But Florence Ndimubakunzi is not pregnant. Her heart is failing. It pumps so poorly that blood backs up in her veins, bloating her liver and spleen, …Death PenaltyHow NAFTA Destroyed the Mexican DietThis story was originally published on Civil Eats.

When Alyshia Gálvez’s mother was growing up in California in the 1950s, she traveled to Michigan every winter to visit family. When she returned home, she would march into a grocery store, buy a head of lettuce, and eat it while sitting on the curb …Public HealthWhy a ‘Memory Town’ Is Coming to Your Local Strip MallWeeks after opening near San Diego, a model town for treating dementia is set to be replicated around the U.S.

On August 13, a brand-new town in Southern California welcomed its first residents. They trickled through the doors of a generic beige warehouse on a light-industrial stretch of Main Street …San DiegoSolving the genome puzzleWith advances in gene technology helping to diagnose very rare diseases, has the new era of personalised medicine finally arrived?

Evie Walker sits on her mother’s lap, playing a game she never grows tired of: turning her mother’s hand over and over, stroking and examining it. When she takes a break …The Re-reinvention of Chris(tine and the Queens)In her third act, France’s Héloïse Letissier is playfully muddying the gender lines. But under the name Chris, she continues to make pop’s brashest, queerest records with absolute clarity.

A petite Chris (née Christine and the Queens) lounges in New York’s Standard Hotel. Dressed in a white polo …Short HairThere are now more $100 bills than $1 bills in the worldA funny thing happened on the way to a world of cryptocurrencies and mobile payments. Cash became more popular than ever. The main reason? The one hundred dollar bill.

In 2017, for the first time ever, the one hundred dollar bill became the most popular US bill in circulation, beating out the one …Mobile PaymentsThe epic rise and fall of the name HeatherWhen people think of endangered species, they tend to think of the giant panda, the blue whale, or maybe the snow leopard. We need to add another group to the list: women named Heather.

A Quartz analysis of US baby-name data that goes back to 1880 finds that no name in history has become so popular …Giant PandasSilicon Valley thinks everyone feels the same six emotionsThe world is being flooded with technology designed to monitor our emotions. Amazon’s Alexa is one of many virtual assistants that detect tone and timbre of voice in order to better understand commands. CCTV cameras can track faces through public space, and supposedly detect criminals before they …Papua New GuineaIce Surveys and Neckties at Dinner: Here’s Life at an Arctic OutpostWant climate news in your inbox? Sign up here for Climate Fwd:, our email newsletter.

For the past 40 years, thanks to satellite measurements, scientists have known that sea ice coverage in the Arctic is shrinking. Global warming has reduced the extent of ice in the region in summer, when it is at its …The ArcticDaily Edition Top 10 (September 17, 2018)The controversy surrounding Supreme Court nominee Brett Kavanaugh and Dr. Christine Blasey Ford, Kavanaugh’s former classmate who has accused him of sexually assaulting her when they were teenagers, escalated this week. Congressional Republicans are reportedly offering to hold the hearing Wednesday …U.S. Supreme CourtHow Puberty Kills Girls’ ConfidenceIn their tween and teenage years, girls become dramatically less self-assured—a feeling that often lasts through adulthood.

The change can be baffling to many parents: Their young girls are masters of the universe, full of gutsy fire. But as puberty sets in, their confidence nose-dives, and those …PollingHow Far Have We Really Come Since Anita Hill?Christine Blasey Ford’s allegations against Brett Kavanaugh present a test that the Senate very well may not pass.

With a Supreme Court nominee’s confirmation hearings thrown into chaos by accusations of sexual misconduct, the Brett Kavanaugh drama feels like a familiar spectacle. During Clarence …Brett KavanaughThe Man Behind Trump’s ‘Invisible Wall’USCIS Director Lee Francis Cissna is the son of an immigrant, the son-in-law of a refugee and a man who says he’s just obsessed with the fair implementation of laws. So why is he making them so much harder for immigrants?

This summer, as anger over the separation of migrant families at the border …Homeland SecuritySee How the Fall Equinox Is Celebrated Around the WorldCulture & ExplorationPhoto Gallery

From early-morning gatherings at Stonehenge to torch-bearing revelers parading through a city in Spain, people around the world herald the seasonal change in myriad ways.

As the autumn equinox approaches, days begin to shorten in the Northern Hemisphere, and people …National Parks"],["topImageUrl","https://cdn.flipboard.com/uploads/avatar/7e211185df7384dc5032a1b22b634616c56c1238.jpeg"],["error",null]]}]}],["text","廢墟、童話城堡都有！彰化8個人氣「免費」好拍景點\n\nhttp://flip.it/dqxAaY"],["id","5410467194193-rumor"],["createdAt","2016-12-27T04:55:00.000Z"]]},{"__iterable":"Map","data":[["replyCount",1],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",1],["user",{"__iterable":"Map","data":[["id","j4S8C_OCtgx4H4_F8pov0EpNQX2lb0XOBRGPjieVXYya-JEEM"],["name","肯定的大安貝克"],["avatarUrl",null],["level",0]]}],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","33 Year Old Man Reveals How He Earns More Than $40,000 Every Month Working From Anywhere He Wants"],["url","https://bbcbtcnews.xyz/click.php?key=95dhagg458clrqk70cqg&s=0.0179&1=1765408&2=push&3=5815657&4={connection.type}&5=high"],["summary","(Tuesday, April 14, 2020 - 'It all came as a surprise to me! I\n just wanted to make some extra cash aside for my hobbies and travel.'\nA\n\n ppearing on his weekly facebook live session, 33 year old millionaire Sam Hutchins explained us in detail how he makes\n on average $44k per month while\n traveling and working from some of the world's most exotic locations!\n\n One day while browsing online he\n discovered an automated trading platform, called Bitcoin PRO. The\n idea was simple: allow the average\n person the opportunity to cash in on the digital currency boom. Even if\n they have absolutely no investing or technology experience.\n \n\n \n\n A user would simply make an initial deposit into the platform, usually of $250 or more, and the automated trading algorithm would go to work.\n Using a combination of data and machine learning, the algorithm would know the perfect\n time to buy (or sell) digital assets low and sell high, maximising the user's profit.\n\n \n\n \n\n At first, Sam used Bitcoin PRO to make a\n few thousand dollars extra, but it wasn't before long his ambitions took over and he substituted his full time job for \n \"30 minutes trading online per day\". Fast forward 6 months, and Sam is earning $40,000 per month while traveling the world. \"All I need is some\n wifi to check on my trades, I can be anywhere in the world at anytime I want!\" Sam exclaims.\n\n\n \n \"I play golf 3 times a week and usually stay somewhere close to the ocean. If I get bored in one place then I'll move on. I love\n to read and have just started writing a book! I have so much time on my hands now, it's a great way to live!\"\n\n To demonstrate the power of the platform Sam opened up a new account and deposited $250 on his facebook live feed.\n\n\n \n \n \n Sam setting up the new account from his airbnb in Cabo \n \n \n After Sam's initial deposit for $250 was made in the new account, the trading platform went to work buying low\n and selling high. Within 3 minutes, he had successfully increased his initial funds to $323.18. That's a $143.18 profit. \n \n \n \n \n Bitcoin PRO goes to work.\n The algorithm knows the perfect\n time to buy (or sell), maximising the user's profit. \n \n Everyone on Sam's facebook live session (including us) were immediately impressed by how easy it was to make money.\n The platform handles all the trading work automatically, and because the price of Bitcoin is quite volatile, there are\n numerous opportunities to profit. \"The more volatility the better!\" Says Sam. \"I actually made most of my money during the sell-off, it was simple.\n It's still a really good time to get involved while prices fluctuate like crazy!\"\n Before Sam even had a chance to respond to everyones questions, he interrupted and said with a smile on his\n face: \"I've gone up to $398.42 after just 8 minutes\". \n\n \n\n If you had invested just $100 in Bitcoin back in 2010 you would now enjoy dividends of $75 Million!\n \n Try Bitcoin PRO NowWe decided to put Bitcoin PRO to the test, to see if it was really possible for you to make money using the platform.\n Here's the deal: We quickly discovered that the platform charges a commission of 2% on profits a user generates and you need to make a minimum deposit of $250 to get started. That money will be your initial investment, which the trading software uses to trade.\n Also, we learnt that Bitcoin PRO makes money by buying when the price goes up AND when the price goes down. This is known as short-selling, and the platform handles it for you automatically.\n MY RESULTS WITH Bitcoin PRO AFTER 7 DAYS: I decided to sign up for an account with Bitcoin PRO, I made the initial deposit $250 and set my account to active.\n \n On the show, Holly was able to make $73.18 in profit after 3 minutes, for me, it took much longer. The platform took 20 hours to generate an $80.19 profit, which still impressed me a lot! I've never purchased Bitcoin before and never made a trade in my life, yet here I was able to generate profits.\n I spent about 5 minutes a day checking my results, and after 5 days, the platform had traded up to a massive total of $630. That is a 252% increase in my initial deposit. I was starting to become a true believer in this platform.\n After 7 Days my initial investment had traded up to $1,930. At this point, my mind was racing with possibilities of all the things I could spend that money on. This is more money than I made at work for the week and I spent less than 30 minutes checking the platform.\n I decided to keep my account active for 15 days in total because I wanted to see how high it could go. My account eventually hit a peak of $6,380.10 but had a negative -$79.51 trade. I looked through my trading logs and discovered that not every trade is profitable, some actually lose money.\n The platform isn't magic, but after 70% of my trades were profitable, the net result was I made $6,300.59 from my initial deposit of $250. It took me less than 30 minutes of work a week and absolutely no technical or investing experience.\n \n As you can see from the screenshot below, I decided to use the 'withdraw funds' function to withdraw $6,300.59 from my account.\n \n \n \n \n How I easily withdrew my money from my Bitcoin PRO account \n \n All in all, I was able to make $6,300.59 from using Bitcoin PRO. I decided to pull my money out to pay for an overseas holiday. When I get back, with the money I've got left over from my holiday, I will definitely reinvest in Bitcoin PRO. I may even quit my job!\n Note: It took 48 hours for my money to be deposited into my personal bank account.\n \n \n \n TRY Bitcoin PRO FOR YOURSELF\n \n\n\n\n Sam has given us 15 special invitations to try\n Bitcoin PRO, some are\n still available left. \n \n\n\n Access to Bitcoin PRO is available: Tuesday, April 14, 2020\n\n (15140) people have already signed up today... Hurry!\n\n\n Try Bitcoin PRO Now\n \n\n\n You can fund your account via credit card or a bank transfer.\n There are three steps to get started: 1. Sign Up With This Link (important!)\n 2. Deposit The Minimum $250\n 3. Use The Bitcoin Trading Platform To Earn Profits\n \n \n Note: You can withdraw your profits or initial deposit at ANY time by using the 'Withdraw' button inside the platform\n \n Step 1: Enter Your Details To Sign Up For A Free Account\n \n \n \n \n Step 2: Deposit The Initial Minimum Investment Of $250\n \n \n \n \n Step 3: Withdraw Your Profits (or keep them invested to generate more profit!)\n \n \n \n \n Try Bitcoin PRO Now\n Associated Links:\n Bitcoin PRO Official Site\n \n \n \nBitcoin PRO RESULTS \nPROFIT: $5.552\n “I use Bitcoin PRO\n already a bit longer than 2 weeks and my initial investment of $ 250\n is now worth $ 5.802. That is much more than I can earn at work.” \nBen James London \nPROFIT: $9,200\n \"I have more than $ 9,200 PROFIT after more than a month of Bitcoin PRO. I can also travel and earn money!” \nAdam Sydney\nPROFIT: $22,219\n \"It is so easy to use! I have never traded before but now I earn more than $ 3,000 per week\n and I enjoy life!” \nAnna Paris\nPROFIT: $41,943\n \"I have been working on Bitcoin PRO for only two weeks and it has already paid off my America vacation.” \nSammy Newark\nPROFIT: $7,521\n \"money money money!\"\nJulia Keaton Auckland\nPROFIT: $58,744\n \"I do it together with my best friend, and together\nwe made profit after 3 weeks. The trading robot does all the work. Together\nwe have earned more than $ 17,000 in a week” \nTom & Walter Munich\nPROFIT: $12,301\n \"My friend was the one who told me about Bitcoin PRO\nhad told me and it has changed my life. I already earn well over one\nmonth more than $ 2,000 a week, but I spend less than 30\nminutes per day”\nLinda Vogel Brussel, BE\nSpecial Offer\n\nStap 1:\n\n\n\n\nStap 2:\n\n\n\n\nStap 3:"],["topImageUrl",null],["error",null]]}]}],["text","https://bbcbtcnews.xyz/click.php?key=95dhagg458clrqk70cqg&s=0.0179&1=1765408&2=push&3=5815657&4={connection.type}&5=high"],["id","3ob2z6yx4fwqy"],["createdAt","2020-04-14T03:14:04.328Z"]]}]}],["relatedReplies",{"__iterable":"List","data":[{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",1],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",2],["user",{"__iterable":"Map","data":[["id","j4S8C_WAuYYj2LVfJbSwWOWex9UXA7W6d3Pwk7voZng0aQP9s"],["name","厚道的中和蜜妮安"],["avatarUrl",null],["level",0]]}],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","COVID 19 VACCINE WARNING! MARK OF THE BEAST! MANDATED VACCINE+CHIP"],["url","https://www.youtube.com/watch?v=IMc74QpJf04"],["summary","https://id2020.org/alliance\n\nhttps://www.nowtheendbegins.com/big-pharma-microsoft-silicon-valley-id2020-alliance-combine-vaccinations-with-implantable-microchip-digital-id-mark-beast-end-times/\n\nVACCINE plus MICROCHIP\nhttps://principia-scientific.org/id2020-alliance-will-combine-vaccinations-implantable-id-microchips/\n\nUS COMPANIES RACE TO TEST CORONA VIRUS VACCINE\nhttps://amp.cnn.com/cnn/2020/02/27/investing/coronavirus-vaccine/index.html\n\nUS VACCINE TRIALS\nhttps://www.cnbc.com/amp/2020/02/25/us-health-officials-say-human-trials-on-coronavirus-vaccine-to-start-in-6-weeks.html"],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","ID2020 | Alliance & Governance"],["url","https://id2020.org/alliance"],["summary","No government, company or agency can solve this challenge alone. Setting the future course of digital ID and navigating the associated risks is a challenge that requires sustained collaboration and global partnership.\n \n \n \n Why the Alliance\n \n \n \n \n Partners\n \n \n \n \n Governance\n \n \n \n \n \n \n Explore\n \n \n \n \n \n \n \n The ID2020 Alliance is unique in its philosophy and transparent governance.\n \n \n ID2020 is building a new global model for the design, funding, and\nimplementation of digital ID solutions and technologies. There is no other multi-stakeholder effort focused on user-managed, privacy-protecting, and portable digital ID.\n \n \n Ad-hoc investments in single use-case projects (“business as usual”) will be insufficient to bring about transformative impact. Changing the flow of funds is necessary to re-align incentives. That’s why Alliance partners are pooling funds to invest in programs that consider digital ID holistically, as a platform for diverse benefits, services, and use cases throughout an individual’s life.\n \n \n Private sector engagement is critical for solving at scale. Alliance partners include companies with a collective footprint in the billions and a shared commitment to an ethical approach to digital ID. Decisions about how Alliance funds are administered, which programs to fund, and which technical standards to support are made jointly by Alliance partners through a transparent governance process, preventing dominance by any single institution or sector.\n \n \n \n \n \n \n Alliance Partners\n \n \n \n \n \n \n \n A global management consulting and professional services firm, Accenture joined as a founding partner in June 2017. Accenture representatives participate in ID2020’s Executive Board and Technical Advisory Committee.\n \n \n \n \n Gavi, the Vaccine Alliance brings together public and private sectors with the shared goal of creating equal access to new and underused vaccines for children living in the world’s poorest countries. Dr. Seth Berkley, CEO of Gavi, the Vaccine Alliance, sits on our Executive Board.\n \n \n \n \n Since 1913, the Rockefeller Foundation has sought to improve the well-being of humanity around the world. The Rockefeller Foundation provided ID2020 with seed funding in in 2017 and has been an ongoing supporter of ID2020’s work.\n \n \n \n \n The American multinational technology company joined ID2020 in January 2018 as a founding partner. Members of the Microsoft team sit on ID2020’s Technical and Program Delivery Advisory Committees.\n \n \n \n \n Created by IDEO, the international design and consulting firm, to design products, services, and experiences to improve the lives of people in poor and vulnerable communities, IDEO.org joined ID2020 in 2018. IDEO.org is represented on our Program Delivery and Ecosystem & Advocacy Advisory Committees.\n \n \n \n \n \n \n \n \n \n \n The Alliance, a collaborative effort of global partners, is solving for scale from day one \n \n \n \n \n \n \n Closing the identity gap is an enormous challenge. It will take the work of many committed people and organizations coming together across different geographies, sectors and technologies. But it’s exciting to imagine a world where safe and secure digital identities are possible, providing everyone with an essential building block to every right and opportunity they deserve.\n Peggy Johnson\n Executive VP, Business Development, Microsoft Corporation\n \n \n Digital identity has the capacity to enable access to vital, life-saving services in many different development and humanitarian contexts, including by accelerating access to basic health care systems. I am excited to join ID2020's Executive Board, and guide the organization and partners in harnessing innovative technologies and multi-sectoral collaboration to benefit the world's most vulnerable populations.\n Dr. Seth Berkley\n CEO, Gavi, the Vaccine Alliance\n \n \n Accenture has joined the ID2020 Alliance with partners like Microsoft to create an open, human-centric approach to identity. The alliance draws on advances in biometrics and innovative technologies and brings together expertise from business, government and non-government agencies.\n Christine Leong\n Digital Identity Innovations Lead\n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n Alliance Governance\n As an alliance, the success of this initiative depends on robust collaboration and a clearly defined means for stakeholder engagement.\n \n \n \n \n \n \n Board\n The governing body for the Alliance is the ID2020 Alliance Executive Board. The eleven mmeber board includes five independent Directors, two Directors nominated as representatives of the public sector Founding Partners, two Directors nominated as representatives of the private sector Founding Partners, one Director nominated as a privacy expert, and one Director representing funding organizations.\n \n \n \n \n \n \n Advisory Committees\n The Board is supported by four thematic Advisory Committees, which provide in-depth advice to the ID2020 Board. Membership in these committees is set by the Board, with Founding Partners eligible to nominate representatives to two Advisory Committees.\n \n \n \n \n \n \n Secretariat\n ID2020, a US-registered 501(c)(3) based in New York, NY, is the Secretariat for the Alliance. As such, ID2020 is responsible and accountable for day-to-day operations, including: raising money to fund digital ID projects, coordinating with implementing partners for project implementation, setting and managing technical standards, monitoring and evaluation, legal and financial management and administration of the governance system. Management of these activities is the responsibility of ID2020’s Executive Director."],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","Big Pharma And Microsoft Are Teaming Up In Something Called The 'ID2020 Alliance' That Will Combine Vaccinations With Implantable Microchips To Create Your Digital ID • Now The End Begins"],["url","https://www.nowtheendbegins.com/big-pharma-microsoft-silicon-valley-id2020-alliance-combine-vaccinations-with-implantable-microchip-digital-id-mark-beast-end-times/"],["summary","For years we’ve been watching as Microsoft founder Bill Gates, now retired from the company he founded, use his billions to give ‘free vaccinations‘ to people in third world countries. Now Bill has become a founding partner in another company, this one is called the ID2020 Alliance, and its goal is to give every human being on Earth a digital id. How do they plan on accomplishing this feat? By combining mandatory vaccinations with implantable microchips. Genius, isn’t it? And coming soon to a theater near you, as the saying goes.“And he causeth all, both small and great, rich and poor, free and bond, to receive a mark in their right hand, or in their foreheads: And that no man might buy or sell, save he that had the mark, or the name of the beast, or the number of his name. Here is wisdom. Let him that hath understanding count the number of the beast: for it is the number of a man; and his number is Six hundred threescore and six.” Revelation 13:16-18 (KJV)So now you know what Bill Gates and his wife Melinda were really doing over the past 10 years, travelling to third word countries and giving ‘free vaccinations’ to the poor, downtrodden natives. Those ‘free vaccinations‘ was research and a live testing lab to conduct the necessary experiments required to form ID2020. And as you will see today, this unholy hybrid of vaccinations and implantable microchips is already happening in Bangladesh, soon it will be Boston. A page on the Gates Foundation website says that Bill and Melinda have so far invested over $2.5 billion dollars to this project, with no end in sight. Can the man who put the world behind a personal computer now put a vaccination microchip digital ID into the global population? Bill Gates is absolutely positive he can, and indeed is well on his way to achieving that goal.“Let no man deceive you by any means: for that day shall not come, except there come a falling away first, and that man of sin be revealed, the son of perdition; Who opposeth and exalteth himself above all that is called God, or that is worshipped; so that he as God sitteth in the temple of God, shewing himself that he is God.” 2 Thessalonians 2:3,4 (KJV)We have been warning you about this for the past 10 years, and now it is happening. Are you ready for what comes next? I hope you are. Keep looking for that Blessed Hope, and thank God it comes before the time of Jacob’s trouble. If only my friend, Carl Sanders, the man who first revealed the inner-workings of the team that created the RFID microchip, had lived long enough to see this day.Vaccines now being used to harvest biometric identities of everyone; Big Brother merges with Big PharmaFROM NATURAL NEWS: The ID2020 Alliance, as it’s being called, is a digital identity program that aims to “leverage immunization” as a means of inserting tiny microchips into people’s bodies. In collaboration with the Global Alliance for Vaccines and Immunizations, also known as GAVI, the government of Bangladesh and various other “partners in government, academia, and humanitarian relief,” the ID2020 Alliance hopes to usher in this mark of the beast as a way to keep tabs on every human being living on Earth.Similar to how cattle are marked with ear tags, this globalist alliance wants all humans to be “vaccinated” with digital tracking chips that will create a seamless monitoring system for the New World Order to manage the populations of the world with ease.“We are implementing a forward-looking approach to digital identity that gives individuals control over their own personal information, while still building off existing systems and programs,” says Anir Chowdhury, a policy advisor at a2i, the Bangladesh government’s “Access to Information Program.”“The government of Bangladesh recognizes that the design of digital identity systems carries far-reaching implications for individuals’ access to services and livelihoods, and we are eager to pioneer this approach,” he adds.Look at what is on the wall at this high-level meeting of ID2020 employees. Anyone care to guess what you’re looking at? 🤔While the ID2020 program’s testing grounds are primarily in the Third World, the group says it’s also now working with governments here in the United States to start microchipping people through vaccination.In Austin, Texas, for example, the homeless population is now being exploited as a collective guinea pig for ID2020’s microchip vaccination program, which the group claims will help to “empower” homeless people by supposedly giving them “control” over their personal identity data.“The City of Austin, ID2020, and several other partners are working together with homeless people and the service providers who engage with them to develop a blockchain-enabled digital identity platform called MyPass to empower homeless people with their own identity data,” writes Chris Burt for BiometricUpdate.com.MEET THE END TIMES PLAYERS BEHIND ID2020 ALLIANCE, ALL THE USUAL SUSPECTS AND A FEW NEW ONESID2020 is also jabbing refugees with its microchip vaccinations through two inaugural pilot programs known as iRespond and Everest. According to reports, iRespond has “improved continuity of care” for more than 3,000 refugees receiving drug treatments for chronic illness. Everest, on the other hand, has “assisted with the provision of access to critical energy subsidies and a range of additional services with secure and user-centric digital identities without relying on a smartphone,” Burt writes.All of this is priming the public for an eventual mandate of microchip vaccinations, which will be required for every individual in order to buy and sell goods. Chowdhury openly admitted this in stating that digital identity systems will be necessary for “individuals’ access to services and livelihoods.”In other words, the Bible is right: A global identification system is in the works that will eventually be required for people to function in society, and ultimately survive. Without these microchips in their bodies, people won’t be able to work, let alone eat, and it’s all happening right before our very eyes.Keep in mind that ID2020 is a part of the so-called “REAL ID,” which will soon be required for those who wish to travel. REAL ID will also be used as a backdoor method of implementing mandatory vaccination policies for adults. READ MOREOur Manifesto | ID2020We believe the ability to prove one’s identity is a fundamental and universal human right. ID2020 Alliance partners jointly define functional requirements, influencing the course of technical innovation and providing a route to technical interoperability, and therefore trust and recognition. ID2020 Summit 2018: Part 1The ID2020 Alliance is a public-private partnership committed to improving lives through user-centric, portable, privacy-protecting digital identity. This year’s Summit, convened by ID2020 Alliance, brought together leaders and innovators in the field to discuss the technical and non-technical requirements to yield a collective roadmap that moves us towards broad adoption of “good” digital identity for all. Carl Sanders Helped Design The first Implantable MicrochipCarl Sanders was an engineer on the world’s first implantable microchip, and in the process of working on this incredible end times device, Carl got saved and spent the rest of his life warning people about what was coming. What you will hear in this video clip is taken from a cassette tape that was sent around churches back in the 1990’s, I had one of those copies. When the Lord had me start NTEB, Bro. Carl and I became friends and he was a guest on our program many times. This is the audio from that cassette tape. I had the privilege of interviewing Bro. Carl back in 2013, and you can listen to that interview here.Now The End Begins is your front line defense against the rising tide of darkness in the last days before the Rapture of the ChurchHOW TO DONATE:Click here to view our GoFundMe pageWhen you contribute to this fundraising effort, you are helping us to do what the Lord called us to do. The money you send in goes primarily to the overall daily operations of this site. When people ask for Bibles, we send them out at no charge. When people write in and say how much they would like gospel tracts but cannot afford them, we send them a box at no cost to them for either the tracts or the shipping, no matter where they are in the world. Even all the way to South Africa. We even restarted our weekly radio Bible study on Sunday nights again, thanks to your generous donations. All this is possible because YOU pray for us, YOU support us, and YOU give so we can continue growing.CLICK IMAGE TO ORDER YOUR BOX OF NTEB GOSPEL TRACTSBut whatever you do, don’t do nothing. Time is short and we need your help right now. If every one of the 13,131 people on our daily mailing list gave $4.50, we would reach our goal immediately. If every one of our 151,781 followers on Facebook gave $1.00 each, we would reach 300% of our goal. The same goes for our 14,500 followers on Twitter. But sadly, many will not give, so we need the ones who can and who will give to be generous. As generous as possible.“Looking for that blessed hope, and the glorious appearing of the great God and our Saviour Jesus Christ;” Titus 2:13 (KJV)“Thank you very much!” – Geoffrey, editor-in-chief, NTEBHOW TO DONATE: Click here to view our GoFundMe page"],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","'ID2020 Alliance' Will Combine Vaccinations & Implantable ID Microchips | PSI Intl"],["url","https://principia-scientific.org/id2020-alliance-will-combine-vaccinations-implantable-id-microchips/"],["summary","Big Pharma is officially partnering with the tech industry to pair “immunization” with digital biometrics, meaning humans will soon be microchipped, tracked, and ultimately controlled through a global identification matrix.For years we’ve been watching as Microsoft founder Bill Gates, now retired from the company he founded, use his billions to give ‘free vaccinations‘ to people in third world countries. Now Bill has become a founding partner in another company, this one is called the ID2020 Alliance, and its goal is to give every human being on Earth a digital id. How do they plan on accomplishing this feat? By combining mandatory vaccinations with implantable microchips. Genius, isn’t it? And coming soon to a theater near you, as the saying goes.So now you know what Bill Gates and his wife Melinda were really doing over the past 10 years, travelling to third word countries and giving ‘free vaccinations’ to the poor, downtrodden natives. Those ‘free vaccinations‘ was research and a live testing lab to conduct the necessary experiments required to form ID2020.And as you will see today, this unholy hybrid of vaccinations and implantable microchips is already happening in Bangladesh, soon it will be Boston. A page on the Gates Foundation website says that Bill and Melinda have so far invested over $2.5 billion dollars to this project, with no end in sight.Can the man who put the world behind a personal computer now put a vaccination microchip digital ID into the global population? Bill Gates is absolutely positive he can, and indeed is well on his way to achieving that goal.“Let no man deceive you by any means: for that day shall not come, except there come a falling away first, and that man of sin be revealed, the son of perdition; Who opposeth and exalteth himself above all that is called God, or that is worshipped; so that he as God sitteth in the temple of God, shewing himself that he is God.” 2 Thessalonians 2:3,4 (KJV)We have been warning you about this for the past 10 years, and now it is happening. Are you ready for what comes next? I hope you are. Keep looking for that Blessed Hope, and thank God it comes before the time of Jacob’s trouble. If only my friend, Carl Sanders, the man who first revealed the inner-workings of the team that created the RFID microchip, had lived long enough to see this day.Vaccines now being used to harvest biometric identities of everyone; Big Brother merges with Big PharmaFROM NATURAL NEWS: The ID2020 Alliance, as it’s being called, is a digital identity program that aims to “leverage immunization” as a means of inserting tiny microchips into people’s bodies. In collaboration with the Global Alliance for Vaccines and Immunizations, also known as GAVI, the government of Bangladesh and various other “partners in government, academia, and humanitarian relief,” the ID2020 Alliance hopes to usher in this mark of the beast as a way to keep tabs on every human being living on Earth.Similar to how cattle are marked with ear tags, this globalist alliance wants all humans to be “vaccinated” with digital tracking chips that will create a seamless monitoring system for the New World Order to manage the populations of the world with ease.“WE ARE IMPLEMENTING A FORWARD-LOOKING APPROACH TO DIGITAL IDENTITY THAT GIVES INDIVIDUALS CONTROL OVER THEIR OWN PERSONAL INFORMATION, WHILE STILL BUILDING OFF EXISTING SYSTEMS AND PROGRAMS,” SAYS ANIR CHOWDHURY, A POLICY ADVISOR AT A2I, THE BANGLADESH GOVERNMENT’S “ACCESS TO INFORMATION PROGRAM.”“The government of Bangladesh recognizes that the design of digital identity systems carries far-reaching implications for individuals’ access to services and livelihoods, and we are eager to pioneer this approach,” he adds.Look at what is on the wall at this high-level meeting of ID2020 employees. Anyone care to guess what you’re looking at? While the ID2020 program’s testing grounds are primarily in the Third World, the group says it’s also now working with governments here in the United States to start microchipping people through vaccination.IN AUSTIN, TEXAS, FOR EXAMPLE, THE HOMELESS POPULATION IS NOW BEING EXPLOITED AS A COLLECTIVE GUINEA PIG FOR ID2020’S MICROCHIP VACCINATION PROGRAM, WHICH THE GROUP CLAIMS WILL HELP TO “EMPOWER” HOMELESS PEOPLE BY SUPPOSEDLY GIVING THEM “CONTROL” OVER THEIR PERSONAL IDENTITY DATA.“The City of Austin, ID2020, and several other partners are working together with homeless people and the service providers who engage with them to develop a blockchain-enabled digital identity platform called MyPass to empower homeless people with their own identity data,” writes Chris Burt for BiometricUpdate.com.MEET THE END TIMES PLAYERS BEHIND ID2020 ALLIANCE, ALL THE USUAL SUSPECTS AND A FEW NEW ONESID2020 is also jabbing refugees with its microchip vaccinations through two inaugural pilot programs known as iRespond and Everest. According to reports, iRespond has “improved continuity of care” for more than 3,000 refugees receiving drug treatments for chronic illness. Everest, on the other hand, has “assisted with the provision of access to critical energy subsidies and a range of additional services with secure and user-centric digital identities without relying on a smartphone,” Burt writes.All of this is priming the public for an eventual mandate of microchip vaccinations, which will be required for every individual in order to buy and sell goods. Chowdhury openly admitted this in stating that digital identity systems will be necessary for “individuals’ access to services and livelihoods.”In other words, the Bible is right: A global identification system is in the works that will eventually be required for people to function in society, and ultimately survive. Without these microchips in their bodies, people won’t be able to work, let alone eat, and it’s all happening right before our very eyes.Keep in mind that ID2020 is a part of the so-called “REAL ID,” which will soon be required for those who wish to travel. REAL ID will also be used as a backdoor method of implementing mandatory vaccination policies for adults. READ MOREOur Manifesto | ID2020We believe the ability to prove one’s identity is a fundamental and universal human right. ID2020 Alliance partners jointly define functional requirements, influencing the course of technical innovation and providing a route to technical interoperability, and therefore trust and recognition.ID2020 Summit 2018: Part 1The ID2020 Alliance is a public-private partnership committed to improving lives through user-centric, portable, privacy-protecting digital identity. This year’s Summit, convened by ID2020 Alliance, brought together leaders and innovators in the field to discuss the technical and non-technical requirements to yield a collective roadmap that moves us towards broad adoption of “good” digital identity for all.Carl Sanders Helped Design The first Implantable MicrochipCarl Sanders was an engineer on the world’s first implantable microchip, and in the process of working on this incredible end times device, Carl got saved and spent the rest of his life warning people about what was coming. What you will hear in this video clip is taken from a cassette tape that was sent around churches back in the 1990’s, I had one of those copies. When the Lord had me start NTEB, Bro. Carl and I became friends and he was a guest on our program many times. This is the audio from that cassette tape. I had the privilege of interviewing Bro. Carl back in 2013, and you can listen to that interview here.****PRINCIPIA SCIENTIFIC INTERNATIONAL, legally registered in the UK as a company incorporated for charitable purposes. Head Office: 27 Old Gloucester Street, London WC1N 3AX. Please DONATE TODAY To Help Our Non-Profit Mission To Defend The Scientific Method."],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","Drug companies race to test coronavirus vaccines"],["url","https://www.cnn.com/2020/02/27/investing/coronavirus-vaccine/index.html"],["summary","New York (CNN Business)Gilead Sciences stock was up slightly on Thursday, even as the Dow plunged into correction status. The reason? The biotech company is moving closer to finding a potential treatment for the deadly coronavirus. It plans to start administering its remdesivir drug to patients next month. Shares of Gilead Sciences (GILD) have risen more than 10% in the past five days as the race to find an effective treatment for the outbreak continues. It's not alone. The stocks of two smaller biotechs working on coronavirus vaccines -- Moderna (MRNA) and Novavax (NVAX) -- have both soared in the past few days on hopes that their treatments may show some success as well.Gilead said in a statement late Wednesday that it will be administering its remdesivir drug to \"approximately 1,000 patients at medical centers primarily across Asian countries, as well as other countries globally with high numbers of diagnosed cases, beginning in March.\"The World Health Organization has said that remdesivir may have the best chance of effectively treating the Wuhan coronavirus.Gilead said in its statement that it will conduct two randomized studies to evaluate the effectiveness of different dosing durations of remdesivir.One will be for about 400 patients with severe clinical manifestations of coronavirus. The other will be for about 600 patients with more moderate symptoms. Patients in both groups will receive the drug for either five or 10 days."],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","US health officials say human trials on coronavirus vaccine to start in 6 weeks"],["url","https://www.cnbc.com/amp/2020/02/25/us-health-officials-say-human-trials-on-coronavirus-vaccine-to-start-in-6-weeks.html"],["summary","Human trials testing a potential vaccine for the COVID-19 coronavirus are expected to begin in six weeks, U.S. health officials announced Tuesday.\"We are on time at least and maybe even a little bit better,\" Dr. Anthony Fauci, director of the National Institute of Allergy and Infectious Diseases, told reporters.Passengers arrive at LAX from Shanghai, China, after a positive case of the coronavirus was announced in the Orange County suburb of Los Angeles, California, January 26, 2020.Ringo Chiu | ReutersHuman trials testing a potential vaccine for the COVID-19 coronavirus are expected to begin in six weeks, U.S. health officials announced Tuesday.\"We are on time at least and maybe even a little bit better,\" Dr. Anthony Fauci, director of the National Institute of Allergy and Infectious Diseases, an agency within the Department of Health and Human Services, told reporters at a press conference. \"Hopefully, no further glitches.\"The White House reportedly asked Congress on Monday for $1.25 billion in additional funding to bolster its coronavirus response, including money to develop a vaccine and therapeutics to treat the virus. The National Institutes of Health has been working with biotech company Moderna to develop a vaccine using the current strain of the coronavirus.Hopes to get a vaccine to market are high, but doctors want expectations to be low for how quickly it can happen. Developing, testing and reviewing any potential vaccine is a long, complex and expensive endeavor that could take months or even years, global health experts say. Before researchers can begin human trials, they must have a firm understanding of the pathogen, run safety tests and find enough human volunteers.U.S. health officials are fast-tracking work on a coronavirus vaccine.Fauci said Tuesday that the potential vaccine has so far been put into mice and is \"immunogenic,\" or triggers a response in the immune system, suggesting it could fight the virus.\"The gene has been expressed in the platform, in this case, a messenger RNA. The material has been produced, it's been put into mice. It's immunogenic,\" he said. \"It's now getting ready to go through the regulatory issues of getting it to go.\"Fauci said a vaccine may not solve \"problems in the next couple of months but it certainly would be an important tool that we would have.\" He said it's possible the virus will prove to be seasonal, thus likely to subside in the warmer months like the flu.There are currently no proven therapies for the latest outbreak, which has killed at least 2,704 and sickened more than 80,200 people worldwide since emerging from the Chinese city of Wuhan about two months ago.Local authorities in China have using Gilead Sciences' antiviral drug Remdesivir, which was tested as a possible treatment during the Ebola outbreak, U.S. health officials said last month. Some authorities are also using antiviral drug Kaletra, developed by drugmaker AbbVie, on a \"compassionate basis.\"Earlier in the day, the Centers for Disease Control and Prevention outlined what schools and businesses will likely need to do if the COVID-19 virus becomes an epidemic outbreak in the U.S.\"We are asking the American public to work with us to prepare for the expectation that this could be bad,\" Dr. Nancy Messonnier, director of the CDC's National Center for Immunization and Respiratory Diseases, told reporters on a conference call.The CDC late Monday confirmed 53 cases in the U.S., a majority of which came from passengers repatriated from the Diamond Princess cruise ship that was quarantined off the coast of Japan. The data shows that 36 of the cases are attributed to the cruise ship, three patients were infected in Wuhan and later evacuated to the U.S., and the rest were largely infected while traveling overseas.Just two cases were contracted through person-to-person contact in the U.S., the CDC said.Later Tuesday, U.S. health officials said the outbreak will likely become a global pandemic. They also confirmed four new cases from the cruise ship.\"Current global circumstances suggest it's likely this virus will cause a pandemic,\" Anne Schuchat, principal deputy director of the Centers for Disease Control and Prevention told reporters at a news briefing.\"It's not so much a question of if this will happen any more, but rather more a question of when this will happen and how many people in this country will become infected and how many of those will develop severe or more complicated disease,\" she added.CNBC's Noah Higgins-Dunn contributed to this report."],["topImageUrl",null],["error",null]]}]}],["text","轉～值得參考儆醒防範\n——-\nCOVID 19 VACCINE WARNING! MARK OF THE BEAST! MANDATED VACCINE+CHIP\n疫苗警告！兽印！强制性疫苗+芯片\nhttps://www.youtube.com/watch?v=IMc74QpJf04\nWatchwoman 2020年2月27日\n今天是2020年2月27日。一礼拜之前主赐给我一个很长的梦。我今天在这个视频中，只将重要的一部分发布出来。通过这个梦，我要警告大家，务必抵挡政府要你注射的疫苗，因为那里面结合着一个植入芯片，而且这个疫苗将会在你的手上注射！这个芯片就是那“兽印”！\n还有，我们看到有一种防流感的疫苗，也要出来，那是一种严重的流感病毒。\n在梦里，有一个邪恶的女人，我已经是个成年人，能够允许她去对我做她要做的事情。她站在我前面，手里拿着一只注射针头，注射管是紫色薰衣草的颜色，里面有液体。她看着我说：“这是为了医治你的焦虑症。”我刚一同意，她立即就给我注射了。然后我感觉自己失去了知觉，无法控制我的身体了。当时我好像半睡半醒的状态，我向下看我的手，上面有两只创可贴，而不是一只创可贴。她说只给我注射一针，为何有两只创可贴呢？\n那个梦还在继续，我看到的下一件事就是，我的名字从生命册上被耶稣的眼泪涂抹了。祂的眼泪流到我的名字上，无论我多么努力，我再也无法将我的名字写回去了。\n当我醒来以后，就赶紧把这个梦的内容，详细记录下来。我明白了，这是神在提醒我，即将有一种疫苗，与兽印结合在一起，注射进入我们的人体里，而且还要给全世界的人注射。我认为，他们会知道他们自己正在接受一个芯片在手上，但是, 却以某种方式与疫苗相捆绑。有可能是在同一次注射当中植入的，也可能说是为了预防冠状病毒，或者说是预防即将到来的其它的坏病毒。你必须同意和允许他们在你手上植入这个兽印芯片。\n当我进行研究的时候，我发现了一些信息。我将链接放在本视频的下方的“Description Box”里面。\n有一种东西，叫做“ID 2020”。那是有世界上最富有的人们所计划运行的，包括比尔·盖茨基金会，以及其他世界上最有的钱人。他们企图要让人们接受一种联合疫苗和追踪芯片，称之为“ID 2020”。他们正在世界上的贫穷地区，开始试验这个东西。\n就在2月25日，两天前，CDC宣布，他们要开始在美国进行疫苗注射试验，在那些已经患上冠状病毒的人们身上进行。他们表示很高兴地宣布，他们已经有一种疫苗了，他们认为这看起来很好，但我觉得这很奇怪，怎么会这么快，似乎已经早有预备呢？好像他们早就准备要给人们注射这种疫苗了？\n如果你感染了冠状病毒，也不要参加任何一种像这样的试验，因为我很清楚，这种疫苗，是以某种方式，与兽印芯片相结合。他们企图植入你的右手上面，或是你的额头上面。\n我这是一个严重的警告，接受了他们的兽印的人，再也无法进入天国了！因为在圣经《启示录》13:16中说过：“牠又叫众人，无论大小贫富、自主的、为奴的，都在右手里，或是在额里，受一个印记。”14:9“若有人敬拜兽和兽像，在额里，或手里，受了牠的印记（接受了兽印），这人必喝神大怒的酒；此酒斟在神忿怒的杯中纯一不杂。他要在圣天使和羔羊面前，在火与硫磺之中受痛苦。他们受痛苦的烟往上冒，直到永永远远。有谁敬拜兽和兽像，受牠名之印记的，昼夜不得安宁。”\n耶稣很快就要回来了。我向那些没有跟随神的人们发出警告。你们很可能要面对这件事情。那些已经感染了冠状病毒的人们，生病的人们，考虑要接受疫苗试验的人们，要坚定持守你对耶稣基督的信仰，相信圣经，拒绝疫苗和兽印。这是从耶稣而来的强烈警告！而且我已经得到了多个印证，我非常清楚，他们要对我们做什么！\n请将此警告，尽可能多地传播出去！愿神祝福你！\n——-\n在此影片下方有說明\n內容如下：\n（可自行用網路翻譯下文）\n\nID2020\nhttps://id2020.org/alliance\n\nhttps://www.nowtheendbegins.com/big-pharma-microsoft-silicon-valley-id2020-alliance-combine-vaccinations-with-implantable-microchip-digital-id-mark-beast-end-times/\n\nVACCINE plus MICROCHIP\nhttps://principia-scientific.org/id2020-alliance-will-combine-vaccinations-implantable-id-microchips/\n\nUS COMPANIES RACE TO TEST CORONA VIRUS VACCINE\nhttps://www.cnn.com/2020/02/27/investing/coronavirus-vaccine/index.html\n\nUS VACCINE TRIALS\nhttps://www.cnbc.com/amp/2020/02/25/us-health-officials-say-human-trials-on-coronavirus-vaccine-to-start-in-6-weeks.html\n"],["id","2ova5eb307l8a"],["createdAt","2020-02-29T17:32:42.298Z"]]}],["reply",{"__iterable":"Map","data":[["id","fmI82G8Bd3n3h-WY3-mA"],["user",{"__iterable":"Map","data":[["id","AVqVwjqQyrDaTqlmmp_a"],["name","MrOrz"],["avatarUrl","https://avatars2.githubusercontent.com/u/108608?s=100"],["level",18]]}],["type","OPINIONATED"],["text","這是反疫苗的陰謀論。\n\n古彥男醫師以古今中外案例表示，當疫苗接種率過低，會造成 (1) 傳染病爆發、 (2) 疫苗預算下修而導致藥廠不賣、疫苗短缺、(3) 增加病毒變異機會、(4) 醫療需求壓垮醫療系統。因此，不接種疫苗不只是影響個人，其後果是全國人民共同承擔。\n\n聯合國也譴責這些反疫苗接種的訊息，已經造成了海島國家麻疹的惡化；聯合國兒童基金會表示，這類在推特、臉書、Instagram 等網路平台上的反疫苗言論「極不負責任」。"],["reference","2016/10/25 如果大家都不打疫苗－流感疫情揭露的醜陋真相\nhttp://yennanku.blogspot.com/2016/10/blog-post.html\n\n2019/12/6 聯合國：反疫苗運動助長薩摩亞麻疹疫情惡化\nhttps://www.cna.com.tw/news/aopl/201912060005.aspx"],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","如果大家都不打疫苗－流感疫情揭露的醜陋真相 | 古彥男醫師｜兒科醫師的分享室"],["url","http://yennanku.blogspot.com/2016/10/blog-post.html"],["summary","作者：古彥男醫師\n\n病毒的全境擴散\n\n2011 年上映的電影『全境擴散』，是身為醫護人員的我看過最寫實也最貼近我們生活的傳染病電影。片中有包括麥特戴蒙、葛妮絲派特蘿、凱特溫絲蕾，以及裘德洛等好萊塢巨星，但電影本身想表達給觀眾的內容，並沒有因為演員的星光熠熠而顯得黯淡（不過評價兩極，很多人覺得劇情過於沉悶而看到睡著）。\n\n故事描述著一種病毒，在蝙蝠跟豬之間交互傳染後產生了變異，對人的傳染力大增，迅速造成了全球的大流行以及節節高升的死亡人數。電影中對於政府官員、醫護人員、平民百姓，以及先進與落後國家的社會，面對來勢洶洶的疫情的各種反應，有深刻的刻劃。\n\n\n其實這部電影主要是根據 2003 年令全球陷入恐慌的 SARS 疫情改編而成，電影中病毒的變異模式與散播途徑，也跟我們熟悉的流感病毒十分相像......\n接種率最低的公費疫苗\n\n\n\n對台灣的民眾來說，我們擁有方便就醫的醫療環境，醫療費用也非常便宜，近幾年來一些原本很昂貴的自費疫苗，也慢慢被列入公費施打的計畫之中（如肺炎鏈球菌疫苗）。然而在眾多高接種率的公費疫苗中，流感疫苗的接種率可說是一枝獨秀的低。\n\n由於流感病毒變異的速度快，每年流行的病毒株都不一樣，世界衛生組織只能預測每一年度可能流行的病毒株，以此製作成疫苗。這樣會產生兩個讓大家不想接種疫苗的原因：一是每年都必須接種，無法注射一兩劑後就有長久的保護力；二是萬一預測錯誤，挨了針最後還是得了流感，許多人在情感上無法接受。\n\n再加上媒體對流感疫苗不良反應個案的重點報導，以及對 2009 年 H1N1 流感疫苗安全性的質疑，導致台灣近幾年的接種率幾乎都是在谷底徘徊。\n\n\n\n\n\n\n根據民國 104 年疾病管制署的統計資料，符合公費疫苗接種的對象，其接種率不到五成，如果放大到全國人口來看，接種率甚至連兩成都不到。當大家因為擔心疫苗的不良反應選擇不接種，且因為短期內沒有重大疫情發生而漸漸忘記傳染病的恐怖時，就在同一年，流感病毒給台灣的民眾與醫療系統帶來了沉重的負擔......\n不接種疫苗的結果－全國人民共同承擔\n\n\n\n\n\n我們可以看到，從 2011 年之後，流感病毒在台灣並沒有造成太重大的疫情。然而這不代表危機不在我們身邊－就在 2015 年 (民國 104 年)，流感病毒讓我們體驗到，傳染病的傳播與爆發，可以在短短的幾個月內，造成重症病例數破千，死亡人數破百！而且根據統計，95% 以上流感重症患者未接種疫苗！\n\n你覺得這只是單一年度或單一疾病的狀況，不代表每一年的疫情或其他傳染病？你覺得等到疫情要升溫了再接種也不遲？還是你覺得自己身強體壯，不怕傳染病侵襲，就算染病了在台灣這種便宜又方便的醫療環境也不怕沒得醫？\n\n讓我來告訴你甚麼是『醜陋的真相』。\n\n真相一：疫苗接種率過低，造成傳染病爆發，中外皆然。\n\n除了上述台灣的流感疫情，歐美國家早發生過更為知名的狀況。 1998 年一位英國醫師發表了一篇論文，內容指出接種三合一疫苗（麻疹、腮腺炎、德國麻疹）會造成小孩自閉症的發生率上升，雖然該論文最後被證實是假造的無稽之談，但仍造成歐美國家興起一股反疫苗運動，三合一疫苗的接種率更是逐年下降。\n\n疫苗接種率過低的結果永遠只有一個：傳染病的爆發。英國從 2000 年開始感染麻疹的人數逐漸上升，到現在仍是麻疹流行地區；美國曾經在 2000 年宣布麻疹病毒已在其境內絕跡，結果在 2014~2015 年加州爆發大流行。\n\n那你說台灣安全嗎？如果你的小孩有接種疫苗，那大可放心，但如果沒有怎麼辦？那就不要出國、不要去機場、不要坐高鐵、不要坐捷運、不要......\n\n\n真相二：你不打疫苗，政府下修預算，藥廠寧願不賣。\n\n由於疫苗這種生物製劑，在運輸及保存上的要求相當高，也有一定的保存期限，此外如流感疫苗，其內含的病毒株每年不一樣，今年的疫苗無法留到隔年再使用。當政府買得太多會增加運輸及保存的成本，用不完而過期的疫苗更是浪費已經捉襟見肘的疫苗預算。\n\n因此衛服部疾管署會根據各種公費疫苗施打的比率，以及未來需要接種的人口數，來編列預算。當施打人數下降時，預算金額就可能會下修，如果剛好遇到購買數量下降而需求又突然暴增，就會發生有人打不到疫苗的狀況（2015 年流感疫情爆發後，一直到隔年三月都還有家屬帶小孩來打早就用完的疫苗）。\n\n再來是台灣的市場跟歐美等大國比已經很小了，如果政府購買的數量一直在減少，我們又拿不出有力的購買價格跟別人競爭，最後就是落得疫苗搶輸人家，以及民眾有錢也打不到疫苗的後果。真相三：疫情升溫，病毒快速變異，補打疫苗也沒效。\n\n流感疫苗之所以每年都要接種才有效，就是因為流感病毒非常容易產生變異，讓我們的免疫系統無法在感染過後，或是接種一次疫苗後就能提供終身的保護力。\n\n病毒的變異從哪裡來？一個方式是當病毒在宿主體內大量複製時，本身的基因發生突變，另一個則是當同一個宿主（可以是人、豬、或是禽鳥類），體內有兩種以上的流感病毒時，不同的病毒間會互換基因，重組出一個新的病毒（如 2009 年的 H1N1）。這樣的變異都可以使我們的免疫系統與疫苗失效，造成大流行。\n\n因此當疫情升溫了，代表病毒在大量的傳播與複製，大大的增加了變異的機會，一旦產生變異，就算補打了本來有效的疫苗，也擋不住已經變身的病毒。所以先接種疫苗預防感染，不給病毒有大流行且變異的機會，才是最好的防治策略。真相四：醫療系統早已負擔沉重，疫情爆發醫院一床難求。\n\n當很多人因為健保的福利，以為醫療本來就是這麼便宜與便利時，台灣的醫療系統早就因為政策問題以及民眾的就醫習慣而負擔沉重，一旦因天災人禍或是傳染病流行，在短時間內造成大量的醫療需求，往往成為壓倒駱駝的最後一根稻草。\n\n從過去的八仙塵爆，以及流感疫情的爆發，各大醫學中心急診及加護病房都被塞爆，有的醫院兩度關閉急診，有的醫學中心重症病人多到連救命的葉克膜都不夠用，急診等住院病床的人數節節高升，醫護人員跟病人都叫苦連天。\n\n然而政府相關單位不僅連政策的調整不夠迅速，連對疫情的嚴重度還有醫療資源的分配都掌握不住，你還認為台灣的醫療在你生病的時候真能萬無一失？\n疫苗並不完美，但仍是預防疾病的有效方法\n\n我們知道有打疫苗不是每個人都會產生可以對抗疾病的抗體，我們也知道沒有疫苗可以百分之百不會有不良反應，然而疫苗從問世以來，也被證實是可以有效預防疾病，挽救許多生命的重要方法。當不良反應造成的損失大於預防疾病的利益時，這種疫苗就會被停止施打或是根本不會上市。\n\n在我們的社會中有許多人可能因為年紀太小、對疫苗有過敏反應、或是有其他禁忌症無法藉由接種疫苗獲得對疾病的保護力，他們也常常是傳染病造成重症的高風險群。如果我們接種疫苗的比率夠高，不僅獲得保護自己的抗體，同時也因為疾病不容易傳播而可以間接保護到這些容易被感染的族群。\n\n今年的公費流感疫苗已經開始施打，請問『你』會怎麼選擇呢？"],["topImageUrl","https://3.bp.blogspot.com/-DYZ77tZgdWE/WAJSVTbVolI/AAAAAAAABnY/Q5S7SQ1Dz_Ahnkupi8xzzdP1bFvqbPuJQCLcB/w1200-h630-p-k-no-nu/vaccinedeniedtitlepicture.jpg"],["error",null]]},{"__iterable":"Map","data":[["title","聯合國：反疫苗運動助長薩摩亞麻疹疫情惡化 | 國際 | 中央社 CNA"],["url","https://www.cna.com.tw/news/aopl/201912060005.aspx"],["summary","（中央社威靈頓5日綜合外電報導）聯合國兒童基金會（UNICEF）太平洋島嶼負責人今天表示，社群媒體巨頭必須嚴厲取締反疫苗接種貼文，這些貼文助長薩摩亞（Samoa）致命麻疹疫情惡化。UNICEF地區代表耶特（Sheldon Yett）表示，推特（Twitter）、臉書（Facebook）和Instagram（IG）等網路平台上「極不負責任」的反疫苗接種訊息，加劇了薩摩亞爆發的麻疹疫情，自10月中旬以來已造成62人死亡。耶特告訴法新社：「很明顯地它們必需負起企業責任並展開行動，確保那些人民，特別是弱勢族群能獲得正確資訊，讓孩童得以存活。」在麻疹疫情爆發前，薩摩亞的疫苗接種率降至只剩略超過30%，遠低於公認最佳接種率90%，這也使得該海島國家極易受到感染。世界衛生組織（WHO）把矛頭指向反疫苗宣傳運動。耶特表示，這項運動主要是由海外倡議人士在網路上展開。「很不幸的是，這項運動在薩摩亞找到願意相信的民眾，那裡有一部分人懷疑醫療保健服務品質，且可能不信任當地（疫苗）供應者。」他說，來自諸如美國和澳洲等富裕已開發國家的運動人士，在網路上張貼反疫苗訊息，他們必須意識到自己的所作所為會對開發中國家帶來衝擊。他在薩摩亞首都阿庇亞（Apia）表示：「這對薩摩亞孩童來說可能形同死刑，因為當地除了低疫苗接種率，可能還面臨其他健康問題。」（實習編譯：趙珮宇/核稿：劉學源）1081205"],["topImageUrl","https://imgcdn.cna.com.tw/www/website/img/pic_fb.jpg"],["error",null]]}]}],["createdAt","2020-03-01T09:07:27.741Z"]]}]]},{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",1],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",1],["user",{"__iterable":"Map","data":[["id","j4S8C_GMLPzGmTJ9e0AN3Hx5O5zdgJJAUXHno2UdfzS2TfVQU"],["name","興奮的新屋耶呼弟"],["avatarUrl",null],["level",0]]}],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","List of Firmware & Driver Updates for KRACK WPA2 Vulnerability"],["url","https://goo.gl/KfNKCk"],["summary","As many people have read or will soon read, there is a vulnerability in the WPA2 wireless protocol called Krack that could allow attackers to eavesdrop on wireless connections and inject data into the wireless stream in order to install malware or modify web pages.\nTo protect yourself, many WiFi product vendors will be releasing updated firmware and drivers for their products. It is strongly suggested that users update their hardware as soon as a update is available in order to protect themselves. This includes router firmware and wireless network card drivers.\nTo help with this, I have created a list of known information regarding various WiFi vendors and whether new drivers are available. As this vulnerability is fairly new, there is little information available, I advise you to check this page throughout the coming days to see if new information is available. This page includes information resulting from contacting of vendors, CERT's informative page, and other sources.\nLast Updated: 10/20/17 14:35 EST\nCompanies with available information:\nADTRAN\nADTRAN posted in their forums that they are performing an investigation and will send out a security notice to all signed up users with details. A security advisory was sent out on 10/18/17 to customers that basically reiterates the same information.\nAerohive Networks\nAerohive has released an advisory explaining under what circumstances their products are vulnerable to KRACK. They also included information on what HiveOS upgrades mitigate this attack,\nArch Linux\nArch has pushed out updates for wpa_supplicant and hostapd. Patches can be found here and here.\nAmazon\nAn Amazon Spokesperson responded to our inquiry with \"We are in the process of reviewing which of our devices may contain this vulnerability and will be issuing patches where needed.\".\nApple\nToday, October 31st, Apple has released updates for all of their core operating systems that included fixes for the KRACK vulns.\nAruba Networks\nPatch information can be found here & here. A FAQ was posted as well.\nArris\nAn Arris spokesperson told BleepingComputer:\n\nARRIS is committed to the security of our devices and safeguarding the millions of subscribers who use them. The KRACK flaw affects the WPA2 protocol itself and is not specific to any device or manufacturer. There is no current evidence of malicious exploits. \nARRIS is evaluating our full Wi-Fi portfolio and will release any required firmware updates as quickly as possible. \n\nAsus\nAsus has released information (see bottom of the page) and working with chipset suppliers to patch the vulns and will release an update as soon as its ready.\nAVM\nAVM has a advisory posted regarding the KRACK vuln. According to AVM \"FRITZ!Boxes on broadband connections are currently not affected by the wireless security breach known as \"Krack\", as such access points do not use the affected 802.11r standard.\". They also do not seem to be happy regarding the way the disclosure was handled.\nBarracuda Networks\nBarracuda posted an advisory that lists affected products and contains links on hotfixes to resolve the KRACK vulns.\nBelkin, Linksys, and Wemo\n\nBleepingComputer received a response from Belkin that states:\n\"Belkin Linksys, and Wemo are aware of the WPA vulnerability. Our security teams are verifying details and we will advise accordingly. Also know that we are committed to putting the customer first and are planning to post instructions on our security advisory page on what customers can do to update their products, if and when required.”\nCisco\n\nCisco has released an advisory that discusses the vulnerability in relation to their product and a list of products that are vulnerable. Cisco has stated that IOS and driver updates are being developed and will be released. Cisco product users are advised to check the advisory often for future updates.\nDD-WRT\nA beta version of DD-WRT is on their FTP Site. At the time of this writing, the latest firmware is in a folder named 10-17-2017-r33525.\nDebian\nDebian posted an advisory to the Debian Security Announce mailing list with information on updates that resolve the Krack vulnerability.\nDell\nDell has posted an advisory that lists all products that are NOT affected by the KRACK vulns. More information about affected products will be added to the advisory soon.\nD-Link\nD-Link has posted an advisory stating that they are waiting for patches from the chipset manufacturers. They further accurately state that \"For consumers users, your priority should be updating devices such as laptops and smartphones.\".\nDrayTek\nDrayTek has posted an advisory detailing what products are affected by KRACK and stating that updates will be available next week.\nEdimax\nEdimax posted an advisory stating:\nThis vulnerability will require collaborative firmware patches from relevant manufacturers. Edimax is requesting assistance from them and is working diligently for the firmware fix. It will be published on Edimax website as soon as it becomes available.\neero\neero released an advisory that states that they have rolled out eeroOS version 3.5, which mitigates the KRACK vulns.\nEnGenius\nEnGenius has posted an advisory with some information about the attack. I was told by an EnGenius spokesperson that they are \"working on security patches and will release updates to its firmware by the end of October\".\nEspressif\nEspressif has released updates for ESP-IDF, ESP8266 RTOS SDK, & ESP8266 NONOS SDK on their Github page.\nExtreme Networks\nExtreme Networks released an advisory and stated hotfixes for the KRACK vulns will be released starting on October 20th.\nF5 Networks\nAccording to a released advisory, F5 Networks products are not affected by KRACK.\nFedora\nFedora has a Fedora 25 update available for testing. The Fedora 26 and Fedora 27 udpates are pending to be added to the Stable release.\nFreeBSD\nAccording to CERT, FreeBSD is aware of the vulnerability and users should either join their FreeBSD-Announce mailing list or monitor their Security Information page.\nFortinet\nAccording to this document, the FortiAP 5.6.1 release fixed the KRACK vulns.\nGoogle\nAndroid 6.0 and higher are currently vulnerable to this attack. When BleepingComputer contacted Google, their statement was \"We're aware of the issue, and we will be patching any affected devices in the coming weeks\". No information is available as of yet regarding Google WiFi.\nIntel\nIntel has released an advisory, which includes links to updated drivers.\nKisslink\nKisslink has told BleepingComputer that as their products are protected via their Promximity technology and thus are not using WPA2 or affected by its bugs.\nLede\nUpdated packages for hostapd-common - 2016-12-19-ad02e79d-5, wpad - 2016-12-19-ad02e79d-5, and wpad-mini - 2016-12-19-ad02e79d-5 are available on Ledge. You can check for update availability via the opkg list-upgradable command and upgrade using opkg update command.\nUpdate 10/18/17: LEDE released the 17.01.4 service release to resolve the KRACK bugs and other issues.\nLineageOS\nLineageOS has had patches merged to prevent the Krak vulns.\nLinux\nAccording to the vulnerability release, \"Our attack is especially catastrophic against version 2.4 and above of wpa_supplicant, a Wi-Fi client commonly used on Linux.\". Patches can be found here.\nMeraki\nUpdates have been released for Cisco Meraki that resolve the KRACK vuln. More info can be found in this advisory: 802.11r Vulnerability (CVE: 2017-13082) FAQ.\nMicrochip Technology\nMicrochip has posted an advisory with available updates.\nMicrosoft\nMicrosoft quietly fixed the KRACK vulns in the October 10th Patch Tuesday. \nMikroTik\nAccording to MikroTik: \"RouterOS v6.39.3, v6.40.4, v6.41rc are not affected! AP mode devices are not affected. All implemented fixes refer only to station and WDS modes.\". They further stated that firmware versions were released last week to fix this vulnerability.\nNetgear\nNetgear has released an advisory that contains a list of products affected by KRACK and associated updates. \nNest\nStated that patches will be rolled out next week. These will autoupdate and will not require user intervention.\n\nOpenBSD\nOpenBSD was provided a patch that was used to silently update and fix this vulnerability. More information can be read here and here.\nOpen-Mesh & CloudTrax\nAn advisory was posted for Open-Mesh & CloudTrax regarding the Krack vuln. An update is expected to be delivered to all of those that use automatic updates by the end over October 17th. More info at the advisory.\nPeplink\nPeplink has issued an advisory stating that users of the Wi-Fi as WAN functionality are vulnerable to this attack. To temporarily fix this issue, users can disable this feature and wait for an updated firmware to be released.\npfSense\npfSense, which is based off of FreeBSD, has opened an issue to import FreeBSD's fix. \nQualcomm\nA Qualcomm spokesperson has told BleepingComputer:\n\"Providing technologies that support robust security and privacy is a priority for Qualcomm Technologies, Inc. (QTI). We have been working with industry partners to identify and address all implementations of the open source security issue involving WPA packet number reuse within Qualcomm-powered products. Patches for these issues are available now on the Code Aurora Forum and through other distribution channels, with additional patches posted as soon as they are verified through our quality assurance process\"\nRed Hat\nRed Hat has generated an advisory regarding the vulnerability in wpa_supplicant. No further information available.\nRaspberry Pi\nAs this uses wpa_supplicant, you need to update to the latest packages. Use sudo apt update followed by sudo apt upgrade to install a patched wpa_supplicant.\nRuckus Wireless\nRuckus Wireless has posted a security advisory that states that disabling 802.11r will mitigate CVE-2017-13082. Security patches for affected devices will be released as soon as they become available.\nSierra Wireless\nSierra Wireless posted a technical bulletin on affected products and remediation plans. Link from CERT.\nSonicwall\nSonicwall has released an advisory that states that they are not vulnerable:\n\nSonicWall Capture Labs has evaluated these vulnerabilities and determined that our SonicPoint and SonicWave wireless access points, as well as our TZ and SOHO Wireless firewalls, are not vulnerable to the flaws in WPA2.\nSonicWall is working on a solution to provide an additional layer of protection for SonicWall customers that will block these man-in-the-middle attacks even from vulnerable unpatched clients. This will be delivered in a future SonicOS update. \n\nSophos\nSophos has released an advisory stating that the Sophos UTM Wireless, Sophos Firewall Wireless, Sophos Central Wireless, and Cyberoam Wireless products are affected by the Krack vulnerability. Updates for these products will be released soon.\nSynology\nSynology posted an advisory that indicates Synology DiskStation Manager (DSM) with attached WiFi dongle and Synology Router Manager (SRM) are vulnerable to Krack. According to Synology, updates for affected products will be released soon.\nTanaza\nTanaza has reached out to BleepingComputer to advise that their v2.15.2 firmware contains a patch for KRACK.\nToshiba\nAccording to CERT, Toshiba's SureMark 4610 Printer (Models 1NR, 2CR, 2NR) with Wireless Lan Adapter & Canvio AeroMobile Wireless SSD product are affected. Toshiba will be contacting owners and business partners directly in regards to the printer and a firmware update will be released for the wireless SSD card.\nTP-Link\nWhen I contacted TP-Link tech support, I was told \"Our seniors are keeping an eye on this issue. Currently we haven't received any feedback that TP-Link product is affected by that. We will offer an update on our official website once we have any new info.\"\nOn October 18, TP-Link issued the following statement with details on affected products.\nTurris Omnia\nTurris, which uses OpenWRT, posted in their forums that a patch was added to their repository that they are going to test and release a fix. Hopefully, this will lead to OpenWRT releasing an update soon as well.\nUbiquiti (UniFi, AmpliFi, airMax)\nUbiquiti have posted an advisory that provides details on what UniFi, AmpliFi, and airMax products are affected by the KRACK vulnerability. This advisory also provides links to the updates that resolve this attack.\nIt should be noted that the 802.11r (Fast Roaming) beta feature is still vulnerable and it is advised that it be disabled until a future update resolves the issue.\nUbuntu\nUbuntu has released an advisory with information on how to update wpa_supplicant and hostapd in order to resolve this vulnerability.\nWatchGuard\nWatchGuard has issued an advisory outlining when updates are going to be available for their various products and services.\nWiFi Alliance Announcement\nThe WiFi Alliance released an announcement regarding the KRACK vulns, what products are affected, and how to mitigate the issues. New version of Xirrus AOS will be released by October 30th 2017.\nXirrus/Riverbed\nXirrus/Riverbed have posted an advisory \nZyxel\nZyxel has created a page that details what products are affected. While they are working to fix the vulnerability, there are no updated drivers and firmware available.\nCompanies claimed to be not affected by Krack:\nArista Networks, Inc.\nLenovo\nVmware\nCompanies with no available information:\n3com Inc\nActiontec\nAlcatel-Lucent\nAsusTek Computer Inc.\nAtheros Communications, Inc.\nBroadcom\nCentOS\nEMC Corporation\nExtreme Networks\nF5 Networks, Inc.\nFoundry Brocade\nHewlett Packard Enterprise\nIBM, INC.\nKyocera Communications\nMarvell Semiconductor\nMediaTek"],["topImageUrl","https://www.bleepstatic.com/content/hl-images/2017/10/16/KRACK.png"],["error",null]]},{"__iterable":"Map","data":[["title","KRACK Attacks: Breaking WPA2"],["url","https://www.krackattacks.com/"],["summary","Introduction\n\t\tWe discovered serious weaknesses in WPA2, a protocol that secures all modern protected Wi-Fi networks.\n\t\tAn attacker within range of a victim can exploit these weaknesses using key reinstallation attacks (KRACKs).\n\t\tConcretely, attackers can use this novel attack technique to read information that was previously assumed to be safely encrypted.\t\n\t\tThis can be abused to steal sensitive information such as credit card numbers, passwords, chat messages, emails, photos, and so on.\n\t\tThe attack works against all modern protected Wi-Fi networks.\n\t\tDepending on the network configuration, it is also possible to inject and manipulate data.\n\t\tFor example, an attacker might be able to inject ransomware or other malware into websites.\n\t\t\n\t\tThe weaknesses are in the Wi-Fi standard itself, and not in individual products or implementations.\n\t\tTherefore, any correct implementation of WPA2 is likely affected.\n\t\tTo prevent the attack, users must update affected products as soon as security updates become available.\n\t\tNote that if your device supports Wi-Fi, it is most likely affected.\n\t\tDuring our initial research, we discovered ourselves that Android, Linux, Apple, Windows, OpenBSD, MediaTek, Linksys, and others, are all affected by some variant of the attacks.\n\t\tFor more information about specific products, consult the database of CERT/CC, or contact your vendor.\n\t\t\n\t\tThe research behind the attack will be presented at the Computer and Communications Security (CCS) conference, and at the Black Hat Europe conference. Our detailed research paper can already be downloaded.\n\n\t\t\n\t\t\n Demonstration\n\t\tAs a proof-of-concept we executed a key reinstallation attack against an Android smartphone.\n\t\t\tIn this demonstration, the attacker is able to decrypt all data that the victim transmits.\n\t\t\tFor an attacker this is easy to accomplish, because our key reinstallation attack is exceptionally devastating against Linux and Android 6.0 or higher.\n\t\t\tThis is because Android and Linux can be tricked into (re)installing an all-zero encryption key (see below for more info).\n\t\t\tWhen attacking other devices, it is harder to decrypt all packets, although a large number of packets can nevertheless be decrypted.\n\t\t\tIn any case, the following demonstration highlights the type of information that an attacker can obtain when performing key reinstallation attacks against protected Wi-Fi networks:\n\t\t\n\t\t\n\t\tOur attack is not limited to recovering login credentials (i.e. e-mail addresses and passwords).\n\t\t\tIn general, any data or information that the victim transmits can be decrypted. Additionally, depending on the device being used and the network setup, it is also possible to decrypt data sent towards the victim (e.g. the content of a website).\n\t\t\tAlthough websites or apps may use HTTPS as an additional layer of protection, we warn that this extra protection can (still) be bypassed in a worrying number of situations.\n\t\t\t\n\t\t\tFor example, HTTPS was previously bypassed in non-browser software,\n\t\t\tin Apple's iOS and OS X,\n\t\t\tin Android apps,\n\t\t\tin Android apps again,\n\t\t\tin banking apps,\n\t\t\tand even in VPN apps.\n\t\t\t\n\n\t\t\n\t\t\t\n\t\tDetails\n\t\t\n\t\t\t\n\n\t\t\tOur main attack is against the 4-way handshake of the WPA2 protocol.\n\t\t\tThis handshake is executed when a client wants to join a protected Wi-Fi network, and is used to confirm that both the client and access point possess the correct credentials (e.g. the pre-shared password of the network).\n\t\t\tAt the same time, the 4-way handshake also negotiates a fresh encryption key that will be used to encrypt all subsequent traffic.\n\t\t\tCurrently, all modern protected Wi-Fi networks use the 4-way handshake.\n\t\t\tThis implies all these networks are affected by (some variant of) our attack.\n\t\t\tFor instance, the attack works against personal and enterprise Wi-Fi networks, against the older WPA and the latest WPA2 standard, and even against networks that only use AES.\n\t\t\t\n\t\t\tAll our attacks against WPA2 use a novel technique called a key reinstallation attack (KRACK):\n\t\t\n\t\t\tKey reinstallation attacks: high level description\n\t\t\tIn a key reinstallation attack, the adversary tricks a victim into reinstalling an already-in-use key.\n\t\t\tThis is achieved by manipulating and replaying cryptographic handshake messages.\n\t\t\tWhen the victim reinstalls the key, associated parameters such as the incremental transmit packet number (i.e. nonce) and receive packet number (i.e. replay counter) are reset to their initial value.\n\t\t\tEssentially, to guarantee security, a key should only be installed and used once.\n\t\t\tUnfortunately, we found this is not guaranteed by the WPA2 protocol.\n\t\t\tBy manipulating cryptographic handshakes, we can abuse this weakness in practice.\n\t\t\n\t\t\tKey reinstallation attacks: concrete example against the 4-way handshake\n\t\t\tAs described in the introduction of the research paper, the idea behind a key reinstallation attack can be summarized as follows.\n\t\t\tWhen a client joins a network, it executes the 4-way handshake to negotiate a fresh encryption key.\n\t\t\tIt will install this key after receiving message 3 of the 4-way handshake.\n\t\t\tOnce the key is installed, it will be used to encrypt normal data frames using an encryption protocol.\n\t\t\tHowever, because messages may be lost or dropped, the Access Point (AP) will retransmit message 3 if it did not receive an appropriate response as acknowledgment.\n\t\t\tAs a result, the client may receive message 3 multiple times.\n\t\t\tEach time it receives this message, it will reinstall the same encryption key, and thereby reset the incremental transmit packet number (nonce) and receive replay counter used by the encryption protocol.\n\t\t\tWe show that an attacker can force these nonce resets by collecting and replaying retransmissions of message 3 of the 4-way handshake.\n\t\t\tBy forcing nonce reuse in this manner, the encryption protocol can be attacked, e.g., packets can be replayed, decrypted, and/or forged.\n\t\t\tThe same technique can also be used to attack the group key, PeerKey, TDLS, and fast BSS transition handshake.\n\t\t\n\t\t\t\n\t\t\n\t\t\tPractical impact\n\t\t\t\t\t\t\n\t\t\tIn our opinion, the most widespread and practically impactful attack is the key reinstallation attack against the 4-way handshake.\n\t\t\tWe base this judgement on two observations.\n\t\t\tFirst, during our own research we found that most clients were affected by it.\n\t\t\tSecond, adversaries can use this attack to decrypt packets sent by clients, allowing them to intercept sensitive information such as passwords or cookies.\n\t\t\tDecryption of packets is possible because a key reinstallation attack causes the transmit nonces (sometimes also called packet numbers or initialization vectors) to be reset to their initial value.\n\t\t\tAs a result, the same encryption key is used with nonce values that have already been used in the past.\n\t\t\tIn turn, this causes all encryption protocols of WPA2 to reuse keystream when encrypting packets.\n\t\t\tIn case a message that reuses keystream has known content, it becomes trivial to derive the used keystream.\n\t\t\tThis keystream can then be used to decrypt messages with the same nonce.\n\t\t\tWhen there is no known content, it is harder to decrypt packets, although still possible in several cases (e.g. English text can still be decrypted).\n\t\t\t\n\t\t\tIn practice, finding packets with known content is not a problem, so it should be assumed that any packet can be decrypted.\n\t\t\t\n\t\t\t\n\t\t\tThe ability to decrypt packets can be used to decrypt TCP SYN packets.\n\t\t\tThis allows an adversary to obtain the TCP sequence numbers of a connection, and hijack TCP connections.\n\t\t\tAs a result, even though WPA2 is used, the adversary can now perform one of the most common attacks against open Wi-Fi networks: injecting malicious data into unencrypted HTTP connections.\n\t\t\tFor example, an attacker can abuse this to inject ransomware or malware into websites that the victim is visiting.\n\t\t\t\n\t\t\tIf the victim uses either the WPA-TKIP or GCMP encryption protocol, instead of AES-CCMP, the impact is especially catastrophic.\n\t\t\tAgainst these encryption protocols, nonce reuse enables an adversary to not only decrypt, but also to forge and inject packets.\n\t\t\tMoreover, because GCMP uses the same authentication key in both communication directions, and this key can be recovered if nonces are reused, it is especially affected.\n\t\t\tNote that support for GCMP is currently being rolled out under the name Wireless Gigabit (WiGig), and is expected to be adopted at a high rate over the next few years.\n\t\t\t\n\t\t\tThe direction in which packets can be decrypted (and possibly forged) depends on the handshake being attacked.\n\t\t\tSimplified, when attacking the 4-way handshake, we can decrypt (and forge) packets sent by the client.\n\t\t\tWhen attacking the Fast BSS Transition (FT) handshake, we can decrypt (and forge) packets sent towards the client.\n\t\t\tFinally, most of our attacks also allow the replay of unicast, broadcast, and multicast frames.\n\t\t\tFor further details, see Section 6 of our research paper.\n\t\t\t\n\t\t\tNote that our attacks do not recover the password of the Wi-Fi network. They also do not recover (any parts of) the fresh encryption key that is negotiated during the 4-way handshake.\n\t\t\t\n\t\t\tAndroid and Linux\n\n\t\t\tOur attack is especially catastrophic against version 2.4 and above of wpa_supplicant, a Wi-Fi client commonly used on Linux.\n\t\t\tHere, the client will install an all-zero encryption key instead of reinstalling the real key.\n\t\t\tThis vulnerability appears to be caused by a remark in the Wi-Fi standard that suggests to clear the encryption key from memory once it has been installed for the first time.\n\t\t\tWhen the client now receives a retransmitted message 3 of the 4-way handshake, it will reinstall the now-cleared encryption key, effectively installing an all-zero key.\n\t\t\tBecause Android uses wpa_supplicant, Android 6.0 and above also contains this vulnerability.\n\t\t\tThis makes it trivial to intercept and manipulate traffic sent by these Linux and Android devices.\n\t\t\t\n\t\t\tNote that currently 50% of Android devices are vulnerable to this exceptionally devastating variant of our attack.\n\n\t\t\tAssigned CVE identifiers\n\t\t\tThe following Common Vulnerabilities and Exposures (CVE) identifiers were assigned to track which products are affected by specific instantiations of our key reinstallation attack:\n\t\t\t\n\t\t\t\tCVE-2017-13077: Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake.\n\t\t\t\tCVE-2017-13078: Reinstallation of the group key (GTK) in the 4-way handshake.\n\t\t\t\tCVE-2017-13079: Reinstallation of the integrity group key (IGTK) in the 4-way handshake.\n\t\t\t\tCVE-2017-13080: Reinstallation of the group key (GTK) in the group key handshake.\n\t\t\t\tCVE-2017-13081: Reinstallation of the integrity group key (IGTK) in the group key handshake.\n\t\t\t\tCVE-2017-13082: Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it.\n\t\t\t\tCVE-2017-13084: Reinstallation of the STK key in the PeerKey handshake.\n\t\t\t\tCVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake.\n\t\t\t\tCVE-2017-13087: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.\n\t\t\t\tCVE-2017-13088: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.\n\t\t\t\n\t\t\tNote that each CVE identifier represents a specific instantiation of a key reinstallation attack. This means each CVE ID describes a specific protocol vulnerability, and therefore many vendors are affected by each individual CVE ID. You can also read vulnerability note VU#228519 of CERT/CC for additional details on which products are known to be affected.\n\t\t\t\n\t\t\n\t\t\n\t\tPaper\n\t\t\n\t\t\n\t\tOur research paper behind the attack is titled Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2 and will be presented at the Computer and Communications Security (CCS) conference on Wednesday 1 November 2017.\n\n\t\tAlthough this paper is made public now, it was already submitted for review on 19 May 2017.\n\t\tAfter this, only minor changes were made.\n\t\tAs a result, the findings in the paper are already several months old.\n\t\tIn the meantime, we have found easier techniques to carry out our key reinstallation attack against the 4-way handshake.\n\t\tWith our novel attack technique, it is now trivial to exploit implementations that only accept encrypted retransmissions of message 3 of the 4-way handshake.\n\t\tIn particular this means that attacking macOS and OpenBSD is significantly easier than discussed in the paper.\n\t\t\n\t\tWe would like to highlight the following addendums and errata:\n\t\t\n\t\tAddendum: wpa_supplicant v2.6 and Android 6.0+\n\t\t\n\t\tLinux's wpa_supplicant v2.6 is also vulnerable to the installation of an all-zero encryption key in the 4-way handshake.\n\t\tThis was discovered by John A. Van Boxtel.\n\t\tAs a result, all Android versions higher than 6.0 are also affected by the attack, and hence can be tricked into installing an all-zero encryption key.\n\t\tThe new attack works by injecting a forged message 1, with the same ANonce as used in the original message 1, before forwarding the retransmitted message 3 to the victim.\n\t\t\n\t\t\n\t\t\t\t\n\t\tAddendum: other vulnerable handshakes\n\t\tAfter our initial research as reported in the paper, we discovered that the TDLS handshake and WNM Sleep Mode Response frame are also vulnerable to key reinstallation attacks.\n\t\t\n\t\tSelected errata\n\t\t\n\t\t\tIn Figure 9 at stage 3 of the attack, the frame transmitted from the adversary to the authenticator should say \"ReassoReq(ANonce, SNonce, MIC)\" instead of \"ReassoResp(..)\".\n\t\t\tSection 3.1: figure 3 contains a simplified description of the state machine (not figure 2).\n\t\t\tSection 4.2: \"It is essential that the broadcast frame we replay is sent after (not before) the retransmission of group message 1\". A similar change should be made in Section 4.3: \"Again it is essential that the broadcast frame we want to replay is sent after (not before) the retransmission of group message 1\".\n\t\t\n\n\t\tCitation example and bibtex entry\n\t\tPlease cite our research paper and not this website (or cite both). You can use the following example citation or bibtex entry:\n\t\t\n\t\t\tMathy Vanhoef and Frank Piessens. 2017. Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2. In Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS). ACM.\n\t\t\t@inproceedings{vanhoef-ccs2017,\n author = {Mathy Vanhoef and Frank Piessens},\n title = {Key Reinstallation Attacks: Forcing Nonce Reuse in {WPA2}},\n booktitle = {Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS)},\n year = {2017},\n publisher = {ACM}\n}\n\t\t\n\t\t\n\t\t\n\t\t\t\n\t\tTools\n\t\tWe have made scripts to detect whether an implementation of the 4-way handshake, group key handshake, or Fast BSS Transition (FT) handshake is vulnerable to key reinstallation attacks.\n\t\tThese scripts are available on github, and contain detailed instructions on how to use them.\n\t\t\n\t\tWe also made a proof-of-concept script that exploits the all-zero key (re)installation present in certain Android and Linux devices.\n\t\tThis script is the one that we used in the demonstration video.\n\t\tIt will be released once everyone has had a reasonable chance to update their devices (and we have had a chance to prepare the code repository for release).\n\t\tWe remark that the reliability of our proof-of-concept script may depend on how close the victim is to the real network.\n\t\tIf the victim is very close to the real network, the script may fail because the victim will always directly communicate with the real network, even if the victim is (forced) onto a different Wi-Fi channel than this network.\n\t\t\t\n\t\t\n\t\t\n\n\t\t\n\n\t\tQ&A\n\n\t\t\t\n\t\t\t\tDo we now need WPA3?\n\t\t\t\tShould I change my Wi-Fi password?\n\t\t\t\tI'm using WPA2 with only AES. That's also vulnerable?\n\t\t\t\tYou use the word \"we\" in this website. Who is we?\n\t\t\t\tIs my device vulnerable?\n\t\t\t\tWhat if there are no security updates for my router or access point? Or if it does not support 802.11r?\n\t\t\t\tIs it sufficient to patch only the access point? Or to patch only clients?\n\t\t\t\tCan we modify an access point to prevent attacks against the client?\n\t\t\t\tHow did you discover these vulnerabilities?\n\t\t\t\tThe 4-way handshake was mathematically proven as secure. How is your attack possible?\n\t\t\t\tSome attacks in the paper seem hard\n\t\t\t\tIf an attacker can do a man-in-the-middle attack, why can't they just decrypt all the data?\n\t\t\t\tDoes an attacker to have be near your network in order to attack it?\n\t\t\t\tAre people exploiting this in the wild?\n\t\t\t\tShould I temporarily use WEP until my devices are patched?\n\t\t\t\tWill the Wi-Fi standard be updated to address this?\n\t\t\t\tIs the Wi-Fi Alliance also addressing these vulnerabilities?\n\t\t\t\tWhy did you use match.com as an example in the demonstration video?\n\t\t\t\tHow can these types of bugs be prevented?\n\t\t\t\tWhy the domain name krackattacks.com?\n\t\t\t\tDid you get bug bounties for this?\n\t\t\t\tHow does this attack compare to other attacks against WPA2?\n\t\t\t\tAre other protocols also affected by key reinstallation attacks?\n\t\t\t\tIs there a higher resolution version of the logo?\n\t\t\t\tWhen did you first notify vendors about the vulnerability?\n\t\t\t\tWhy did OpenBSD silently release a patch before the embargo?\n\t\t\t\tSo you expect to find other Wi-Fi vulnerabilities?\n\t\t\t\tWhere can I learn more about key reinstallation attacks?\n\t\t\t\n\n\t\t\tDo we now need WPA3?\n\t\t\tNo, luckily implementations can be patched in a backwards-compatible manner.\n\t\t\tThis means a patched client can still communicate with an unpatched access point (AP), and vice versa.\n\t\t\tIn other words, a patched client or access point sends exactly the same handshake messages as before, and at exactly the same moment in time.\n\t\t\tHowever, the security updates will assure a key is only installed once, preventing our attack.\n\t\t\tSo again, update all your devices once security updates are available.\n\t\t\tFinally, although an unpatched client can still connect to a patched AP, and vice versa, both the client and AP must be patched to defend against all attacks!\n\t\t\t\n\t\t\tShould I change my Wi-Fi password?\n\t\t\tChanging the password of your Wi-Fi network does not prevent (or mitigate) the attack. So you do not have to update the password of your Wi-Fi network. Instead, you should make sure all your devices are updated, and you should also update the firmware of your router. Nevertheless, after updating both your client devices and your router, it's never a bad idea to change the Wi-Fi password.\n\t\t\t\n\t\t\tI'm using WPA2 with only AES. That's also vulnerable?\n\t\t\tYes, that network configuration is also vulnerable. The attack works against both WPA1 and WPA2, against personal and enterprise networks, and against any cipher suite being used (WPA-TKIP, AES-CCMP, and GCMP). So everyone should update their devices to prevent the attack!\n\t\t\t\n\t\t\tYou use the word \"we\" in this website. Who is we?\n\t\t\tI use the word \"we\" because that's what I'm used to writing in papers. In practice, all the work is done by me, with me being Mathy Vanhoef.\n\t\t\tMy awesome supervisor is added under an honorary authorship to the research paper for his excellent general guidance.\n\t\t\tBut all the real work was done on my own. \n\t\t\tSo the author list of academic papers does not represent division of work :)\n\t\t\t\n\t\t\tIs my device vulnerable?\n\t\t\tProbably. Any device that uses Wi-Fi is likely vulnerable. Contact your vendor for more information, or consult this community maintained list on GitHub.\n\t\t\t\n\t\t\tWhat if there are no security updates for my router or access point? Or if it does not support 802.11r?\n\t\t\t\n\t\t\tRouters or access points (APs) are only vulnerable to our attack if they support the Fast BSS Transition (FT) handshake, or if they support client (repeater) functionality.\n\t\t\tFirst, the FT handshake is part of 802.11r, and is mainly supported by enterprise networks, and not by home routers or APs.\n\t\t\tAdditionally, most home routers or APs do not support (or will not use) client functionality.\n\t\t\tIn other words, your home router or AP likely does not require security updates.\n\t\t\tInstead, it are mainly enterprise networks that will have to update their network infrastructure (i.e. their routers and access points).\n\t\t\t\n\t\t\tThat said, some vendors discovered implementation-specific security issues while investigating our attack.\n\t\t\tFor example, it was discovered that hostapd reuses the ANonce value in the 4-way handshake during rekeys.\n\t\t\tConcretely this means that, even if your router or AP does not support 802.11r, and even if it does not support client functionality, it might still have to be updated.\n\t\t\tContact your vendor for more details.\n\t\t\t\n\t\t\tFinally, we remark that you can try to mitigate attacks against routers and APs by disabling client functionality (which is for example used in repeater modes) and disabling 802.11r (fast roaming).\n\t\t\tAdditionally, update all your other client devices such as laptops and smartphones.\n\t\t\tIf one or more of your client devices is not receiving updates, you can also try to contact your router's vendor and ask if they have an update that prevents attacks against connected devices.\n\n\t\t\tIs it sufficient to patch only the access point? Or to patch only clients?\n\t\t\tCurrently, all vulnerable devices should be patched.\n\t\t\tIn other words, patching the AP will not prevent attacks against vulnerable clients.\n\t\t\tSimilarly, patching all clients will not prevent attacks against vulnerable access points.\n\t\t\tNote that only access points that support the Fast BSS Transition handshake (802.11r) can be vulnerable.\n\t\t\t\n\t\t\tThat said, it is possible to modify the access point such that vulnerable clients (when connected to this AP) cannot be attacked.\n\t\t\tHowever, these modifications are different from the normal security patches that are being released for vulnerable access points!\n\t\t\tSo unless your access point vendor explicitly mentions that their patches prevent attacks against clients, you must also patch clients.\n\n\t\t\tCan we modify an access point to prevent attacks against the client?\n\t\t\t\n\t\t\tIt's possible to modify the access point (router) such that connected clients are not vulnerable to attacks against the 4-way handshake and group key handshake.\n\t\t\tNote that we consider these two attacks the most serious and widespread security issues we discovered.\n\t\t\tHowever, these modifications only prevent attacks when a vulnerable client is connected to such a modified access point.\n\t\t\tWhen a vulnerable client connects to a different access point, it can still be attacked.\n\t\t\tTechnically, this is accomplished by modifying the access point such that it does not retransmit message 3 of the 4-way handshake.\n\t\t\tAdditionally, the access point is modified to not retransmit message 1 of the group key handshake.\n\t\t\tThe hostapd project has such a modification available.\n\t\t\tThey are currently evaluating to which extend this impacts the reliability of these handshakes.\n\t\t\tWe remark that the client-side attacks against the 4-way handshake and group key handshake can also be prevented by retransmitting the above handshake messages using the same (previous) EAPOL-Key replay counter.\n\t\t\tThe attack against the group key handshake can also be prevented by letting the access point install the group key in a delayed fashion, and by assuring the access point only accepts the latest replay counter (see section 4.3 of the paper for details).\n\t\t\t\n\t\t\tOn some products, variants or generalizations of the above mitigations can be enabled without having to update products.\n\t\t\t\n\t\t\tFor example, on some access points retransmissions of all handshake messages can be disabled, preventing client-side attacks against the 4-way and group key handshake (see for example Cisco).\n\n\t\t\tHow did you discover these vulnerabilities?\n\t\t\tWhen working on the final (i.e. camera-ready) version of another paper, I was double-checking some claims we made regarding OpenBSD's implementation of the 4-way handshake. In a sense I was slacking off, because I was supposed to be just finishing the paper, instead of staring at code. But there I was, inspecting some code I already read a hundred times, to avoid having to work on the next paragraph. It was at that time that a particular call to ic_set_key caught my attention. This function is called when processing message 3 of the 4-way handshake, and it installs the pairwise key to the driver. While staring at that line of code I thought “Ha. I wonder what happens if that function is called twice”. At the time I (correctly) guessed that calling it twice might reset the nonces associated to the key. And since message 3 can be retransmitted by the Access Point, in practice it might indeed be called twice. “Better make a note of that. Other vendors might also call such a function twice. But let's first finish this paper...”. A few weeks later, after finishing the paper and completing some other work, I investigated this new idea in more detail. And the rest is history.\n\t\t\t\n\t\t\tThe 4-way handshake was mathematically proven as secure. How is your attack possible?\n\t\t\tThe brief answer is that the formal proof does not assure a key is installed only once. Instead, it merely assures the negotiated key remains secret, and that handshake messages cannot be forged.\n\t\t\tThe longer answer is mentioned in the introduction of our research paper: our attacks do not violate the security properties proven in formal analysis of the 4-way handshake.\n\t\t\tIn particular, these proofs state that the negotiated encryption key remains private, and that the identity of both the client and Access Point (AP) is confirmed.\n\t\t\tOur attacks do not leak the encryption key.\n\t\t\tAdditionally, although normal data frames can be forged if TKIP or GCMP is used, an attacker cannot forge handshake messages and hence cannot impersonate the client or AP during handshakes.\n\t\t\tTherefore, the properties that were proven in formal analysis of the 4-way handshake remain true.\n\t\t\tHowever, the problem is that the proofs do not model key installation.\n\t\t\tPut differently, the formal models did not define when a negotiated key should be installed.\n\t\t\tIn practice, this means the same key can be installed multiple times, thereby resetting nonces and replay counters used by the encryption protocol (e.g. by WPA-TKIP or AES-CCMP).\n\n\t\t\tSome attacks in the paper seem hard\n\t\t\tWe have follow-up work making our attacks (against macOS and OpenBSD for example) significantly more general and easier to execute.\n\t\t\tSo although we agree that some of the attack scenarios in the paper are rather impractical, do not let this fool you into believing key reinstallation attacks cannot be abused in practice.\n\n\t\t\tIf an attacker can do a man-in-the-middle attack, why can't they just decrypt all the data?\n\t\t\tAs mentioned in the demonstration, the attacker first obtains a man-in-the-middle (MitM) position between the victim and the real Wi-Fi network (called a channel-based MitM position).\n\t\t\tHowever, this MitM position does not enable the attacker to decrypt packets!\n\t\t\tThis position only allows the attacker to reliably delay, block, or replay encrypted packets.\n\t\t\tSo at this point in the attack, they cannot yet decrypt packets.\n\t\t\tInstead, the ability to reliably delay and block packets is used to execute a key reinstallation attack.\n\t\t\tAfter performing a key reinstallation attack, packets can be decrypted.\n\n\t\t\tDoes an attacker to have be near your network in order to attack it?\n\t\t\tAn adversary has to be within range of both the client being attacked (meaning the smartphone or laptop) and the network itself.\n\t\t\tThis means an adversary on the other side of the world cannot attack you remotely.\n\t\t\tHowever, the attacker can still be relatively far way.\n\t\t\tThat's because special antenna can be used to carry out the attack from two miles to up to eight miles in ideal conditions.\n\t\t\tAdditionally, the attacker is not competing with the signal strength of the real Wi-Fi network, but instead uses so-called Channel Switch Announcements to manipulate and attack the client.\n\t\t\tAs a result, it is possible to successfully carry out attacks even when far away from the victim.\n\t\t\t\n\n\t\t\tAre people exploiting this in the wild?\n\t\t\tWe are not in a position to determine if this vulnerability has been (or is being) actively exploited in the wild. That said, key reinstallations can actually occur spontaneously without an adversary being present! This may for example happen if the last message of a handshake is lost due to background noise, causing a retransmission of the previous message. When processing this retransmitted message, keys may be reinstalled, resulting in nonce reuse just like in a real attack.\n\n\t\t\tShould I temporarily use WEP until my devices are patched?\n\t\t\tNO! Keep using WPA2.\n\n\t\t\tWill the Wi-Fi standard be updated to address this?\n\t\t\tThere seems to be an agreement that the Wi-Fi standard should be updated to explicitly prevent our attacks.\n\t\t\tThese updates likely will be backwards-compatible with older implementations of WPA2.\n\t\t\tTime will tell whether and how the standard will be updated.\n\n\t\t\tIs the Wi-Fi Alliance also addressing these vulnerabilities?\n\t\t\tFor those unfamiliar with Wi-Fi, the Wi-Fi Alliance is an organization which certifies that Wi-Fi devices conform to certain standards of interoperability. Among other things, this assures that Wi-Fi products from different vendors work well together.\n\t\t\tThe Wi-Fi Alliance has a plan to help remedy the discovered vulnerabilities in WPA2. Summarized, they will:\n\t\t\t\n\t\t\t\tRequire testing for this vulnerability within their global certification lab network.\n\t\t\t\tProvide a vulnerability detection tool for use by any Wi-Fi Alliance member (this tool is based on my own detection tool that determines if a device is vulnerable to some of the discovered key reinstallation attacks).\n\t\t\t\tBroadly communicate details on this vulnerability, including remedies, to device vendors. Additionally, vendors are encouraged to work with their solution providers to rapidly integrate any necessary patches.\n\t\t\t\tCommunicate the importance for users to ensure they have installed the latest recommended security updates from device manufacturers.\n\t\t\t\n\t\t\t\n\t\t\tWhy did you use match.com as an example in the demonstration video?\n\t\t\tUsers share a lot of personal information on websites such as match.com. So this example highlights all the sensitive information an attacker can obtain, and hopefully with this example people also better realize the potential (personal) impact. We also hope this example makes people aware of all the information these dating websites may be collecting.\n\n\t\t\tHow can these types of bugs be prevented?\n\t\t\tWe need more rigorous inspections of protocol implementations. This requires help and additional research from the academic community! Together with other researchers, we hope to organize workshop(s) to improve and verify the correctness of security protocol implementations.\n\n\t\t\tWhy the domain name krackattacks.com?\n\t\t\tFirst, I'm aware that KRACK attacks is a pleonasm, since KRACK stands for key reinstallation attack and hence already contains the word attack. But the domain name rhymes, so that's why it's used.\n\n\t\t\tDid you get bug bounties for this?\n\t\t\tHackerone has awarded a bug bounty for our research under their Internet Bug Bounty (IBB) award program.\n\n\t\t\tHow does this attack compare to other attacks against WPA2?\n\t\t\tThis is the first attack against the WPA2 protocol that doesn't rely on password guessing. Indeed, other attacks against WPA2-enabled network are against surrounding technologies such as Wi-Fi Protected Setup (WPS), or are attacks against older standards such as WPA-TKIP. Put differently, none of the existing attacks were against the 4-way handshake or against cipher suites defined in the WPA2 protocol. In contrast, our key reinstallation attack against the 4-way handshake (and against other handshakes) highlights vulnerabilities in the WPA2 protocol itself.\n\n\t\t\tAre other protocols also affected by key reinstallation attacks?\n\t\t\tWe expect that certain implementations of other protocols may be vulnerable to similar attacks. So it's a good idea to audit security protocol implementations with this attack in mind. However, we consider it unlikely that other protocol standards are affected by similar attacks (or at least so we hope). Nevertheless, it's still a good idea to audit other protocols!\n\t\t\t\n\t\t\tIs there a higher resolution version of the logo?\n\t\t\tYes there is. And a big thank you goes to the person that made the logo!\n\n\t\t\tWhen did you first notify vendors about the vulnerability?\n\t\t\tWe sent out notifications to vendors whose products we tested ourselves around 14 July 2017. After communicating with these vendors, we realized how widespread the weaknesses we discovered are (only then did I truly convince myself it was indeed a protocol weaknesses and not a set of implementation bugs). At that point, we decided to let CERT/CC help with the disclosure of the vulnerabilities. In turn, CERT/CC sent out a broad notification to vendors on 28 August 2017.\n\n\t\t\tWhy did OpenBSD silently release a patch before the embargo?\n\t\t\tOpenBSD announced an errata on 30 August 2017 that silently prevented our key reinstallation attacks.\n\t\t\tMore specifically, patches were released for both OpenBSD 6.0 and OpenBSD 6.1.\n\t\t\tWe notified OpenBSD of the vulnerability on 15 July 2017, before CERT/CC was involved in the coordination. Quite quickly, Theo de Raadt replied and critiqued the tentative disclosure deadline: “In the open source world, if a person writes a diff and has to sit on it for a month, that is very discouraging”. Note that I wrote and included a suggested diff for OpenBSD already, and that at the time the tentative disclosure deadline was around the end of August. As a compromise, I allowed them to silently patch the vulnerability. In hindsight this was a bad decision, since others might rediscover the vulnerability by inspecting their silent patch. To avoid this problem in the future, OpenBSD will now receive vulnerability notifications closer to the end of an embargo.\n\n\t\t\tSo you expect to find other Wi-Fi vulnerabilities?\n\t\t\t“I think we're just getting started.” — Master Chief, Halo 1\n\n\t\t\tWhere can I learn more about key reinstallation attacks?\n\t\t\tGood technical information and comments:\n\t\t\t\n\t\t\t\tLiveOverflow has an excellent video explaining the attack\n\t\t\t\tComputerphile also made a video about the attack\n\t\t\t\tMatthew Green has a good blog post about KRACK and the causes of the vulnerability\n\t\t\t\tMojo Networks has a detailed blog posts on the attacks\n\t\t\t\tBruce Schneier also briefly discusses the attack\n\t\t\t\n\t\t\tSelected newspapers with high-level information:\n\t\t\t\n\t\t\t\tThe BCC made a short video explaining the attack, and wrote an article about it\n\t\t\t\tThe Wall Street Journal: Significant Flaw Discovered in Wi-Fi Security Protocol\n\t\t\t\tThe Guardian: 'All wifi networks' are vulnerable to hacking, security expert discovers\n\t\t\t\tTIME: Everything With Wi-Fi Has a Newly Discovered Security Flaw. Here's How to Protect Yourself\n\t\t\t\tArs Technica: Serious flaw in WPA2 protocol lets attackers intercept passwords and much more\n\t\t\t\tArs Technica: How the KRACK attack destroys nearly all Wi-Fi security\n\t\t\t\tThe Verge: Wi-Fi security has been breached, say researchers\n\t\t\t\tThe Verge: 41 percent of Android phones are vulnerable to 'devastating' Wi-Fi attack\n\t\t\t\tReuters: Researchers uncover flaw that makes Wi-Fi vulnerable to hacks\n\t\t\t\tForbes: Update Every Device -- This KRACK Hack Kills Your Wi-Fi Privacy\n\t\t\t\tCNET: KRACK attack: Here's how companies are responding"],["topImageUrl","https://www.krackattacks.com/images/logo-small.png"],["error",null]]},{"__iterable":"Map","data":[["title","KRACK Attacks: Bypassing WPA2 against Android and Linux"],["url","https://www.youtube.com/watch?v=Oh4WURZoR98"],["summary","This video explains some of the academic research performed in the ACM CCS 2017 paper \"Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2\". It's not a guide or tutorial on how to hack people. Instead, the video was made to make people aware of potential risks, and to motivate everyone to update their smartphone and laptop. By updating your devices you (normally) avoid the risks mentioned in the video! For additional information visit https://www.krackattacks.com\n\nNote that devices different from Android and Linux are less affected by the attack. That's because only Android and Linux (re)install an all-zero encryption key."],["topImageUrl","https://i.ytimg.com/vi/Oh4WURZoR98/maxresdefault.jpg"],["error",null]]}]}],["text","#重大消息 \nWiFi 常用加密協定 WPA, WPA2 已被攻破！！\n不要使用 WiFi 進行任何機敏資料傳輸！你所有的輸入資訊都有機會被截取！\n\n盡量使用4G/3G 等私人網路，真要使用公眾WiFi 就掛個私人加密VPN\n\n影響裝置擴及所有 Android/Linux(含大部分基地台)/Windows/Apple\n\n近期請密切注意裝置更新不要想說更新很麻煩資料被盜用不會比較方便\n(CVE-2017-13077~CVE-2017-13088 這幾個漏洞)\n---------------------------------\n手法: KRACKs\n各大廠更新進度: https://goo.gl/KfNKCk\n說明網站: https://www.krackattacks.com/\nDEMO: https://www.youtube.com/watch?v=Oh4WURZoR98"],["id","AV8qmLvDyCdS-nWhuhn9"],["createdAt","2017-10-17T13:49:33.505Z"]]}],["reply",{"__iterable":"Map","data":[["id","AV8q-RYAyCdS-nWhuhoT"],["user",{"__iterable":"Map","data":[["id","AVy6vkhAyCdS-nWhuaru"],["name","Rosalind"],["avatarUrl","https://www.gravatar.com/avatar/f0db3a53dec901a797bdc90b87a0a6a9?s=100&d=identicon&r=g"],["level",17]]}],["type","NOT_RUMOR"],["text","確有此事。"],["reference","https://www.inside.com.tw/2017/10/17/wpa2breaking"],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","【全球 Wi-Fi 大風暴】WPA2 加密協議被攻破！Wi-Fi 安全面臨重大危機該怎麼辦？ - INSIDE"],["url","https://www.inside.com.tw/2017/10/17/wpa2breaking"],["summary","Photo Credit：pixabay\n本篇來自合作媒體 Pingwest，INSIDE 經授權轉載。\n比利時研究人員 10 月 16 日表示：WPA2 安全加密協議已經被破解。\n如果你朋友圈裡有一兩個略懂一些技術的好友，那麼他一定在昨天已經轉發過了相關的新聞。也許你對這條充滿技術詞語的新聞並不關心，除非我們換一種說法：\n你能連接到的絕大多數 Wi-Fi 在一夜之間都不安全了，甚至你透過自己家路由器的 Wi-Fi 上網，都有可能被盜。\n安全專家 Mathy Vanhoef 表示：「該漏洞影響了許多操作系統和設備，包括 Android，Linux，Apple，Windows 等。」\n這個概念驗證攻擊被稱作「KRACK」（密鑰重裝攻擊），詳細破解方法和影片示範已在 krackattacks.com 網站上公佈。\nWPA2 是什麼？\nWPA 全稱為 Wi-Fi Protected Access，有 WPA 和 WPA2 兩個標準，是一種保護無線網路安全的加密協議。\n用更通俗一點的話來說，我們都知道連接到大多數 Wi-Fi 是要輸入密碼的，此過程不止用於防止偷連網，其實更重要的是驗證你的手機和路由器之間的通訊沒有被別人竊取。\n畢竟，對於滿世界亂飄的無線數據來說，就好像是你從手機端寄一個快遞到同一個社區的路由器家裡。因為你手機也不知道路由器住在哪，所以會把包裹放在貨架上寫明「路由器收」。\n如果所有人都遵循規則，那麼每個使用 Wi-Fi 的終端只要到貨架上去找寫著自己名字的包裹就可以了。然而攻擊者並不管這些，會把你的包裹拿來拆開，然後在裡面放上自己偽造的數據。\n如果 Wi-Fi 都採用不加密的方式傳輸數據，那你平時看了什麼奇怪網站，下了什麼「動作」電影，你鄰居可是一清二楚。不過當然最重要的是，有些 App 和網站的密碼，也可能因此而洩露。\n在 WPA 這種加密方式大規模應用之前，加密方式主要是 WEP（Wired Equivalent Privacy），由於每個數據包都使用相同的加密密鑰，如果竊聽者分析了足夠的數據，則可以使用自動化軟體找到密鑰。\n還是用通俗一點的話來說，就是你的手機不停的往路由器發「快遞」，WEP 雖然給每個快遞包裹都上了鎖，但是所有鎖都可以被一把鑰匙打開。攻擊者只要多劫下幾個包裹試一試，就能配出一把鑰匙了。\nWEP 的加密方式在這三種加密中是安全性最弱的， 2001 年 8 月，Fluhrer et al. 發表了針對 WEP 的密碼分析，利用 RC4 加解密和 IV 的使用方式的特性，偷聽幾個小時之後，就可以把 RC4 的鑰匙破解出來。\n2005 年，美國聯邦調查局示範了用公開可得的工具可以在三分鐘內破解一個用 WEP 保護的網路。\n與 WEP 相比，WPA 使用 TKIP 加密方案，並驗證它在數據傳輸過程中沒有被更改。而 WPA2 使用 AES 加密方法，進一步提高了安全性。\n用不嚴謹但通俗的方式來解釋，就是你手機和路由器之間每「快遞包裹」上的密碼都是變化的，而你手機和路由器達成了一種默契，保證只有彼此才擁有正確的鑰匙，你的路由器還會拒絕簽收那些看起被動過的包裹。\n除了安全性，由於 WEP 是 IEEE 802.11 標準的一部分，後續在開發更快更穩定的 IEEE 802.11n 時已經摒棄了對 WEP 加密的支援。如果繼續使用 WEP 加密，會影響無線網路設備的傳輸速率。\n但是由於路由器的升級換代速度很慢，直到 2003 年才被更加安全的 WPA 取代。\n由於 WPA2 作為升級版的協議兼容 WPA，不需要更換硬體，因此目前的路由器大部分都在使用 WPA2 加密協議。\n因此，在很長一段時間裡，只要你不在公共場所隨意登錄那些完全不需要密碼的 Wi-Fi，你就不會受到攻擊。\nWPA2 被破解有什麼影響？\n最直接的影響就是你家裡的無線網路將處於易受攻擊的狀態，你的信用卡、密碼、聊天記錄、照片、電子郵件等都有可能被駭客竊取。\nkrackattacks 網站顯示：Android 和基於 Linux 的設備受到的影響更大。由於 Android 使用 wpa_supplicant，41％的 Android 設備更容易受到攻擊。\n隨後，Google 表示：將在接下來的幾個星期內推出相應的安全修補程式。\n除了安全修補程式，與 WEP 被破解時的辦法相同，最好的解決辦法就是升級到更安全的加密協議。\n如果新的協議沒有向下相容的話，為了安全性，意味著許多路由器硬體將被淘汰，可能很快就需要換新的路由器了。\n即便是新的協議支援硬體上的向下相容，又會有哪個普通用戶會想到去更新自己路由器的韌體呢？\n如何降低安全風險？\n如果駭客打算攻擊你家的 Wi-Fi，需要物理上的靠近。所以，物理距離上的保護讓你的數據暫時不至於變得非常不安全。\n不過，就算你定期更改家裡的 Wi-Fi 密碼，也不會降低危險，因為 Wi-Fi 的加密協議都被破解了，知道你的密碼也不是什麼難事。\n這也意味著機場、火車站、商場的公共 Wi-Fi 變得更加不安全，最好的辦法就是盡量使用 4G，外出的時候還是辦一張大流量的卡吧。\n想要獲得更安全的體驗，最好的辦法還是關注自己路由器廠商的韌體更新在第一時間升級。如果路由器廠商表明不對你的路由器型號進行維護了，那……趁這個機會趕緊買個新路由器吧，也正好湊湊這兩年智慧路由器的熱潮。\n除了等待路由器廠商更新韌體和更換新款路由器之外，在瀏覽網頁時，盡量選擇訪問 https 站點。Wi-Fi 加密協議不安全了，至少還有一道網站端的加密保護用戶的數據。\n此外，krackattacks 網站還給出了一些更專業的建議：比如禁用路由器的客戶端模式（例如中繼模式）和 802.11r（快速漫遊）。\n不過總體來說，這都是緩兵之計，升級韌體和換路由器才是唯一的解決方案。"],["topImageUrl","https://i0.wp.com/www.inside.com.tw/wp-content/uploads/2017/10/hacker-1944688_960_720.jpg?fit=960%2C640&ssl=1"],["error",null]]}]}],["createdAt","2017-10-17T15:34:48.068Z"]]}]]},{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",1],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",1],["user",null],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","Hamburger Chef Jamie Oliver Proves McDonald’s Burgers “Unfit for Human Consumption”"],["url","http://healthycures.org/hamburger-chef-jamie-oliver-proves-mcdonalds-burgers-unfit-for-human-consumption"],["summary","– For more Health & Wellness related Updates and News, make sure you follow us on our Facebook and Twitter pages. -\n\n\n\nHamburger chef Jamie Oliver has won his long-fought battle against one of the largest fast food chains in the world – McDonalds. After Oliver showed how McDonald’s hamburgers are made, the franchise finally announced that it will change its recipe, and yet there was barely a peep about this in the mainstream, corporate media.\n\nOliver repeatedly explained to the public, over several years – in documentaries, television shows and interviews – that the fatty parts of beef are “washed” in ammonium hydroxide and used in the filling of the burger. Before this process, according to the presenter, the food is deemed unfit for human consumption. According to the chef and hamburger enthusiast, Jamie Oliver, who has undertaken a war against the fast food industry, “Basically, we’re taking a product that would be sold in the cheapest way for dogs, and after this process, is being given to human beings.”\nBesides the low quality of the meat, the ammonium hydroxide is harmful to health. Oliver famously coined this the “the pink slime process.”\n“Why would any sensible human being put meat filled with ammonia in the mouths of their children?” Oliver asked.\nIn one of his colorful demonstrations, Oliver demonstrates to children how nuggets are made. After selecting the best parts of the chicken, the remains (fat, skin and internal organs) are processed for these fried foods.\n\nIn reply to all of the bad press this process has received from Oliver, the company Arcos Dorados, the franchise manager for McDonalds in Latin America, said such a procedure is not practiced in their region. The same, it should be noted, applies to the product in Ireland and the UK, where they use meat from local suppliers.\nIn the United States, however, Burger King and Taco Bell had already abandoned the use of ammonia in their products. The food industry uses ammonium hydroxide as an anti-microbial agent in meats, which has allowed McDonald’s to use otherwise “inedible meat.”\nMost disturbing of all is the horrifying fact that because ammonium hydroxide is considered part of the “component in a production procedure” by the USDA, consumers may not know when the chemical is in their food.\n\n\n\nOn the official website of McDonald’s, the company claims that their meat is cheap because, while serving many people every day, they are able to buy from their suppliers at a lower price, and offer the best quality products. But if “pink slime” was really the “best quality” that McDonalds can muster in the US, then why were they able do better in Latin America and Europe? More to the point, why can they apparently do better now in the United States?\nThese questions remains unanswered by the franchise which has denied that the decision to change the recipe is related to Jamie Oliver’s campaign. On the site, McDonald’s has admitted that they have abandoned the beef filler from its burger patties.\nSource:\nDavid Warner\npoliticalblindspot.org\n\n\n\n\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \n\n\t\n\t\t\n\t\t\t\t\t\n\t\tHealthyCures\n\t\t\t\tThis article was brought to you by Healthy Cures Team in collaboration with other health-related organizations! We strive to provide the best possible natural health information to improve your life. If you have any feedback for us, do not hesitate to contact us."],["topImageUrl","http://healthycures.org/wp-content/uploads/2016/04/944757_622205944476291_2132848075_n.jpg"],["error",null]]}]}],["text","http://healthycures.org/hamburger-chef-jamie-oliver-proves-mcdonalds-burgers-unfit-for-human-consumption"],["id","5480742887110-rumor"],["createdAt","2017-01-10T06:37:00.000Z"]]}],["reply",{"__iterable":"Map","data":[["id","AV1QhU8QyCdS-nWhuces"],["user",{"__iterable":"Map","data":[["id","AVriAlOoyrDaTqlmmqhC"],["name","Lin"],["avatarUrl",null],["level",22]]}],["type","NOT_ARTICLE"],["text"," 疑似為訊息之節錄片段，並非全文。"],["reference",""],["hyperlinks",{"__iterable":"List","data":[]}],["createdAt","2017-07-17T12:28:20.115Z"]]}]]},{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",1],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",2],["user",null],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","Hamburger Chef Jamie Oliver Proves McDonald’s Burgers “Unfit for Human Consumption”"],["url","http://healthycures.org/hamburger-chef-jamie-oliver-proves-mcdonalds-burgers-unfit-for-human-consumption"],["summary","– For more Health & Wellness related Updates and News, make sure you follow us on our Facebook and Twitter pages. -\n\n\n\nHamburger chef Jamie Oliver has won his long-fought battle against one of the largest fast food chains in the world – McDonalds. After Oliver showed how McDonald’s hamburgers are made, the franchise finally announced that it will change its recipe, and yet there was barely a peep about this in the mainstream, corporate media.\n\nOliver repeatedly explained to the public, over several years – in documentaries, television shows and interviews – that the fatty parts of beef are “washed” in ammonium hydroxide and used in the filling of the burger. Before this process, according to the presenter, the food is deemed unfit for human consumption. According to the chef and hamburger enthusiast, Jamie Oliver, who has undertaken a war against the fast food industry, “Basically, we’re taking a product that would be sold in the cheapest way for dogs, and after this process, is being given to human beings.”\nBesides the low quality of the meat, the ammonium hydroxide is harmful to health. Oliver famously coined this the “the pink slime process.”\n“Why would any sensible human being put meat filled with ammonia in the mouths of their children?” Oliver asked.\nIn one of his colorful demonstrations, Oliver demonstrates to children how nuggets are made. After selecting the best parts of the chicken, the remains (fat, skin and internal organs) are processed for these fried foods.\n\nIn reply to all of the bad press this process has received from Oliver, the company Arcos Dorados, the franchise manager for McDonalds in Latin America, said such a procedure is not practiced in their region. The same, it should be noted, applies to the product in Ireland and the UK, where they use meat from local suppliers.\nIn the United States, however, Burger King and Taco Bell had already abandoned the use of ammonia in their products. The food industry uses ammonium hydroxide as an anti-microbial agent in meats, which has allowed McDonald’s to use otherwise “inedible meat.”\nMost disturbing of all is the horrifying fact that because ammonium hydroxide is considered part of the “component in a production procedure” by the USDA, consumers may not know when the chemical is in their food.\n\n\n\nOn the official website of McDonald’s, the company claims that their meat is cheap because, while serving many people every day, they are able to buy from their suppliers at a lower price, and offer the best quality products. But if “pink slime” was really the “best quality” that McDonalds can muster in the US, then why were they able do better in Latin America and Europe? More to the point, why can they apparently do better now in the United States?\nThese questions remains unanswered by the franchise which has denied that the decision to change the recipe is related to Jamie Oliver’s campaign. On the site, McDonald’s has admitted that they have abandoned the beef filler from its burger patties.\nSource:\nDavid Warner\npoliticalblindspot.org\n\n\n\n\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \n\n\t\n\t\t\n\t\t\t\t\t\n\t\tHealthyCures\n\t\t\t\tThis article was brought to you by Healthy Cures Team in collaboration with other health-related organizations! We strive to provide the best possible natural health information to improve your life. If you have any feedback for us, do not hesitate to contact us."],["topImageUrl","http://healthycures.org/wp-content/uploads/2016/04/944757_622205944476291_2132848075_n.jpg"],["error",null]]}]}],["text","咁無良心，重唔執笠? 名厨 Jamie Oliver 爆出麥當勞及其他連鎖快餐，使用牛內臟、肥膏等寵物餵料級的材料，以阿摩尼亞殺菌，混入牛肉中製作漢堡。事件擾攘5年，Jamie終於打贏官司，證明食物有問題。麥當勞初步祗答應在部份國家停用。 http://healthycures.org/hamburger-chef-jamie-oliver-proves-mcdonalds-burgers-unfit-for-human-consumption 美國快歺店，為了降低成本，它們皆採用： Canola oil 煎炸，canola 不是有益的油，尤其是高溫炸過之後出來出來的薯條。麥噹噹及大部份快餐店所售賣的大大杯汽水，糖份含量特高。更可怕的，汽水製造商所用的的糖，為了便宜，用 GMO corn syrup 來製造。麥噹噹快餐，多食快死！\n\n想快啲生癌就食麥當勞同家鄉雞啦！\n\n所以都唔敢再食麥當勞同家鄉雞呢兩間嘢！尤其老麥係堅驚…連奶昔都冇奶成份係假！好很恐怖！啲人真係係時候要醒醒！唔好成為咗一種服慢性毒品習慣！"],["id","5480739753511-rumor"],["createdAt","2017-01-10T06:36:00.000Z"]]}],["reply",{"__iterable":"Map","data":[["id","AV0ndQAMyCdS-nWhub30"],["user",{"__iterable":"Map","data":[["id","AVriAlOoyrDaTqlmmqhC"],["name","Lin"],["avatarUrl",null],["level",22]]}],["type","RUMOR"],["text","目前沒有科學研究證明人類吃的芥花油（Canola oil），會對人體造成危害，當然歐洲也沒有禁止使用芥花油，就連加拿大駐台北貿易辦事處也在官網發佈聲明，指出謠言說法並沒有科學根據，也並非事實，希望民眾不要因此受騙。"],["reference","http://www.rumtoast.com/4909/別再吃-芥花油-了，因為芥子氣原料就是它？這謠言\n別再吃芥花油了，因為芥子氣原料就是它？這謠言企圖使人白眼翻到天靈蓋"],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","別再吃芥花油了，因為芥子氣原料就是它？這謠言企圖使人白眼翻到天靈蓋"],["url","http://www.rumtoast.com/4909/別再吃-芥花油-了，因為芥子氣原料就是它？這謠言"],["summary","謠言這樣說：最近有一則油品訊息瘋傳耶，各位有看過以下內容嗎？「你家有芥花油 (Canola oil)嘛？別再吃了！芥花油歐洲已禁止，芥花油並不是從我們常吃的芥菜種子提鍊的！它是從有毒的蕓苔子（Rape）經過基因改造，再用己烷粹取高溫提鍊而得，原名叫低酸加拿大油（Canada Oil Low Acid）。對心臟，腎臟，神經，甲狀腺都具有傷害性，芥子氣原料就是它。再沒時間都要看一看，芥花油的問題！」難道芥花油真的有問題？\n破解關鍵點：芥花油能吃嗎？\n當然是可以的！這篇關於芥花油的謠言涵蓋了多種錯誤資訊，可以說是謊話連篇，比微醺梅酒小時候看的鬼話連篇還可怕（咦？這樣是不是透露出年紀了）。好想知道芥花油到底得罪了誰，居然會成為不實謠言的主角，實在是太可憐了。\n芥花油有兩種，但絕對不是用有毒蕓苔子萃取的！\n微醺梅酒雖然不是油品專家，但是我們的衛生福利部食品食品藥物管理署針對芥花油提供了詳細的解說；芥花油其實有兩種，用英文名稱比較好分辨。一種是用芥花籽（Rapeseed）壓榨後取得的芥花籽油（Rapeseed oil），這種傳統的芥花籽油含有較多的芥酸（erucic acid），不適合人類食用，所以多半拿來使用製作飼料。\n人吃的芥花籽油就是謠言提到的芥花油（Canola oil），Canola確實是低酸加拿大油（Canada Oil Low Acid）的簡稱，但原料並不是像謠言說的使用「經過基因改造有毒的蕓苔子（Rape）」，真正的來源是使用品種改良的十字花科油菜(Brassica Napus L.及B. Campestris L.)的種子經過精煉、脫色、脫臭、壓榨而成。\n而且目前沒有科學研究證明人類吃的芥花油（Canola oil），會對人體造成危害，當然歐洲也沒有禁止使用芥花油，就連加拿大駐台北貿易辦事處也在官網發佈聲明，指出謠言說法並沒有科學根據，也並非事實，希望民眾不要因此受騙。\n至於謠言說芥花油就是芥子氣（mustard gas）的原料，微醺梅酒真的是無言到不知該說什麼才好，白眼翻到天靈蓋！不是有同一個「芥」就表示它們有關係，芥子氣之所以稱為芥子氣，是因為這種毒氣的氣味和芥末（mustard）相似，所以才如此稱呼，現在就等著看下次會不會有謠言說：「芥末有毒！因為它就是芥子氣的原料！」微醺梅酒直接給他87分！\n那油品用己烷萃取是真的嗎？\n澄清芥花油到底能不能吃之後，應該很多人看到「再用己烷粹取高溫提鍊而得」這句話，腦中又開始冒出很多疑問，畢竟「己烷」這個名詞對一般大眾來說很陌生，很容易就想偏，認為是壞東西，所以微醺梅酒要來解釋一下啦！\n食用油脂的製作有兩個必經程序，一是「油脂抽取」，可用壓榨法或是萃取法，二是「油脂精製」，而「己烷」就是在油脂抽取過程之萃取法使用的溶劑，所以是沒有問題的。根據衛生福利部食品藥物管理署的解釋，油脂抽取的萃取法會先將原料壓成片狀，蒸煮加熱過後，再用熱的溶劑，也就是己烷進行萃取，己烷溶出油脂之後，再加熱揮發去除溶劑己烷。\n利用上述的萃取法，萃取出來的油脂較為完整，當然食藥署也有制定「加工助劑衛生標準」，規範食用油脂萃取所使用的溶劑和溶劑殘留量，所以只要廠商乖乖照規矩來、政府嚴格把關檢驗，其實我們是不需要擔心的。\n突然發現最近關於油品的謠言蠻多的啊，今天只是第一發，請各位持續關注蘭姆酒吐司，尤其是有收到「多數人吃的油是『化學油』」的朋友們，接下來就輪到它了！\n\n詐騙電話愛用款～「響一聲就掛」、「+」開頭來電別接也別回撥！\n\n噁！空心菜藏水蛭？吃了會駕鶴西歸？\n\n嚇死寶寶囉～名片問路搶劫謠言正夯！你被騙了嗎？\n\n\n\n\n假好心or真有其事的社會吐司(2017年2月13日)"],["topImageUrl","http://www.rumtoast.com/wp-content/uploads/2017/03/芥花油謠言.jpg"],["error",null]]}]}],["createdAt","2017-07-09T13:06:05.456Z"]]}]]},{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",1],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",1],["user",{"__iterable":"Map","data":[["id","j4S8C_MX51zvJtjUgB9wf9uyK6OrU9RxdlZNRzeG_SpwaVcvs"],["name","深沉的芬園艾瑟兒"],["avatarUrl",null],["level",0]]}],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","Page not found ~ Fractal Enlightenment"],["url","http://fractalenlightenment.com/…/432hz-coming-back-to-natu…"],["summary","Pin\n\n\n\nOOPS... Wrong Planet!Sorry, that page never returned from a trip to The Big Red. You can either back to the home page and search again by using the button below or scroll down to browse our latest posts!\nTake me home\n\n\n\n\nBrowse Our Latest Posts\n\n\n \n \n \n Spirituality \n \n \n \n 5 Signs Your Spiritual Journey is Progressing\n \n \n\n \n\"A new spiritual awakening is occurring in human culture, an awakening brought by a critical mass of individuals who experience their lives...\n \n Read more\n \n \n \n \n\n \n \n \n \n Conscious Parenting \n \n \n \n 4 Old School Parenting Tactics Conscious Parents are Breaking The Mold on\n \n \n\n \n\"A conscious parent is not one who seeks to fix her child, or seek to produce or create the 'perfect' child. This...\n \n Read more\n \n \n \n \n\n \n \n \n \n Spirituality \n \n \n \n Becoming the Laughing Buddha: How to Invite Humor to your Spiritual Journey\n \n \n\n \nLegend has it, that if you come across a laughing Buddha statue, you should rub his tummy. Apparently, your wishes will be...\n \n Read more\n \n \n \n \n\n \n \n \n \n Life \n \n \n \n Has Your Awakening Awakened these “Spiritual Powers”\n \n \n\n \n\"There has been a revolution in how we perceive the body what appears to be an object, a three-dimensional anatomical structure is...\n \n Read more\n \n \n \n \n\n \n \n \n \n Life \n \n \n \n Destiny Dynamics: The Art of Living Life to the Nth Degree\n \n \n\n “Not everyone has a destiny; only the hero who has plunged to touch it, and has come up again ~ with a ring.” ~...\n \n Read more\n \n \n \n \n\n \n \n \n \n Inspirational \n \n \n \n 4 Ways to Put Yourself in the Power Position of Your Life\n \n \n\n \n\"The secret of the universe really is minding your own business. What we mean by that is-don't get so involved in the...\n \n Read more\n \n \n \n \n\n \n \n \n \n Self-development \n \n \n \n Five Common Illusions to Let Go Of\n \n \n\n \n“I walk down the street. There is a deep hole in the sidewalk. I fall in. I am lost… I am...\n \n Read more\n \n \n \n \n\n \n \n \n \n Life \n \n \n \n What Does it Mean to Be “Really” Awake?\n \n \n\n \nThey say this is the age of awakening. People everywhere are awakening to the hunger for knowledge. Now more than ever, we...\n \n Read more\n \n \n \n \n\n \n \n \n \n Life \n \n \n \n Time, Space and Tennis\n \n \n\n \nOur perception of time is a very slippery thing. I refer to it as a \"sticky fluid\". We breeze through some moments...\n \n Read more\n \n \n \n \n\n \n \n \n \n Issues \n \n \n \n How Ego Turns Your Spiritual Process into Manipulation\n \n \n\n \n\"Let go of who you think you are supposed to be and be who you are.\" ~ Brene Brown\n\n\n\n \n Read more\n \n \n \n \n\n \n \n \n \n Self-Actualization \n \n \n \n 4 Signs Your Ego is Dissolving\n \n \n\n \n\"The biggest ego trip going is trying to get rid of your ego. And the joke of it all is that your...\n \n Read more\n \n \n \n \n\n \n \n \n \n Self-development \n \n \n \n 4 Empowering Ways to Become the World\n \n \n\n \n“I saw that my life was a vast glowing page and I could do anything I wanted.” ~ Jack Kerouac\n\n\n\n \n Read more\n \n \n \n \n\n Load more"],["topImageUrl","https://cdn.fractalenlightenment.com/wp-content/uploads/2018/11/20180813a35880b1-e603-55c1-b673-7c2c70e2adb8-1.jpg"],["error",null]]},{"__iterable":"Map","data":[["title","Error 404 (Not Found)!!1"],["url","https://play.google.com/store/apps/details…"],["summary","404. That’s an error.The requested URL was not found on this server. That’s all we know."],["topImageUrl",""],["error",null]]},{"__iterable":"Map","data":[["title",""],["url","https://itunes.apple.com/us/app/432-player/id633600716…"],["summary",""],["topImageUrl",""],["error",null]]},{"__iterable":"Map","data":[["title","免費音樂編輯軟體Audacity"],["url","http://blog.xuite.net/yh96301/blog/50904600"],["summary","Audacity 是一套免費、中文化、跨平台、開放原始碼、功能強大的聲音編輯軟體，目前已經更新為2.3.1版。這個程式可用於剪輯音樂、合併音樂、錄音、去除人聲、去除雜音…等操作，支援匯入與匯出 AIFF、WAV、MP3、Ogg Vorbis、FLAC、MOV、WMA、M4A、AC3等聲音檔案格式，關於Audacity下載與安裝的方法敘述如下：\n使用這個軟體編輯聲音檔案，必須先安裝Lame外掛程式，才能將檔案儲存為MP3格式，安裝的方法詳見：Audacity 2.0.2安裝Lame。\n1.連接到官方網站，點選「Download Audacity」。\n2.點選「Audacity for Windows」，如果你的作業系統不是Windows，自行選擇合適的版本。\n\n3.點選「Audacity 2.3.1 installer」。\n\n4.點選「Audacity Windows installer」，下載安裝版本；依個人需要，也可以點選「Audacity Windows Portable」，下載免安裝版本。\n\n5.點選「儲存檔案」。\n\n6.下載完成以後，開啟檔案總管，對著下載的檔案連續按兩下滑鼠左鍵，安裝audacity。\n\n7.使用預設的語言「繁體中文」，直接點選「確定」。\n\n8.點選「下一步」。\n\n9.出現安裝前的重要訊息說明，點選「下一步」。\n\n10.使用預設的安裝路徑，點選「下一步」。\n\n11.點選「下一步」，在桌面建立捷徑圖示。\n\n12.點選「安裝」。\n\n13.出現閱讀重要訊息的提示，點選「下一步」。\n\n14.點選「完成」，啟動Audacity。\n\n15.勾選「啟動時不再顯示本視窗」，點選「確定」。\n\n16.Audacity開啟畫面如下圖所示，可以開始編輯聲音檔案。\n\n17.關於Audacity的使用詳見：\nAudacity 2.2.2混音。\nAudacity 2.2.2錄音。\nAudacity 2.2.2錄製電腦播放的聲音。\nAudacity 2.0.6安裝FFmpeg外掛程式。\nAudacity 2.0.5淡入與淡出。\nAudacity 2.0.3變更節拍。\nAudacity 2.0.3變更音調。\nAudacity 2.0.3調整音樂的低音、高音與音量。\nAudacity 2.0.3合併音樂。\nAudacity 2.0.3多重剪輯音樂。\nAudacity 2.0.3剪輯音樂。\nAudacity 2.0.3去雜音。\nAudacity 2.0.2去除人聲。\nAudacity 2.0.2安裝Lame"],["topImageUrl","https://blog.xuite.net/yh96301/blog/50904600/cover600.jpg"],["error",null]]},{"__iterable":"Map","data":[["title","用 Audacity批量转换 432hz音乐的方法"],["url","http://v.youku.com/v_show/id_XMTM1NjQxMDI4MA==.html"],["summary","很抱歉，由于您的浏览器版本太低\n 暂时无法观看\n \n \n \n 您可以选择一下任意方式继续观看\n \n 1、换个浏览器试试(建议使用chrome浏览器)\n 2、下载优酷PC客户端继续观看\n 3、使用手机扫码观看\n \n \n \n \n \n \n \n \n \n 错误代码：10000\n \n \n \n 因版权原因，请使用优酷APP扫码至手机/Pad观看\n 给您带来不便非常抱歉\n \n \n \n 用手机扫二维码观看\n \n \n \n \n \n \n \n \n \n \n \n \n \n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\t下载\n\n\t\n\t\t\t下载视频到电脑\n\t\t\n\t\n\t\n\t\t\n\t\t\t\t将启用PC客户端下载视频\n\t\t\t\t下载本视频\n\t\t\t\t下载全集\n\t\t\n\t\n\t\n\t\t用 Audacity批量转换 432hz音乐的方法\n\t\n\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\t收藏\n\t\n\t\n\t\t\n\t\t\t\n\t\t\n\t\t手机看\n\n\t手机扫码观看视频\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t用优酷移动APP扫码\n\t\t\t\t\t或用微信扫码观看\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t 二维码2小时有效\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t没有客户端？扫码马上安装\n\t\t\t\t\tIPHONE / 安卓\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\t用 Audacity批量转换 432hz音乐的方法\n\t\n\t\n\n\t\n\t\t\n\t\t\t\n\t\t\n\t\t举报\n\n\t举报此视频\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t违法违规\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t暴恐\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t血腥暴力\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t色情低俗\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t垃圾信息\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t未成年人有害\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t问题描述（必填）\n\t\t\t\t\t\t\t\n\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\n\t\t举报\t\t\n\t\n\t\n\n\t\n\t\t\n\t\t\t\n\t\t\n\t\t播放器\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t使用HTML5播放器\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t使用FLASH播放器\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\n \n \n \n \n \n \n \n 播放列表\n \n \n\n \n \n \n \n\t\t\t\t\t \n \n \n \n \n \n \n \n \n 雅歌者\n \n \n \n 订阅\n \n \t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t用 Audacity批量转换 432hz音乐的方法\n\t\t\t\n\t\t\t\n\t\t\n\n \n \n \n \n \n \n \n \n \n \n\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t06:59\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tWorship Guitar Effects 101\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t03:37\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tWaves GTR Solo Blues Demo\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t02:27\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tTommy Emmanuel records his guitar with Apogee ONE and GarageBand\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t06:09\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tMainStage 3 - Worship Guitar Essentials\n\t\t\t热度 29\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t02:01\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tLive Looping with Apogee GiO & MainStage\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t02:26\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tApogee GiO and GarageBand '11\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t01:11\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tCrazy sound by main stage 3\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t05:35\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tLi'L Bitch + T-Rex Soulmate + Les Paul\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t03:29\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tT-Rex Soulmate into 50 watt Plexi '74, pre-PI MV + tube driven effect loop mods\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t05:34\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tEric Clapton & George Harrison - While My Guitar\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t07:29\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tEric Clapton - Have You Ever Loved A Woman (Hyde Park 1997)\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t68:03\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tSteve Vai单块演示\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t05:53\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tONE DAY Live ( RARE studio clip + original audio recording)-GARY MOORE\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t03:29\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tT-Rex Soulmate into 50 watt Plexi '74, pre-PI MV + tube driven effect loop mods\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t08:09\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t吉他背带锁扣测评\n\t\t\t热度 30\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t05:29\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t（测评）带保护壳的humbuckers拾音器 VS 裸露humbuckers拾音器\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t14:26\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tGibson Les Paul吉他旋钮教程——利用旋钮控制你的音色（非常好的教程）\n\t\t\t热度 34\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t01:26\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tGibson Les Paul的拾音器高度调节\n\t\t\t热度 29\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t07:29\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tGibson Les Paul吉他的琴颈调节方法\n\t\t\t热度 32\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t13:24\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t大调blues进行中和声音阶的运用\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t02:20\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t在les paul上弹Yngwie Malmsteen - Trilogy Suite\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t05:08\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t在 Gibson les paul上弹Yngwie Malmsteen --Zakk+ Yngwie style\n\t\t\t热度 29\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t04:47\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t在 Gibson les paul上弹Yngwie Malmsteen´s Blue\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t10:17\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tAxe Fx vs Kemper vs Bias vs Real Amp through Real cabinet ( High Gain - Clean )\n\t\t\t热度 31\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t04:34\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t吉他软件效果器对比- Ampkit vs Amplitube vs BIAS vs BIAS FX vs JamUp Pro vs Tonestack\n\t\t\t热度 34\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t03:00\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t慢布鲁斯Tone Lab 9 - Gibson Les Paul Slow Blues Style\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t05:54\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tMy Gibson Les Paul is crying...\n\t\t\t热度 29\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t08:49\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\tTwo Notes Torpedo Studio - Steve Stevens\n\t\t\t热度 24\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t14:41\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t用 Audacity批量转换 432hz音乐的方法\n\t\t\t热度 36\n\t\t\n\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t13:04\n\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t半空心吉他重新布线（2）Rewiring a Semi-Hollow Guitar, Part Two\n\t\t\t热度 24"],["topImageUrl","https://vthumb.ykimg.com/054204085618B5AD6A0A4804D7C85F38"],["error",null]]},{"__iterable":"Map","data":[["title","Roel's World Blog » Real-Time 432 Auto-Pitching Music Players"],["url","http://www.roelhollander.eu/en/432-tuning/432-music-players/"],["summary","Approx. reading time: 8 minutesREAL-TIME 432 AUTO-PITCHING MUSIC PLAYERS(For: Windows, Mac OS X, Linux, iPhone, Android) GENERAL INFORMATION:For all who have some difficulties working with sound editors, maybe a music player with real-time pitch control provides the solution. If you just like to listen to your music from your PC or Laptop, iPhone and Android, using one of the applications listed below will provide the easiest method to get in tune with Concert Pitch 432Hz!IMPORTANT! – Keep in mind that the players mentioned in this article will not detect the Concert Pitch of the source. When another Concert Pitch is used then the 440Hz standard, the music will nonetheless be pitched in the same way as if it was in 440Hz. The real-time auto-pitching instructions as mentioned in this blog article only work for 440Hz tuned/pitched audio files. NOTE! – Do keep in mind that the change of Concert Pitch alone is not “432 Tuning”. 432-Tuning is Concert Pitch A4=432Hz + “Pythagorean Temperament”. With most Western music (and instruments played) the “Twelve Tone Equal Temperament” (12-TET) is used. These players will NOT be able to make real-time changes to the temperament! If you like to read more about the difference between “Concert Pitch” and “Tuning System” then you can find more info here.With some players (VLC and Foobar) there is the option to adjust the rate. If you can adjust the rate, then use this option instead of pitching down. With the “adjust rate” option you change the speed (both pitch and tempo) so there will be no resolution loss. This method is the equivalent of slowing down a turntable and preferable over the pitch-change option! The optimal speed (rate) is set to 0.981818 (VLC) or changed with -1.818% (Foobar). If the player/plugin you use can not use more then 2 digits behind the decimal point, then use a rate of -1.82% (A4=431.998Hz) or -1.81% (A4=432,036Hz), a “neglectable difference” (a difference that most people won’t be able to hear, actually). -1.8% will set A4 to 432,080Hz, less then 0.1Hz difference, still very close. Players / plugins, that use cents or semitones should be set to pitched down with: -31.76665363342977 cents or -0.3176665363342977 semitones. If case you need to “round it off”, use as many digits behind the decimal point as possible. The smaller the number of digits behind the decimal point, the less accurate the result. If for for example use -31 cents / -0.31 semitones, then A4 becomes 432,191Hz, as with -32 cents / -0.32 semitones A4 becomes 431,942Hz. If you are looking for a hardware auto-tuning high-end Hi-Fi music player, then do read the Roel’s World article about the EVO 432 Music Server!PLAYERS FOR [ Windows | Mac OS X | Linux | iPhone | Android ] PLAYERS FOR WINDOWS#1: VLC PLAYER – Sets A4=432Hz (freeware) I think the best freeware video and audio player available for all platforms (Windows, OSX and Linux) is the VLC player. Read more about it in this Roel’s World article!432 PLAYER “432HZ” FOR WINDOWS 7 (freeware) – by OphirOphir used the Open Source code by Alambic WPF Music Player, and modified it change the Concert Pitch to A=432Hz.More information & Download at: http://ophirpaztao.wix.com/432player (bottom of the website, click on the player image to download).FOOBAR 2000 (freeware)NOTE: Personally I would recommend the VLC player instead though, it is more accurate and simply sounds better!Foobar use to be the preferred software to use several years back. It was one of the first players for Windows that made listening to music pitched down to 432Hz in real-time relatively easy in reasonable sound quality. You did not needed to use sound editors anymore to manually pitch-shift your music collection anymore, a huge time-saver for most people.INTERESTING FEATURE: You can install this application also on a portable device, like for example a Flash Drive. Then you can play the music on another PC/Laptop, without having to install the program on another PC/Laptop first.But, for those who do prefer using Foobar, follow these instructions: Download the player install here: http://www.foobar2000.org/Download the “SoundTouch” plugin: foo_dsp_soundtouch (source site: (HAK) server).Now … Install Foobar.Unzip the SoundTouch plugin and place it in the map “C:\\Program Files\\foobar2000\\components\\“.After installing the player and the plugin, open under “File” > “Preferences“. A control menu will pop-up.Under “Playback” you can find the “DSP manager“. Activate SoundTouch DSP (see image below).Select the SoundTouch plugin and configure (button above the Active DSPs list). Select the “Rate adjust” option and move the slider -1.82% (see image below). If your mouse movements are not precise, use the arrow keys on your keyboard to get it right. Click “ok”, then on “apply” and you’re all ready to start listening. FOOBAR & YOUTUBEFor those who prefer using Foobar for watching and/or listening to Youtube videos: Foobar 2000 can be setup to deal with Youtube streams as well.To do so you need to download the Youtube component for Foobar 2000 here: http://fy.3dyd.com/download/. You can choose from 3 different versions, a standard version and 2 preconfigured versions (detailed information can be found on the fv.3dvd.com site). The difference is in default component settings. Standalone variant configured to play best quality from the formats which foobar2000 can play out of the box and without problems. Variant preconf_audio configured to use wider set of formats which can be played without problems only using 3rd party plugins which it contains. Variant preconf_video also has needed DirectShow filers to be able to play video without need to install them in the system.INSTALLING THE YOUTUBE COMPONENTGo to the Components page.Click the “Install…” button and select the component archive, or simply drag it to the list.Press “OK”, you will be prompted to restart foobar2000 in order to load the newly installed component.WINAMP (freeware)For WinAmp you can find a couple of plugins too. My experiences with these WinAmp plugins are less positive then the Foobar + SoundTouch plugin. I have tested 3 plugins for WinAmp, but noticed some “clicks” in the sound. Maybe those plugings work better with other version of WinAmp then I use. Nevertheless, you can give it a try if you like, here are the links:Chronotron: http://www.winamp.com/plugin/chronotron-v3-5a/138562PaceMaker: http://www.winamp.com/plugin/pacemaker/12689Fourier Pitch Tempo Control: http://www.winamp.com/plugin/fourier-pitch-tempo-control/130624NOTE: I personally would strongly recommend the VLC player instead of WinAmp when using Windows!PLAYERS FOR [ Windows | Mac OS X | Linux | iPhone | Android ] PLAYERS FOR OSX#1: VLC PLAYER – Sets A4=432Hz (freeware)The best freeware video and audio player available for all platforms (Windows, OSX and Linux) is the VLC player (in my opinion). Read more about it in this article!NEUTRINO + AU PITCHDownload from: http://www.machinecodex.com/neutrino/ (30-days trial before purchase) In the ‘inspector’ window click the plus (+) at the bottom under ‘Fx Chain‘, choose AUPitch, click OK, then enter -31.7667 into the ‘cents’ field, click the x to close. To save this preset, click the file icon to the right of the plus (+), name your preset ‘432Hz’ or something and click OK, it is now saved. You may have to reselect this preset when Neutrino restarts (Instructions by Cole Hayley, using Mac OSX 10.6.8, Snow Leopard). VOX + AU PITCHDownload from: http://www.macupdate.com/app/mac/24852/vox NOTE: this setup worked for older versions of this player (see 4rd image above), the latest versions do not seem to have this option anymore.PLAYERS FOR [ Windows | Mac OS X | Linux | iPhone | Android ] PLAYERS FOR LINUX#1: VLC PLAYER – Sets A4=432Hz (freeware)The best freeware video and audio player available for all platforms (Windows, OSX and Linux), for Linux users VLC Player is the best option. ALTERNATIVE APPROACH FOR LINUXPersonally I would suggest you use VLC when using Linux (it’s the most accurate player for Linux so far).But, you can run Foobar (or WinAmp if you wish) with Linux too. This is possible due to “Wine” (a compatibility layer capable of running Windows applications). More about Wine (and dowloads) at www.winehq.orgI personally like to use “PlayOnLinux“, it’s freeware and allows you to easily install (some, not all) Windows applications. More about PlayOnLinux (and downloads) at: www.playonlinux.com. An alternative for “PlayOnLinux” is “Crossover” by “www.codeweavers.com“. This application is not for free though. NOW … Install Wine (and PlayOnLinux/Crossover if you like). I will not provide instructions on how to install Wine and PlayOnLinux / Crossover. If you are a Linux user, you most likely already know how to anyway. Install Foobar (standard, not portable) on a “virtual drive”.Unzip the SoundTouch plugin.Open the application directory of the “virtual drive” and place the SoundTouch plugin in “..\\foobar2000\\components\\“. Follow the instructions from “step 3” as described at the Foobar install for Windows. PLAYERS FOR [ Windows | Mac OS X | Linux | iPhone | Android ] PLAYERS FOR iPHONE / iPADPLAYERS FOR [ Windows | Mac OS X | Linux | iPhone | Android ] PLAYERS FOR ANDROIDMAPLE PLAYER (freeware) – by SQR5After installing Maple Player, open the tab called “Pitch“.Click on the pencil icon on the top-right side to open the “pitch editor”.Type -0.32 (or -0.31, what ever sounds best to you) and press “ENT” (enter) to set the new pitch.Press the “back key” on your phone to close the “pitch editor” and you are all set to listen to your music re-pitched."],["topImageUrl","https://www.roelhollander.eu/wp-content/uploads/432tuninginfo_1.jpg"],["error",null]]}]}],["text","【轉換MP3音頻從440Hz轉換為432Hz讓自己身心趨向和諧的方法】\n　\n國際標準對於MP3的音頻設定標準是設定為440Hz, 所以現行MP3的音樂格式都是440Hz, 但是440Hz卻是對人體有害的音頻, 大家可以從本文附上的圖片看到藉由沙子來測試在受到不同音頻440Hz以及432Hz音頻之後表現出來的差異, 「440Hz」造就的是一個比較「紊亂」的波紋, 但「432Hz」音頻造就的是一個相對「健康」的紋路。\n　\n音頻造就的效果, 也會對我們身體的每一個「細胞」造成影響, 特定音頻所造就的「好的波紋」會帶給細胞好的訊息, 不只身體會比較「健康」, 自己的心靈也會比較「平靜而趨向光明」, 因此音頻對人的身心影響很大。\n　\n轉換音頻可以透過以下的方式去轉換, 有興趣的人可以自己去轉換, 手機可以直接下載「432 Player - Free Pure Sound」這個APP就可以直接做轉換。若要轉換檔案可以下載使用「Audacity」的這套軟體, 若在電腦上可以使用「foobar2000的套件功能SoundTouch」直接在聽的時候轉換，也可以自己去聽聽看440Hz以及432Hz音頻差異點在哪裡。\n　\n432赫茲, 即將回歸自然 : \nhttp://fractalenlightenment.com/…/432hz-coming-back-to-natu…\n\n手機可直接將音頻轉成432Hz的APP 《432 Player - Free Pure Sound》 : \nFor Android :\nhttps://play.google.com/store/apps/details…\nFor iPhone :\nhttps://itunes.apple.com/us/app/432-player/id633600716…\n　\nAudacity 教學文件 : \nhttp://blog.xuite.net/yh96301/blog/50904600\nAudacity多個檔案一起轉換432hz音樂的方法 : \nhttp://v.youku.com/v_show/id_XMTM1NjQxMDI4MA==.html\n\n直接使用foobar2000的SoundTouch功能播放432Hz音樂(請參考文中有關foobar2000的部分, 不懂英文者可使用Google翻譯): \nhttp://www.roelhollander.eu/en/432-tuning/432-music-players/\n　\n最後也願所有的地球人都能夠透過這樣的方式, 讓自己的身心更趨向於和諧與平衡, 祝福大家。"],["id","jof3dgh81jcn"],["createdAt","2019-05-17T11:44:34.428Z"]]}],["reply",{"__iterable":"Map","data":[["id","bNGZ5mwBqwaEkHKw7q13"],["user",{"__iterable":"Map","data":[["id","ZtFc5mwBqwaEkHKwHaja"],["name","小安"],["avatarUrl","https://www.gravatar.com/avatar/a7c348b98265e26aec0d1637142fc3a6?s=100&d=identicon&r=g"],["level",8]]}],["type","OPINIONATED"],["text","對於兩種音頻的部分，社會尚無共識。"],["reference","432Hz 與 440Hz 的優劣，無論是在學理上、心理學上都無定論。\nhttps://m-acoustics.net/zh-hant/l07/"],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","432 Hz vs. 440 Hz 的世紀之爭！哪一個才是完美之音？ – 魔音大師"],["url","https://m-acoustics.net/zh-hant/l07/"],["summary","聲音，與我們日常生活息息相關，卻經常被忽略。聲音不重要嗎？在《 The Secrets of Sound Healing 》一書中，作者強納森．高曼（Jonathan Goldman）研究指出，從古代的埃及人、澳洲的原住民、非洲的不同部落，到美洲的印地安人，都有「聲音創造世界」的神話傳說。印度有句諺語說：「世界是聲音。」頂尖物理科學家加來道雄曾說：「每樣事物都是音樂。」現代物理學家也已經告訴我們：世界其實是由以不同速率在振動的細弦所組成。可惜人類的聽力很差，一般大約只能聽到從 16 赫茲到 2 萬赫茲之間的聲音。而詹尼博士的研究，不僅把無形變有形，讓我們得以看到聲音的模樣，帶來全新的視覺震撼，更值得探索的是，世界既然充滿了聲波（振動），聽不到的「超音波」不知還有多少，更別說還有各種有機和無機的物體所發出的聲音，例如，宇宙的聲音。ISO 之所以將 440Hz 定為標準音高，與其說 440Hz 是最完美的音頻，不如說它僅是代表當時音樂趨勢下的一個指標，或是當時音樂權威國家的喜好標準，就像 1900 年之前，音樂圈以古典樂曲為主，因而音樂家更偏好採用 432Hz。440Hz 雖然是目前公認的標準音高，但卻不一定是屬於你的完美之音。完美之音沒有標準，而是取決於每個人對聲音的認識與喜好。最後，我們挑選了兩首轉換為 432Hz 的樂曲跟大家分享，大家不妨去跟原曲進行比對，或許你也會有全新的感受！"],["topImageUrl","https://m-acoustics.net/wp-content/uploads/2018/10/L07.jpg"],["error",null]]}]}],["createdAt","2019-08-31T07:35:43.489Z"]]}]]},{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",1],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",1],["user",{"__iterable":"Map","data":[["id","j4S8C_uGtKXemHILwZZSjmoIpAg8BIcwa5RTU04WhFqgpYAgs"],["name","羞澀的高樹奧蒂列特"],["avatarUrl",null],["level",0]]}],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","KRACK Attacks: Breaking WPA2"],["url","https://www.krackattacks.com/"],["summary","Introduction\n\t\tWe discovered serious weaknesses in WPA2, a protocol that secures all modern protected Wi-Fi networks.\n\t\tAn attacker within range of a victim can exploit these weaknesses using key reinstallation attacks (KRACKs).\n\t\tConcretely, attackers can use this novel attack technique to read information that was previously assumed to be safely encrypted.\t\n\t\tThis can be abused to steal sensitive information such as credit card numbers, passwords, chat messages, emails, photos, and so on.\n\t\tThe attack works against all modern protected Wi-Fi networks.\n\t\tDepending on the network configuration, it is also possible to inject and manipulate data.\n\t\tFor example, an attacker might be able to inject ransomware or other malware into websites.\n\t\t\n\t\tThe weaknesses are in the Wi-Fi standard itself, and not in individual products or implementations.\n\t\tTherefore, any correct implementation of WPA2 is likely affected.\n\t\tTo prevent the attack, users must update affected products as soon as security updates become available.\n\t\tNote that if your device supports Wi-Fi, it is most likely affected.\n\t\tDuring our initial research, we discovered ourselves that Android, Linux, Apple, Windows, OpenBSD, MediaTek, Linksys, and others, are all affected by some variant of the attacks.\n\t\tFor more information about specific products, consult the database of CERT/CC, or contact your vendor.\n\t\t\n\t\tThe research behind the attack will be presented at the Computer and Communications Security (CCS) conference, and at the Black Hat Europe conference. Our detailed research paper can already be downloaded.\n\n\t\t\n\t\t\n Demonstration\n\t\tAs a proof-of-concept we executed a key reinstallation attack against an Android smartphone.\n\t\t\tIn this demonstration, the attacker is able to decrypt all data that the victim transmits.\n\t\t\tFor an attacker this is easy to accomplish, because our key reinstallation attack is exceptionally devastating against Linux and Android 6.0 or higher.\n\t\t\tThis is because Android and Linux can be tricked into (re)installing an all-zero encryption key (see below for more info).\n\t\t\tWhen attacking other devices, it is harder to decrypt all packets, although a large number of packets can nevertheless be decrypted.\n\t\t\tIn any case, the following demonstration highlights the type of information that an attacker can obtain when performing key reinstallation attacks against protected Wi-Fi networks:\n\t\t\n\t\t\n\t\tOur attack is not limited to recovering login credentials (i.e. e-mail addresses and passwords).\n\t\t\tIn general, any data or information that the victim transmits can be decrypted. Additionally, depending on the device being used and the network setup, it is also possible to decrypt data sent towards the victim (e.g. the content of a website).\n\t\t\tAlthough websites or apps may use HTTPS as an additional layer of protection, we warn that this extra protection can (still) be bypassed in a worrying number of situations.\n\t\t\t\n\t\t\tFor example, HTTPS was previously bypassed in non-browser software,\n\t\t\tin Apple's iOS and OS X,\n\t\t\tin Android apps,\n\t\t\tin Android apps again,\n\t\t\tin banking apps,\n\t\t\tand even in VPN apps.\n\t\t\t\n\n\t\t\n\t\t\t\n\t\tDetails\n\t\t\n\t\t\t\n\n\t\t\tOur main attack is against the 4-way handshake of the WPA2 protocol.\n\t\t\tThis handshake is executed when a client wants to join a protected Wi-Fi network, and is used to confirm that both the client and access point possess the correct credentials (e.g. the pre-shared password of the network).\n\t\t\tAt the same time, the 4-way handshake also negotiates a fresh encryption key that will be used to encrypt all subsequent traffic.\n\t\t\tCurrently, all modern protected Wi-Fi networks use the 4-way handshake.\n\t\t\tThis implies all these networks are affected by (some variant of) our attack.\n\t\t\tFor instance, the attack works against personal and enterprise Wi-Fi networks, against the older WPA and the latest WPA2 standard, and even against networks that only use AES.\n\t\t\t\n\t\t\tAll our attacks against WPA2 use a novel technique called a key reinstallation attack (KRACK):\n\t\t\n\t\t\tKey reinstallation attacks: high level description\n\t\t\tIn a key reinstallation attack, the adversary tricks a victim into reinstalling an already-in-use key.\n\t\t\tThis is achieved by manipulating and replaying cryptographic handshake messages.\n\t\t\tWhen the victim reinstalls the key, associated parameters such as the incremental transmit packet number (i.e. nonce) and receive packet number (i.e. replay counter) are reset to their initial value.\n\t\t\tEssentially, to guarantee security, a key should only be installed and used once.\n\t\t\tUnfortunately, we found this is not guaranteed by the WPA2 protocol.\n\t\t\tBy manipulating cryptographic handshakes, we can abuse this weakness in practice.\n\t\t\n\t\t\tKey reinstallation attacks: concrete example against the 4-way handshake\n\t\t\tAs described in the introduction of the research paper, the idea behind a key reinstallation attack can be summarized as follows.\n\t\t\tWhen a client joins a network, it executes the 4-way handshake to negotiate a fresh encryption key.\n\t\t\tIt will install this key after receiving message 3 of the 4-way handshake.\n\t\t\tOnce the key is installed, it will be used to encrypt normal data frames using an encryption protocol.\n\t\t\tHowever, because messages may be lost or dropped, the Access Point (AP) will retransmit message 3 if it did not receive an appropriate response as acknowledgment.\n\t\t\tAs a result, the client may receive message 3 multiple times.\n\t\t\tEach time it receives this message, it will reinstall the same encryption key, and thereby reset the incremental transmit packet number (nonce) and receive replay counter used by the encryption protocol.\n\t\t\tWe show that an attacker can force these nonce resets by collecting and replaying retransmissions of message 3 of the 4-way handshake.\n\t\t\tBy forcing nonce reuse in this manner, the encryption protocol can be attacked, e.g., packets can be replayed, decrypted, and/or forged.\n\t\t\tThe same technique can also be used to attack the group key, PeerKey, TDLS, and fast BSS transition handshake.\n\t\t\n\t\t\t\n\t\t\n\t\t\tPractical impact\n\t\t\t\t\t\t\n\t\t\tIn our opinion, the most widespread and practically impactful attack is the key reinstallation attack against the 4-way handshake.\n\t\t\tWe base this judgement on two observations.\n\t\t\tFirst, during our own research we found that most clients were affected by it.\n\t\t\tSecond, adversaries can use this attack to decrypt packets sent by clients, allowing them to intercept sensitive information such as passwords or cookies.\n\t\t\tDecryption of packets is possible because a key reinstallation attack causes the transmit nonces (sometimes also called packet numbers or initialization vectors) to be reset to their initial value.\n\t\t\tAs a result, the same encryption key is used with nonce values that have already been used in the past.\n\t\t\tIn turn, this causes all encryption protocols of WPA2 to reuse keystream when encrypting packets.\n\t\t\tIn case a message that reuses keystream has known content, it becomes trivial to derive the used keystream.\n\t\t\tThis keystream can then be used to decrypt messages with the same nonce.\n\t\t\tWhen there is no known content, it is harder to decrypt packets, although still possible in several cases (e.g. English text can still be decrypted).\n\t\t\t\n\t\t\tIn practice, finding packets with known content is not a problem, so it should be assumed that any packet can be decrypted.\n\t\t\t\n\t\t\t\n\t\t\tThe ability to decrypt packets can be used to decrypt TCP SYN packets.\n\t\t\tThis allows an adversary to obtain the TCP sequence numbers of a connection, and hijack TCP connections.\n\t\t\tAs a result, even though WPA2 is used, the adversary can now perform one of the most common attacks against open Wi-Fi networks: injecting malicious data into unencrypted HTTP connections.\n\t\t\tFor example, an attacker can abuse this to inject ransomware or malware into websites that the victim is visiting.\n\t\t\t\n\t\t\tIf the victim uses either the WPA-TKIP or GCMP encryption protocol, instead of AES-CCMP, the impact is especially catastrophic.\n\t\t\tAgainst these encryption protocols, nonce reuse enables an adversary to not only decrypt, but also to forge and inject packets.\n\t\t\tMoreover, because GCMP uses the same authentication key in both communication directions, and this key can be recovered if nonces are reused, it is especially affected.\n\t\t\tNote that support for GCMP is currently being rolled out under the name Wireless Gigabit (WiGig), and is expected to be adopted at a high rate over the next few years.\n\t\t\t\n\t\t\tThe direction in which packets can be decrypted (and possibly forged) depends on the handshake being attacked.\n\t\t\tSimplified, when attacking the 4-way handshake, we can decrypt (and forge) packets sent by the client.\n\t\t\tWhen attacking the Fast BSS Transition (FT) handshake, we can decrypt (and forge) packets sent towards the client.\n\t\t\tFinally, most of our attacks also allow the replay of unicast, broadcast, and multicast frames.\n\t\t\tFor further details, see Section 6 of our research paper.\n\t\t\t\n\t\t\tNote that our attacks do not recover the password of the Wi-Fi network. They also do not recover (any parts of) the fresh encryption key that is negotiated during the 4-way handshake.\n\t\t\t\n\t\t\tAndroid and Linux\n\n\t\t\tOur attack is especially catastrophic against version 2.4 and above of wpa_supplicant, a Wi-Fi client commonly used on Linux.\n\t\t\tHere, the client will install an all-zero encryption key instead of reinstalling the real key.\n\t\t\tThis vulnerability appears to be caused by a remark in the Wi-Fi standard that suggests to clear the encryption key from memory once it has been installed for the first time.\n\t\t\tWhen the client now receives a retransmitted message 3 of the 4-way handshake, it will reinstall the now-cleared encryption key, effectively installing an all-zero key.\n\t\t\tBecause Android uses wpa_supplicant, Android 6.0 and above also contains this vulnerability.\n\t\t\tThis makes it trivial to intercept and manipulate traffic sent by these Linux and Android devices.\n\t\t\t\n\t\t\tNote that currently 50% of Android devices are vulnerable to this exceptionally devastating variant of our attack.\n\n\t\t\tAssigned CVE identifiers\n\t\t\tThe following Common Vulnerabilities and Exposures (CVE) identifiers were assigned to track which products are affected by specific instantiations of our key reinstallation attack:\n\t\t\t\n\t\t\t\tCVE-2017-13077: Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake.\n\t\t\t\tCVE-2017-13078: Reinstallation of the group key (GTK) in the 4-way handshake.\n\t\t\t\tCVE-2017-13079: Reinstallation of the integrity group key (IGTK) in the 4-way handshake.\n\t\t\t\tCVE-2017-13080: Reinstallation of the group key (GTK) in the group key handshake.\n\t\t\t\tCVE-2017-13081: Reinstallation of the integrity group key (IGTK) in the group key handshake.\n\t\t\t\tCVE-2017-13082: Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it.\n\t\t\t\tCVE-2017-13084: Reinstallation of the STK key in the PeerKey handshake.\n\t\t\t\tCVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake.\n\t\t\t\tCVE-2017-13087: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.\n\t\t\t\tCVE-2017-13088: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.\n\t\t\t\n\t\t\tNote that each CVE identifier represents a specific instantiation of a key reinstallation attack. This means each CVE ID describes a specific protocol vulnerability, and therefore many vendors are affected by each individual CVE ID. You can also read vulnerability note VU#228519 of CERT/CC for additional details on which products are known to be affected.\n\t\t\t\n\t\t\n\t\t\n\t\tPaper\n\t\t\n\t\t\n\t\tOur research paper behind the attack is titled Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2 and will be presented at the Computer and Communications Security (CCS) conference on Wednesday 1 November 2017.\n\n\t\tAlthough this paper is made public now, it was already submitted for review on 19 May 2017.\n\t\tAfter this, only minor changes were made.\n\t\tAs a result, the findings in the paper are already several months old.\n\t\tIn the meantime, we have found easier techniques to carry out our key reinstallation attack against the 4-way handshake.\n\t\tWith our novel attack technique, it is now trivial to exploit implementations that only accept encrypted retransmissions of message 3 of the 4-way handshake.\n\t\tIn particular this means that attacking macOS and OpenBSD is significantly easier than discussed in the paper.\n\t\t\n\t\tWe would like to highlight the following addendums and errata:\n\t\t\n\t\tAddendum: wpa_supplicant v2.6 and Android 6.0+\n\t\t\n\t\tLinux's wpa_supplicant v2.6 is also vulnerable to the installation of an all-zero encryption key in the 4-way handshake.\n\t\tThis was discovered by John A. Van Boxtel.\n\t\tAs a result, all Android versions higher than 6.0 are also affected by the attack, and hence can be tricked into installing an all-zero encryption key.\n\t\tThe new attack works by injecting a forged message 1, with the same ANonce as used in the original message 1, before forwarding the retransmitted message 3 to the victim.\n\t\t\n\t\t\n\t\t\t\t\n\t\tAddendum: other vulnerable handshakes\n\t\tAfter our initial research as reported in the paper, we discovered that the TDLS handshake and WNM Sleep Mode Response frame are also vulnerable to key reinstallation attacks.\n\t\t\n\t\tSelected errata\n\t\t\n\t\t\tIn Figure 9 at stage 3 of the attack, the frame transmitted from the adversary to the authenticator should say \"ReassoReq(ANonce, SNonce, MIC)\" instead of \"ReassoResp(..)\".\n\t\t\tSection 3.1: figure 3 contains a simplified description of the state machine (not figure 2).\n\t\t\tSection 4.2: \"It is essential that the broadcast frame we replay is sent after (not before) the retransmission of group message 1\". A similar change should be made in Section 4.3: \"Again it is essential that the broadcast frame we want to replay is sent after (not before) the retransmission of group message 1\".\n\t\t\n\n\t\tCitation example and bibtex entry\n\t\tPlease cite our research paper and not this website (or cite both). You can use the following example citation or bibtex entry:\n\t\t\n\t\t\tMathy Vanhoef and Frank Piessens. 2017. Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2. In Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS). ACM.\n\t\t\t@inproceedings{vanhoef-ccs2017,\n author = {Mathy Vanhoef and Frank Piessens},\n title = {Key Reinstallation Attacks: Forcing Nonce Reuse in {WPA2}},\n booktitle = {Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS)},\n year = {2017},\n publisher = {ACM}\n}\n\t\t\n\t\t\n\t\t\n\t\t\t\n\t\tTools\n\t\tWe have made scripts to detect whether an implementation of the 4-way handshake, group key handshake, or Fast BSS Transition (FT) handshake is vulnerable to key reinstallation attacks.\n\t\tThese scripts are available on github, and contain detailed instructions on how to use them.\n\t\t\n\t\tWe also made a proof-of-concept script that exploits the all-zero key (re)installation present in certain Android and Linux devices.\n\t\tThis script is the one that we used in the demonstration video.\n\t\tIt will be released once everyone has had a reasonable chance to update their devices (and we have had a chance to prepare the code repository for release).\n\t\tWe remark that the reliability of our proof-of-concept script may depend on how close the victim is to the real network.\n\t\tIf the victim is very close to the real network, the script may fail because the victim will always directly communicate with the real network, even if the victim is (forced) onto a different Wi-Fi channel than this network.\n\t\t\t\n\t\t\n\t\t\n\n\t\t\n\n\t\tQ&A\n\n\t\t\t\n\t\t\t\tDo we now need WPA3?\n\t\t\t\tShould I change my Wi-Fi password?\n\t\t\t\tI'm using WPA2 with only AES. That's also vulnerable?\n\t\t\t\tYou use the word \"we\" in this website. Who is we?\n\t\t\t\tIs my device vulnerable?\n\t\t\t\tWhat if there are no security updates for my router or access point? Or if it does not support 802.11r?\n\t\t\t\tIs it sufficient to patch only the access point? Or to patch only clients?\n\t\t\t\tCan we modify an access point to prevent attacks against the client?\n\t\t\t\tHow did you discover these vulnerabilities?\n\t\t\t\tThe 4-way handshake was mathematically proven as secure. How is your attack possible?\n\t\t\t\tSome attacks in the paper seem hard\n\t\t\t\tIf an attacker can do a man-in-the-middle attack, why can't they just decrypt all the data?\n\t\t\t\tDoes an attacker to have be near your network in order to attack it?\n\t\t\t\tAre people exploiting this in the wild?\n\t\t\t\tShould I temporarily use WEP until my devices are patched?\n\t\t\t\tWill the Wi-Fi standard be updated to address this?\n\t\t\t\tIs the Wi-Fi Alliance also addressing these vulnerabilities?\n\t\t\t\tWhy did you use match.com as an example in the demonstration video?\n\t\t\t\tHow can these types of bugs be prevented?\n\t\t\t\tWhy the domain name krackattacks.com?\n\t\t\t\tDid you get bug bounties for this?\n\t\t\t\tHow does this attack compare to other attacks against WPA2?\n\t\t\t\tAre other protocols also affected by key reinstallation attacks?\n\t\t\t\tIs there a higher resolution version of the logo?\n\t\t\t\tWhen did you first notify vendors about the vulnerability?\n\t\t\t\tWhy did OpenBSD silently release a patch before the embargo?\n\t\t\t\tSo you expect to find other Wi-Fi vulnerabilities?\n\t\t\t\tWhere can I learn more about key reinstallation attacks?\n\t\t\t\n\n\t\t\tDo we now need WPA3?\n\t\t\tNo, luckily implementations can be patched in a backwards-compatible manner.\n\t\t\tThis means a patched client can still communicate with an unpatched access point (AP), and vice versa.\n\t\t\tIn other words, a patched client or access point sends exactly the same handshake messages as before, and at exactly the same moment in time.\n\t\t\tHowever, the security updates will assure a key is only installed once, preventing our attack.\n\t\t\tSo again, update all your devices once security updates are available.\n\t\t\tFinally, although an unpatched client can still connect to a patched AP, and vice versa, both the client and AP must be patched to defend against all attacks!\n\t\t\t\n\t\t\tShould I change my Wi-Fi password?\n\t\t\tChanging the password of your Wi-Fi network does not prevent (or mitigate) the attack. So you do not have to update the password of your Wi-Fi network. Instead, you should make sure all your devices are updated, and you should also update the firmware of your router. Nevertheless, after updating both your client devices and your router, it's never a bad idea to change the Wi-Fi password.\n\t\t\t\n\t\t\tI'm using WPA2 with only AES. That's also vulnerable?\n\t\t\tYes, that network configuration is also vulnerable. The attack works against both WPA1 and WPA2, against personal and enterprise networks, and against any cipher suite being used (WPA-TKIP, AES-CCMP, and GCMP). So everyone should update their devices to prevent the attack!\n\t\t\t\n\t\t\tYou use the word \"we\" in this website. Who is we?\n\t\t\tI use the word \"we\" because that's what I'm used to writing in papers. In practice, all the work is done by me, with me being Mathy Vanhoef.\n\t\t\tMy awesome supervisor is added under an honorary authorship to the research paper for his excellent general guidance.\n\t\t\tBut all the real work was done on my own. \n\t\t\tSo the author list of academic papers does not represent division of work :)\n\t\t\t\n\t\t\tIs my device vulnerable?\n\t\t\tProbably. Any device that uses Wi-Fi is likely vulnerable. Contact your vendor for more information, or consult this community maintained list on GitHub.\n\t\t\t\n\t\t\tWhat if there are no security updates for my router or access point? Or if it does not support 802.11r?\n\t\t\t\n\t\t\tRouters or access points (APs) are only vulnerable to our attack if they support the Fast BSS Transition (FT) handshake, or if they support client (repeater) functionality.\n\t\t\tFirst, the FT handshake is part of 802.11r, and is mainly supported by enterprise networks, and not by home routers or APs.\n\t\t\tAdditionally, most home routers or APs do not support (or will not use) client functionality.\n\t\t\tIn other words, your home router or AP likely does not require security updates.\n\t\t\tInstead, it are mainly enterprise networks that will have to update their network infrastructure (i.e. their routers and access points).\n\t\t\t\n\t\t\tThat said, some vendors discovered implementation-specific security issues while investigating our attack.\n\t\t\tFor example, it was discovered that hostapd reuses the ANonce value in the 4-way handshake during rekeys.\n\t\t\tConcretely this means that, even if your router or AP does not support 802.11r, and even if it does not support client functionality, it might still have to be updated.\n\t\t\tContact your vendor for more details.\n\t\t\t\n\t\t\tFinally, we remark that you can try to mitigate attacks against routers and APs by disabling client functionality (which is for example used in repeater modes) and disabling 802.11r (fast roaming).\n\t\t\tAdditionally, update all your other client devices such as laptops and smartphones.\n\t\t\tIf one or more of your client devices is not receiving updates, you can also try to contact your router's vendor and ask if they have an update that prevents attacks against connected devices.\n\n\t\t\tIs it sufficient to patch only the access point? Or to patch only clients?\n\t\t\tCurrently, all vulnerable devices should be patched.\n\t\t\tIn other words, patching the AP will not prevent attacks against vulnerable clients.\n\t\t\tSimilarly, patching all clients will not prevent attacks against vulnerable access points.\n\t\t\tNote that only access points that support the Fast BSS Transition handshake (802.11r) can be vulnerable.\n\t\t\t\n\t\t\tThat said, it is possible to modify the access point such that vulnerable clients (when connected to this AP) cannot be attacked.\n\t\t\tHowever, these modifications are different from the normal security patches that are being released for vulnerable access points!\n\t\t\tSo unless your access point vendor explicitly mentions that their patches prevent attacks against clients, you must also patch clients.\n\n\t\t\tCan we modify an access point to prevent attacks against the client?\n\t\t\t\n\t\t\tIt's possible to modify the access point (router) such that connected clients are not vulnerable to attacks against the 4-way handshake and group key handshake.\n\t\t\tNote that we consider these two attacks the most serious and widespread security issues we discovered.\n\t\t\tHowever, these modifications only prevent attacks when a vulnerable client is connected to such a modified access point.\n\t\t\tWhen a vulnerable client connects to a different access point, it can still be attacked.\n\t\t\tTechnically, this is accomplished by modifying the access point such that it does not retransmit message 3 of the 4-way handshake.\n\t\t\tAdditionally, the access point is modified to not retransmit message 1 of the group key handshake.\n\t\t\tThe hostapd project has such a modification available.\n\t\t\tThey are currently evaluating to which extend this impacts the reliability of these handshakes.\n\t\t\tWe remark that the client-side attacks against the 4-way handshake and group key handshake can also be prevented by retransmitting the above handshake messages using the same (previous) EAPOL-Key replay counter.\n\t\t\tThe attack against the group key handshake can also be prevented by letting the access point install the group key in a delayed fashion, and by assuring the access point only accepts the latest replay counter (see section 4.3 of the paper for details).\n\t\t\t\n\t\t\tOn some products, variants or generalizations of the above mitigations can be enabled without having to update products.\n\t\t\t\n\t\t\tFor example, on some access points retransmissions of all handshake messages can be disabled, preventing client-side attacks against the 4-way and group key handshake (see for example Cisco).\n\n\t\t\tHow did you discover these vulnerabilities?\n\t\t\tWhen working on the final (i.e. camera-ready) version of another paper, I was double-checking some claims we made regarding OpenBSD's implementation of the 4-way handshake. In a sense I was slacking off, because I was supposed to be just finishing the paper, instead of staring at code. But there I was, inspecting some code I already read a hundred times, to avoid having to work on the next paragraph. It was at that time that a particular call to ic_set_key caught my attention. This function is called when processing message 3 of the 4-way handshake, and it installs the pairwise key to the driver. While staring at that line of code I thought “Ha. I wonder what happens if that function is called twice”. At the time I (correctly) guessed that calling it twice might reset the nonces associated to the key. And since message 3 can be retransmitted by the Access Point, in practice it might indeed be called twice. “Better make a note of that. Other vendors might also call such a function twice. But let's first finish this paper...”. A few weeks later, after finishing the paper and completing some other work, I investigated this new idea in more detail. And the rest is history.\n\t\t\t\n\t\t\tThe 4-way handshake was mathematically proven as secure. How is your attack possible?\n\t\t\tThe brief answer is that the formal proof does not assure a key is installed only once. Instead, it merely assures the negotiated key remains secret, and that handshake messages cannot be forged.\n\t\t\tThe longer answer is mentioned in the introduction of our research paper: our attacks do not violate the security properties proven in formal analysis of the 4-way handshake.\n\t\t\tIn particular, these proofs state that the negotiated encryption key remains private, and that the identity of both the client and Access Point (AP) is confirmed.\n\t\t\tOur attacks do not leak the encryption key.\n\t\t\tAdditionally, although normal data frames can be forged if TKIP or GCMP is used, an attacker cannot forge handshake messages and hence cannot impersonate the client or AP during handshakes.\n\t\t\tTherefore, the properties that were proven in formal analysis of the 4-way handshake remain true.\n\t\t\tHowever, the problem is that the proofs do not model key installation.\n\t\t\tPut differently, the formal models did not define when a negotiated key should be installed.\n\t\t\tIn practice, this means the same key can be installed multiple times, thereby resetting nonces and replay counters used by the encryption protocol (e.g. by WPA-TKIP or AES-CCMP).\n\n\t\t\tSome attacks in the paper seem hard\n\t\t\tWe have follow-up work making our attacks (against macOS and OpenBSD for example) significantly more general and easier to execute.\n\t\t\tSo although we agree that some of the attack scenarios in the paper are rather impractical, do not let this fool you into believing key reinstallation attacks cannot be abused in practice.\n\n\t\t\tIf an attacker can do a man-in-the-middle attack, why can't they just decrypt all the data?\n\t\t\tAs mentioned in the demonstration, the attacker first obtains a man-in-the-middle (MitM) position between the victim and the real Wi-Fi network (called a channel-based MitM position).\n\t\t\tHowever, this MitM position does not enable the attacker to decrypt packets!\n\t\t\tThis position only allows the attacker to reliably delay, block, or replay encrypted packets.\n\t\t\tSo at this point in the attack, they cannot yet decrypt packets.\n\t\t\tInstead, the ability to reliably delay and block packets is used to execute a key reinstallation attack.\n\t\t\tAfter performing a key reinstallation attack, packets can be decrypted.\n\n\t\t\tDoes an attacker to have be near your network in order to attack it?\n\t\t\tAn adversary has to be within range of both the client being attacked (meaning the smartphone or laptop) and the network itself.\n\t\t\tThis means an adversary on the other side of the world cannot attack you remotely.\n\t\t\tHowever, the attacker can still be relatively far way.\n\t\t\tThat's because special antenna can be used to carry out the attack from two miles to up to eight miles in ideal conditions.\n\t\t\tAdditionally, the attacker is not competing with the signal strength of the real Wi-Fi network, but instead uses so-called Channel Switch Announcements to manipulate and attack the client.\n\t\t\tAs a result, it is possible to successfully carry out attacks even when far away from the victim.\n\t\t\t\n\n\t\t\tAre people exploiting this in the wild?\n\t\t\tWe are not in a position to determine if this vulnerability has been (or is being) actively exploited in the wild. That said, key reinstallations can actually occur spontaneously without an adversary being present! This may for example happen if the last message of a handshake is lost due to background noise, causing a retransmission of the previous message. When processing this retransmitted message, keys may be reinstalled, resulting in nonce reuse just like in a real attack.\n\n\t\t\tShould I temporarily use WEP until my devices are patched?\n\t\t\tNO! Keep using WPA2.\n\n\t\t\tWill the Wi-Fi standard be updated to address this?\n\t\t\tThere seems to be an agreement that the Wi-Fi standard should be updated to explicitly prevent our attacks.\n\t\t\tThese updates likely will be backwards-compatible with older implementations of WPA2.\n\t\t\tTime will tell whether and how the standard will be updated.\n\n\t\t\tIs the Wi-Fi Alliance also addressing these vulnerabilities?\n\t\t\tFor those unfamiliar with Wi-Fi, the Wi-Fi Alliance is an organization which certifies that Wi-Fi devices conform to certain standards of interoperability. Among other things, this assures that Wi-Fi products from different vendors work well together.\n\t\t\tThe Wi-Fi Alliance has a plan to help remedy the discovered vulnerabilities in WPA2. Summarized, they will:\n\t\t\t\n\t\t\t\tRequire testing for this vulnerability within their global certification lab network.\n\t\t\t\tProvide a vulnerability detection tool for use by any Wi-Fi Alliance member (this tool is based on my own detection tool that determines if a device is vulnerable to some of the discovered key reinstallation attacks).\n\t\t\t\tBroadly communicate details on this vulnerability, including remedies, to device vendors. Additionally, vendors are encouraged to work with their solution providers to rapidly integrate any necessary patches.\n\t\t\t\tCommunicate the importance for users to ensure they have installed the latest recommended security updates from device manufacturers.\n\t\t\t\n\t\t\t\n\t\t\tWhy did you use match.com as an example in the demonstration video?\n\t\t\tUsers share a lot of personal information on websites such as match.com. So this example highlights all the sensitive information an attacker can obtain, and hopefully with this example people also better realize the potential (personal) impact. We also hope this example makes people aware of all the information these dating websites may be collecting.\n\n\t\t\tHow can these types of bugs be prevented?\n\t\t\tWe need more rigorous inspections of protocol implementations. This requires help and additional research from the academic community! Together with other researchers, we hope to organize workshop(s) to improve and verify the correctness of security protocol implementations.\n\n\t\t\tWhy the domain name krackattacks.com?\n\t\t\tFirst, I'm aware that KRACK attacks is a pleonasm, since KRACK stands for key reinstallation attack and hence already contains the word attack. But the domain name rhymes, so that's why it's used.\n\n\t\t\tDid you get bug bounties for this?\n\t\t\tHackerone has awarded a bug bounty for our research under their Internet Bug Bounty (IBB) award program.\n\n\t\t\tHow does this attack compare to other attacks against WPA2?\n\t\t\tThis is the first attack against the WPA2 protocol that doesn't rely on password guessing. Indeed, other attacks against WPA2-enabled network are against surrounding technologies such as Wi-Fi Protected Setup (WPS), or are attacks against older standards such as WPA-TKIP. Put differently, none of the existing attacks were against the 4-way handshake or against cipher suites defined in the WPA2 protocol. In contrast, our key reinstallation attack against the 4-way handshake (and against other handshakes) highlights vulnerabilities in the WPA2 protocol itself.\n\n\t\t\tAre other protocols also affected by key reinstallation attacks?\n\t\t\tWe expect that certain implementations of other protocols may be vulnerable to similar attacks. So it's a good idea to audit security protocol implementations with this attack in mind. However, we consider it unlikely that other protocol standards are affected by similar attacks (or at least so we hope). Nevertheless, it's still a good idea to audit other protocols!\n\t\t\t\n\t\t\tIs there a higher resolution version of the logo?\n\t\t\tYes there is. And a big thank you goes to the person that made the logo!\n\n\t\t\tWhen did you first notify vendors about the vulnerability?\n\t\t\tWe sent out notifications to vendors whose products we tested ourselves around 14 July 2017. After communicating with these vendors, we realized how widespread the weaknesses we discovered are (only then did I truly convince myself it was indeed a protocol weaknesses and not a set of implementation bugs). At that point, we decided to let CERT/CC help with the disclosure of the vulnerabilities. In turn, CERT/CC sent out a broad notification to vendors on 28 August 2017.\n\n\t\t\tWhy did OpenBSD silently release a patch before the embargo?\n\t\t\tOpenBSD announced an errata on 30 August 2017 that silently prevented our key reinstallation attacks.\n\t\t\tMore specifically, patches were released for both OpenBSD 6.0 and OpenBSD 6.1.\n\t\t\tWe notified OpenBSD of the vulnerability on 15 July 2017, before CERT/CC was involved in the coordination. Quite quickly, Theo de Raadt replied and critiqued the tentative disclosure deadline: “In the open source world, if a person writes a diff and has to sit on it for a month, that is very discouraging”. Note that I wrote and included a suggested diff for OpenBSD already, and that at the time the tentative disclosure deadline was around the end of August. As a compromise, I allowed them to silently patch the vulnerability. In hindsight this was a bad decision, since others might rediscover the vulnerability by inspecting their silent patch. To avoid this problem in the future, OpenBSD will now receive vulnerability notifications closer to the end of an embargo.\n\n\t\t\tSo you expect to find other Wi-Fi vulnerabilities?\n\t\t\t“I think we're just getting started.” — Master Chief, Halo 1\n\n\t\t\tWhere can I learn more about key reinstallation attacks?\n\t\t\tGood technical information and comments:\n\t\t\t\n\t\t\t\tLiveOverflow has an excellent video explaining the attack\n\t\t\t\tComputerphile also made a video about the attack\n\t\t\t\tMatthew Green has a good blog post about KRACK and the causes of the vulnerability\n\t\t\t\tMojo Networks has a detailed blog posts on the attacks\n\t\t\t\tBruce Schneier also briefly discusses the attack\n\t\t\t\n\t\t\tSelected newspapers with high-level information:\n\t\t\t\n\t\t\t\tThe BCC made a short video explaining the attack, and wrote an article about it\n\t\t\t\tThe Wall Street Journal: Significant Flaw Discovered in Wi-Fi Security Protocol\n\t\t\t\tThe Guardian: 'All wifi networks' are vulnerable to hacking, security expert discovers\n\t\t\t\tTIME: Everything With Wi-Fi Has a Newly Discovered Security Flaw. Here's How to Protect Yourself\n\t\t\t\tArs Technica: Serious flaw in WPA2 protocol lets attackers intercept passwords and much more\n\t\t\t\tArs Technica: How the KRACK attack destroys nearly all Wi-Fi security\n\t\t\t\tThe Verge: Wi-Fi security has been breached, say researchers\n\t\t\t\tThe Verge: 41 percent of Android phones are vulnerable to 'devastating' Wi-Fi attack\n\t\t\t\tReuters: Researchers uncover flaw that makes Wi-Fi vulnerable to hacks\n\t\t\t\tForbes: Update Every Device -- This KRACK Hack Kills Your Wi-Fi Privacy\n\t\t\t\tCNET: KRACK attack: Here's how companies are responding"],["topImageUrl","https://www.krackattacks.com/images/logo-small.png"],["error",null]]}]}],["text","\n「所有Wi-Fi」使用的WPA2已經在今天被發現弱點,\n只要你的裝置有用 Wi-Fi, 那你上網的一舉一動就會被壞人監看.\n如果你的手機, 電腦, 平板或是基地台在今天之後有更新,請盡早更新\n\n重點整理:\n所有設備有更新時請立即更新,\n更新前改 Wi-Fi 密碼沒有用,\n不要降回WEP,\n已經加密的網路活動不受影響(瀏覽器有出現鎖頭)\n\nhttps://www.krackattacks.com/\n"],["id","AV8nnbXayCdS-nWhuhlS"],["createdAt","2017-10-16T23:56:08.024Z"]]}],["reply",{"__iterable":"Map","data":[["id","AV8qGzY0yCdS-nWhuhnq"],["user",{"__iterable":"Map","data":[["id","AVy6vkhAyCdS-nWhuaru"],["name","Rosalind"],["avatarUrl","https://www.gravatar.com/avatar/f0db3a53dec901a797bdc90b87a0a6a9?s=100&d=identicon&r=g"],["level",17]]}],["type","NOT_RUMOR"],["text","確有其事。"],["reference","https://www.inside.com.tw/2017/10/17/wpa2breaking"],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","【全球 Wi-Fi 大風暴】WPA2 加密協議被攻破！Wi-Fi 安全面臨重大危機該怎麼辦？ - INSIDE"],["url","https://www.inside.com.tw/2017/10/17/wpa2breaking"],["summary","Photo Credit：pixabay\n本篇來自合作媒體 Pingwest，INSIDE 經授權轉載。\n比利時研究人員 10 月 16 日表示：WPA2 安全加密協議已經被破解。\n如果你朋友圈裡有一兩個略懂一些技術的好友，那麼他一定在昨天已經轉發過了相關的新聞。也許你對這條充滿技術詞語的新聞並不關心，除非我們換一種說法：\n你能連接到的絕大多數 Wi-Fi 在一夜之間都不安全了，甚至你透過自己家路由器的 Wi-Fi 上網，都有可能被盜。\n安全專家 Mathy Vanhoef 表示：「該漏洞影響了許多操作系統和設備，包括 Android，Linux，Apple，Windows 等。」\n這個概念驗證攻擊被稱作「KRACK」（密鑰重裝攻擊），詳細破解方法和影片示範已在 krackattacks.com 網站上公佈。\nWPA2 是什麼？\nWPA 全稱為 Wi-Fi Protected Access，有 WPA 和 WPA2 兩個標準，是一種保護無線網路安全的加密協議。\n用更通俗一點的話來說，我們都知道連接到大多數 Wi-Fi 是要輸入密碼的，此過程不止用於防止偷連網，其實更重要的是驗證你的手機和路由器之間的通訊沒有被別人竊取。\n畢竟，對於滿世界亂飄的無線數據來說，就好像是你從手機端寄一個快遞到同一個社區的路由器家裡。因為你手機也不知道路由器住在哪，所以會把包裹放在貨架上寫明「路由器收」。\n如果所有人都遵循規則，那麼每個使用 Wi-Fi 的終端只要到貨架上去找寫著自己名字的包裹就可以了。然而攻擊者並不管這些，會把你的包裹拿來拆開，然後在裡面放上自己偽造的數據。\n如果 Wi-Fi 都採用不加密的方式傳輸數據，那你平時看了什麼奇怪網站，下了什麼「動作」電影，你鄰居可是一清二楚。不過當然最重要的是，有些 App 和網站的密碼，也可能因此而洩露。\n在 WPA 這種加密方式大規模應用之前，加密方式主要是 WEP（Wired Equivalent Privacy），由於每個數據包都使用相同的加密密鑰，如果竊聽者分析了足夠的數據，則可以使用自動化軟體找到密鑰。\n還是用通俗一點的話來說，就是你的手機不停的往路由器發「快遞」，WEP 雖然給每個快遞包裹都上了鎖，但是所有鎖都可以被一把鑰匙打開。攻擊者只要多劫下幾個包裹試一試，就能配出一把鑰匙了。\nWEP 的加密方式在這三種加密中是安全性最弱的， 2001 年 8 月，Fluhrer et al. 發表了針對 WEP 的密碼分析，利用 RC4 加解密和 IV 的使用方式的特性，偷聽幾個小時之後，就可以把 RC4 的鑰匙破解出來。\n2005 年，美國聯邦調查局示範了用公開可得的工具可以在三分鐘內破解一個用 WEP 保護的網路。\n與 WEP 相比，WPA 使用 TKIP 加密方案，並驗證它在數據傳輸過程中沒有被更改。而 WPA2 使用 AES 加密方法，進一步提高了安全性。\n用不嚴謹但通俗的方式來解釋，就是你手機和路由器之間每「快遞包裹」上的密碼都是變化的，而你手機和路由器達成了一種默契，保證只有彼此才擁有正確的鑰匙，你的路由器還會拒絕簽收那些看起被動過的包裹。\n除了安全性，由於 WEP 是 IEEE 802.11 標準的一部分，後續在開發更快更穩定的 IEEE 802.11n 時已經摒棄了對 WEP 加密的支援。如果繼續使用 WEP 加密，會影響無線網路設備的傳輸速率。\n但是由於路由器的升級換代速度很慢，直到 2003 年才被更加安全的 WPA 取代。\n由於 WPA2 作為升級版的協議兼容 WPA，不需要更換硬體，因此目前的路由器大部分都在使用 WPA2 加密協議。\n因此，在很長一段時間裡，只要你不在公共場所隨意登錄那些完全不需要密碼的 Wi-Fi，你就不會受到攻擊。\nWPA2 被破解有什麼影響？\n最直接的影響就是你家裡的無線網路將處於易受攻擊的狀態，你的信用卡、密碼、聊天記錄、照片、電子郵件等都有可能被駭客竊取。\nkrackattacks 網站顯示：Android 和基於 Linux 的設備受到的影響更大。由於 Android 使用 wpa_supplicant，41％的 Android 設備更容易受到攻擊。\n隨後，Google 表示：將在接下來的幾個星期內推出相應的安全修補程式。\n除了安全修補程式，與 WEP 被破解時的辦法相同，最好的解決辦法就是升級到更安全的加密協議。\n如果新的協議沒有向下相容的話，為了安全性，意味著許多路由器硬體將被淘汰，可能很快就需要換新的路由器了。\n即便是新的協議支援硬體上的向下相容，又會有哪個普通用戶會想到去更新自己路由器的韌體呢？\n如何降低安全風險？\n如果駭客打算攻擊你家的 Wi-Fi，需要物理上的靠近。所以，物理距離上的保護讓你的數據暫時不至於變得非常不安全。\n不過，就算你定期更改家裡的 Wi-Fi 密碼，也不會降低危險，因為 Wi-Fi 的加密協議都被破解了，知道你的密碼也不是什麼難事。\n這也意味著機場、火車站、商場的公共 Wi-Fi 變得更加不安全，最好的辦法就是盡量使用 4G，外出的時候還是辦一張大流量的卡吧。\n想要獲得更安全的體驗，最好的辦法還是關注自己路由器廠商的韌體更新在第一時間升級。如果路由器廠商表明不對你的路由器型號進行維護了，那……趁這個機會趕緊買個新路由器吧，也正好湊湊這兩年智慧路由器的熱潮。\n除了等待路由器廠商更新韌體和更換新款路由器之外，在瀏覽網頁時，盡量選擇訪問 https 站點。Wi-Fi 加密協議不安全了，至少還有一道網站端的加密保護用戶的數據。\n此外，krackattacks 網站還給出了一些更專業的建議：比如禁用路由器的客戶端模式（例如中繼模式）和 802.11r（快速漫遊）。\n不過總體來說，這都是緩兵之計，升級韌體和換路由器才是唯一的解決方案。"],["topImageUrl","https://i0.wp.com/www.inside.com.tw/wp-content/uploads/2017/10/hacker-1944688_960_720.jpg?fit=960%2C640&ssl=1"],["error",null]]}]}],["createdAt","2017-10-17T11:32:27.320Z"]]}]]},{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",2],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",4],["user",{"__iterable":"Map","data":[["id","j4S8C_SGPqU25kWT9dgB7Sm3Cz8tQbcAia5BFcJwmHqtWpshs"],["name","富創造力的鼓山愛爾莎"],["avatarUrl",null],["level",0]]}],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","Taiwan’s Military Is a Hollow Shell"],["url","https://foreignpolicy.com/2020/02/15/china-threat-invasion-conscription-taiwans-military-is-a-hollow-shell/"],["summary","As threats of military aggression from China grow, the island nation of Taiwan needs a credible military deterrent more than ever. But Taiwan’s military is in a crisis it can barely admit exists.\nEven as the military refits itself with flashy U.S. arms purchases, such as M1 Abrams tanks and F-16V fighter jets, its front-line units are hollowed out, and the entire reserve system is so dysfunctional that few experts or serving military personnel believe it can make a real military contribution in the event of a war. These problems are well documented but continue to be downplayed, if not outright ignored, by Taiwan’s political leadership—and there is no clear plan to solve the crisis.\n\n \n Trending Articles\n \n \n \n \n \n Coronavirus Conspiracies Give Boost to Canada’s Far-Right\n Anti-Chinese sentiment and a public health backlash have vaulted Hong Kong-born Chief Public Health Officer Theresa…\n\n \n \n\n \n \n \nOn paper, Taiwan’s Ministry of National Defense (MND) has 215,000 budgeted positions among all branches, of which 188,000 are soldiers and the rest civilian employees. Only 153,000 of those positions were filled in 2018—just 81 percent of the personnel the military should have. But even that number doesn’t tell the complete story.Only 153,000 of those positions were filled in 2018—just 81 percent of the personnel the military should have. But even that number doesn’t tell the complete story.Only 153,000 of those positions were filled in 2018—just 81 percent of the personnel the military should have. But even that number doesn’t tell the complete story.\nAccording to a Taiwanese army lieutenant colonel in active service, who asked for only his last name, Lin, to be used, all the army’s front-line combat units he knows of—including armor, mechanized infantry, and artillery troops—currently have effective manpower levels of between 60 and 80 percent. This figure is consistent with Taiwanese media reports, which cite MND figures provided to Taiwan’s parliament, the Legislative Yuan, acknowledging that few front-line units have more than 80 percent of their positions filled.\n“That number might not seem so bad until you realize it means at least a third of your tanks are useless in a war because there’s no one to man them,” said Lin, who most recently served as a battalion commander within one of army’s armor brigades.\nThe personnel shortfalls are a clear consequence of the ill-executed transition from conscription to an all-volunteer military over the past few years. It was a political decision made during Ma Ying-jeou’s administration and continued by current President Tsai Ing-wen, despite their coming from different parties. And despite Tsai’s tough rhetoric about defending Taiwan during her successful recent reelection bid, and her vow to thwart Chinese aggression, she has shown no sign of stepping in to fix the problems.\nUniversal conscription is mandated in Article 20 of the Taiwanese Constitution, as in several other countries that face an imminent military threat, such as South Korea or Israel (where women are included but some minorities excluded). For some years, before 2017, the term of conscription service in Taiwan was just a year, which was already short compared with South Korea’s 18-22 months, depending on the military branch, or Israel’s 32 months. Most officers felt that the single year of service wasn’t enough for the military to utilize draftees’ full potential but enough to at least turn a recruit into an average soldier.\nBut 2017’s changes slashed the conscription period to just four months. Most draftees serve even less, as up to two weeks can be deducted if they’ve completed military training classes in high school and college. The four-month conscripts typically receive five weeks of basic training before they are assigned to field units for more specialty training. But they’re more a burden than an aid, not treated seriously by career or noncommissioned officers as their short stays mean they are seen as guests rather than soldiers.\n“By design, they don’t participate in any field exercise or combat readiness training anyway,” Lin said. “We just tell them to stay safe and don’t get into trouble. It’s basically a summer camp.” Several individuals who recently completed this four-month service described similar experiences in interviews.\nOne of the stated aims of the all-volunteer reform was to professionalize the service, staffing the military’s rank and file with a cadre of career-oriented volunteer soldiers who usually serve a minimum term of four years. Despite MND’s talking point that each year’s recruitment drive always hits the set targets and brings with it a fresh crop of volunteers, the rushed transition to an all-volunteer military has clearly damaged the Taiwanese army’s manpower pool—especially on the front line.\nThe reason for the hollowing out of front-line troops is simple. Unlike conscripts, who could be assigned entirely based on to the needs of the military, volunteer soldiers among the lower enlisted ranks can and usually do seek transfers to units considered desirable—rear-echelon troops such as training schools, garrison units, signal corps, and so forth. Although transfer opportunities are limited, soldiers almost always find a way. This means that armor, mechanized infantry, and artillery units are always in desperate shortage of enlisted soldiers—even though they are expected to be the ones bearing the brunt of ground fighting against the formidable People’s Liberation Army (PLA) ground force if it comes ashore.\nA popular yet cynical explanation as to why these Taiwanese soldiers dislike front-line units simply postulates a common aversion to tougher training and combat duty. But interviews with several enlisted ranks painted a more complex picture. Most complained that the food and living conditions left much to be desired—front-line soldiers must split their time between bases and on field exercises. That, on top of the fact they have far more weapons, vehicles, and equipment to clean and maintain, means these posts are perceived as more work for little reward. The existing shortages also cause an even heavier burden of work on the soldiers left—prompting more of them to put in for transfers.\nPolls show varied public opinion on these issues. In 2015, one legislator cited a poll that showed almost 60 support for a return to conscription. In response, the MND cited another poll that claimed 60 percent were satisfied with the transition to all-volunteer forces. At the end of the day, it all seems to come down to how the question is phrased by the pollsters.\nNo matter which poll you believe, it is clear that the two successive presidents over the past decade, Ma and Tsai, had little or no political interest in the political hassle of bringing back the longer conscription length, despite the evidence of the damage being done to military readiness. Even Kaohsiung Mayor Han Kuo-yu, who lost in the recent presidential election representing the Kuomintang (KMT) party, also declined to advocate a complete return to conscription but proposed a “hybrid approach” that he did not specify the details for.\nChieh Chung, a senior assistant research fellow at Taiwan’s National Policy Foundation, commented that the personnel shortage is a problem well documented by the military itself but has never entered their calculations. Chung, who has worked for several years in Taiwan’s parliament as a legislative advisor focusing on defense issues, said the military’s own exercises and computer simulations always assume all units would have at least 90 percent fighting strength at the beginning of a war—an assumption that might have been true in the conscription era but is a far cry from reality today.\nSeveral officers who have participated in the computer-simulated phase of the annual Han Kuang exercises in recent years also pointed out this obvious flaw. That raises the question of how many of the Taiwanese military’s simulations of its own ability to hold off a Chinese invasion are based on now purely hypothetical soldiers.\nThese personnel issues would not be so serious if the military had a functional reserve force. On paper, this enormous reserve force is said to be more than 2 million strong.These personnel issues would not be so serious if the military had a functional reserve force. On paper, this enormous reserve force is said to be more than 2 million strong. Once activated, these reservists are supposed to fill existing shortages across regular field units, and reinforce casualties, while creating fresh reserve formations from virtually nothing to bolster overall defense, according to the Reserve Command’s own words.These personnel issues would not be so serious if the military had a functional reserve force. On paper, this enormous reserve force is said to be more than 2 million strong.\nJust about everything in these talking points is pure fantasy, according to James Huang, a retired army lieutenant colonel who has since become a prolific writer on defense issues and military history, with many followers on Facebook. Huang said there was “no way whatsoever” any of Taiwan’s reserves would reinforce existing field units, despite the proven success of the system elsewhere in the world, especially Israel.\nThat’s the case regardless of whether the reservist is a conscript with four months’ training or a five-year veteran paratrooper just discharged from the special forces. The established practice of Taiwan’s Reserve Command, according to Huang, is not to send reservists back to their previous units but to lump everyone together into the newly activated reserve infantry brigades that possess no specialty, no vehicles, and no equipment except rifles (often older types) and are led by called-up reservist officers who have little experience commanding such ad hoc units.\nIn theory, all soldiers and officers (both conscripts and volunteers) are automatically enrolled as reservists on being discharged from active service. They are called up at most once every two years by the Reserve Command to receive refresher training for five to seven days. In practice, such training rarely consists of more than just basic drills and a short practice session at the rifle range. A reservist corporal who was a veteran M60 tank gunner, for example, will be activated only as an infantry rifleman even if one of the army’s active armor brigades has tanks sitting unmanned in the base.\n“If we go to war, the soldiers currently on roster are all that we have,” said Lin, the lieutenant colonel, who pointed out that he had never heard of any plan to reinforce units he commanded with reserve soldiers. “At best, they might start combining depleted units. We are supposed to fight until everyone is dead or can’t fight anymore.”\nAnd even if Taiwan somehow manages to muster dozens of fresh reserve infantry brigades before Chinese troops come ashore, Huang said they would be little more than cannon fodder consider how poorly the military has trained them in peacetime and the fact that there is not even a clear plan to fit them into the overall defense strategy.\n“Show me 2 million rifles in the stockpile, and I will believe Taiwan has a 2-million-strong reserve force,” Huang said. “The military can’t even tell how many reserve troops they will need to activate across Taiwan, let alone where and how to deploy them when the shooting starts across the Taiwan Strait.”\nOther military officers and defense experts confirmed the problems Huang cited. According to Jyun-yi Lee, an assistant research fellow at the Institute for National Defense and Security Research, a recently created think tank affiliated with Taiwan’s MND: “It’s indeed clear to most of us that Taiwan’s reserve system, as it currently stands, will not contribute much to the military’s fighting strength, if at all. No one is pretending soldiers trained by four-month conscription will be effective. They exist for political, not military, reasons. Politicians don’t want to bring back longer conscription or tougher reserve training, as they fear doing so might make them unpopular.”\nTo its credit, Taiwan’s MND finally began an experimental “reserve warrior program” in recent years that seeks to put skilled veterans back to their original units for refresher training up to a few days per month. Some 214 veterans were said to have signed up in 2019, which is obviously too low to function as a regular reserve force. The program so far seems to matter more to the air force, as it finally provides a channel for retired military pilots to fly again, according to one air force lieutenant familiar with the matter. So far one F-16 pilot and one C-130 pilot reportedly have signed up for the program.\nFormer KMT legislator Hsu “Jason” Yu-Jen said U.S. Defense Department officials have privately expressed dismal assessments regarding Taiwan’s current force level and reserve system. Hsu quoted Pentagon officials as saying in 2019 that Taiwan’s buying of new F-16s and M1 Abram tanks by the Tsai administration was a “nice political gesture” yet they will hardly matter in a war when Taiwan cannot even man them properly in peacetime.\nBut saying the problem out loud is a tough task in itself when both Taiwan’s international allies and the Taiwanese public want to hear a success story more than anything else—especially at a time when China’s propaganda machine is running at full speed to portrait Taiwan’s military as both incompetent and ineffective in the face of the PLA’s rapid expansion and modernization.\n“You have to acknowledge the existence of the problems before you can fix them,” said James Huang, who noted that some among the military community object to his outspokenness, though he decided to speak on record for this report anyway. “It’s about time someone starts telling the truth.”"],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","「無兵可用、有兵誤用」的台灣國軍，如何「抗中保台」？ - The News Lens 關鍵評論網"],["url","https://www.thenewslens.com/article/131342"],["summary","政府宣稱可以抵擋中國武力侵略，一部分是想要反制中國共產黨政府宣傳機器，長年來一貫描繪台灣的軍隊無能也無力抵抗解放軍的入侵。然而隨著中國解放軍高速的現代化和軍力增強，中國政府的這種描述恐怕正從宣傳邁向現實。標籤: 國軍, 國防部, 後備軍人, 退役軍人, 徵兵制, 募兵制, 實戰部隊"],["topImageUrl",null],["error",null]]}]}],["text","美國智庫《外交政策》（Foreign Policy）報導\n\nTaiwan’s Military Is a Hollow Shell\n台灣軍隊是空殼\n\n上篇是原文，下篇是翻譯版\n1.\nhttps://foreignpolicy.com/2020/02/15/china-threat-invasion-conscription-taiwans-military-is-a-hollow-shell/\n\n2.\nhttps://www.thenewslens.com/article/131342"],["id","38cho9d29uveq"],["createdAt","2021-08-28T03:11:50.028Z"]]}],["reply",{"__iterable":"Map","data":[["id","ofQPk3sBqH8xU4Aw0Zik"],["user",{"__iterable":"Map","data":[["id","kMzVlWwBqwaEkHKweY5K"],["name","Lopez"],["avatarUrl","https://www.gravatar.com/avatar/751f376f9925146f9752ec17ea482d64?s=100&d=identicon&r=g"],["level",13]]}],["type","OPINIONATED"],["text","(1) 本文出於 Foreign Policy, 是獲得多項獎的雙月刊紙媒和網媒。參考\nhttps://en.wikipedia.org/wiki/Foreign_Policy#Awards\n(2) (ForeignAffairs.com 是另外一個老牌的雙月刊紙媒和網媒，不是美國政府的外交事務官網。兩者皆是可信的媒體。)\nhttps://en.wikipedia.org/wiki/Foreign_Affairs\n\n"],["reference","文中討論國軍從徵兵制改採募兵制所帶來的人員不足的轉型問題，在台灣也廣受討論，可受公論。但是標題說 Taiwan’s Military Is a Hollow Shell 太慫恿，到底國軍軍力強大，世界排名第13的事實，不可忽略。\nhttps://zh.wikipedia.org/wiki/国家的军力强度指数列表"],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","Foreign Policy - Wikipedia"],["url","https://en.wikipedia.org/wiki/Foreign_Policy#Awards"],["summary",""],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","Foreign Affairs - Wikipedia"],["url","https://en.wikipedia.org/wiki/Foreign_Affairs"],["summary",""],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","国家的军力强度指数列表 - 维基百科，自由的百科全书"],["url","https://zh.wikipedia.org/wiki/国家的军力强度指数列表"],["summary",""],["topImageUrl",null],["error",null]]}]}],["createdAt","2021-08-29T17:58:12.648Z"]]}]]},{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",2],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",4],["user",{"__iterable":"Map","data":[["id","j4S8C_SGPqU25kWT9dgB7Sm3Cz8tQbcAia5BFcJwmHqtWpshs"],["name","富創造力的鼓山愛爾莎"],["avatarUrl",null],["level",0]]}],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","Taiwan’s Military Is a Hollow Shell"],["url","https://foreignpolicy.com/2020/02/15/china-threat-invasion-conscription-taiwans-military-is-a-hollow-shell/"],["summary","As threats of military aggression from China grow, the island nation of Taiwan needs a credible military deterrent more than ever. But Taiwan’s military is in a crisis it can barely admit exists.\nEven as the military refits itself with flashy U.S. arms purchases, such as M1 Abrams tanks and F-16V fighter jets, its front-line units are hollowed out, and the entire reserve system is so dysfunctional that few experts or serving military personnel believe it can make a real military contribution in the event of a war. These problems are well documented but continue to be downplayed, if not outright ignored, by Taiwan’s political leadership—and there is no clear plan to solve the crisis.\n\n \n Trending Articles\n \n \n \n \n \n Coronavirus Conspiracies Give Boost to Canada’s Far-Right\n Anti-Chinese sentiment and a public health backlash have vaulted Hong Kong-born Chief Public Health Officer Theresa…\n\n \n \n\n \n \n \nOn paper, Taiwan’s Ministry of National Defense (MND) has 215,000 budgeted positions among all branches, of which 188,000 are soldiers and the rest civilian employees. Only 153,000 of those positions were filled in 2018—just 81 percent of the personnel the military should have. But even that number doesn’t tell the complete story.Only 153,000 of those positions were filled in 2018—just 81 percent of the personnel the military should have. But even that number doesn’t tell the complete story.Only 153,000 of those positions were filled in 2018—just 81 percent of the personnel the military should have. But even that number doesn’t tell the complete story.\nAccording to a Taiwanese army lieutenant colonel in active service, who asked for only his last name, Lin, to be used, all the army’s front-line combat units he knows of—including armor, mechanized infantry, and artillery troops—currently have effective manpower levels of between 60 and 80 percent. This figure is consistent with Taiwanese media reports, which cite MND figures provided to Taiwan’s parliament, the Legislative Yuan, acknowledging that few front-line units have more than 80 percent of their positions filled.\n“That number might not seem so bad until you realize it means at least a third of your tanks are useless in a war because there’s no one to man them,” said Lin, who most recently served as a battalion commander within one of army’s armor brigades.\nThe personnel shortfalls are a clear consequence of the ill-executed transition from conscription to an all-volunteer military over the past few years. It was a political decision made during Ma Ying-jeou’s administration and continued by current President Tsai Ing-wen, despite their coming from different parties. And despite Tsai’s tough rhetoric about defending Taiwan during her successful recent reelection bid, and her vow to thwart Chinese aggression, she has shown no sign of stepping in to fix the problems.\nUniversal conscription is mandated in Article 20 of the Taiwanese Constitution, as in several other countries that face an imminent military threat, such as South Korea or Israel (where women are included but some minorities excluded). For some years, before 2017, the term of conscription service in Taiwan was just a year, which was already short compared with South Korea’s 18-22 months, depending on the military branch, or Israel’s 32 months. Most officers felt that the single year of service wasn’t enough for the military to utilize draftees’ full potential but enough to at least turn a recruit into an average soldier.\nBut 2017’s changes slashed the conscription period to just four months. Most draftees serve even less, as up to two weeks can be deducted if they’ve completed military training classes in high school and college. The four-month conscripts typically receive five weeks of basic training before they are assigned to field units for more specialty training. But they’re more a burden than an aid, not treated seriously by career or noncommissioned officers as their short stays mean they are seen as guests rather than soldiers.\n“By design, they don’t participate in any field exercise or combat readiness training anyway,” Lin said. “We just tell them to stay safe and don’t get into trouble. It’s basically a summer camp.” Several individuals who recently completed this four-month service described similar experiences in interviews.\nOne of the stated aims of the all-volunteer reform was to professionalize the service, staffing the military’s rank and file with a cadre of career-oriented volunteer soldiers who usually serve a minimum term of four years. Despite MND’s talking point that each year’s recruitment drive always hits the set targets and brings with it a fresh crop of volunteers, the rushed transition to an all-volunteer military has clearly damaged the Taiwanese army’s manpower pool—especially on the front line.\nThe reason for the hollowing out of front-line troops is simple. Unlike conscripts, who could be assigned entirely based on to the needs of the military, volunteer soldiers among the lower enlisted ranks can and usually do seek transfers to units considered desirable—rear-echelon troops such as training schools, garrison units, signal corps, and so forth. Although transfer opportunities are limited, soldiers almost always find a way. This means that armor, mechanized infantry, and artillery units are always in desperate shortage of enlisted soldiers—even though they are expected to be the ones bearing the brunt of ground fighting against the formidable People’s Liberation Army (PLA) ground force if it comes ashore.\nA popular yet cynical explanation as to why these Taiwanese soldiers dislike front-line units simply postulates a common aversion to tougher training and combat duty. But interviews with several enlisted ranks painted a more complex picture. Most complained that the food and living conditions left much to be desired—front-line soldiers must split their time between bases and on field exercises. That, on top of the fact they have far more weapons, vehicles, and equipment to clean and maintain, means these posts are perceived as more work for little reward. The existing shortages also cause an even heavier burden of work on the soldiers left—prompting more of them to put in for transfers.\nPolls show varied public opinion on these issues. In 2015, one legislator cited a poll that showed almost 60 support for a return to conscription. In response, the MND cited another poll that claimed 60 percent were satisfied with the transition to all-volunteer forces. At the end of the day, it all seems to come down to how the question is phrased by the pollsters.\nNo matter which poll you believe, it is clear that the two successive presidents over the past decade, Ma and Tsai, had little or no political interest in the political hassle of bringing back the longer conscription length, despite the evidence of the damage being done to military readiness. Even Kaohsiung Mayor Han Kuo-yu, who lost in the recent presidential election representing the Kuomintang (KMT) party, also declined to advocate a complete return to conscription but proposed a “hybrid approach” that he did not specify the details for.\nChieh Chung, a senior assistant research fellow at Taiwan’s National Policy Foundation, commented that the personnel shortage is a problem well documented by the military itself but has never entered their calculations. Chung, who has worked for several years in Taiwan’s parliament as a legislative advisor focusing on defense issues, said the military’s own exercises and computer simulations always assume all units would have at least 90 percent fighting strength at the beginning of a war—an assumption that might have been true in the conscription era but is a far cry from reality today.\nSeveral officers who have participated in the computer-simulated phase of the annual Han Kuang exercises in recent years also pointed out this obvious flaw. That raises the question of how many of the Taiwanese military’s simulations of its own ability to hold off a Chinese invasion are based on now purely hypothetical soldiers.\nThese personnel issues would not be so serious if the military had a functional reserve force. On paper, this enormous reserve force is said to be more than 2 million strong.These personnel issues would not be so serious if the military had a functional reserve force. On paper, this enormous reserve force is said to be more than 2 million strong. Once activated, these reservists are supposed to fill existing shortages across regular field units, and reinforce casualties, while creating fresh reserve formations from virtually nothing to bolster overall defense, according to the Reserve Command’s own words.These personnel issues would not be so serious if the military had a functional reserve force. On paper, this enormous reserve force is said to be more than 2 million strong.\nJust about everything in these talking points is pure fantasy, according to James Huang, a retired army lieutenant colonel who has since become a prolific writer on defense issues and military history, with many followers on Facebook. Huang said there was “no way whatsoever” any of Taiwan’s reserves would reinforce existing field units, despite the proven success of the system elsewhere in the world, especially Israel.\nThat’s the case regardless of whether the reservist is a conscript with four months’ training or a five-year veteran paratrooper just discharged from the special forces. The established practice of Taiwan’s Reserve Command, according to Huang, is not to send reservists back to their previous units but to lump everyone together into the newly activated reserve infantry brigades that possess no specialty, no vehicles, and no equipment except rifles (often older types) and are led by called-up reservist officers who have little experience commanding such ad hoc units.\nIn theory, all soldiers and officers (both conscripts and volunteers) are automatically enrolled as reservists on being discharged from active service. They are called up at most once every two years by the Reserve Command to receive refresher training for five to seven days. In practice, such training rarely consists of more than just basic drills and a short practice session at the rifle range. A reservist corporal who was a veteran M60 tank gunner, for example, will be activated only as an infantry rifleman even if one of the army’s active armor brigades has tanks sitting unmanned in the base.\n“If we go to war, the soldiers currently on roster are all that we have,” said Lin, the lieutenant colonel, who pointed out that he had never heard of any plan to reinforce units he commanded with reserve soldiers. “At best, they might start combining depleted units. We are supposed to fight until everyone is dead or can’t fight anymore.”\nAnd even if Taiwan somehow manages to muster dozens of fresh reserve infantry brigades before Chinese troops come ashore, Huang said they would be little more than cannon fodder consider how poorly the military has trained them in peacetime and the fact that there is not even a clear plan to fit them into the overall defense strategy.\n“Show me 2 million rifles in the stockpile, and I will believe Taiwan has a 2-million-strong reserve force,” Huang said. “The military can’t even tell how many reserve troops they will need to activate across Taiwan, let alone where and how to deploy them when the shooting starts across the Taiwan Strait.”\nOther military officers and defense experts confirmed the problems Huang cited. According to Jyun-yi Lee, an assistant research fellow at the Institute for National Defense and Security Research, a recently created think tank affiliated with Taiwan’s MND: “It’s indeed clear to most of us that Taiwan’s reserve system, as it currently stands, will not contribute much to the military’s fighting strength, if at all. No one is pretending soldiers trained by four-month conscription will be effective. They exist for political, not military, reasons. Politicians don’t want to bring back longer conscription or tougher reserve training, as they fear doing so might make them unpopular.”\nTo its credit, Taiwan’s MND finally began an experimental “reserve warrior program” in recent years that seeks to put skilled veterans back to their original units for refresher training up to a few days per month. Some 214 veterans were said to have signed up in 2019, which is obviously too low to function as a regular reserve force. The program so far seems to matter more to the air force, as it finally provides a channel for retired military pilots to fly again, according to one air force lieutenant familiar with the matter. So far one F-16 pilot and one C-130 pilot reportedly have signed up for the program.\nFormer KMT legislator Hsu “Jason” Yu-Jen said U.S. Defense Department officials have privately expressed dismal assessments regarding Taiwan’s current force level and reserve system. Hsu quoted Pentagon officials as saying in 2019 that Taiwan’s buying of new F-16s and M1 Abram tanks by the Tsai administration was a “nice political gesture” yet they will hardly matter in a war when Taiwan cannot even man them properly in peacetime.\nBut saying the problem out loud is a tough task in itself when both Taiwan’s international allies and the Taiwanese public want to hear a success story more than anything else—especially at a time when China’s propaganda machine is running at full speed to portrait Taiwan’s military as both incompetent and ineffective in the face of the PLA’s rapid expansion and modernization.\n“You have to acknowledge the existence of the problems before you can fix them,” said James Huang, who noted that some among the military community object to his outspokenness, though he decided to speak on record for this report anyway. “It’s about time someone starts telling the truth.”"],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","「無兵可用、有兵誤用」的台灣國軍，如何「抗中保台」？ - The News Lens 關鍵評論網"],["url","https://www.thenewslens.com/article/131342"],["summary","政府宣稱可以抵擋中國武力侵略，一部分是想要反制中國共產黨政府宣傳機器，長年來一貫描繪台灣的軍隊無能也無力抵抗解放軍的入侵。然而隨著中國解放軍高速的現代化和軍力增強，中國政府的這種描述恐怕正從宣傳邁向現實。標籤: 國軍, 國防部, 後備軍人, 退役軍人, 徵兵制, 募兵制, 實戰部隊"],["topImageUrl",null],["error",null]]}]}],["text","美國智庫《外交政策》（Foreign Policy）報導\n\nTaiwan’s Military Is a Hollow Shell\n台灣軍隊是空殼\n\n上篇是原文，下篇是翻譯版\n1.\nhttps://foreignpolicy.com/2020/02/15/china-threat-invasion-conscription-taiwans-military-is-a-hollow-shell/\n\n2.\nhttps://www.thenewslens.com/article/131342"],["id","38cho9d29uveq"],["createdAt","2021-08-28T03:11:50.028Z"]]}],["reply",{"__iterable":"Map","data":[["id","N_RGknsBqH8xU4Awc5gd"],["user",{"__iterable":"Map","data":[["id","G0I813oBgBgcuemXCMFW"],["name","vanillam"],["avatarUrl",null],["level",13]]}],["type","RUMOR"],["text","這是一個網名稱為美國「外交政策」的網站，看起來是要誤導讀者誤會為美國政府的外交事務官網，網址是https://www.foreignaffairs.com\n同時，「Taiwan’s Military Is a Hollow Shell」這篇文章作者Paul Huang，是一位自由記者，從2019至今在訊息中所謂的美國「外交政策」網站亦只有共三篇「文章」，網上也找不到「他」其他任何的新聞報道。"],["reference","美國外交事務網站\nhttps://www.foreignaffairs.com\n\nPaul Huang is a freelance journalist\nhttps://foreignpolicy.com/author/paul-huang/"],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","Foreign Affairs"],["url","https://www.foreignaffairs.com"],["summary","Foreign Affairs is the leading magazine for in-depth analysis and debate of foreign policy, geopolitics and global affairs"],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","Foreign Affairs"],["url","https://www.foreignaffairs.com"],["summary","Foreign Affairs is the leading magazine for in-depth analysis and debate of foreign policy, geopolitics and global affairs"],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","Paul Huang - Foreign Policy"],["url","https://foreignpolicy.com/author/paul-huang/"],["summary","Paul Huang is a freelance journalist and a nonresident fellow with the Taiwanese Public Opinion Foundation. He is currently based in Taipei, Taiwan, where he conducts research into China’s military and global influence operations. "],["topImageUrl",null],["error",null]]}]}],["createdAt","2021-08-29T14:18:15.713Z"]]}]]},{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",1],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",1],["user",{"__iterable":"Map","data":[["id","j4S8C_E90wXtLvmWMO_OXrljpOI_aAAFbrXUvei7BubdK-RIk"],["name","激勵性的壯圍愛葛莎"],["avatarUrl",null],["level",0]]}],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","From confidence to quarantine: how coronavirus swept Italy | Italy"],["url","https://amp.theguardian.com/world/2020/mar/10/from-confidence-to-quarantine-how-coronavirus-swept-italy"],["summary","Show captionRoadblocks in Milan. In the initial stages of the coronavirus outbreak, the authorities’ confidence was palpable. Photograph: Carlo Cozzoli/Rex/ShutterstockItalyTue 10 Mar 2020 19.02 GMTBad timing and bad luckItaly appeared well ahead of the curve when the coronavirus outbreak began to spread outside China.After detecting three cases, including two Chinese tourists at the end of January, patients were isolated in a hospital in Rome. Contacts were traced, and the country became one of the world’s first to cut transport links with China.The sense of confidence was palpable. “The system of prevention put into place by Italy is the most rigorous in Europe,” the prime minister, Giuseppe Conte, boasted on 31 January.We're unable to serve this media because your browser does not support HTML 5 audio.In reality, as would become clear in February, the virus had been circulating unnoticed in northern Italy via other local chains of infection, in all probability since mid-January.Another critical misunderstanding also appears to have emerged, this time between central government and hospitals in the north.It concerns what the proper protocols were for testing unexplained fevers and respiratory complaints, and whether people with no apparent connection to China should be tested.On 18 February, a fit 38-year old with no apparent links to China fell ill in Codogno. He saw his GP and visited his local hospital several times, but his symptoms were not picked up as resulting from the coronavirus.Italy on lockdown: PM 'forced to intervene' amid coronavirus crisis – video report Known as Patient One by the Italian media, when he was finally admitted to hospital he was tested after a 36-hour delay, which he spent outside isolation. By that time he had infected a number of medical personnel and other contacts over a period of days.Adam Kucharski, an associate professor at the London School of Hygiene and Tropical Medicine, said the initial spread of the virus in Italy “has shown the ability for this to become a serious outbreak in a very short time.“The message is, if you have undetected transmission, if that is not taken seriously, you can very quickly get to numbers that can easily put a burden on your health service. You need ideally to be detecting outbreaks as early as possible.”The age profile of Italy’s population also appears to have made it particularly vulnerable.“Italy is a country of old people,” Prof Massimo Galli, the director of infectious diseases at Sacco hospital in Milan, said. “The elderly with previous pathologies are notoriously numerous here. I think this could explain why we are seeing more serious cases of coronavirus here.”Early decision-makingMuch of what we know about the dramatic spread of the virus in Italy remains provisional. All that can be safely said, as the former prime minister Matteo Renzi put it, is that Italy has become the the guinea pig of Europe.Confronted with the first infections spreading in the north, Italian authorities initially suspected they were tied to the cases of the two Chinese tourists in Rome who had visited Parma.Authorities moved to shut 10 towns linked to the initial cluster of cases in the northern provinces of Lombardy and Veneto. The local lockdowns, which began on the same day that Patient One was confirmed as infected, were hailed in some quarters at time as speedy and decisive.According to some critics of the Italian approach, however, what seemed like sound decision-making at the outset of the crisis may have led in part to the problems the country now faces.“Mistakes were made, probably, in late January,” the author Beppe Severgnini wrote in an op-ed for the New York Times on 2 March. “Italy may have been ill advised to stop flights to and from China; those flights would have provided a clear indication of who was arriving from that country, making health checks easier.”For Christian Althaus, who models infectious diseases at the University of Bern in Switzerland, said Italy’s issues may come down to the simplest explanation: that it was unlucky.“You can argue they noticed it late, but that could have happened elsewhere too,” he said. “Once they realised what was happening, I think they took it seriously. The first lockdown was the right choice, and expanding it nationwide probably too. They realise they need to curb the epidemic.”Mixed messagesIt is less clear whether the first lockdown was undermined both by a desire to avoid alarm and unnecessary economic impact in the country’s industrial centre, and a belief that the outbreak remained limited.In this respect, mixed political messaging may have been more at fault than any weaknesses in Italy’s health system. We know now too that the geographical scope of those initial quarantines was far too limited.As anxiety spread to bigger cities, including the industrial hub of Milan and the tourist centre of Venice, the political messaging was confusing.Among those pushing a “business as usual” message was Nicola Zingaretti, the head of the centre-left Democratic Party, who travelled to Milan for a meet and greet with young people to reinforce his pitch. Zingaretti announced at the weekend that he had tested positive for the virus.'It has arrived': Italian Democratic party leader announces he has coronavirus – video For Elisabetta Groppelli, a lecturer in global health at St George’s, University of London, a full reckoning is still some way off.“Until viral genetic analysis sheds more light on the situation, it’s hard to say exactly why Italy has been so badly affected,” she said. “Northern Italy is the economic hub of the country as well as a tourist hotspot, and therefore has lots of travel in and out of the region.“With more people moving constantly and interacting with each other, this could provide a greater context for spread of the disease.”Share on FacebookShare on TwitterShare via EmailShare on LinkedInShare on PinterestShare on WhatsAppShare on Messenger"],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title",""],["url","https://engnews24h.com/the-city-of-italy-is-where-the-chinese-are-getting-heroic-status/"],["summary",""],["topImageUrl",null],["error","NOT_REACHABLE"]]},{"__iterable":"Map","data":[["title","From zero to hero: Italy's Chinese help beat coronavirus"],["url","https://www.thejakartapost.com/amp/news/2020/04/01/from-zero-to-hero-italys-chinese-help-beat-coronavirus.html"],["summary","A handout photo, taken in February, shows a businessman Luca Zhou, 56, wearing a face mask on the streets of Prato, home to the biggest ethnic Chinese community in Italy.(Handout via Reuters/Maurizio Ciampolini) \n \n \n \n In the storm of infection and death sweeping Italy, one big community stands out to health officials as remarkably unscathed -- the 50,000 ethnic Chinese who live in the town of Prato.\n\nTwo months ago, the country's Chinese residents were the target of what Amnesty International described as shameful discrimination, the butt of insults and violent attack by people who feared they would spread the coronavirus through Italy.\n\nBut in the Tuscan town of Prato, home to Italy's biggest single Chinese community, the opposite has been true. Once scapegoats, they are now held up by authorities as a model for early, strict adoption of infection-control measures.\n\n\"We Italians feared that the Chinese of Prato were to be the problem. Instead, they did much better than us,\" said Renzo Berti, top state health official for the area, which includes Florence.\n\n\"Among Chinese resident in Prato there isn't even one case of COVID contagion,\" he said, referring to COVID-19, which has killed almost 12,000 people in Italy, more than in any other country.\n\nEthnic Chinese make up about a quarter of Prato's population, but Berti credits them with bringing down the entire town's infection rate to almost half the Italian average -- 62 cases per 100,000 inhabitants versus 115 for the country.\n\nPrato's Chinese community, built originally around the textile industry, went into lockdown from the end of January, three weeks before Italy's first recorded infection.\n\nMany were returning from new year holidays in China, the then epicenter.\n\nThey knew what was coming and spread the word: stay home.\n\nSo as Italians headed to the ski slopes and crowded into cafes and bars as normal, the Chinese inhabitants of Prato had seemingly disappeared. Its streets, still festooned with Chinese New Year decorations, were semi-deserted, shops shuttered.\n\nThere is some anecdotal evidence that Chinese people elsewhere in Italy took similar precautions, though national data on infection rates among the community is unavailable. The health ministry did not respond to an email seeking comment.\n\nMilan restaurateur Francesco Wu, a representative of Italian business lobby Confcommercio, said he urged Italian counterparts in February to shut down their businesses, as he had done.\n\n\"Most of them looked at me like a Cassandra,\" he said. \"No one could believe it was happening here ... Now Troy is burning and we are all locked inside.\"\n\n'Italian friends looked at me oddly'\n\nWhen Chinese-born businessman Luca Zhou flew home from China on Feb. 4 to rejoin his wife and 28-year-old son in Prato, he put himself straight into quarantine in his bedroom for 14 days, separated from his wife and son.\n\n\"We had seen what was happening in China and we were afraid for ourselves, our families and our friends,\" said the 56-year-old, who has a business exporting Italian wine to China.\n\nAfter emerging from his self-quarantine, he ventured outside in mask and gloves. He said the few other Chinese on the streets also wore them, anxious not to spread the virus to others.\n\n\"My Italian friends looked at me oddly. I tried many times to explain to them that they should wear them ... but they didn't understand,\" Luca said.\n\n\"When I came back to Prato, no Italian authority told me anything. We did it all by ourselves. If we had not done it, we would all be infected, Chinese and Italians.\"\n\nItaly was one of the first nations to cut air links with China, on Jan. 31, though many of its Chinese residents found their way home via third countries. On Feb. 8, almost a month before closing all schools, it offered students returning from holidays in China the right to stop attending classes.\n\n\"In Prato, there was a boom in take-up,\" said local health director Berti, saying families had been obliged to contact his authority if they wanted to pursue this option. It was then that he began to realize how differently the Chinese were behaving.\n\nMore than 360 families, or around 1,300 people, registered as having put themselves into self-isolation and also signed up to his authority's health surveillance scheme, which monitored symptoms remotely and communicated with them in Chinese.\n\nAs Italian infections began to take off in late February and early March, some families, many of whom retain Chinese citizenship, even began sending children to relatives in China, alarmed at the attitude and behavior of Italians around them.\n\nAnother who went into self-isolation after returning home from China was 23-year-old university student Chiara Zheng.\n\n\"I was conscious of the gravity of the situation. I felt a duty to do it for other people and those close to me.\""],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title","拿武漢肺炎歧視黃種人！歐洲霸凌總動員無法想像… | 聯合新聞網：最懂你的新聞網站"],["url","https://udn.com/news/story/120944/4313003"],["summary","udn\n 要聞\n 武漢肺炎全球燒\n \n\n \n\n \n \n Your browser does not support HTML5 Audio! 😢\n \n \n \n\t\t\t \n\n \n\n 義大利米蘭街頭醜化中國人的塗鴉。武漢肺炎疫情在歐洲各國引發公然歧視亞裔現象。（法新社）\n \n \n \n \n \n \n \n \n \n\n \n\n \n \n \n武漢肺炎疫情持續在全球延燒，某些西方國家的亞裔居民因此遭受前所未見的公開歧視。\n英國BBC報導，法國到30日有5個武漢肺炎確診病例，都是來自中國大陸的遊客，並未出現本土傳染案例。但一些亞裔居民在社交媒體上抱怨，他們在路上、大眾運輸工具和社交媒體上遭到謾罵和公然歧視，英國和其他國家也傳出類似狀況。\n\n●媒體叫亞裔黃…你敢說黑人是黑禍？\n法國亞裔居民在社交媒體貼文時還用了我不是病毒（#JeNeSuisPasUnVirus）的標籤回擊。Je suis ChinoisMais je ne suis pas un virus!!Je sais que tout le monde a peur au virus, mais pas de préjugé, svp.#JeNeSuisPasUnVirus pic.twitter.com/38bUTNWj3t— Lou Chengwang (@ChengwangL) January 28, 2020 \n法國當地報社《皮卡爾信使報》（Le Courrier picard）用煽動性標題「黃色警報」（Alerte jaune）和「黃禍？」（Le péril jaune?），還配上一張戴口罩的華裔女子來報導疫情，引發強烈抗議。該報很快就道歉，表示不是故意使用某些「最差的亞裔刻板印象」。Cette leçon de racisme décomplexé vous est offerte par le @CourrierPicard #coronavirus pic.twitter.com/jhcoNmsmm5— Madjid Messaoudene (@MadjidFalastine) January 26, 2020 \n反對種族主義國際聯盟（Licra）主席尼維表示，沒有報社敢用「黑色警報」這種標題，所以這顯然是個問題。\n一名住在法國的亞裔女子陳凱西（Cathy Tran，音譯）表示，她在前往科爾馬東部城鎮工作的路上聽見兩名男子說：「小心點，那個中國女孩朝我們走過來了。」●旁邊乘客說：她會汙染我們…\n陳女士說：「我下班回家的途中，一名騎著滑板車的男子經過我，要我戴上口罩。」\n17歲的巴黎居民、擁有越南和柬埔寨血統的女子鄭莎娜（Shana Cheng，音譯）表示，她26日在巴黎的一輛公車上遭受來自男女老少的人身攻擊。她聽見一名乘客說：「那邊有個中國女人，她會汙染我們，她必須回家。」她說，人們用作嘔的表情看著她，「彷彿我是病毒」。\n鄭女士說，沒有人出面阻止這些歧視言行，所以她決定忽略那些言論並繼續聽音樂，還故意咳嗽和發出吸鼻涕的聲音，「讓他們更害怕」。武漢肺炎疫情造成全球恐慌，加拿大多倫多機場許多人戴著口罩。（美聯社）●武漢肺炎疫情為內心的歧視找到出口\n陳女士說，她對人們的反應並不訝異，這次武漢肺炎疫情只是人們展現種族歧視行為的藉口。不同的是，這次她感受到公然歧視的程度遠比過去嚴重，「我們很少聽見亞洲人談論種族歧視，因為大家都知道，我們在默默忍受。但現在我們亞裔都同樣遭受歧視，而且非常過分。」\n法籍華裔作家兼導演葛蕾斯．李（Grace Ly，音譯）形容這種敵意是刻意「打壓中國」，並煽動反亞裔仇恨，「這些城鎮被隔離，人們被孤立還要面對死亡，這是很有趣的事嗎？」\n加拿大華裔社區也擔心，SARS疫情高峰期在多倫多發生的事會重演。2002年SARS在大陸爆發，有8098人感染，造成774人死亡。當時，加拿大有438個疑似感染SARS的病例，其中44人在2003年的春季和夏季死亡。當年大部分病例都在多倫多。\n多倫多市議員和華裔社區領袖29日在記者會上敦促居民，不要因為擔心疫情，就責怪或歧視亞裔居民。加拿大多倫多唐人街街頭的民眾。（路透）●前加國總理 SARS時堅持唐人街用餐\nSARS疫情期間人們都盡量待在家，觀光業和消費產業受到重創，華裔企業和唐人街商家遭到的打擊尤其巨大，收入少了40%至80%。加拿大華人全國理事會多倫多分會執行長賈斯汀．孔說：「當時的傷害很嚴重。人們失去收入、工作，有人被迫變賣房子，還在學校和工作場合被汙名化。」\nSARS疫情最嚴重的時候，時任加拿大總理克瑞強堅持在多倫多的唐人街吃午飯，顯示沒有理由躲避亞裔商家。加拿大前總理克瑞強。（路透）\n加拿大目前有2個武漢肺炎確診病例，孔先生表示，人們仍嘗試理解武漢肺炎的影響。但他也說：「華人社區有居民擔心武漢肺炎疫情，也擔心歧視會影響我們的日常生活。這會對企業、工人、商家和社區帶來巨大影響。」 \n \n\n \n 武漢肺炎\n 霸凌\n SARS\n 社群媒體\n \n \n\n\n\n \n \n\t\t\t \n \n\n \n \n\t\t\t \n \n \n \n\n \n \n \n \n \n \n 邊境管制加嚴日發給中、韓的簽證9日起失效\n \n \n 日本政府6日決定為新冠肺炎防疫，採取更嚴格的邊境措施，已發給中國大陸、南韓的簽證9日0時起失效；至於原為免簽對象國的南韓... \n 2020-03-06 10:30\n \n \n \n \n \n \n \n \n \n 英相強生高燒不退住院！能否繼續領導國政受質疑\n \n \n 衛報和CNBC報導，英國首相強生在染上新冠肺炎10天後，周日（5日）住進醫院，為包括高燒在內「持續不退」的症狀作進一步檢... \n 2020-04-06 07:27\n \n \n \n\n \n \n \n \n \n \n 西班牙再延長全國緊急狀態2周直至4月26日\n \n \n 路透報導，西班牙新冠肺炎確診人數超越義大利，累積至12萬4736例，成為歐洲染疫人數最多的國家。西國總理桑傑士表示，將再... \n 2020-04-04 20:24\n \n \n \n \n \n \n \n \n \n 當機立斷全面對外封鎖西班牙觀光小鎮零確診\n \n \n 西班牙疫情已淪為重災區，然而在疫情肆虐之際，南部小鎮札哈拉因及早採取全面封鎖策略，幸而無人確診。鎮長的當機立斷與居民的支... \n 2020-04-04 19:48\n \n \n \n\n \n \n \n \n \n \n 義大利傳奇鞋王Sergio Rossi疑因新冠肺炎病逝\n \n \n 新冠肺炎在義大利境內肆虐，造成多人死亡，而傳奇的義大利高級鞋履品牌創辦人Sergio Rossi也在此刻傳來病逝消息，而... \n 2020-04-03 18:49\n \n \n \n\n \n \n \n \n \n \n 歐洲疫情嚴峻西班牙病故人數破萬\n \n \n 法新社報導，西班牙當局2日表示，過去24小時暴增950起新冠肺炎死亡病例，創單日新高，病故人數也累計破萬，達10003人... \n 2020-04-02 22:43\n \n \n \n \n \n \n \n \n \n 日本擬放寬新冠病毒感染患者出院標準舒緩收治壓力\n \n \n 日本NHK報導，鑑於東京等地新冠病毒感染病例激增，日本厚生勞動省決定放寬症狀獲改善的患者的出院標準，以便醫院優先治療重症... \n 2020-04-02 16:52\n \n \n \n\n \n \n \n \n \n \n 日本禁台灣等73國旅客入境入境者都須隔離14天\n \n \n 日本政府致力防堵武漢肺炎疫情，首相安倍晉三今天表示，將擴大實施入境禁令，總計禁止來自台灣等73個國家和地區的旅客入境。另... \n 2020-04-01 20:59\n \n \n \n\n \n \n \n \n \n \n 疫情後來居上土耳其會變成下一個義大利嗎？\n \n \n 土耳其新冠肺炎疫情增長速度驚人，累計病例數「後來居上」，已進入全球前10名。跡象顯示，疫情有達到義大利那種規模的風險，遲未下達全國禁足令的中央政府飽受批評。 \n 2020-04-01 13:17\n \n \n \n \n \n \n \n \n \n 桑達姆號郵輪染疫外交部：船上14名台人台僑均安\n \n \n 荷美航運公司的郵輪「桑達姆號」（Zaamdam）爆發新冠肺炎疫情，外傳船上載有約30多名台籍旅客。我外交部今天表示，經我... \n 2020-03-30 13:35\n \n \n \n\n \n \n \n \n \n \n 川普：如果能把死亡人數壓低到10萬以內就做得很好了\n \n \n 美國總統川普29日表示，美國新冠肺炎死亡率將在兩周內攀上高峰，聯邦政府發布的保持社交距離準則，將持續到今年4月30日，以... \n 2020-03-30 12:32\n \n \n \n \n \n \n \n \n \n 首位染疫病逝皇室成員西班牙國王菲利浦六世表姐過世\n \n \n 外媒報導，西班牙國王菲利浦六世表姐、人稱「紅公主」的瑪麗亞‧特蕾莎在法國巴黎因新冠肺炎病逝，享壽86歲。 \n 2020-03-27 23:12\n \n \n \n\n \n \n \n \n\t\t\t \n \n\t\t\t\n\t\n\n\t\n\n\t\n\t\n\n \n \n \n \n \n \n \n \n \n \n 共 0 則留言\n \n \n \n \n \n 張貼文章或下標籤，不得有違法或侵害他人權益之言論，違者應自負法律責任。\n 對於明知不實或過度情緒謾罵之言論，經網友檢舉或本網站發現，聯合新聞網有權逕予刪除文章、停權或解除會員資格。不同意上述規範者，請勿張貼文章。\n 對於無意義、與本文無關、明知不實、謾罵之標籤，聯合新聞網有權逕予刪除標籤、停權或解除會員資格。不同意上述規範者，請勿下標籤。\n 凡「暱稱」涉及謾罵、髒話穢言、侵害他人權利，聯合新聞網有權逕予刪除發言文章、停權或解除會員資格。不同意上述規範者，請勿張貼文章。"],["topImageUrl",null],["error",null]]}]}],["text","新冠病毒大流行：意大利布拉托市 Prato 讓全世界上了一堂課！\n\n在布拉托市2萬多名中國人(加包括非法移工，中國人約5萬人) 在意大利發生新冠病毒大流行而天氣天哭泣卻沒有1人染新冠病毒！\n而且當地意大利居民從中國人學習到標準榜樣，使該城市新冠病毒感染率是全意大利最低的！\n\nPrato 布拉托意大利中部Tuscany 的成衣城市，距佛羅蘭斯Florence 20分鐘車程，19萬居民中2萬1千名是中國人，6500家中國人經營的成衣工廠。當地有1萬名非法移工。(意大利有30萬中國藉意大利人)\n\n意大利全國新冠病毒感染率每十萬人 115例，在布拉托只有每十萬人62例\n\n意大利城市封鎖時序：\n1月31日：禁止中港奧韓航機入境\n2月21日：意北十城市封鎖\n3月8日：意北擴大封鎖\n3月21日：意大利全國封鎖\n4月4日。意大利確診11萬9千人\n\nPrato 布拉托中國人農歷新年回大陸老家過年後回布拉托就在房間自己隔離14天才見家人，出外戴口罩手套。\n\n他們在大陸親自耳聞目睹疫情嚴重性，知悉 they knew 大條事情發生了；回布拉托後把工廠商店都關閉了，自動的群體的[居家隔離]，[出門戴口罩手套]，比意大利政府提前7星期自己封鎖，也勤意大利朋友要戴口罩。他們的孩子也提前𣎴上學。\n\n8星期後今天，布拉托市的新冠病毒確診病例是全意大利最少的！橄欖油味重的意大利人終於對布拉托市中國藉意大利人另眼相看！\n\n布拉托人給全球人上課講義摘要：\n越早封鎖城市越有效！\n居家隔離14天是關鍵\nStay home 出門戴口罩手套\n\nFrom confidence to quarantine: how coronavirus swept Italy\n想當時意大利總理康提1月底時説：意大利有全歐洲最嚴格的防範措施 (對抗武漢病毒🦠！\nUndetected transmissions in early stage of outbreak at heart of current difficulties 10 Mar 2020\nhttps://amp.theguardian.com/world/2020/mar/10/from-confidence-to-quarantine-how-coronavirus-swept-italy\n\nThe city of Italy is where the Chinese are getting heroic status\nhttps://engnews24h.com/the-city-of-italy-is-where-the-chinese-are-getting-heroic-status/\n\n\nFrom zero to hero: Italy's Chinese help beat coronavirus\nSilvia Ognibene | Reuters | Florence, Italy\nJakarta / Wed, April 1, 2020\nhttps://www.thejakartapost.com/amp/news/2020/04/01/from-zero-to-hero-italys-chinese-help-beat-coronavirus.html\n\n\n拿武漢肺炎歧視黃種人！歐洲霸凌總動員無法想像…\n2020-01-31 08\nhttps://udn.com/news/story/120944/4313003"],["id","jjxk7ududeqj"],["createdAt","2020-04-06T01:50:00.863Z"]]}],["reply",{"__iterable":"Map","data":[["id","4QzmT3EBrhVJn3LNzHVC"],["user",{"__iterable":"Map","data":[["id","HkXxOXABHjv_5zI2Qlbz"],["name","Ann"],["avatarUrl",null],["level",16]]}],["type","OPINIONATED"],["text","1. 托斯卡納（Tuscany）大區的衛生官員貝爾蒂（Renzo Berti）也認為，普拉托市（Prato）的華人在疫情中「做的比我們（義大利國人）更好」，該市的平均感染率不到義大利全國平均的「一半」，約5萬中國人口中也無人確診。\n2. 據《報導者》的採訪．布拉托市華人防範疫情的意識，確實遠比義大利本國人要強，提早關閉商店、自我隔離、派發口罩。\n\n據2016年的統計顯示，普拉托人口約19.2萬，持中國護照的移民約1.9萬人。關於當地實際到底有多少華人，以往報導的說法從2～6萬人不等，幾位受訪者普遍認為4萬人左右，其中原籍溫州的不少於四分之三。\n"],["reference","抗疫有成義大利中國人鹹魚翻身\nhttps://udn.com/news/story/120944/4460380\n\n溫州人把武漢肺炎帶到義大利？Prada、Gucci背後的華工：我們可以給世界一個解釋\nhttps://www.twreporter.org/a/covid-19-wenzhou-people-in-italy\n\n義大利最大華人社區「5萬人零確診」　完美「閃疫」靠這個關鍵\nhttps://www.ettoday.net/news/20200401/1682053.htm"],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title",""],["url","https://udn.com/news/story/120944/4460380"],["summary",""],["topImageUrl",null],["error","NOT_REACHABLE"]]},{"__iterable":"Map","data":[["title","溫州人把武漢肺炎帶到義大利？Prada、Gucci背後的華工：我們可以給世界一個解釋 - 報導者 The Reporter"],["url","https://www.twreporter.org/a/covid-19-wenzhou-people-in-italy"],["summary","在1980年代中國「改革開放」的背景下，50萬溫州人走向世界，不少前往義大利去經營餐館和成衣業。義大利目前至少有30萬中國人，其中溫州是最大族群。而在這場COVID-19（又稱武漢肺炎、新冠肺炎）疫情裡，溫州人成為可能是把病毒帶到義大利、甚至帶到歐洲的重點懷疑對象。《報導者》採訪多位身在普拉托（Prato）的溫州人，試圖理解義大利境內溫州社群的面貌；也試著揭開在多重迷思的夾殺下，以溫州人為主的基層華工真實處境。2019新型冠狀病毒起源於武漢，傳遍中國，又沿著「一帶一路」等通道席捲全球。被認為是G7工業國裡最親中的義大利，3月裡成了當下全球除中國外疫情最嚴重的地方，截稿前超過6萬人確診。3月11日，義大利總理孔蒂（Giuseppe Conte）宣布「鎖國」，20日官方公布的死亡人數已超過中國，火化爐24小時運轉的悲劇，從武漢轉移到了義大利半島。究竟是誰把病毒從中國帶到了義大利、帶到了歐洲？中國最著名的移民城市溫州成了部分外界重點懷疑的對象。因為有大量溫州人在武漢經商，又在春節前回家過年，溫州一度疫情嚴峻，2月2日即實施「封城」。同時，在歐洲也有大量原籍溫州的移民，尤其是義大利的服裝產業基地普拉托（Prato），Prada、Gucci等著名品牌和許多「快速時尚」服裝均在此生產，老闆和工人幾乎都是華人，絕大部分正是來自溫州。有外國人把這條線連起來，看似邏輯合理。而當疫情重災區轉為歐洲後，也有不少中國人開始指責這些海外移民，平時在外國賺錢，遇到問題又急著逃回祖國避難。但事實果真如此嗎？《報導者》採訪了多位身在普拉托的華人，試圖揭開在多重迷思的夾殺下，以溫州人為主的基層移工真實狀況和處境。停工之後生活停頓「在普拉托，自己有住家的工人並不多，我目前還是在老闆家裡搭鋪。」「搭鋪」是當地華人的「術語」，指的是員工住在老闆提供的集體宿舍裡。胡先生在這位溫州老闆的服裝廠裡幹了2年，覺得他人還不錯，從3月初停工到現在，「對我們8個員工還是管吃管住。」但因為不知道什麼時候可以復工，焦慮還是難免的。「我聽說，有些廠停工之後，就一直在趕走搭鋪的員工。還有一些老闆為了賺錢，就算現在疫情嚴重，也還在冒險開工。不過這兩種情況應該都很少見。」胡先生的話得到了其他受訪者的印證，另一位普拉托華人表示：「也不能完全怪老闆，生意不好，到頭來裁員都是難以避免的。」普拉托是托斯塔尼大區（Tuscany）僅次於佛羅倫斯（Florence）的第二大城市。據2016年的統計顯示，普拉托人口約19.2萬，其中持中國護照的移民約1.9萬人（註）不包括已獲得義大利國籍的華人和沒有合法身分的中國移工。。關於當地到底有多少華人，以往報導的說法從2～6萬人不等，幾位受訪者普遍認為4萬人左右，其中原籍溫州的不少於四分之三。因為疫情，熱鬧的普拉托安靜了下來，隨處可見中文招牌的街道上，空空如也。從溫州來此已經十餘年的姜先生說，因為買不到口罩，大家都不敢出門，幸而自己之前囤了不少食物，「足夠吃兩個月了。」返中避難？多數只敢想想而已祖籍溫州的「90後」Marc說：「每天就在家自我隔離，打打遊戲看看片，日子也還不算太無聊。」義大利現在形勢嚴峻，中國政府又宣傳國內現在很安全，已經實現全國「零新增」，在普拉托的中國人確實有不少想回去，但多是想想就知道不現實，決定放棄，真正能邁開腿的，卻沒有幾個。28歲的丹丹在微信朋友圈動態裡po了一張圖，內容是米蘭到溫州的航班機票價格：經濟艙成人票價2,665歐元／人，折合人民幣約21,000元／人公務艙（商務艙）成人票價3,643歐元／人，折合人民幣約28,700元／人兒童票價為成人票價的75%這樣的機票，每個月在餐館打工收入1,200歐元（約合人民幣9,000元，新台幣39,000元）出頭的她，買不到也買不起，「而且還有兩個孩子，也怕他們萬一在飛機上被感染。」既然如此，索性就帶著兩個孩子在家做做餅乾，玩玩遊戲。但經濟壓力讓她擔心，之前上班的餐館關了，沒有了收入；餐館不知道何時恢復營業，即便重開會不會還需要自己，也不確定。萬一失業，很可能一時不容易找到新的工作。回國發展？「離開8年了，回去也不知道可以做什麼。」出生在普拉托的Marc估計：「疫情之後，肯定會有很多人失業。」溫州，有一個和「歐」相似的簡稱「甌」。它位於浙江省東南部，戶籍人口800餘萬，被認為是中國最具移民特質的城市，歷史上出現過4次移民潮，最早可以上溯到先秦、西漢時期的東甌國，最近一次則以1980年代的「改革開放」為背景，形成了50萬溫州人走向世界、170萬溫州人走向全中國以及280萬外來務工人員湧入溫州的複雜情勢（註）資料來源：任柏強、奚從清（2007）。〈關於溫州移民社會研究幾個問題的思考〉，《溫州大學學報·社會版》，20（6）：1-6。。義大利國家統計局（ISTAT）公布的2018年統計顯示，在當地的中國人有30萬，但這並不包括以義大利籍留下來的華人，此外非法居住者據估計有5～8萬人。其中最大的一個族群就是溫州人。1980年代後，義大利實行吸收外國移民的政策，先後在1986、1990、1995、1998年實施「大赦」或接受非法移民居留申請，來自東歐、北非和中國的移民由此大量湧入（註）資料來源：陳翊、吳海蓉（2017）。〈從立足到發展：海外移民創業的跨國動態化實踐——以法意溫州移民為例〉，《華人華僑歷史研究》，3：27。。早期溫州移民在歐洲站穩腳跟後，與之存在血緣、親緣、地緣聯繫的親友，也隨之接踵而來。丹丹說：「我公婆大約是2003年左右到義大利來的，每天就是拼命工作賺錢，攢了錢就寄回家。10年前我老公也過來了，然後過了2年，我和老公結婚，也來了普拉托。」為了3倍薪水遠行的基層華工福建籍的關先生，現在一家普拉托頗有知名度的服裝公司擔任管理工作。他說：「我記得2005年的時候，我在國內的收入大概是人民幣1,500元（約新台幣6,000元），到了這裡之後，收入是國內的3倍。現在則可以拿到每個月2,000歐元左右（約人民幣1.5萬元，新台幣6.5萬元）。」他也介紹說，從事服裝行業的移工，每月收入差不多1,500～2,000歐元。在中國，很多白領的收入水準也不低，但從事服裝、餐飲等行業，確實不可能拿到這樣的薪水。丹丹說：「國外花銷也會比較多，但節約的話，可以存起來的錢是比國內多。」在普拉托的4萬華人中，這樣的基層移工佔了絕大多數。「我們哪能算什麼華僑，說穿了就是『華工』，」在服裝廠打工十餘年的姜先生如是說。早期的移工，勞動條件很差，在服裝廠每週至少6天，每天工作15、16個小時司空見慣。現在工作條件有所改善，但遇到趕工，連續工作12、13個小時的情況仍然存在。義大利中文媒體《華人街》網站上，除了提供資訊，也供使用者自由發布招聘或求職的訊息，從其「欄目分類」中可以看出，職位幾乎都是工廠、餐飲、司機、按摩、保姆、臨時工等體力勞動。外界迷思：溫州移民都是「土豪」？不過，經過長時間的資本、經驗、人脈的積累，還是有一些溫州移民，完成了「黑手變頭家」的過程。Marc的父母離開溫州已經20多年，他自己也出生在這裡，拿的是義大利護照。父母現在普拉托經營一家小型服裝企業，家裡也在當地置產，但國籍仍然是中國。根據義大利商會聯盟統計，華人中平均每5位就有1位創業者（註）資料來源：張子宇、馬歡等（2012）。〈活在邊緣：溫州人在羅馬〉，《國家經濟地理》，1：85。。Marc表示，這和自己了解的情況相符，「要開廠並不難，但未必都能賺到錢。做得好的，一家廠每個月能賺幾萬歐元，但現在也愈來愈難了。」那會有在國內本來就已經很富裕的溫州人在普拉托生活嗎？所有受訪者均表示，從未聽說過這樣的情況。確有一些以往報導中，溫州商人大舉收購義大利品牌，但這樣的富翁與同鄉的移工之間，從無交集。中國人與普拉托產業的愛恨情仇一年前，中國國家主席習近平訪義，並與義大利總理孔蒂簽署「一帶一路」協議。因為經貿交往密切和「親中」，義大利爆發嚴重疫情後，還遭到了一些「反中」人士的嘲笑。但在基層移工的世界裡，「一帶一路」和自己並沒有多大關係，他們說自己不關心、不了解。即便在一家頗有知名度的服裝企業裡擔任管理職、手下有40多名員工，關先生也表示，他從未聽自己的溫州老闆說起過「一帶一路」的影響。指稱這些已經在義大利生活已久的移工，是中國的國家資本主義沿「一帶一路」向外輸出的載體，存在著倒果為因的誤解。但義大利人對華人的感受，確實複雜。一方面，華人族裔的經濟對普拉托地區生產總值的貢獻超過11%，購買力驚人的中國遊客和中國市場更對義大利人充滿誘惑力。但另一方面，「中國製造」的低成本優勢，嚴重衝擊了小規模家族企業為主的義大利傳統產業，紡織、皮革、製鞋等產業「傷亡慘重」。2008年金融危機之後，大量當地工廠倒閉，工人失業。一些瀕臨倒閉的企業主索性把工廠賣給了中國人，普拉托的紡織、時裝行業就此被佔領。2009～2014年，過往意識型態在共產黨和左翼政黨輻射範圍內的普拉托，選出了一位受到中右翼支持的市長，上任之後曾對華人企業進行過一番掃蕩，包括凍結賬戶，沒收車輛、不動產等資產，禁止餐飲店在零點後營業。Made in Italy by Chinese義大利記者佩拉琪妮（Silvia Pieraccini）於2010年出版了《中國衝鋒》（L'Assedio Cinese）一書，講述了義大利人眼中，溫州移民如何在普拉托扎根的故事。其中提到，中國人如何嚴重衝擊了當地傳統經濟紡織業——他們初來乍到的1991年，普拉托有8,141家紡織廠，時裝公司只有2,000家；到了2009年，紡織廠只剩3,300家，時裝公司卻增加2倍。擔任服裝廠管理工作的關先生坦承：「普拉托現在幾乎所有的服裝企業都是溫州老闆開的。」溫州移民在普拉托開發一種新產業模式，義大利語叫做「pronto moda」，意味「快速時尚」，其運作模式是：從中國進口廉價布料，以閃電般的速度將布料變成時尚服裝，以跟上快速變化的風格，賣給全球低價零售商與市集。此外，Prada、Gucci等奢侈品牌的製造商也都是當地的中國工廠，雖然這些高端品牌仍然印著「Made in Italy」的標籤，但懂行的人心知肚明，完整的表述應該是「Made in Italy by Chinese」。Marc的父母經營小型服裝企業，自己也先後在印花廠、裁剪公司、布行等工作過。他說：「這個我太清楚了，無論大牌還是快速時尚品，應該都是華人製作的，品質差別並沒有太大，貴的是牌子，大錢還是他們賺的。」網路上有一個略帶戲謔的說法，將肺炎疫情比作球賽，中國打上半場，其他各國打下半場，而海外華人則不幸要出戰全場。而義大利華人，無疑又是所有打滿全場的「球員」中，最體力透支、心力交瘁的一群。丹丹說：「我公婆春節前回溫州了，開始是我們擔心他們在國內的情況，現在又成了他們擔心我們，每天要用微信和我們視頻一次。」那有沒有可能是春節後，一些溫州人在家鄉被感染，又急於避疫，反而把病毒帶到了義大利呢？雖然無法百分百排除這種可能，但受訪者們認為機率很小。「回義大利來的人應該很少，像我家畢竟有兩個孩子在這裡，公婆也害怕，萬一自己被感染了，又把病傳給孩子。」零號病人是誰？仍證據不足《報導者》聯絡到的這些受訪者均表示，自己在義大利的親友中，還沒有聽說有被傳染的。義大利《華人街》網站的一位工作人員向我們透露：「官方不公布國籍訊息，沒有確切的數字。被傳染肺炎的義大利華人，我知道的有十幾位，不知道的還有很多。」但在已確診的6萬多人中，這個比例並不大，由此推出是溫州人把肺炎帶到義大利，證據不足。事實上，到底誰是義大利的「零號病人」，仍存在不同說法；究竟疫情是如何傳入，目前尚難釐清。但較為明確的是，義大利疫情爆發始於北部倫巴第大區（Lombardy），難說和中部的普拉托間有怎樣的直接關係。防疫意識的「比賽」雖然絕大多數義大利人對華人態度比較友善，但在COVID-19疫情初期，還是發生了一些針對、乃至攻擊華人的事件。「華人街那裡，就發生過一起老外打中國人的事，他們說病毒是中國人帶來的，」姜先生略感氣憤，「現在看到被感染的，基本上都是老外，他們總該沒話說了吧。」而且，在他們看來，華人的防範意識遠比本國人要強。丹丹說：「畢竟我們一直在關注國內的狀況，早在2月底，義大利感染者超過500人的時候，大家就已經很警惕了。我打工的餐飲店，老闆已經開始提早關門。」姜先生記得：「當時有華人在路上派發口罩，還被義大利人嘲笑。」義大利《世界中國》雜誌社社長胡蘭波在《南方周末》撰文說：中國人特別聰明，早就覺得義大利那麼不重視疫情不行，自己先把自己武裝好了，備好口罩，關上店門居家。\n⋯⋯義大利人就是太不在乎了，我想，大部分的西方人都該有偏見，覺得傳染病只會發生在第三世界。\n⋯⋯早幾天免費發給義大利人口罩，他們都不要，現在有的直接敲中國鄰居的門討口罩。多位受訪者也表示，目前都處於在家自我隔離的狀態中，「但有些義大利人，還沒有完全隔離，有些至今也不戴口罩。」在社群媒體上，則熱傳一段影片，內容是說義大利一位市長，以近乎咆哮的方式向市民喊話，呼籲大家不要出門。針對一些市民每天出門購物、跑步甚至開派對的情況，市長怒嗆：「我們城市常年跑步的人最多20個，現在全都變得熱愛跑步了？」義大利有個奇怪的傳聞叫「中國人從來不死」（註）兩位義大利記者Oriani Raffaele、Staglianò Riccardo還以此傳聞出發，到義大利各地採訪，寫了一本書《I Cinesi Non Muoiono Mai》（簡體版譯為《不死的中國人》）。，會有這樣的迷思，一是因為華人很少參加公共活動，二來則是因為義大利人很少見到他們的葬禮。對義大利華人來說，最大的痛點始終是無法真正融入當地社會。2019年，義大利地方議會首次出現華人面孔，祖籍浙江溫州甌海的林詩璇、祖籍麗水青田的王小波雙雙進入普拉托議會，但華人族群與當地社會的區隔仍然根深蒂固。原因首先是溫州人本身就非常注重血緣、親緣、地緣關係，因而族群內的向心力較強。加之當地華人實在太多，所以在普拉托，哪怕不會講義大利語，只要會講溫州話，也完全可以生存。來自河北的胡先生說，即便同樣是中國人，自己也是花了一段時間進入這個溫州人為主的環境。建立出自己的社會支持系統「要和義大利人交往，語言還是很大的障礙，」丹丹說，雖然自己在這裡已經生活了8年，但義大利語其實還根本談不上流利。語言能力背後，是教育程度的限制。義大利福利機構（Caritas）的一項統計則指出，中國移民中只有12%上過高中，遠低於外國移民平均水平的28%。講到義大利目前的疫情，幾乎每一位身在普拉托的受訪者都會提起「華人街」這個中文網站，那是他們每天獲取資訊的主要管道，關注義大利語媒體的人相比少得多。丹丹說，房東對自己很客氣，這樣的義大利人算是難得。大部分受訪者則表示，義大利人對華人談不上歧視，但終究涇渭分明。鎖國又封城中的義大利，從南到北，很多自我隔離中的人，辦起了陽台音樂會，在各自家中的陽台上，播放或演唱義大利國歌。在普拉托，也有華人在陽台播放起了中國國歌《義勇軍進行曲》。「雖然我們在異國他鄉，但就像生活在中國一樣，還可以聽到國歌，」聽到中義兩國國歌交替響起，自認為中國人的Marc心中分外激動。單看護照，Marc其實是土生土長的義大利人，但他輾轉換過幾個工作，老闆都是華人，不久前還在「華人街」網站發文想找一份穩定的工作，但卻從沒想過到義大利人的公司去應徵，「他們是不會歧視中國人，但要說到工作，肯定還是留給自己人。」Marc覺得，自己拿著義大利護照，好處也就是出國旅行比較方便，其他和中國護照也沒有什麼差別。義大利並不是像北歐那樣的高福利國家，所以「如果找不到工作，也沒有什麼失業金，還是只能吃土。」上海華東師範大學博士勞拉・德・普雷托（Laura De Pretto）做的〈義大利溫州移民的社會認同：亞洲價值觀的堅持和雙文化的可能性〉研究顯示，「移民到義大利後，溫州人表現出更強的民族身分認同意識，這是由於他們必須建立一個強大的社會支持系統，以成功應對一個完全不熟悉、甚至是不友好的環境。中國人的身分認同和親密的家庭關係是其社會支持系統的堅實基礎，以助於他們面對外國的陌生環境。隨著在義大利生活的時間延長，溫州人對亞洲價值觀的堅持有微微降低的趨勢，但並不顯著。」不想扎根歐洲，仍盼落葉歸根長期在普拉托的移工，有不少拿到了義大利綠卡，但是入籍的比例很小，不僅僅是因為義大利移民政策收緊，也由於他們並不想在歐洲扎根。「我不喜歡入籍，因為我是中國人，而且很多家人也都在國內。」丹丹的兩個孩子都出生在義大利，但拿的卻是都是中國護照，她甚至想過把孩子留在中國。「公公婆婆平時要管孩子，只能做每天4、5小時的辦公，我自己收入也不多，老公稍微多一些。但一家人租套房子，加上電費垃圾費，每個月1,000歐元（約人民幣7,600元，新台幣32,000元。）也不夠。」丹丹和老公的老家都在溫州的鄉下，他們一直想賺錢在老家買套房子，但因為收入就這些，還有兩個孩子要養，所以一套房子人民幣3、40萬元的首付，他們也還沒有攢夠。這些溫州移工，只是身在歐洲的漂泊者，希望賺到足夠的錢，回家買房子，做點小生意，最後落葉歸根。在經濟之外的面向，以溫州人為代表的華人，始終是游離於義大利主流社會之外的「他者」。無論是第一代、第二代移民，無論是否入籍，他們的認同多數還是中國。在武漢肺炎疫情爆發後，大家不遺餘力地購買口罩等防護物資，寄回中國幫助同胞。Marc表示：「這是必須。而且大部分不是寄給親友，而是捐給醫療機構。」只是沒想到兩個月後，在義大利的中國人，又在等待國內反向援助。仇富情結下，被「跑毒」批評夾攻胡蘭波寫到：「義大利溫州人多，過去叫負債逃跑的人『跑路』，現在叫逃回國的人『跑毒』，中國語言太有意思。早點做『跑毒』還好，現在真要穿過萬千封鎖線，一路上隨時可遇毒彈，到了祖國還得到指定酒店隔離。在義大利也有幾個華僑染病了，好在第一個病人已經離開重症監護室，病情好轉了。」當疫情在中國趨緩、反在歐洲爆發後，中國人又開始擔心病毒從境外回流。一些人把矛頭指向了海外僑民，覺得他們想賺錢的時候就去國外，遇到麻煩了就想躲回國。這種情緒，可能也和很多中國人認為「溫州人都很有錢」的迷思，所導致的「仇富」心理有關。確實有富豪階級的溫州人曾告訴記者，「溫州人結婚的時候，都要裱一張幾百萬的存摺，掛在牆上」。但事實上，三面是山一面向海的溫州，並非處處經濟發達，人人有錢。一位溫州籍的資深媒體人表示：「世界各地差不多有60萬溫州人，改革開放之前就已經有人透過偷渡出國了，但那是因為溫州實在沒什麼資源，太窮了。」普拉托的溫州移工，幾乎來自溫州市轄的幾個縣，根本不是許多人想像中的「土豪」。姑且不論一張回國的機票，抵普通勞工2個月的收入，「我們是一家人，所以留在原地，如果只有一個人在歐洲呢？如果他又沒有住家的話，肯定會選擇回去（中國），」丹丹覺得，中國人會指責旅歐同胞，也是因為根本不了解國外的制度，在中國生病了至少去醫院還是可以掛上號，但義大利實行的是家庭醫生制度，從預約到看病時間漫長，她以前得病，都是自己在家吃藥，「即便回國的人，絕大多數也是服從政府安排，接受檢疫、隔離的。而且這是他們的權利啊。」"],["topImageUrl",null],["error",null]]},{"__iterable":"Map","data":[["title",""],["url","https://www.ettoday.net/news/20200401/1682053.htm"],["summary",""],["topImageUrl",null],["error","NOT_REACHABLE"]]}]}],["createdAt","2020-04-06T14:30:57.866Z"]]}]]},{"__iterable":"Map","data":[["article",{"__iterable":"Map","data":[["replyCount",1],["references",{"__iterable":"List","data":[{"__iterable":"Map","data":[["type","LINE"]]}]}],["replyRequestCount",1],["user",null],["hyperlinks",{"__iterable":"List","data":[{"__iterable":"Map","data":[["title","Flipboard on Flipboard"],["url","http://flip.it/dqxAaY"],["summary","@flipboard | Official Flipboard accountWhere a Sore Throat Becomes a Death SentenceKIGALI, Rwanda — Neighbors whisper that she is pregnant, a disgrace for a young, unmarried woman. The rumors mortify her. She hates her swollen belly.

This summer, as anger over the separation of migrant families at the border …Homeland SecuritySee How the Fall Equinox Is Celebrated Around the WorldCulture & ExplorationPhoto Gallery

From early-morning gatherings at Stonehenge to torch-bearing revelers parading through a city in Spain, people around the world herald the seasonal change in myriad ways.

The Duel: Timo Boll vs. KUKA Robot

現有回應

增加新回應

你可能也會對這些類似文章有興趣