Tech Hammer

When he saw Wen Yimo walking into the office with bulging cheeks, Chen Diancheng, who had just stood up, seemed to have his feet cast on the floor, unable to walk.

The smart young man immediately figured out why Director Ning would call him to take charge of this matter today.

Director Ning's information is indeed well-informed. Yesterday, Wen Yimo was dragged into a group of foodies that was mostly composed of Ningshe. Today, all his mentors were called. For what reason, no need to say more, Chen Diancheng can understand, but what should he do at this time, he didn't know for a moment. Got an idea...

The mentor is still here, so it’s hard for him to dominate the scene, right?

Fortunately, Ning Wei also stood up at this time, so that he would not look abrupt, and he recognized Wen Yimo at first sight.

It's easy to recognize, let alone the photographer carrying the equipment, there is another girl who has been to the Institute of Mathematical Sciences and the Research Center many times, only Wen Yimo is a new face. Well, it turns out that my students like cute types with a little bit of baby fat, which is pretty good...

After the president Zhang Jie, who had been helping Chen Diancheng to say good things, walked into the office, he didn't even look at Chen Diancheng who was standing there in a daze. He said enthusiastically to Ning Wei: "Professor Ning, we are here."

"Welcome, welcome, thank you for always cooperating with the publicity work of our Mathematics Research Center and Ningban. You have worked hard these years. Sit down first, sit down first..."

Ning Wei welcomed him warmly, then glanced at Chen Diancheng, who was still standing there stupidly, and asked: "Diancheng, aren't you looking for Senior Brother Zhang? He should be in the laboratory now, why don't you go there? Invite him over."

Chen Diancheng immediately said righteously: "Director Ning, Brother Zhang is too busy now. Not only does he have to read the data provided by the manufacturer in real time, adjust parameters, but he is also busy with the Olympic opening ceremony. At this time, as a project that has not yet been determined, Junior brother, it is my duty to take over the propaganda work on behalf of my senior brother."

Ning Wei glanced at the unprincipled guy and asked, "No need to be busy reading the paper."

"I'm not busy...I've almost finished the tasks you assigned. Make sure to complete the publicity work." Chen Diancheng said shamelessly.

"oh……"

Ning Wei nodded and was too lazy to pay attention to this lazy guy. He turned to look at the few people who had come and said: "Okay, I have some things to do here, so I won't entertain you. This year's Ning class The publicity work will be left to Diancheng. Diancheng himself is a student in Ningban, and is now also my graduate student. He is very familiar with the professors in the courtyard, and is also familiar with our scientific research center and the goals to be achieved in the future."

"So the rest of the publicity work will be left to Diancheng. If you need to cooperate, just ask him to coordinate. If you have anything you want to ask, he will basically know."

After saying that, Ning Wei said to Chen Diancheng: "Okay, the publicity task will be officially handed over to you. Entertain the students from Good Brothers College. You can find a suitable place to treat everyone to a meal at noon. It is considered as official business of the college. Don’t be too stingy about expenses.”

"Promise to complete the task." Chen Diancheng said loudly immediately.

"Okay, you go ahead and do your work. Thank you for your hard work," Ning Wei said with a smile.

"It's not hard. Thank you, Academician Ning. Let's go shoot the scene first."

"Thank you, Director Ning. Director Ning is so powerful." Chen Diancheng, who was the last to leave, winked at his mentor before closing the door...

"Get out of here!"

"Yes, get out of here!"

"Bang" the office door was immediately closed, leaving Ning Wei sitting there deep in thought...

This kid still needs to be beaten. He looks so happy, so cheap...

…

At the same time, China Computer Security Vulnerability Rapid Response Center.

Today is Friday, and the holiday is about to begin, so it is inevitable that I will feel a little slack. However, the technical staff found that the public mailbox was extremely busy early in the morning, and there were more vulnerabilities reported than usual, and each one was marked with a high-risk word.

This is okay, but when the sending address of these high-risk vulnerabilities is the China Artificial Intelligence Frontier R\u0026D Center, these vulnerability reports become extremely precious.

"Hell, I haven't seen you for a long time! This is really a high-risk privilege escalation vulnerability. The code name given by the R\u0026D center is CVE-2028-0923. This damn thing supports overwriting operations through low-privilege software. It can also inject privilege escalation, and it also involves all versions that are still supported by Microsoft, including the server version. This will affect the proportion. If it is exposed in advance, who can bear it?"

"What do you mean? Look at this Linux kernel vulnerability. I think the score of 7.0 is low. It must be at least 8.5. The race conditions in the CONFIG_VSOCKETS and CONFIG_VIRTIO_VSOCKETS kernel drivers can be triggered by connecting to Bluetooth. Who doesn't use it now? Bluetooth? Here are the technical details of the POC attack. The affected kernel version is greater than or equal to 4.0, which corresponds to Android version 10. At least half of the Android mobile smart devices on the world's market are affected. There are a whole list of key vulnerabilities of the same level. Seven, seven big thunders!"

"What do you mean? We have more dangerous vulnerabilities in windows here. The center rating is 9.0. The SMBv3 protocol has been made a target. If this is exploited, it will cause more harm than the ransomware virus. You Looking at this process, even if the file has passed the system's built-in security check, when processing compressed files, a memory corruption vulnerability will still occur, allowing an attacker to remotely execute any code."

"Okay, stop arguing. Is it interesting to argue about this? Today is Friday, there are so many loopholes, do you think you can still rest this weekend? Damn it, do you think the Frontier Intelligent R\u0026D Center did this on purpose? Why did so many high-risk vulnerabilities appear at the same time? It couldn't have been discovered suddenly last night, right? The key is that they didn't care about burying them, but they didn't fix the code."

"No, wouldn't it be better if we just submit these directly to the member units?"

"It's your first day here. So many loopholes have been submitted at once. Do you still want to rest? Just wait and deal with a bunch of bad things in the middle and coordination. It's going to be lively now. By the way, is Academician Ning trying to cause trouble again, right? Liu has been called to a meeting urgently, this time...it’s no big deal!”

"When it comes to Academician Ning, I suddenly remembered that last time we were forced to work overtime for ten consecutive days..."

The technicians were discussing when the direct leader suddenly broke in.

"Okay, brothers, you all know the matter, so I won't say more. The number of vulnerabilities we received today and the high level of danger can be said to be unprecedented. In view of the fact that the affected system is still extremely popular in the Chinese market. A large proportion has a huge impact. After research and decision by the superior guidance department, we must first ensure that secrets cannot be leaked within our response center. Everyone knows about the confidentiality agreement."

"Secondly, until these problems are resolved, I hope everyone can temporarily give up all vacations and work with our members on the front line to protect China's network security. Of course, this time will be considered overtime."

"Ah... isn't it? Solve them all? Boss, so many loopholes are really going to kill you. God knows how long it will take to solve them."

"I know you have worked hard. In this way, after the problem is successfully resolved, I will also find ways to apply for compensatory leave in batches for everyone. For now, that's all I can promise. Everyone should work hard for a while. Stop complaining. , I also want to work overtime with you! And it’s not just you who have to work overtime. Don’t worry, in this case, at least hundreds of thousands of people around the world will work overtime with you.”

"No..."

"grass……"

"Oh my God, please hit me with lightning!"

…

"Okay, hurry up and get to work! Share the details of the vulnerability with your brother units according to the procedure. Oh, by the way, according to the procedures, also send one to the Microsoft Security Center and Liunx development and security team involved, as well as the Android development and security team. The vulnerability report has been passed. In addition, this time the main provider of high-risk vulnerabilities, our China Artificial Intelligence Frontier R\u0026D Center, will also help us study and repair the code simultaneously, so it may not take too long to solve these problems."

"Boss, do you think there is a possibility that there is actually a repair code over there, but you just don't want to give it to us now?"

"It doesn't exist. As you know, Academician Ning is in charge of the Artificial Intelligence Frontier Research and Development Center. You know what kind of person Academician Ning is. If there really is a solution, we won't embarrass everyone so much..."

"Pfft... We just know too well, okay? Academician Ning is good at everything, but he is really funny... Last time he said on Weibo that he felt that programmers were too idle, so he came up with a The shockingly big loophole took us half a month longer, and I suspect that Academician Ning thought we were too idle this time, and that he only cares about killing and not burying it!"

"Ahem... Okay, don't slander Academician Ning. I'm telling you, if this word gets out, you're done, you know? Stop talking nonsense and get to work quickly!"

…

Microsoft Headquarters, Redmond Campus, Redmond, Seattle, Washington.

Even though it is already late at night, there are still people on duty at the Windows operating system service center.

For an operating system provider that operates in almost every corner of the world, the security of its own systems is a top priority. Because there are so many customers, there are centralized feedbacks on problems almost all the time.

Therefore, the numerous problems and loopholes do not actually make people nervous. All problems have specific resolution processes and generally do not trigger alarms.

As a large system provider, Microsoft not only has official system vulnerability collection channels, but also uses some underground black markets to purchase system vulnerabilities that have not yet been exposed at high prices. These two sets of procedures ensure that its products are as safe as possible.

Of course, it is impossible to completely isolate the loopholes.

There is no perfect product in this world, especially for software. No matter how powerful the software is, there will always be loopholes. Not all people who are proficient in technology have the noble sentiments to submit a vulnerability to Microsoft to earn fame and fortune. He would not make millions of dollars on the black market, but would choose to make more profits.

So if you get used to it, it will be fine.

Basically, major vulnerabilities are exposed once or twice every year, but in most cases, they can actually be perfectly solved through instant patching. It may cause a lot of noise in the industry, but in fact it rarely makes ordinary people aware of it. alert.

Even if it gets serious, such as when a ransomware virus becomes rampant, there will be no problem. After all, for the vast majority of Microsoft customers, there isn't much choice.

Through various patents, industry barriers have been created; hardware manufacturers have cooperated to jointly formulate access standards; and through cultivating user habits, countless people have become accustomed to the operating system operating mode defined by Microsoft. In a sense, this company Already in an invincible position.

Of course, Microsoft is not without its troubles recently.

The strong rise of China 3D Display, coupled with the bonus of Hongmeng system, is enough to make Microsoft feel nervous.

Yes, Windows can be said to be the absolute king in the field of flat operating systems. But it is different in the field of three-dimensional display. This time, the West failed to take the lead in controlling the standard with its leading advantage. Although Microsoft does have many ideas and patents about future 3D control, unfortunately, the Western world has not yet been able to directly promote 3D display technology for civilian use.

But really speaking, Microsoft actually had the opportunity to continue to lead the standards of 3D systems. When China began to invest in the development of three-dimensional heterogeneous chips, it did talk to Microsoft, hoping that Microsoft could develop a new generation of Windows for Ningxin to ensure the fit between hardware and software. However, Microsoft considered it a lot at the time and ultimately refused. After accepting this proposal and ensuring the relationship with traditional allies, we have the current troubles.

What is even more troubling for Microsoft executives is that although they know that China is about to launch a 3D display and that the new Hongmeng system is likely to support this true 3D display, their current understanding of the new Hongmeng system and 3D display technology is actually Not much more than ordinary people. This also means that even if you want to start developing an operating system that can adapt to three-dimensional displays now, it is unlikely to be adapted.

No way, the negotiations with Huawei have now reached a deadlock. The unique temperament that Huawei has always pursued has given these big guys a headache. Of course, the more troublesome thing is Ningwei. This talented and inexperienced Chinese mathematician always seems to be able to find their weak spots and give them a hard punch.

Of course, these are worries at the top. But for those who work for wages, life is still much simpler.

Microsoft has carried out two consecutive layoffs in the past two years, so the emotions of employees who are still on the job are still very stable.

Until today, the continuous receipt of high-risk vulnerabilities triggered alerts...

…

"What is going on? Can anyone tell me how our system became leaky overnight? There are seven high-risk vulnerabilities determined by the CVSS system, and there are 12 medium-risk vulnerabilities. What's going on? ?”

"This is the official copy sent to us by Huaxia. This batch of vulnerabilities were all provided by the Huaxia Artificial Intelligence R\u0026D Center yesterday. After receiving the vulnerabilities, Huaxia officials spent about 6 hours to confirm that the vulnerabilities indeed existed, and then unified Forwarded to us.”

"Huh? Chinese?"

Satya Nadella, who was talking to the head of the Windows Division in the office, just frowned and found that the door was pushed open again without knocking. But before he could get angry, the secretary picked up the the remote control...

"Mr. Nadella, maybe you need to pay attention to this news."

"?"