They think the attacker was very tall—so that lets you out.
他们认为歹徒是个高个子，这样就没你什么事儿了。
Again, the attacker requires very few resources.
同样，攻击者只需要很少的资源。
It allows the attacker to impersonate the victim.
这将允许黑客冒充受害者。
As the name suggests, the attacker opens the connection only halfway.
顾名思义，攻击者只是部分地打开连接。
Think of the problem from two perspectives: the server, and the attacker.
请从两方面来考虑这个问题：服务器和攻击者。
As a result, the attacker gets the cookies and impersonates the victim.
因此，黑客获得cookies并冒充受害者。
Reports said the attacker, a local caretaker and receptionist, was not armed.
报道称袭击者是当地一名管理员和接待员，没有携带武器。
But that attack was rare in another way: It was easy enough to identify the attacker.
但是，这次袭击从另一方面来看却是极为少见的：袭击者很轻易地就被发现。
This attack USES password cracking to penetrate the systems that the attacker wants to deface.
这一攻击使用密码破解来渗透攻击者想破坏的系统。
XHR: Browser cross-domain rules prevent the attacker from making the request in the first place.
XHR：浏览器跨域规则一开始就阻止了攻击者发出请求
A vulnerability is a weakness in the system, but it is not necessarily known by the attacker.
弱点是系统的缺点，但是攻击者可能不知道。
In this case, nothing terrible happens, and the attacker simply sees an error message in the client.
在这个示例中，没有发生什么可怕的事情，攻击者只是在客户机上看到了一条错误消息。
Unlike those, the XSS attack involves three parties: the attacker, the client, and the Web site.
与那些攻击不同的是，XSS攻击同时涉及三个群体：黑客、客户端和Web站点。
If a user's Kerberos password is stolen by an attacker, then the attacker can impersonate that user.
如果一个用户的Kerberos密码被攻击者窃取，攻击者就能够模拟该用户。
In another type of attack, the attacker might modify the stylesheet to hide information from users.
在另一种攻击类型中，攻击者可能会修改样式表，把信息隐藏起来不让用户发现。
But once an attacker can run code on such a machine, the attacker instantly attains complete control.
但是，一旦攻击者可以在这样的机器上运行代码，就可以立即获取完全控制。
If the exploit is run while the program is running as root, then the attacker will get a root shell.
如果程序以root权限执行时执行了利用指令码，则攻击者将得到rootshell。
Determining the identity of the attacker was a matter of narrowing down the line of potential suspects.
确定攻击者的身份需要逐渐缩小一连串嫌疑人的范围。
If an attacker can cause a buffer to overflow, then the attacker can control other values in the program.
如果攻击者能够导致缓冲区溢出，那么它就能控制程序中的其他值。
Most attacks involve two parties: either the attacker and the Web site or the attacker and the client victim.
大部分网站攻击只涉及两个群体：黑客和Web站点，或者黑客和客户端受害者。
Again, you can see that this attack can be performed with frighteningly few resources on the part of the attacker.
您可以再次发现，对攻击者一方而言，只需少得惊人的资源就可以执行这种攻击。
That means that the attacker can overwrite SFP (the saved frame pointer) and then overwrite ret (the return address).
那意味着攻击者能够改写sfp(即已保存的帧指针)，然后改写ret(返回地址)。
The malicious script introduced by the attacker is executed by the browser and the data is passed to the hacker's Web site.
于是浏览器会执行攻击者引入的恶意代码，数据将被传递到黑客的网站。
The bow and arrowrevolutionized warfare by enabling one to launch attacks from adistance with far less risk to the attacker.
弓和箭变革了战事，它们使攻击者可以远距离进攻而自身所处危险更小。
N: he said that the attacker advances against Nineveh! You have to guard your fortresses, scout the road and prepare all your strength!
那鸿：“他说有人要袭击尼尼微，你们必须要守卫好城堡，派兵巡逻，做好一切战斗的准备。”
Essentially, if you allow an attacker to run code on such a machine through any means, the attacker can completely take over the machine.
从本质上说，如果您允许攻击者在这样的机器上以任何方式运行代码，则攻击者完全可以接管该机器。
It is particularly dangerous because the attacker does not need a powerful machine or a powerful network connection to perform this attack.
因为攻击者不需要功能强大的机器或高速的网络连接来执行这种攻击，所以它特别危险。
A common scenario is that the attacker calls the shopper, pretending to be a representative from a site visited, and extracts information.
一个常见的场景是攻击者打电话给购物者，假装是购物者所访问站点的代表，并且提取信息。
With the system compromised, the attacker carries out whatever the next step may be-whether it's to gather data or compromise another system.
系统被破坏后，攻击者将实施以下任一步骤——收集数据或破坏另一个系统。
The problem is that if an attacker can control the underlying libraries used by a program, the attacker can completely control the program.
问题是，如果攻击者可以控制程序用到的底层库，那么攻击者就可以控制整个程序。
应用推荐