跟读练习: Firefox and Tor hit with 9.8 critical level exploit - 通过视频学习英语口语
正在创建课程...
1
Last week, we talked about a major exploit discovered in the Chromium-based Arc browser, and all the smart people in the comments were like, thank god I use Firefox.
2
Unfortunately, the turns have tabled, and now another 9.8 critical vulnerability has crashed into a second browser, this time Firefox.
3
And this time, it's been actively exploited in the wild.
4
Now, before you go in the comments and say, thank god I use Tor, it even affects everybody out there doing totally not illegal stuff on the Tor browser, which itself is Firefox-based.
5
This time, though, it wasn't a silly mistake involving a misconfigured Firebase security rule, but rather a used-after-free flaw on their implementation of the CSS animation timeline property.
6
They left a pointer dangling, which is far more difficult to detect and audit, and in this case could be used by bad guys to take full control of your browser with remote code execution.
7
If you're running one of these Firefox versions, you're probably already dead, but if not, you'll want to update immediately.
8
In today's video, you'll learn all about the interesting and terrifying world of use-after-free exploits.
9
It is October 15th, 2024, and you're watching the Code Report.
10
Before we get started, though, I have some other bad news for internet browser users, specifically those on Chrome using uBlock Origin, or any other ad blocker for that matter.
11
We all knew this day was coming, but shots were fired yesterday when this ominous message appeared on the plugin's install page, warning users that uBlock's execution date is drawing near.
12
Now, this is all part of a grand conspiracy to get you to watch ads and be happy, and Google is achieving that by updating the manifest for plugins from version 2 to version 3,
13
which eliminates the web request API where plugins can see all the incoming network requests
14
so they can block all the garbage from known ad servers.
15
I made a video on this a while ago if you want all the details, but now let's get back to Firefox.
16
Slovakian company ESET has been credited with discovering and reporting the vulnerability.
17
Where an attacker is able to achieve code execution by exploiting a use after free flaw in the CSS animation timeline.
18
I use the animation timeline all the time to create scroll animations on websites that nobody asked for, and never would have expected it to be an attack vector.
19
But to understand why this is so bad, we need to understand what use after free actually means.
20
Exploits like this have affected all the other browsers, including Chrome and Safari, and useAfterFree was even responsible for the iOS jailbreak of 2019.
21
The Firefox browser is free and open source, but you won't find it on GitHub.
22
Its code is actually self-hosted and uses Mercurial for version control.
23
It's primarily written in C++, although more and more of its code is now being written in Rust, a language that was created by a software engineer at Mozilla.
24
Firefox itself contains over 30 million lines of code, because building a browser is extremely complex.
25
At a high level, here's how a use-after-free flaw could be introduced.
26
In the C code, let's imagine we need to allocate some memory for a value.
27
To achieve that, we create a pointer and then use malloc to allocate memory for it.
28
From there we can assign a value to it and use it in our program to do something useful, like in the case of Firefox, render an animation.
29
At some later point, when we no longer need that memory, we'll want to deallocate it with free.
30
But now we have a problem called a dangling pointer.
31
The memory is free, but the pointer itself still exists and is now being used in our code with undefined behavior.
32
If an attacker can figure out how to get some malicious code into that memory, it can cause the program to crash, or even worse, remote code execution.
33
Now, this could be easily fixed by setting the pointer to null or a different object, but in the case of Firefox, the issue is likely a lot more complex and above my pay grade.
34
It's still being analyzed, so there's not a ton of detail, but Mozilla stated that they have had reports of the vulnerability being exploited in the wild.
35
The good news, though, is that it's completely fixed, and it doesn't appear anything catastrophic has happened.
36
In addition, if you're using the anonymous Tor browser, an attacker could take control of your browser, but probably not totally de-anonymize you, assuming you're on Tails OS,
37
which recently merged with the Tor browser as one project.
38
Now, another browser that was affected by all this is Zen, which is an awesome open source project based on Firefox.
39
They quickly update it to the fixed version, but it just goes to show how one little flaw can affect a lot of downstream projects.
40
But if your goal is to write robust, bulletproof code, you'll need to start with computer science fundamentals.
41
And you can start doing that today for free thanks to this video's sponsor, Brilliant.
42
Their quick, rewarding, interactive lessons will help you build a foundation for problem solving that every software engineer needs to have.
43
Brilliant is where you learn by doing, with thousands of interactive lessons in math, data analysis, programming, and AI.
44
When you make their Python course a habit with just a few minutes of effort each day, you'll quickly develop the skills needed to build world-changing software.
45
And you can do it anywhere, even from your phone.
46
To try everything Brilliant has to offer for free for 30 days, visit brilliant.org slash fireship or scan this QR code for 20% off their premium annual subscription.
47
This has been the Code Report, thanks for watching, and I will see you in the next one.
📺 同频道
C12
OpenAI’s lead engineer was secretly a spy...
Daily ConversationUniversity StudentsWorking Adults
C11
PostgreSQL in 100 Seconds
Daily ConversationWorking Adults
C11
Every app on Earth is now open source... whether it likes it or not
Daily ConversationWorking Adults
C13
A $6.3 billion open-weight model just got embarrassed by the French...
Daily ConversationUniversity StudentsWorking Adults
C14
Raspberry Pi Explained in 100 Seconds
American AccentDaily ConversationUniversity StudentsWorking Adults
C1100+ Docker Concepts you Need to Know
American AccentDaily ConversationUniversity StudentsWorking Adults
B29
25 crazy software bugs explained
American AccentDaily ConversationUniversity StudentsWorking Adults
C19
Git Explained in 100 Seconds
American AccentDaily ConversationUniversity StudentsWorking Adults
C15
There's a new Linux distro in town for developers...
American AccentDaily ConversationUniversity StudentsWorking Adults
C15
The "vibe coding" mind virus explained…
American AccentDaily ConversationWorking Adults
B24
7 Programming myths that waste your time
American AccentBusiness EnglishUniversity StudentsWorking Adults
B23
OpenAI’s new browser feels familiar…
American AccentBusiness EnglishUniversity StudentsWorking Adults
C12
Meta's new model wants "deep access" to your personal life...
American AccentBusiness EnglishUniversity StudentsWorking Adults
C13
Did Google just kickstart the intelligence explosion?
American AccentBusiness EnglishDaily ConversationUniversity Students
B26
Intel chips can’t possibly be this bad… 100% crash rate?
American AccentBusiness EnglishUniversity StudentsWorking Adults
C17
The most interesting "hack" in history...
American AccentBusiness EnglishUniversity StudentsWorking Adults
C12
Godot in 100 Seconds
American AccentBusiness EnglishUniversity StudentsWorking Adults
B21
Grok 4 pushes humanity closer to AGI… but there’s a problem
American AccentBusiness EnglishUniversity StudentsWorking Adults
C13
Array Map in 100 Seconds
American AccentBusiness EnglishUniversity StudentsWorking Adults
C130
Docker in 100 Seconds
American AccentBusiness EnglishUniversity StudentsWorking Adults
✨ 推荐视频
B22
142 句
The Internet Didn't Fail. It Was Taken.
American AccentBusiness EnglishDaily ConversationUniversity Students
B23
151 句
How Ad Blockers Work
Business EnglishUniversity StudentsWorking Adults
B135
26 句
Two Developers Before a Release: The Login Bug Is Back
American AccentBusiness EnglishDaily ConversationWorking Adults
B23
268 句
The Shoe That Broke Running
American AccentBusiness EnglishDaily ConversationUniversity Students
B22
532 句
your home router STILL SUCKS!! (use OPNsense instead)
Business EnglishUniversity StudentsWorking Adults
B214
141 句
How to Stop Doom Scrolling | tips to break your social media addiction 📲
American AccentBusiness EnglishUniversity StudentsWorking Adults
C13
173 句
STOP Running Code On Your Computer
Daily ConversationUniversity StudentsWorking Adults
B2162 句
Modrinth Just BANNED AI Mods
Business EnglishUniversity StudentsWorking Adults
B28
343 句
Humanity’s Real Plan to Stop This Asteroid (Feat. Mark Rober)
American AccentIELTS PrepTOEFL PrepUniversity Students
B22
268 句
Trump’s Canada Tariffs Are Backfiring in Red States | The Week
Business EnglishDaily ConversationUniversity Students
本课的词汇与口语要点
这节 B2 级别的口语课以视频“Firefox and Tor hit with 9.8 critical level exploit”为素材。 视频中反复出现的词有：code, browser, Firefox, pointer, animation。 这段视频共有 47 个句子、991 个单词可供跟读。 讲话部分时长为 4:27。 说话人语速较快，每分钟约 223 个词，会出现较多连读和弱读。 只有 80% 的单词属于英语最常用的 3,000 词，词汇难度较高。
视频中的重点词汇
视频中最难的 15 个单词，附发音和释义：
| 单词 | 发音 | 释义 |
|---|---|---|
| exploit 名词 | /ˈɛksplɔɪt/ | 功勛 /功勋, 勛績 /勋绩 |
| pointer 名词 | /ˈpɔɪn.təɹ/ | 教鞭 |
| animation 名词 | /ˌæn.ɪˈmeɪ.ʃən/ | 動畫 /动画, 動漫 /动漫 |
| flaw 名词 | /flɔ/ | 疵 |
| vulnerability 名词 | /ˌvʌln(ə)ɹəˈbɪlɪti/ | 脆弱性 |
| timeline 名词 | /ˈtaɪmˌlaɪn/ | 年表, 時間軸 /时间轴 |
| bulletproof 形容词 | /ˈbʊlɪtpɹuf/ | 防彈 /防弹 |
| jailbreak 名词 | /ˈd͡ʒeɪlˌbɹeɪk/ | 越獄 /越狱 |
| ominous 形容词 | /ˈɑmɪnəs/ | 不祥 |
| undefined 形容词 | 未定義 /未定义 | |
| catastrophic 形容词 | /ˌkætəˈstɹɑfɪk/ | 災難的 /灾难的, 災難性的 /灾难性的 |
| assign 动词 | /əˈsaɪn/ | 分配, 分派 |
| malicious 形容词 | /məˈlɪʃəs/ | 惡意的 /恶意的, 惡毒的 /恶毒的 |
| manifest 名词 | /ˈmæn.ɪ.fɛst/ | 聲明 /声明, 宣言 |
| null 名词 | /nʌl/ | 空值 |
视频中出现的短语动词
| 单词 | 释义 |
|---|---|
| figure out 动词 | 弄清楚 |
视频中的语法
说话人最常用的结构，并附上视频中的原话：
| 结构 | 视频中的用法 |
|---|---|
| 现在完成时 have/has + 过去分词 — 过去发生但与现在仍有关联的事 | have tabled · it's been · has been credited |
| 被动语态 be + 过去分词 — 强调发生了什么，而不是谁做的 | were fired · has been credited · being written |
| 定语从句 who / which + 从句 — 补充说明人或事物 | dangling, which is · Zen, which is |
需要注意的发音
说话人用了 13 次缩略和弱读形式，例如 you're, you'll, doesn't。请按听到的简短形式来说。
- “sh” 和 “zh” 音: animation /ˌæn.ɪˈmeɪ.ʃən/, malicious /məˈlɪʃəs/, subscription /səbˈskɹɪpʃən/
- 长单词——注意重音位置: animation /ˌæn.ɪˈmeɪ.ʃən/, vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, interactive /ˌɪn.tɚˈæk.tɪv/, deallocate /diːˈæləkeɪt/, catastrophic /ˌkætəˈstɹɑfɪk/
中文母语者容易读错的音：
- /v/ — 不要读成 /w/，上齿轻触下唇: vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, interactive /ˌɪn.tɚˈæk.tɪv/, vector /ˈvɛktɚ/
- 词尾辅音 — 要读清楚，后面不要加元音: exploit /ˈɛksplɔɪt/, allocate /ˈæl.ə.keɪt/, interactive /ˌɪn.tɚˈæk.tɪv/, bulletproof /ˈbʊlɪtpɹuf/, deallocate /diːˈæləkeɪt/
- /r/ 和 /l/ 的区别: vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, bulletproof /ˈbʊlɪtpɹuf/, jailbreak /ˈd͡ʒeɪlˌbɹeɪk/, scroll /skɹoʊl/
如何用这段视频练习
- 先完整听一遍视频，不要开口，记下不认识的单词。
- 先用 0.75 倍速逐句跟读，熟练之后再回到正常速度。
- 录下自己的声音并与原声对比，特别注意 exploit, pointer, animation 这类单词。
什么是跟读法？
跟读法 (Shadowing) 是一种有科学依据的语言学习技巧，最初开发用于专业口译员的培训，并由多语言者Alexander Arguelles博士普及。这个方法简单而强大：您在听英语母语原声的同时立即大声重复——就像是一个延迟1-2秒紧跟说话者的影子。与被动听力或语法练习不同，跟读法强迫您的大脑和口腔肌肉同时处理并模仿真实的讲话模式。研究表明它能显着提高发音准确性，语调，节奏，连读，听力理解和口语流利度——使其成为雅思口语备考和真实英语交流最有效的方法之一。