[B! WebæŠ€è¡“] ihokã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ihok id:ihok

WebæŠ€è¡“ã«é–¢ã™ã‚‹ihokã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Webã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã ã£ãŸã‚‰å½“ç„¶çŸ¥ã£ã¦ãŠããŸã„ã€Œ ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°å¯¾ç– ã€ã¨ã¯ï¼Ÿ | æ ªå¼ä¼šç¤¾ãƒŒãƒ¼ãƒ©ãƒœ(Nulab inc.)
ã“ã‚“ã«ã¡ã¯ã€‚Typetalkãƒãƒ¼ãƒ ã®æ°¸æ±Ÿã§ã™ã€‚ä»Šå›žã¯4æœˆã«ãƒªãƒªãƒ¼ã‚¹ã—ãŸã€Backlogã¨Typetalkã®é€£æºæ©Ÿèƒ½ã§ã‚ã‚‹ã€ŒBacklogã‚«ãƒ¼ãƒ‰ã€ã®å®Ÿè£…ã®éš›ã«è¡Œã£ãŸ ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°å¯¾ç– ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ Backlogã‚«ãƒ¼ãƒ‰ã¨ã¯ Backlogã‚«ãƒ¼ãƒ‰ã¯ã€Typetalkã®ãƒˆãƒ”ãƒƒã‚¯å†…ã«Backlogã®èª²é¡Œã‚„ã‚³ãƒ¡ãƒ³ãƒˆã‚’ã‚«ãƒ¼ãƒ‰å½¢å¼ã«ã—ã¦è¡¨ç¤ºã™ã‚‹æ©Ÿèƒ½ã§ã™ã€‚Backlogã®èª²é¡Œã‚ãƒ¼ã‚„èª²é¡Œã®URLã‚’è²¼ã‚Šä»˜ã‘ã‚‹ã ã‘ã§ã€ä»¥ä¸‹ã®ç”»åƒã®ã‚ˆã†ã«è¡¨ç¤ºã§ãã¾ã™ï¼ˆâ€»è©³ã—ã„ã”åˆ©ç”¨æ–¹æ³•ã«ã¤ã„ã¦ã¯ã“ã¡ã‚‰ã®ã€ŒTypetalkã®ãƒˆãƒ”ãƒƒã‚¯ä¸Šã§èª²é¡Œã®è©³ç´°ã‚’è¦‹ã‚‰ã‚Œã‚‹ Backlogã‚«ãƒ¼ãƒ‰ ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸï¼ã€ã‚’ã”å‚ç…§ãã ã•ã„ï¼‰ã€‚ Backlogã‚«ãƒ¼ãƒ‰ã®å®Ÿè£…ã¯ã€Typetalkã‹ã‚‰Backlogã«ç”¨æ„ã—ãŸåŸ‹ã‚è¾¼ã¿ç”¨ã®èª²é¡Œãƒšãƒ¼ã‚¸ã‚’<iframe>ã§è¡¨ç¤ºã™ã‚‹ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ã“ã®ã‚ˆã†ãªå®Ÿè£…ã«ã—ãŸã®ã¯ã€ã‚‚ã¨ã‚‚ã¨Backlogã«<if
ihok 2017/07/05
security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

web

Webåˆ¶ä½œ

ãƒŒãƒ¼ãƒ©ãƒœ

WebæŠ€è¡“

clickjacking

nulab
ãƒªãƒ³ã‚¯
PHPã®JSON HashDosã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·
4å¹´å‰ã«HashDosï¼ˆHash Collision Attackï¼‰ã«é–¢ã™ã‚‹åŠ¹çŽ‡çš„ãªæ”»æ’ƒæ–¹æ³•ãŒ28C3ã«ã¦å…¬é–‹ã•ã‚Œã€PHPã‚’å«ã‚€ä¸»è¦è¨€èªžãŒã“ã®æ”»æ’ƒã®å½±éŸ¿ã‚’å—ã‘ã‚‹ãŸã‚å¯¾ç–ã‚’å®Ÿæ–½ã—ã¾ã—ãŸã€‚ã—ã‹ã—ã€PHPä»¥å¤–ã®è¨€èªžãŒã€ãƒãƒƒã‚·ãƒ¥ãŒè¡çªã™ã‚‹ãƒ‡ãƒ¼ã‚¿ã‚’äºˆæ¸¬å›°é›£ã«ã™ã‚‹å¯¾ç–ã‚’ã¨ã£ãŸã®ã«å¯¾ã—ã¦ã€PHPã¯ã€GET/POST/COOKIEç‰ã®å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ã®å€‹æ•°ã‚’åˆ¶é™ã™ã‚‹ã¨ã„ã†å¯¾ç—‡ç™‚æ³•ã‚’å®Ÿæ–½ã—ãŸãŸã‚ã€PHPã«ã¯HashDosã«å¯¾ã™ã‚‹æ”»æ’ƒçµŒè·¯ãŒã¾ã æ®‹ã£ã¦ã„ã‚‹ã¨ã„ã†ã“ã¨ã¯ã€ä¸€éƒ¨ã®æŠ€è¡“è€…ã«ã¯çŸ¥ã‚‰ã‚Œã¦ã„ã¾ã—ãŸã€‚ä¾‹ãˆã°ã€ä»¥ä¸‹ã®æ§˜ãªã¤ã¶ã‚„ãã«ã‚‚è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã ã£ã¦ã€ hashdos è„†å¼±æ€§ã®æ™‚ã€ Python ã¨ã‹ã®è¨€èªžãŒã€å¤–éƒ¨å…¥åŠ›ã‚’ãƒãƒƒã‚·ãƒ¥ã«å…¥ã‚Œã‚‹ã¨ãã«è¡çªã‚’ç‹™ãˆãªã„ã‚ˆã†ã«å¯¾ç–ã—ãŸã®ã«ã€phpã ã‘POSTå‡¦ç†ã§å¯¾ç–ã—ãŸã‹ã‚‰ãï¼Ÿ json ã‚’å—ã‘å–ã‚‹ã‚ˆã†ãªå£ã‚‚ã£ã¦ã‚‹phpã‚¢ãƒ—ãƒªã®ã»ã¨ã‚“ã©ãŒhashdosæ®‹ã£ã¦ã‚‹ã‚“ã˜ã‚ƒãªã„
ihok 2015/10/13
PHP

JSON

programming

security

dev

guideline

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

WebæŠ€è¡“

Vulnerabilities
ãƒªãƒ³ã‚¯
å¦ç”Ÿæ™‚ä»£ã«çŸ¥ã£ã¦ãŠããŸã‹ã£ãŸWebæŠ€è¡“ã®å¦ã²ã‚™æ–¹ã®å¦ã²ã‚™æ–¹ | ãƒªãƒ–ã‚»ãƒ³ã‚¹
ã€Œãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚’å¦ã¼ã†ã¨çž¬é–“æœ€å¤§é¢¨é€Ÿçš„ã«æ„è˜ã¯é«˜ããªã‚‹ã‚‚ã®ã®ã€ä¸€äººã§ã„ã‚‹ã¨æ°—ãŒã¤ã„ãŸã‚‰ä¸€æ—¥ã‚½ã‚·ãƒ£ã‚²ã—ã¦å¤•æ–¹é ƒã«ã€Žã¾ãŸä»Šæ—¥ã‚‚å‹‰å¼·ã§ããªã‹ã£ãŸã€ã¨è‡ªå·±å«Œæ‚ªã€‚ã€ãƒ¢ãƒãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ãŒç¶šã‹ãªã„æ™‚ã®å¯¾ç–ã‚’ã¯ã˜ã‚ã€å¦ã³æ–¹ã€å¦ã¹ã‚‹ç’°å¢ƒã®ä½œã‚Šæ–¹ã‚’ã¾ã¨ã‚ã¦ã„ã¾ã™ã€‚
ihok 2015/07/10
iPhone

WebæŠ€è¡“

web

iPhone

HTTPS

apple

ActionScript

flash

ios
ãƒªãƒ³ã‚¯
PHP7ã¯ãªãœé€Ÿã„ã®ã‹
1. Why is PHP7 so fast? PHP7ã¯ ãªãœé€Ÿã„ã®ã‹ hnw ç¬¬85å›žPHPå‹‰å¼·ä¼š (2014/12/24)ç™ºè¡¨è³‡æ–™
ihok 2015/06/02
laravel

PHP

PHP7

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

slideshare

slide

è³‡æ–™

WebæŠ€è¡“

memory
ãƒªãƒ³ã‚¯
1