[B! å¤±åŠ¹] TsuSUZUKIã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

TsuSUZUKI id:TsuSUZUKI

å¤±åŠ¹ã«é–¢ã™ã‚‹TsuSUZUKIã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ¤ãƒ•ã‚ªã‚¯ã€Œä¸å¤ã‚¹ãƒžãƒ›å‡ºå“æ™‚ã€ãƒžã‚¤ãƒŠè¨¼æ˜Žæ›¸å¤±åŠ¹ã‚’ã€åˆæœŸåŒ–ã ã‘ã§ã¯æ¶ˆãˆãªã„
5æœˆ11æ—¥ã‹ã‚‰ã€ãƒžã‚¤ãƒŠãƒ³ãƒãƒ¼ã‚«ãƒ¼ãƒ‰ã®é›»åè¨¼æ˜Žæ›¸æ©Ÿèƒ½ã‚’Androidç«¯æœ«ã«æè¼‰ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸã€‚ã“ã‚Œã‚’å—ã‘ã€ãƒ¤ãƒ•ãƒ¼ãŒé‹å–¶ã™ã‚‹ã‚ªãƒ¼ã‚¯ã‚·ãƒ§ãƒ³ã‚µã‚¤ãƒˆã€Œãƒ¤ãƒ•ã‚ªã‚¯ï¼ã€ã¯ã€ä¸å¤ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³å‡ºå“ã®éš›ã€äº‹å‰ã«ã‚¹ãƒžãƒ›ç”¨é›»åè¨¼æ˜Žæ›¸ã®å¤±åŠ¹æ‰‹ç¶šãã‚’è¡Œã†ã‚ˆã†æ¡ˆå†…ã—ã¦ã„ã‚‹ã€‚ ã‚¹ãƒžãƒ›ç”¨é›»åè¨¼æ˜Žæ›¸ã¯ã€ç«¯æœ«ã®åˆæœŸåŒ–ã ã‘ã§ã¯å‰Šé™¤ã§ããšã€ãƒžã‚¤ãƒŠãƒãƒ¼ã‚¿ãƒ«ã‚¢ãƒ—ãƒªã‹ã‚‰å¤±åŠ¹ç”³è«‹ã‚’è¡Œã†å¿…è¦ãŒã‚ã‚‹ã€‚ãƒžã‚¤ãƒŠã‚«ãƒ¼ãƒ‰ã®é›»åè¨¼æ˜Žæ›¸æ©Ÿèƒ½ã‚’ä½¿ã£ã¦ã„ãŸã‚¹ãƒžãƒ›ã‚’å‡ºå“ã™ã‚‹éš›ã«ã¯ã€å¿…ãšã“ã®æ‰‹ç¶šãã‚’è¡Œã†ã‚ˆã†å‘¼ã³æŽ›ã‘ã¦ã„ã‚‹ã€‚ é–¢é€£è¨˜äº‹ ãƒžã‚¤ãƒŠã‚«ãƒ¼ãƒ‰ã‚’Androidã‚¹ãƒžãƒ›ã«å…¥ã‚Œã¦ã¿ãŸã€€ä½•ãŒä¾¿åˆ©ã§ä½•ãŒã§ãã‚‹ï¼Ÿã€€iPhoneå¯¾å¿œã¯ï¼Ÿ 5æœˆ11æ—¥ã«ã€ãƒžã‚¤ãƒŠãƒ³ãƒãƒ¼ã‚«ãƒ¼ãƒ‰ã®ã‚¹ãƒžãƒ›ç”¨é›»åè¨¼æ˜Žæ›¸æè¼‰ã‚µãƒ¼ãƒ“ã‚¹ã€ã„ã‚ã‚†ã‚‹ã€Œã‚«ãƒ¼ãƒ‰æ©Ÿèƒ½ã®ã‚¹ãƒžãƒ›æè¼‰ã€ãŒã‚¹ã‚¿ãƒ¼ãƒˆã—ãŸã€‚ã€Œãƒžã‚¤ãƒŠã‚«ãƒ¼ãƒ‰ãŒã‚¹ãƒžãƒ›ã«å…¥ã‚‹ã€ãªã‚“ã¦è¨€ã‚ã‚Œã¦ã„ã‚‹ãŒã€ä½•ãŒã§ãã¦ä½•ãŒã§ããªã„ã®ã‹ã€‚å®Ÿéš›ã«ã‚¹ãƒžãƒ›ã«ãƒžã‚¤ãƒŠã‚«ãƒ¼ãƒ‰ã‚’æè¼‰ã—ã¦ã¿ãŸ
TsuSUZUKI 2023/05/23
"ã‚¹ãƒžãƒ›ç”¨é›»åè¨¼æ˜Žæ›¸ã¯ã€ç«¯æœ«ã®åˆæœŸåŒ–ã ã‘ã§ã¯å‰Šé™¤ã§ããšã€ãƒžã‚¤ãƒŠãƒãƒ¼ã‚¿ãƒ«ã‚¢ãƒ—ãƒªã‹ã‚‰å¤±åŠ¹ç”³è«‹ã‚’è¡Œã†å¿…è¦ãŒã‚ã‚‹ã€‚" / è¨¼æ˜Žæ›¸ã‚¹ãƒˆã‚¢ãŒ Android ç®¡ç†ä¸‹ã§ã¯ãªã„ã€‚

Android

ã‚¹ãƒžãƒ›

é›»åè¨¼æ˜Žæ›¸

ãƒ‡ã‚¸ã‚¿ãƒ«ç½²å

å¤±åŠ¹
ãƒªãƒ³ã‚¯
Revoking Trust in one ANSSI Certificate â€“ Mozilla Security Blog
Last week, Mozilla was notified that an intermediate certificate, which chains up to a root included in Mozillaâ€™s root store, was loaded into a man-in-the-middle (MITM) traffic management device. It was then used, during the process of inspecting traffic, to generate certificates for domains the device owner does not legitimately own or control. While this is not a Firefox-specific issue, to prote
TsuSUZUKI 2013/12/10
ESR 24.x æœ€æ–°ç‰ˆ / é€šå¸¸ç‰ˆ 26.x ã¯å¯¾å¿œæ¸ˆã¿ã€‚ / "End-user Action We recommend that all users upgrade to the latest version of Firefox. Firefox 26 and Firefox 24 ESR both contain the fix for this issue, and will be released this week."

SSL

TLS

è¨¼æ˜Žæ›¸

ãƒ‡ã‚¸ã‚¿ãƒ«ç½²å

é›»åè¨¼æ˜Žæ›¸

Firefox

Google

å¤±åŠ¹
ãƒªãƒ³ã‚¯
Mozilla Security Blog
At Mozilla, browser security is a critical mission, and part of that mission involves responding swiftly to new threats. Tuesday, around 8 AM Eastern time, we received a heads-up from â€¦ Read more
TsuSUZUKI 2013/12/10
ESR 24.x æœ€æ–°ç‰ˆ / é€šå¸¸ç‰ˆ 26.x ã¯å¯¾å¿œæ¸ˆã¿ã€‚ / "End-user Action We recommend that all users upgrade to the latest version of Firefox. Firefox 26 and Firefox 24 ESR both contain the fix for this issue, and will be released this week."

SSL

TLS

è¨¼æ˜Žæ›¸

ãƒ‡ã‚¸ã‚¿ãƒ«ç½²å

é›»åè¨¼æ˜Žæ›¸

Firefox

Google

å¤±åŠ¹
ãƒªãƒ³ã‚¯
Googleãƒ‰ãƒ¡ã‚¤ãƒ³ç”¨ã®ä¸æ£è¨¼æ˜Žæ›¸ãŒç™ºè¡Œã•ã‚Œã‚‹ã€å„ç¤¾ãŒå¤±åŠ¹æŽªç½®ã¸
ã€Œgoogle.comã€ã€Œ.google.co.jpã€ãªã©ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ç”¨ã®ä¸æ£è¨¼æ˜Žæ›¸ãŒç™ºè¡Œã•ã‚Œã¦ã„ãŸã“ã¨ãŒåˆ†ã‹ã‚Šã€Googleã€Microsoftã€MozillaãŒå¯¾å¿œã‚’è¡¨æ˜Žã—ãŸã€‚ ç±³Googleã¯12æœˆ7æ—¥ã€åŒç¤¾å‚˜ä¸‹ã®è¤‡æ•°ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ç”¨ã«ä¸æ£ãªãƒ‡ã‚¸ã‚¿ãƒ«è¨¼æ˜Žæ›¸ãŒç™ºè¡Œã•ã‚Œã¦ã„ãŸã“ã¨ãŒåˆ†ã‹ã‚Šã€å•é¡Œã®è¨¼æ˜Žæ›¸ã‚’å¤±åŠ¹ã•ã›ã‚‹ãªã©ã®æŽªç½®ã‚’è¬›ã˜ãŸã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚Googleã‹ã‚‰é€£çµ¡ã‚’å—ã‘ãŸMicrosoftã‚„Mozillaã‚‚å¯¾å¿œã‚’è¡¨æ˜Žã—ãŸã€‚ Googleã«ã‚ˆã‚‹ã¨ã€ä¸æ£ãªè¨¼æ˜Žæ›¸ã¯12æœˆ3æ—¥ã«ç™ºè¦‹ã•ã‚Œã€èª¿ã¹ãŸã¨ã“ã‚ã€ãƒ•ãƒ©ãƒ³ã‚¹ã®æ”¿åºœç³»èªè¨¼å±€ANSSIå‚˜ä¸‹ã®ä¸é–“èªè¨¼å±€ã§ç™ºè¡Œã•ã‚Œã¦ã„ãŸã“ã¨ãŒåˆ†ã‹ã£ãŸã€‚ é›»åè¨¼æ˜Žæ›¸ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„ã‚‹Webã‚µã‚¤ãƒˆãŒæœ¬ç‰©ã§ã‚ã‚‹ã“ã¨ã‚’ç¢ºèªã™ã‚‹ãŸã‚ã«ä½¿ã‚ã‚Œã‚‹ã€‚ä¸æ£ãªè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã™ã‚Œã°ã€å½ã‚µã‚¤ãƒˆã§ã‚ã£ã¦ã‚‚Webãƒ–ãƒ©ã‚¦ã‚¶ã®è¦å‘ŠãŒè¡¨ç¤ºã•ã‚Œãšã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã ã¾ã•ã‚Œã¦å€‹äººæƒ…å ±ãªã©ã‚’å…¥åŠ›ã—ã¦ã—
TsuSUZUKI 2013/12/10
cf. http://blogs.opera.com/security/2013/12/certificate-update/ , http://d.hatena.ne.jp/TsuSUZUKI/20120714/1342252649 . http://technet.microsoft.com/ja-jp/security/advisory/2728973 , http://support.microsoft.com/kb/2677070/ja , http://d.hatena.ne.jp/TsuSUZUKI/20120606/1338931842 , /20130425/

SSL

TLS

è¨¼æ˜Žæ›¸

ãƒ‡ã‚¸ã‚¿ãƒ«ç½²å

é›»åè¨¼æ˜Žæ›¸

Google

å¤±åŠ¹
ãƒªãƒ³ã‚¯
1