[B! security] hiro_yã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hiro_y id:hiro_y

securityã«é–¢ã™ã‚‹hiro_yã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (458)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

å¾³ä¸¸æœ¬ã«è¼‰ã£ã¦ã„ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ã“ã¡ã‚‰ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã¯ä»¥ä¸‹ã®ã‚µã‚¤ãƒˆã«ã¦é–²è¦§ã„ãŸã ã‘ã¾ã™ã€‚ https://www.docswell.com/s/ockeghem/ZM6VNK-phpconf2021-spa-security ã‚·ãƒ³ã‚°ãƒ«ãƒšãƒ¼ã‚¸ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³(SPA)ã«ãŠã„ã¦ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚„ãƒˆãƒ¼ã‚¯ãƒ³ã®æ ¼ç´å ´æ‰€ã¯Cookieã‚ã‚‹ã„ã¯localStorageã®ã„ãšã‚ŒãŒè‰¯ã„ã®ã‹ãªã©ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®èª²é¡ŒãŒãƒãƒƒãƒˆä¸Šã§è°è«–ã•ã‚Œã¦ã„ã¾ã™ãŒã€æ®‹å¿µãªãŒã‚‰é–“é•ã£ãŸå‰æã«åŸºã¥ãã‚‚ã®ãŒå¤šã„ã‚ˆã†ã§ã™ã€‚ã“ã®ãƒˆãƒ¼ã‚¯ã§ã¯ã€SPAã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ§‹æˆã™ã‚‹åŸºç¤ŽæŠ€è¡“ã‚’èª¬æ˜Žã—ãŸå¾Œã€è‘—åãªãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ãªçŠ¶æ³ã¨ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®æŠ€è¡“ç†è§£ã®ç¾çŠ¶ã‚’è¸ã¾ãˆã€SPAã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ç¾å®Ÿçš„ãªæ–¹æ³•ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ å‹•ç”»ã¯ã“ã¡ã‚‰ https://www.youtube.com/watch?v=pc57hw6haXk
hiro_y 2012/04/26
security
ãƒªãƒ³ã‚¯
X-Frame-Options - HTTP | MDN
HTTPã‚¬ã‚¤ãƒ‰HTTP ã®æ¦‚è¦å…¸åž‹çš„ãª HTTP ã‚»ãƒƒã‚·ãƒ§ãƒ³HTTP ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸MIME ã‚¿ã‚¤ãƒ—ï¼ˆIANA ãƒ¡ãƒ‡ã‚£ã‚¢ç¨®åˆ¥ï¼‰HTTP ã®åœ§ç¸®HTTP ã‚ãƒ£ãƒƒã‚·ãƒ¥HTTP èªè¨¼HTTP Cookie ã®ä½¿ç”¨HTTP ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆHTTP æ¡ä»¶ä»˜ããƒªã‚¯ã‚¨ã‚¹ãƒˆHTTP ç¯„å›²ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³HTTP/1.x ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ç®¡ç†HTTP ã®é€²åŒ–ãƒ—ãƒãƒˆã‚³ãƒ«ã®ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã®ä»•çµ„ã¿ãƒ—ãƒã‚ã‚·ã‚µãƒ¼ãƒãƒ¼ã¨ãƒˆãƒ³ãƒãƒªãƒ³ã‚°HTTP ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒ’ãƒ³ãƒˆHTTP ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚µã‚¤ãƒˆã®å®‰å…¨åŒ–HTTP ObservatoryPermissions Policy Experimental ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒªã‚·ãƒ¼ (CSP)ã‚ªãƒªã‚¸ãƒ³é–“ãƒªã‚½ãƒ¼ã‚¹å…±æœ‰ (CORS)Cross-Origin Resource Policy (CORP)ãƒ˜ãƒƒãƒ€ãƒ¼ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹HTTP ãƒ˜ãƒƒãƒ€ãƒ¼AcceptAccept-CHAc
hiro_y 2012/04/21
X-Frame-Options

security

apache

nginx
ãƒªãƒ³ã‚¯
monoweb.infoÂ -Â ã“ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã¯è²©å£²ç”¨ã§ã™ï¼Â -Â monoweb ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±
ã“ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã¯è²©å£²ç”¨ã§ã™ï¼ monoweb.info ã¯ã€ã‚ãªãŸãŒãŠæŽ¢ã—ã®æƒ…å ±ã®å…¨ã¦ã®æœ€æ–°ã‹ã¤æœ€é©ãªã‚½ãƒ¼ã‚¹ã§ã™ã€‚ä¸€èˆ¬ãƒˆãƒ”ãƒƒã‚¯ã‹ã‚‰ã“ã“ã‹ã‚‰æ¤œç´¢ã§ãã‚‹å†…å®¹ã¯ã€monoweb.infoãŒå…¨ã¦ã¨ãªã‚Šã¾ã™ã€‚ã‚ãªãŸãŒãŠæŽ¢ã—ã®å†…å®¹ãŒè¦‹ã¤ã‹ã‚‹ã“ã¨ã‚’é¡˜ã£ã¦ã„ã¾ã™ï¼
hiro_y 2012/02/22
rack-protectionã«ã¤ã„ã¦

ruby

security
ãƒªãƒ³ã‚¯
GoogleãŒSafariã®è¨å®šã‚’è¿‚å›žã—ã¦ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°ã—ã¦ã„ãŸã¨ã•ã‚Œã‚‹ä»¶ã«ã¤ã„ã¦ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š
â€»ã“ã®è¨˜äº‹ã®å®Œæˆåº¦ã¯85%ãã‚‰ã„ãªã®ã§å¾Œã§è¿½è¨˜ã—ã¾ã™ã€‚ http://webpolicy.org/2012/02/17/safari-trackers/ http://online.wsj.com/article/SB10001424052970204880404577225380456599176.html http://blogs.wsj.com/digits/2012/02/16/how-google-tracked-safari-users/ åˆã‚ã›ã¦èªã¿ãŸã„ã€‚ http://trac.webkit.org/changeset/92142 https://bugs.webkit.org/show_bug.cgi?id=35824 ä¸€ç•ªä¸Šã®Jonathan Mayeræ°ã®è¨˜äº‹ã«ã¤ã„ã¦ã¯ç´”ç²‹ã«æŠ€è¡“çš„ãªãƒ¬ãƒãƒ¼ãƒˆãªã®ã§ã€ç‰¹ã«ãŠã‹ã—ãªã“ã¨ã¯æ›¸ã‹ã‚Œã¦ã„ãªã„ã€‚å…ƒã¯ã¨ã„ãˆã°Safariã®Cooki
hiro_y 2012/02/22
security
ãƒªãƒ³ã‚¯
http://blog.monoweb.info/article/2012021823.html
hiro_y 2012/02/20
X-XSS-Protectionã‚„X-Frame-Optionsã¨ã‹

security
ãƒªãƒ³ã‚¯
/ WSJæ—¥æœ¬ç‰ˆ - jp.WSJ.com - Wsj.com
é–‰ã˜ã‚‹ è¨˜äº‹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ•°ã®ã»ã‹ãƒ•ã‚§ã‚¤ã‚¹ãƒ–ãƒƒã‚¯ã‚„ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã§ã®ã‚·ã‚§ã‚¢å›žæ•°ã€ãƒ¡ãƒ¼ãƒ«ã‚’ã‚‚ã¨ã«WSJæ—¥æœ¬ç‰ˆã§æ³¨ç›®ã‚’é›†ã‚ã¦ã„ã‚‹è¨˜äº‹ã‚’ãƒ©ãƒ³ã‚ãƒ³ã‚°ã«ã¾ã¨ã‚ã¦ã„ã¾ã™
hiro_y 2012/02/20
google

ad

iphone

security
ãƒªãƒ³ã‚¯
é›£èªåŒ–ã—ã¦ã„ãªã„Androidã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯è„†å¼±æ€§ã‹
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€Androidã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦ã€é›£èªåŒ–ãŒæ–½ã•ã‚Œã¦ã„ãªã„å ´åˆã€è„†å¼±æ€§ã«ã‚ãŸã‚‹ã‹ã«ã¤ã„ã¦è°è«–ã—ã¾ã™ã€‚ ã¯ã˜ã‚ã« Androidã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯ä¸»ã«Javaè¨€èªžã§è¨˜è¿°ã•ã‚Œã€DEXå½¢å¼ã®ãƒ•ã‚¡ã‚¤ãƒ«ã«ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ã•ã‚ŒãŸã‚³ãƒ¼ãƒ‰ã‚’ã€Dalvikã¨ã„ã†Javaäº’æ›VMä¸Šã§å®Ÿè¡Œã—ã¾ã™ã€‚DEXãŠã‚ˆã³APKãƒ•ã‚¡ã‚¤ãƒ«ã®ä»•æ§˜ã¯å…¬é–‹ã•ã‚Œã¦ãŠã‚Šã€DEXã«ã¯ã‚¯ãƒ©ã‚¹ã‚„ãƒ¡ã‚½ãƒƒãƒ‰ç‰ã®ã‚·ãƒ³ãƒœãƒ«åã‚‚å«ã¾ã‚Œã¦ã„ã‚‹ãŸã‚ã€ãƒªãƒãƒ¼ã‚¹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ãŒå®¹æ˜“ã§ã‚ã‚‹ã¨è¨€ã‚ã‚Œã¦ã„ã¾ã™ã€‚ã“ã®ãŸã‚ã€Android SDKã«ã¯æ¨™æº–ã§ProGuardã¨ã„ã†é›£èªåŒ–ãƒ„ãƒ¼ãƒ«ãŒæ·»ä»˜ã•ã‚Œã¦ã„ã¾ã™ã€‚ ãã‚Œã§ã¯ã€é›£èªåŒ–ã®ç›®çš„ã¯ãã‚‚ãã‚‚ä½•ã§ã€é›£èªåŒ–ã§ãã®ç›®çš„ã¯é”æˆã•ã‚Œã‚‹ã®ã§ã—ã‚‡ã†ã‹ã€‚ é›£èªåŒ–ã®ç›®çš„ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å ´åˆã¯ã€é‡è¦ãªãƒã‚¸ãƒƒã‚¯ã¯ä¸»ã«ã‚µãƒ¼ãƒãƒ¼å´ã«å˜åœ¨ã™ã‚‹ãŸã‚ã€ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’å¤–éƒ¨ã‹ã‚‰å–å¾—ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“ã€‚ã“ã‚Œã«å¯¾ã—ã¦ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•
hiro_y 2012/02/20
security

android
ãƒªãƒ³ã‚¯
æ–‡å—ã‚³ãƒ¼ãƒ‰ã«èµ·å› ã™ã‚‹è„†å¼±æ€§ã¨ãã®å¯¾ç–ï¼ˆå¢—è£œç‰ˆï¼‰
ã“ã¡ã‚‰ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã¯ä»¥ä¸‹ã®ã‚µã‚¤ãƒˆã«ã¦é–²è¦§ã„ãŸã ã‘ã¾ã™ã€‚ https://www.docswell.com/s/ockeghem/ZM6VNK-phpconf2021-spa-security ã‚·ãƒ³ã‚°ãƒ«ãƒšãƒ¼ã‚¸ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³(SPA)ã«ãŠã„ã¦ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚„ãƒˆãƒ¼ã‚¯ãƒ³ã®æ ¼ç´å ´æ‰€ã¯Cookieã‚ã‚‹ã„ã¯localStorageã®ã„ãšã‚ŒãŒè‰¯ã„ã®ã‹ãªã©ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®èª²é¡ŒãŒãƒãƒƒãƒˆä¸Šã§è°è«–ã•ã‚Œã¦ã„ã¾ã™ãŒã€æ®‹å¿µãªãŒã‚‰é–“é•ã£ãŸå‰æã«åŸºã¥ãã‚‚ã®ãŒå¤šã„ã‚ˆã†ã§ã™ã€‚ã“ã®ãƒˆãƒ¼ã‚¯ã§ã¯ã€SPAã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ§‹æˆã™ã‚‹åŸºç¤ŽæŠ€è¡“ã‚’èª¬æ˜Žã—ãŸå¾Œã€è‘—åãªãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ãªçŠ¶æ³ã¨ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®æŠ€è¡“ç†è§£ã®ç¾çŠ¶ã‚’è¸ã¾ãˆã€SPAã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ç¾å®Ÿçš„ãªæ–¹æ³•ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ å‹•ç”»ã¯ã“ã¡ã‚‰ https://www.youtube.com/watch?v=pc57hw6haXk
hiro_y 2012/02/17
php

security

encoding
ãƒªãƒ³ã‚¯
ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§SSLã‚’ä½¿ã‚ãªã„ã®ã¯è„†å¼±æ€§ã‹
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®é€šä¿¡æš—å·åŒ–ã®å¿…è¦æ€§ã«ã¤ã„ã¦è°è«–ã—ã¾ã™ã€‚ ã¯ã˜ã‚ã« å…ˆæ—¥ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ã‚»ãƒŸãƒŠãƒ¼ã‚’è´è¬›ã—ã¾ã—ãŸï¼ˆ2æœˆ8æ—¥è¿½è¨˜ã€‚è¬›æ¼”è€…ã‹ã‚‰ã®ä¾é ¼ã«ã‚ˆã‚Šã‚»ãƒŸãƒŠãƒ¼ã®ã‚µã‚¤ãƒˆã¸ã®ãƒªãƒ³ã‚¯ã‚’ã‚‚ã†ã‘ã¾ã—ãŸï¼‰ã€‚ã“ã®éš›ã«ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„…å¨ã«å¯¾ã™ã‚‹å…±é€šèªè˜ãŒã¾ã ãªã„ã¨ã„ã†èª²é¡Œã‚’æ”¹ã‚ã¦æ„Ÿã˜ã¾ã—ãŸã€‚ãã®èª²é¡Œã‚’ç—›æ„Ÿã§ããŸã¨ã„ã†ç‚¹ã§ã€ã‚»ãƒŸãƒŠãƒ¼ã¯ç§ã«ã¨ã£ã¦ã¯æœ‰ç›Šã§ã—ãŸã€‚ ã“ã®ãŸã‚ã€å½“ãƒ–ãƒã‚°ã§ã¯ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è©±é¡Œã‚’ã‚ã¾ã‚Šå–ã‚Šä¸Šã’ã¦ã„ã¾ã›ã‚“ã§ã—ãŸãŒã€ä»Šå¾Œã¯ã€ã¨ã‚Šã‚ã’ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ã¾ãšã¯ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯æš—å·åŒ–ã‚’å¿…é ˆã¨ã™ã‚‹ã¹ãã‹ã¨ã„ã†è©±é¡Œã§ã™ã€‚ã“ã®è©±é¡Œã¯ã€å‰è¨˜ã‚»ãƒŸãƒŠãƒ¼ã§ã‚‚ã¨ã‚Šã‚ã’ã‚‰ã‚Œã¦ã„ã¾ã—ãŸã€‚ æš—å·åŒ–ã®ç›®çš„ã¯ä½•ã‹ ã¾ãšã€æš—å·åŒ–ã®å¿…è¦æ€§ã‚’è«–ã˜ã‚‹ãŸã‚ã«ã¯ã€æš—å·åŒ–ã®ç›®çš„ã‚’æ˜Žç¢ºã«ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚å‰è¨˜ã‚»ãƒŸ
hiro_y 2012/02/06
ã€Œã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å ´åˆSSLé€šä¿¡ã—ã¦ã„ã‚‹ã‹ã©ã†ã‹åˆ©ç”¨è€…ã«ã¯åˆ†ã‹ã‚‰ãªã„ãŸã‚ã€é€šä¿¡è·¯ã‚’SSLæš—å·åŒ–ã—ã¦ã„ãªã„å ´åˆã«ã¯ãã®æ—¨ã‚’å‘ŠçŸ¥ã™ã‚‹ã“ã¨ãŒæœ›ã¾ã—ã„ã€

security

iphone

android
ãƒªãƒ³ã‚¯
OAuth 2.0 Implicit Flowã‚’ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã«åˆ©ç”¨ã™ã‚‹éš›ã®ãƒªã‚¹ã‚¯ã¨å¯¾ç–æ–¹æ³•ã«ã¤ã„ã¦ #idcon - r-weblife
ãŠã¯ã‚ˆã†ã”ã–ã„ã¾ã™ã€ritouã§ã™ã€‚ ä»Šå›žã¯ã€ä¸€éƒ¨ã§å…ˆé€±è©±é¡Œãªã‚Šã¾ã—ãŸOAuth 2.0ã®Implicit Flowã«ã¤ã„ã¦ã®ã‚¨ãƒ³ãƒˆãƒªã«ãªã‚Šã¾ã™ã€‚ (2012/2/7 ã„ã‚ã„ã‚ã¨ä¿®æ£ã—ã¾ã—ãŸã€‚) å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹ | @_Nat Zone Thread Safe: The probl em with OAuth for Authentication. ä»Šå›žã¯ä»¥ä¸‹ã®å†…å®¹ã«ã¤ã„ã¦æ•´ç†ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ OAuth 2.0ã®ã©ã®æ©Ÿèƒ½ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒã‚ã‚‹ã®ã‹ èª°ãŒæ”»æ’ƒè€…ã«ãªã‚Œã‚‹ã®ã‹ å¯¾ç– OAuth 2.0 Implicit Flowã¨ã¯ OAuth 2.0ã§ã¯ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒä¿è·ãƒªã‚½ãƒ¼ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã‚’å¾—ã‚‹ãŸã‚ã®ã„ãã¤ã‹ã®ãƒ•ãƒãƒ¼ãŒå®šç¾©ã•ã‚Œã¦ã„ã¾ã™ã€‚ (ä»•æ§˜ä¸ã§ã¯Flowã‚„Grant Type
hiro_y 2012/02/06
Implicit Flowä½¿ã†å ´åˆ

oauth

security

auth

openid
ãƒªãƒ³ã‚¯
å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹
In some of the feedback I have gotten on the openID Connect spec, the statement is made that Connect is too complicated. That OAuth 2.0 is all you need to do authentication. Many point to Identity Proâ€¦ è‹±èªžèªã¿ãŸããªã„ã¨ã„ã†äººã®ãŸã‚ã«ç°¡å˜ã«è§£èª¬ã™ã‚‹ã¨â€¦ OAuth 2.0 ã® implicit flow ã‚’ä½¿ã£ã¦ã€Œèªè¨¼ã€ã‚’ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã€ã¨ã£ã¦ã‚‚å¤§ããªç©´ãŒé–‹ãã¾ã™ã€‚ ã‚«ãƒƒãƒˆï¼†ãƒšãƒ¼ã‚¹ãƒˆã‚¢ã‚¿ãƒƒã‚¯ãŒå¯èƒ½ã ã‹ã‚‰ã§ã™ã€‚ OAuth èªè¨¼ï¼Ÿã¯ã€å›³ï¼‘ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ å›³ï¼‘ OAuth èªè¨¼ï¼Ÿã®æµã‚Œ ä¸€è¦‹ã€å•é¡Œãªã•ãã†ã«è¦‹ãˆã¾ã™ã€‚ã—ã‹ã—ã€ãã‚Œã¯ã™ã¹ã¦ã®ã‚µã‚¤ãƒˆãŒã€Œè‰¯ã„ã‚µã‚¤ãƒˆã€ãªã‚‰ã°ã§ã™ã€‚ Site_A
hiro_y 2012/02/04
OAuthã¯èªå¯ã®ãŸã‚ã®ãƒ—ãƒãƒˆã‚³ãƒ«ã§èªè¨¼ç”¨ã˜ã‚ƒãªã„ã‚ˆã

security

oauth

auth
ãƒªãƒ³ã‚¯
GitHub - tkyk/mod_dosdetector-fork: A fork of mod_dosdetector http://sourceforge.net/projects/moddosdetector/
mod_dosdetector-fork This is a fork of mod_dosdetector hosted at SourceForge.net (http://sourceforge.net/projects/moddosdetector/). ã“ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¯Shinji Tanakaæ°ä½œã®Apacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«`mod_dosdetector'ã®æ”¹é€ ç‰ˆã§ã™ã€‚ã‚ªãƒªã‚¸ãƒŠãƒ«ã®mod_dosdetectorã¨åŒã˜ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ï¼ˆmod_dosdetector.cã«è¨˜è¼‰ï¼‰ã§å…¬é–‹ã•ã‚Œã¾ã™ã€‚ ã“ã®æ”¹é€ ç‰ˆã«ã¤ã„ã¦ã®ãƒã‚°å ±å‘Šã‚„è³ªå•ãªã©ã¯ã€ takayuki.3w@gmail.com å®›ã¦ã«é€ã£ã¦ãã ã•ã„ã€‚ å¿…è¦ç’°å¢ƒ ãƒãƒ¼ã‚¸ãƒ§ãƒ³1.1.0ã‚ˆã‚Šã€Apache 2.4ä»¥é™ãŒå¿…è¦ã§ã™ã€‚ Apache 2.2ã§ä½¿ç”¨ã—ãŸã„å ´åˆã¯ 1.0.0ã€€ã‚’ã€ Apache 2.0ã«ã¯ apache-2.0 ãƒ–ãƒ©
hiro_y 2012/02/02
apache

security
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ã¯å¿…è¦ã‹ã€‚
ECãƒŠãƒ“ã•ã‚“ã®Blogã‚’ç™ºç«¯ã¨ã—ãŸã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æš—å·å¼·åº¦ã‚’é«˜ã‚ã‚‹ãŸã‚ã«ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ã¯è¡Œã†ã¹ãã‹ã¨ã„ã†å°‚é–€å®¶ã®æ–¹ã®ã¤ã¶ã‚„ãã®ã¾ã¨ã‚ã€‚é€”ä¸ã‹ã‚‰ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å®šæœŸå¤‰æ›´ã¯ä¸è¦ãªã®ã‹ã«ã¤ã„ã¦ã‚‚æ´¾ç”Ÿã—ã¦ã„ã£ã¦ã„ã¾ã™ãŒã€ä¸€ç·’ã«ã¾ã¨ã‚ã¾ã—ãŸã€‚
hiro_y 2012/01/28
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ã€ã©ã“ã¾ã§ã‚„ã‚‹ã‹

security
ãƒªãƒ³ã‚¯
ModSecurityã‚’ã‚½ãƒ¼ã‚¹ã‹ã‚‰ãƒ“ãƒ«ãƒ‰ã—ã¦hashdoså¯¾ç–ã«æ´»ç”¨ã™ã‚‹
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ModSecurityã‚’ã‚½ãƒ¼ã‚¹ã‹ã‚‰ãƒ“ãƒ«ãƒ‰ã™ã‚‹æ–¹æ³•ã‚’èª¬æ˜Žã—ãŸå¾Œã€hashdoså°‚ç”¨ã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã‚’æ–½ã™æµã‚Œã‚’èª¬æ˜Žã—ã¾ã™ã€‚ ã¯ã˜ã‚ã«æ—¢ã«ModSecurityã«ã¤ã„ã¦ã¯ã€CentOS+yumãŠã‚ˆã³Ubuntu+apt-getã«ã‚ˆã‚Šå°Žå…¥ã™ã‚‹æ–¹æ³•ã‚’èª¬æ˜Žã—ã¦ã„ã¾ã™ã€‚ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ModSecurityã‚’ã‚½ãƒ¼ã‚¹ã‹ã‚‰ãƒ“ãƒ«ãƒ‰ã™ã‚‹æ–¹æ³•ã‚’èª¬æ˜Žã—ã¾ã™ã€‚ ModSecurityã®ãƒ“ãƒ«ãƒ‰ã¯ä¾å˜é–¢ä¿‚ãŒè¤‡é›‘ã§ã‚ã‚Šã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã‚ˆã£ã¦ãƒ“ãƒ«ãƒ‰æ–¹æ³•ãŒå¤‰ã‚ã‚‹ãªã©ã€é¢å€’ãªé¢ãŒã‚ã‚Šã¾ã™ã€‚ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€CentOSã¨Ubuntuã®å ´åˆã«ã¤ã„ã¦ã€å®Ÿéš›çš„ãªãƒ“ãƒ«ãƒ‰æ–¹æ³•ã‚’èª¬æ˜Žã—ã¾ã™ã€‚ æº–å‚™ã™ã‚‹ã‚‚ã® ModSecurityã¯ä»¥ä¸‹ã®ãƒ—ãƒãƒ€ã‚¯ãƒˆã«ä¾å˜ã—ã¦ã„ã¾ã™(ModSecurity HandbookP27)ã€‚ãƒ“ãƒ«ãƒ‰ã«å…ˆç«‹ã£ã¦æº–å‚™ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ Apache Porta ble Runtime(APR) APR-U
hiro_y 2012/01/28
mod_securityã‚’ãƒ“ãƒ«ãƒ‰ã—ã¦hashdoså¯¾ç–ã™ã‚‹æ–¹æ³•

security

apache
ãƒªãƒ³ã‚¯
hashdosæ”»æ’ƒã‚’mod_securityã§é˜²å¾¡ã™ã‚‹(CentOS+yumç·¨)
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€hashdoså¯¾ç–ã¨ã—ã¦ã®mod_securityã®å°Žå…¥ã¨è¨å®šã®æ–¹æ³•ã‚’èª¬æ˜Žã—ã¾ã™ã€‚CentOSç’°å¢ƒã§yumã«ã‚ˆã‚ŠApacheã‚’å°Žå…¥ã—ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã«å¯¾ã—ã¦ã€yumã«ã‚ˆã‚Šmod_securityã‚’å°Žå…¥ã™ã‚‹ã¨ã„ã†ã‚·ãƒŠãƒªã‚ªã§èª¬æ˜Žã—ã¾ã™ã€‚ ã¯ã˜ã‚ã«æ—¢ã«å½“ãƒ–ãƒã‚°ã§å ±å‘Šã®é€šã‚Šã€hashdosã¨å‘¼ã°ã‚Œã‚‹æ”»æ’ƒæ‰‹æ³•ãŒå…¬è¡¨ã•ã‚Œã¦ã„ã¾ã™ã€‚HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿åã«å¯¾ã™ã‚‹ãƒãƒƒã‚·ãƒ¥å€¤ã‚’æ•…æ„ã«åŒä¸€ã«ã—ãŸ(è¡çªã•ã›ãŸ)ã‚‚ã®ã‚’å¤šæ•°ï¼ˆæ•°ä¸‡ç¨‹åº¦ï¼‰é€ä¿¡ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€Webã‚µãƒ¼ãƒãƒ¼ã‚’æ•°åˆ†ç¨‹åº¦éŽè² è·ã«ã§ãã‚‹ã¨ã„ã†DoSæ”»æ’ƒæ‰‹æ³•ã§ã™ã€‚ã¾ã hashdosã«ã‚ˆã‚‹æ”»æ’ƒäº‹ä¾‹ã¯å ±å‘Šã•ã‚Œã¦ã„ãªã„ã‚ˆã†ã§ã™ãŒã€æ—¢ã«æ”»æ’ƒã‚³ãƒ¼ãƒ‰ï¼ˆPoCï¼‰ãŒå…¬è¡¨ã•ã‚Œã¦ã„ã‚‹ãŸã‚ã€ã„ã¤æ”»æ’ƒãŒèµ·ã“ã£ã¦ã‚‚ä¸æ€è°ã§ã¯ãªã„çŠ¶æ³ã§ã™ã€‚ PHPã‚‚å½±éŸ¿ã‚’å—ã‘ã‚‹ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã§ã‚ã‚Šã€PHP5.3.9ã§å¯¾å‡¦äºˆå®šã¨ãªã£ã¦ã„ã¾ã™ãŒã€ã¾ã PHP5.3.9ã¯ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦
hiro_y 2012/01/04
security

apache
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å¯¾ã™ã‚‹åºƒç¯„ãªDoSæ”»æ’ƒæ‰‹æ³•(hashdos)ã®å½±éŸ¿ã¨å¯¾ç–
28C3(28th Chaos Communication Congress)ã«ãŠã„ã¦ã€Effective Denial of Service attacks against web application platformsï¼ˆWebãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«å¯¾ã™ã‚‹åŠ¹æžœçš„ãªã‚µãƒ¼ãƒ“ã‚¹å¦¨å®³æ”»æ’ƒï¼‰ã¨é¡Œã™ã‚‹ç™ºè¡¨ãŒã‚ã‚Šã¾ã—ãŸï¼ˆã‚¿ã‚¤ãƒ ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«ã€è¬›æ¼”ã‚¹ãƒ©ã‚¤ãƒ‰ï¼‰ã€‚ ã“ã‚Œã«ã‚ˆã‚‹ã¨ã€PHPã‚’ã¯ã˜ã‚ã¨ã™ã‚‹å¤šãã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«å¯¾ã—ã¦ã€CPUè³‡æºã‚’æž¯æ¸‡ã•ã›ã‚‹ã‚µãƒ¼ãƒ“ã‚¹å¦¨å®³æ”»æ’ƒ(DoSæ”»æ’ƒ)ãŒå¯èƒ½ãªæ‰‹æ³•ãŒè¦‹ã¤ã‹ã£ãŸã¨ã„ã†ã“ã¨ã§ã™ã€‚ã“ã®æ”»æ’ƒã¯ã€hashdos ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚ æ¦‚è¦PHPãªã©å¤šãã®è¨€èªžã§ã¯ã€æ–‡å—åˆ—ã‚’ã‚ãƒ¼ã¨ã™ã‚‹é…åˆ—ï¼ˆé€£æƒ³é…åˆ—ã€ãƒãƒƒã‚·ãƒ¥ï¼‰ãŒç”¨æ„ã•ã‚Œã¦ãŠã‚Šã€HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚‚é€£æƒ³é…åˆ—ã®å½¢ã§æä¾›ã•ã‚Œã¾ã™ã€‚PHPã®å ´åˆã€$_GETã€$_POSTãªã©ã§ã™ã€‚ é€£æƒ³é…åˆ—ã®å®Ÿè£…ã«ã¯
hiro_y 2012/01/01
ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’ã‚„ãŸã‚‰å¢—ã‚„ã™ã“ã¨ã§æ”»æ’ƒã«ãªã£ã¦ã—ã¾ã†ã€PHPã®å ´åˆã®å¯¾ç–æ–¹æ³•ã€‚mod_securityã¨suhosinãƒ‘ãƒƒãƒã®æ¤œè¨¼

security

php
ãƒªãƒ³ã‚¯
å¤§åž£æœ¬ã‚’èªã‚“ã§ã€Œãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã€ã«ã¤ã„ã¦æ¤œè¨Žã—ãŸ - ockeghem(å¾³ä¸¸æµ©)ã®æ—¥è¨˜
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è¦³ç‚¹ã‹ã‚‰ã€ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³å®Ÿè£…ã«ã¤ã„ã¦æ¤œè¨Žã—ã¾ã™ã€‚å¤§åž£ã•ã‚“ã®æœ¬ã‚’èªã‚“ã§ã€Œå¤§åž£æµãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã«ã¤ã„ã¦å‹‰å¼·ã—ãŸçµæžœã‚’å ±å‘Šã—ã¾ã™ã€‚ ã¯ã˜ã‚ã« å¤§åž£ã•ã‚“ã®è¨˜äº‹ã€Œå…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã€ã§ã¯ã€ã€Œå…¥åŠ›ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã‚ã‚‹ã€ãŒåŠ›èª¬ã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã®è¨˜äº‹ã¯ãŠãã‚‰ãid:ajiyoshiã•ã‚“ã®ãƒ–ãƒã‚°è¨˜äº‹ã€Œå¦¥å½“æ€§ã¨ã¯ä»•æ§˜ã®æ‰€ä½œ - SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã¨ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã‚’å—ã‘ã¦ã®ã“ã¨ã ã¨æ€ã„ã¾ã™ã€‚id:ajiyoshiã•ã‚“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã€Œå¦¥å½“æ€§æ¤œè¨¼ã¯ä»•æ§˜ã®å•é¡Œã§ã‚ã£ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€ã¨æ˜Žè¨€ã•ã‚Œã¦ã„ã¾ã™ã€‚ç§ã¯id:ajiyoshiã•ã‚“ã«è¿‘ã„è€ƒãˆã‚’æŒã£ã¦ã„ã¾ã™ã®ã§ã€å¤§åž£ã•ã‚“ã®ä¸»å¼µã«ã¤ã„ã¦ã€ç§ãªã‚Šã«è€ƒãˆã¦ã¿ã¾ã—ãŸã€‚ è¨˜äº‹ã‚’æ›¸ãã«ã‚ãŸã‚Šã€å¾³ä¸¸ã®ç«‹å ´ã‚’æ˜Žç¢ºã«ã—ã¦ãŠããŸã„ã¨æ€ã„ã¾ã™ã€‚ ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã®åŸºæº–ã¯ä»•æ§˜ã®å•é¡Œ ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³
hiro_y 2011/12/27
security
ãƒªãƒ³ã‚¯
Symfony2 ã®åŠ›ã‚’å€Ÿã‚ŠãŸã‚»ã‚ãƒ¥ã‚¢é–‹ç™º (Symfony Advent Calender 2011 JP - 18æ—¥ç›®) - co3k.org
Symfony Advent Calender 2011 JP 18æ—¥ç›®ã§ã™ã€‚å‰å›žã¯ @hidenorigoto ã•ã‚“ã§ã—ãŸã€‚ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒ»ã‚¤ãƒ³ã‚¿ãƒ¼ã‚»ãƒ—ã‚·ãƒ§ãƒ³ã¯ 2.0.0 ãŒå‡ºã‚‹å‰ã®ã©ã“ã‹ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã‚ªãƒ•ã«ãªã£ã¦ç„¦ã£ãŸè¨˜æ†¶ãŒã‚ã‚Šã¾ã™ã€‚æŠ•ç¨¿å‡¦ç†ãªã©ã‚’ã—ãŸã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§ãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ©ã‚’è¦‹ã‚‹æ©Ÿä¼šãŒå¤šã„ã®ã§ã€æœ‰åŠ¹ã«ã—ã¦ãŠãã¨ä¾¿åˆ©ã§ã™ã‚ˆãã€‚ ã•ã¦ã€ 18 æ—¥ç›®ã¨ãªã‚‹ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è¦³ç‚¹ã‹ã‚‰ Symfony2 ã®æ©Ÿèƒ½ã«ã¤ã„ã¦ç°¡å˜ã«è¦³ã¦ã„ãã“ã¨ã«ã—ã¾ã™ï¼ˆæœ¬å½“ã¯ã—ã£ã‹ã‚Šè¦‹ã¦ã„ãã¤ã‚‚ã‚Šã ã£ãŸã®ã§ã™ãŒã€æ™‚é–“çš„åˆ¶ç´„ã‹ã‚‰æ€¥é½ç°¡å˜ã«ãªã‚Šã¾ã—ãŸï¼ï¼‰ã€‚ ã“ã“ã§ã¯ Symfony Standard Edition v2.0.7 ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ç›´å¾Œã®æ§‹æˆã€ä¾å˜ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’å‰æã¨ã—ã¦è§£èª¬ã—ã¾ã™ã€‚ã¾ãŸã€ Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹åŸºæœ¬çš„ãªçŸ¥è˜ã‚’æŒã£ã¦ã„ã‚‹ã“ã¨ã‚’å‰æã¨ã—ã¦èª¬æ˜Žã—ã¾ã™ã€‚
hiro_y 2011/12/18
Symfony2

symfony

php

security
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
hiro_y 2011/12/06
javascript

security
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã®æ´å²ã¨ç¾çŠ¶ Part3 åºƒå‘Šã«ãŠã‘ã‚‹åˆ©ç”¨ã€ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°ã€ã‚¿ãƒ¼ã‚²ãƒ†ã‚£ãƒ³ã‚°åºƒå‘Šã«ãŠã‘ã‚‹ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒªã‚¹ã‚¯ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š
å‰å›žã®ç¶šãã€‚ãªã‚‹ã¹ãä¸€èˆ¬äººå‘ã‘ã«æ›¸ãã¾ã™ã€‚ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã¨ã‚ã¾ã‚Šé–¢ä¿‚ã®ãªã„è©±ã‚‚æ›¸ãã¾ã™ã€‚ http://d.hatena.ne.jp/mala/20111125/1322210819 http://d.hatena.ne.jp/mala/20111130/1322668652 å‰å›žã¾ã§ã®æ¦‚è¦ ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°ç›®çš„ã®Cookieã®åˆ©ç”¨ãªã©ã‹ã‚‰ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã®åˆ©ç”¨ã¯å•é¡Œè¦–ã•ã‚ŒIE6ã§åˆ¶é™ãŒã‹ã‘ã‚‰ã‚Œã‚‹ã‚‚ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒãƒªã‚·ãƒ¼ã‚’æ˜Žç¤ºã™ã‚Œã°åˆ©ç”¨ã§ãã‚‹ã¨ã„ã†è¿‚å›žæ‰‹æ®µã‚’ç”¨æ„ã€ã—ã‹ã—ä»Šã§ã¯P3Pã¯ã‚ªãƒ¯ã‚³ãƒ³åŒ–ã€Safariã¯ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookieã®å—ã‘å…¥ã‚Œã‚’ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§æ‹’å¦ã™ã‚‹è¨å®šã‚’æŽ¡ç”¨ã—ãŸãŒä¸€åº¦å—ã‘å…¥ã‚ŒãŸCookieã¯å•ç”ç„¡ç”¨ã§é€ä¿¡ã€Mozillaé–¢ä¿‚è€…ã¯ã€Œæ®†ã©åˆæ³•çš„ãªåˆ©ç”¨ç›®çš„ã¯ãªã„ã€ã¨è¨€ã£ã¦ã„ãŸã‚‚ã®ã®æ—¢å˜Webã‚µã‚¤ãƒˆã¨ã®äº’æ›æ€§ã®ãŸã‚ã«å¤‰æ›´ã§ããšã€ãƒ–ãƒ©ã‚¦ã‚¶ã¯ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£Cookie
hiro_y 2011/12/03
security
ãƒªãƒ³ã‚¯
1 2 3 4 5 6 7 8 9 10 æ¬¡ã®ãƒšãƒ¼ã‚¸