TSTAR 解题 Write Up

b'\x02\xf8\xd4\xae\xc6\xd6\x8dy(sgH\x10Z\x93w\xc5c\xdb\xa4r\xf5\x91\xa8q\x009BlteBJnZpwrRjbL0DsGlFz5M+MDG74jYIj0zzivGPVW75jYZQpdzpfrpEBcXAJqHrlZlEw9hMhRQ8FijkATyMxpKsPXEWT5K6M5\n'

commo
nly,
 simply 
  ignor 
ant
  about 
  good 
  secur 
ity
  pract 
ices.
  With 
  the 
  same 
  attit 
ude
  as 
  our 
  secur 
ity-co
nscious
  many 
  infor 
mation
  techn 
ology
  (IT) 
  profe 
ssionals
  hold 
  to 
  the 
  misco 
nception
  that 
  made 
  their 
  compa 
nies

Security is too often merely an illusion, an illusion sometimes made even worse when gullibility, naivete, or ignorance come into play. The world's most respected scientist of the twentieth century, Albert Einstein, is quoted as saying, "Only two things are infinite, the universe and human stupidity, and I'm not sure about the former." In the end, social engineering attacks can succeed when people are stupid or, more commonly, simply ignorant about good security practices. With the same attitude as our security-conscious homeowner, many information technology (IT) professionals hold to the misconception that they've made their companies largely immune to attack because they've deployed standard security products - firewalls, intrusion detection systems, or stronger authentication devices such as time-based tokens or biometric smart cards. Anyone who thinks that security products alone offer true security is settling for. the illusion of security. It's a case of living in a world of fantasy: They will inevitably, later if not sooner, suffer a security incident.