跟讀練習: Firefox and Tor hit with 9.8 critical level exploit - 通過影片學習英語口語

選擇練習模式

每種模式都會開啟全屏練習室。

47 句

如果句子過短或過長，請點選 Edit 進行調整。

Last week, we talked about a major exploit discovered in the Chromium-based Arc browser, and all the smart people in the comments were like, thank god I use Firefox.

Unfortunately, the turns have tabled, and now another 9.8 critical vulnerability has crashed into a second browser, this time Firefox.

And this time, it's been actively exploited in the wild.

Now, before you go in the comments and say, thank god I use Tor, it even affects everybody out there doing totally not illegal stuff on the Tor browser, which itself is Firefox-based.

This time, though, it wasn't a silly mistake involving a misconfigured Firebase security rule, but rather a used-after-free flaw on their implementation of the CSS animation timeline property.

They left a pointer dangling, which is far more difficult to detect and audit, and in this case could be used by bad guys to take full control of your browser with remote code execution.

If you're running one of these Firefox versions, you're probably already dead, but if not, you'll want to update immediately.

In today's video, you'll learn all about the interesting and terrifying world of use-after-free exploits.

It is October 15th, 2024, and you're watching the Code Report.

Before we get started, though, I have some other bad news for internet browser users, specifically those on Chrome using uBlock Origin, or any other ad blocker for that matter.

We all knew this day was coming, but shots were fired yesterday when this ominous message appeared on the plugin's install page, warning users that uBlock's execution date is drawing near.

Now, this is all part of a grand conspiracy to get you to watch ads and be happy, and Google is achieving that by updating the manifest for plugins from version 2 to version 3,

which eliminates the web request API where plugins can see all the incoming network requests

so they can block all the garbage from known ad servers.

I made a video on this a while ago if you want all the details, but now let's get back to Firefox.

Slovakian company ESET has been credited with discovering and reporting the vulnerability.

Where an attacker is able to achieve code execution by exploiting a use after free flaw in the CSS animation timeline.

I use the animation timeline all the time to create scroll animations on websites that nobody asked for, and never would have expected it to be an attack vector.

But to understand why this is so bad, we need to understand what use after free actually means.

Exploits like this have affected all the other browsers, including Chrome and Safari, and useAfterFree was even responsible for the iOS jailbreak of 2019.

The Firefox browser is free and open source, but you won't find it on GitHub.

Its code is actually self-hosted and uses Mercurial for version control.

It's primarily written in C++, although more and more of its code is now being written in Rust, a language that was created by a software engineer at Mozilla.

Firefox itself contains over 30 million lines of code, because building a browser is extremely complex.

At a high level, here's how a use-after-free flaw could be introduced.

In the C code, let's imagine we need to allocate some memory for a value.

To achieve that, we create a pointer and then use malloc to allocate memory for it.

From there we can assign a value to it and use it in our program to do something useful, like in the case of Firefox, render an animation.

At some later point, when we no longer need that memory, we'll want to deallocate it with free.

But now we have a problem called a dangling pointer.

The memory is free, but the pointer itself still exists and is now being used in our code with undefined behavior.

If an attacker can figure out how to get some malicious code into that memory, it can cause the program to crash, or even worse, remote code execution.

Now, this could be easily fixed by setting the pointer to null or a different object, but in the case of Firefox, the issue is likely a lot more complex and above my pay grade.

It's still being analyzed, so there's not a ton of detail, but Mozilla stated that they have had reports of the vulnerability being exploited in the wild.

The good news, though, is that it's completely fixed, and it doesn't appear anything catastrophic has happened.

In addition, if you're using the anonymous Tor browser, an attacker could take control of your browser, but probably not totally de-anonymize you, assuming you're on Tails OS,

which recently merged with the Tor browser as one project.

Now, another browser that was affected by all this is Zen, which is an awesome open source project based on Firefox.

They quickly update it to the fixed version, but it just goes to show how one little flaw can affect a lot of downstream projects.

But if your goal is to write robust, bulletproof code, you'll need to start with computer science fundamentals.

And you can start doing that today for free thanks to this video's sponsor, Brilliant.

Their quick, rewarding, interactive lessons will help you build a foundation for problem solving that every software engineer needs to have.

Brilliant is where you learn by doing, with thousands of interactive lessons in math, data analysis, programming, and AI.

When you make their Python course a habit with just a few minutes of effort each day, you'll quickly develop the skills needed to build world-changing software.

And you can do it anywhere, even from your phone.

To try everything Brilliant has to offer for free for 30 days, visit brilliant.org slash fireship or scan this QR code for 20% off their premium annual subscription.

This has been the Code Report, thanks for watching, and I will see you in the next one.

下載應用

流利口語所需的一切

AI 發音評分逐句打分

音標練習掌握每個音

詞彙學習建立你的詞庫

詞彙遊戲邊玩邊學

掃碼

Download on theApp Store Get it onGoogle Play

同頻道

FOR YOU

本課的詞彙與口語要點

這節 B2 級別的口語課以影片“Firefox and Tor hit with 9.8 critical level exploit”為素材。影片中反覆出現的詞有：code, browser, Firefox, pointer, animation。這段影片共有 47 個句子、991 個單詞可供跟讀。講話部分時長為 4:27。說話人語速較快，每分鐘約 223 個詞，會出現較多連讀和弱讀。只有 80% 的單詞屬於英語最常用的 3,000 詞，詞彙難度較高。

影片中的重點詞彙

影片中最難的 15 個單詞，附發音和釋義：

單詞	發音	釋義
exploit 名詞	/ˈɛksplɔɪt/	功勛 /功勳, 勛績 /勳績
pointer 名詞	/ˈpɔɪn.təɹ/	教鞭
animation 名詞	/ˌæn.ɪˈmeɪ.ʃən/	動畫 /動畫, 動漫 /動漫
flaw 名詞	/flɔ/	疵
vulnerability 名詞	/ˌvʌln(ə)ɹəˈbɪlɪti/	脆弱性
timeline 名詞	/ˈtaɪmˌlaɪn/	年表, 時間軸 /時間軸
bulletproof 形容詞	/ˈbʊlɪtpɹuf/	防彈 /防彈
jailbreak 名詞	/ˈd͡ʒeɪlˌbɹeɪk/	越獄 /越獄
ominous 形容詞	/ˈɑmɪnəs/	不祥
undefined 形容詞		未定義 /未定義
catastrophic 形容詞	/ˌkætəˈstɹɑfɪk/	災難的 /災難的, 災難性的 /災難性的
assign 動詞	/əˈsaɪn/	分配, 分派
malicious 形容詞	/məˈlɪʃəs/	惡意的 /惡意的, 惡毒的 /惡毒的
manifest 名詞	/ˈmæn.ɪ.fɛst/	宣告 /宣告, 宣言
null 名詞	/nʌl/	空值

影片中出現的短語動詞

單詞	釋義
figure out 動詞	弄清楚

影片中的語法

說話人最常用的結構，並附上影片中的原話：

結構	影片中的用法
現在完成時 have/has + 過去分詞 — 過去發生但與現在仍有關聯的事	have tabled · it's been · has been credited
被動語態 be + 過去分詞 — 強調發生了什麼，而不是誰做的	were fired · has been credited · being written
定語從句 who / which + 從句 — 補充說明人或事物	dangling, which is · Zen, which is

需要注意的發音

說話人用了 13 次縮略和弱讀形式，例如 you're, you'll, doesn't。請按聽到的簡短形式來說。

“sh” 和 “zh” 音: animation /ˌæn.ɪˈmeɪ.ʃən/, malicious /məˈlɪʃəs/, subscription /səbˈskɹɪpʃən/
長單詞——注意重音位置: animation /ˌæn.ɪˈmeɪ.ʃən/, vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, interactive /ˌɪn.tɚˈæk.tɪv/, deallocate /diːˈæləkeɪt/, catastrophic /ˌkætəˈstɹɑfɪk/

中文母語者容易讀錯的音：

/v/ — 不要讀成 /w/，上齒輕觸下唇: vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, interactive /ˌɪn.tɚˈæk.tɪv/, vector /ˈvɛktɚ/
詞尾子音 — 要讀清楚，後面不要加母音: exploit /ˈɛksplɔɪt/, allocate /ˈæl.ə.keɪt/, interactive /ˌɪn.tɚˈæk.tɪv/, bulletproof /ˈbʊlɪtpɹuf/, deallocate /diːˈæləkeɪt/
/r/ 和 /l/ 的區別: vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, bulletproof /ˈbʊlɪtpɹuf/, jailbreak /ˈd͡ʒeɪlˌbɹeɪk/, scroll /skɹoʊl/

如何用這段影片練習

先完整聽一遍影片，不要開口，記下不認識的單詞。
先用 0.75 倍速逐句跟讀，熟練之後再回到正常速度。
錄下自己的聲音並與原聲對比，特別注意 exploit, pointer, animation 這類單詞。

什麼是跟讀法？

跟讀法 (Shadowing) 是一種有科學依據的語言學習技巧，最初開發用於專業口譯員的培訓，並由多語言者Alexander Arguelles博士普及。這個方法簡單而強大：您在聽英語母語原聲的同時立即大聲重複——就像是一個延遲1-2秒緊跟說話者的影子。與被動聽力或語法練習不同，跟讀法強迫您的大腦和口腔肌肉同時處理並模模擬實的講話模式。研究表明它能顯著提高發音準確性，語調，節奏，連讀，聽力理解和口語流利度——使其成為雅思口語備考和真實英語交流最有效的方法之一。

影子跟讀法: 閱讀完整分步指南 →

跟讀練習: Firefox and Tor hit with 9.8 critical level exploit - 通過影片學習英語口語

選擇練習模式

下載應用

The last real programmers are dying out...

PostgreSQL in 100 Seconds

Did Google just dethrone OpenAI and Anthropic?

A $6.3 billion open-weight model just got embarrassed by the French...

Every app on Earth is now open source... whether it likes it or not

OpenAI’s lead engineer was secretly a spy...

Mind-bending new programming language for GPUs just dropped...

Intel chips can’t possibly be this bad… 100% crash rate?

Godot in 100 Seconds

Grok 4 pushes humanity closer to AGI… but there’s a problem

Array Map in 100 Seconds

Docker in 100 Seconds

The most interesting "hack" in history...

OpenAI’s new browser feels familiar…

10 weird OSS projects you need right now...

5 open source tools that replaced my $320/mo AI stack...

C++ in 100 Seconds

DHH has gone completely off the rails...

Rust in 100 Seconds

NestJS in 100 Seconds

The plan to break apart Google... RIP Chrome

How Ad Blockers Work

STOP Running Code On Your Computer

Two Developers Before a Release: The Login Bug Is Back

The Shoe That Broke Running

your home router STILL SUCKS!! (use OPNsense instead)

The Internet Didn't Fail. It Was Taken.

Modrinth Just BANNED AI Mods

Humanity’s Real Plan to Stop This Asteroid (Feat. Mark Rober)

Trump’s Canada Tariffs Are Backfiring in Red States | The Week

Will YouTube Ever Run Out Of Video IDs?