[B! è„†å¼±æ€§] haganeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hagane id:hagane

è„†å¼±æ€§ã«é–¢ã™ã‚‹haganeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚¤ãƒ³ãƒ†ãƒ«ã¨ARMã®CPUã«è„†å¼±æ€§ã€ŒSpectre-v2ã€ã®æ‚ªå¤¢å†ã³ã€æ–°ãŸãªæ”»æ’ƒæ‰‹æ³•
2017å¹´ã€ã‚¤ãƒ³ãƒ†ãƒ«ã‚„ARMã®CPUã«æƒ…å ±çªƒå–ã®è„†å¼±æ€§ãŒå˜åœ¨ã™ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ãŸã€‚é€šå¸¸ã€CPUã®ãƒ—ãƒã‚»ã‚¹ã¯ã»ã‹ã®ãƒ—ãƒã‚»ã‚¹ã®å‡¦ç†ã—ã¦ã„ã‚‹ãƒ‡ãƒ¼ã‚¿ã‚’èªã¿å–ã‚‹ã“ã¨ã¯ã§ããªã„ä»•çµ„ã¿ã«ãªã£ã¦ã„ã‚‹ãŒã€ã‚ã‚‹æ©Ÿèƒ½ã‚’æ‚ªç”¨ã™ã‚‹ã“ã¨ã§å®Ÿè¡Œä¸ã®ãƒ—ãƒã‚»ã‚¹ã‹ã‚‰æœ¬æ¥ã¯å…¥æ‰‹ã§ãã¦ã¯ã„ã‘ãªã„ãƒ‡ãƒ¼ã‚¿ã‚’çªƒå–ã§ãã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ãŸã€‚ã“ã®ä»•çµ„ã¿ã‚’æ‚ªç”¨ã—ã¦è¤‡æ•°ã®æ”»æ’ƒæ‰‹æ³•ãŒé–‹ç™ºã•ã‚ŒãŸãŒã€ã€ŒSpectre-v2 (ã¾ãŸã¯BTI: Branch Target Injectio)ã€ã¨å‘¼ã°ã‚Œã‚‹æ‰‹æ³•ãŒæœ€ã‚‚å±é™ºãªæ”»æ’ƒæ–¹æ³•ã¨èªè˜ã•ã‚Œã¦ã„ã‚‹ã€‚ ã“ã‚Œã‚‰è„†å¼±æ€§ã«å¯¾ã—ã¦ã€ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ å´ãŒå¯¾ç–ã‚’å°Žå…¥ã—ãŸã»ã‹ã€CPUãƒ¡ãƒ¼ã‚«ãƒ¼ãŒãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ç·©å’Œç–ï¼ˆeIBRSã‚„CSV2ãªã©ï¼‰ã‚’å°Žå…¥ã—ãŸã€‚ã“ã®ç·©å’Œç–ã¯æ„å›³ã—ãŸé€šã‚Šã«æ©Ÿèƒ½ã™ã‚‹ãŒã€ã©ã†ã‚„ã‚‰ç ”ç©¶è€…ã¯ã“ã®æ”»æ’ƒæ‰‹æ³•ã‚’å¾©æ´»ã•ã›ã‚‹ã“ã¨ã«æˆåŠŸã—ãŸã‚ˆã†ã ã€‚ ç ”ç©¶è€…ã‚‰ã¯ã€ŒBranch History Injection
hagane 2022/03/13
ã¾ãŸã‚¤ãƒ³ãƒ†ãƒ«ã£ã¦ã ã‘ã§ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹è½ã¡ã‚‹ã®ã‹ãªï¼Ÿ

è„†å¼±æ€§

CPU
ãƒªãƒ³ã‚¯
Engadget | Technology News & Reviews
Parrots in captivity seem to enjoy video-chatting with their friends on Messenger
hagane 2019/10/16
ã¡ã‚ƒã‚“ã¨é‹ç”¨ã—ã¦ã„ã‚‹ã¨ã“ã‚ã«ã¯è‡´å‘½çš„ãªè„†å¼±æ€§ã€é©å½“ã¨ã„ã†ã‹å¤§å¤šæ•°ã¨ã„ã†ã‹ã€rootã«ãªã‚‹ãŸã‚ã ã‘ã«ä½¿ã£ã¦ã‚‹ã¨ã“ã‚ã«ã¯ã‚ã‚“ã¾ã‚Šé–¢ä¿‚ã®ç„¡ã„è„†å¼±æ€§ã¨ã„ã†æ„Ÿã˜ã«è¦‹ãˆã‚‹ã€‚

Linux

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Rubyã‚„Rubyã®OSSã®è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ãŸè©± - ooooooo_qã®æ—¥è¨˜
ã“ã®è¨˜äº‹ã¯Ruby Advent Calendar 2018 - Qiitaã®23æ—¥ç›®ã§ã™ã€‚ ä»Šå¹´ã¯Rubyã‚„OSSã®è„†å¼±æ€§ã‚’ã„ã‚ã„ã‚æŽ¢ã—ã¦ã„ãŸã®ã§ã€ãã®æ„Ÿæƒ³ã‚’ã€‚ Ruby (Cruby) Tmpã§ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ« Dirã§ã®NULæ–‡å—ã®æ‰±ã„ã®å•é¡Œ UNIX ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚½ã‚±ãƒƒãƒˆã§ã®NULæ–‡å— Ruby 2.6ã§ã®æŒ™å‹•å¤‰æ›´ Dir[]ã§ã®NULæ–‡å—ã«ã¤ã„ã¦ Rubygems rubygems 65534å€åŠ¹çŽ‡çš„ãªãƒ–ãƒ«ãƒ¼ãƒˆãƒ•ã‚©ãƒ¼ã‚¹ minitarã§ã®Kernel.open*2 geminabox Discourse Heroku Rails pgã§ã®NULæ–‡å— Active Storageã§ã®XSS å ±å¥¨é‡‘ æ„Ÿæƒ³ Rubyã«è©³ã—ããªã£ãŸ è„†å¼±æ€§ã¨ã—ã¦ã®åˆ¤å®š è‡ªåˆ†ãŒä½¿ã†ã‚‚ã®ã‚’å®‰å…¨ã«ã™ã‚‹ ã¾ãšã¯Rubyã‹ã‚‰ Ruby (Cruby) techlife.cookpad.com æ˜¨å¹´å…¬é–‹ã•ã‚ŒãŸ
hagane 2018/12/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
XACKã€è‡ªç¤¾é–‹ç™ºã§OSSç”±æ¥ã®è„†å¼±æ€§ã‚’å»ƒã—ãŸå°åž‹ã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ã®DNSã‚µãƒ¼ãƒãƒ¼ | IT Leaders
IT Leaders ãƒˆãƒƒãƒ— ï¼ž ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ä¸€è¦§ ï¼ž ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ï¼ž æ–°è£½å“ãƒ»ã‚µãƒ¼ãƒ“ã‚¹ ï¼ž XACKã€è‡ªç¤¾é–‹ç™ºã§OSSç”±æ¥ã®è„†å¼±æ€§ã‚’å»ƒã—ãŸå°åž‹ã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ã®DNSã‚µãƒ¼ãƒãƒ¼ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯è¨˜äº‹ä¸€è¦§ã¸ [æ–°è£½å“ãƒ»ã‚µãƒ¼ãƒ“ã‚¹] XACKã€è‡ªç¤¾é–‹ç™ºã§OSSç”±æ¥ã®è„†å¼±æ€§ã‚’å»ƒã—ãŸå°åž‹ã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ã®DNSã‚µãƒ¼ãƒãƒ¼ 2017å¹´9æœˆ28æ—¥(æœ¨)æ—¥å· ä½³ä¸‰ï¼ˆIT Leadersç·¨é›†éƒ¨ï¼‰ ãƒªã‚¹ãƒˆ XACKã¯2017å¹´9æœˆ28æ—¥ã€è‡ªç¤¾é–‹ç™ºã§ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’å…¬é–‹ã—ã¦ã„ãªã„DNSã‚µãƒ¼ãƒãƒ¼ã€ŒXACK DNS TM200ã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ã€ãŠã‚ˆã³DHCPã‚µãƒ¼ãƒãƒ¼æ©Ÿã€ŒXACK DHCP TM200ã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ã€ã‚’ç™ºè¡¨ã—ãŸã€‚è²©å£²å…ƒã¯ã‚¨ãƒ•ã‚¿ã‚¤ãƒ ã§ã€2017å¹´10æœˆ1æ—¥ã‹ã‚‰è²©å£²ã™ã‚‹ã€‚ä¾¡æ ¼ï¼ˆç¨Žåˆ¥ï¼‰ã¯ã„ãšã‚Œã‚‚3å¹´é–“ã®ä¿å®ˆæ–™ã‚’å«ã‚“ã§98ä¸‡å††ã‹ã‚‰ã€‚ å†™çœŸ1ï¼šHPE ProLiant Thin Micro TM200ã®å¤–è¦³ï¼ˆ
hagane 2017/10/01
ã¡ã‚‡ã£ã¨ã§ã‚‚GPLç”±æ¥ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãŒæ··å…¥ã—ã¦ãªã„ã‹ã¨ã‹ã€ã™ã”ãæ°—ã«ãªã‚‹ã€‚

ã‚µãƒ¼ãƒãƒ¼

è„†å¼±æ€§

ãƒã‚¿
ãƒªãƒ³ã‚¯
Linuxã‚’ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã•ã›ã‚‰ã‚Œã‚‹ãƒã‚°ãŒæ¨©é™æ˜‡æ ¼ã®ãƒã‚°ã«é€²åŒ–ã—ãŸä»¶ - ãƒ–ãƒã‚° - ãƒ¯ãƒ«ãƒ–ãƒªãƒƒã‚¯ã‚¹æ ªå¼ä¼šç¤¾
ä»Šæœˆã®åˆã‚ã«å…¬è¡¨ã•ã‚Œã¦ã„ãŸã€ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒ Linuxã‚·ã‚¹ãƒ†ãƒ ã‚’ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã•ã›ã¦ã—ã¾ãˆã‚‹ãƒã‚° CVE-2014-9090 ãŒå®Ÿã¯ rootæ¨©é™ã®å¥ªå–ã«ã‚‚ä½¿ãˆã‚‹ã“ã¨ãŒã‚ã‹ã‚Š CVE-2014-9322 ã«é€²åŒ–ã—ã¦ã„ã¾ã™ã€‚ CVE-2014-9090ã®æ—¥æœ¬èªžæƒ…å ±ã¯ã“ã¡ã‚‰ã€‚ Linux Kernel ã® arch/x86/kernel/traps.c å†…ã® do_double_fault é–¢æ•°ã«ãŠã‘ã‚‹ã‚µãƒ¼ãƒ“ã‚¹é‹ç”¨å¦¨å®³ (DoS) ã®è„†å¼±æ€§ è¦ã™ã‚‹ã«ã€64bitç‰ˆã® Linuxã§ã¯ç®¡ç†è€…æ¨©é™ã‚’æŒãŸãªã„ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã€Œã‚ã–ã¨ã€ã‚·ã‚¹ãƒ†ãƒ ã‚’ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã•ã›ã¦ã—ã¾ã†ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚å¯¾è±¡ã¨ãªã‚‹ã®ã¯ x86_64ç”¨ Linuxã‚«ãƒ¼ãƒãƒ«ã® ä»Šã¾ã§ã®å…¨ã¦ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã™ã€‚ ã„ã¾å‹•ã„ã¦ã‚‹LinuxãŒ 32bitã‹64bitã‹ã‚ˆãã‚ã‹ã‚‰ãªã„å ´åˆã¯ uname -m ã¨å…¥åŠ›ã—ã¦ i686ã¨å‡ºã‚Œã° 32bitã€
hagane 2014/12/19
ã¤ã‚‰ã„

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
1