indigo
積分 0
Facebook 的說法： Link1
To be clear, these passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them. We estimate that we will notify hundreds of millions of Facebook Lite users, tens of millions of other Facebook users, and tens of thousands of Instagram users.
well...
也許都用 gRPC 這類 framework 自帶的？或被 protocol library 自動作掉？
上回 Josh 來 demo 時有展示 RSocket，不過他是直接用 jackson 的 object mapper 來做，預設情況應該就會中了 cve-2017-49951
這是貼一下昨天整理好，發佈在 FB 的東西 :D1 有些投影片截圖，可以去 FB 留言觀看呦。