[B! Twitter][Security] HeavyFeatherã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

HeavyFeather id:HeavyFeather

Twitterã¨Securityã«é–¢ã™ã‚‹HeavyFeatherã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (32)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€Twitterå®Ÿé¨“ã€‘ã¤ã¶ã‚„ãã ã‘ã§å€‹äººã‚’ç‰¹å®šã§ãã‚‹ã®ã‹ï¼Ÿ | ã‚ªãƒ¢ã‚³ãƒ
ã“ã‚“ã«ã¡ã¯ã€ã‚»ãƒ–å±±ã§ã™ã€‚ ã¿ãªã•ã‚“ã¯Twitterã§ã©ã‚“ãªã¤ã¶ã‚„ãã‚’ã—ã¦ã„ã¾ã™ã‹ï¼Ÿ ãŠãã‚‰ãã€ä»Šæ—¥ã®äºˆå®šã‚’ã¤ã¶ã‚„ã„ãŸã‚Šã€ãƒ©ãƒ³ãƒã®å†™çœŸã‚’ã‚¢ãƒƒãƒ—ã—ãŸã‚Šã€ã‚ãªãŸã®ã€Œä»Šã€ã‚’ä»²ã®è‰¯ã„å‹é”ã«å‘ã‘ã¦ã¤ã¶ã‚„ã„ã¦ã„ã‚‹ã“ã¨ã§ã—ã‚‡ã†ã€‚ ã—ã‹ã—ã€æœ¬å½“ã«ãã®ãƒ„ã‚¤ãƒ¼ãƒˆã¯ã‚ãªãŸã®å‹é”ã ã‘ãŒè¦‹ã¦ã„ã‚‹ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã‚‚ã—ã€çŸ¥ã‚‰ãªã„èª°ã‹ã«ã‚ãªãŸã®ã¤ã¶ã‚„ãã‚’è¦—ã‹ã‚Œã¦ã„ãŸã¨ã—ãŸã‚‰â€¦ï¼Ÿ ã¤ã¶ã‚„ã„ãŸå†…å®¹ã‚’æ‰‹æŽ›ã‹ã‚Šã«å€‹äººã‚’ç‰¹å®šã•ã‚Œã¦ã—ã¾ã†ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã‚ˆï¼ï¼Ÿ ä»Šå›žã¯ã€ãã‚“ãªå€‹äººæƒ…å ±åž‚ã‚Œæµã—ç¤¾ä¼šã«è¦é˜ã‚’é³´ã‚‰ã™å®Ÿé¨“ã‚’ãŠã“ãªã„ã¾ã™ï¼ï¼ â– ãƒ«ãƒ¼ãƒ«èª¬æ˜Ž ï¼‘ï¼ŽTwitterã®æ¤œç´¢æ©Ÿèƒ½ã‚’ä½¿ã£ã¦ã€Œæ¸‹è°·ãªã†ã€ã¨ã¤ã¶ã‚„ã„ã¦ã„ã‚‹ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’æŽ¢ã—ã¾ã™ã€‚ ï¼’ï¼Žã€Œæ¸‹è°·ãªã†ã€ã®æ¤œç´¢çµæžœã‚’ã‚‚ã¨ã«ã€ã•ã‚‰ã«è©³ç´°ãªå€‹äººæƒ…å ±ã‚’åž‚ã‚Œæµã—ã¦ã„ã‚‹ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’å‰²ã‚Šå‡ºã—ã¾ã™ã€‚ ï¼“ï¼Žãã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ã¤ã¶ã‚„ãã‚’ã“ã£ãã‚Šç›£è¦–ã—ã¦ã€å€‹äººã‚’ç‰¹å®šã—ã€å®Ÿéš›ã«æ•ã¾ãˆã‚‹ãŸã‚ã«ãƒãƒ³ã‚¿ãƒ¼ï¼ˆã‚»ãƒ–å±±ï¼‰ãŒæ¸‹è°·ã®
HeavyFeather 2012/03/14
security

privacy

Twitter

social

media

neta

web
ãƒªãƒ³ã‚¯
Twitterã®è„†å¼±æ€§3é€£ç™º - ma<s>atokinugawa's blog
æœ€è¿‘åƒ•ãŒç™ºè¦‹ã—ã€ä¿®æ£ã•ã‚ŒãŸTwitterã®è„†å¼±æ€§ã‚’3ã¤ç´¹ä»‹ã—ã¾ã™ã€‚ 1.æ—§Twitterã®æ–‡å—åˆ—å‡¦ç†ã«çµ¡ã‚“ã XSS åŽ»å¹´ã®å¤ãã‚‰ã„ã«ã€Twitter Webä¸Šã§  ã€œ ÿ ã®æ–‡å—å‚ç…§ãŒå«ã¾ã‚Œã‚‹ãƒ„ã‚¤ãƒ¼ãƒˆã‚’XMLHttpRequestã§èªã¿è¾¼ã‚“ã éš›ã«è¡¨ç¤ºãŒä¹±ã‚Œã‚‹ã¨ã„ã†å•é¡Œã«æ°—ä»˜ã*1ã€ãã®æ™‚ã¯ã“ã‚Œã¯è„†å¼±æ€§ã«ã¯ç¹‹ãŒã‚‰ãªã„ã ã‚ã†ã¨ã„ã†åˆ¤æ–ã‚’ã—ãŸã®ã ã‘ã©ã€ä»Šå¹´ã®4æœˆã«ãªã£ã¦æ”¹ã‚ã¦èª¿ã¹ãŸã¨ã“ã‚è²«é€šã—ã¾ã—ãŸã€‚ è¡¨ç¤ºãŒä¹±ã‚Œã‚‹ã¨ã„ã†ã®ã¯ã€ ã€œ ÿ ã®æ–‡å—å‚ç…§ãŒå«ã¾ã‚Œã‚‹ãƒ„ã‚¤ãƒ¼ãƒˆãŒã‚ã‚‹ã¨ã€ä¸€éƒ¨ã®æ–‡å—ãŒ\XXXXã®å½¢å¼ã«åŒ–ã‘ãŸã‚Šã€ãƒ„ã‚¤ãƒ¼ãƒˆå‘¨è¾ºã®ã€Œ"ã€ãŒã€Œ\"ã€ã«ãªã£ãŸã‚Šã™ã‚‹ã‚‚ã®ã ã£ãŸã®ã§ã™ãŒã€ä»Šå›žã¯ã€Œ"ã€ãŒã€Œ\"ã€ã«ãªã‚‹ç‚¹ãŒè„†å¼±æ€§ã‚’ç™ºç”Ÿã•ã›ã¦ã„ã¾ã—ãŸã€‚ ã“ã®æ¡ä»¶ã§XSSã•ã›ã‚ˆã†ã¨æ€ã£ãŸã‚‰ã€ãƒ„ã‚¤ãƒ¼ãƒˆã‚’ç´°å·¥ã—ã¦URLã‚„@ã‚„#ãªã©ã‚ªãƒ¼ãƒˆãƒªãƒ³ã‚¯ãŒä½œæˆã•ã‚Œã‚‹éƒ¨åˆ†ã«ã†ã¾ã„ã“ã¨ã‚¤ãƒ™ãƒ³
HeavyFeather 2011/07/28
Twitter

security

xss

web
ãƒªãƒ³ã‚¯
Twitterã§OAuthèªè¨¼ã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒ¬ãƒ™ãƒ«ã«ã€ŒDMã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã€ãŒè¿½åŠ ã•ã‚ŒãŸ - F.Ko-Jiã®ã€Œä¸€ç§’å¾Œã¯æœªæ¥ã€
ã“ã‚Œã¾ã§Twitterã®OAuthèªè¨¼ã«ã¯ã‚¢ã‚¯ã‚»ã‚¹ãƒ¬ãƒ™ãƒ«ãŒã€ŒReadã®ã¿ã€ã€ŒReadã¨Writeã€ã¨ã„ã†2æ®µéšŽã—ã‹ãªãã€èªè¨¼ã‚’è¨±å¯ã—ã¦ã—ã¾ã†ã¨ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®å†…å®¹ã¾ã§ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å´ã‹ã‚‰èªã‚ã¦ã—ã¾ã†ã¨ã„ã†å•é¡ŒãŒã‚ã‚Šã¾ã—ãŸãŒã€ã‚ˆã†ã‚„ãã“ã®å•é¡ŒãŒè§£æ±ºã™ã‚‹ã‚ˆã†ã§ã™ã€‚ Beginning today, weâ€™re giving you more control over what information you share with third-party applications. Apps that you use to access your direct messages will ask for your permission again. Â» Twitter Blog: Mission: Permission å…¬å¼ã«ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã«ã€Twitterã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚¢
HeavyFeather 2011/06/02
twitter

security

oauth

web
ãƒªãƒ³ã‚¯
Good night, Posterous
Posterous Spaces is no longer available Thanks to all of my @posterous peeps. Y'all made this a crazy ride and it was an honor and pleasure working with all of y'all. Thanks to all of the users. Thanks to the academy. Nobody will read this.
HeavyFeather 2011/06/01
twitter

location

privacy

Security

webservice
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2011/03/06/20110305tweet-viewer-virus-spreads-on-twitter/
HeavyFeather 2011/03/13
twitter

security

web
ãƒªãƒ³ã‚¯
Twitterã«ã¯éžå…¬é–‹ã®ã¯ãšã®æ¥ãšã‹ã—ã„ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒæº¢ã‚Œã¦ã„ã‚‹...
Twitterã«ã¯éžå…¬é–‹ã®ã¯ãšã®æ¥ãšã‹ã—ã„ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒæº¢ã‚Œã¦ã„ã‚‹...2011.01.11 21:30 çŸ¥ã‚‰ãªã„ã®ã¯æœ¬äººã ã‘ã¨ã„ã†ã‚±ãƒ¼ã‚¹ã‚‚å¤šã€…ã‚ã‚‹ã¿ãŸã„... ã¾ã ã¾ã æ—¥æœ¬å›½å†…ã§ã‚‚äººæ°—æ€¥ä¸Šæ˜‡ä¸ã®Twitterã ãã†ã§ã™ãŒã€ã†ã£ã‹ã‚Šãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆæ¥µã¾ã‚Šãªã„ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã§ä¸–ç•Œä¸ã«åºƒãå…¬é–‹ã•ã‚Œã¡ã‚ƒã£ã¦ã‚‹ã¨ã„ã†äº‹ä¾‹ãŒå¾Œã‚’çµ¶ãŸãªã„ã‚ˆã†ã§ã™ã‚ˆã€‚æ¯Žæ—¥ã¡ã‚‡ã£ã¨çœºã‚ã¦ã‚‹ã ã‘ã§ã€ãƒ ãƒ•ãƒ•...ãªå€‹äººæƒ…å ±æº€è¼‰ã®ãƒ„ã‚¤ãƒ¼ãƒˆãŒã€ãã‚“ãªã«çã—ããªã„é »åº¦ã§ç™ºè¦‹ã•ã‚Œã¡ã‚ƒã£ãŸã‚Šã‚‚ã™ã‚‹ã‚“ã ã¨ã‹ã€‚ã‚»ãƒ¬ãƒ–ã‚„ä¼æ¥ãƒˆãƒƒãƒ—ã®çµŒå–¶é™£ãŒã€æ°—ã¥ã‹ã¬ã†ã¡ã«çµ¶å¯¾ç§˜å¯†ã®ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã‚’å‘¨å›²ã«è‡ªã‚‰æµå‡ºã—ã¡ã‚ƒã†ãªã‚“ã¦ã‚¢ã‚¯ã‚·ãƒ‡ãƒ³ãƒˆã‚‚æµ·å¤–ã§ã¯ç›¸æ¬¡ã„ã§ã„ã¾ã™ãã€‚ ç‰¹ã«å¤šã„ã®ã¯æºå¸¯é›»è©±ã§ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®é€šçŸ¥ã‚’å—ã‘å–ã£ã¦ã„ã‚‹å ´åˆã®ã‚ˆã†ã§ã—ã¦ã€ã“ã®è‡ªåˆ†ã ã‘ã«é€ã‚‰ã‚Œã¦ããŸSMSã¸è¿”ä¿¡ã™ã‚‹ã¨ã€ã¤ã„ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’è¿”ã—ãŸã¤ã‚‚ã‚ŠãŒå…¬é–‹ãƒ„ã‚¤ãƒ¼ãƒˆã¨ã—ã¦ã‚¿ã‚¤ãƒ
HeavyFeather 2011/01/12
twitter

privacy

security
ãƒªãƒ³ã‚¯
ä¸–ç•Œçš„çŒ›å¨ã‚’å¥®ã£ãŸTwitterãƒžã‚¦ã‚¹ã‚ªãƒ¼ãƒãƒ¼ãƒ»ãƒã‚°ã¯ã©ã†åºƒã¾ã£ãŸï¼Ÿ
ä¸–ç•Œçš„çŒ›å¨ã‚’å¥®ã£ãŸTwitterãƒžã‚¦ã‚¹ã‚ªãƒ¼ãƒãƒ¼ãƒ»ãƒã‚°ã¯ã©ã†åºƒã¾ã£ãŸï¼Ÿ2010.09.22 10:305,281 satomi ã“ã‚Œã¯ä»Šæœä¸–ç•Œä¸ã‚’å¸å·»ã—ãŸTwitterãƒã‚°ã«ã‚„ã‚‰ã‚ŒãŸãƒ–ãƒ©ã‚¦ãƒ³å…ƒè‹±é¦–ç›¸å¤«äººã®Twitterå…¬å¼ã‚µã‚¤ãƒˆã€‚å·¨å¤§ãªè‹±æ–‡å—ï½¢hï½£ãŒå‡ºã¦ã€æ—¥æœ¬ã®ãƒãƒ«ãƒŽã‚µã‚¤ãƒˆã«è‡ªå‹•ãƒªãƒ³ã‚¯ã—ã¦ã¾ã™...ãªã‚“ã¨ã¾ã‚...ã€‚ ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼å…¬å¼Webã§ãƒªãƒ³ã‚¯ã‚’ãƒžã‚¦ã‚¹ã‚ªãƒ¼ãƒãƒ¼ã™ã‚‹ã¨ã€ãƒ•ã‚©ãƒãƒ¯ãƒ¼ã«ã‚¹ãƒ‘ãƒ ã‚„ãƒãƒ«ãƒŽãŒãƒªãƒ„ã‚¤ãƒ¼ãƒˆï¼ˆRTï¼‰ã•ã‚Œã¡ã‚ƒã†ã€ã“ã®ï½¢ãƒžã‚¦ã‚¹ã‚ªãƒ¼ãƒãƒ¼ãƒã‚°ï½£ã€‚ã„ã‚„ã‚ã€ã²ã©ã‹ã£ãŸã²ã©ã‹ã£ãŸã€‚ä¸–ç•Œä¸ã«ã¿ã‚‹ã¿ã‚‹é‡Žç«ã®ã‚ˆã†ã«åºƒã¾ã£ã¦ä¸€æ™‚ã¯ã©ã†ãªã‚‹ã“ã¨ã‹ã¨æ€ã„ã¾ã—ãŸã‚ˆã€‚ ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ã®ã‚¢ãƒ—ãƒªä½¿ã£ã¦ã‚‹äººã¯å¤§ä¸ˆå¤«ã§ã™ï¼ˆãƒã‚°ã£ãŸRTã‚‚ãã£ã¡ã§å‰Šé™¤ã§ãã¾ã™ï¼‰ãŒã€twitter.comé–‹ã„ã¦ã“ã‚“ãªçŠ¶æ…‹ãªã£ã¦ã¦ãƒ“ãƒƒã‚¯ãƒªã“ã„ãŸäººã‚‚å¤šã„ã‚“ã˜ã‚ƒï¼Ÿ ã“ã‚Œã¯Twitterã®ã‚µã‚¤ãƒˆã«ã‚ã‚‹ã‚¯ãƒã‚¹ãƒ»ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSS
HeavyFeather 2010/09/25
twitter

security

XSS
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: (Twitter ã® XSS è„†å¼±æ€§ã«é–¢é€£ã—ã¦) æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã®æ£ã—ã„ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ‰‹æ³•ã«ã¤ã„ã¦
æ˜¨æ—¥ã® Twitter ã® XSS é¨’ãŽã¯ã€ã¾ã çš†ã•ã‚“ã®è¨˜æ†¶ã«æ–°ã—ã„ã“ã¨ã¨æ€ã„ã¾ã™ã€‚ã„ã„æ©Ÿä¼šãªã®ã§ã€ãƒ„ã‚¤ãƒ¼ãƒˆã®ã‚ˆã†ãªæ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ‰‹æ³•ã«ã¤ã„ã¦è§¦ã‚Œã¦ãŠããŸã„ã¨æ€ã„ã¾ã™ã€‚ Twitter ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ã€å˜ãªã‚‹å¹³æ–‡ï¼ˆãƒ—ãƒ¬ã‚¤ãƒ³ãƒ†ã‚ã‚¹ãƒˆï¼‰ã§ã¯ãªãã€ã€Œ@è‹±æ•°å—ã€ã®ã‚ˆã†ãªä»–ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¸ã®è¨€åŠã¨ã€Œhttp://ã€œã€ã®ã‚ˆã†ãª URL ã‚’è‡ªå‹•çš„ã«ãƒã‚¤ãƒ‘ãƒ¼ãƒªãƒ³ã‚¯åŒ–ã™ã‚‹æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã§ã™ã€‚ ã“ã®ã‚ˆã†ãªè¤‡æ•°ã®ãƒ«ãƒ¼ãƒ«ã‚’ã‚‚ã¤æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã‚’ HTML åŒ–ã™ã‚‹éš›ã«ã¯ã€ã©ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ã‚’æ›¸ã‘ã°ã„ã„ã®ã§ã—ã‚‡ã†ï¼Ÿã€€ã¾ãšã€Œ@ã€œã€ã‚’ãƒªãƒ³ã‚¯åŒ–ã—ã¦ã‹ã‚‰ã€URL ã‚’ãƒªãƒ³ã‚¯åŒ–ã™ã‚Œã°ã„ã„ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿã€€ãã‚Œã ã¨ã€@ã€œ ã®ã‚’ãƒªãƒ³ã‚¯åŒ–ã—ãŸ A HREF ã‚¿ã‚°ã®ä¸ã® URL ãŒã•ã‚‰ã«ãƒªãƒ³ã‚¯åŒ–ã•ã‚Œã¦ã„ã¾ã„ã¾ã™ãã€‚ ã§ã¯ã€URL ã‚’ãƒªãƒ³ã‚¯åŒ–ã—ã¦ã‹ã‚‰ @ã€œ ã‚’ãƒªãƒ³ã‚¯åŒ–ã™ã‚Œã°ã„ã„ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿã€€ãã‚Œã ã¨ã€@ ã‚’å«ã‚€ URL ãŒã‚ã£ãŸå ´åˆã«
HeavyFeather 2010/09/25
XSS

twitter

security

programming

encode

HTML
ãƒªãƒ³ã‚¯
Twitterã«XSSæ”»æ’ƒ--ã‚½ãƒ•ã‚©ã‚¹å ±å‘Š
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼šç¤¾Sophosã¯ç±³å›½æ™‚é–“9æœˆ21æ—¥ã€Twitterã®ã‚¦ã‚§ãƒ–ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã‚’æ‚ªç”¨ã—ãŸã€æ½œåœ¨çš„ãªå±é™ºæ€§ã‚’æŒã¤æ–°ãŸãªãƒãƒƒã‚¯ã«é–¢ã™ã‚‹ã‚¨ãƒ³ãƒˆãƒªã‚’åŒç¤¾ãƒ–ãƒã‚°ã«æŠ•ç¨¿ã—ãŸã€‚å½±éŸ¿ã‚’å—ã‘ã‚‹ã®ã¯Twitter.comã®ã¿ã§ã€ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼è£½ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯å½±éŸ¿ã‚’å—ã‘ãªã„ã€‚ ã“ã®ãƒãƒƒã‚¯ã®ä»•çµ„ã¿ã¯æ¬¡ã®ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã€‚ãƒ„ã‚¤ãƒ¼ãƒˆã®URLå†…ã«JavaScriptã‚³ãƒ¼ãƒ‰ï¼ˆonmouseoverï¼‰ã‚’æŒ¿å…¥ã™ã‚‹ã“ã¨ã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒãƒªãƒ³ã‚¯ã®ä¸Šã«ã‚«ãƒ¼ã‚½ãƒ«ã‚’ç§»å‹•ã•ã›ãŸå ´åˆã«ãƒãƒƒãƒ—ã‚¢ãƒƒãƒ—ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’è¡¨ç¤ºã•ã›ã‚‹ã‚ˆã†ã«ã™ã‚‹ã€‚ Sophosã¯ã€ã“ã®æ”»æ’ƒã‚’æœ€åˆã«èµ·ã“ã—ãŸäººã€…ã¯ä»Šã®ã¨ã“ã‚ã€ŒéŠã³ã§ã‚„ã£ã¦ã„ã‚‹ã€ãŒã€ã‚¹ãƒ‘ãƒžãƒ¼ã‚„æ‚ªæ„ã‚ã‚‹ã‚³ãƒ¼ãƒ‰ã®æä¾›è€…ã‚‰ã«æ‚ªç”¨ã•ã‚Œã‚‹å¯èƒ½æ€§ã‚‚ã‚ã‚‹ã¨ã—ã¦ã„ã‚‹ã€‚ã“ã®å•é¡Œã¯ã€å…ˆé€±å…¬é–‹ã•ã‚ŒãŸæ–°ã—ã„Twitterã®ã‚¦ã‚§ãƒ–ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã¨ã¨ã‚‚ã«ã€å¾“æ¥ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã«ã‚‚å½±éŸ¿ãŒã‚ã‚‹ã¨æ€ã‚ã‚Œã‚‹ã€‚ ã€ŒMouseoverã€ãƒ
HeavyFeather 2010/09/22
javascript

twitter

security

xss
ãƒªãƒ³ã‚¯
Twitterã•ã‚“ã€OAuthã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã®ç´°åˆ†åŒ–ã‚’ï¼ : akiyan.com
Twitterã•ã‚“ã€OAuthã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã®ç´°åˆ†åŒ–ã‚’ï¼ 2010-09-07 Twitterã®OAuthèªè¨¼ã‚’åˆ©ç”¨ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’ä½œã£ã¦ã¿ãŸãŒ... ä¸€æ˜¨æ—¥ã®æ—¥æ›œæ—¥(9/5)ã«ã€ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰ã•ã‚“ã®ã‚ªãƒ•ã‚£ã‚¹æä¾›ã«ã‚ˆã‚‹ ã€ŽTFJ CodeCamp #2ã€ ã¨ã„ã†1æ—¥é–‹ç™ºåˆå®¿ã«è¡Œãã¾ã—ã¦ã€Twitterã®OAuthèªè¨¼ã‚’ä½¿ã£ãŸã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆã‚ã¦ä½œã£ãŸã‚“ã§ã™ã€‚ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ã‚’èªã‚“ã§ã„ã‚ã„ã‚ã‚„ã£ã¦ãã‚Œã‚‹ã‚¿ã‚¤ãƒ—ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã€‚ã§ã€å®Ÿéš›OAuthèªè¨¼ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’å…¬é–‹ã™ã‚‹ã“ã¨ã‚’è€ƒãˆã¦ã¿ãŸã‚“ã§ã™ãŒã€ã©ãƒ¼ã«ã‚‚ç„¡è¦–ã§ããªã„ãƒªã‚¹ã‚¯ãŒã‚ã‚Šã¾ã—ã¦ã€‚ ã¾ãšã€Twitterã®OAuthèªè¨¼ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ãƒ¬ãƒ™ãƒ«ã£ã¦ã€ã€Œå…¨éƒ¨ã®ãƒ‡ãƒ¼ã‚¿ãŒèªã‚ã‚‹ã€orã€Œä½•ã§ã‚‚ã§ãã‚‹ã€ã—ã‹ã‚ã‚Šã¾ã›ã‚“ã€‚ä»Šå›žã®ã‚µãƒ¼ãƒ“ã‚¹ã¯ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ã•ãˆèªã‚ã‚Œã°ã„ã„ã®ã§ã™ãŒã€OAuthèªè¨¼ã¨ã—ã¦ã¯å…¨éƒ¨ã®ãƒ‡ãƒ¼ã‚¿ã‚’èªã‚ã‚‹è¦æ±‚ã—ã‹ã§ããªãã¦ã€ãã®èªè¨¼ã‚’ã—ã¦ã‚‚ã‚‰ã£ãŸãªã‚‰ã°
HeavyFeather 2010/09/18
API

twitter

security

Twiiter

OAuth
ãƒªãƒ³ã‚¯
ã€ŒOAuthèªè¨¼ãŒé€šã‚‹ã¨ã€ã‚¢ãƒ—ãƒªä½œè€…ã‹ã‚‰ã¯DMã‚‚ä½•ã‚‚ã‹ã‚‚è¦‹æ”¾é¡Œã€ã¨ã„ã†æ›¸ãæ–¹ã¯èª¤è§£ã‚’æ‹›ã - aruto's diary
â€ãªã‚‹4â€ã®é¨’ãŽã®ä»¶ã§ã€ã€ŒOAuthã®å±é™ºæ€§ãŒã‚ã‹ã£ã¦ã„ã‚‹ã®ã‹ï¼Ÿtwitteré–¢é€£ã‚¢ãƒ—ãƒªã®ä½œè€…ã¯ä½•ã§ã‚‚ã§ãã‚‹ã‚“ã ãžã€‚ãŸã¨ãˆã°ã€DMã¯è¦‹æ”¾é¡Œé€ã‚Šæ”¾é¡Œã ã€ã¨ã„ã†æ„è¦‹ã‚’è‰¯ãè¦‹ã‹ã‘ã‚‹ã®ã§ã™ãŒã€èª¤è§£ã‚’æ‹›ãè¡¨ç¾ãªã®ã§ã€twitterã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆä½œè€…ã®ç«‹å ´ã‹ã‚‰æ•æ‰ã—ã¦ãŠãã¾ã™ã€‚ ï¼ˆTwitterã«ãŠã‘ã‚‹OAuthèªè¨¼ã«ã¤ã„ã¦ã®è©±ã§ã™ã€‚æœ¬æ–‡ã®è¨˜è¿°ã‹ã‚‰åˆ¤åˆ¥ã§ãã‚‹ã¨ã¯æ€ã„ã¾ã™ãŒã€å¿µã®ãŸã‚ã€‚ä»–ã‚µãƒ¼ãƒ“ã‚¹ã®å ´åˆã€äº‹æƒ…ãŒç•°ãªã£ã¦ãã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ï¼‰ å°‘ãªãã¨ã‚‚ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ã§å‹•ä½œã™ã‚‹ã‚¢ãƒ—ãƒªã¯ã€ã“ã‚Œã‚‰ã®ãƒªã‚¹ã‚¯ã¯ï¼ˆæ¯”è¼ƒçš„ï¼‰ä½Žã„ ã‚‚ã¡ã‚ã‚“ã‚¹ãƒ‘ã‚¤ã‚¦ã‚§ã‚¢ç‰ã¯ã€ã“ã®é™ã‚Šã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ OAuthèªè¨¼ã®æµã‚Œã‚’å›³ã«ã—ã¦ã¿ã¾ã—ãŸï¼ˆã‚ãã¾ã§ã€ŒãŠãŠã¾ã‹ãªã€å›³ã§ã™ã€‚è‰²ã€…ã¨ã€ç«¯æŠ˜ã£ã¦ã„ã¾ã™ï¼‰ã€‚ ã†ã ã†ã ã¨æ›¸ã‹ã‚Œã¦ã„ã¾ã™ãŒã€å¤§äº‹ãªã®ã¯ã€Œã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã€ã§ã™ã€‚ã“ã‚Œã•ãˆè¦šãˆã¦ã‚‚ã‚‰ãˆã‚Œã°ã€ä»–ã¯å…¨ã¦å¿˜ã‚Œã¦ã—ã¾ã£ã¦ã‹ã¾ã„ã¾ã›ã‚“ã€‚ twitteré–¢é€£ã‚¢ãƒ—
HeavyFeather 2010/08/16
twitter

authentication

security

development
ãƒªãƒ³ã‚¯
ãƒ›ãƒ¯ã‚¤ãƒˆãƒã‚¦ã‚¹ã¨ã‚¯ãƒ¬ãƒ ãƒªãƒ³ã®ç›´é€šé›»è©±ã¯ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ï¼Ÿï¼šObama Jokes Twitter May Replace Kremlin Red Phones
HeavyFeather 2010/06/28
twitter

security

america

social

international
ãƒªãƒ³ã‚¯
ä½ç½®ã‚²ãƒ¼ã®ä½ç½®è©ç§°å¯¾ç–ã§æ¤œè¨Žã™ã¹ãäº‹
OHTSUKA Ko-hei @kokogiko @niryuu å¾Œè€…ã®å‰æã§ä¸€èˆ¬çš„ãªè©±ã‚’ã™ã‚‹ã¨ã€çµå±€ã‚±ãƒ¼ã‚¿ã‚¤ã§ã®ä½ç½®å–å¾—ã¯GET/POSTã§ã®çµŒç·¯åº¦é€šçŸ¥ã«ã™ãŽãªã„ã®ã§ã€ãƒ¦ãƒ¼ã‚¶ãŒå˜˜æƒ…å ±ã‚’æµã—è¾¼ã‚€ã¨è©ç§°ã•ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ãªã®ã§ã€ç¢ºå®Ÿã«è‡ªåˆ†é”ã®ãƒªãƒ³ã‚¯ã‹ã‚‰æ¥ãŸã¨æ¤œè¨¼ã™ã‚‹æ‰‹æ®µã‹ã€GET/POSTã®é€ä»˜å…ˆã‚’çŸ¥ã‚‰ã‚Œãªã„ãŸã‚ã®éš è”½æ‰‹æ®µãŒå¿…è¦ã€‚ OHTSUKA Ko-hei @kokogiko å‰è€…ã®å ´åˆã€Cookieã«1å›žé™ã‚Šã®ä½¿ã„æ¨ã¦ã‚»ãƒƒã‚·ãƒ§ãƒ³åŸ‹ã‚è¾¼ã‚“ã ã‚Šã€Refererã‚’ãƒã‚§ãƒƒã‚¯ã—ãŸã‚Šã§é˜²ã’ã¾ã™ã€‚æœ€è¿‘ã¯Cookieã‚„Refererã«å¯¾å¿œã—ãŸã‚±ãƒ¼ã‚¿ã‚¤ãŒä¸»æµã«ãªã£ã¦ããŸã®ã§ã€å¤ã„ï¼ˆã¨è¨€ã£ã¦ã‚‚æ„å¤–ã¨æœ€è¿‘ã¾ã§ã§ã™ãŒï¼‰DoCoMoã‚±ãƒ¼ã‚¿ã‚¤ã‚’ç„¡è¦–ã™ã‚‹ãªã‚‰ã“ã‚ŒãŒä¸€ç•ªç°¡å˜ã‹ã¨ã€‚
HeavyFeather 2010/06/13
mobile

geo

security

GIS

OpenSocial

twitter
ãƒªãƒ³ã‚¯
ãƒ–ãƒã‚° | S2ãƒ•ã‚¡ã‚¯ãƒˆãƒªãƒ¼æ ªå¼ä¼šç¤¾
å°‚é–€çš„ãªè©±ã‹ã‚‰è¶£å‘³ã®è©±ã¾ã§ã€ æ§˜ã€…ãªãƒ†ãƒ¼ãƒžã§ãŠå±Šã‘ S2ãƒ•ã‚¡ã‚¯ãƒˆãƒªãƒ¼ãŒæ—¥ã€…ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚„ ã‚¢ãƒ—ãƒªã®åˆ¶ä½œã‚’é€šã˜ã¦ã€ å½¹ã«ç«‹ã¡ãã†ãªæŠ€è¡“æƒ…å ±ã‚„è¶£å‘³ã®è©±ã¾ã§ å¹…åºƒã„ãƒ†ãƒ¼ãƒžã§ç™ºä¿¡ã—ã¦ã„ã¾ã™ã€‚
HeavyFeather 2010/05/31
OAuth

Twitter

security

UNIQLO

web
ãƒªãƒ³ã‚¯
OAuthãƒ—ãƒãƒˆã‚³ãƒ«ã®ä¸èº«ã‚’ã–ã£ãã‚Šè§£èª¬ã—ã¦ã¿ã‚‹ã‚ˆ - ( ê’ªâŒ“ê’ª) ã‚†ã‚‹ã‚ˆã‚æ—¥è¨˜
ã€ŒãŠãƒ¼ãŠãƒ¼ã£ã™ã£!ã€ ã¦ãªã“ã£ã¦ã€Twitterã®APIã®BASICèªè¨¼ã‚‚6æœˆæœ«ã«çµ‚äº†ã—ã¦OAuth/xAuthã«ç§»è¡Œã™ã‚‹ã¨ã„ã†ã“ã®æ™‚æœŸã«ã€ã‚ã‚‰ãŸã‚ã¦OAuthã«ã¤ã„ã¦å‹‰å¼·ã—ã¦ã¿ãŸã‚“ã§ã™ã®ã‚ˆ? OAuthèªè¨¼ã‚’åˆ©ç”¨ã™ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã¯å„è¨€èªžã§å‡ºãã‚ã£ã¦ãã¦ã‚‹ã®ã§ãã‚Œã‚’ä½¿ãˆã°ã„ã‚“ã˜ã‚ƒã¾ã„ã‹? ã¨ã„ã†ã¨è©±ãŒçµ‚ã‚ã‚‹ã®ã§ã€ã˜ã‚ƒã‚ãã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®ä¸èº«ã¯ãªã«ã‚„ã£ã¦ã‚“ã®ã‚ˆã£ã¦ã“ã¨ã‚’ã€OAuthã™ã‚‹Scalaã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªä½œã‚ŠãªãŒã‚‰èª¿ã¹ãŸã“ã¨ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ é–“é•ã£ã¦ã„ã‚‹ã¨ã“ã‚ã‚‚ã‚ã‚‹ã¨æ€ã†ã®ã§ãƒ„ãƒƒã‚³ãƒŸæ“è¿Žã§ã™ï¼žï¼œ OAuthã£ã¦ãã‚‚ãã‚‚ãªã‚“ãªã®? ã‚‚ã®ã™ã”ãã–ã£ãã‚Šã¨ã„ã†ã¨ã€ŒAPIåˆ©ç”¨å´ãŒã€ãƒ¦ãƒ¼ã‚¶èªè¨¼ã‚’APIæä¾›ã‚µãƒ¼ãƒ“ã‚¹å´ã«ã‚„ã£ã¦ã‚‚ã‚‰ã†ãŸã‚ã®ä»•æ§˜ã€ã£ã¦æ„Ÿã˜ã§ã—ã‚‡ã†ã‹? BASICèªè¨¼ã®å ´åˆã€APIåˆ©ç”¨å´ãŒèªè¨¼ã«å¿…è¦ãªã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’é ã‹ã‚‹å¿…è¦ãŒã‚ã‚‹ã‚ã‘ã§ã™ã€‚æ‚ªæ„ã®ã‚ã‚‹APIåˆ©ç”¨å´ãŒã€Œãªã‚“ã¨ã‹ãƒ¡ãƒ¼ã‚«ãƒ¼
HeavyFeather 2010/05/07
OAuth

security

authentication

twitter

development

API

web
ãƒªãƒ³ã‚¯
Twitterã®BASICèªè¨¼å»ƒæ¢ã€ä¼æ¥ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒçŸ¥ã£ã¦ãŠãã¹ãã“ã¨
Twitterãƒ¦ãƒ¼ã‚¶ãƒ¼ã€ã‚ã‚‹ã„ã¯ã“ã®ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ‡ãƒ™ãƒãƒƒãƒ‘ãƒ¼ã‚„ä¼æ¥ã¯ã€2010å¹´6æœˆ30æ—¥ã«å‘ã‘ã¦é©åˆ‡ãªå¯¾å¿œã‚’å›³ã‚‹å¿…è¦ãŒã‚ã‚‹ã€‚Twitter APIã®BASICèªè¨¼ãŒå»ƒæ¢ã•ã‚Œã‚‹ãŸã‚ã ã€‚ æ„å¤–ã¨çŸ¥ã‚‰ã‚Œã¦ã„ãªã„ã“ã¨ã¨ã—ã¦ã€APIã®åˆ¶é™ã®ã»ã‹ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã”ã¨ã®åˆ¶é™ãŒã‚ã‚‹ã¨ä¸¹ç¾½æ°ã€‚1æ—¥å½“ãŸã‚Šã®ãƒ„ã‚¤ãƒ¼ãƒˆã‚„ãƒ•ã‚©ãƒãƒ¼ã€ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãªã©ã«ä¸Šé™ãŒã‚ã‚‹ãŒã€ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®250ä»¶ï¼æ—¥åˆ¶é™ã«å¼•ã£ã‹ã‹ã£ã¦ã¯ã˜ã‚ã¦ãã‚Œã«æ°—ä»˜ãä¼æ¥ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚‚å°‘ãªããªã„ã¨ã„ã† ã€ŒTwitter Development Talkï¼ˆTwitter-Devï¼‰ã€ã‚„ã€ŒTwitter API Announcementsã€ãªã©ã§ã¯ã‹ãªã‚Šå‰ã‹ã‚‰ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã•ã‚Œã¦ã„ãŸãŒã€2010å¹´6æœˆ30æ—¥ã‚’æœ€å¾Œã«ã€Twitter APIã®BASICèªè¨¼ã¯ã‚¨ãƒ©ãƒ¼ãŒè¿”ã£ã¦ãã‚‹ã‚ˆã†ã«ãªã‚‹ã€‚ä¸€è¦‹åœ°å‘³ã«æ˜ ã‚‹ã“ã®å‡ºæ¥äº‹ã ãŒã€ã‚«ã‚¦ãƒ³ãƒˆãƒ€ã‚¦ãƒ³ã‚µã‚¤ãƒˆã‚‚ç”¨
HeavyFeather 2010/05/03
twitter

security

API

authentication

web
ãƒªãƒ³ã‚¯
Twitterã§æœ¬äººç¢ºèªã™ã‚‹æ–¹æ³• - ã•ã¾ã–ã¾ãªã‚ã‚Šã£ã¨
ã»ã†ã€Twitterã®ãƒ—ãƒãƒ•ã‚£ãƒ¼ãƒ«ã®Webæ¬„ã«å…¥ã‚ŒãŸURLã«ã¯ã€rel="me nofollow"å±žæ€§ãŒä»˜ãã®ã‹ã€‚å…¬å¼ã‚µã‚¤ãƒˆã‹ã‚‰Twitter IDã¸ã®ãƒªãƒ³ã‚¯ã§rel="me"ã‚’å…¥ã‚Œã¦ãŠã‘ã°ã€ç›¸äº’rel="me"ã§æœ¬äººç¢ºèªãŒã§ãã‚‹ã€‚
HeavyFeather 2010/03/30
twitter

Tips

authentication

security
ãƒªãƒ³ã‚¯
Twitterã‚¯ãƒ©ãƒƒã‚ãƒ³ã‚°ã«ã‚ˆã‚‹ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä¹—ã£å–ã‚Šã‚’å›³ã«ã—ãŸ
ä»Šæ—¥ã®15:00é ƒã«twitter.comãŒã‚¯ãƒ©ãƒƒã‚ãƒ³ã‚°ã•ã‚Œã¦ã€å…¨ãç•°ãªã‚‹ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã¦ã„ãŸã‚ˆã†ã§ã™ã€‚ Twitter Blog: DNS Disruption Twitter ãŒã‚¯ãƒ©ãƒƒã‚ãƒ³ã‚°ã‚’å—ã‘ã¦ãƒ€ã‚¦ãƒ³ã—ã¦ã„ã‚‹æ¨¡æ§˜ â€“ Yaks TwitterãŒã‚¯ãƒ©ãƒƒã‚¯ã•ã‚Œã¦ã„ã‚‹ä»¶ â€“ è¥¿å°¾æ³°å’Œã®ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼ ç§ãŒè¦‹ãŸæ™‚ã¯å˜ã«æŽ¥ç¶šãŒã§ããªã„çŠ¶æ…‹ã ã£ãŸã®ã§ã™ãŒã€DNSã‚’ä¸æ£ã«æ›¸ãæ›ãˆã‚‰ã‚Œã¦twitter.comãŒåˆ¥ã‚µãƒ¼ãƒã«å‘ãã‚ˆã†ã«ãªã£ã¦ã„ã¾ã—ãŸã€‚ ã™ã§ã«å„ã‚µã‚¤ãƒˆã§æŠ€è¡“çš„ãªè§£èª¬ã¯ã•ã‚Œã¦ã„ã‚‹ã®ã§ã€ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ã§æ‡¸å¿µã•ã‚Œã¦ã„ã‚‹ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä¹—ã£å–ã‚Šã«ã¤ã„ã¦å›³ã‚’æ›¸ã„ã¦ã¿ã¾ã—ãŸã€‚ é€šå¸¸æ™‚ OAuthã‚’ä½¿ã£ã¦ã„ãªã„å¤šãã®Twitterã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ã€Basicèªè¨¼ã‚’ä½¿ã£ã¦ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®èªè¨¼ã‚’è¡Œã£ã¦ã„ã¾ã™ã€‚ã¤ã¾ã‚ŠTLã‚’å–å¾—ã™ã‚‹ãªã‚Šã€postã™ã‚‹ãªã‚Šã€twitter.comã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆæ¯Žã«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆIDã¨ãƒ‘
HeavyFeather 2009/12/23
twitter

security

dns

web

DNS
ãƒªãƒ³ã‚¯
Twitterã‚¯ãƒ©ãƒƒã‚¯äº‹ä»¶ã®åŽŸå› ï¼Ÿ:Geekãªãºãƒ¼ã˜
æ˜¨æ—¥ã®Twitterã‚¯ãƒ©ãƒƒã‚¯äº‹ä»¶ã¯DNSã«ä¸æ£ãªå€¤ã‚’è¨å®šã•ã‚ŒãŸã“ã¨ãŒåŽŸå› ã§ã—ãŸã€‚ Twitterå…¬å¼ãƒ–ãƒã‚°ã§ã‚‚ä»¥ä¸‹ã®ã‚ˆã†ã«DNSãŒåŽŸå› ã§ã‚ã‚Šã€æœ¬ä½“ãŒä¹—ã£å–ã‚‰ã‚ŒãŸã‚ã‘ã§ã¯ãªã„ã¨è¨˜è¿°ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã€ŒTwitterãƒ–ãƒã‚°: æ˜¨æ—¥ã®DNSéšœå®³ã«ã¤ã„ã¦ã®è¿½åŠ æƒ…å ±ã€ ã“ã®æ”»æ’ƒã®é–“ã€ã‚ã‚Œã‚ã‚Œã¯DNSãƒ—ãƒãƒã‚¤ãƒ€ã®Dynectã¨ç›´æŽ¥é€£çµ¡ã‚’å–ã‚Šç¶šã‘ã¾ã—ãŸã€‚ãã—ã¦DNSã‚’ã§ãã‚‹ã ã‘ç´ æ—©ããƒªã‚»ãƒƒãƒˆã™ã‚‹ã‚ˆã†ç·Šå¯†ã«ä½œæ¥ã—ã¾ã—ãŸã€‚ ã“ã‚Œã‚’è¦‹ãŸã¨ãã«ã€Œã‚ã‚ã€ã‚„ã£ã±ã‚ŠDynectãŒåŽŸå› ã ã£ãŸã‹ã€ã¨æ€ã„ã¾ã—ãŸã€‚ æã‚‰ãTwitterã¯è‡ªåˆ†ã§ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚„ã‚µãƒ¼ãƒã‚’ã»ã¨ã‚“ã©é‹å–¶ã—ã¦ãŠã‚‰ãšã€DNSéƒ¨åˆ†ã¯CDNäº‹æ¥è€…ã®DynIncã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’è³¼å…¥ã—ã¦ã„ã‚‹ã¨æŽ¨æ¸¬ã•ã‚Œã¾ã™(å‚è€ƒï¼šTwitterã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ§‹æˆã‚’èª¿ã¹ã¦ã¿ãŸ)ã€‚ ã•ã‚‰ã«ã€ã€ŒCDNäº‹æ¥è€…ã®Dynectã«ã¨ã£ã¦Twitterã§ã®äº‹ä»¶ã¯çµŒå–¶ã«å‡„ãå¤§ããªæ‰“æ’ƒã‚’ä¸Žãˆã‚‹ã®ã§ã¯ï¼Ÿã€ã¨
HeavyFeather 2009/12/23
twitter

internet

infrastructure

security

DNS

web
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2009/12/19/20091218anatomy-twitter-attack-2-dns-iran/
HeavyFeather 2009/12/22
twitter

security

web

network

DNS
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸