Hammer of Technology

"Oh!" Chen Diancheng leaned lazily on the sofa...

Director Ning is not strict about grooming, which is very comfortable.

Ning Wei didn't pay any attention to this guy, and looked at the pile of documents in his hands with his head buried, and said to himself: "Well, there are a few things today, the first one is that I gave the National Computer Security Vulnerability Report in the name of the Research Center. The Quick Response Center submitted several serious security vulnerabilities related to Microsoft and Linux, and the scope of impact may be relatively large; It’s officially on sale these days, and I’m thinking of using the platform of Yanbei University to help publicize it.”

"The third thing, it's already April, and the recruitment promotion of the Ning class is also on the agenda. I won't come forward this year, and you will be in charge. In the past, we cooperated with the school news agency, and they This year, you will discuss with them to see who needs to cooperate. You can communicate with them. If you need to take pictures of Ningshe’s classroom, you can say hello to the professor, and then take people there directly, no problem, right? ?”

After hearing this, Chen Diancheng began to complain: "Isn't it? Director Ning, I don't have any information on the first two matters. As for the promotion of Ning Ban, you have to do it, or let Senior Brother Zhang do it. Ah, my reputation is not obvious, no one will believe what I say? Why don't you ask Senior Brother Zhang to take charge of this matter?"

"Oh!"

Ning Wei responded lightly, then took the information in his hand, patted it casually on the table, glanced at the time on the computer, and said very casually: "The vulnerability submitted today and the new Hongmeng system can be officially announced. All the materials are here now. I will give you two options, take a look now, and then you will be interviewed later, and answer according to the materials. You can let Brother Zhang be responsible for this matter, if you are sure you want to hand it over to Ding If you like to do it, then you go to work first, I will call him now."

"Hey, it's still better for Director Ning to treat me well, then I'll go to work first..."

After finishing speaking, Chen Diancheng stood up and wanted to slip away. At this moment, there was a light knock on the office door: "Academician Ning..."

"Oh, come in..."

"Ok?"

"what?"

------------

420 Academician Bie Tining

When he saw Wen Yimo walking into the office with puffy cheeks, Chen Diancheng, who had just stood up, seemed to have cast his feet on the floor and couldn't walk anymore.

The smart young man immediately figured out why Director Ning called him to take charge of this matter today.

Director Ning's news is really well-informed.Wen Yimo was only brought into a foodie group consisting of the main body of Ningshe yesterday. Today, everyone from his tutor was called in. For what, needless to say, Chen Diancheng can understand, but what should be done at this time, not for a while got an idea...

The mentor is still there, so it's not easy for him to overwhelm the host, right?

Fortunately, Ning Wei also stood up at this time, so that it would not look abrupt, and he recognized Wen Yimo at the first sight.

It's easy to recognize, let's not talk about the photographer carrying the equipment, the other girl has been to the mathematics institute and research center many times, only Wen Yimo is a familiar face.Well, it turns out that my students like the cute type with a little baby fat, which is very good...

Zhang Jie, the president who had been helping Chen Diancheng to speak well, walked into the office, without looking at Chen Diancheng who was standing there in a daze, and enthusiastically said to Ning Wei: "Professor Ning, we are here."

"Welcome, welcome, thank you for always cooperating with our Mathematics Research Center and Ning Ban's publicity work. You have worked hard these years. Sit first, sit first..."

Ning Wei gave a warm welcome, then cast his eyes at Chen Diancheng who was still standing there stupidly, and asked, "Diancheng, aren't you looking for Senior Brother Zhang? He should be in the laboratory now, why don't you go there?" Invite him here."

Chen Diancheng immediately said righteously: "Director Ning, Senior Brother Zhang is too busy now, not only to read the real-time data provided by the manufacturer, adjust the parameters, but also busy with the opening ceremony of the Olympic Games. Junior brother, it is my duty to take over the propaganda work on behalf of senior brother."

Ning Wei glanced at the unprincipled guy and asked, "Don't be too busy reading the paper."

"I'm not busy... I'm almost done with the tasks you arranged. I promise to complete the publicity work." Chen Diancheng said shamelessly.

"Oh……"

Ning Wei nodded, and didn't bother to pay attention to this tired guy, turned his head to look at the few people who had come, and said, "Okay, I still have some things to do here, so I won't entertain everyone. Diancheng is responsible for the publicity work. Diancheng himself is a student in the Ning class, and he is also my graduate student now, and he is very familiar with the professors in the courtyard, and he is also very familiar with our scientific research center and the goals we want to achieve in the future."

"So the next publicity work will be handed over to Diancheng. If you need to cooperate, let him coordinate as much as possible. If you want to ask, he basically knows everything."

After finishing speaking, Ning Wei said to Chen Diancheng again: "Okay, the publicity task will be officially handed over to you. Entertain the students of the Brothers Academy. You can find a suitable place to invite everyone to have a meal at noon. It is the official business of the academy." Expenses, don't be too stingy."

"I promise to complete the task." Chen Diancheng immediately said loudly.

"That's all right, you guys go to work first. Everyone has worked hard." Ning Wei said with a smile.

"It's not hard, thank you Academician Ning, let's go to the scene first."

"Thank you Director Ning, Director Ning is mighty." Before closing the door, Chen Diancheng, who was the last to leave, winked at his tutor...

"Go away!"

"Yes, get out!"

"Bang" the office door was closed immediately, leaving only Ning Wei sitting there lost in thought...

This kid still needs to be beaten, he looks happy, he's too cheap...

……

At the same time, Huaxia Computer Security Vulnerabilities Rapid Response Center.

Today is Friday, and the holiday is about to start, so it is inevitable that I will be a little slack.However, the technical staff found that the public mailbox was extremely lively early in the morning, and there were more vulnerabilities reported than usual, and each one was marked with the words high risk.

This is nothing, but when the sending address of these high-risk vulnerabilities is Huaxia Artificial Intelligence Frontier R&D Center, these vulnerability reports are extremely precious.

"Damn it, it's been a long time! This is really a high-risk privilege escalation vulnerability. The code name given by the R&D center is cve-2028-0923. This is so f*cking that it supports overriding operations through low-privilege software. It can also inject rights escalation, and it also involves the full-line version that Microsoft is still supporting, including the server version, which affects the proportion of the impact. If it is exposed in advance, who can stand it?"

"What are you? Look at this linux kernel vulnerability. I think the score of 7.0 is too low. It must be at least 8.5. The race condition in the fig_vsockets and fig_virtio_vsockets kernel drivers can be triggered by connecting a Bluetooth. Who doesn't use it now? Bluetooth? Here are the technical details of attacking poc. The affected kernel version is greater than or equal to 4.0, and the corresponding Android version is 10. At least half of the Android mobile smart devices on the market in the world are affected. There are a whole lot of key vulnerabilities of the same level here Seven, seven big thunders!"

"What are you talking about? We have more dangerous vulnerabilities in windows here. The central rating has reached 9.0. The smbv3 protocol has been made a target. If this is exploited, it will cause more harm than ransomware. You Looking at this process, even if the file has passed the security check that comes with the system, when processing the compressed file, it will also cause a memory corruption vulnerability, allowing attackers to use it to remotely execute any code.”

"Okay, stop arguing, is it interesting to argue about this? Today is Friday, so many loopholes, do you think you can rest this weekend? Fuck, do you think the Frontier Intelligence R&D Center did it on purpose? Why did so many high-risk vulnerabilities pop up at the same time? It can’t be that they were discovered suddenly last night, right? The key is that they didn’t fix the code even though they killed it but didn’t bury it.”

"No, why don't we submit these directly to the member units?"

"You came here on the first day, so many bugs were submitted at once, and you still want to rest? Wait to deal with a bunch of bad things coordinated in the middle. It's going to be lively now. By the way, Academician Ning wants to make trouble again, right? Boss Liu has been urgently called to a meeting now, this time...it's nothing small!"

"Speaking of Academician Ning, I suddenly remembered that last time we were forced to work overtime for ten consecutive days..."

The technicians were discussing, and the immediate leader suddenly broke in.

"Okay, brothers, you all know the things, so I won't say much. We have received so many loopholes today, and the level of danger is so high, it can be said that it is unprecedented. A large proportion has a huge impact. After the research and decision of the superior guidance department, first of all, we must ensure that no secrets can be leaked inside our response center, and everyone knows about the confidentiality agreement."

"Secondly, until these problems are resolved, I hope that everyone can temporarily give up all vacations and fight with our members on the front line of protecting China's network security. Of course, this period of time will be counted as overtime."

"Ah... isn't it? Solve it all? Boss, so many loopholes are really fatal. God knows how long it will take to solve it."

"I know you have worked hard, so after the problem is satisfactorily resolved, I will find a way to apply for compensatory leave for everyone in batches. For the time being, that's all I can promise. Everyone, please work hard for a while. Don't complain. , I also want to accompany you to work overtime! And it’s not just you who have to work overtime, don’t worry, in this case, there are at least tens of 10 people around the world who will accompany you to work overtime.”

"No way..."

"Fuck..."

"Oh my god, hurry up and strike me with a lightning bolt!"

……

"Okay, let's get to work quickly! Share the details of the vulnerability with your brothers according to the procedure. Oh, yes, according to the regulations, send a message to the Microsoft Security Center, the Liunx development and security team, and the Android development and security team. Vulnerabilities have been reported in the past. In addition, our Huaxia Artificial Intelligence Frontier R&D Center, the main provider of high-risk vulnerabilities this time, will also help us research and fix the code together, so it may not take too long to solve these problems.”

"Boss, do you think there is such a possibility? In fact, there is already a repair code over there, but you don't want to give it to us now?"

"It doesn't exist. As you know, Academician Ning is in charge of the Frontier Research and Development Center of Artificial Intelligence. You understand what kind of person Academician Ning is. There really is a solution, and we won't embarrass everyone so much..."

"Pfft... We just understand it too well. Academician Ning is good at everything, but it's really funny... Last time he said on Weibo that he felt that programmers were too idle, so he came up with a The shocking loophole made us add it for half a month, I suspect that Academician Ning thinks we are too idle this time, he doesn't care about killing or burying us!"

"Ahem... It's alright, don't slander Academician Ning, if I tell you this word spreads, you'll be at the end, you know? Stop talking nonsense, hurry up and get to work!"

……

Washington State, Redmond, Seattle, Microsoft headquarters, Redmond Campus.

Even though it was late at night, the Windows operating system service center was still on duty.

For an operating system provider that is used in almost all corners of the world, the security of its own system is the top priority.Also because of the large number of customers, there are centralized feedback on problems almost all the time.

So many problems and loopholes, in fact, do not make people nervous, all problems have a specific solution process, and generally do not trigger an alarm.

As a large system provider, Microsoft not only has official channels for collecting system vulnerabilities, but also uses some underground black markets to purchase system vulnerabilities that have not been exposed at high prices. The two sets of programs ensure that its products are as safe as possible.

Of course, it is impossible to completely isolate the loopholes.

There is no perfect product in this world, especially for software, no matter how powerful the software is, there will always be loopholes.Not all tech-savvy people have the noble sentiments to submit to Microsoft after discovering a vulnerability to earn that bit of fame and fortune.They will not make millions of dollars on the black market, but choose to make more profits.

So you get used to it and it's fine.

Basically, there will be one or two major vulnerabilities exposed every year, but in most cases, they can be solved perfectly through instant patching, which may cause a commotion in the industry, but in fact, it is rare for ordinary people to understand. alert.

Even if there is a big trouble, such as when the ransomware virus is rampant, there is no problem.After all, for the vast majority of Microsoft customers, there are not many choices.

Industry barriers have been created through various patents; more hardware manufacturers have cooperated to jointly formulate access standards; and by cultivating user habits, countless people have become accustomed to the operating system operating mode defined by Microsoft. In a sense, this company Already in an invincible position.

Of course, Microsoft has not been without worries recently.

The strong rise of China's [-]D display, coupled with the addition of Hongmeng system, is enough to make Microsoft feel nervous.

That's right, windows can be said to be the absolute king in the field of flat operating systems.But in the field of three-dimensional display is not the same.This time, the West failed to take the lead in controlling the standard. Although Microsoft does have many ideas and patents about [-]D control in the future, but unfortunately, the Western world has not yet been able to directly promote [-]D display technology for civilian use.

But to be honest, in fact, Microsoft had the opportunity to continue to lead the standards of the [-]D system.When Huaxia started to bet on the development of [-]D heterogeneous chips, it did talk to Microsoft, hoping that Microsoft could develop a new generation of Windows for Ningxin to ensure the compatibility between hardware and software. However, Microsoft considered a lot at that time and finally refused. With this proposal, the relationship with traditional allies is guaranteed, and only now is the troublesome thing.

What is even more troubling for Microsoft executives is that although they know that Huaxia is about to launch a [-]D display, and that the new Hongmeng system is likely to support this kind of true [-]D display, but now their understanding of the new Hongmeng system and [-]D display technology is actually very low. Not much more than ordinary people.This also means that even if you want to start developing an operating system that can adapt to [-]D display now, it is unlikely to adapt.

There is no way, the negotiations with Huawei are now at an impasse, and the unique temperament that Huawei has always pursued has made these bigwigs a headache.Of course, the more troublesome thing is Yu Ning.This Chinese mathematician, who is full of genius but not good at oil and salt, always seems to have a way to pinpoint their weakness, and then give them a hard punch.

Of course, these are high-level worries.For those who work for wages, life is still much simpler.

In the past two years, Microsoft has carried out two consecutive layoffs, so the employees who can still stay on the job are still in a stable mood.

To this day, the continuous receipt of high-severity vulnerabilities triggered the alarm...

……

"What's going on? Can anyone tell me how our system became leaky overnight? There are seven high-risk vulnerabilities judged by the cvss system, and 12 medium-risk vulnerabilities. What's going on? ?”

"This is a copy sent to us by the Huaxia official. This batch of vulnerabilities was provided by the Huaxia Artificial Intelligence Research and Development Center yesterday. After Huaxia received the vulnerabilities, it took about 6 hours for the Huaxia officials to confirm that the vulnerabilities did exist, and then unified Forwarded it to us."

"Huh? Chinese people?"

Satya Nadella, who was talking to the person in charge of the windows division in the office, just frowned, and found that the door was pushed open again without knocking, but before he got angry, the secretary picked up the remote control...

"Mr. Nadella, maybe you need to pay attention to this news."

"?"

------------

421 Kindness and Beauty

"Hongmeng Innovation Lab officially released the new Hongmeng system with graphical cross-platform desktop level, which is fully connected to March Huimin smart platform, perfectly supports [-]D display function, cross-platform linkage, and home computers can simultaneously upgrade private cloud, more intimate privacy Protection strategy, what are you waiting for? Hurry up and download and try it out?"

……

After watching this short video, the people in the office immediately understood why so many vulnerabilities appeared in Windows at one time, and they were all provided by Huaxia through official channels.

After a short silence, words beginning with "f" and ending with "k" and "b" ending with "h" began to be heard endlessly. Although there are not many people in the office, they are full of momentum. For example, someone even said three times in a row. all over……

For example, Satya Nadella, who has always seemed very elegant to the outside world, said b*tch three times in a row.

"Shameless, so shameless! I knew it! I just didn't expect them to be so shameless, Ning! It must be him! The most shameless person in history manipulated this shameless incident. This is a declaration of war, Yes, just a declaration of war!"

"Okay, Yusef, complaining won't solve the problem. If true, the new Hongmeng system will also impact our operating system business and may even have an impact on personal cloud services. No matter how cheap this approach is, it will It's a conspiracy! He won't give us much time, Yusef! What's even more frightening is that we didn't receive the leak information in the first place!"

"So tell me, those lads can solve these loopholes as quickly as possible. We may only have half a month to solve these problems. Now is the time for you to express your opinion. Do you know? Ning approached us through Huawei to target Ning The all-round cooperation of the core is that you rejected the request for cooperation between the two parties at the board of directors in the report, so now you need to take this responsibility, so one week, is it enough?"

Satya Nadella, who had realized the seriousness of the problem and calmed down, stared at the Windows and Cloud Business Department technical director in front of him and asked seriously.

"Half a month?"

Yousef Medi swallowed, with a look of embarrassment on his face, and said in a muffled voice: "Sir, you know, this is impossible. These are not one or two loopholes, but a total of seven high-risk and twelve medium-level loopholes." Our source code is too large, and in order to solve these problems, we still need a lot of testing work, we must ensure that there is nothing wrong before releasing the vulnerability patch, otherwise it may cause some unpredictable consequences. Half a month is really unrealistic .We even need to re-evaluate these vulnerability levels, can't the Chinese say what they say?"

However, Satya Nadella shook his head and said: "No, Yusuf, you only have half a month, if I were you, I wouldn't waste my time here. Now we are racing against time, I will Find a way to delay the time for the Huaxia people to announce these loopholes. Stop complaining!"

"But……"

"No but..."

"Mr. Nadella, your phone is on the line."

"Okay, you wait."

"Hey, Satya, tell me you saw that news, right? Did Windows receive vulnerability information from multiple Huaxia today?"

"Oh? Sundar, I don't quite understand what you're talking about..."

"Okay, Satya, our Android team received a lot of linux kernel vulnerabilities today, which affect a wide range, including our own products, as well as products of our global partners such as Samsung, Rice, etc. Initially It is estimated that hundreds of millions of electronic devices using the Android system are at high risk around the world. Combined with the news, I don’t believe you have not received similar reports. This time the focus is on you.”

"Is Android also affected? Well, Sundar, yes, we are indeed threatened. But these difficulties are only temporary, and we are confident that these problems will be resolved before these vulnerabilities have an impact. I believe that the person Not losing their minds, at least they should not publish these vulnerabilities before they are blocked."

"No no no, Satya, you are too optimistic, this matter is not so simple. No one can find so many loopholes in such a short period of time, even that damn artificial intelligence can. This is The premeditated provocation may have been prepared since they decided to make a new system. Come to think of it, maybe they have the fixed code now, but they have not shared the fixed code with us .”

"So maybe in a week, they'll have a fix for their main use version. And we wouldn't even dare to use their patch pack directly, that person's code can't be trusted. Think of Turbulence's anti-theft algorithm. Maybe using their fix code will make the system security more uncontrollable. This is a real threat. Satya, think about it. If we are not united, there will be no room for survival."

"Or maybe Microsoft really gave up the operating system and become a game company in the future? Oh, yes, even if it is making games now, it has to follow the requirements of the Chinese people, their game algorithms, and their [-]D access standards."

These sincere words made Satya Nadella silent for at least ten seconds, and finally said lightly: "Okay, I see, Sundar, I will have a good talk with you on the board of directors, now We need to solve the problem in front of us first, don't we?"

"Okay, I'll wait for your news."