1月28日-每日安全知识热点

1.EPOLL:进程等待时KASLAR地址泄露

http://sqlulz.blogspot.com/2016/01/epoll-process-waiting-for-kaslr-offset.html

2.使用陷阱预防BadWinmail,CVE-2015-6172

http://researchcenter.paloaltonetworks.com/2016/01/use-traps-to-protect-against-badwinmail-cve-2015-6172/

3.google安全团队针对IOS的漏洞公告列表

https://code.google.com/p/google-security-research/issues/list?can=1&q=iOS+modified-after%3A2016%2F1%2F26&sort=-id&colspec=ID+Type+Status+Priority+Milestone+Owner+Summary&cells=tiles

4.使用SCCM violate最佳实践

https://cr0n1c.wordpress.com/2016/01/27/using-sccm-to-violate-best-practices/

5.android恶意欺诈软件使用clickjacking获取设备管理员权限

http://www.symantec.com/connect/blogs/android-ransomware-variant-uses-clickjacking-become-device-administrator

6.Net ring-buffers are essential to an OS

http://blog.erratasec.com/2016/01/net-ring-buffers-are-essential-to-os.html

7.AngularJS客户端模板注入

http://blog.portswigger.net/2016/01/xss-without-html-client-side-template.html

8.西部数据安全:一个有关已知密码却不工作的小故事

http://www.hexacorn.com/blog/2016/01/15/western-digital-security-a-short-story-of-a-known-password-that-doesnt-work/

9.图形解释为什么你要停止禁止低WIFI速率

http://www.sniffwifi.com/2016/01/why-you-shouldnt-disable-low-wi-fi.html

10.非管理员权限的活动目录查点

https://adsecurity.org/?p=2535

11.编写linux设备驱动的简短教程

http://faculty.winthrop.edu/domanm/csci411/Handouts/linux_device_driver_tutorial.pdf