{"version":"https://jsonfeed.org/version/1.1","title":"苏迟但到的主页","home_page_url":"https://kexohproject.pages.dev","feed_url":"https://kexohproject.pages.dev/json/","description":"<p>你好，欢迎访问个人主页！</p><p>擅长密码学，安全分析，数字水印等技术。</p><p>你可以联系我通过:findmykexin@gmail.com或者知乎私信。</p><p>我的知乎链接：<a href=\"https://www.zhihu.com/people/su-chi-dan-dao\" rel=\"noopener noreferrer\" target=\"_blank\">苏迟但到 - 知乎 (zhihu.com)</a></p><p>我的github链接：<a href=\"https://github.com/kexinoh\" rel=\"noopener noreferrer\" target=\"_blank\">kexinoh</a></p>","icon":"https://kexohcdn.gptapi.cyou/kexohproject/production/images/channel-2e54d141ee195646ca12a9d16507a908.jpg","favicon":"https://kexohcdn.gptapi.cyou/kexohproject/production/images/favicon-340a2925d02a0386f3b954a032834917.jpg","authors":[{"name":"苏迟但到"}],"language":"zh-cn","items":[{"id":"F79q5Uy3oJQ","title":"App 备案登记表内要求填写 MD5 信息，那以后是不是每次更新 App 都需要更新或重新备案？","content_html":"<p></p><figure data-size=\"normal\"><noscript><img src=\"https://pic3.zhimg.com/v2-bfd10f125039a29861ecb819a1a13f92_b.jpg\" data-rawwidth=\"1039\" data-rawheight=\"806\" data-size=\"normal\" data-original-token=\"v2-aa088fbc9fcedb8fc28a5efc3dd2c4d6\" data-default-watermark-src=\"https://pic4.zhimg.com/v2-31fc9d32f48d1ce47754ba4217e7ba5b_b.jpg\" class=\"origin_image zh-lightbox-thumb\" width=\"1039\" data-original=\"https://pic3.zhimg.com/v2-bfd10f125039a29861ecb819a1a13f92_r.jpg\"/></noscript><img src=\"data:image/svg+xml;utf8,&lt;svg xmlns=&#39;http://www.w3.org/2000/svg&#39; width=&#39;1039&#39; height=&#39;806&#39;&gt;&lt;/svg&gt;\" data-rawwidth=\"1039\" data-rawheight=\"806\" data-size=\"normal\" data-original-token=\"v2-aa088fbc9fcedb8fc28a5efc3dd2c4d6\" data-default-watermark-src=\"https://pic4.zhimg.com/v2-31fc9d32f48d1ce47754ba4217e7ba5b_b.jpg\" class=\"origin_image zh-lightbox-thumb lazy\" width=\"1039\" data-original=\"https://pic3.zhimg.com/v2-bfd10f125039a29861ecb819a1a13f92_r.jpg\" data-actualsrc=\"https://pic3.zhimg.com/v2-bfd10f125039a29861ecb819a1a13f92_b.jpg\"/></figure><p data-pid=\"ydsspIRq\">这个是真的，但是只能实现恶意规避，不能实现热更新。</p><p data-pid=\"OP5fdKmO\">想要实现热更新，得实现对于固定hash值的碰撞，这是第一原像hash攻击。md5尽管受到了威胁，但是依然保持着2^122左右的复杂度来抵抗第一原像攻击。</p><p data-pid=\"GmlAvMr9\">但是第二原像攻击可以实现，指生产两个包。一个为恶意包，另外一个为正常包。但是两个包的hash值相等，并上传正常包进行审核。从而实现绕过包审核制度。</p><p data-pid=\"9lEX-LCc\">具体的工具有很多，可以github搜索一下。</p>","content_text":"\n\n[https://pic3.zhimg.com/v2-bfd10f125039a29861ecb819a1a13f92_b.jpg][data:image/svg+xml;utf8,&lt;svg\nxmlns=&#39;http://www.w3.org/2000/svg&#39; width=&#39;1039&#39;\nheight=&#39;806&#39;&gt;&lt;/svg&gt;]\n\n这个是真的，但是只能实现恶意规避，不能实现热更新。\n\n想要实现热更新，得实现对于固定hash值的碰撞，这是第一原像hash攻击。md5尽管受到了威胁，但是依然保持着2^122左右的复杂度来抵抗第一原像攻击。\n\n但是第二原像攻击可以实现，指生产两个包。一个为恶意包，另外一个为正常包。但是两个包的hash值相等，并上传正常包进行审核。从而实现绕过包审核制度。\n\n具体的工具有很多，可以github搜索一下。","date_published":"2023-08-17T02:26:42.000Z","_microfeed":{"web_url":"https://kexohproject.pages.dev/i/app-md5-app-F79q5Uy3oJQ/","json_url":"https://kexohproject.pages.dev/i/F79q5Uy3oJQ/json/","rss_url":"https://kexohproject.pages.dev/i/F79q5Uy3oJQ/rss/","guid":"F79q5Uy3oJQ","status":"published","itunes:title":"New Article Title for iTunes","date_published_short":"Wed Aug 16 2023","date_published_ms":1692239202000}}],"_microfeed":{"microfeed_version":"0.1.2","base_url":"https://kexohproject.pages.dev","categories":[{"name":"Education","categories":[{"name":"Language Learning"}]},{"name":"Technology"}],"subscribe_methods":[{"name":"RSS","type":"rss","url":"https://kexohproject.pages.dev/rss/","image":"https://kexohproject.pages.dev/assets/brands/subscribe/rss.png","enabled":true,"editable":false,"id":"4KlfbtkEfzy"},{"name":"JSON","type":"json","url":"https://kexohproject.pages.dev/json/","image":"https://kexohproject.pages.dev/assets/brands/subscribe/json.png","enabled":true,"editable":false,"id":"DVFm7TYiNSq"}],"description_text":"你好，欢迎访问个人主页！\n\n擅长密码学，安全分析，数字水印等技术。\n\n你可以联系我通过:findmykexin@gmail.com或者知乎私信。\n\n我的知乎链接：苏迟但到 - 知乎 (zhihu.com)\n\n我的github链接：kexinoh","copyright":"©2024","itunes:type":"episodic","items_sort_order":"newest_first"}}