

Fang Nian really hates the kind of chatting on WeChat later, just open a browser or some Taobao software, and directly recommend things to you according to the keywords that appear in the chat.

The whole process does not require the consent of the mobile phone user, and it is okay to disagree, and the application software cannot be opened directly.

The most outrageous thing is that this thing can still be called big data.

Fang Nian just hopes that the Nuwa system can simply protect the privacy of mobile phone users, like in the PC era, without so many bullshit application permission issues.

Besides, this threshold is not unique to the Nuwa system.

Same for iOS and Android.

It's just that Android has been castrated in China.

and so……

When Fang Nian saw the description of the 693 vulnerability, he had no idea.

If time can be turned back, if the OPtron team can communicate completely in private and tell the danger of the vulnerability in advance, Fang Nian may really pay this protection fee under the balance.

All in all, the same sentence:

'When a ray of light shines into darkness, then the ray of light is sinful. '

Nuwa Lab did nothing wrong, and system vulnerabilities are not uncommon.

Fang Nian's handling was not too radical either.

The other party asked for money with great fanfare. If Nuwa Lab directly persuaded her, it would definitely not be a problem.

The mistake is that the Nuwa system did not give some domestic application development teams the right to choose, and rejected their consistent wrong behavior;

And this part of the things that are blocked outside the door can be obtained by others through loopholes.

To use an inappropriate way of saying it is: don't worry about scarcity, but worry about inequality.

…………

As the village head started the car, he asked, "Mr. Fang, where are we going?"

Fang Nian glanced out the car window and said casually, "Just take a stroll."

The village head responded.

Not much to say.

Audi drove away from Zhangjiang Hi-Tech Park and drove smoothly on the street.

This time, Fang Nian, who was sitting in the back row, felt the unusual smoothness.

I secretly praised in my heart: "The recommendation of Xiao Zhang's platoon leader is of a high standard." '

Sitting in the car, Fang Nian didn't take out his phone to care about the latest developments.

Anyway, the worst is the same, the core is to solve the loopholes in the fastest time, so let's lie down and laugh at it now.