Leaderboard

Ca veni vorba de preturi umflate si reduceri fictive. Fun story legat de black friday. Lucrez pentru un SaaS din romania si, cu o zi inainte de BF, ne-a sunat un client nervos ca el vrea sa-si seteze pe magazin crestere de pret de 18% la toate produsele si apoi promotie la toate produsele de 18% si era nervos omu' ca nu ajunge pretul final ca cel initial... Au ajuns colegii mei sa-i explice cu mere (daca ai 4 mere si maresti cu 25%, bla bla) ca sa inteleaga matematica gainariei lui. Asta se intampla cand vrei sa dai si tu o teapa clientilor dar esti prea prost s-o pui in practica.

A group of academics from the University of California and Tsinghua University has uncovered a series of critical security flaws that could lead to a revival of DNS cache poisoning attacks. Dubbed "SAD DNS attack" (short for Side-channel AttackeD DNS), the technique makes it possible for a malicious actor to carry out an off-path attack, rerouting any traffic originally destined to a specific domain to a server under their control, thereby allowing them to eavesdrop and tamper with the communications. "This represents an important milestone — the first weaponizable network side channel attack that has serious security impacts," the researchers said. "The attack allows an off-path attacker to inject a malicious DNS record into a DNS cache." Tracked as CVE-2020-25705, the findings were presented at the ACM Conference on Computer, and Communications Security (CCS '20) held this week. The flaw affects operating systems Linux 3.18-5.10, Windows Server 2019 (version 1809) and newer, macOS 10.15 and newer, and FreeBSD 12.1.0 and newer. Articol complet: https://thehackernews.com/2020/11/sad-dns-new-flaws-re-enable-dns-cache.html

Nu stiu daca se poate urmari prea usor pretul pe emag. La un moment dat m-am uitat la mai multe produse si mi-au bagat CAPTCHA. Eu am vazut un laptop la Black Friday cu pretul de 15000 RON, redus de la 18000 RON cica. Azi, dupa Black Friday era 14000 RON. Interesant.

Teoretic simplu, practic greut de pus in practica Eu am citit asta: https://blog.cloudflare.com/sad-dns-explained/

Am gasit pe alt site...si am si luat deoarece in pret am inclus mai multe produse decat pe Emag...thx Nytro pt idee. Cred ca suruburile au ajuns marfa pretioasa ce necesita transport special, mai ceva ca vaccinul