[B! security][æŠ€è¡“] Horiuchi_Hã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Horiuchi_H id:Horiuchi_H

securityã¨æŠ€è¡“ã«é–¢ã™ã‚‹Horiuchi_Hã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

HTTPS ã§ã‚‚ Full URL ãŒæ¼ã‚Œã‚‹ï¼ŸOAuth ã® code ã‚‚æ¼ã‚Œã‚‹ã‚“ã˜ã‚ƒãï¼Ÿï¼Ÿ - OAuth.jp
ãªã‚“ã§ã™ã‹ã“ã‚Œã¯ï¼ New attack bypasses HTTPS protection on Macs, Windows, and Linux DHCP ã«ã¤ãªãã¨ PAC ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã‚Œã¦ HTTPS ã§ã‚ã‚ã†ã¨ã‚¢ã‚¯ã‚»ã‚¹å…ˆã® Full URL ã¯æ¼ã‚Œã‚‹ã§ã™ã£ã¦ï¼Ÿ Web Proxy Autodiscovery ã§ã™ã£ã¦ï¼Ÿ ãƒãƒ§ãƒƒãƒˆãƒ‹ãƒ›ãƒ³ã‚´ãƒ‡ã‚ªãƒã‚¬ã‚¤ã‚·ãƒžã‚¹ ã£ã¦ã“ã¨ã§ã€ã¾ãã“ã‚ŒãŒå®Ÿéš›ã©ã‚Œãã‚‰ã„ç°¡å˜ã«å®Ÿç¾ã§ãã‚‹æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ãªã®ã‹ã¯ä»–ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¥ç•Œã®æ–¹ã€…ã«å¾Œã§èžãã¨ã—ã¦ã€ã“ã®è¨˜äº‹ã§ã‚‚è§¦ã‚Œã‚‰ã‚Œã¦ã‚‹ OpenID Connect ã¨ã‹ OAuth2 ã¸ã®å½±éŸ¿ã«ã¤ã„ã¦ã€ã¡ã‚‡ã£ã¨ã¾ã¨ã‚ã¦ãŠãã¾ã—ã‚‡ã†ã‹ã€‚ Authorization Request & Response ãŒæ¼ã‚Œã‚‹ response_mode=form_post ãªã‚“ã¦ã„ã†ã®ã‚‚ä¸€éƒ¨ã‚ã‚Šã¾ã™ãŒã€åŸºæœ¬ OAuth2 /
Horiuchi_H 2016/07/27
ã†ãƒ¼ã‚“ã€OAuthã‚µãƒ¼ãƒã‚’ä½œã‚‹éš›ã«ã¯è€ƒæ…®ã—ãªã„ã¨ãªã‚‰ãªã„ã“ã¨ãŒã¾ãŸå¢—ãˆãŸã®ã‹ã€‚ã€‚ã€‚

security

oauth

æŠ€è¡“
ãƒªãƒ³ã‚¯
ãƒžã‚¤ãƒŠãƒ³ãƒãƒ¼ã‚«ãƒ¼ãƒ‰ã§SSHã™ã‚‹ - AAA Blog
ã¿ãªã•ã‚“ãƒžã‚¤ãƒŠãƒ³ãƒãƒ¼ã‚«ãƒ¼ãƒ‰ã¯ã‚‚ã†æ‰‹å…ƒã«å±Šãã¾ã—ãŸã‹? ç§ã®ä½ã‚€å¤§ç”°åŒºã¯ã¨ã¦ã‚‚æ··é›‘ã—ã¦ã„ã¦ç”³è«‹ã‹ã‚‰5ãƒ¶æœˆã‹ã‹ã£ã¦ä»Šæœˆã‚„ã£ã¨äº¤ä»˜ã—ã¦ã‚‚ã‚‰ã†ã“ã¨ãŒã§ãã¾ã—ãŸã€‚ ã“ã®ã‚«ãƒ¼ãƒ‰ã«å«ã¾ã‚Œã‚‹å…¬çš„å€‹äººèªè¨¼æ©Ÿèƒ½ã¯ä»¥å‰ã‹ã‚‰ä½åŸºã‚«ãƒ¼ãƒ‰ã«å…¥ã£ã¦ã„ãŸã‚‚ã®ã§ã™ãŒã€ä»Šå¹´ã‹ã‚‰æ°‘é–“åˆ©ç”¨ã‚‚ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ ã—ã‹ã—ã€ã“ã®å…¬çš„å€‹äººèªè¨¼ã§ã™ãŒè©³ç´°ãªä»•æ§˜ãŒå…¬é–‹ã•ã‚Œã¦ã„ãªã„ãŸã‚ã€å•†ç”¨åˆ©ç”¨ã—ã‚ˆã†ã¨ã„ã†å‹•ãã¯ã¾ã èžãã¾ã›ã‚“ã—ã€æ—¢ã«å‹•ã„ã¦ã„ã‚‹è¡Œæ”¿ã‚µãƒ¼ãƒ“ã‚¹ã®e-govã‚„e-taxã¯IEé™å®šã§ã€ã„ã¾ã ã«Java AppletãŒä½¿ã‚ã‚Œã¦ã„ã‚‹ãªã©å¤§å¤‰æ®‹å¿µãªçŠ¶æ³ã§ã™ã€‚ ã‚«ãƒ¼ãƒ‰ã«å…¥ã£ã¦ã„ã‚‹é›»åè¨¼æ˜Žæ›¸ã¨2048bitã®RSAç§˜å¯†éµã¯æ§˜ã€…ãªç”¨é€”ã«æ´»ç”¨ã§ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã®ã«ã€ã›ã£ã‹ãç¨Žé‡‘ã‚’è²»ã‚„ã—ã¦ä½œã£ãŸã‚·ã‚¹ãƒ†ãƒ ãŒä½¿ã‚ã‚Œãªã„ã®ã¯ã‚‚ã£ãŸã„ãªã„ã§ã™ãã€‚ æ°‘é–“åˆ©ç”¨ã®ç¬¬ä¸€æ©ã¨ã—ã¦ã€ã‚«ãƒ¼ãƒ‰ã«å…¥ã£ã¦ã„ã‚‹RSAéµã‚’åˆ©ç”¨ã—ã¦è‡ªå®…ã‚µãƒ¼ãƒãƒ¼ã«SSHãƒã‚°ã‚¤ãƒ³ã—ã¦ã¿ã¾ã—ã‚‡ã†!
Horiuchi_H 2016/06/23
security

ç¤¾ä¼š

æŠ€è¡“
ãƒªãƒ³ã‚¯
Storing Passwords in a Highly Parallelized World
Why â€œUse bcrypt.â€ is not the best recommendation (anymore). Preamble: if youâ€™re hashing your passwords with bcrypt / scrypt / PBKDF2 today, thereâ€™s nothing to worry about in the immediate future. This article is for you if youâ€™re choosing a password hash today and want a future-proof solution. Not a call for action. The PastFive years ago, the world was a simpler place. You could shame other peopl
Horiuchi_H 2016/01/19
bcrypt/scrypt/PBKDF2 ãŒæŽ¨å¥¨ã•ã‚ŒãŸã®ã¯éŽåŽ»ã®è©±ãªã®ã‹ã€‚ã“ã‚Œã‹ã‚‰ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¿ç®¡ã«ã¯ Argon2ã‚’æŽ¡ç”¨ã™ã‚‹ã¹ãã¨ã€‚ã€‚ã€‚

web

security

æŠ€è¡“
ãƒªãƒ³ã‚¯
SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘
1. SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ãƒ£ãƒ³ãƒ— 2015 2015å¹´8æœˆ12æ—¥ IIJ å¤§æ´¥ ç¹æ¨¹ æ›´æ–°ç‰ˆè³‡æ–™ã®ç½®å ´ http://goo.gl/cX1M17 Github Repo: https://goo.gl/vRLzrj 2. è‡ªå·±ç´¹ä»‹ â€¢ å¤§æ´¥ ç¹æ¨¹ â€¢ æ ªå¼ä¼šç¤¾ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ– â€¢ ãƒ—ãƒãƒ€ã‚¯ãƒˆæœ¬éƒ¨ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºéƒ¨ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™º2èª² â€¢ NodeJS Technical Committee ãƒ¡ãƒ³ãƒãƒ¼ â€¢ (ä¸»ã«TLS/CRYPTO/OpenSSLãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã‚’æ‹…å½“ï¼‰ â€¢ IETF httpbis WG ã§ HTTP/2ç›¸äº’æŽ¥ç¶šè©¦é¨“ç‰ä»•æ§˜ç–å®šã«å‚ç”»ã€‚ â€¢ ãƒ–ãƒã‚°ï¼š http://d.hatena.ne.jp/jovi0608/ 3. ã¯ã˜ã‚ã« â€¢ TLS(Transport Layer Security)ã®ä»•çµ„ã¿ã«ã¤ã„ã¦å¦ã‚“ã§ã„ãŸã ã ã¾ã™ã€‚ â€¢
Horiuchi_H 2015/08/14
ã¡ã‚ƒã‚“ã¨ç›®ã‚’é€šã—ã¦ãŠãã®ãŒè‰¯ã•ãã†ã€‚

security

http

æŠ€è¡“
ãƒªãƒ³ã‚¯
[ãƒ‡ãƒ–ã‚µãƒŸé–¢è¥¿2013] JavaScript Security beyond HTML5
[ãƒ‡ãƒ–ã‚µãƒŸé–¢è¥¿2013] JavaScript Security beyond HTML5 Presentation Transcript JavaScript Security beyond HTML5 ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆæ ªå¼ä¼šç¤¾ é•·è°·å·é™½ä»‹ Developers Summit 2013 Kansai Action! #kansumiB5 NetAgent http://www.netagent.co.jp/Developers Summit 2013 Kansai Action! #kansumiB5 è‡ªå·±ç´¹ä»‹ é•·è°·å·é™½ä»‹ - ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ ï¶ ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆæ ªå¼ä¼šç¤¾ ï¶ æ ªå¼ä¼šç¤¾ã‚»ã‚ãƒ¥ã‚¢ã‚¹ã‚«ã‚¤ãƒ»ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ æŠ€è¡“é¡§å• ï¶ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚ãƒ£ãƒ³ãƒ— Webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¯ãƒ©ã‚¹è¬›å¸« ï¶ Microsoft MVP for Consumer Security Oct 2005 - ï¶
Horiuchi_H 2013/09/24
ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ã§ã§ãã‚‹ã“ã¨ãŒå¢—ãˆã‚‹ã¨ã€Securityçš„ã«ã‚‚æ°—ã‚’ä»˜ã‘ã‚‹ã“ã¨ãŒå¢—ãˆã‚‹ã¨ã€‚

javascript

security

æŠ€è¡“
ãƒªãƒ³ã‚¯
1