去年黎贝卡还在写“NORMCORE是什么鬼”，说时尚圈正在大行“性冷淡风”，没过多久，2016春夏时装周各大秀场上就都是各种华丽复古的设计，时装周外的街拍达人们也开始“反性冷淡”……所以说，潮流易变，风格永存。太流行的东西，买完以后没多久很可能就生厌，下一季再也不想穿了。但有一些单品，则经得起时间考验，无论潮流如何变幻，都不过时。
每一年，各大品牌的设计师和时装精们都会力推一些流行元素。但并不是所有的元素都能真正被大众接受。所以说，流行什么也不全是时尚圈说了算，真流行什么，还是得大家说了算。
Google每年都会按照搜索记录发布一份时尚趋势报告，但它毕竟代表不了中国的情况。昨天，今日头条和时尚集团联手在北京举行科技时尚数据盛典。今日头条公布了一些统计数据，包括时尚频道最热搜的关键词，哪一类时尚资讯被阅读得最多，都有精确到个位数的统计。虽说这个数据也不能完全反应所有人的喜好，但在统计上还是有其科学性，毕竟每天超过三千万用户打开他们家的APP。
发布现场做了一场科技VS时尚的对谈~（同场加映的彩蛋在文尾哦，好色的你一定要看到最后。。。）▼
今日头条的数据显示，对时尚感兴趣的用户，他们的前五个阅读标签分别是：女星、范冰冰、女人味、连衣裙和高跟鞋。你是不是最关注这些？▼
在时尚单品方面，今日头条的统计也提供了详细的数据。虽然并不代表大家看了这些单品就会买，但这至少表明在过去一年大家对它们最感兴趣。以下这几个单品的阅读量就是全年最大的。▼
和你想象的一样吗？这几个单品，我们之前几乎都有陆续写过。既然它们这么受关注，今天再来说说它们为什么会这么流行，以及怎么选怎么穿————
最受关注单品No.1
阔腿裤 阅读量：万
我们前几天写鞋子搭配时刚刚写过的阔腿裤，看来它是名副其实的头号热门单品，不单单是时装精爱穿，路人也对它充满了好奇。那期专题后，后台不少人反映这种单品太难穿了，还有人说它不适合亚洲人的身材。怎么会，作为哈比人的博主亲测很实用。
很多亚洲明星出席活动都有穿，比如高圆圆和宋佳就穿得很有范。▼
来自思密达国的裴秀智和朴信惠穿得也很大气。▼
Chloe家的双排扣阔腿裤今年很受欢迎，歪果人Poppy Delevinge和国内女星白百何穿得不相上下。▼
今年流行的短款阔腿裤也很受明星欢迎，看上去就很凉快。▼
很多人都担心阔腿裤容易显得屁屁大，其实只要突出腰线就不至于很难看，像卡戴珊这样极端的身材穿上去也还好。另外，最好是买硬朗一点的面料，会有更好的垂坠感且不容易膨胀。▼
有不少阔腿裤的裤腿做得越来越宽，甚至直接变成了裤裙，看上去很庞大，就算穿上高跟鞋阔腿裤的显高效果也要大打折扣，严重不推荐。▼
一定要买高腰款，我以前穿过一件低腰的，阔腿裤的拉风效果完全不见了，全身的比例变成五五分。还有，记得把上衣扎进裤子里穿，这样才能完全发挥它的显高功效。▼
阔腿裤虽然对鞋子有要求，但在衣服的搭配上却是不怎么挑的。秋冬季节的各种毛衣都可以和它搭配。▼
穿上大衣，依然不改大长腿本色。但还是要注意选择高腰裤，把内搭衣服扎进去。▼
最受关注单品No.2
阅读量：万
小黑裙位居第二倒是意料之中，一直以来小黑裙都是每个女人衣柜里必不可少的经典单品。年底参加公司年会、平时参加朋友爬梯或者有个正式一点的约会，不知道穿什么的时候，一条小黑裙保证不出错。如果你搭配得宜，还可以出彩。
不管你是二十岁还是五十岁，一件经典款的小黑裙可以一直陪着你。我的女神和她的女儿伊娜穿的小黑裙都很美。▼
明星在出席各种活动时，小黑裙总是她们的贴心陪伴。比如刘亦菲和Baby就很喜欢穿。▼
新任邦女郎Lea Seydoux爱穿带有诸如荷叶边、百褶裙摆这些小细节的款式，让自己多些少女感。▼
小黑裙风格百变，可以有女人的性感、女孩的可爱，还可以有大女人的霸气、小女人的温柔。来看小黑裙的忠实粉丝贝嫂的演绎。▼
年轻活力妹子们可以选择膝盖以上的长度，熟女们则建议选膝盖以下的长度。▼
高腰A字下摆的小黑裙基本上适合所有身形。大腿粗的梨形身材妹子们可以选择到膝盖的长度，大胸妹们可以选择领口大一点的款式。▼
不要以为只有夏天才可以穿小黑裙，选择天鹅绒等厚重的面料搭配透肉的丝袜会让整体看上去不臃肿，很适合秋冬穿。▼
短款小黑裙搭配高筒靴，长款小黑裙搭配过踝靴，外面穿上大衣的画风很适合广州的冬天。▼
最受关注单品No.3
阅读量：万
花衬衫能入选大家最感兴趣单品我也是蛮吃惊的，虽然我自己还蛮爱穿穿且自我感觉良好，但在大家心目中，普遍会认为，相比花裙子、花连衣裙，花衬衫是最难穿好看的。
不要说看脸，即使是名媛或超模也是有可能穿出土气。▼
明星里面，我觉得AA的气质最能驾驭印花。▼
现在最流行的是印花搭配印花，但一旦搭配功力没那么强，容易让人眼花缭乱。▼
印花搭配印花好看的秘诀在于，两种印花单品的底色要配对，比如下面的蓝配绿本身就是和谐组合，才不会太杂乱。▼
印花衬衫搭配下装时最好是选择同风格的款式。比如左边比较大方简约的款式配上牛仔裤和红色高跟鞋就很有女人味，复古风的花衬衫搭配复古感的喇叭裤整体会更容易出时尚度。▼
总体上，各种印花搭牛仔裤都是个不出错的选择，复古风。▼
穿印花衬衫又想保持低调，下装搭配黑色紧身裤可以镇住印花的张扬。▼
从我个人的经验来说，买花衬衫一定要去试，试了才知道花色和自己的肤色衬不衬。当然，选花衬衫也有一些小技能：
印花比较疏朗的容易穿好看，印花过于大和拥挤的容易“俗”。下面两张左边的衬衫会比右边更好穿。▼
秋冬也有花衬衫的用武之地，可以穿在外套里面做内搭。▼
还可以把花衬衫穿在毛衣里面，只露出衣袖或衣领，让全身多了些“花样”。▼
总体上，我觉得花衬衫穿得好看的关键，不在于搭配，而在于单品本身。就像Dries Van Noten 2016春夏女装秀的这件花衬衫裙，谁会觉得土和俗？▼
最受关注单品No.4
阅读量：154.3621万
紧身裤入榜单，毫不意外。上次推荐完黑色紧身裤后，发现了好多同好。就我自己来说，要是没有紧身裤，很多时候简直不知道该穿什么了。我相信很多人都是这样。
可儿和钟小姐的街拍中最常穿的就是紧身裤。▼
小个子的Emma Roberts和梨形身材的Emmy Rossum日常穿搭中少不了紧身裤。▼
紧身裤显腿瘦，是秋冬避免臃肿的绝佳武器。不少国内女明星常穿。▼
我觉得每个人至少要有三条紧身裤：酷酷的黑色、百搭的牛仔蓝色、清爽的白色，各一条。▼
灰色也很受欢迎。但灰色最大的缺点是容易显胖，而且灰色裤子在搭配上限制相对比较多，可能会让全身看起来不够精神。▼
想让这个秋冬有点与众不同的，可以选择低调的复古酒红色。▼
亮色的裤子都要慎选，比如艳丽的橘红和明黄，搭得好也会很抢眼，但实在太考验腿型和穿搭功力了。▼
至于印花紧身裤，Olivia最爱，筷子腿专利，你敢不敢试试？▼
怎么样，这些单品你们的衣柜都有了吗？
哦，对了，数据发布当天王凯也来了，他还蛮关心时尚界大事的嘛~▼
什么，还看不够？三七脸来一个。▼
既然帅成这样，给你们看看全身吧。▼
唉，这个活动本来也是邀请了我的~但我有事去不了（关键的点是没有人告诉我他会去！），果然是没有什么缘分，睡凯凯的任务还是交给你们了，加油哦！
黎贝卡的话：
昨天发了后，快被大家的评论笑死了。除了又来了新一波吐槽外，我万万没有想到，大家的关注点居然都集中在这个，随手挑一些没入选的评论：
不要问我为什么，我搜集整理的时候，甚至都没有发现这个点~
还有另一种集中的观点就是：咦，原来程序猿也是能找到女朋友的啊~我也是做了这个征集，才发现，原来有这么多程序猿的女票关注了我哈哈，这是为什么捏？
总之，现在我们的评论真的是越来越精彩，但，每天只能选50条，我也选得好纠结~为什么会有这个规定？我也不知道啊，估计是，怕文章太长（然而我的已经这么长了，怕啥！）
昨天的专题也炸出了不少男读者，话说你们平时都潜水干嘛呢？有的虚心求推荐，有的则“恶狠狠”（我脑补的）地说“别光吐槽，你倒是推荐啊！”好嘛，这两天就会做推荐专题的，后台昨天也收到不少“最推荐的男友（老公）包包”投稿，请继续！
对了，今天二条是男装搭配哦~想改造男票的可以先看看这条。
好啦，今天就到这里。祝大家早日迎娶高富帅~下期见：）
编辑助理：JOY 栗薪门
如果你觉得文章不错，欢迎分享转发到朋友圈（拒绝任何形式的转载），也欢迎关注微信公号“黎贝卡的异想世界（ID: Miss_shopping_li）。
▲长按二维码识别关注
文章出自微信公众号
:Miss_shopping_li
黎贝卡持续和大家分享关于生活的美好！
手机微信扫描上方二维码进行订阅
黎贝卡的异想世界微信公众号最新文章
精品号随机推荐
最值得关注的微信公众号
零钱聚乐购是一种全新的购物方式,是时尚、潮流的风向标,能满足个性、年轻消费者的购物需求。
游途旅行，旅行技术专家
鼎盛PC28娱乐，关注即送18红包。
弹浮生百态，煮红尘万丈.
提倡国人品质生活，选择有机生态的生活方式，健康，养生，休闲，品味，修炼自己，温暖他人！
野史君一一道来，让你看到不一样的历史，让你发现原来历史可以这样看。
每日新鲜美女推送，分享优雅女神高清图片
搜罗更多劲爆事件，娱乐花边新闻，最受关注的图片更多精彩敬请关注！八卦娱乐头条！！！
冷笑话精选微信号
想了解有关科技、趣味、创意和新奇的产品吗,想寻找创意小礼品和新鲜玩意吗?
微信公众平台导航Got a tip for us?
New in OS X: Get MacRumors
on your Mac
What You Need to Know About iOS Malware XcodeGhost
Sunday September 20,
Earlier this week, Chinese developers disclosed new iOS malware called XcodeGhost on microblogging service . U.S. cybersecurity firm Palo Alto Networks has since
about the malware.
MacRumors has created a FAQ so you can learn more about XcodeGhost and how to keep your iOS devices protected.
What is XcodeGhost?
XcodeGhost is a new iOS malware arising from a malicious version of Xcode, Apple's official tool for developing iOS and OS X apps.
How is XcodeGhost distributed?
A malicious version of Xcode was uploaded to Chinese cloud file sharing service Baidu and downloaded by some iOS developers in China.
Chinese developers then unknowingly compiled iOS apps using the modified Xcode IDE and distributed those infected apps through the App Store.
Those apps then managed to pass through Apple's code review process, enabling iOS users to install or update the infected apps on their devices.
Which devices are affected?
iPhone, iPad and iPod touch models running an iOS version compatible with any of the infected apps. The malware affects both stock and jailbroken devices.
Which apps are affected?
Palo Alto Networks has shared a , including WeChat, NetEase Cloud Music, WinZip, Didi Chuxing, Railway 12306, China Unicom Mobile Office and Tonghuashun.
How many users are affected?
XcodeGhost potentially affects more than 500 million iOS users, primarily because messaging app WeChat is very popular in China and the Asia-Pacific region.
Which unofficial versions of Xcode are affected?
All unofficial versions between Xcode 6.1 and Xcode 6.4.
How does XcodeGhost put my iOS devices at risk?
iOS apps infected with XcodeGhost malware can and do collect information about devices and then encrypt and upload that data to command and control (C2) servers run by attackers through the HTTP protocol. The system and app information that can be collected includes:
Current time
Current infected app’s name
The app’s bundle identifier
Current device’s name and type
Current system’s language and country
Current device’s UUID
Network type
Palo Alto Networks also
that infected iOS apps can receive commands from the attacker through the C2 server to perform the following actions:
Prompt a fake alert dialog to ph
Hijack opening specific URLs based on their scheme, which could allow for exploitation of vulnerabilities in the iOS system or other iOS
Read and write data in the user’s clipboard, which could be used to read the user’s password if that password is copied from a password management tool.
Can XcodeGhost affect users outside of China?
Yes. Some of the iOS apps infected with XcodeGhost malware are available on the App Store in countries outside of China. CamCard, for example, is a popular business card reader and scanner app available in the United States and several other countries, while WeChat is a popular messaging app in the Asia-Pacific region.
Why would some Chinese developers download Xcode from Baidu?
Xcode is a large file that can take a long time to download from Apple's servers in China, leading some developers to download Xcode from unofficial sources.
How are Apple and Chinese developers dealing with XcodeGhost?
Palo Alto Networks claims that it is cooperating with Apple on the issue, while multiple developers have updated their apps to remove the malware.
Apple has since issued the following statement to :"We’ve removed the apps from the App Store that we know have been created with this counterfeit software. We are working with the developers to make sure they’re using the proper version of Xcode to rebuild their apps."How do I protect myself against XcodeGhost?
iOS users should immediately uninstall any infected iOS app
on their devices, or update to a newer version that has removed the malware. Resetting your iCloud password, and any other passwords inputted on your iOS device, is also strongly recommended as a precautionary measure.
Developers should install official versions of
from Apple's website for free and avoid downloading the software from unofficial sources.Tags: , , ,
darn it, I thought only android gets malware.
wechat is used in many countires :(
Seriously what developer who knows anything about security is going to download an IDE from a non official source?
That's like downloading an OS from The Pirate Bay and being shocked the file was injected with malicious code.
Rating: 63 Votes
i'm sorry but how can a developer be such an idiot (please don't ban me, there's no other word to describe
patient's condition) to download Xcode from a chinese cloud file sharing service????
Rating: 56 Votes
How do I protect myself against XcodeGhost?
iOS users should immediately uninstall any infected iOS app listed here ('/2015/09/malware-xcodeghost-infects-39-ios-apps-including-wechat-affecting-hundreds-of-millions-of-users/') on their devices, or update to a newer version that has removed the malware. Resetting your iCloud password, and any other passwords inputted on your iOS device, is also strongly recommended as a precautionary measure.
My thought is I am all done with any company that would use an Xcode version they got from a file sharing site rather than Apple directly. I would never trust them again.
Rating: 48 Votes
Can't you just list all 39 apps? Looks like the servers from Palo Alto Networks can't handle it.
Infected iOS apps
网易云音乐
讯飞输入法
4.0.0.6-4.0.0.0
3.9.7.1 – 3.9.7
51卡保险箱
中信银行动卡空间
中国联通手机营业厅
网易公开课
快速问医生
CamScanner
SegmentFault
炒股公开课
电话归属地助手
愤怒的小鸟2 2.1.1
夫妻床头话
Fox-IT ( ('/')), a Netherlands based security company, checked all C2 domain names from our reports in their network sensors and has found thousands of malicious traffic outside China. According to their data, these iOS apps were also infected:
Musical.ly
guaji_gangtai en
Perfect365
网易云音乐
PDFReader Free
WinZip Standard
MoreLikers2
CamScanner Lite
MobileTicket
OPlayer Lite
golfsensehd
Wallpapers10000
CSMBP-AppStore
ChinaUnicom3.x
snapgrab copy
PocketScanner
AmHexinForPad
SuperJewelsQuest2
InstaFollower
CamScanner Pro
DataMonitor
FlappyCircle
BiaoQingBao
Guitar Master
WinZip Sector
Quick Save
Rating: 28 Votes
So... It begins.
iOS has been breached through the one thing that kept us safe. The App Store.
Rating: 27 Votes
I don't think that's a correct analysis of the situation.
What has really happened here? Developers have used the wrong tool (we'll discuss that later) and that tool has embedded some unwanted additional code in their apps. BUT look what still worked
- each broken app STILL has to be submitted to the app store, with identification and an audit trail
- even when the app is on an iOS device, there are severe limits to what it can do. It still can't break out of the OS protections, randomly control the device, etc. The type of info being sent back to base is, let's face it, not THAT serious --- not ideal, but not control of the machine.
- The items that ARE problematic (and which Apple should work on fixing) are items that were problematic before we knew about this, and that have been used in other contexts --- the ability to phish for passwords by throwing up fake dialog boxes, and the way the current sandboxing FORCES Password apps like 1Password to transfer data over the Clipboard.
What this REALLY provides is a way to throw out a bunch of these phishing scams in a way that can't be traced back only to the developer using the wrong tool.
Which gets us to that issue. I don't know enough about XCode to know what was and was not breached on that front. Obviously the entire XCode package should be signed, and obviously if you're stupid enough to install an XCode package that complains about being unsigned, you're setting yourself up for trouble. But blaming the victim, especially when the security landscape changes every year is not helpful --- how could Apple do better?
You can't really avoid people being able to write their own compilers and dev tools, and you can't stop those dev tools from doing god knows what to the code they create --- this has been known since Pike's infamous C compiler of the early seventies.
What you SHOULD be able to do is not allow code that has been created by such dev tools into the app store. THAT seems to be the flaw that needs to be fixed --- that any tool that's generating binaries that will land up in the store needs to be provably signed. But I don't know how feasible that is. Obviously the last stage (the actual store submitter app) is provided by Apple and signed, and using the developers signature. But what about the linker beforehand? And the compiler before that? And you then need the binaries passed between the two to be encrypted? It's just totally inimical to the current expected model of how we code.
So what about at a higher level? Do something that's a ugly hack, but basically FORCE that any installer that calls itself "XCode" has to be signed no matter what? That's one package that you can't install regardless of your GateKeeper settings except from Apple. But then you get a wack-a-mole of packages called "XCode 7" and "XCode!" and "XCode Pro".
Good analysis, but there is something Apple could have done, and I have been saying as much for over a year. Here's the more strongly worded one:
They should ban their in-house teams from throwing up a password request box. Absolute ban. It has got out of hand recently with stock apps asking for the password without any justification or explanation and pretty much at random. I've said it over and over, Apple have been training their users for exactly this scenario - enter password whenever anyone asks. If an app needs the iCloud password it should instruct the user to enter it in the appropriate settings page. Train users: only the settings app should be trusted with passwords.
Rating: 26 Votes
And how hard is it to actually read the original article, which addresses this?
Why would some Chinese developers download Xcode from Baidu?
Xcode is a large file that can take a long time to download from Apple's servers in China, leading some developers to download Xcode from unofficial sources.
Why can't Apple sign the Xcode so it will only work if it's downloaded from Apple servers ?
Rating: 24 Votes
If infected apps can pass through Apple's iOS app gates it undercuts Apple's security rational for insisting on a Walled Garden.
No, it doesn't, because once Apple recognizes that kind of a problem, they can also fix it from that one central location. Without that "walled garden" approach, every user would now have to install a malware scanner and hope that it will get updated with profiles for the new malware.
Admittedly I know zip about coding but seems Apple is betraying it's users here and could have avoided this situation. I Hopefully this is a wake up call.
How could Apple have avoided that situation? How did Apple betray its users? Apple did not force anyone to download a compromised Xcode version. The only "mistake" Apple made was not to recognize the malware in the review process. But that is hardly trivial.
Oh, no I just realized that you already said "I have no clue about the topic at hand, but I will make unfounded claims!"
Rating: 17 Votes
If that Chinese hacker has enough skills to bypass the Appstore review process and infect 500 million devices I'm wondering if this is just the tip of the iceberg.
Rating: 14 Votes
Right? How hard is it to
and go from there?
And how hard is it to actually read the original article, which addresses this?
Why would some Chinese developers download Xcode from Baidu?
Xcode is a large file that can take a long time to download from Apple's servers in China, leading some developers to download Xcode from unofficial sources.
Rating: 13 Votes
14 hours ago on
16 hours ago on
1 day ago on
1 day ago on
2 days ago on
2 days ago on
2 days ago on
MacRumors attracts a broad audience
of both consumers and professionals interested in
the latest technologies and products. We also boast an active community focused on
purchasing decisions and technical aspects of the iPhone, iPod, iPad, and Mac platforms.
Editorial Director
Editor in Chief
Contributing Editor
Contributing Editor
Contributing Writer
Contributing Writer
Copyright & 2000- , LLC.