Disclosure of a vulnerability that allows the theft of visitors' email addresses using Medium's custom domain feature / Mediumã®ç‹¬è‡ªãƒ‰ãƒ¡ã‚¤ãƒ³ãƒ—ランを使ã£ã¦è¨ªå•è€…ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒçªƒå–ã§ãる脆弱性ã®é–‹ç¤º
0_medium_vuln_en.md Disclosure of a vulnerability that allows the theft of visitors' email addresses using Medium's custom domain feature Author: mala Introduction This article describes a vulnerability in a web service called Medium that allows you to steal visitors' e-mail addresses by using custom domain plan of Medium. This is done as my personal activity and is not related to my organization.
RubyKaigi 2022ã®ä¼šå ´ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒªãƒã‚¸ãƒˆãƒªã‚’èªã¿è§£ã | ã†ãªã™ã‘ã¨ã‚ã‚Œã“ã‚Œ
ç§ãŒã“れを書ãå‹•æ©Ÿ ç§ã¯Kaigi on Railsã®ã‚ªãƒ¼ã‚¬ãƒŠã‚¤ã‚¶ãƒ¼ã®ã²ã¨ã‚Šã§ã™ã€‚Kaigi on Rails 2023ã¯ç‰©ç†ä¼šå ´ã«ã¦é–‹å‚¬ã•ã‚Œã‚‹ã“ã¨ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ãã†ãªã‚‹ã¨ã‚‚ã¡ã‚ã‚“ã€ä¼šå ´ã§ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«ã¤ã„ã¦ã¯ã©ã†ãªã‚‹ã€ã©ã†ã™ã‚‹ã€ã¨ã„ã†å•é¡ŒãŒå‡ºã¦ãã¾ã™ã€‚ãã‚Œã«å‚™ãˆã¦ã€å…ˆè¼©ã‚¤ãƒ™ãƒ³ãƒˆã§ã‚ã‚‹RubyKaigiã‚’å‚考ã«ã—よã†ã¨ã„ã†ã‚ã‘ã§ã€è‡ªåˆ†ã®ç†è§£ã®ãŸã‚ã«æ›¸ãã“ã¨ã«ã—ã¾ã—ãŸã€‚ ãŠã“ã¨ã‚ã‚Š ç§ã¯RubyKaigi 2022ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ãŠæ‰‹ä¼ã„ã—ã¾ã—ãŸãŒã€ã‚±ãƒ¼ãƒ–ルã®å·»ãç›´ã—ã€APã®è¨å–¶ã€æ’¤åŽæ™‚ã®è«¸ã€…を手ä¼ã£ãŸã®ã¿ã§ã™ã€‚よã£ã¦ã“ã‚Œã‹ã‚‰è¨€åŠã™ã‚‹å†…容ã«ã¤ã„ã¦ã¯ã€ä¸€èˆ¬å‚åŠ è€…ã«æ¯›ãŒç”ŸãˆãŸç¨‹åº¦ã®äº‹å‰çŸ¥è˜ã—ã‹ã‚ã‚Šã¾ã›ã‚“。 ã¾ãŸã“ã‚Œã‹ã‚‰èªã¿è§£ãコードã«ãŠã„ã¦ã€ã‚³ãƒ¡ãƒ³ãƒˆã™ã‚‹å†…容ã®æ£ç¢ºæ€§ã¯ä¸€åˆ‡ãªã„ã‚‚ã®ã¨æ€ã£ã¦èªã‚“ã§ãã ã•ã„。 RubyKaigiã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ã¤ã„㦠RubyKaigiã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ãŠã‘ã‚‹L
1
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
{{#tags}}- {{label}}
{{/tags}}