[B! hasegawayosuke] Itisangoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Itisango id:Itisango

hasegawayosukeã«é–¢ã™ã‚‹Itisangoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (30)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

é»’æ´å²ã«å¦ã¹ï¼ãã®ã¨ãã€æ—¥æœ¬ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¥ç•Œã¯åœæ¢ã—ãŸ
11æœˆ15æ—¥ã€ã€Œno drink, no hack!ã€ã‚’åˆã„è¨€è‘‰ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ç†±ãèªžã‚Šåˆã†ã‚¤ãƒ™ãƒ³ãƒˆã€ŒAVTOKYO 2014ã€ãŒéƒ½å†…æŸæ‰€ã§é–‹å‚¬ã•ã‚ŒãŸã€‚ã€ŒBlack Hat Japan 2007ã€ã®è£ç•ªçµ„ï¼ˆï¼Ÿï¼‰ã¨ã—ã¦å§‹ã¾ã£ãŸåŒã‚¤ãƒ™ãƒ³ãƒˆã¯ã€ä»Šå›žã§8å›žç›®ã€‚ãƒ„ã‚¤ãƒ¼ãƒˆ/æ’®å½±ç¦æ¢ã®æ¿ƒåŽšãªãƒˆãƒ¼ã‚¯ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‹ã‚‰ã€ã¯ã‚“ã ã”ã¦ä½“é¨“ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚¯ãƒ©ãƒƒã‚¯ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã¾ã§ã€ç››ã‚Šã ãã•ã‚“ã®ç´„5æ™‚é–“ã¨ãªã£ãŸã€‚ãã®ä¸ã‹ã‚‰ã€ãƒ‘ãƒãƒ«ãƒ‡ã‚£ã‚¹ã‚«ãƒƒã‚·ãƒ§ãƒ³ã®æ¨¡æ§˜ã‚’ä¸å¿ƒã«ãƒ¬ãƒãƒ¼ãƒˆã™ã‚‹ã€‚ ã™ã¹ã¦ãŒæ¢ã¾ã£ãŸã€ŒAD200xäº‹ä»¶ã€ ãƒ‘ãƒãƒ«ãƒ‡ã‚£ã‚¹ã‚«ãƒƒã‚·ãƒ§ãƒ³ã®ãŠé¡Œã¯ã€ã€Œæ—¥æœ¬ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£äº‹ä»¶å²ã€ã ã€‚å¦ç”Ÿå‘ã‘ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–åˆå®¿ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚ãƒ£ãƒ³ãƒ—ã€ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ³ãƒ†ã‚¹ãƒˆã€ŒSECCONã€ã€AVTOKYOãªã©ã‚’é–‹å‚¬ã—ã€æ—¥æœ¬ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ç™ºå±•ã‚’æ”¯ãˆã¦ããŸåœ’ç”°é“å¤«æ°ã€ä¸Šé‡Žå®£æ°ã€tessyæ°ãŒç™»å£‡ã—ãŸã€‚ ãã‚‚ãã‚‚ã“ã®ãŠé¡Œã‚’é¸ã‚“ã ç†ç”±ã¯ã€è¿‘é ƒä¸€
Itisango 2014/12/11
avtokyo

security

event

japan

2014å¹´

AD200X

Office

talk

hasegawayosuke

BlackHat
ãƒªãƒ³ã‚¯
JPCERT/CCã®ã€ŒHTML5(ä¸ç•¥)èª¿æŸ»å ±å‘Šæ›¸ã€ãŒå®‰å…¨ã«ãªã£ã¦ã„ãŸ - è‘‰ã£ã±æ—¥è¨˜
JPCERT/CCã¯ã€ŒHTML5ã‚’åˆ©ç”¨ã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«é–¢ã™ã‚‹èª¿æŸ»å ±å‘Šæ›¸ã€(PDF))ã‚’ä»¥ä¸‹ã®URLã‹ã‚‰å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ http://www.jpcert.or.jp/research/html5.html ã€ŒHTML5ã‚’åˆ©ç”¨ã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«é–¢ã™ã‚‹èª¿æŸ»å ±å‘Šæ›¸ã€ã¯ãŠå‹§ã‚ã§ã‚ã‚‹ã€ã¨ã™ã‚‹ã‚¨ãƒ³ãƒˆãƒªã‚’æ›¸ã“ã†ã‹ã¨æ€ã„ã€ä¹…ã—ã¶ã‚Šã«JPCERT/CCã®ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ã‚’ç¢ºèªã™ã‚‹ã¨æ”¹å®šã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ å¤ã„JPCERT/CCã®ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ã¯å³è‚©ã®ãŠçŸ¥ã‚‰ã›æ¬„ã§ã€ŒHTML5(ä¸ç•¥)èª¿æŸ»å ±å‘Šæ›¸ã€ã‚’ãƒªãƒ³ã‚¯ã—ã¦ã„ã¾ã—ãŸã€‚å›½å†…æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å‘ä¸Šã‚’ç›®æŒ‡ã—ã¦ã„ã‚‹ã®ãŒJPCERT/CCã§ã™ãŒã€å¤šæ•°ã®ãŠçŸ¥ã‚‰ã›ã«æµã‚Œã¦ã€ŒHTML5(ä»¥ä¸‹ç•¥)ã€ãŒæ¶ˆãˆã¦ã—ã¾ã„ã¾ã—ãŸã€‚ã¯ã£ãã‚Šè¨€ã†ã¨å½“ç„¶ã§ã—ãŸã€‚ ã—ã‹ã—ã€ä»Šã‚‚ã€ŒHTML5ã‚’åˆ©ç”¨ã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«é–¢ã™
Itisango 2013/12/20
JPCERT

CC

HTML5

Web

application

2013å¹´

hasegawayosuke

api

JavaScript

report
ãƒªãƒ³ã‚¯
Chromeã§(â˜ Õžà¨Š Õž)â˜ã‚¦ã‚¤ãƒ¼ãƒ³ - è‘‰ã£ã±æ—¥è¨˜
ã“ã®è¨˜äº‹ã¯Eject Advent Calendar 20133æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚ã¡ãªã¿ã«ä»Šæ—¥ã¯åƒ•ã®èª•ç”Ÿæ—¥ã§ã™ ã‹ã¤ã¦ä¸€ä¸–ã‚’é¢¨é¡ã—ä¸–ç•Œä¸ã®Chromeãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ç—…é™¢é€ã‚Šã«ã—ãŸCD-ROM ãƒˆãƒ¬ã‚¤ã‚’å–ã‚Šå‡ºã›ã‚‹ Chromeæ‹¡å¼µã€ã€Œchrome-ejectã€ã§ã™ãŒã€å†…éƒ¨ã§NPAPIã‚’ä½¿ã£ã¦ã„ãŸãŸã‚ã«è¿‘ã„å°†æ¥ç¢ºå®Ÿã«å‹•ã‹ãªããªã‚Šã¾ã™ã€‚ Chromium Blog: Saying Goodbye to Our Old Friend NPAPI ãã“ã§äººé¡žãŒå¹³å’Œã«æš®ã‚‰ã›ã‚‹ã‚ˆã†Ejectã§ãã‚‹ä»£æ›¿æŽªç½®ã‚’æŽ¢ã™å¿…è¦ã«é§†ã‚‰ã‚Œã€éžå¸¸ã«é™å®šçš„ãªãŒã‚‰Chromeã‹ã‚‰Ejectã™ã‚‹æ–¹æ³•ã‚’ç¢ºç«‹ã—ã€Chrome-eject2ã¨ã—ã¦ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã®ã§Advent Calendarã®è¨˜äº‹ã¨ã—ã¦è¨˜ã™æ¬¡ç¬¬ã§ã™ã€‚ Chrome-eject ãŒã“ã®å…ˆç”Ÿãã®ã“ã‚‹ã«ã¯ from Yosuke HASEGAWA ä¸Šè¨˜ã‚¹ãƒ©ã‚¤ãƒ‰å†…ã«ã‚‚æ›¸ã„ã¦ã‚
Itisango 2013/12/05
â€œEject Advent Calendar 20133æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚ã¡ãªã¿ã«ä»Šæ—¥ã¯åƒ•ã®èª•ç”Ÿæ—¥ã§ã™â€ #ãŠãŸãŠã‚!

Google

chrome

Google Chrome

eject

calendar

ãƒã‚¿

2013å¹´

12æœˆ3æ—¥

hasegawayosuke

èª•ç”Ÿæ—¥
ãƒªãƒ³ã‚¯
é‡è¦ï¼ ã¾ãšã¯ã€Œã‚ªãƒªã‚¸ãƒ³ã€ã‚’ç†è§£ã—ã‚ˆã†
é€£è¼‰ç›®æ¬¡ çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€‚ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã®ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã§ã™ã€‚ä»Šå›žã‹ã‚‰ã€HTML5ã‚„JavaScriptã«é–¢é€£ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è©±é¡Œã«ã¤ã„ã¦é€£è¼‰ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã—ãŸã€‚ã‚ˆã‚ã—ããŠé¡˜ã„ã—ã¾ã™ã€‚ ã‚‚ã†èªã¿ã¾ã—ãŸã‹ï¼Ÿ HTML5ã®Webã‚¢ãƒ—ãƒªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹å ±å‘Šæ›¸ çš†ã•ã‚“ã™ã§ã«ã”å˜ã˜ã‹ã¨æ€ã„ã¾ã™ãŒã€2013å¹´10æœˆ30æ—¥ã«JPCERTã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆä»¥ä¸‹ã€JPCERT/CCï¼‰ã‹ã‚‰ã€ŒHTML5 ã‚’åˆ©ç”¨ã—ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«é–¢ã™ã‚‹èª¿æŸ»å ±å‘Šæ›¸ã€ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ ã“ã®å ±å‘Šæ›¸ã®èª¿æŸ»ã®ä¸€éƒ¨ã¯ã€å¼Šç¤¾ãŒè¡Œã„ã¾ã—ãŸã€‚ã¾ãŸã€JavaScriptã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œã«ã¤ã„ã¦æ¬¡ã€…ã¨é‹ã„æŒ‡æ‘˜ã‚’è¡Œã£ã¦ã„ã‚‹malaã•ã‚“ã«ã‚‚ã•ã¾ã–ã¾ãªæŠ€è¡“çš„ã‚¢ãƒ‰ãƒã‚¤ã‚¹ã‚’é ‚ã„ãŸä¸Šã€æ—¥å¸¸çš„ã«Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¤œæŸ»ã‚„æ§‹ç¯‰ã‚’å®Ÿéš›ã®æ¥å‹™ã¨ã—ã¦è¡Œã£ã¦ãŠã‚‰ã‚Œã‚‹å°‚é–€å®¶ã®æ–¹ã€…ã«ã‚‚æŸ»èªã‚’ãŠé¡˜ã„ã—ã¦
Itisango 2013/11/25
â€œHTML5ã§ã¯ã§ãã‚‹ã“ã¨ãŒåºƒãŒã‚Šã€ã•ã¾ã–ã¾ãªè¡¨ç¾ãŒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§å®Ÿç¾ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é¢ã§ã‚‚ã€Œã§ãã‚‹ã“ã¨ã€ãŒã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚â€â€œã¯ã›ãŒã‚ã‚ˆã†ã™ã‘æ°ã«ã‚ˆã‚‹é€£è¼‰ã§ã™ã€‚â€

2013å¹´

JPCERT

CC

hasegawayosuke

NetAgent

@IT

HTML5

origin

JavaScript

security
ãƒªãƒ³ã‚¯
JavaScriptæ–‡å—åˆ—ã®å‹•çš„ç”Ÿæˆã«ãŠã‘ã‚‹ã‚¨ã‚¹ã‚±ãƒ¼ãƒ— - è‘‰ã£ã±æ—¥è¨˜
ã€ŒJavaScriptæ–‡å—åˆ—ã‚’å‹•çš„ç”Ÿæˆã™ã‚‹ã€ã¨ä¸€è¨€ã§è¨€ã£ã¦ã‚‚ã€ä¾‹ãˆã° <html>... <script> // HTMLå†…ã®scriptè¦ç´ å†…ã«ç”Ÿæˆ var s = "ã“ã“ã«å‹•çš„ç”Ÿæˆã•ã‚Œã‚‹"; </script> ã ã£ãŸã‚Šã€ <div onclick='foo("ã“ã“ã«å‹•çš„ç”Ÿæˆã•ã‚Œã‚‹");'> ã ã£ãŸã‚Šã€ <script src="external.js"></script> // external.js var s = "ã“ã“ã«å‹•çš„ç”Ÿæˆã•ã‚Œã‚‹"; ã ã£ãŸã‚Šã€ã•ã‚‰ã«è¤‡é›‘ãªçµ„ã¿åˆã‚ã›ã ã£ãŸã‚Šã¨ã„ã‚ã‚“ãªçŠ¶æ³ãŒã‚ã£ã¦ã€åŸºæœ¬çš„ã«ã¯ã€ŒJavaScriptã¨ã—ã¦ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã€ã«åŠ ãˆã¦ãã®å¤–å´ã®(å ´åˆã«ã‚ˆã£ã¦ã¯ãƒã‚¹ãƒˆã—ã¦ã„ã‚‹)ã‚³ãƒ³ãƒ†ã‚ã‚¹ãƒˆã«å¿œã˜ãŸã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒå¿…è¦ã€ã¨ã„ã†è©±ã€‚ ã§ã€é¢å€’ã ã£ãŸã‚‰ var s = decodeURIComponent( "ã“ã“ã«å‹•çš„ç”Ÿæˆã•ã‚Œã‚‹" ); ã«ã—ã¦ã€ç”Ÿæˆã™ã‚‹å´ã¯U
Itisango 2013/11/13
â€œåŸºæœ¬çš„ã«ã¯ã€ŒJavaScriptã¨ã—ã¦ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã€ã«åŠ ãˆã¦ãã®å¤–å´ã®(å ´åˆã«ã‚ˆã£ã¦ã¯ãƒã‚¹ãƒˆã—ã¦ã„ã‚‹)ã‚³ãƒ³ãƒ†ã‚ã‚¹ãƒˆã«å¿œã˜ãŸã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒå¿…è¦â€

javascript

XSS

escape

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

HTML

neta

2013å¹´

hasegawayosuke

ãƒã‚¿
ãƒªãƒ³ã‚¯
ç©ºå‰ã®è„†å¼±æ€§ãƒãƒ³ãƒ†ã‚£ãƒ³ã‚°ãƒ–ãƒ¼ãƒ - è‘‰ã£ã±æ—¥è¨˜
è¿½è¨˜:ã“ã®ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã¯ä»¥ä¸‹ã®è¨˜äº‹ã‚’æ¥µé™ã¾ã§ã«å‚è€ƒã«ã•ã›ã¦é ‚ãã¾ã—ãŸã€‚ã„ã¤ã‚‚è‘—ä½œæ¨©ãƒ•ãƒªãƒ¼ã§ã‚³ãƒ”ãƒ¼æ”¹å¤‰OKãªè¨˜äº‹ã®æä¾›ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ï¼ãã‚Œã«ã—ã¦ã‚‚ã€ã»ã‚“ã¨ã†ã«å®ŸåŠ›ã•ãˆã‚ã‚Œã°ãƒ‘ã‚¯ãƒªã ã‘ã§é£Ÿã¹ã¦ã„ã‘ã‚‹æ™‚ä»£ãªã‚“ã§ã™ãï¼ http://www.whitehackerz.jp/blog/?p=2245 è‡ªç¤¾è£½å“ã‚„Webã‚µã‚¤ãƒˆã®è„†å¼±æ€§ã‚’å ±å‘Šã™ã‚‹ã“ã¨ã§å ±å¥¨é‡‘ã‚„è¬è¾žãŒå‡ºã‚‹ã®ã¯ Google ã‚„ Mozilla ã‚’ã¯ã˜ã‚æµ·å¤–ã§ã¯æ§˜ã€…ãªã‚‚ã®ãŒã‚ã‚Šã¾ã—ãŸãŒã€ã“ã“ã«ãã¦æ—¥æœ¬ã§ã‚‚ã„ã‚ˆã„ã‚ˆè„†å¼±æ€§å ±å‘Šã«å ±å¥¨é‡‘ã‚’æ”¯æ‰•ã†è‘—åã‚µã‚¤ãƒˆãŒå‡ºã¦ãã¾ã—ãŸã€‚ è„†å¼±æ€§å ±å‘Šåˆ¶åº¦ << mixi Developer Center (ãƒŸã‚¯ã‚·ã‚£ ãƒ‡ãƒ™ãƒãƒƒãƒ‘ãƒ¼ã‚»ãƒ³ã‚¿ãƒ¼) æœªçŸ¥ã®XSSã‚„SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãªã©ã®å ±å‘Šè€…ã«ï¼šãƒŸã‚¯ã‚·ã‚£ãŒã€Œè„†å¼±æ€§å ±å‘Šåˆ¶åº¦ã€é–‹å§‹ã€å ±å¥¨é‡‘ã‚‚ç”¨æ„ - ï¼ IT ã‚µã‚¤ãƒœã‚¦ã‚ºã‚°ãƒ«ãƒ¼ãƒ— | ãƒ‹ãƒ¥ãƒ¼ã‚¹ | ã‚µã‚¤ãƒœã‚¦ã‚ºã€å›½å†…å•†ç”¨ã‚¯ãƒ©ã‚¦
Itisango 2013/11/10
â€œã“ã“ã«ãã¦æ—¥æœ¬ã§ã‚‚ã„ã‚ˆã„ã‚ˆè„†å¼±æ€§å ±å‘Šã«å ±å¥¨é‡‘ã‚’æ”¯æ‰•ã†è‘—åã‚µã‚¤ãƒˆãŒå‡ºã¦ãã¾ã—ãŸã€‚â€â€œã»ã‚“ã¨ã†ã«å®ŸåŠ›ã•ãˆã‚ã‚Œã°ãƒã‚°ãƒãƒ³ãƒ†ã‚£ãƒ³ã‚°ã ã‘ã§é£Ÿã¹ã¦ã„ã‘ã‚‹æ™‚ä»£ãªã‚“ã§ã™ãï¼â€å®ŸåŠ›ãŒç„¡ã„ã‹ã‚‰ãƒ–ã‚¯ãƒžã™ã‚‹ã ã‘ã§ã™ã‚ˆã€‚

Security

XSS

Google

hasegawayosuke

security

2013å¹´

æµè¡Œ

å ±å¥¨é‡‘

report

å ±å‘Š
ãƒªãƒ³ã‚¯
HTML5é–¢é€£ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ± - è‘‰ã£ã±æ—¥è¨˜
HTML5ã«é–¢é€£ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è©±é¡Œã§ã€ã¨ã‚Šã‚ãˆãšã“ã‚Œã¾ã§ã«è©±ã—ãŸè³‡æ–™ã®ä¸€è¦§ã‚„ã€è€ƒå¯Ÿã—ãŸè¨˜äº‹ã€‚ä»Šå¾Œã‚‚ã£ã¨å¢—ãˆã‚‹äºˆå®šã§ã™ã€‚ã€Œã“ã®APIä½¿ã†ä¸Šã§æ°—ã‚’ä»˜ã‘ã‚‹ã“ã¨ãªã„ã®ï¼Ÿã€ã¿ãŸã„ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚‚ã‚ã‚Œã°ãœã²è¨€ã£ã¦ä¸‹ã•ã„ã¾ã›ã€‚ JavaScript Security beyond HTML5 (2013-09-20 Developers Summit Kansai 2013) HTML5ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ãã®1:åŸºç¤Žç·¨ã€XSSç·¨ (2013-06-13 OWASP Night 6th) Web::Security beyond HTML5 (2012-09-28 YAPC::Asia 2012) HTML5æ™‚ä»£ã®Webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ (2012-09-15 ç¬¬5å›žæ„›åª›æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š) Same-Origin Policy ã¨ã¯ä½•ãªã®ã‹ã€‚ - è‘‰ã£ã±æ—¥è¨˜ XMLHttpRequestã‚’ä½¿ã£ãŸCSRFå¯¾
Itisango 2013/09/25
#HTML5 #security

HTML5

web

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

api

hasegawayosuke

2013å¹´

CSRF

JSON

HTML
ãƒªãƒ³ã‚¯
Unicode Security Guide
Welcome to the Unicode Security Guide! This guide has been designed to give Web application developers, software engineers, and application security researchers a reference for understanding Unicode-related security issues in operating systems, applications, and the Web. The dynamics of Unicode, and character encodings in general, are often misunderstood or poorly implemented, and lead to an array
Itisango 2013/07/30
id:hasegawayosuke ã•ã‚“ãŒãƒ–ã‚¯ãƒžã—ã¦ã„ã‚‹ã®ã§ä¿ºã‚‚ãƒ–ã‚¯ãƒžã€‚

unicode

security

guide

charset

encoding

hasegawayosuke
ãƒªãƒ³ã‚¯
è‘‰ã£ã±æ—¥è¨˜
åœ¨å®…ç”Ÿæ´»ãŒæœ¬æ ¼åŒ–ã—ã¦ã‹ã‚‰ã¯å¤šã„æ™‚ã§ã¯1æ—¥10æ¯ä»¥ä¸Šã‚³ãƒ¼ãƒ’ãƒ¼ã‚’é£²ã‚“ã§ã„ãŸã‘ã©ã€ã•ã™ãŒã«é£²ã¿ã™ãŽãªã®ã§1æ—¥1æ¯ã«æ¸›ã‚‰ã—ãŸè©±ã€‚ 2å¹´ä»¥ä¸Šã¶ã‚Šã«ãƒ–ãƒã‚°ã‚’æ›¸ã„ã¦ã‚‹ã‚“ã ã‘ã©ã€ã»ã‚“ã¨ã«å€‹äººçš„ãªã©ã†ã§ã‚‚ã„ã„è©±ã§ã™ã€‚ã“ã®ãƒ–ãƒã‚°ã«ã¯ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãªè©±ã¯ä»Šå¾Œã‚‚ã»ã¨ã‚“ã©æ›¸ãã“ã¨ã¯ãªã„ã¨æ€ã†ã®ã§ã€ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãªè©±ãŒèªã¿ãŸã„äººã¯ä¼šç¤¾ã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒ–ãƒã‚°ã‚’èªã‚“ã§ãã ã•ã„ï¼ï¼ˆãã‚Œã‚‚ã‚ã‚“ã¾ã‚Šãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãªå†…å®¹ã˜ã‚ƒãªã„ã‘ã©ï¼‰ ã‚‚ã¨ã‚‚ã¨ã‚³ãƒ¼ãƒ’ãƒ¼ãŒå¥½ãã§ã€ã‚ã‚“ã¾ã‚Šè¦šãˆã¦ãªã„ã‚“ã ã‘ã©ãŸã—ã‹å°å¦æ ¡3,4å¹´ç”Ÿãã‚‰ã„ã®ã“ã‚ã‹ã‚‰æ—¥å¸¸çš„ã«ã‚³ãƒ¼ãƒ’ãƒ¼ã‚’é£²ã‚€ã‚ˆã†ã«ãªã£ãŸã‚ˆã†ãªæ°—ãŒã™ã‚‹ã€‚è¦ªãŒé£²ã‚“ã§ãŸã‚³ãƒ¼ãƒ’ãƒ¼ãŒã„ã„é¦™ã‚Šã ã£ãŸã®ã§ã‚ã‘ã¦ã‚‚ã‚‰ã£ã¦é£²ã¿å§‹ã‚ãŸã®ãŒãã£ã‹ã‘ã ã£ãŸã‚ˆã†ãªè¨˜æ†¶ãŒã€‚ ã§ã€ã‚³ãƒãƒŠç¦ä»¥å‰ã¯ã‚ªãƒ•ã‚£ã‚¹ã§è‡ªåˆ†ã§æ·¹ã‚ŒãŸã‚Šãƒãƒªã‚¹ã‚¿ã®ç ”ä¿®ã‚’å—ã‘ãŸåŒåƒšã«æ·¹ã‚Œã¦ã‚‚ã‚‰ã£ãŸã‚Šã§æ¯Žæ—¥6,7æ¯ã¯é£²ã‚“ã§ãŸã€‚æœèµ·ãã¦ã‚³ãƒ¼ãƒ’ãƒ¼é£²ã‚“ã§ã€ä¼šç¤¾ã«ã¤ã„ãŸã‚‰1æ¯ã€åˆå‰ä¸ã«ã‚‚ã†1æ¯ã€ãƒ©ãƒ³
Itisango 2013/05/06
id:hasegawayosuke ã•ã‚“ã® #BLOG ã€‚æ„å¤–ã«ã‚‚ä»Šæ—¥ã¾ã§ãƒ–ã‚¯ãƒžã—ã¦ã„ãªã‹ã£ãŸã€‚

Web

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

computer

blog

hasegawayosuke

XSS

IT

JavaScript

Perl
ãƒªãƒ³ã‚¯
å°Žå…¥äº‹ä¾‹ | ãƒãƒ¼ãƒ ã®ãŸã‚ã®ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒª ã‚µã‚¤ãƒœã‚¦ã‚ºLive
ä¸€èˆ¬ç¤¾å›£æ³•äºº ä½è³€çœŒè‡¨åºŠå·¥å¦æŠ€å£«ä¼š æ§˜ ã‚µã‚¤ãƒœã‚¦ã‚ºLiveä¸Šã§æ—¥å¸¸çš„ãªè°è«–ãŒå¯èƒ½ã«ãªã‚Šã€ä¼šè°ã§ã¯å¿…è¦ãªè°è«–ã«çµžã£ãŸè©±ã—åˆã„ãŒå¯èƒ½ã«ãªã£ãŸ
Itisango 2013/02/09
@wakatono ã•ã‚“ã¨ @hasegawayosuke ã•ã‚“ãŒã“ã‚“ãªã¨ã“ã‚ã«wwww #security

cybozulive

security

groupware

seccon

ctf

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

event

hasegawayosuke
ãƒªãƒ³ã‚¯
çŸç¸®URLã¯è² å‚µã¨ãªã‚‹å¯èƒ½æ€§ãŒé«˜ã„ã®ã§ä½œã‚‹ã“ã¨ã«æã‚ã—ãèºŠèº‡ã™ã‚‹ - ã‚ãƒ¢ãƒ–ãƒ
ãªã‚“ã¦ã„ã†ã‹ã€å˜åœ¨ã™ã‚‹ã“ã¨è‡ªä½“ãŒã‚³ã‚¹ãƒˆã£ã¦ã„ã†ã®ã‹ãªã€‚ä¸€åº¦çŸç¸®URLã‚’å§‹ã‚ãŸã‚‰ãã‚Œã¯æœªæ¥æ°¸åŠ«ç¶æŒã•ã‚Œãªã‘ã‚Œã°ä»Šã¾ã§ã«ä½œã‚Šå‡ºã—ãŸã™ã¹ã¦ã®URLãŒç„¡ä¾¡å€¤ã«ãªã£ã¦ã—ã¾ã†ã€‚ ãã‚Œã¯ãªãœã‹ã¨ã„ã†ã¨ã€URLã‹ã‚‰ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã«ã‚ˆã‚Šä¸€æ–¹çš„ã«ãƒãƒƒã‚·ãƒ¥ã‚’ç®—å‡ºã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã¦ã€ã“ã‚Œã¯mp3ã¨ã‹mp4ã¿ãŸã„ã«æƒ…å ±ã‚’ãƒã‚¹ã•ã›ã‚‹ã“ã¨ã«ã‚ˆã‚Šåœ§ç¸®ã—ã¦ã„ã‚‹ã€‚ãƒã‚¹ã—ãŸã ã‘ã‚ã£ã¦ã€ãƒãƒƒã‚·ãƒ¥ã‹ã‚‰URLã¸ã®å¾©å…ƒã¯ãã®å¤‰æ›ã—ãŸãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãŒãªã„ã¨å‡ºæ¥ãªã„ã€‚ ã“ã‚Œã£ã¦ã™ã”ã„ã‚€ã¡ã‚ƒãã¡ã‚ƒãªã“ã¨ã ã¨æ„Ÿã˜ã‚‹ã¯ãšã€‚ãã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãŒå¤±ã‚ã‚ŒãŸã‚‰ä»Šã¾ã§ã®ä¾¡å€¤ã€æ–‡è„ˆãŒå¤±ã‚ã‚Œã‚‹ã€‚ãŸã¨ãˆã°è‘—åãªçŸç¸®URLã‚µãƒ¼ãƒ“ã‚¹ã§ã‚ã‚‹bitlyãŒæ¶ˆæ»…ã—ãŸã¨ã—ãŸã‚‰ã€bitlyãŒä½¿ã‚ã‚ŒãŸç™ºè¨€ã¯ä½•ã‚’è¨€ã£ã¦ã‚‹ã®ã‹ã‚ã‹ã‚‰ãªããªã‚‹ã€‚"ãã®bitlyãŒæŒ‡ã—ç¤ºã—ã¦ã„ãŸã‚³ãƒ³ãƒ†ã‚ã‚¹ãƒˆ"ãŒå¤±ã‚ã‚ŒãŸæ–‡ç« ã‚’å›ã¯ã©ã†ã‚„ã£ã¦ç†è§£ã™ã‚‹ã®ã‹ãã€‚ ã¤ã¾ã‚ŠçŸç¸®URLã‚’ä½œã‚Šã€ãã‚ŒãŒèª°ã‹ã«ä¸€åº¦ã§ã‚‚ä½¿ã‚ã‚Œã¦ã—ã¾
Itisango 2012/12/14
web

url

csrf

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚µãƒ¼ãƒ“ã‚¹

URLçŸç¸®

è€ƒãˆæ–¹

security

hamachiya2

hasegawayosuke
ãƒªãƒ³ã‚¯
webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£4å¤©çŽ‹åŒå£«ã®ã„ãŒã¿åˆã„ã¯æ—¥æœ¬ã®æå¤±
è¨€ã‚ãšã¨çŸ¥ã‚ŒãŸæ—¥æœ¬ãŒèª‡ã‚‹webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£4å¤©çŽ‹ãŒã„ã‚‹ã€‚æˆ‘ã€…ãŒå¿«é©ã«ãƒãƒƒãƒˆã‚µãƒ¼ãƒ•ã‚£ãƒ³ã§ãã‚‹ã®ã¯å½¼ã‚‰ã®ãŠé™°ã¨è¨€ã£ã¦ã‚‚éŽè¨€ã§ã¯ãªã„ã€‚ ã²ã‚ã¿ã¡ã‚…malaã¯ã¾ã¡ã‚„hasegawayosuke ã“ã®ã†ã¡ã€ã²ã‚ã¿ã¡ã‚…ã¨malaã®ä»²ãŒã‚ã¾ã‚ŠèŠ³ã—ãç„¡ã„ã¨ã„ã†ã“ã¨ã¯è–„ã€…çš†ã•ã‚“ã‚‚æ„Ÿã˜ã¦ã„ãŸã ã‚ã†ãŒã€ã„ã‚ˆã„ã‚ˆæœ¬æ ¼çš„ã«æŠ—äº‰ãŒé¡•åœ¨åŒ–ã—ã¦ãã¦å¤§å¤‰ã«æ†‚æ…®ã™ã¹ãäº‹æ¡ˆã§ã‚ã‚‹ã®ã§ã“ã“ã§å‘¨çŸ¥å¾¹åº•ã—ã¦ãŠããŸã„ã€‚ ãƒ©ã‚¤ãƒ–ãƒ‰ã‚¢ç¤¾å“¡malaãŒé«˜æœ¨æµ©å…‰ã®å®šç½®ç¶²ã«å¼•ã£ã‹ã‹ã‚Štwitteræ°‘ã«ãƒ•ãƒ«ãƒœãƒƒã‚³ã«ã•ã‚Œã‚‹ã®å›³ http://togetter.com/li/326127 é«˜æœ¨æµ©å…‰ã•ã‚“ã¸ã€ã—ã£ã‹ã‚Šã—ã¦ãã ã•ã„ ã€€æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š http://d.hatena.ne.jp/mala/20120830/1346309790 ã¾ã™ã¾ã™è†¨å¼µã™ã‚‹webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å±æ©Ÿã«å¯¾ã—æŠ€è¡“è€…ã¨ã—ã¦ãƒ”ãƒ¥ã‚¢ãªæ…‹åº¦ã§è‡¨ã‚€ã¨ã„ã†å…±é€šç‚¹ã‚’æŒã¡åˆã‚ã›ã‚‹å››å¤©çŽ‹ã€‚ ãã‚Œæ•…
Itisango 2012/08/31
hasegawayosuke

security

ãƒã‚¿

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

å¢—ç”°

neta

mala
ãƒªãƒ³ã‚¯
OWASP Japan 2nd Local Chapter Meeting | æ°´ç„¡æœˆã°ã‘ã‚‰ã®ãˆã³æ—¥è¨˜
å…¬é–‹: 2012å¹´7æœˆ14æ—¥3æ™‚0åˆ†é ƒ OWASP Japanã®2åº¦ç›®ã®Local Chapter MeetingãŒé–‹å‚¬ã•ã‚Œã¾ã—ãŸâ€¦â€¦ã€ŒOWASP Japan 2nd Local Chapter Meeting (www.owasp.org)ã€ã€‚ ä»Šå›žã¯æ¥½å¤©ã‚¿ãƒ¯ãƒ¼ãŒä¼šå ´ã€‚æ¥½å¤©ãŒã‚»ãƒŸãƒŠãƒ¼ã‚’ã‚„ã‚‹ã¨ãã®ã„ã¤ã‚‚ã®å ´æ‰€ã§ã™ãŒã€åºƒã„ä¼šå ´ã®ä¸€éƒ¨ã ã‘ã‚’ä½¿ç”¨ã™ã‚‹ã‚ˆã†ãªå½¢ã€‚ãã‚Œã§ã‚‚200äººä»¥ä¸Šã¯å…¥ã£ã¦ã„ãŸã‚ˆã†ã§ã™ãŒã€‚ é›‘å¤šãªãƒ¡ãƒ¢ã‚’ã ã‚‰ã ã‚‰ã¨ã€‚å¾ŒåŠã«ãªã‚‹ã«å¾“ã£ã¦ãƒ¡ãƒ¢ãŒé›‘ã«ãªã‚‹ã®ã¯ä»•æ§˜ã§ã™ã€‚ Short talk of XSS â€“ çŸã„XSSã®è©±ã¯ã›ãŒã‚ã•ã‚“ã®ãŠè©±ã€‚ ã¨ã‚ã‚‹MSã®ã‚µã‚¤ãƒˆã«ã‚ã£ãŸXSSè„†å¼±æ€§ã€ã‚¨ãƒ©ãƒ¼è¡¨ç¤ºã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ã¦ã„ãªã„ã®ã§çªç ´ã§ãã‚‹ã®ã§ã™ãŒã€å…¥åŠ›ã§ãã‚‹ãƒ‡ãƒ¼ã‚¿ã®é•·ã•ãŒåˆ¶é™ã•ã‚Œã¦ã„ã‚‹ã¨ã„ã†ã€‚ã„ã‹ã«çŸã„æ–‡å—æ•°ã§ä»»æ„ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã‹ã€ã¨ã„ã†ã®ãŒä»Šå›žã®ãŠè©±ã€‚ Netscape4é™å®šã®
Itisango 2012/07/14
OWASP

2012å¹´

event

hasegawayosuke

sen-u
ãƒªãƒ³ã‚¯
JS Array Hijacking with MBCS encodings = MBCSæ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’ä½¿ã£ãŸJSé…åˆ—ã®ä¹—ã£å–ã‚Š / Yosuke HASEGAWA ; NetAgent
Itisango 2012/04/06
JSON

JavaScript

xss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

presentation

security

hasegawayosuke
ãƒªãƒ³ã‚¯
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1 é–‹å‚¬ã—ã¾ã—ãŸã€‚ - è‘‰ã£ã±æ—¥è¨˜
Shibuya.XSS ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ãƒˆãƒ¼ã‚¯#1ã‚’é–‹å‚¬ã—ã¾ã—ãŸã€‚ å‚åŠ ã—ã¦é ‚ã„ãŸã¿ãªã•ã‚“ã€ç™ºè¡¨ã—ã¦ãã ã•ã£ãŸã¿ãªã•ã‚“ã€ãã—ã¦ä¼šå ´ã‚’å¿«ããŠè²¸ã—ãã ã•ã£ãŸã†ãˆã«ãƒ“ãƒ¼ãƒ«ã¨ãƒ”ã‚¶ã¾ã§ã”ç”¨æ„ãã ã•ã£ãŸmixiã•ã‚“ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ ç§ã®ç™ºè¡¨ã—ãŸè³‡æ–™ã‚’ç½®ã„ã¦ãŠãã¾ã™ã€‚ MBCSæ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’ä½¿ã£ãŸJSé…åˆ—ã®ä¹—ã£å–ã‚Š æ¬¡å›žäºˆå®šã¯ã¾ã£ãŸãæœªå®šã§ã™ãŒã€ã‚‚ã—é–‹å‚¬ã™ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã—ãŸã‚‰ã¾ãŸã¿ãªã•ã‚“ã®ã”å‚åŠ ã‚’ãŠé¡˜ã„è‡´ã—ã¾ã™ã€‚
Itisango 2012/04/06
Shibuya.xss

xss

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

hasegawayosuke

JavaScript
ãƒªãƒ³ã‚¯
ã€Žã‚½ãƒ‹ãƒ¼ãŒæ—¥æœ¬äººãƒãƒƒã‚«ãƒ¼Yosuke HASEGAWAã•ã‚“ã§ã¯ãªãï¼’ã¡ã‚ƒã‚“ãã‚‹ç›¸æ‰‹ã«æ³•çš„æŽªç½®ã‚’æ¤œè¨Žã€
DJã“ã™ã‚‚ã®ãŠã†ã„ãˆã„ãƒ¼æ—¥è¨˜ å½“ãƒ–ãƒã‚°ã®è¨˜äº‹æƒ…å ±ã«èª¤ã‚ŠãŒã‚ã‚Œã°ãŠçŸ¥ã‚‰ã›ãã ã•ã„ã€‚æ³•çš„ã«å•é¡ŒãŒã‚ã‚‹ä¾µå®³æƒ…å ±ã®é€ä¿¡é˜²æ¢æŽªç½®ã«è©²å½“ã™ã‚‹è¨˜äº‹ã¯é€Ÿã‚„ã‹ã«å‰Šé™¤ã—ã¾ã™ã€‚è¨˜äº‹ã®æœ€ä¸‹éƒ¨ã«ã‚ã‚‹ã‚³ãƒ¡ãƒ³ãƒˆæ¬„ã«å‰Šé™¤è¦è«‹ã‚’æ›¸ã„ã¦ãã ã•ã„ã€‚ï¼’ï¼”æ™‚é–“ä»¥å†…ã«å¯¾å¿œã—ã¦ï¼”ï¼˜æ™‚é–“ä»¥å†…ã«è¨‚æ£åˆã¯å‰Šé™¤ã—ã¾ã™ã€‚ ç±³ã‚½ãƒ‹ãƒ¼ãƒ»ã‚¨ãƒ¬ã‚¯ãƒˆãƒãƒ‹ã‚¯ã‚¹ãŒï¼’ï¼•ï¼ï¼äººã®é¡§å®¢æƒ…å ±ã‚’æµå‡ºã•ã›ãŸæ—¥æœ¬äººãƒãƒƒã‚«ãƒ¼ã®æ³•çš„å‡¦ç½®ã‚’æ¤œè¨Žã™ã‚‹ãªã‚‰åˆ†ã‹ã‚‹ã‘ã©ãªãœã‹ï¼’ã¡ã‚ƒã‚“ãã‚‹ã«æŠ—è°ã—ã¦ã„ã‚‹ã€‚ ãªãœYosuke HASEGAWAã•ã‚“ã«ã¯è¯éº—ã«ã‚¹ãƒ«ãƒ¼ã™ã‚‹ã‚“ã ï½—ï½—ï½—ï½— å…¬å¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¯ã€Œã€€@hasegawayosukeã€€ã€ã§ã™ æ—¥æœ¬ã®ã‚½ãƒ‹ãƒ¼ãŒã‚„ã‚‹æ°—ãªã„ã‹ã‚‰ç±³å›½é˜²çœã«ï¼·ï¼¥ï¼¢ãƒšãƒ¼ã‚¸ã‹ã‚‰ç”³è«‹ã—ã¦ã‚„ã£ãŸã€‚ ï¼£ï¼¡ï¼©ã¨ï¼¦ï¼¢ï¼©ã¯é€£çµ¡ãƒ•ã‚©ãƒ¼ãƒ ã‚’ç”¨æ„ã—ã¦ãªã„ã‹ã‚‰ä¸€ç•ªä¸Šã«æŠ•ã’ã¦ã‚„ã£ãŸãœã€‚ æ—¥æœ¬ã¯åŸºæœ¬çš„ã«åˆ©æ¨©è€…ã«å¼±ã„ã‹ã‚‰ãªã€‚ ã“ã†ã„ã†ã¨ãã¯ã‚¢ãƒ¡ãƒªã‚«æ”¿åºœã®ä¸€ç•ªä¸Šã«æŠ•ã’ã‚Œã°ã„ã„ã€‚ ãƒ“ãƒ³ãƒ©ãƒ‡ã‚£ãƒ³ã§å¿™ã—ã„ã‹ã‚‰
Itisango 2011/05/08
hasegawayosuke

Sony

2ch

ameblo

ãƒã‚¿
ãƒªãƒ³ã‚¯
Twitter / @Yosuke HASEGAWA: joomla ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹è¤‡æ•°ã®ã‚µã‚¤ãƒˆã«ãŠã„ã¦ã€ã€Œ ...ï¼ˆæƒ…å ±å…ƒã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ï¼‰ - ripjyr's blog
d:id:hasegawayosuke:detailã•ã‚“ã®jjencodeãŒè¤‡æ•°ã‚µã‚¤ãƒˆã§ã€é›£èªåŒ–ã®æ‰‹æ³•ã¨ã—ã¦æ‚ªç”¨ã•ã‚Œã¡ã‚ƒã£ãŸãã†ã§ã™ãƒ»ãƒ»ãƒ» jjencodeè‡ªä½“ã¯ã€è¨˜å·ã ã‘ã§Javascriptã‚’æ›¸ã“ã†ï¼ã¨ã„ã†å†…å®¹ã§ã‚ã£ã¦ä»¥ä¸‹URLã«ã¦Ajaxã§æ›¸ã‘ã¡ã‚ƒã†ã‚„ã¤ãŒã€å…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ãã€‚ jjencode - Encode any JavaScript program using only symbols ã‚ã¨ã€è©³ç´°ã«ã¤ã„ã¦ã¯ã€ã¯ã›ãŒã‚ã•ã‚“ã®ã‚µã‚¤ãƒˆã§ç™ºè¡¨è³‡æ–™ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ JavaScriptã‚’ã‚‚ã£ã¨æ¥½ã—ã(jjencode) Twitter. It's what's happening. ä¸€éƒ¨è¨˜äº‹ã«ã‚‚ãªã£ã¦ã„ã¾ã™ãã€‚ã‚¤ã‚¿ãƒªã‚¢ã®Webã‚µã‚¤ãƒˆã§ã£ã¦æ›¸ã„ã¦ã‚‹ãªã€‚ From MDL forum, I get a post where a user has been reported a str
Itisango 2010/10/06
è¨˜å¿µãƒ–ã‚¯ãƒžã€‚

jjencode

Javascript

hasegawayosuke
ãƒªãƒ³ã‚¯
Re: Algorithm - 0ã¨1ã‚’æ¬¡ã€…ã¨è¿”ã™ç°¡å˜ãªãŠä»•äº‹ - è‘‰ã£ã±æ—¥è¨˜
http://blog.livedoor.jp/dankogai/archives/51512419.html JavaScript ã§å‘¼ã³å‡ºã—ã® () ãŒç…©ã‚ã—ã„ãªã‚‰ã€ä»¥ä¸‹ã®ã‚ˆã†ã«æ›¸ã‘ã‚‹ã®ã§ã¯ãªã„ã‹ã€‚ #!/usr/bin/js var fl = { p : 0, valueOf : function(){ return this.p = !this.p; }, toString : valueOf }; print(fl); print(fl); print(fl); print(fl);
Itisango 2010/09/03
è¨˜å·ã ã‚‰ã‘ã®æã‚ã—ã„ã‚³ãƒ¼ãƒ‰ãŒå‡ºã¦ãã‚‹ã®ã‹ã¨æ€ã£ãŸã‘ã©ã€é•ã£ãŸã€‚

javascript

algorithm

hasegawayosuke
ãƒªãƒ³ã‚¯
Firefoxã®Web Workersã«ãŠã‘ã‚‹è„†å¼±æ€§ã«ã¤ã„ã¦
2010/07/23ã€€ã‚³ãƒ¼ã‚¹ï¼šå…ƒç¥–ã“ã£ã¦ã‚Š ã€Œå…ƒç¥–ã“ã£ã¦ã‚Šã€è¨˜äº‹ã¯ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆæ—§ãƒ–ãƒã‚°[netagent-blog.jp]ã«æŽ²è¼‰ã•ã‚Œã¦ã„ãŸè¨˜äº‹ã§ã‚ã‚Šã€ç¾åœ¨ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã«åœ¨ç±ã—ã¦ã„ãªã„ãƒ©ã‚¤ã‚¿ãƒ¼ã®è¨˜äº‹ã‚‚å«ã¿ã¾ã™ã€‚ Firefoxã®Web Workersã«ãŠã‘ã‚‹è„†å¼±æ€§ã«ã¤ã„ã¦ ã¿ãªã•ã‚“ã€ã“ã‚“ã«ã¡ã¯ã€‚ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆæ ªå¼ä¼šç¤¾ ç ”ç©¶é–‹ç™ºéƒ¨ã®é•·è°·å·ã§ã™ã€‚ ä»Šé€±ã®æ°´æ›œæ—¥ã« Mozilla Firefox 3.6.7 ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸãŒã€ã“ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã¯ç§ãŒç™ºè¦‹ã—ãŸè„†å¼±æ€§(*1)ã®ä¿®æ£ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ä»Šæ—¥ã¯ãã®å†…å®¹ã«ã¤ã„ã¦èª¬æ˜Žã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ (*1) MFSA 2010-42: Web ãƒ¯ãƒ¼ã‚«ãƒ¼ã® importScripts ã‚’é€šã˜ãŸã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ‡ãƒ¼ã‚¿æ¼ãˆã„ ----- â– æ¦‚è¦ Mozilla Firefox 3.6.4 ãŠã‚ˆã³ 3.6.6 ã«ãŠã„ã¦ã€Web Workers ã¨
Itisango 2010/07/26
security

hasegawayosuke

firefox

javascript
ãƒªãƒ³ã‚¯
MFSA 2010-42: Web ãƒ¯ãƒ¼ã‚«ãƒ¼ã® importScripts ã‚’é€šã˜ãŸã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ‡ãƒ¼ã‚¿æ¼ãˆã„
Itisango 2010/07/21
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã® Yosuke Hasegawa æ°ã«ã‚ˆã£ã¦å ±å‘Šã•ã‚Œã¾ã—ãŸã€‚

hasegawayosuke

firefox

javascript
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸