[Twitter__rsc] 发言时段总结 - 2025-06-19 12:00
🤖 AI 总结
【编译器设计】
- 指出C语言编译器的行为由其作者预先决定,且这些决策经过深思熟虑。 [1]
【系统设计哲学】
- 阐述了独立合理的行为在组合后可能导致不合理的结果,并以“酒驾”为例进行类比。 [2]
【网络安全】
- 分析了账户安全问题,指出仅窃取cookie不足以构成威胁,但如果基于TOTP的双因素认证(2FA)遭到钓鱼攻击则可能被攻破,并强烈推荐使用无法被钓鱼的安全密钥,同时附上相关研究报告。 [3]
引用来源
-
@evmar C compilers do what the authors of those compilers have written them to do. Those authors absolutely have considered these cases and wilfully decided that the compiler behavior is acceptable.
-
Re @evmar Independent reasonable actions may combine to an unreasonable action. It is completely rational to say the outcome is unacceptable and then decide not to do both.<br><br>(Drinking and driving is the obvious example.)
-
@ZacharyEndrulat @goinggodotnet It's hard to tell exactly what happened from the description, but stealing cookies should not be enough by itself. It sounds like maybe his 2FA was TOTP (6-digit codes) and was also phished. Security keys are not phishable and are strongly preferred. https://static.googleusercontent.com/media/research.google.com/en//pubs/archive/45409.pdf