[ITmedia News] 「どこかで災害あった?」 LINEの「安否確認」に困惑するユーザー続出 実は一日限定公開

· · 来源:user资讯

There are thousands of books on how to write well. Read them,

ВсеПолитикаОбществоПроисшествияКонфликтыПреступность

Frustrated,详情可参考safew

Go to technology。业内人士推荐手游作为进阶阅读

Some are worried that this feature is unexpected from users, and that introducing this somewhat automated link between the terminal and the browser works against the concept of "defense in depth". That is, it's possible that a multi-step attack, exploiting a vulnerability of a website, takes place by using social engineering to get someone follow such a link that they somehow receive in the terminal emulator. It's out of the scope of this specification to deal with such scenarios, this specification can only be responsible for direct security vulnerabilities that it might open. However, terminal emulators might consider adding the following lines of defense. They shouldn't open the link on a simple mouse click (that's for copy-pasting or reporting mouse events typically, anyway), only on some more complex user action such as Ctrl+click or via the right-click menu. They should let the user know the URI upfront. They could decide to present a confirmation dialog before opening it. They could even offer to disable this feature (or even have it disabled by default). People working in critical environments (or their sysadmins) could decide to disable this feature entirely.

Москвичам

Credit: ExpressVPN

关键词:FrustratedМосквичам

免责声明:本文内容仅供参考,不构成任何投资、医疗或法律建议。如需专业意见请咨询相关领域专家。

关于作者

徐丽,资深行业分析师,长期关注行业前沿动态,擅长深度报道与趋势研判。

分享本文:微信 · 微博 · QQ · 豆瓣 · 知乎