标签： 上海龙凤419后花园

In movies, there is often such a scene: thieves operate quickly on laptops, and the monitoring screen of the security room flashes, and the picture has been taken over by thieves, so the thieves swagger into the supervision area and even monitor the actions of the security guards in turn, and the security guards are ignorant.

The picture of the movie is far away from us, but because of a piece of news, people in Jiangsu seem to see this scene happening around them. On February 27th, a document issued by the General Office of Jiangsu Province caused a great impact. The document stated that Hikvision monitoring equipment used by the public security system in this province "has serious security risks" and "some equipment has been controlled by overseas IP addresses". Subsequently, although Hikvision released the Instructions for Equipment Safety and the Letter to Users successively, its share price once fell on Tuesday, shortly after the opening. However, its share price rebounded later.

In the end, what is the technical reason of this incident and how big the impact will be? Except for the technicians of Hikvision and the Jiangsu Provincial Public Security Department, it is difficult for others to make a hasty judgment. However, in China, the construction of a "safe city" is vigorously carried out, and the number of cameras deployed in first-class cities is 100,000 or even millions. Today, people have paid urgent attention to what links a complete video surveillance system consists of, how to ensure its security, and what weak links are there? And if there is a loophole in the video surveillance system, what impact will it have?

Complex monitoring system

On February 27th, Jiangsu Provincial Public Security Bureau issued a document saying that Hikvision monitoring equipment used in the public security system of Jiangsu Province "has serious security risks" and "some equipment has been controlled by overseas IP addresses". Then, on the night of February 27th, Hikvision released the "Instructions for Equipment Safety". According to the explanation, some Hikvision devices in Jiangsu public security system on the Internet were attacked by hackers because of the weak password problem. Later on the same day, Hikvision released the Letter to Users again in its official website, saying that the company had "communicated with the Jiangsu Provincial Public Security Bureau for the first time" and organized a technical team to help cities in Jiangsu to modify passwords.

It should be said that Hikville regards this response as timely. However, the information disclosed by Hikvision this time is limited, and it is impossible to confirm the real core link and influence scope of the problem. Therefore, there have been many interpretations of it.

Beyond Hikvision itself, the monitoring system is composed of multiple complex links. The easiest thing for people to understand is the analogy between the monitoring system and the personal computer: the analogy between the monitoring camera and the camera of the computer, the analogy between the monitoring camera network and the cable connecting the camera and the computer, the analogy between the storage and processing link and the computer host, and the analogy between the software scheme of image retrieval and analysis and the media player. In fact, the monitoring system does have the above links, but each link is much more complicated and prone to loopholes.

Popular deduction of nouns: loopholes

To use a metaphor, there are two kinds of software and hardware vulnerabilities. One is that when building a house, there is a gap outside the formal doors and windows, such as vents and sewers. People with a heart can enter the house when they find it, which is a design defect; The other is that the wall is too thin and the lock is not complicated enough. Powerful people can enter the house by smashing the wall and picking the lock. This defect can only be dealt with by strengthening the awareness of prevention. The management of loopholes, just like if you plug the key in the door and don’t pull it out, then anyone can use the key to open the door and enter the house. In reality, using such loopholes is relatively free of time cost and technical threshold, so such loopholes are more serious.

Speaking of vulnerabilITies, it has to be mentioned that any IT system will inevitably have vulnerabilities, which can be seen from the number of patch packages released by Windows. Among them, software and hardware vulnerabilities have higher requirements for manufacturers to deal with, such as Windows security vulnerabilities and the possible real-time streaming protocol disclosed by Hikvision this time, which belong to this category; What is easier to exploit than hardware vulnerabilities is management vulnerabilities. For example, among the two defects that Hikvision voluntarily disclosed this time, the weak key problem belongs to this category.

How safe is that video surveillance system? The first is to look at the physical isolation of this system.

Popular deduction of nouns: physical isolation

Generally speaking, as the guarantee of "safe city", the security monitoring system in the city needs to be built on Intranet, which is completely physically isolated from the Internet.

Generally speaking, if you don’t want the phone calls of yourself and your friends to be heard by any third party, you’d better set up an independent phone line between yourself and your friends without going through the equipment of any third-party operator. At the same time, the telephones you and your friends use are also self-made, so as to ensure that there is no possibility of being monitored; At the same time, these two phones are not connected to the network of third-party operators.

In fact, large-scale monitoring systems such as safe cities need to set up hundreds of thousands of cameras at intersections, banks and ATMs, office buildings, residential areas and other places, and it is unrealistic to lay special lines for all of them. Therefore, many devices will use the Internet line where the device is located, and then connect to the public security private network. The compromise is to set up a firewall between the Internet and the public security private network to prevent other users from connecting to the private network, and at the same time install a firewall on the equipment to prevent other users from connecting to the equipment.

This non-physical isolation leaves the possibility of "breaking through the wall".

In the Hikvision incident, the company mentioned in its explanation that "we have too many devices on the public network", which refers to the lack of physical isolation. Generally speaking, after physical isolation, even if there are loopholes in software and hardware, the impact is very small, because people with a heart can’t get close to the house at all, and they can’t take advantage of the loopholes. The most equipment placed on the public network is the monitoring probe.

How to break the "safe monitoring"?

It is not an easy task to break the monitoring system. Generally speaking, the collection and transmission links are easier to be broken because of less protection. Through simplification, we can divide the breakthrough process into "contact" and "control".

The "contact" link is to break through the isolation and connect to the equipment. For example, your wireless router doesn’t have a password, or the password is just your home number, so others can easily connect to your router. And even if you use complex passwords, others will have a chance to break through by brute force. Similarly, for monitoring equipment without physical isolation, contact can be completed by using technical means or management loopholes to break through the firewall.

And after contact, it is necessary to achieve control. The control link can take advantage of management loopholes or software and hardware loopholes. Among them, some loopholes are design flaws, and some are "back doors" left by designers for management convenience, just like the command of "*#06#" of Nokia mobile phone, the preset "TelecomAdmin" account of telecom router and some control interfaces. If these resources are mastered and used by hackers, they can take over the monitoring equipment. Once the monitoring equipment is taken over, the scene at the beginning of the article may appear in real life.

In addition, if the monitoring equipment is arranged on the Internet, the data may be intercepted by hackers in the process of transmission through the Internet. In this process, although the device itself is still working normally, the data transmitted to the background may be tampered with. The cable TV signal that appeared before was intercepted, and the fake base station that appeared in telecom fraud also belonged to this phenomenon. There was no problem with the TV station and the TV at home, but a new source was connected in the middle, and it was not the program broadcast by the TV station.

At the back end, because most of the main storage devices in the safe city are arranged in the public security private network, it is difficult to achieve "contact", and management loopholes are often more likely to appear. Just like a computer that can’t be connected to the Internet or connected to a USB flash drive, the data inside can also be taken away with a camera. Management loopholes are hard to prevent.

Then, looking back, how much impact will Hikville have on this incident? If the cause of the incident is really like the two defects disclosed by Hikvision, IT is not a very special emergency, but a standard questions that complex IT systems often encounter. As Hikvision pointed out, "This incident will not have a major material impact on the company." But on the other hand, this incident also reminds people that whether it is security monitoring or our daily PC, router and mobile phone, security issues must be taken seriously, so as not to cause great losses.

　

Related reading

Hikvision resumed trading in Chongqing project on the 3rd, or there may be new actions.

Hikvision responded to the "security door" institutions to cope with the tragic decline after the resumption of trading.

　　BEIJING, Oct. 11 (Xinhua) According to Singapore’s Lianhe Zaobao, he met with Singaporean florist Li Guoxiong for an interview at the Botanical Garden, and he led him to walk the rainforest trail in the garden, slowing down while talking and immersing himself in the embrace of nature. You can’t see gorgeous flowers in the tropical rain forest area, but there are some nameless trees and green leaves. Li Guoxiong explained the characteristics of various leaves with great interest, and then described the posture of these plants with rich imagination.

　　Born in Hong Kong, Li Guoxiong (53 years old) has been engaged in floral creativity for 18 years. He analyzed: "Florists are different from flower arrangers, who generally refer to people engaged in flower arranging industry. Florists specialize in building art with natural flowers and trees, examining the world from the high platform of art, and pursuing the unknown field from afar. Floriculture works are in the same position as visual arts such as sculpture, painting and photography. "

　　Take the place of Taitai in class and love floriculture.

　　A piece of rotten wood, several leaves and several budding buds, if we look closely at Li Guoxiong’s floral creation, we can really figure out the layers of meaning from it, just like a work of art waiting for you to appreciate it.

　　"I have a strong interest in art since I was a child, especially things related to Chinese culture. I like observing things. Although I like flowers and trees, I have never thought of engaging in floral creation. In 1990, our family immigrated from Hong Kong to Sydney, Australia. At that time, we planned to do business with our wife in the flower shop. My wife signed up for the Western Flower Arrangement Course at Sydney Institute of Technology, and just before the course started, I found that I was pregnant and felt unwell, so I crustily skin of head took the place of my wife.

　　"The first class was not very satisfactory, and I was in a hurry. Fortunately, after tempering, I made progress in my studies and built up my confidence. The love of flower arrangement was born under such accidental circumstances. "

　　The flower shop didn’t open in the end, but the flower arrangement course allowed Li Guoxiong to explore his potential talents.

　　Combine the essence of eastern and western floral art

　　Li Guoxiong’s teacher greatly appreciated his craft and invited him from many students to assist in the Christmas floral arrangement of Sydney Opera House, which greatly encouraged Li Guoxiong, who began to master floral skills. The teacher even encouraged him to take part in all kinds of floral creative competitions. Although he initially fell out of Sun Shan, after observing the winning works, he won the first and second prizes several times in the following competitions and became the Chang Shengjun of the Australian floral competition.

　　At the same time, Li Guoxiong’s interest and enthusiasm for flower arrangement extended to japanese ikebana, where he studied with Seiseki Umemura, a Japanese grass moon teacher, and also studied floral art and theory with Norman Sparnon, a famous Australian floral master, and obtained a license as a flower instructor.

　　"I combine the oriental flower pattern with the essence of western floral art, and my works are full of’ gentle wind’ and rhythm. This kind of creativity has won a good response in the floral industry in Australia and Britain. There are many kinds of flowers in Sydney, and there is no shortage of wonderful floral products, which has taught me a lot. " Li Guoxiong said it.

　　He once held a solo exhibition in the Japanese Association.

　　Li Guoxiong and his wife Yang Peiyi both graduated from the National Taiwan Province University. He majored in archaeology and anthropology, while his wife studied China literature. After graduation, the couple returned to Hong Kong to engage in education for several years. After immigrating to Australia, Li Guoxiong took a half-course in flower arrangement and completed a master’s degree in theology. In 2004, he came to Lion City with his family for missionary work, and his decision to settle in Singapore was closely related to his floral creation.

　　"In 2005, I held a personal floral photography exhibition at the Japanese Association through the recommendation of a Japanese lady, Kato Hui. I created these works in Sydney, and I felt that the life of floral products was short, so I preserved them with images. The response of the exhibition was very good. I am glad that the Japanese who came to watch it can accept the fresh combination of traditional flower patterns and western-style floral art. It is undoubtedly a great affirmation to know that both the East and the West agree with my creative style. "

　　The following year, Li Guoxiong published his own floral photography collection "Golden Wind". The wife beside shared: "Thanks to the efficiency of Singapore, we successfully published this floral album. From design to printing, the responsible company has demonstrated a superb level. We are very satisfied with the quality of the book and have a good impression on Singapore. In addition, Singapore’s multicultural and comfortable living environment are the reasons for choosing to stay. "

　　It is worth mentioning that "Golden Wind" won the gold medal in the authoritative international publication exhibition, which was highly appreciated and recommended by major international flower fairs.

　　Take local materials in the lion city

　　How has Li Guoxiong’s creation changed since he settled in the Lion City?

　　"Australia has four distinct seasons, and the vast natural environment has a great influence on my creation. Coming to tropical Singapore, it is not easy to choose flowers because of the small space, so it is a new test to create in a limited environment. I have a soft spot for Nanyang store house culture, and I created a floral product with the theme of Chan Museum in Nilu.

　　"This is a beautiful blue house, which creates the atmosphere of the old building through floral art.. Blue utensils symbolize the house, the gaps in palm leaves represent the shutters of the house, and orchids are unique to Singapore. "

　　Li Guoxiong is an artist who understands life because of his meticulous observation of things and delicate mind, and drawing materials from trivial matters or chores around him. He said that the first house he lived in the island was the Longmen Mansion on Wuyuan Road in Spottish, and there was a vast jungle opposite his home. He spent a long time there meditating and looking for new creative materials.

　　He gradually realized that the leaves in Singapore were actually full of beauty, just like palm trees that he had never seen in other cities. "Floriculture creation doesn’t have to be dominated by flowers. There are layers of leaves, not full of green leaves. I occasionally put a few dead leaves into my works to express the normality of life. This is the creative concept I call’ winning in defeat’. "

　　Give full play to Nanyang characteristic culture

　　Li Guoxiong’s family of four has the right of permanent resident in Singapore. His wife is a Chinese teacher in an international school. Their two children, aged 18 and 14, are studying in an international school where his wife teaches.

　　Having lived in Hong Kong, Taipei, Sydney and Lion City, Li Guoxiong believes that the greatest feature of Singapore stems from the diversity and integration atmosphere of the four major races. He believes that the island countries have made progress in promoting the development of culture and art in recent years; In addition, Singapore is located in an important hub and is adjacent to many Southeast Asian countries, so it should influence each other, absorb and integrate, and give play to the unique artistic culture of Southeast Asia. (Mai made a special trip)

Past, present, future,

Everyone can only walk with you for a while,

Sooner or later, it will be separated.

pass

　 　 Special feature of 1905 film network In Fenyang County, Shanxi Province in 1999, Shen Tao, a sunny girl, was sweating heartily in a disco, surrounded by two boys who also liked her: Max Zhang Sheng and Liang Jianjun.

　 　 But the identities of two people are very different, one is a miner and the other is a coal mine owner.

　 　 This love triangle between a woman and a man turned the two brothers against each other, and Shen Tao was entangled, and the long-term balance would eventually be broken.

　 　 In the end, Shen Tao chose Zhang Jinsheng, who was chasing money. When she got married, someone chose a distant place.

The background of two people’s wedding photos has become a prediction of Zhang Jinsheng’s future.

　 　 In the past timeline, director Jia Zhangke showed his love view:

at present

　 　 In 2014, Zhang Jinsheng, divorced from Shen Tao, was welcomed in Shanghai. He remarried with his son Dollar and started a new life in Shanghai.

　 　 Liang Jianjun, who had been working in a coal mine for a long time and was terminally ill, returned to his hometown with his wife and children at the last moment. In desperation, he found Shen Tao to borrow money for treatment.

　 　 Middle-aged people are involuntarily standing on the boundary of where will you go. Shen Tao’s father sat quietly at the railway station and went away alone, and he was turned over by all the monks.

　 　 Dollar returned to Fenyang to attend the funeral, taking him back to the last place where Grandpa sat and feeling home and affection, life and death.

　 　 However, the son of westernization education has changed greatly since childhood, and the mother and son meet and don’t know each other. Shen Tao also knew that he couldn’t stay with him, just gave him the key to the house.

"The big one is the gate, and the small one is the living room. This is your home. You should have a bunch of keys and come back at any time. "

　 　In the current timeline, director Jia Zhangke showed his view of family:

　

future

　 　 In Australia in 2025, Dollar, who can only speak English, has grown up, but he is separated from his father, Max Zhang. He is eager to get out of his father’s control and get "freedom" without even knowing what it means.

　 　 At that time, Chinese had become a world language. Dollar came to study in Chinese school and met Mia, a Chinese teacher played by Zhang Aijia.

　 　 After the divorce of Mia and her ex-husband, she was also in an unstable state, which happened to connect with Dollar, who entered the rebellious period and wanted to pursue freedom, and they had an unforgettable love.

　 　 Dollar, who lacked maternal love since childhood, finally found the essence of love in older Mia.

　 　 In the future timeline, director Jia Zhangke showed his world outlook:

　 　 From the CD trial in Fenyang, Shanxi Province in 1999, to the iPad that mother and son listened to on the train in 2014, and then to the vinyl record that Mia played for Dollar in 2025, Sally Yeh’s "Treasure" strung together the emotional sustenance and family clues of the characters in the film. In the lyrics, "I can’t bear to lose you, I hope things will always turn around, shake hands and wave goodbye, and I will wait for you all my life in both places." No matter the separation of Shen Tao and his son, or the gathering and parting of roles, it has hit home.

　 　 Dollar has been hanging the key given to him by his mother, but he can’t remember his mother’s name, only remembering that her name is Tao, which means wave.

　 　 When Dollar gently called out his mother’s name "Tao" in the midsummer on the other side of the ocean, Shen Tao stopped Bao jiaozi’s hand as if telepathically in his hometown of Fenyang, Shanxi.

　 　 Old, she slowly walked out of the empty room, and in the snowy winter, she danced "Go West" alone beside Wenfeng Tower, which she danced with Zhang Jinsheng and Liang Jianjun when she was young.

　 　 Where will the love between the lost Dollar and Mia go? Will Dollar go home to find his mother who has been waiting for him for the New Year? What will happen to his father-son relationship with Zhang Jinsheng? … …

　 　 The director didn’t give an answer, just as Shen Tao asked the question at the beginning of the film:

What is the problem between us?

Algebraic problems?

Or geometry?

　 　 From the algebraic problem of time flying, to the geometric problem of spatial distance, people come and go, people go and people return, and everything has no answer.

　 　 The mountains and rivers are as old as before, and the river flows east. The mountains and rivers remain the same, so it is difficult for old friends to stay.

　 　 As Zhang Yibai said, everyone has their own mountains may depart, and only Jia Zhangke photographed them.