线上的沉默
Silence on the Wire
Michal Zalewski · 初版 2005 年
29人推荐
38位读者提及
53次提及
为什么值得读
- 全景覆盖从物理输入到协议的安全栈
- 深入探讨时序攻击与微妙信息泄露
- 详尽调研少被讨论的被动攻击技术
“在 Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks 中，Zalewski 倾囊相授自己的专业知识与实战经验，阐释了计算机和网络如何运转、信息如何被处理和传递，以及潜伏在阴影中的安全威胁。本书绝非单调乏味的技术白皮书或网络防护操作手册，而是真正独树一帜的佳作。它以叙事的方式探索了各种独特、罕见且往往极为精巧的安全挑战，这些挑战难以被简单归类，并跳脱了传统的‘攻击者-受害者’模式。”“这本书将...
Hacker News 上怎么说
正在加载完整评论……
如果你不知道他是谁，他写过一本我最喜欢的 web（浏览器）安全方面的书：《Web之困》（The Tangled Web）[1]。他的另一本没那么出名的书也同样值得一读：《线上静默》（Silence on the Wire），它审视了从你打字的键盘、数据传输的线缆到互联网协议等整套信息安全栈[2]，探讨了每个阶段是如何暴露或保护……
If you don't know who this is, he wrote one of my favourite books on web (browser) security: "The Tangled Web" [1]. Another lesser known book by him is also worth a read: "Silence on the Wire" that takes a look at the full information security stack from the keyboard you type on, to the wires the data transits, to the internet protocols, etc [2] and looking at how each stage exposes/protects…
有意思的想法。试图让那些考虑卖 exploit 的人转而从 Google 这边赚点钱。Michal Zalewski（lcamtuf）在安全界备受推崇——《The Tangled Web》和《Silence on the Wire》都是绝佳读物。如果这没在不久的将来挖出几个新的 BIND 和 ISC DHCPD bug，那才真叫奇怪呢。
Interesting idea. Try get people who are considering selling exploits to get a little money from Google instead. Michal Zalewski (lcamtuf) is highly respected in the security world - The Tangled Web and Silence on the Wire are excellent reads. It would be very surprising if this didn't lead to a few new BIND and ISC DHCPD bugs coming out in the near future.
Zalewski 就是我 2005 年觉得自己一事无成的原因，当时我读了他的《Silence on the Wire》，发现他其实没比我大几岁。他单独写的 CNC 指南很棒[1]，他的电子学入门也写得非常好[2]。他的第一本书对完全被动攻击（passive attacks）做了惊艳的全面梳理[3]。他的第二部……
Zalewski was the reason I felt unaccomplished in 2005, when I read his "Silence on the wire" and noted he wasn't much older than I am. His separate guide on CNC is great[1]. He also has a great intro to electronics[2]. His first book is an amazing survey of totally passive attacks[3]. His second…
《Silence on the Wire》是一本极好的书，聚焦于安全领域中那些非常规且少有人讨论的方面：有趣的定时攻击（timing attacks）、微妙的信息泄漏、指纹识别（fingerprinting）等。作者是 Michal Zalewski，他大概是……
Silence on the Wire is a fantastic book that looks at unconventional and underdiscussed aspects of security: interesting timing attacks, subtle information leakage, fingerprinting, etc. It's by Michal Zalewski, who is perhaps…
有意思，我的反应跟你一模一样。买了那本书（连同 Michal Zalewski 的《Silence on the Wire》一起买的），看了不到一章就沮丧地放下了。从那之后我就一直在想，是不是应该回头再给它一次机会。听起来好像没必要？不过说实话，我倒是挺喜欢 Zalewski 那本书的。……
Interesting, I had the exact same reaction as you. Bought the book (along with Michal Zalewski's Silence on the Wire), got less than a chapter in, and put it down in frustration. I've since wondered if I should go back and give it another chance. Sounds like no? For what it's worth, I really enjoyed Zalewski's book.…
老兄，你应该读读 Michal Zalewski 写的《Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks》，拓展一下你对到底该怕些什么的认知边界。这本书挺有意思，能彻底戳破你对……
You should read "Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks" by Michal Zalewski to expand your universe on things you should be afraid pal. Interesting book that can really burst your bubble on how…