[B! security][ãƒ–ãƒ©ã‚¦ã‚¶] tamaotã®ãƒ

tamaot id:tamaot

securityã¨ãƒ–ãƒ©ã‚¦ã‚¶ã«é–¢ã™ã‚‹tamaotã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒåˆ¶å¾¡ã§ããªã„ã€Œç§˜å¯†cookieã€ã€åŠæ•°å¼·ã®ã‚µã‚¤ãƒˆãŒåˆ©ç”¨
ç±³ç ”ç©¶ãƒãƒ¼ãƒ ã®ç™ºè¡¨ã«ã‚ˆã‚‹ã¨ã€Adobe Flashã‚’ä½¿ã£ã¦ãƒãƒƒãƒˆä¸Šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®è¡Œå‹•ã‚’ã²ãã‹ã«è¿½è·¡ã—ç¶šã‘ã‚‹ã‚µã‚¤ãƒˆãŒå¢—ãˆã¦ã„ã‚‹ã¨ã„ã†ã€‚ Adobe Flashã‚’ä½¿ã£ã¦ãƒãƒƒãƒˆä¸Šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®è¡Œå‹•ã‚’è¿½è·¡ã—ç¶šã‘ã‚‹ã€Œç§˜å¯†cookieã€ã‚’åˆ©ç”¨ã™ã‚‹ã‚µã‚¤ãƒˆãŒå¢—ãˆã¦ã„ã‚‹ã¨ã„ã†ã€‚ç±³ã‚«ãƒªãƒ•ã‚©ãƒ«ãƒ‹ã‚¢å¤§å¦ãƒãƒ¼ã‚¯ãƒªãƒ¼æ ¡ãªã©ã®ç ”ç©¶ãƒãƒ¼ãƒ ãŒã“ã®ã»ã©è«–æ–‡ã‚’ç™ºè¡¨ã—ãŸã€‚ ã€ŒFlash cookieã€ã¯é€šå¸¸ã®cookieã¨ã¯ç•°ãªã‚Šã€ãƒ–ãƒ©ã‚¦ã‚¶ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã§ã¯ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«ã§ããªã„ã¨ã„ã†ã€‚ç ”ç©¶ãƒãƒ¼ãƒ ãŒå¤§æ‰‹ã‚µã‚¤ãƒˆã«ã‚ˆã‚‹åŒcookieã®åˆ©ç”¨å®Ÿæ…‹ã«ã¤ã„ã¦èª¿ã¹ãŸã¨ã“ã‚ã€èª¿æŸ»å¯¾è±¡ã¨ã—ãŸã‚µã‚¤ãƒˆã®åŠæ•°ä»¥ä¸ŠãŒFlash cookieã‚’ä½¿ã£ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã‚’ä¿å˜ã—ã¦ã„ã‚‹ã“ã¨ãŒåˆ¤æ˜Žã—ãŸã€‚ ä¸ã«ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒå‰Šé™¤ã—ãŸHTTP cookieã‚’ã€Flash cookieã‚’ä½¿ã£ã¦å¾©æ´»ã•ã›ã¦ã„ã‚‹ã‚±ãƒ¼ã‚¹ã‚‚ã‚ã£ãŸã€‚ã—ã‹ã—ãã®å˜åœ¨ã«ã¤ã„ã¦ã¯ã‚µã‚¤ãƒˆã®ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒãƒªã‚·ãƒ¼ã§ã‚‚
tamaot 2009/08/14
adobe

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ–ãƒ©ã‚¦ã‚¶

browser

cookie

firefox

flash

pc

security

web
ãƒªãƒ³ã‚¯
ä¸»è¦ãªãƒ–ãƒ©ã‚¦ã‚¶ã«ä¸é–“è€…æ”»æ’ƒã«å¯¾ã™ã‚‹æ–°ãŸãªè„†å¼±æ€§
Microsoftã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ãŒã€æš—å·ã®ä»•çµ„ã¿ã‚’å£Šã™ã“ã¨ãªãHTTPSã®ã‚¨ãƒ³ãƒ‰ãƒ»ãƒ„ãƒ¼ãƒ»ã‚¨ãƒ³ãƒ‰ã®å®‰å…¨æ€§ã®ä¿è¨¼ã‚’ç ´ã‚‹æ–¹æ³•ã‚’ç™ºè¦‹ã—ãŸã€‚ ä»Šå¹´ã¾ã¨ã‚ã‚‰ã‚ŒãŸç ”ç©¶ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ä¸ã§ã€Microsoft Researchã®ç ”ç©¶ãƒãƒ¼ãƒ ãŒã€HTTP/HTTPSã®ä¸Šä½ã«ã‚ã‚‹è¡¨ç¤ºãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’æ¨™çš„ã«ã™ã‚‹ã“ã¨ã§ã€æ‚ªæ„ã®ã‚ã‚‹ä¸é–“è€…ã«ã‚ˆã£ã¦æ‚ªç”¨ã™ã‚‹ã“ã¨ãŒå¯èƒ½ãªè„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸã€‚ æ”»æ’ƒè€…ãŒãƒ–ãƒ©ã‚¦ã‚¶ã®ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚’å‚å—ã§ãã‚‹å¤šãã®ç¾å®Ÿã«ã‚ã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ç’°å¢ƒã§ã¯ã€æ”»æ’ƒè€…ãŒHTTPSã‚µãƒ¼ãƒã‹ã‚‰ã®ç§˜å¯†ãƒ‡ãƒ¼ã‚¿ã‚’ç›—ã‚€ã“ã¨ã€HTTPSã®ãƒšãƒ¼ã‚¸ã‚’å½é€ ã™ã‚‹ã“ã¨ã€èªè¨¼ã•ã‚ŒãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’è£…ã£ã¦HTTPSã‚µãƒ¼ãƒãƒ¼ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã‚ã‚‹ã€‚ã“ã‚Œã‚‰ã®è„†å¼±æ€§ã¯ã€æœ€æ–°ã®ãƒ–ãƒ©ã‚¦ã‚¶ã®è¨è¨ˆã«ãŠã„ã¦è»½è¦–ã•ã‚Œã¦ã„ã‚‹å•é¡Œã‚’åæ˜ ã—ãŸã‚‚ã®ã§ã€ã™ã¹ã¦ã®ä¸»è¦ãªãƒ–ãƒ©ã‚¦ã‚¶ã¨ã€éžå¸¸ã«å¤šãã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«å½±éŸ¿ãŒã‚ã‚‹ã€‚ SecurityFocusã®ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªã«ã‚ˆã‚Œã°ã€
tamaot 2009/08/13
*ã‚ã¨ã§èªã‚€

ã‚ã¨ã§èªã‚€

ãµã‚€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ–ãƒ©ã‚¦ã‚¶

browser

firefox

opera

security

ssl
ãƒªãƒ³ã‚¯
Operaã€Webãƒ–ãƒ©ã‚¦ã‚¶å†…ã‚µãƒ¼ãƒæ©Ÿèƒ½ã€ŒOpera Uniteã€ç™ºè¡¨
ã€ŒOpera Uniteã€ã¯ã€ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ã®ã‚µãƒ¼ãƒã‚’çµŒç”±ã›ãšã«PCåŒå£«ã§ã‚³ãƒ³ãƒ†ãƒ³ãƒ„äº¤æ›ã‚„ãƒãƒ£ãƒƒãƒˆã€Webã‚µãƒ¼ãƒ“ã‚¹é‹å–¶ãŒå¯èƒ½ã«ãªã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã ã€‚ ãƒŽãƒ«ã‚¦ã‚§ãƒ¼ã®Opera Softwareã¯6æœˆ16æ—¥ã€PCã«ã‚µãƒ¼ãƒï¼ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆæ©Ÿèƒ½ã‚’æŒãŸã›ã‚‹Webãƒ–ãƒ©ã‚¦ã‚¶ã®æ–°æ©Ÿèƒ½ã€ŒOpera Uniteã€ã‚’ç™ºè¡¨ã—ãŸã€‚ãƒãƒƒãƒˆä¸Šã®ã‚µãƒ¼ãƒã‚’çµŒç”±ã™ã‚‹ã“ã¨ãªãã€PCåŒå£«ã§ç›´æŽ¥ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®ã‚„ã‚Šã¨ã‚ŠãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã¨ã„ã†ã€‚ æ¬¡æœŸOSã€ŒOpera 10ã€ã§ç¨¼åƒã™ã‚‹Opera Uniteã®ãƒ†ã‚¹ãƒˆç‰ˆï¼ˆWindowsã€Macã€Linuxå‘ã‘ï¼‰ãŒOpera Labsã®è¨˜äº‹å†…ã®ãƒªãƒ³ã‚¯ã‹ã‚‰ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã§ãã‚‹ã€‚ãƒ†ã‚¹ãƒˆç‰ˆã‚’ä½¿ã†ã«ã¯ã€Opera 10 Î²ã¨Opera IDãŒå¿…è¦ã€‚ ãƒ†ã‚¹ãƒˆç‰ˆã«ã¯ãƒ•ã‚¡ã‚¤ãƒ«å…±æœ‰ã€éŸ³æ¥½ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®ã‚¹ãƒˆãƒªãƒ¼ãƒŸãƒ³ã‚°ã€å…±æœ‰ãƒ¡ãƒ¢ã€å†™çœŸå…±æœ‰ã€ãƒãƒ£ãƒƒãƒˆã€Webã‚µãƒ¼ãƒã¨ã„ã†6ã¤ã®ã‚µãƒ¼ãƒ“ã‚¹ãŒå«ã¾ã‚Œã‚‹ã€‚Opera 10ã§Opera
tamaot 2009/06/17
ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ

ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢

ãƒ–ãƒ©ã‚¦ã‚¶

browser

opera

security

webã‚µãƒ¼ãƒ“ã‚¹

ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶
ãƒªãƒ³ã‚¯
ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã£ã¦ã“ã†ã§ã™ã‹ï¼Ÿ ã‚ã‹ã‚Šã¾ã›ã‚“
â†‘ ã“ã®é€éŽã•ã‚Œã¦ã„ã‚‹iframeã¯ã€ãƒ–ãƒ©ã‚¦ã‚¶ã®æœ€å‰é¢ã«é…ç½®ã•ã‚Œã¦ã„ã¾ã™ â€»ã¯ã¦ãªã«ãƒã‚°ã‚¤ãƒ³ã—ã¦ã„ã‚‹ã¨ã€ã©ã®ã‚ˆã†ã«ãƒœã‚¿ãƒ³ãŒè¢«ã£ã¦ã„ã‚‹ã®ã‹ã‚ã‹ã‚Šã‚„ã™ããªã‚Šã¾ã™
tamaot 2009/03/05
ã“ã‚Œã¯ã™ã”ã„

ã¯ã¦ãª

ã¯ã¾ã¡ã¡ã‚ƒã‚“

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒã‚¿

ãƒ–ãƒ©ã‚¦ã‚¶

browser

JavaScript

security

web
ãƒªãƒ³ã‚¯
ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ï¼šç ”ç©¶è€…ãŒè¤‡æ•°ã®ãƒ–ãƒ©ã‚¦ã‚¶ã«å¯¾ã™ã‚‹æ–°ãŸãªè„…å¨ã«ã¤ã„ã¦è¦å‘Š
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ãŒã€ã™ã¹ã¦ã®ä¸»è¦ãªãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«å½±éŸ¿ã®ã‚ã‚‹ã€æ–°ãŸãªæã‚ã—ã„ãƒ–ãƒ©ã‚¦ã‚¶ã«å¯¾ã™ã‚‹è„…å¨ã«å¯¾ã™ã‚‹è¦å‘Šã‚’ç™ºã—ã¦ã„ã‚‹ã€‚ãã®å¯¾è±¡ã¨ãªã‚‹ã®ã¯ã€Microsoft Internet Explorerã€Mozilla Firefoxã€Apple Safariã€Operaã€ãã—ã¦Adobe Flashã ã€‚ ã“ã®è„…å¨ã¯ã€Œã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã€ã¨å‘¼ã°ã‚Œã‚‹ã‚‚ã®ã§ã€OWASP NYC AppSec 2008ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã§è°è«–ã•ã‚Œã‚‹ã¯ãšã ã£ãŸã‚‚ã®ã ãŒã€Adobeã‚„ãã®ä»–ã®å½±éŸ¿ã‚’å—ã‘ã‚‹ãƒ™ãƒ³ãƒ€ãƒ¼ã®è¦æœ›ã§ã€åŒ…æ‹¬çš„ãªä¿®æ£ãŒæº–å‚™ã•ã‚Œã‚‹ã¾ã§ã¯ã“ã®è©±é¡Œã‚’å…¬ã«ã™ã‚‹ã“ã¨ãŒå–ã‚Šã‚„ã‚ã‚‰ã‚Œã¦ã„ãŸã‚‚ã®ã ã€‚ ã§ã¯ã€ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚¯ãƒ³ã‚°ã¨ã¯å®Ÿéš›ã«ã¯ã©ã†ã„ã†ã‚‚ã®ãªã®ã ã‚ã†ã‹ã€‚ æ®‹å¿µãªãŒã‚‰ã€ã‚ã‚Œã‚ã‚ŒãŒç™ºè¦‹ã—ãŸå•é¡Œã®ä¸€éƒ¨ã¯ã€æ€ã£ãŸã‚ˆã‚Šã‚‚ãšã£ã¨æ‚ªã„ã‚‚ã®ã ã£ãŸã€‚å®Ÿéš›ã€ã‚ã¾ã‚Šã«ã‚‚è„…å¨ãŒå¤§ãã‹ã£ãŸãŸã‚ã€ã‚ã‚Œã‚ã‚Œã¯è²¬ä»»ã‚’æŒã£ãŸæƒ…å ±é–‹
tamaot 2008/09/28
*

browser

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ–ãƒ©ã‚¦ã‚¶

è„†å¼±æ€§

firefox

Internet Explorer

JavaScript

Mozilla
ãƒªãƒ³ã‚¯
IEã¨Firefoxã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ã„ã‚‹äººã¯è¦æ³¨æ„--ã€Œéžå¸¸ã«é‡å¤§ã€ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯:ãƒ‹ãƒ¥ãƒ¼ã‚¹ - CNET Japan
ã€Œï¼ˆInternet Explorerã¨Firefoxã®ï¼‰ã©ã¡ã‚‰ã«ã‚‚éžãŒã‚ã‚‹ã€ ã€ŒInternet Explorerã€ã®ã‚¼ãƒãƒ‡ã‚¤ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã«ã¤ã„ã¦å½“åˆã¯Microsoftã‚’éžé›£ã—ã¦ã„ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ãŸã¡ãŒä»Šã€ã“ã®ã‚ˆã†ã«è¿°ã¹ã¦ã„ã‚‹ã€‚ã“ã®å•é¡Œã¯ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ã€ŒFirefoxã€ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚‚å½±éŸ¿ã™ã‚‹ã‹ã‚‰ã§ã‚ã‚‹ã€‚ IEã¨ã€Firefoxã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.0ä»¥é™ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯ã€ã€Œéžå¸¸ã«é‡å¤§ã€ãªãƒªã‚¹ã‚¯ã«ã•ã‚‰ã•ã‚Œã¦ã„ã‚‹ã€‚æ”»æ’ƒè€…ã¯ã€æ‚ªè³ªãªã‚µã‚¤ãƒˆã‚’ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«IEã§é–²è¦§ã•ã›ã‚‹ã“ã¨ã§ã€ã€Œfirefoxurl://ã€ã¨ã„ã†URLãƒãƒ³ãƒ‰ãƒ©ã‚’åˆ©ç”¨ã—ãªãŒã‚‰ã€ãƒ–ãƒ©ã‚¦ã‚¶ã¨ã‚¦ã‚§ãƒ–ä¸Šã®ç‰¹å®šã®ãƒªã‚½ãƒ¼ã‚¹ã¨ã®é–“ã§ã‚„ã‚Šã¨ã‚Šã‚’ã•ã›ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚‹ã€‚ã“ã®çµæžœã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚·ã‚¹ãƒ†ãƒ ãŒé éš”åœ°ã‹ã‚‰æ‚ªç”¨ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€‚ IEã®å•é¡Œã‚’ç™ºè¦‹ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã®Thor Larholmæ°ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥å¤§æ‰‹ã®Syman
tamaot 2007/07/11
browser

firefox

ie

news

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ–ãƒ©ã‚¦ã‚¶

opera
ãƒªãƒ³ã‚¯
1