[B! CSRF] tsupoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

HTML5æ™‚ä»£ã®Webé–‹ç™ºè€…ãŒçŸ¥ã‚‰ãªã„ã¨ã‚¬ãƒãƒ¤ãƒãª3ã¤ã®æœªæ¥äºˆæ¸¬ã¨6ã¤ã®è„†å¼±æ€§å¯¾ç–

8æœˆ21ï½ž23æ—¥ã«ãƒ‘ã‚·ãƒ•ã‚£ã‚³æ¨ªæµœã§é–‹å‚¬ã•ã‚ŒãŸã€ŒCEDEC 2013ã€ã§ã¯ã€Webã®ä¸–ç•Œã«é–¢ã™ã‚‹ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚‚æ•°å¤šãè¡Œã‚ã‚ŒãŸã€‚æœ¬è¨˜äº‹ã§ã¯ãã®ä¸ã‹ã‚‰ã€ã‚µã‚¤ãƒœã‚¦ã‚ºãƒ»ãƒ©ãƒœã®ç«¹è¿«è‰¯ç¯„æ°ã«ã‚ˆã‚‹ã€ŒHTML5ã®ã“ã‚Œã¾ã§ã¨ã“ã‚Œã‹ã‚‰ã€æœ€æ–°æŠ€è¡“ã®æœªæ¥äºˆæ¸¬ã€ã¨ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã§ã¯å¤§å¤‰è‘—åãªãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã€é•·è°·å·é™½ä»‹æ°ã«ã‚ˆã‚‹ã€ŒHTML5æ™‚ä»£ã«ãŠã‘ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ„è˜ã—ãŸé–‹ç™ºã€ã®2ã¤ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æ§˜åã‚’ãŠé€ã‚Šã—ã‚ˆã†ã€‚ ç«¹è¿«æ°ãŒã€ŒHTMLã€ã®å‘¨ã‚Šã®æœ€æ–°æŠ€è¡“ã¨ã€3ã¤ã®æœªæ¥äºˆæ¸¬ã‚’èªžã‚‹ æœªæ¥äºˆæ¸¬ãã®1ï¼šé€šä¿¡ã¯æš—å·åŒ–ãŒæ¨™æº–ã«â€•â€•ã€Œã‚¹ã‚¿ãƒã§ãƒ‰ãƒ¤ãƒªãƒ³ã‚°ã€ã‹ã‚‰è€ƒãˆã‚‹æœ€æ–°æŠ€è¡“ ç«¹è¿«æ°ã¯ã¾ãšã€ã‚¹ã‚¿ãƒ¼ãƒãƒƒã‚¯ã‚¹ã§ã‚¹ã‚¿ã‚¤ãƒªãƒƒã‚·ãƒ¥ãªMacBook Airã‚’ã“ã‚Œè¦‹ã‚ˆãŒã—ã«ä½¿ã†ã€ã€Œãƒ‰ãƒ¤ãƒªãƒ³ã‚°ã€ã¨ã„ã†æŠ€è¡“ï¼ˆï¼Ÿï¼‰ã«ã¤ã„ã¦å†™çœŸã‚’å‡ºã™ã¨ã“ã‚ã‹ã‚‰è¬›æ¼”ã‚’å§‹ã‚ãŸã€‚ å®Ÿã¯ã€ã“ã®ã€Œãƒ‰ãƒ¤ãƒªãƒ³ã‚°ã€ã€å…¬è¡†ç„¡ç·šLANã‚’åˆ©ç”¨ã™ã‚‹ã¨ç›—è´ã®ãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã“ã¨ãŒæŒ‡æ‘˜ã•ã‚Œã¦

tsupo 2013/09/06

Firesheep ã®ç™»å ´ â†’ HTTP Strict Transport Security â† Internet Explorer 10ã¯æœªå¯¾å¿œ â‡’ Outbound Port 80 Blocking / JIT-Spray / RFC 6454 / DOM Based XSS / æ©Ÿå¯†æƒ…å ±ã‚’Web Storageã«ä¿ç®¡ã—ãªã„

ãƒªãƒ³ã‚¯

è¤‡æ•°ã®ã‚µã‚¤ãƒœã‚¦ã‚ºè£½å“ã«è„†å¼±æ€§--IPAç™ºè¡¨

å°åˆ·ã™ã‚‹ ãƒ¡ãƒ¼ãƒ«ã§é€ã‚‹ ãƒ†ã‚ã‚¹ãƒˆ HTML é›»åæ›¸ç± PDF ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ ãƒ†ã‚ã‚¹ãƒˆ é›»åæ›¸ç± PDF ã‚¯ãƒªãƒƒãƒ—ã—ãŸè¨˜äº‹ã‚’Myãƒšãƒ¼ã‚¸ã‹ã‚‰èªã‚€ã“ã¨ãŒã§ãã¾ã™ IPA(ç‹¬ç«‹è¡Œæ”¿æ³•äººæƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹)ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ã¨ä¸€èˆ¬ç¤¾å›£æ³•äººJPCERTã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆJPCERT/CCï¼‰ã¯4æœˆ15æ—¥ã€ã€Œè¤‡æ•°ã®ã‚µã‚¤ãƒœã‚¦ã‚ºè£½å“ã«ãŠã‘ã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ»ãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªã®è„†å¼±æ€§ã€ã‚’JVNï¼ˆJapan Vulnerability Notesï¼‰ã§å…¬è¡¨ã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ ã“ã‚Œã«ã‚ˆã‚‹ã¨ã€ã‚µã‚¤ãƒœã‚¦ã‚ºãŒæä¾›ã™ã‚‹è¤‡æ•°ã®è£½å“ã«ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ»ãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªã®è„†å¼±æ€§ãŒå˜åœ¨ã™ã‚‹ã€‚è©²å½“è£½å“ã«ãƒã‚°ã‚¤ãƒ³ã—ãŸçŠ¶æ…‹ã§ç´°å·¥ã•ã‚ŒãŸURLã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸå ´åˆã€ç®¡ç†ç”»é¢ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚„ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã®ãŸã‚ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¤‰æ›´ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€‚ ã“ã®è„†å¼±æ€§æƒ…å ±ã¯ã€2012å¹´12æœˆ27æ—¥ã«IPA ãŒè£½å“é–‹ç™ºè€…è‡ª

tsupo 2013/04/15

è©²å½“è£½å“ã«ãƒã‚°ã‚¤ãƒ³ã—ãŸçŠ¶æ…‹ã§ç´°å·¥ã•ã‚ŒãŸURLã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸå ´åˆã€ç®¡ç†ç”»é¢ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚„ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã®ãŸã‚ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¤‰æ›´ã•ã‚Œã‚‹å¯èƒ½æ€§ / æœ€æ–°ç‰ˆã«ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã™ã‚‹ã‚ˆã†å‘¼ã³ã‹ã‘

ãƒªãƒ³ã‚¯

ä¸æ£ã‚µã‚¤ãƒˆä½¿ã†ãªã‚Šã™ã¾ã—ã«æ³¨æ„

é éš”æ“ä½œã‚¦ã‚¤ãƒ«ã‚¹äº‹ä»¶ã®å ±é“ã¯æ¸›ã£ã¦ããŸãŒã€çŠ¯äººã¯æ•ã¾ã£ã¦ãŠã‚‰ãšå®‰å¿ƒã¯ã§ããªã„ã€‚ãªã‚Šã™ã¾ã—ã§çŠ¯ç½ªäºˆå‘Šã‚„è„…è¿«ã‚’è¡Œã†ã«ã¯ã€å¿…ãšã—ã‚‚ã‚¦ã‚¤ãƒ«ã‚¹ã‚’ä½¿ã†å¿…è¦ã¯ãªã„ã€‚é›»åæŽ²ç¤ºæ¿ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã™ã‚‹ã‚µã‚¤ãƒˆã§ã¯ã€ã‚¯ãƒã‚¹ãƒ»ã‚µã‚¤ãƒˆãƒ»ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ»ãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªãƒ¼ï¼ˆCSRFï¼‰ã¨ã„ã†ä¸æ£ã‚µã‚¤ãƒˆã‚’ä½¿ã£ãŸãªã‚Šã™ã¾ã—ã¸ã®å¯¾ç–ã‚‚å¿…è¦ã«ãªã‚‹ã€‚ é éš”æ“ä½œã‚¦ã‚¤ãƒ«ã‚¹äº‹ä»¶ã®çŠ¯äººã¯ã€ãªã‚Šã™ã¾ã™ç›¸æ‰‹ã®ç«¯æœ«ã‚’æ‚ªç”¨ã—ã¦ã€é›»åæŽ²ç¤ºæ¿ã‚„å•ã„åˆã‚ã›ãƒ•ã‚©ãƒ¼ãƒ ã«çŠ¯ç½ªäºˆå‘Šã‚„è„…è¿«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’æ›¸ãè¾¼ã¾ã›ã‚‹éš›ã€ä¸»ã«ã‚¦ã‚¤ãƒ«ã‚¹ã‚’åˆ©ç”¨ã—ã¦ã„ãŸã€‚ãã®ãŸã‚ã€ã‚¦ã‚¤ãƒ«ã‚¹ã«æ„ŸæŸ“ã—ãªã‘ã‚Œã°ã€ãªã‚Šã™ã¾ã—ã®æ”»æ’ƒã«ã¯ç„¡ç¸ã ã¨è€ƒãˆã¦ã„ã‚‹äººãŒã„ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã€‚ ã—ã‹ã—ã€ä»–äººã«ãªã‚Šã™ã¾ã—ã¦çŠ¯ç½ªäºˆå‘Šã‚„è„…è¿«ã‚’è¡Œã†å ´åˆã€å¿…ãšã—ã‚‚ã‚¦ã‚¤ãƒ«ã‚¹ã‚’åˆ©ç”¨ã™ã‚‹å¿…è¦ã¯ãªã„ã€‚ç‰¹ã«è¦æˆ’ã—ãŸã„ã®ã¯ã€CSRFã§ã‚ã‚‹ã€‚é éš”æ“ä½œã‚¦ã‚¤ãƒ«ã‚¹äº‹ä»¶ã§ã‚‚æ¨ªæµœå¸‚ã®ã‚µã‚¤ãƒˆã¸ã®æ›¸ãè¾¼ã¿ã«ã¯ã€ã‚¦ã‚¤ãƒ«ã‚¹ã§ã¯ãªãCSRFãŒåˆ©ç”¨ã•ã‚ŒãŸã¨ã„ã‚ã‚Œã‚‹ã€‚

tsupo 2013/03/18

é éš”æ“ä½œã‚¦ã‚¤ãƒ«ã‚¹äº‹ä»¶ã®å ±é“ã¯æ¸›ã£ã¦ããŸãŒã€çŠ¯äººã¯æ•ã¾ã£ã¦ãŠã‚‰ãšå®‰å¿ƒã¯ã§ããªã„ â† ã‚ã‚Œ? ã¨æ€ã£ãŸã‚‰ã€2012å¹´12æœˆ6æ—¥å·ã®è¨˜äº‹ãŒã€ã‚„ã£ã¨Webã§å…¬é–‹ã•ã‚ŒãŸã€ã¨ã„ã†ã“ã¨ã‚‰ã—ã„ / ä¸»ã¨ã—ã¦ CSRF å¯¾ç–ã«é–¢ã™ã‚‹è¨˜äº‹

ãƒªãƒ³ã‚¯

é éš”æ“ä½œã‚¦ã‚£ãƒ«ã‚¹äº‹ä»¶ãƒ»çŠ¯äººåƒã¨å†¤ç½ªã‚’ç”Ÿã‚€åˆ‘äº‹æœæŸ»ã®å•é¡Œç‚¹

http://www.videonews.com/ ãƒ‹ãƒ¥ãƒ¼ã‚¹ãƒ»ã‚³ãƒ¡ãƒ³ã‚¿ãƒªãƒ¼ ï¼ˆ2012å¹´10æœˆ20æ—¥ï¼‰ é éš”æ“ä½œã‚¦ã‚£ãƒ«ã‚¹äº‹ä»¶ï¼š çŠ¯è¡Œå£°æ˜Žã«è¦‹ã‚‹çŠ¯äººåƒã¨å†¤ç½ªã‚’ç”Ÿã‚€åˆ‘äº‹æœæŸ»ã®å•é¡Œç‚¹ ã‚²ã‚¹ãƒˆï¼šé«˜æœ¨æµ©å…‰æ°ï¼ˆæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€å®¶ï¼‰ ã€€ä»–äººã®ãƒ‘ã‚½ã‚³ãƒ³ã‚’é éš”æ“ä½œã—ã¦ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã§æ®ºå®³äºˆå‘Šãªã©ãŒç¹°ã‚Šè¿”ã—è¡Œã‚ã‚ŒãŸäº‹ä»¶ã§ã€ã“ã‚Œã¾ã§ã«è¦å¯ŸãŒé€®æ•ã—ãŸ4äººãŒã„ãšã‚Œã‚‚èª¤èªé€®æ•ã ã£ãŸã“ã¨ãŒã‚ã‹ã‚Šã€æ”¹ã‚ã¦è¦å¯Ÿã®åˆ‘äº‹æœæŸ»ã®ã‚ã‚Šæ–¹ãŒå•ã‚ã‚Œã‚‹çµæžœã¨ãªã£ã¦ã„ã‚‹ã€‚ ã€€ä»Šå›žã®æœæŸ»ã¯ã‚µã‚¤ãƒãƒ¼çŠ¯ç½ªã®æœæŸ»ã¨ã„ã†æ„å‘³ã§ã‚‚ã€ã¾ãŸä¸€èˆ¬ã®åˆ‘äº‹äº‹ä»¶ã®æœæŸ»ã¨ã„ã†æ„å‘³ã§ã‚‚ã€æœæŸ»ãã®ã‚‚ã®ãŒæœæ’°ã ã£ãŸã€‚ã—ã‹ã—ã€æœæŸ»ã®æœæ’°ã•ã‚’ã¨ã‚Šã‚ãˆãšè„‡ã«ç½®ã„ãŸã¨ã—ã¦ã‚‚ã€é€®æ•ã•ã‚ŒãŸ4äººã®ã†ã¡2äººãŒã€ã‚„ã£ã¦ã‚‚ã„ãªã„çŠ¯è¡Œã‚’è‡ªä¾›ã—ã¦ã„ã‚‹ã€‚ãã‚Œã°ã‹ã‚Šã‹ã€çŠ¯è¡Œã®å‹•æ©Ÿã¾ã§è©³ç´°ã«ä¾›è¿°ã—ã¦ã„ãŸã€‚ãªãœã‚„ã£ã¦ã‚‚ã„ãªã„çŠ¯ç½ªã‚’è‡ªç™½ã—ãŸã‚Šã€å‹•æ©Ÿã¾ã§è©³ç´°ã«ä¾›è¿°ã™ã‚‹ãªã©ã¨ã„ã†ã“ã¨ãŒ

tsupo 2012/10/23

via https://twitter.com/HiromitsuTakagi/status/259902802501959680 / YouTubeç‰ˆã‚‚ã‚ã£ãŸã‚“ã§ã™ãã€‚ã“ã£ã¡ã®æ–¹ãŒè¦‹ã‚„ã™ã„ã‹ã‚‚

ãƒªãƒ³ã‚¯

ãƒãƒƒãƒˆæ®ºäººäºˆå‘Š:ï¼°ï¼£é éš”æ“ä½œã€€æ¨ªæµœå¸‚ã€ï¼¨ï¼°ã«å¼±ç‚¹ã€€å®¹æ˜“ã«ä¸æ£æ›¸ãè¾¼ã¿ï¼ æ¯Žæ—¥ï½Šï½(æ¯Žæ—¥æ–°èž)

ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ï¼ˆï¼¨ï¼°ï¼‰ãªã©ã«çŠ¯ç½ªäºˆå‘ŠãŒæ›¸ãè¾¼ã¾ã‚ŒãŸäº‹ä»¶ã§ã€æ¨ªæµœã€å¤§é˜ªä¸¡å¸‚ã®ï¼¨ï¼°ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ä¸Šã®å¼±ç‚¹ãŒã‚ã£ãŸã“ã¨ãŒåˆ†ã‹ã£ãŸã€‚ã“ã®ã†ã¡æ¨ªæµœã®äº‹ä»¶ã§ã¯ã€ä¸æ£ãªæ›¸ãè¾¼ã¿ã§ä»¥å‰ã‹ã‚‰åºƒãä½¿ã‚ã‚Œã¦ã„ã‚‹æ”»æ’ƒæ‰‹æ³•ãŒç”¨ã„ã‚‰ã‚Œã¦ãŠã‚Šã€çŠ¯è¡Œå£°æ˜Žã‚’å‡ºã—ãŸã€ŒçœŸçŠ¯äººã€ãŒã€æ¨ªæµœå¸‚ã®ï¼¨ï¼°ã®å¼±ç‚¹ã‚’è¦‹æŠœã„ãŸä¸Šã§ã€ç°¡å˜ãªæ‰‹æ³•ã§åˆ¥äººã‚’çŠ¯äººã«ä»•ç«‹ã¦ã‚ã’ãŸã¨ã¿ã‚‰ã‚Œã‚‹ã€‚ä¸¡å¸‚ã¯ä¸æ£æ›¸ãè¾¼ã¿ç™ºè¦šå¾Œã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼å¯¾ç–ã‚’å¼·åŒ–ã—ãŸã€‚ ä¸¡å¸‚ã®ï¼¨ï¼°ã§ã¯æ„è¦‹æŠ•ç¨¿æ¬„ã«çŠ¯ç½ªäºˆå‘ŠãŒæ›¸ãè¾¼ã¾ã‚Œã€æ¨ªæµœã®ï¼¨ï¼°ã«ã¯ä»Šå¹´ï¼–æœˆã€å¸‚å†…ã®å°å¦æ ¡ã‚’è¥²æ’ƒã™ã‚‹ã¨ã®å†…å®¹ãŒæ›¸ãè¾¼ã¾ã‚ŒãŸã€‚ æ›¸ãè¾¼ã¿ã¯é€šå¸¸ã€ï¼¨ï¼°ã®ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ã‹ã‚‰æ„è¦‹æŠ•ç¨¿æ¬„ã«é€²ã¿ã€æ›¸ãè¾¼ã‚€ã€‚ã—ã‹ã—ã€çŠ¯è¡Œå£°æ˜Žã®ä¸ã§ã€çœŸçŠ¯äººãŒæ¨ªæµœã®äº‹ä»¶ã§ä½¿ã£ãŸã¨æ˜Žã‹ã™æ”»æ’ƒæ‰‹æ³•ã€Œã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ»ãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆï¼£ï¼³ï¼²ï¼¦ï¼‰ã€ã‚’ä½¿ãˆã°ã€æŠ•ç¨¿æ¬„ã‹ã‚‰ã§ãªãã¦ã‚‚ä»–äººã«ãªã‚Šã™ã¾ã—ã¦å¤–éƒ¨ã‹ã‚‰æ›¸ãè¾¼ã¿ã‚’æŽ²è¼‰ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚‹ã€‚

tsupo 2012/10/22

æ¨ªæµœã€å¤§é˜ªä¸¡å¸‚ã®HPã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ä¸Šã®å¼±ç‚¹ãŒã‚ã£ãŸã“ã¨ãŒåˆ†ã‹ã£ãŸ â†’ æ¨ªæµœã®æ–¹ã¯ CSRFã€å¤§é˜ªã®æ–¹ã¯æ˜Žè¨˜ã•ã‚Œã¦ãªã„ã‘ã©ã€XSS ã‹ãª? // IPAã®äººã¯ã€Œå®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ä½œã‚Šæ–¹ã€ã‚’ã‚‚ã£ã¨å®£ä¼ã—ãŸæ–¹ãŒã„ã„

ãƒªãƒ³ã‚¯

ä¸æ£æ“ä½œï¼Ÿå±¥æ´ã€é€®æ•å¾Œèªè˜ã‚‚æ”¾ç½®â€¦ç¥žå¥ˆå·çœŒè¦ : ç¤¾ä¼š : YOMIURI ONLINEï¼ˆèªå£²æ–°èžï¼‰

ä¸æ£æ“ä½œã•ã‚ŒãŸãƒ‘ã‚½ã‚³ãƒ³ã‹ã‚‰æ¨ªæµœå¸‚ã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ï¼ˆï¼¨ï¼°ï¼‰ã«å°å¦æ ¡ã¸ã®è¥²æ’ƒäºˆå‘ŠãŒæ›¸ãè¾¼ã¾ã‚ŒãŸäº‹ä»¶ã§ã€ç¥žå¥ˆå·çœŒè¦ãŒå°‘å¹´ï¼ˆï¼‘ï¼™ï¼‰ï¼ˆä¿è·è¦³å¯Ÿå‡¦åˆ†ï¼‰ã‚’é€®æ•ã—ãŸç›´å¾Œã€ãƒ‘ã‚½ã‚³ãƒ³ã®é€šä¿¡å±¥æ´ã«ç¬¬ä¸‰è€…ã®ä¸æ£æ“ä½œã‚’ã†ã‹ãŒã‚ã›ã‚‹ä¸è‡ªç„¶ãªè¨˜éŒ²ãŒã‚ã‚‹ã“ã¨ã«æ°—ã¥ããªãŒã‚‰ã€è£ä»˜ã‘æœæŸ»ã‚’æ€ ã£ã¦ã„ãŸã“ã¨ãŒã‚ã‹ã£ãŸã€‚ çœŒè¦å¹¹éƒ¨ãŒï¼’ï¼æ—¥ã€æ˜Žã‚‰ã‹ã«ã—ãŸã€‚çœŒè¦ã§ã¯æœæŸ»ãŒä¸é©åˆ‡ã ã£ãŸå¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã—ã¦å–ã‚Šèª¿ã¹ã«å½“ãŸã£ãŸæœæŸ»å“¡ã‚‰ã‹ã‚‰å½“æ™‚ã®çŠ¶æ³ã‚’èžã„ã¦ã„ã‚‹ã€‚ çœŒè¦å¹¹éƒ¨ã«ã‚ˆã‚‹ã¨ã€å°‘å¹´ã®ãƒ‘ã‚½ã‚³ãƒ³ã¯ï¼–æœˆï¼’ï¼™æ—¥åˆå¾Œï¼“æ™‚ï¼‘ï¼—åˆ†ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŽ²ç¤ºæ¿ã«è²¼ã‚Šä»˜ã‘ã‚‰ã‚Œã¦ã„ãŸï¼µï¼²ï¼¬ï¼ˆãƒãƒƒãƒˆä¸Šã®ä½æ‰€ï¼‰ã‚’ã‚¯ãƒªãƒƒã‚¯ã€‚ãã®å¾Œã€ç¬¬ä¸‰è€…ãŒè¨ã‘ãŸã¨ã¿ã‚‰ã‚Œã‚‹ã‚µã‚¤ãƒˆã«è‡ªå‹•çš„ã«ç§»å‹•ã—ã€æ•°ç§’ã®é–“ã«è¤‡æ•°ã®ã‚µã‚¤ãƒˆã«é€£ç¶šã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ã€‚æ¨ªæµœå¸‚ã®ï¼¨ï¼°ã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã‹ã‚‰ã¯ï¼’ç§’é–“ã§å°å¦æ ¡è¥²æ’ƒäºˆå‘Šã®æ›¸ãè¾¼ã¿ã‚’çµ‚ãˆã¦ã„ãŸã€‚ å¹¹éƒ¨ã‚‰ã«ã‚ˆã‚‹ã¨ã€ä¿åœŸãƒ¶è°·ç½²ç”Ÿæ´»å®‰å…¨èª²ã¨æœæŸ»å”åŠ›ã‚’ã—ãŸçœŒè¦ã‚µã‚¤ãƒãƒ¼çŠ¯ç½ªå¯¾ç–ã‚»

tsupo 2012/10/22

ã€Œã‚ãšã‹2ç§’é–“ã§æ›¸ãè¾¼ã‚€ã“ã¨ã¯äººã®æ‰‹ã§ã¯ä¸å¯èƒ½ã€ã¨ã—ã¦ã€ç¬¬ä¸‰è€…ãŒé–¢ä¸Žã—ãŸå¯èƒ½æ€§ã«ã¤ã„ã¦æŠŠæ¡ / è£ä»˜ã‘æœæŸ»ã‚’æ€ ã£ã¦ã„ãŸ

ãƒªãƒ³ã‚¯

ã€ãªã‚Šã™ã¾ã—ã‚¦ã‚¤ãƒ«ã‚¹ã€‘ã€Œå‘Šç™½æ–‡ã®ã‚†ããˆã€ã€ŒçŠ¯è¡Œæ—¥ã€ã€Œå¹´é½¢ã€ã€€çœŸçŠ¯äººè§£æ˜Žã‚’é˜»ã‚€ï¼“ã¤ã®è¬Žï¼‹ï¼ˆ1/3ãƒšãƒ¼ã‚¸ï¼‰ - MSNç”£çµŒãƒ‹ãƒ¥ãƒ¼ã‚¹

é éš”æ“ä½œã‚¦ã‚¤ãƒ«ã‚¹ã«æ„ŸæŸ“ã—ãŸãƒ‘ã‚½ã‚³ãƒ³ï¼ˆï¼°ï¼£ï¼‰ã‹ã‚‰çŠ¯è¡Œäºˆå‘Šãƒ»è„…è¿«ã®ãƒ¡ãƒ¼ãƒ«ã‚„æ›¸ãè¾¼ã¿ãŒç¹°ã‚Šè¿”ã•ã‚Œã¦ã„ãŸäº‹ä»¶ã¯ã€è¦å¯Ÿå½“å±€ã«é€®æ•ã•ã‚ŒãŸï¼”äººãŒå†¤ç½ªã ã£ãŸã“ã¨ãŒæ˜Žã‚‰ã‹ã¨ãªã‚Šã€ï¼´ï¼¢ï¼³ãªã©ã«çŠ¯è¡Œå£°æ˜Žãƒ¡ãƒ¼ãƒ«ã‚’é€ã£ãŸã€ŒçœŸçŠ¯äººã€ã®è¿½è·¡ã«æœæŸ»ã®é‡ç‚¹ã¯ç§»ã£ãŸã€‚çŠ¯è¡Œå£°æ˜Žã§è¨€åŠã®ã‚ã£ãŸï¼‘ï¼“ä»¶ã®çŠ¯è¡Œäºˆå‘Šãƒ»è„…è¿«ã¯è¦å¯Ÿå½“å±€ã«ã‚ˆã£ã¦ã™ã¹ã¦ãŒè£ä»˜ã‘ã‚‰ã‚ŒãŸãŒã€è¬Žã¯å¤šã„ã€‚æ–‡é¢ã‹ã‚‰ã¯ã€å¹´é…è€…ã®å°è±¡ã‚’å—ã‘ã‚‹ä¸€æ–¹ã§ã€ã‚¦ã‚¤ãƒ«ã‚¹ä½œæˆã®æ‰‹å£ã«ã¯è‹¥è€…ç‰¹æœ‰ã®å‚¾å‘ãŒåž£é–“è¦‹ãˆã‚‹ãªã©ã€ç›¸åã™ã‚‹çŠ¯äººåƒã‚‚æµ®ã‹ã¶ã€‚ã€€çŠ¯è¡Œå£°æ˜Žã«ã‚ˆã‚‹ã¨ã€ã€ŒçœŸçŠ¯äººã€ãŒä»•æŽ›ã‘ãŸæœ€åˆã®çŠ¯è¡Œäºˆå‘Šã¯ï¼–æœˆï¼’ï¼™æ—¥ã€‚ãƒãƒƒãƒˆæŽ²ç¤ºæ¿ã«ã€æ¨ªæµœå¸‚ã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã«å°å¦æ ¡ã¸ã®ç„¡å·®åˆ¥æ®ºäººäºˆå‘Šã®ãƒ¡ãƒ¼ãƒ«ã‚’é€ã‚Šã¤ã‘ã‚‹ã‚ˆã†ã«ç´°å·¥ã—ãŸã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è²¼ã‚Šä»˜ã‘ã€ç”·åå¤§å¦ç”Ÿï¼ˆï¼‘ï¼™ï¼‰ã«é–²è¦§ã•ã›ãŸã€‚ã€€å¤§å¦ç”Ÿã¯ï¼—æœˆï¼‘æ—¥ã«ç¥žå¥ˆå·çœŒè¦ã«å¨åŠ›æ¥å‹™å¦¨å®³å®¹ç–‘ã§é€®æ•ã•ã‚Œã€ï¼’æ—¥ã«ãƒ†ãƒ¬ãƒ“ãªã©ã§å ±é“ã•ã‚ŒãŸã€‚å£°æ˜Žã§ã¯çŠ¯è¡Œã®æ‰‹å£ã¨äºˆå‘Šæ–‡ã‚’å…·ä½“çš„ã«è¨˜ã—ãŸå¾Œã€ã€Œ

tsupo 2012/10/22

ã€Œé€®æ•å ±é“ã®2æ—¥å¾Œãã‚‰ã„ã«ã€å…¨ãåŒã˜æ‰‹å£ã§æ¨ªæµœå¸‚ã«å‘Šç™½æ–‡ã‚’é€ã£ãŸã€â†’ æŠ•ç¨¿æ¬„ã«å±Šã„ãŸ441ä»¶ã‚’èª¿ã¹ãŸã¨ã“ã‚ã€ã€Œå‘Šç™½æ–‡ã€ã¯å±Šã„ã¦ã„ãªã‹ã£ãŸ // ã€Œå‘Šç™½æ–‡ã€ã‚’æŠ•ç¨¿ã™ã‚‹ CSRF ã‚’è¸ã‚“ã äººã¯ã„ãªã‹ã£ãŸ?

ãƒªãƒ³ã‚¯

çœŸçŠ¯äººã«ã‚ˆã‚‹çŠ¯è¡Œå£°æ˜Žãƒ¡ãƒ¼ãƒ«å…¨æ–‡ã¾ã¨ã‚ - satoru.netã®è‡ªç”±å¸³

â€»ãƒ¡ãƒ¼ãƒ«ã‚’å—ã‘å–ã£ãŸã”æœ¬äººã§ã‚ã‚‹è½åˆå¼è·å£«ã«ã‚ˆã£ã¦å…¨æ–‡ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸ (2012/10/21è¿½è¨˜) å ±é“ã•ã‚ŒãŸçŠ¯è¡Œå£°æ˜Žã®æ˜ åƒã‚’èªã¿å–ã£ã¦åŽŸæ–‡ã®ã¾ã¾æ–‡å—èµ·ã“ã—ã¦ã¿ãŸã€‚ ã¾ãŸã€æ–°èžç¤¾å„ç¤¾ã‹ã‚‰å…¬é–‹ã•ã‚Œã¦ã„ã‚‹è¦æ—¨ã‚‚ã¾ã¨ã‚ã¦ã„ã¾ã™ã€‚ å„ç¤¾å ±é“æ©Ÿé–¢ã«ã‚ˆã£ã¦å…¬è¡¨ã•ã‚ŒãŸãƒ¡ãƒ¼ãƒ«æ–‡é¢ã®æ˜ åƒã‚’ã‚‚ã¨ã«æ–‡å—èµ·ã“ã— èªã¿å–ã‚Œã‚‹é™ã‚Šä¸€å—ä¸€å¥åŽŸæ–‡ã®ã¾ã¾å†ç¾ å ±é“ã§æœªå…¬è¡¨ã€è§£èªãŒã§ãã¦ã„ãªã„éƒ¨åˆ†ã€è¢«å®³è€…ãªã©ã®å®Ÿåéƒ¨åˆ†ã¯ã€Ž######ã€ã§è¡¨ç¾ Fromã®ãƒ¡ã‚¢ãƒ‰éƒ¨åˆ†ã¯å ±é“ï¼†Yahoo!ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«è¨å®šã•ã‚Œã¦ã„ã‚‹ãƒ‹ãƒƒã‚¯ãƒãƒ¼ãƒ ç‰ã‹ã‚‰å†ç¾ï¼žæ¤œè¨¼éŽç¨‹ èª¤å—è„±å—ã€æƒ…å ±æä¾›ã¯ã‚³ãƒ¡æ¬„ã«æŠ•ç¨¿ã—ã¦ã„ãŸã ã‘ã‚Œã°ã™ãã«ä¿®æ£ã—ã¾ã™ â€»ã‚ãã¾ã§è’ã„æ˜ åƒã‹ã‚‰ã®å†ç¾ãªã®ã§è¦‹è½ã¨ã—ã‚„èª¤èªãŒã‚ã‚‹å¯èƒ½æ€§ã‚ã‚Š â€»è¿½è¨˜ï¼šç”£çµŒæ–°èžã«ã‚ˆã‚‹è¦æ—¨ã¾ã¨ã‚ã‚’è¿½åŠ 2012/10/18 1:00 çŠ¯è¡Œå£°æ˜Žå…¨æ–‡ æ—¥ä»˜ï¼š2012å¹´10æœˆ9æ—¥ 23:22 (Wed, 10 Oct 2

tsupo 2012/10/17

æ¨ªæµœå¸‚ã®ä»¶ã«é–¢ã—ã¦ã€CSRF ã‚’åˆ©ç”¨ã—ãŸã¨æ˜Žè¨˜ã—ã¦ã‚‹ã‚“ã ã€‚

ãƒªãƒ³ã‚¯

ãªã‚Šã™ã¾ã—ï¼ˆé éš”æ“ä½œï¼‰ã‚¦ã‚¤ãƒ«ã‚¹ã«ã‚ˆã‚‹çŠ¯è¡Œäºˆå‘Šäº‹ä»¶ã‚’ã¾ã¨ã‚ã¦ã¿ãŸã€‚ - piyolog

ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚’é€šã˜ã¦çŠ¯è¡Œäºˆå‘Šã‚’è¡Œã£ãŸã¨ã—ã¦ã€å¹ç”°å¸‚ã€æ´¥å¸‚ã§ãã‚Œãžã‚Œç”·æ€§ãŒé€®æ•(å¹ç”°å¸‚ç”·æ€§ã¯ãã®å¾Œèµ·è¨´)ã•ã‚Œã¾ã—ãŸã€‚ã—ã‹ã—ã€ãã®å¾Œã®èª¿æŸ»ã«ã‚ˆã£ã¦çŠ¯è¡Œäºˆå‘Šã‚’è¡Œã£ãŸã¨ã•ã‚Œã‚‹PCãŒã‚¦ã‚¤ãƒ«ã‚¹ã«æ„ŸæŸ“ã—ã¦ã„ãŸã“ã¨ãŒæ˜Žã‚‰ã‹ã¨ãªã‚Šã€é€®æ•ã•ã‚ŒãŸç”·æ€§ã®PCã‚’è¸ã¿å°ã¨ã—ãŸ(ãªã‚Šã™ã¾ã—ã«ã‚ˆã‚‹)ç¬¬ä¸‰è€…ã®çŠ¯è¡Œã«ã‚ˆã‚‹ç–‘ã„ãŒå‡ºãŸãŸã‚ã€ç”·æ€§äºŒäººã¯é‡ˆæ”¾ã•ã‚Œã¦ã„ãŸäº‹å®ŸãŒæ˜Žã‚‰ã‹ã¨ãªã‚Šã¾ã—ãŸã€‚ã¾ãŸã€ãã®å¾Œç¦å²¡å¸‚ç”·æ€§ã‚‚åŒã˜ã‚¦ã‚¤ãƒ«ã‚¹ãŒç¢ºèªã•ã‚ŒãŸã“ã¨ã«ã‚ˆã‚Šé‡ˆæ”¾ã•ã‚Œã¦ã„ã¾ã™ã€‚ã•ã‚‰ã«10æœˆ15æ—¥ã€çœŸçŠ¯äººã¨è‡ªç§°ã™ã‚‹äººé–“ã‹ã‚‰çŠ¯è¡Œå£°æ˜Žã¨ã•ã‚Œã‚‹ãƒ¡ãƒ¼ãƒ«ãŒTBSãƒ©ã‚¸ã‚ªã«é€ã‚‰ã‚Œã¦ã„ãŸã“ã¨ãŒæ˜Žã‚‰ã‹ã¨ãªã‚Šã€6æœˆã®æ¨ªæµœå¸‚ã®çŠ¯è¡Œäºˆå‘Šã‚‚è‡ªåˆ†ãŒè¡Œã£ãŸã“ã¨ã‚’èªã‚ã‚‹å†…å®¹ãŒè¨˜è¼‰ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ã“ã“ã§ã¯å ±é“ã•ã‚ŒãŸæƒ…å ±ã‚’å…ƒã«ã€ãã‚Œãžã‚Œã®äº‹ä»¶ã€åŠã³ã‚¦ã‚¤ãƒ«ã‚¹ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ã¾ã™ã€‚ ãªãŠã€ä¸‹è¨˜å†…å®¹ã‚’éµœå‘‘ã¿ã«ã›ãšã€ã‚½ãƒ¼ã‚¹ã¯å„è‡ªã«ã¦ã”ç¢ºèªãã ã•ã„ã€‚ 2013å¹´2æœˆ10æ—¥ã«ã€ã“ã®ä»¶ã®è¢«

tsupo 2012/10/17

æ–°ã—ã„æƒ…å ±ã‚’å—ã‘ã¦ã€éšæ™‚ã€æ›´æ–°ã•ã‚Œã¦ã„ã‚‹

ãƒªãƒ³ã‚¯

ãªã‚Šã™ã¾ã—çŠ¯è¡Œäºˆå‘Šã«æ‚ªç”¨å¯èƒ½ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è„†å¼±æ€§

ãªã‚Šã™ã¾ã—çŠ¯è¡Œäºˆå‘ŠãŒè©±é¡Œã«ãªã£ã¦ã„ã¾ã™ã€‚ç¾åœ¨å•é¡Œã«ãªã£ã¦ã„ã‚‹ã‚‚ã®ã¯ã€ãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒä½¿ã‚ã‚Œã¦ã„ã‚‹ã‚ˆã†ã§ã™ãŒã€ãã‚Œä»¥å¤–ã«ã€ç„¡ç·šLANã®ä¹—ã£å–ã‚Šã‚„ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§æ‚ªç”¨ãªã©ã®æ‰‹æ³•ãŒã‚ã‚Šã¾ã™ã€‚NHKã®å ±é“ã§ã¯ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒª(CSRF)è„†å¼±æ€§ãŒã€éŽåŽ»ã«æ‚ªç”¨ã•ã‚ŒãŸäº‹ä¾‹ãŒç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ï¼ˆãŸã ã—mixiã®ä¾‹ã¨æ€ã‚ã‚Œã¾ã™ï¼‰ã€‚ ã¾ãŸã€ï¼“ã¤ç›®ã¨ã—ã¦ã€åˆ©ç”¨è€…ã‹ã‚‰ã®æŠ•ç¨¿ã‚’å—ã‘ä»˜ã‘ã‚‹æŽ²ç¤ºæ¿å´ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ä¸Šã®æ¬ é™¥ãŒã‚ã£ãŸå ´åˆã€åˆ©ç”¨è€…ãŒã‚¦ã‚¤ãƒ«ã‚¹ã«æ„ŸæŸ“ã—ãªãã¦ã‚‚ã€æ›¸ãè¾¼ã¿ã‚’ã•ã‚Œã‚‹ãŠãã‚ŒãŒã‚ã‚Šã¾ã™ã€‚ ã“ã®ã†ã¡ã€ï¼£ï¼³ï¼²ï¼¦ï¼ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªã¨å‘¼ã°ã‚Œã‚‹æ”»æ’ƒæ‰‹æ³•ã§ã¯ã€åˆ©ç”¨è€…ã«æ”»æ’ƒè€…ãŒç”¨æ„ã—ãŸãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã®ãƒªãƒ³ã‚¯ã‚’ã‚¯ãƒªãƒƒã‚¯ã•ã›ãŸã ã‘ã§ã€åˆ¥ã®æŽ²ç¤ºæ¿ã«æ–‡ç« ã‚’æŠ•ç¨¿ã•ã›ã‚‹ã“ã¨ãŒå¯èƒ½ã ã¨ã„ã†ã“ã¨ã§ã™ã€‚ ã“ã®å ´åˆã€åˆ©ç”¨è€…ã¯ã‚¯ãƒªãƒƒã‚¯ã—ãŸã ã‘ãªã®ã§ã€æ–‡ç« ã‚’æŠ•ç¨¿ã—ãŸã“ã¨ã«ã¯ã»ã¨ã‚“ã©æ°—ä»˜ã‹ãªã„ã¨ã„

tsupo 2012/10/16

ãƒªãƒ³ã‚¯

æ°‘æ”¾ã¸ã®ãƒ¡ãƒ¼ãƒ« è¨ˆï¼–ä»¶ã¸ã®é–¢ä¸Žèªã‚ã‚‹ã€€NHKãƒ‹ãƒ¥ãƒ¼ã‚¹

é éš”æ“ä½œã§ãã‚‹ã‚¦ã‚¤ãƒ«ã‚¹ã«æ„ŸæŸ“ã—ãŸãƒ‘ã‚½ã‚³ãƒ³ãŒæ‚ªç”¨ã•ã‚Œã€çŠ¯ç½ªã‚’äºˆå‘Šã™ã‚‹æ›¸ãè¾¼ã¿ã‚’ã—ãŸç–‘ã„ã§ç”·æ€§ï¼’äººãŒé€®æ•ã•ã‚ŒãŸã‚ã¨é‡ˆæ”¾ã•ã‚ŒãŸäº‹ä»¶ã§ã€éƒ½å†…ã®æ°‘æ”¾ã«è‡ªåˆ†ãŒçœŸçŠ¯äººã ã¨ã—ã¦ï¼–ä»¶ã®è„…è¿«äº‹ä»¶ã¸ã®é–¢ä¸Žã‚’èªã‚ã‚‹ãƒ¡ãƒ¼ãƒ«ãŒå±Šã„ã¦ã„ãŸã“ã¨ãŒåˆ†ã‹ã‚Šã¾ã—ãŸã€‚ è¦è¦–åºã¯çŠ¯äººã—ã‹çŸ¥ã‚Šå¾—ãªã„ã‚ˆã†ãªå†…å®¹ãŒæ›¸ãè¾¼ã¾ã‚Œã¦ã„ã‚‹ã“ã¨ã‹ã‚‰çŠ¯è¡Œå£°æ˜Žã®ç–‘ã„ãŒã‚ã‚‹ã¨ã¿ã¦èª¿ã¹ã¦ã„ã¾ã™ã€‚ ã“ã®äº‹ä»¶ã¯ã€ã“ã¨ã—ï¼—æœˆã€å¤§é˜ªãƒ»ä¸å¤®åŒºã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã«ç„¡å·®åˆ¥æ®ºäººã‚’äºˆå‘Šã™ã‚‹å†…å®¹ã®æ›¸ãè¾¼ã¿ãŒã•ã‚ŒãŸã»ã‹ã€ï¼™æœˆã«ã¯ã€ä¸‰é‡çœŒã®ä¼Šå‹¢ç¥žå®®ã‚’ã€Œçˆ†ç ´ã™ã‚‹ã€ãªã©ã¨æ›¸ãè¾¼ã¾ã‚ŒãŸã‚‚ã®ã§ã€ã„ãšã‚Œã‚‚é éš”æ“ä½œã§ãã‚‹ã‚¦ã‚¤ãƒ«ã‚¹ã«æ„ŸæŸ“ã—ãŸãƒ‘ã‚½ã‚³ãƒ³ãŒæ‚ªç”¨ã•ã‚Œã€é€®æ•ã•ã‚ŒãŸç”·æ€§ï¼’äººãŒç„¡é–¢ä¿‚ã®å¯èƒ½æ€§ãŒé«˜ã„ã¨ã—ã¦é‡ˆæ”¾ã•ã‚Œã¾ã—ãŸã€‚ ã“ã®äº‹ä»¶ã‚’å·¡ã£ã¦ä»Šæœˆï¼‘ï¼æ—¥ã€æ°‘æ”¾ã®ï¼´ï¼¢ï¼³ã«å¯¾ã—ã¦ã€Œç§ãŒçœŸçŠ¯äººã§ã™ã€ã¨ã„ã†ã‚¿ã‚¤ãƒˆãƒ«ã§ã€ã€Œç¾åœ¨å ±é“ã•ã‚Œã¦ã„ã‚‹å¤§é˜ªãƒ»ä¸‰é‡ã®é éš”æ“ä½œã‚¦ã‚¤ãƒ«ã‚¹äº‹ä»¶ã«ã¤ã„ã¦ç§ãŒçŠ¯äººã§ã™ã€ã¨æ›¸ã‹ã‚ŒãŸãƒ¡ãƒ¼ãƒ«ãŒ

tsupo 2012/10/16

CRSF ã«é–¢ã™ã‚‹è¨€åŠãŒã‚ã‚‹

ãƒªãƒ³ã‚¯

CSRFã«ã‚ˆã‚‹å†¤ç½ªã€èª¤èªé€®æ•ã‹ã€‚å¤§é˜ªå¸‚ã‚¦ã‚§ãƒ–ã«å¤§é‡æ®ºäººäºˆå‘Šã§ã®é€®æ•ã®ä»¶: ãƒ›ãƒƒãƒˆã‚³ãƒ¼ãƒŠãƒ¼

ãƒ–ãƒã‚°(iiyu.asablo.jpã®æ¤œç´¢) ãƒ›ãƒƒãƒˆã‚³ãƒ¼ãƒŠãƒ¼å†…ã®æ¤œç´¢ ã§ã‚‚ASAHIãƒãƒƒãƒˆ(asahi-net.or.jp)å…¨ä½“ã®æ¤œç´¢ã§ã™ã€‚ æ¤œç´¢ã—ãŸã„è¨€è‘‰ã®ã‚ã¨ã«ã€ç©ºç™½ã§åŒºåˆ‡ã£ã¦ki4s-nkmrã‚’å…¥ã‚Œã‚‹ã¨ã„ã„ã‹ã‚‚ã€‚ ä¾‹ã€€ä¸æ‘(show) ki4s-nkmr ã‚¦ã‚§ãƒ–å…¨ä½“ã®æ¤œç´¢ ASAHIãƒãƒƒãƒˆ(http://asahi-net.jp )ã®jouwa/salonã‹ã‚‰ãƒ›ãƒƒãƒˆã‚³ãƒ¼ãƒŠãƒ¼(http://www.asahi-net.or.jp/~ki4s-nkmr/ )ã«è»¢è¼‰ã—ãŸã‚‚ã®ã‹ã‚‰ã€‚ --- æ©‹ä¸‹å¾¹å¸‚é•·ã®å¤§é˜ªå¸‚ã®ã‚¦ã‚§ãƒ–ã§ã€Œå¤§é‡æ®ºäººã‚’ã™ã‚‹ã€ã¨æŠ•ç¨¿ã—ãŸã¨ã„ã†å®¹ç–‘ã§ã€ ã‚¢ãƒ‹ãƒ¡æ¼”å‡ºå®¶ãŒé€®æ•ã•ã‚ŒãŸä»¶ã€‚ ãŸã¨ãˆã°ã€ http://mainichi.jp/select/news/20120827k0000m040038000c.html æ®ºäººäºˆå‘Š:å¤§é˜ªå¸‚ï¼¨ï¼°ã«æ›¸ãè¾¼ã‚“ã ç–‘ã„ã§ï¼”ï¼’æ³æ¼”å‡ºå®¶é€®æ• http://

tsupo 2012/08/27

å®Ÿéš›ã«CSRFã‚’åˆ©ç”¨ã—ãŸç½ ã«ã¯ã‚ã‚‰ã‚ŒãŸã®ã‹ã©ã†ã‹ã¯ä½•ã¨ã‚‚åˆ¤æ–ã§ããªã„ã‘ã©ã€ãã®å¯èƒ½æ€§ã¯ã‚ã‚‹ã¨ã„ã†ã“ã¨

ãƒªãƒ³ã‚¯

http://cache.gyazo.com/b72c0672cc2ee2a3c498aa4c6ced4c4f.png

tsupo 2012/08/27

ãƒªãƒ³ã‚¯

CSRFã§å¼·åˆ¶ãƒã‚°ã‚¤ãƒ³ã•ã›ã‚‹ã¨ã„ã†ã‚¢ã‚¤ãƒ‡ã‚¢ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼

ã“ã‚“ã«ã¡ã¯ã“ã‚“ã«ã¡ã¯ï¼ï¼ ä»Šæ—¥ã¯CSRFè„†å¼±æ€§ã®ã¡ã‚‡ã£ã¨ã—ãŸè©±ã§ã™ï¼ ã“ã®CSRFã£ã¦ãªã«ã‹ã£ã¦ã„ã†ã¨ã€ ã‚µãƒ¼ãƒãƒ¼ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ã€Žèª°ã‹ã«å‹æ‰‹ã«é€ã‚‰ã›ã‚‹ã€ã£ã¦ã„ã†ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒã‚‰ã¿ã®æ”»æ’ƒæ‰‹æ³•ã®ã²ã¨ã¤ã€‚ ã‚ã‹ã‚Šã‚„ã™ã„ä¾‹ã ã¨ã€ HTMLã®ç”»åƒã‚¿ã‚°ã‚’ä»¥ä¸‹ã®ã‚ˆã†ã«ã—ãŸãƒšãƒ¼ã‚¸ã‚’èª°ã‹ã«æ•™ãˆã‚‹ã€‚ <img src="ä½•ã€…SNSã®è¶³è·¡.php" width="1" height="1"> ãã†ã™ã‚‹ã¨ã€ãã®ãƒšãƒ¼ã‚¸ã‚’ã€Œè¦‹ãŸäººã€ãŒä½•ã€…SNSã®è¶³è·¡.phpã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸã“ã¨ã«ãªã‚‹ã€‚ â€»è©³ã—ãã¯ã“ã¡ã‚‰ã®ãƒžãƒ³ã‚¬ã§ â†’ ï¼»ã¯ã¾ã¡ã¡ã‚ƒã‚“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¬›åº§ï¼½ã“ã“ãŒã‚ãƒŸã®è„†å¼±ãªã¨ã“ã‚â€¦ï¼ ï¼š ç¬¬2å›ž ã—ãƒ¼ã•ãƒ¼ãµã£ã¦ä½•ã§ã™ã‹ï¼Ÿ CSRFã£ã¦ã“ã‚“ãªé¢¨ã«ã€ ã€Œãƒã‚°ã‚¤ãƒ³æ¸ˆã¿ã®äººã«ä½•ã‹æ“ä½œã•ã›ã‚‹ã€ã£ã¦ã‚¤ãƒ¡ãƒ¼ã‚¸ãŒå¼·ãã¦ã€ å¯¾ç–ã™ã‚‹å´ã‚‚ã¾ãŸã€ã€Œæ—¢ã«ãƒã‚°ã‚¤ãƒ³æ¸ˆã¿ã®äººã‚’å®ˆã‚‹ã€ã‚ˆã†ãªè€ƒãˆãŒå¼·ã„ã‚“ã ã‚ˆãã€‚ ä¾‹ãˆã°ã€å‹æ‰‹ã«æ—¥è¨˜ã«æŠ•ç¨¿ã•ã›ãªã„ã‚ˆã†ã«å¯¾

tsupo 2012/05/22

ã€Œã¡ãªã¿ã«dropboxã‚‚å¼·åˆ¶ãƒã‚°ã‚¤ãƒ³ã•ã›ã‚‹ã“ã¨å¯èƒ½ã ã‚ˆã€

ãƒªãƒ³ã‚¯

å…¬é–‹: 2012å¹´2æœˆ7æ—¥1æ™‚35åˆ†é ƒ ã“ã‚“ãªãŠè©±ãŒâ€¦â€¦ã€Œã‚¢ãƒ‹ãƒ¡ã‚µã‚¤ãƒˆé‹å–¶ã§ãƒˆãƒ©ãƒ–ãƒ«ã€€ã‚¦ã‚¤ãƒ«ã‚¹ä½œæˆç½ªåˆé©ç”¨ã€ç”·é€®æ• (www.itmedia.co.jp)ã€ã€‚ å„ç´™ã®å ±é“ã«ã‚ˆã‚‹ã¨ã€ç”·ã¯ã€Œã•ã£ã•ã¨é–‰éŽ–ã—ã‚ã€‚ã•ã‚‚ãªã„ã¨ã€ãŠå‰ã®ä¸¡è¦ªã‚’æ®ºã—ã¦å®¶ã‚’ç‡ƒã‚„ã™ã€ã¨ã„ã†æ–‡è¨€ã‚’è‡ªåˆ†ãŒé‹å–¶ã—ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã«æ›¸ãè¾¼ã‚€ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä½œæˆã—ã€ã‚ã‚‹ã‚µã‚¤ãƒˆã«åŸ‹ã‚è¾¼ã‚“ã ã€‚ ç”·ã¯ç¥žå¥ˆå·çœŒã®ç”·æ€§ã¨å…±åŒã§ã‚¢ãƒ‹ãƒ¡ã‚µã‚¤ãƒˆã‚’é‹å–¶ã—ã¦ã„ãŸãŒã€é‹å–¶æ–¹æ³•ã‚’ã‚ãã£ã¦ç”·æ€§ã¨ãƒˆãƒ©ãƒ–ãƒ«ã«ãªã£ã¦ã„ãŸã€‚ç”·ã¯ç”·æ€§ã«ãƒ¡ãƒ¼ãƒ«ã‚’é€ã‚Šã€ä¸æ£ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’åŸ‹ã‚è¾¼ã‚“ã ã‚µã‚¤ãƒˆã«èª˜å°Žã€‚ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸç”·æ€§ãŒè„…è¿«çš„ãªæ–‡è¨€ã‚’è‡ªåˆ†ã®ã‚µã‚¤ãƒˆã«æ›¸ãè¾¼ã‚“ã ã‚ˆã†ã«è¦‹ã›ã‹ã‘ãŸä¸Šã§ã€åºœè¦ã«ã€Œè„…è¿«ã•ã‚ŒãŸã€ãªã©ã¨ç›¸è«‡ã—ã¦ã„ãŸã¨ã„ã†ã€‚ åºœè¦ãŒç™ºä¿¡è¨˜éŒ²ãªã©ã‚’èª¿ã¹ãŸã¨ã“ã‚ã€ä¸æ£ãƒ—ãƒã‚°ãƒ©ãƒ ãŒã‚µã‚¤ãƒˆã«åŸ‹ã‚è¾¼ã¾ã‚Œã¦ã„ãŸã“ã¨ãŒåˆ†ã‹ã‚Šã€çŠ¯è¡ŒãŒç™ºè¦šã€‚ã¾ãšä¸æ£ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ã‚µã‚¤ãƒˆã«åŸ‹ã‚è¾¼ã‚“ã ä¸æ£æŒ‡ä»¤é›»ç£çš„è¨˜éŒ²ä¾›ç”¨ã®ç–‘ã„ã§2

tsupo 2012/02/13

ã€ŒCSRFã¨ã—ã¦ã¯ç‰¹æ®Šãªäº‹ä¾‹ã¨ã„ã†ã‹ã€ç‹¬å‰µçš„ã¨ã„ã†ã‹ã€‚å¼·è¿«ã•ã‚ŒãŸã‚ˆã†ã«è¦‹ã›ã‹ã‘ã¦é™¥ã‚Œã‚ˆã†ã¨ã—ãŸè‡ªä½œè‡ªæ¼”ã¨ã„ã†ã®ãŒã™ã”ã„ã€

ãƒªãƒ³ã‚¯

ã‚¤ãƒ¼ãƒ»ã‚¢ã‚¯ã‚»ã‚¹æ ªå¼ä¼šç¤¾ãŒæä¾›ã™ã‚‹ Pocket WiFi (GP02) ã¯ã€ãƒ¢ãƒã‚¤ãƒ«ç„¡ç·š LAN ãƒ«ãƒ¼ã‚¿ã§ã™ã€‚Pocket WiFi (GP02) ã®ã‚¦ã‚§ãƒ–ç®¡ç†ç”»é¢ã«ã¯ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªã®è„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚

tsupo 2012/02/01

ç®¡ç†ç”»é¢ã«CSRFè„†å¼±æ€§

ãƒªãƒ³ã‚¯

ãã†ã„ãˆã°"ä»Šæ—¥ã‚‚ã‚„ã‚‰ã‚Œã‚„ã"ãŒ"æ˜Žæ—¥ã‚‚ã‚„ã‚‰ã‚Œã‚„ã"ã¨"ã‚„ã‚‰ãŠã‚“!"ã«åˆ†è£‚ã—ã¦ã™ãã«"æ˜Žæ—¥ã‚‚ã‚„ã‚‰ã‚Œã‚„ã"ï¼ˆé€®æ•ã•ã‚ŒãŸã»ã†ï¼‰ãŒLivedoor Blogã«ç§»è»¢ã—ã¾ã—ãŸãã€‚å«Œå„²ã®æ–¹ã€…ãŒã€Œãƒ©ã‚¤ãƒ–ãƒ‰ã‚¢å¿…æ»ã ãªï½—ï½—ï½—ã€ã¨å¤§é¨’ãŽã™ã‚‹ã‚“ã ã‚ã†ãªã‚ï¼ˆæ£’èªã¿ï¼‰ã€‚

ãƒ©ã‚¤ãƒ–ãƒ‰ã‚¢ç¤¾å“¡malaã€Œã‚„ã‚‰ã‚Œã‚„ãç®¡ç†äººã®ã‚¦ã‚¤ãƒ«ã‚¹ä½œæˆç½ªã§ã®é€®æ•ã¯ãŠã‹ã—ã„ã€ï¼Ÿ - Togetter

tsupo 2012/01/30

csrf

ãƒªãƒ³ã‚¯

webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã¨ã¯ï¼Ÿ - OKWAVE

ã“ã‚“ã«ã¡ã¯ï¼ ã€Œãƒ•ã‚©ãƒ¼ãƒ ã‚’å‹æ‰‹ã«ã‚µãƒ–ãƒŸãƒƒãƒˆã—ã¦ã—ã¾ã†ã€ ãã®èªè˜ã§ã ã„ãŸã„ã‚ã£ã¦ã¾ã™ï¼ãŸã¶ã‚“ï¼ ãã®mixiã®ä¾‹ã ã¨ã€ å…¥åŠ›ç”»é¢ â†’ (é€ä¿¡1) â†’ ç¢ºèªç”»é¢ â†’ (é€ä¿¡2) â†’ å®Œäº† ã£ã¦ãªã‚‹ã‚ã‘ã§ã™ãŒã€ ã„ãã‚‰ç¢ºèªç”»é¢ãŒé–“ã«ã‚ã£ãŸã¨ã“ã‚ã§ã€ (é€ä¿¡2)ã®éƒ¨åˆ†ã‚’ã€Œå‹æ‰‹ã«ã‚µãƒ–ãƒŸãƒƒãƒˆã€ã—ã¡ã‚ƒãˆã°ã„ã„ã‚ã‘ã§ã™ã€‚ â€»ãŸã ã—ä»Šã®mixiã‚„ã€ã¡ã‚ƒã‚“ã¨ã—ãŸwebã‚µãƒ¼ãƒ“ã‚¹ã¯é€ä¿¡æ™‚ã«ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ã¤ã‘ã‚‹ã¨ã‹CSRFå¯¾ç–ã—ã¦ã‚‹ã®ã§ã§ãã¾ã›ã‚“ å®Ÿéš›ã®æ”»æ’ƒã®ä¾‹ã¨ã—ã¦ã¯ã€mixiã‚„twitterãªã©ã®å¤šãã®äººãŒç¹‹ãŒã£ã¦ã„ã‚‹æŠ•ç¨¿åž‹ã‚µã‚¤ãƒˆã§ã€ ã€Œã“ã‚“ã«ã¡ã¯ã“ã‚“ã«ã¡ã¯ï¼ï¼ ã“ã®ãƒªãƒ³ã‚¯å…ˆã™ã”ã„ã‚ˆï¼ http://ï½žã€ ã®ã‚ˆã†ãªæ›¸ãè¾¼ã¿ã‚’ã—ã¦ãŠãã€ ãã®ãƒªãƒ³ã‚¯å…ˆã§formã‚„JavaScriptç‰ã§ã€Œè‡ªå‹•çš„ã«å‹æ‰‹ã«ã‚µãƒ–ãƒŸãƒƒãƒˆã€ã—ã¦ã—ã¾ã„ã¾ã™ã€‚ ç”»é¢ã«ã¯ä½•ã‚‚è¡¨ç¤ºã•ã‚Œãªãã¦ã‚‚ã‹ã¾ã„ã¾ã›ã‚“ã€‚ ãã—ã¦ã•ã‚‰ã«å‹æ‰‹ã«æ›¸ãè¾¼ã‚€å†…å®¹ã‚’ ã€Œã“ã‚“ã«

tsupo 2011/06/03

ã¯ã¾ã¡ã¡ã‚ƒã‚“æœ¬äººãŒå›žç”

ãƒªãƒ³ã‚¯

CSRFå¯¾ç–ã®ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ã«ã—ãŸã‚‰æ„å›³ã«åã—ã¦è„†å¼±ã«ãªã£ãŸå®Ÿè£…ä¾‹

è£œè¶³ ã“ã®è¨˜äº‹ã¯æ—§å¾³ä¸¸æµ©ã®æ—¥è¨˜ã‹ã‚‰ã®è»¢è¼‰ã§ã™ï¼ˆå…ƒURLã€ã‚¢ãƒ¼ã‚«ã‚¤ãƒ–ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯1ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯2ï¼‰ã€‚ å‚™å¿˜ã®ãŸã‚è»¢è¼‰ã„ãŸã—ã¾ã™ãŒã€ã“ã®è¨˜äº‹ã¯2011å¹´1æœˆ27æ—¥ã«å…¬é–‹ã•ã‚ŒãŸã‚‚ã®ã§ã€å½“æ™‚ã®å¾³ä¸¸ã®è€ƒãˆã‚’ç¤ºã™ã‚‚ã®ã‚’ã€åŸºæœ¬çš„ã«å†…å®¹ã‚’å¤‰æ›´ã›ãšã«ãã®ã¾ã¾è»¢è¼‰ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ è£œè¶³çµ‚ã‚ã‚Š æ©‹å£èª ã•ã‚“ã‹ã‚‰ä»Šè©±é¡Œã®æ›¸ç±ãƒ‘ãƒ¼ãƒ•ã‚§ã‚¯ãƒˆPHP (PERFECT SERIES 3)ã‚’çŒ®æœ¬ã„ãŸã ãã¾ã—ãŸã€‚ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯åŒæ›¸ã®CSRFå¯¾ç–ã®å•é¡Œç‚¹ã«ã¤ã„ã¦å ±å‘Šã—ãŸã„ã¨æ€ã„ã¾ã™*1ã€‚ æœ¬æ›¸ã§ã¯ã€CSRFã®å¯¾ç–ã«ã¤ã„ã¦ä»¥ä¸‹ã®ã‚ˆã†ã«èª¬æ˜Žã•ã‚Œã¦ã„ã¾ã™ï¼ˆåŒæ›¸P338ï¼‰ã€‚ CSRFã¸ã®å¯¾å¿œæ–¹æ³•ã¯ã€ã€Œãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã«ã‚ˆã‚‹ãƒã‚§ãƒƒã‚¯ã‚’ç”¨ã„ã‚‹ã€ã€ŒæŠ•ç¨¿ãƒ»ç·¨é›†ãƒ»å‰Šé™¤ãªã©ã®æ“ä½œã®éš›ã«ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰èªè¨¼ã‚’ã•ã›ã‚‹ã€ãªã©ãŒã‚ã‚Šã¾ã™ã€‚ä¸€ç•ªç¢ºå®Ÿãªæ–¹æ³•ã¯ä¸¡è€…ã‚’ä½µç”¨ã™ã‚‹ã“ã¨ã§ã™ãŒã€ãƒ¦ãƒ¼ã‚¶åˆ©ä¾¿æ€§ãªã©ã®ç†ç”±ã‹ã‚‰ç°¡ç•¥åŒ–ã™ã‚‹å ´åˆã§

tsupo 2011/04/08

ã€Žè¾žæ›¸ã«ã®ã£ã¦ã„ã‚‹ã‚ˆã†ãªå˜èªžã‚’ã€Œä¹±æ•°ã®ç¨®ã€ã«ä½¿ã£ã¦ã—ã¾ã†ã¨ã€ç¾å®Ÿçš„ãªæ™‚é–“å†…ã«ã€Œç¨®ã€ãŒè§£èªã•ã‚Œã€CSRFæ”»æ’ƒã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€

ãƒªãƒ³ã‚¯

ãƒ‰ã‚³ãƒ¢ã¯iãƒ¢ãƒ¼ãƒ‰IDã®ç”Ÿæˆæ–¹æ³•ã‚’è¦‹ç›´ã™ã¹ãã Â« mpw.jpç®¡ç†äººã®Blog

æ˜¨å¹´ã€ã€Œiãƒ¢ãƒ¼ãƒ‰IDã€ã®é€å‡ºãŒé–‹å§‹ã•ã‚ŒãŸã“ã¨ã«ã‚ˆã‚Šã€ã€Œiãƒ¢ãƒ¼ãƒ‰IDã€ã®ã¿ã§ãƒ¦ãƒ¼ã‚¶èªè¨¼ã‚’è¡Œã†æºå¸¯ã‚µã‚¤ãƒˆãŒå¢—ãˆã¦ãã¾ã—ãŸã€‚ ãã—ã¦ã€ãã‚Œã‚‰æºå¸¯ã‚µã‚¤ãƒˆã®ä¸ã«ã€iãƒ¢ãƒ¼ãƒ‰IDãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ï¼ˆæ‚ªæ„ã‚‚ã£ãŸç¬¬ä¸‰è€…ã«ã‚ˆã‚‹ä¹—ã£å–ã‚Šæ“ä½œï¼‰ã®è¢«å®³ã‚’å—ã‘ã‚‹ã¨æ€ã‚ã‚Œã‚‹ã‚µã‚¤ãƒˆãŒã€å¤šæ•°æ•£è¦‹ã•ã‚Œã¾ã™ã€‚ è¢«å®³ã‚’å—ã‘ã‚‹ã‚µã‚¤ãƒˆã®æ¡ä»¶ ãƒ¦ãƒ¼ã‚¶èªè¨¼ã‚’ã€Œiãƒ¢ãƒ¼ãƒ‰IDã€ã®ã¿ã§è¡Œã£ã¦ã„ã‚‹ã€‚ FORMã®å…¥åŠ›å†…å®¹ã‚’POSTãƒ¡ã‚½ãƒƒãƒ‰ã§é€ä¿¡ã—ã¦ã„ã‚‹ã‚‚ã®ã®ã€å—ã‘å–ã‚Šå´ã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ¡ã‚½ãƒƒãƒ‰ã®ãƒã‚§ãƒƒã‚¯ã‚’è¡Œã£ã¦ã„ãªã„ã€‚ã‚‚ã—ãã¯ã€GETãƒ¡ã‚½ãƒƒãƒ‰ã§é€ä¿¡ã—ã¦ã„ã‚‹ã€‚ iãƒ¢ãƒ¼ãƒ‰IDãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã®æ–¹æ³• ä»¥ä¸‹ã®ã‚ˆã†ãªå½¢ã§ç™»éŒ²å‡¦ç†ã‚’è¡Œã£ã¦ã„ã‚‹æ”»æ’ƒå¯¾è±¡ã‚µã‚¤ãƒˆ(targetdomain.com)ã‚’æŽ¢ã™ã€‚ [http://targetdomain.com/form.php] <html> ä¼šå“¡ç™»éŒ²é–‹å§‹<br> IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ãƒ¡ã‚¢ãƒ‰ã‚’å…¥åŠ›ã—ã¦ãã ã•ã„<br> <form me

tsupo 2010/03/11

ãƒªãƒ³ã‚¯

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (51)

CSRFã«é–¢ã™ã‚‹tsupoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (61)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´5æœˆç¬¬2é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´5æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´4æœˆï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (51)

CSRFã«é–¢ã™ã‚‹tsupoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (61)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2026å¹´5æœˆç¬¬2é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2026å¹´5æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2026å¹´4æœˆï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (51)

CSRFã«é–¢ã™ã‚‹tsupoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (61)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´5æœˆç¬¬2é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´5æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´4æœˆï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹