[B! security] htzã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

htz id:htz

securityã«é–¢ã™ã‚‹htzã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (14)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã„ã‚„ãƒ¼ã€å®¶è¨ˆç°¿ã‚¢ãƒ—ãƒªæ¥ç•Œã€ãã®ã†ã¡çµ¶å¯¾ã«ãƒ’ãƒ‰ã„äº‹ä»¶ãŒãŠãã‚‹ã¨äºˆæƒ³ã—ã¾ã™ | ãƒ„ã‚¤ãƒŠãƒ“
ã„ã‚„ãƒ¼ã€å®¶è¨ˆç°¿ã‚¢ãƒ—ãƒªæ¥ç•Œã€ãã®ã†ã¡çµ¶å¯¾ã«ãƒ’ãƒ‰ã„äº‹ä»¶ãŒãŠãã‚‹ã¨äºˆæƒ³ã—ã¾ã™ â€” Yusuke OSUMI (@ozuma5119) 2015, 6æœˆ 30 Zaimã®ä»¶ã€ãã‚‚ãã‚‚å®¶è¨ˆç°¿ã‚¢ãƒ—ãƒªã”ã¨ã(ã¨æ•¢ãˆã¦è¨€ã†)ã«ã€éŠ€è¡Œã‚„ã‚¯ãƒ¬ã‚«ã®ãƒã‚°ã‚¤ãƒ³ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥ã‚Œã¡ã‚ƒã†äººãŒã‚ã‚“ãªã«ãŸãã•ã‚“ã„ã‚‹ã“ã¨ã®æ–¹ãŒã‚ˆã£ã½ã©å•é¡Œã ã¨æ€ã† https://t.co/pidZhtUbej pic.twitter.com/jpNw41MqK0 â€” Yusuke OSUMI (@ozuma5119) 2015, 6æœˆ 28 Zaimã®ã€Œé‡‘èžæ©Ÿé–¢ã®é€£æºã€æ©Ÿèƒ½ã€æ–°ç”ŸéŠ€è¡Œã«ã„ãŸã£ã¦ã¯æš—è¨¼ç•ªå·ã¾ã§ãƒŠãƒãƒ¥ãƒ©ãƒ«ã«å…¥ã‚Œã•ã›ã‚ˆã†ã¨ã—ã¦ãã‚‹ã®ã§ã€æŽ§ãˆã‚ã«è¨€ã£ã¦ã“ã®ã‚¢ãƒ—ãƒªã¯é ãŒãŠã‹ã—ã„ã¨æ€ã† https://t.co/50guysHXIV pic.twitter.com/BQnIaUnfGo â€” Yusuke OSUMI (@ozuma5119
htz 2015/07/03
twitter

security
ãƒªãƒ³ã‚¯
[45æ—¥é–“ç„¡æ–™]ãƒ†ã‚¹ãƒˆç”¨SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ï½œGMOã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒ³ã€å…¬å¼ã€‘
ãŠç”³ã—è¾¼ã¿å‰ã®ç¢ºèªäº‹é … ãŠç”³ã—è¾¼ã¿å‰ã«ã€Œãƒªãƒã‚¸ãƒˆãƒªã€ãƒšãƒ¼ã‚¸ã«ã¦ã€Žã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒ³é›»åè¨¼æ˜Žæ›¸ã‚µãƒ¼ãƒ“ã‚¹åˆ©ç”¨ç´„æ¬¾ã€ã‚’ã”ç¢ºèªãã ã•ã„ã€‚ ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã¨ã¯ ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã¯ã€åŒã˜ãƒ‰ãƒ¡ã‚¤ãƒ³å†…ã§ã‚ã‚Œã°è¤‡æ•°ã®ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚µã‚¤ãƒˆã‚’1æžšã®è¨¼æ˜Žæ›¸ã§SSLæš—å·åŒ–é€šä¿¡ã‚’å®Ÿç¾ã„ãŸã—ã¾ã™ã€‚ ãŠå•ã„åˆã‚ã›ã‚„è³‡æ–™è«‹æ±‚ãªã©ã®ãƒ•ã‚©ãƒ¼ãƒ ã‚’ã€ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’åˆ†ã‘ã¦é‹å–¶ã—ã¦ã„ã‚‹ å•†å“è©³ç´°ãƒšãƒ¼ã‚¸ã¨æ±ºæ¸ˆç”»é¢ã¨ã‚’ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³åˆ¥ã«åˆ†ã‘ã¦é‹å–¶ã—ã¦ã„ã‚‹ æä¾›ã‚µãƒ¼ãƒ“ã‚¹åˆ¥ã«ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’åˆ†ã‘ã¦é‹å–¶ã—ã¦ã„ã‚‹ â€»IIS5.0ã§ã¯è¨¼æ˜Žæ›¸ã”åˆ©ç”¨ã«ã‚ãŸã‚Šã€ã‚µã‚¤ãƒˆã”ã¨ã«ç•°ãªã‚‹ã‚°ãƒãƒ¼ãƒãƒ«IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¨å®šã™ã‚‹å¿…è¦ãŒã”ã–ã„ã¾ã™ã€‚ãƒãƒ¼ãƒˆã‚’å¤‰æ›´ã™ã‚‹ã“ã¨ã§ã‚‚å¯¾å¿œã§ãã¾ã™ãŒã€ç’°å¢ƒã«ã‚ˆã£ã¦ã¯ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã‚‹ã“ã¨ã‚‚ã”ã–ã„ã¾ã™ã®ã§ã”æ³¨æ„ãã ã•ã„ã€‚ â€»æºå¸¯é›»è©±ã«ã¯å¯¾å¿œã—ã¦ã„ã¾ã›ã‚“ã€‚ â€»è¨¼æ˜Žæ›¸ãŒã€Œ*.example.comã€ã«ç™ºè¡Œã•ã‚Œã¦ã„ã‚‹å ´åˆã€ã€Œhttps://example
htz 2014/03/17
ssl

ios

security
ãƒªãƒ³ã‚¯
OAuthã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ã‚’ç›®çš„ã¨ã™ã‚‹æ‹¡å¼µä»•æ§˜ã‚’å°Žå…¥ã—ã¾ã—ãŸ - mixi engineer blog
ã“ã‚“ã«ã¡ã¯. ç ”ç©¶é–‹ç™ºã‚°ãƒ«ãƒ¼ãƒ— ritouã§ã™. ã ã„ã¶å‰ã®è¨˜äº‹ã§ç´¹ä»‹ã—ãŸã¨ãŠã‚Š, mixi Platformã¯æ§˜ã€…ãªãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ‡ãƒ¼ã‚¿ã‚’APIã¨ã—ã¦æä¾›ã™ã‚‹ã«ã‚ãŸã‚Š, ãƒªã‚½ãƒ¼ã‚¹ã‚¢ã‚¯ã‚»ã‚¹ã®æ¨™æº–åŒ–ä»•æ§˜ã§ã‚ã‚‹OAuth 2.0ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™. mixi PlatformãŒOAuth 2.0ã®æœ€æ–°ä»•æ§˜ã«å¯¾å¿œã—ã¾ã—ãŸ | mixi Engineers' Blog mixi Platformã‚’ã•ã‚‰ã«å®‰å…¨ã«ã”åˆ©ç”¨ã„ãŸã ããŸã‚, OAuth 2.0ã«ãŠã‘ã‚‹CSRFå¯¾ç–ã‚’ç›®çš„ã¨ã—ãŸæ‹¡å¼µä»•æ§˜ã‚’æ¤œè¨Ž, å°Žå…¥ã—ã¾ã—ãŸã®ã§ç´¹ä»‹ã—ã¾ã™. OAuth 2.0ã®èªå¯ãƒ•ãƒãƒ¼ã¨CSRF ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®æ–¹ã§ã‚ã‚Œã°, Webã‚µãƒ¼ãƒ“ã‚¹ã«å¯¾ã™ã‚‹CSRF(Cross-site Request Forgery)ã‚’ã”å˜çŸ¥ã§ã—ã‚‡ã†. CSRFæ”»æ’ƒã¨ã¯æ‚ªæ„ã®ã‚ã‚‹å¤–éƒ¨ã‚µãƒ¼ãƒ“ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚„ç‰¹å®šã®URLã¸ã®èª˜å°Žãªã©ã‚’ãã£ã‹ã‘ã¨ã—ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ„å›³
htz 2013/11/15
oauth

security

mixi
ãƒªãƒ³ã‚¯
æ¨™æº–æ•™ç§‘æ›¸ã‚·ãƒªãƒ¼ã‚º ãŠå•ã„åˆã‚ã›çª“å£
æ¨™æº–æ•™ç§‘æ›¸ã‚·ãƒªãƒ¼ã‚º ãŠå•ã„åˆã‚ã›çª“å£
htz 2013/10/15
linux

security
ãƒªãƒ³ã‚¯
ãƒãƒƒã‚«ãƒ¼é›†å›£ã®Anonymousã€ã€Œã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚’ãƒ€ã‚¦ãƒ³ã•ã›ã‚‹ã€ã¨äºˆå‘Š
Anonymousã¯3æœˆ31æ—¥ã«ã€Œã‚°ãƒãƒ¼ãƒãƒ«ãƒ–ãƒ©ãƒƒã‚¯ã‚¢ã‚¦ãƒˆä½œæˆ¦ã€ã‚’å®Ÿè¡Œã™ã‚‹ã¨äºˆå‘Šã€‚ã“ã‚Œã«å¯¾ã—ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ã¯ã€ã€Œã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ãƒ«ãƒ¼ãƒˆDNSã‚µãƒ¼ãƒã«å¯¾ã™ã‚‹DDoSæ”»æ’ƒã¯ä¸å¯èƒ½ã€ã¨äºˆæƒ³ã—ã¦ã„ã‚‹ã€‚ ãƒãƒƒã‚«ãƒ¼é›†å›£Anonymousã®åã§ã€ã€Œ3æœˆ31æ—¥ã«ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚’ãƒ€ã‚¦ãƒ³ã•ã›ã‚‹ã€ã¨äºˆå‘Šã™ã‚‹å£°æ˜ŽãŒã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«æŽ²è¼‰ã•ã‚ŒãŸã€‚ã“ã‚Œã«å¯¾ã—ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ã§ã¯ã€æ”»æ’ƒã¯äº‹å®Ÿä¸Šä¸å¯èƒ½ã ã¨äºˆæƒ³ã—ã¦ã„ã‚‹ã€‚ Anonymousã‚’åä¹—ã‚‹å£°æ˜Žã§ã¯ã€ã“ã®æ”»æ’ƒã‚’ã€Œã‚°ãƒãƒ¼ãƒãƒ«ãƒ–ãƒ©ãƒƒã‚¯ã‚¢ã‚¦ãƒˆä½œæˆ¦ã€ã¨å‘½åã€‚ã€ŒSOPAï¼ˆç±³å›½è°ä¼šã§å¯©è°ã•ã‚Œã¦ã„ã‚‹æµ·è³Šè¡Œç‚ºé˜²æ¢æ³•æ¡ˆï¼‰ã€ã‚¦ã‚©ãƒ¼ãƒ«è¡—ã€ç„¡è²¬ä»»ãªæŒ‡å°Žè€…ãã—ã¦éŠ€è¡Œå®¶ã«æŠ—è°ã™ã‚‹ãŸã‚ã€ã¨ç§°ã—ã€13ã‚ã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ãƒ«ãƒ¼ãƒˆDNSã‚µãƒ¼ãƒã‚’3æœˆ31æ—¥ã«ãƒ€ã‚¦ãƒ³ã•ã›ã‚‹ã¨å®£è¨€ã—ãŸã€‚ ã“ã‚Œã«ã‚ˆã£ã¦ã€Œèª°ã‚‚ãƒ‰ãƒ¡ã‚¤ãƒ³åã®å‚ç…§ãŒã§ããªããªã‚‹ã€‚ä¾‹ãˆã°â€œhttp://www.google.comâ€ã¨å…¥åŠ›ã—ã¦ã‚‚ã€ã‚¨
htz 2012/02/21
security
ãƒªãƒ³ã‚¯
cookieå‰Šé™¤å¾Œã‚‚è¡Œå‹•è¿½è·¡ã‚’ç¶šã‘ã‚‹ã€Œsupercookieã€ã«ç ”ç©¶è€…ãŒè¦é˜
ã‚¹ã‚¿ãƒ³ãƒ•ã‚©ãƒ¼ãƒ‰å¤§å¦ã®ç ”ç©¶è€…ã¯ã€MicrosoftãŒé‹å–¶ã™ã‚‹ã€Œlive.comã€ã‚µã‚¤ãƒˆã§supercookieã®æ‰‹æ³•ã‚’ä½¿ã£ã¦å‰Šé™¤ã—ãŸã¯ãšã®cookieãŒå†ç”Ÿã•ã‚Œã¦ã„ã‚‹ã®ãŒè¦‹ã¤ã‹ã£ãŸã¨å ±å‘Šã—ãŸã€‚ ç±³Microsoftãªã©ã®Webã‚µã‚¤ãƒˆãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã¯ç®¡ç†ã§ããªã„ã€Œsupercookieã€ã‚’ä½¿ã£ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒãƒƒãƒˆä¸Šã®è¡Œå‹•ã‚’è¿½è·¡ã—ã¦ã„ãŸã“ã¨ãŒåˆ†ã‹ã£ãŸã¨ã—ã¦ã€ç±³ã‚¹ã‚¿ãƒ³ãƒ•ã‚©ãƒ¼ãƒ‰å¤§å¦ã®ç ”ç©¶è€…ãŒãƒ–ãƒã‚°ã§èª¿æŸ»å†…å®¹ã‚’å ±å‘Šã—ãŸã€‚ ç ”ç©¶è€…ã®ã‚¸ãƒ§ãƒŠã‚µãƒ³ãƒ»ãƒ¡ã‚¤ãƒ¤ãƒ¼æ°ã«ã‚ˆã‚Œã°ã€supercookieã¨ã¯é€šå¸¸ã®cookieã‚’ä½¿ã‚ãšã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®è¡Œå‹•ã‚’è¿½è·¡ã™ã‚‹æŠ€è¡“ã®ã“ã¨ã§ã€ä¸ã«ã¯supercookieã‚’ä½¿ã£ã¦cookieã‚’ã€Œå†ç”Ÿã€ã—ã€ã€Œã‚¾ãƒ³ãƒ“cookieã€ã‚’ä½œã‚Šå‡ºã—ã¦ã„ã‚‹Webã‚µã‚¤ãƒˆã‚‚ã‚ã‚‹ã¨ã„ã†ã€‚ ã“ã®ã‚„ã‚Šæ–¹ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒè‡ªåˆ†ã®ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ã‚’å®ˆã‚‹ãŸã‚ã«cookieã‚’å‰Šé™¤ã—ãŸå¾Œã‚‚è¡Œå‹•è¿½è·¡ã‚’ç¶šã‘ã‚‹ã“ã¨ã«ãªã‚‹ãŸã‚ã€ã€Œã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚»ã‚
htz 2011/08/22
Microsoft

Security
ãƒªãƒ³ã‚¯
HTML5ã«50ä»¶ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã€æ¬§å·žæ©Ÿé–¢ãŒä¿®æ£ã‚’å‹§å‘Š
æ¬§å·žé€£åˆï¼ˆEUï¼‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿé–¢ENISAãŒæ¬¡ä¸–ä»£ä»•æ§˜ã®HTML5ã«50ä»¶ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã‚’ç™ºè¦‹ã—ã€W3Cã«å¯¾å¿œã‚’å‹§å‘Šã—ãŸã€‚ æ¬§å·žé€£åˆï¼ˆEUï¼‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿé–¢ENISAã¯8æœˆ1æ—¥ã€æ¬¡ä¸–ä»£HTMLæ¨™æº–ä»•æ§˜ã€ŒHTML5ã€ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦æ¤œè¨¼ã—ã€è¦‹ã¤ã‹ã£ãŸå•é¡Œã®ä¿®æ£ã‚’World Wide Web Consotiumï¼ˆW3Cï¼‰ã«å‹§å‘Šã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ ENISAã¯ã€HTML5ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹13ç¨®é¡žã®ä»•æ§˜ã«ã¤ã„ã¦èª¿ã¹ãŸçµæžœã€50ä»¶ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã‚’ç™ºè¦‹ã—ã€å¯¾å‡¦æ–¹æ³•ã‚’ææ¡ˆã—ãŸã€‚ å…·ä½“çš„ã«ã¯ã€é‡è¦ãªæƒ…å ±ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒä¿è·ã•ã‚Œãªã„å•é¡Œã€ãƒ•ã‚©ãƒ¼ãƒ ã«å…¥åŠ›ã—ãŸå†…å®¹ãŒæ”»æ’ƒè€…ã«æ¸¡ã£ã¦ã—ã¾ã†å•é¡Œã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒªã‚·ãƒ¼ã®è¦å®šã‚„å¼·åˆ¶ã«ã¾ã¤ã‚ã‚‹å•é¡Œã€OSã®ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³ç®¡ç†ã¨ã®æ•´åˆæ€§ã«é–¢ã™ã‚‹æ½œåœ¨çš„å•é¡Œã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«å±é™ºãªãƒªãƒ³ã‚¯ã‚’ã‚¯ãƒªãƒƒã‚¯ã•ã›ã‚‹ã€Œã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã€é˜²æ¢æŽªç½®ãŒã‹ã‚ã•ã‚Œã¦ã—ã†ã¾ã†å•é¡Œãªã©ã‚’æŒ™ã’ã¦ã„ã‚‹
htz 2011/08/10
html5

Security

W3C
ãƒªãƒ³ã‚¯
IIS Windows Server
htz 2011/07/05
ã“ã‚“ãªDBãŒã‚ã‚‹ã®ã‹ã€‚ã€‚

security

hash
ãƒªãƒ³ã‚¯
Engadget | Technology News & Reviews
The sustainable tiny home trend at CES 2025 revived my dream of building a compoundAmid the chaos of CES we got to retreat to the well-appointed calm of sustainable pods, electric trailers and EV RVs.
htz 2011/05/19
ã“ã‚Œã¯ã²ã©ã„

security
ãƒªãƒ³ã‚¯
ã¾ã ã¾ã ã‚ã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒæ³•
å‰å›žã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®ãœã„å¼±æ€§ã‚’çªãæ”»æ’ƒã®å¯¾ç–ã¨ã—ã¦ã®HTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã®æœ‰åŠ¹æ€§ã‚’è¿°ã¹ãŸã€‚ãŸã ï¼ŒHTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã ã‘ã§ã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒã‚’å®Œå…¨ã«é˜²å¾¡ã™ã‚‹ã“ã¨ã¯ã§ããªã„ã€‚ãã“ã§ä»Šå›žã¯ï¼ŒHTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã§å¯¾å‡¦ã§ããªã„ã‚¿ã‚¤ãƒ—ã®ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°æ”»æ’ƒã®æ‰‹å£ã¨ï¼Œãã®å¯¾ç–ã«ã¤ã„ã¦è§£èª¬ã™ã‚‹ã€‚ HTMLã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã§å¯¾å‡¦ã§ããªã„æ”»æ’ƒã«ã¯ï¼Œæ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚‹ã€‚ ã‚¿ã‚°æ–‡å—ã®å…¥åŠ›ã‚’è¨±å®¹ã—ã¦ã„ã‚‹å ´åˆï¼ˆWebãƒ¡ãƒ¼ãƒ«ï¼Œãƒ–ãƒã‚°ãªã©ï¼‰ CSSï¼ˆã‚«ã‚¹ã‚±ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒ»ã‚¹ã‚¿ã‚¤ãƒ«ã‚·ãƒ¼ãƒˆï¼‰ã®å…¥åŠ›ã‚’è¨±å®¹ã—ã¦ã„ã‚‹å ´åˆï¼ˆãƒ–ãƒã‚°ãªã©ï¼‰ æ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’æ˜Žç¤ºã—ã¦ã„ãªã„ã‚±ãƒ¼ã‚¹ã§UTF-7æ–‡å—ã‚³ãƒ¼ãƒ‰ã«ã‚ˆã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° <SCRIPT>ã®å†…å®¹ã‚’å‹•çš„ã«ç”Ÿæˆã—ã¦ã„ã‚‹å ´åˆ Aã‚¿ã‚°ãªã©ã®URLã‚’å‹•çš„ã«ç”Ÿæˆã—ã¦ã„ã‚‹å ´åˆæ³¨ï¼‰ ä»¥ä¸‹ã§ã¯ï¼ŒHTMLã‚¿ã‚°ã‚„CSSã®å…¥åŠ›ã‚’è¨±å®¹ã—ã¦ã„ã‚‹å ´åˆã¨ï¼Œæ–‡å—ã‚³ãƒ¼ãƒ‰ã‚’æ˜Ž
htz 2010/01/13
XSS

security
ãƒªãƒ³ã‚¯
C/C++ã‚»ã‚ãƒ¥ã‚¢ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°å…¥é–€ä¸€è¦§
CodeZineç·¨é›†éƒ¨ã§ã¯ã€ç¾å ´ã§æ´»èºã™ã‚‹ãƒ‡ãƒ™ãƒãƒƒãƒ‘ãƒ¼ã‚’ã‚¹ã‚¿ãƒ¼ã«ã™ã‚‹ãŸã‚ã®ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã€ŒDevelopers Summitã€ã‚„ã€ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ç”Ÿãã–ã¾ã‚’ãƒ–ãƒ¼ã‚¹ãƒˆã™ã‚‹ãŸã‚ã®ã‚¤ãƒ™ãƒ³ãƒˆã€ŒDevelopers Boostã€ãªã©ã€ã•ã¾ã–ã¾ãªã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã‚’ä¼ç”»ãƒ»é‹å–¶ã—ã¦ã„ã¾ã™ã€‚
htz 2010/01/05
c

security
ãƒªãƒ³ã‚¯
ãƒ•ã‚¡ã‚¤ãƒ«åã¯ã€Œå·¦ã‹ã‚‰å³ã«èªã‚€ã€ã¨ã¯é™ã‚‰ãªã„?!
ãƒ•ã‚¡ã‚¤ãƒ«åã¯ã€Œå·¦ã‹ã‚‰å³ã«èªã‚€ã€ã¨ã¯é™ã‚‰ãªã„?!ï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£Tips for Todayï¼ˆ8ï¼‰ï¼ˆ1/3 ãƒšãƒ¼ã‚¸ï¼‰ ç§ãŸã¡ã®å¸¸è˜ãŒä¸–ç•Œã§ã¯é€šç”¨ã—ãªã„ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚æ”»æ’ƒè€…ã¯ãã‚“ãªå¿ƒã®ã™ãã‚’ç‹™ã£ã¦ã€è½ã¨ã—ç©´ã‚’ä»•æŽ›ã‘ã¾ã™ã€‚ä»Šå›žã¯ãã‚Œã‚’å†èªè˜ã•ã›ã‚‹ã‹ã®ã‚ˆã†ãªæ‰‹æ³•ã¨ã€ãã®å¯¾ç–Tipsã‚’è§£èª¬ã—ã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€é£¯ç”°ã§ã™ã€‚å…ˆæ—¥ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç®¡ç†è€…ã®æ–¹ã€…ã¨ã€Œä»Šå¾Œã®ã‚¦ã‚¤ãƒ«ã‚¹å¯¾ç–ã®ã‚ã‚Šæ–¹ã€ã«ã¤ã„ã¦æ„è¦‹äº¤æ›ã‚’ã™ã‚‹æ©Ÿä¼šãŒã‚ã‚Šã¾ã—ãŸã€‚å‚åŠ è€…ã‹ã‚‰ã¯æ´»ç™ºãªæ„è¦‹ã‚„è³ªå•ã‚‚é£›ã³äº¤ã„ã€ç››ã‚Šä¸ŠãŒã‚Šã‚’è¦‹ã›ãŸæ„è¦‹äº¤æ›ä¼šã¨ãªã‚Šã¾ã—ãŸã€‚ç§è‡ªèº«ã‚‚å¤šãã®æ°—ä»˜ãã‚„å¦ã³ã‚’å¾—ã‚‹ã“ã¨ãŒã§ãã€è²´é‡ãªæ™‚é–“ã‚’éŽã”ã™ã“ã¨ãŒã§ãã¾ã—ãŸã€‚ ãã®æ„è¦‹äº¤æ›ä¼šã®ä¸ã§ã€Unicodeã®åˆ¶å¾¡æ–‡å—ã‚’åˆ©ç”¨ã—ãŸãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µåå½è£…ã®è©±é¡ŒãŒå‡ºã¾ã—ãŸã€‚ã“ã®æ‰‹æ³•ã¯ç›®æ–°ã—ã„æ‰‹æ³•ã§ã¯ãªãã€æ•°å¹´å‰ã‹ã‚‰ã™ã§ã«æŒ‡æ‘˜ã•ã‚Œã¦ã„ãŸã‚‚ã®ã§ã™ã€‚ã—ã‹ã—ã€ä¹…ã—ã¶ã‚Šã«æœ¬æ‰‹æ³•ã«ã¤ã„ã¦è°è«–ã™ã‚‹ã“
htz 2009/09/29
å½è£…æ–¹æ³•ã¯çŸ¥ã£ã¦ã„ãŸãŒã€ã“ã‚“ãªå¯¾ç–æ–¹æ³•ãŒã‚ã£ãŸã¨ã¯ã€‚ã€‚

windows

security
ãƒªãƒ³ã‚¯
WAS Forum Developer Dayã«è¡Œã£ã¦ãã¾ã—ãŸ #1 - ãƒ¢ãƒŽãƒŽãƒ•æ—¥è¨˜
7/5 Developers DAY â€“ äº‹ä»¶ã¯ç¾å ´ã§èµ·ã“ã£ã¦ã„ã‚‹â€¦â€¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ©ã‚¤ãƒ•ã‚µã‚¤ã‚¯ãƒ«ã¨ãƒžãƒ«ãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ | Web Application Security Forum - WASForum åˆå¾Œã‹ã‚‰ç§ç”¨ãŒã‚ã£ãŸã®ã§åˆå‰ã ã‘å‚åŠ ã—ã¦ãã¾ã—ãŸã€‚ æ™®æ®µè¡Œãå‹‰å¼·ä¼šã‚ˆã‚Šã‚¹ãƒ¼ãƒ„ã®äººã®å‰²åˆãŒé«˜ã‹ã£ãŸæ°—ãŒã—ã¾ã™ã€‚ ã©ã®ãƒ—ãƒ¬ã‚¼ãƒ³ã‚‚30åˆ†ã«åŽã‚ã‚‹ã«ã¯çŸã„ã¨æ„Ÿã˜ã‚‰ã‚Œã‚‹ãƒœãƒªãƒ¥ãƒ¼ãƒ ã®ç™ºè¡¨ã°ã‹ã‚Š + ç™ºè¡¨ãƒ¬ãƒ™ãƒ«ã‚‚é«˜ã‹ã£ãŸã®ã§ã€ã‚ã¾ã‚Šãƒ¡ãƒ¢ãŒè¿½ã„ã¤ã„ã¦ã„ã¾ã›ã‚“ãŒå…¬é–‹ã—ã¾ã™ã€‚ è¿½è¨˜ 1ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã«ã¾ã¨ã‚ã‚‹ã¨é•·ãã¦èªã¿ã¥ã‚‰ã„ã®ã§åˆ†å‰²ã—ã¾ã—ãŸã€‚ WAS Forum Developer Dayã«è¡Œã£ã¦ãã¾ã—ãŸ #2 - Absolute Playing! WAS Forum Developer Dayã«è¡Œã£ã¦ãã¾ã—ãŸ #3 - Absolute Playing! WAS Forum Developer Dayã«è¡Œã£
htz 2008/07/08
security

ev ssl
ãƒªãƒ³ã‚¯
ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–08ã€‘è‡ªå‹•ãƒã‚°ã‚¤ãƒ³ã‚’å®Ÿè£…ã—ãªã„ã€‚å®Ÿè£…ã™ã‚‹å ´åˆã¯æ£ã—ãå®Ÿè£…ã™ã‚‹ | gihyo.jp
ãªãœPHPã‚¢ãƒ—ãƒªã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ãŒå¤šã„ã®ã‹? ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–08ã€‘è‡ªå‹•ãƒã‚°ã‚¤ãƒ³ã‚’å®Ÿè£…ã—ãªã„ã€‚å®Ÿè£…ã™ã‚‹å ´åˆã¯æ£ã—ãå®Ÿè£…ã™ã‚‹ è‡ªå‹•ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã¯ä¾¿åˆ©ã§ã™ãŒã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®ãƒªã‚¹ã‚¯ã‚’ç¢ºå®Ÿã«å¢—åŠ ã•ã›ã¾ã™ã€‚å®‰å…¨æ€§ãŒé‡è¦ãªã‚µã‚¤ãƒˆã§ã¯è‡ªå‹•ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã¯å®Ÿè£…ã™ã¹ãã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ è‡ªå‹•ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã‚’å®Ÿè£…ã™ã‚‹å ´åˆã€æ£ã—ãå®Ÿè£…ã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ é–“é•ã£ãŸè‡ªå‹•ãƒã‚°ã‚¤ãƒ³ã®å®Ÿè£…æ–¹æ³• ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚¯ãƒƒã‚ãƒ¼ã®æœ‰åŠ¹æœŸé™ã‚’é•·ãã™ã‚‹ å›ºå®šã®è‡ªå‹•ãƒã‚°ã‚¤ãƒ³éµã‚’ã‚¯ãƒƒã‚ãƒ¼ã«ä¿å˜ã™ã‚‹ è‡ªå‹•ãƒã‚°ã‚¤ãƒ³éµã‚’ã™ã¹ã¦ã®ãƒšãƒ¼ã‚¸ã§é€ä¿¡ã™ã‚‹ è‡ªå‹•ãƒã‚°ã‚¤ãƒ³ã®å®Ÿè£…ã«ã¯ã‚»ãƒƒã‚·ãƒ§ãƒ³IDä»¥å¤–ã®äºˆæ¸¬ä¸å¯èƒ½ãªãƒ©ãƒ³ãƒ€ãƒ æ–‡å—åˆ—ã‚’åˆ©ç”¨ã—ã¾ã™ã€‚è¤‡æ•°ã®Webãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰è‡ªå‹•ãƒã‚°ã‚¤ãƒ³ã§ãã‚‹ã‚ˆã†ã—ãŸã„å ´åˆã€ãƒ¦ãƒ¼ã‚¶IDã¨è‡ªå‹•ãƒã‚°ã‚¤ãƒ³éµã€ãã®éµã®æœ‰åŠ¹æœŸé™ã‚’ä¿å˜ã—ãŸãƒ†ãƒ¼ãƒ–ãƒ«ã‚’ä½œæˆã—ã¦éµã‚’ç®¡ç†ã—ã¾ã™ã€‚ æ£ã—ã„è‡ªå‹•ãƒã‚°ã‚¤ãƒ³ã®ç–‘ä¼¼ã‚³ãƒ¼ãƒ‰ã¯æ¬¡ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ /
htz 2008/06/17
php

security

ã‚¹ã‚¯ãƒªãƒ—ãƒˆè¨€èªž

web application

webåˆ¶ä½œ

è‡ªå‹•ãƒã‚°ã‚¤ãƒ³

aut
ãƒªãƒ³ã‚¯
1