Researchers find user activity can leak through file change notifications on four operating systemsMachine translation
Researchers at Graz University of Technology found that file change notifications in Android, Linux, macOS and Windows could be abused to infer user activity from filenames and change times, even without access to file contents. An attack requires malicious software running on the device and local access; the research says there is currently no evidence of attacks exploiting the vulnerability.
研究覆盖四大主流系统,并指出文件内容不可见时仍可能通过变更记录推测用户行为;实际攻击所需的本地访问条件也有助于判断风险。
Researchers find user activity can leak through file change notifications on four operating systems
Researchers at Graz University of Technology found that file change notifications in Android, Linux, macOS and Windows could be abused to infer user activity from filenames and change times, even without access to file contents. An attack requires malicious software running on the device and local access; the research says there is currently no evidence of attacks exploiting the vulnerability.
研究覆盖四大主流系统,并指出文件内容不可见时仍可能通过变更记录推测用户行为;实际攻击所需的本地访问条件也有助于判断风险。
材料 9c846b2f171f4c078194800c7445a5c3;建议 33282d4a9ff14106b02017a43c856cc5;系统证据核验通过,非人工审稿。
Read at the original source