[B! security][browser] june29ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

june29 id:june29

securityã¨browserã«é–¢ã™ã‚‹june29ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ç‰§æŒçš„ Cookie ã®çµ‚ç„‰ | blog.jxck.io
Intro Cookie ã¯ã€ãƒ–ãƒ©ã‚¦ã‚¶ã«ä¸€åº¦ä¿å˜ã™ã‚Œã°ã€æ¬¡ã‹ã‚‰ãã®å€¤ã‚’è‡ªå‹•çš„ã«é€ã£ã¦ãã‚‹ã¨ã„ã†ã€éžå¸¸ã«éƒ½åˆã®è‰¯ã„ä»•æ§˜ã‹ã‚‰å§‹ã¾ã£ãŸã€‚ State Less ãŒåŸºæœ¬ã ã£ãŸ Web ã«ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æ¦‚å¿µã‚’ã‚‚ãŸã‚‰ã—ã€ä»Šã§ã¯ã“ã‚ŒãŒç„¡ã‘ã‚Œã°å®Ÿç¾ã§ããªã„ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã®æ–¹ãŒå¤šã„ã€‚ å†·é™ã«è€ƒãˆã‚Œã°ãµã–ã‘ã¦ã‚‹ã¨ã—ã¦æ€ãˆãªã„ãƒ˜ãƒƒãƒ€åã‹ã‚‰ã‚‚ã‚ã‹ã‚‹ã‚ˆã†ã«ã€å½“åˆã¯ã“ã®ãƒ˜ãƒƒãƒ€ãŒã“ã‚“ãªã«é‡å®ã•ã‚Œã€ Web ã®ã‚ã‚Šæ–¹ã‚’å¤‰ãˆã‚‹ã‹ã‚‚ã—ã‚Œãªã„ãã‚‰ã„é‡è¦ãªè°è«–ã‚’å·»ãèµ·ã“ã™ã“ã¨ã«ãªã‚‹ã¨ã¯ã€æœ€åˆã®å®Ÿè£…è€…ã‚‚æ€ã£ã¦ãªã‹ã£ãŸã ã‚ã†ã€‚ ãã‚“ãª Cookie ãŒä»Šã©ã†ä½¿ã‚ã‚Œã€ 3rd Party Cookie (3rdPC) ã®ä½•ãŒå•é¡Œã«ãªã£ã¦ã„ã‚‹ã®ã‹ã‚’è¸ã¾ãˆã€ã“ã‚Œã‹ã‚‰ã©ã†ãªã£ã¦ã„ãã®ã‹ã«ã¤ã„ã¦è€ƒãˆã‚‹ã€‚ Cookie ã®ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ Web ã«ã‚ã‚‹ API ã®ä¸ã§ã‚‚ Cookie ã¯ã„ãã¤ã‹ã®ç‚¹ã§ç‰¹ç•°ãªæŒ™å‹•ã‚’ã™ã‚‹ ä¸€åº¦ä¿å˜ã™ã‚Œã°ã€æ¬¡ã‹ã‚‰è‡ªå‹•ã§é€ã‚‹
june29 2020/02/27
â€œãã—ã¦ã€ã“ã®å®‰å…¨ã¨ã„ã†ã‚«ãƒ†ã‚´ãƒªã«ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã ã‘ã§ãªãã€Œãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ã€ã‚‚å…¥ã£ã¦ãã¦ã‚‹ã¨ã„ã†æµã‚ŒãŒã€æ˜¨ä»Šã®è°è«–ã®å‰æèƒŒæ™¯ã¨ã—ã¦ã‚ã‚‹ã¨ç†è€…ã¯è€ƒãˆã‚‹â€

web

browser

security

cookie
ãƒªãƒ³ã‚¯
Google Chrome EVè¡¨ç¤ºã®çµ‚ç„‰ - ã¼ã¡ã¼ã¡æ—¥è¨˜
1. Chrome ã§EVè¨¼æ˜Žæ›¸ã®çµ„ç¹”åè¡¨ç¤ºãŒãªããªã‚‹ ã¤ã„ã«Googleã‹ã‚‰Chromeã®URLãƒãƒ¼ã‹ã‚‰EVè¡¨ç¤ºã‚’å‰Šé™¤ã™ã‚‹æ£å¼ãªã‚¢ãƒŠã‚¦ãƒ³ã‚¹ãŒå‡ºã¾ã—ãŸã€‚ Upcoming Change to Chrome's Identity Indicators EV UI Moving to Page Info ç¾åœ¨(2019å¹´8æœˆ) Stableã®Chrome76ã§ã¯ã€ä»¥ä¸‹ã®æ§˜ã«URLãƒãƒ¼å·¦å´ã«EVè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã“ã¨ã‚’ç¤ºã™ã€Œçµ„ç¹”å+å›½åã€è¡¨ç¤ºãŒä»˜ã„ã¦ã„ã¾ã™ã€‚ Chrome76ã®EVè¡¨ç¤º 2019å¹´9æœˆ10æ—¥Stableãƒªãƒªãƒ¼ã‚¹äºˆå®šã®Chrome77ã‹ã‚‰ã¯EVè¡¨ç¤ºãŒURLãƒãƒ¼ã‹ã‚‰å‰Šé™¤ã•ã‚Œã€éµã‚¢ã‚¤ã‚³ãƒ³ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ã¦è¡¨ç¤ºã•ã‚Œã‚‹Page Infoã«ã€Œçµ„ç¹”åï¼‹å›½åã€ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ Googleã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã§ã¯ã€ "on certain websites" ã¨æ›¸ã„ã¦ã‚ã‚‹ã“ã¨ã‹ã‚‰ä¸€æ°—ã«ã§ã¯ãªã
june29 2019/08/13
security

browser
ãƒªãƒ³ã‚¯
Engadget | Technology News & Reviews
Nintendo Switch 2: Everything we know about the coming release
june29 2019/02/20
çŸ¥ã‚‰ãªã„ã“ã¨ãŒã„ãã¤ã‚‚ã‚ã£ãŸã€‚ãªã‚‹ã»ã©ã€‚

browser

security
ãƒªãƒ³ã‚¯
äººé–“ã®ç›®ã§è¦‹æŠœã‘ãªã„URLå½è£…ãŒãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºã«æ‚ªç”¨ã•ã‚Œã‚‹å¯èƒ½æ€§ã€Firefoxã§ã®å¯¾ç–ã¯ã‚³ãƒ¬
é€šä¿¡ã®å®‰å…¨ã‚’ä¿è¨¼ã™ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ«ã€ŒHTTPSã€ãŒæŽ¡ç”¨ã•ã‚Œã¦ã„ã‚‹URLã®è¡¨è¨˜ãŒæ£ã—ã‘ã‚Œã°ã€ãã‚ŒãŒæ£è¦ã‚µã‚¤ãƒˆã ã¨èªè˜ã™ã‚‹ã®ã¯è‡ªç„¶ãªã“ã¨ã§ã™ãŒã€ãƒ–ãƒ©ã‚¦ã‚¶ã®URLè¡¨è¨˜ä¸Šã‹ã‚‰ã¯è¦‹æŠœã‘ãªã„ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºã®å±é™ºæ€§ãŒæŒ‡æ‘˜ã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã®ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºã¯ã€Œhomograph attack(ãƒ›ãƒ¢ã‚°ãƒ©ãƒ•æ”»æ’ƒ)ã€ã‚’é€²åŒ–ã•ã›ãŸæ‰‹æ³•ã‚’ç”¨ã„ã¦ãŠã‚Šã€ãƒ–ãƒ©ã‚¦ã‚¶ã«å†…åœ¨ã™ã‚‹è„†å¼±æ€§ã‚’çªã„ãŸã‚‚ã®ã§ã€äººé–“ãŒç”»é¢è¡¨ç¤ºã‹ã‚‰è©æ¬ºã‚µã‚¤ãƒˆã§ã‚ã‚‹ã“ã¨ã‚’è¦‹æŠœãã“ã¨ã¯ä¸å¯èƒ½ã€‚ç¾å®Ÿå•é¡Œã¨ã—ã¦ã€Œãƒ–ãƒ©ã‚¦ã‚¶å´ã®å¯¾å¿œã‚’å¾…ã¤ã—ã‹å¯¾ç–æ³•ã¯ãªã„ã€ã¨è¨€ãˆã‚‹çŠ¶æ³ã§ã™ã€‚ This Phishing Attack is Almost Impossible to Detect On Chrome, Firefox and Opera http://thehackernews.com/2017/04/unicode-Punycode-phishing-attack.htm
june29 2017/04/19
web

browser

security
ãƒªãƒ³ã‚¯
æš®ã‚‰ã—ã«å½¹ç«‹ã¤ITã‚³ãƒ©ãƒ Chromeã‚„Safariã®è‡ªå‹•å…¥åŠ›æ©Ÿèƒ½ãŒã€ãªãœã€Œæ‚ªã„ãƒ‡ã‚¶ã‚¤ãƒ³ã€ãªã®ã‹
autofill_ui.md è¦‹ãŸç›®ã®ä¸Šã§ã€éš ã•ã‚Œã¦ã„ã‚‹ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã«å¯¾ã—ã¦ã‚‚è‡ªå‹•å…¥åŠ›ã—ã¦ã—ã¾ã†ã¨ã„ã†å•é¡ŒãŒè©±é¡Œã«ãªã£ã¦ã„ã‚‹(2017å¹´1æœˆ) https://github.com/anttiviljami/browser-autofill-phishing ã®ã ã‘ã‚Œã©ã€ã“ã®å•é¡Œã®æ´å²ã¯ã¨ã¦ã‚‚å¤ã„ã€‚è‡ªåˆ†ã‚‚èª¿æŸ»ã—ãŸã‚Šå•é¡Œã‚’å ±å‘Šã—ãŸã‚Šã—ã¦ã„ã‚‹ã®ã§ã€æŒ¯ã‚Šè¿”ã£ã¦ã¿ã‚‹ã€‚ 2012å¹´ã®è©± 2012å¹´4æœˆã®Shibuya.XSS #1 https://atnd.org/events/25689 ã§ã€Hamachiya2ãŒç™ºè¡¨ã—ãŸ http://hamachiya.com/junk/x-autocompletetype.php ã“ã®å•é¡Œã«é–¢é€£ã—ã¦ã€Œæ‰‹ã®è¾¼ã‚“ã ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã€ã‚’ä½¿ã£ã¦æƒ…å ±ã‚’ç›—ã¿å‡ºã™ãƒ‡ãƒ¢ã‚’ä½œã£ãŸã€‚ https://plus.google.com/112675818324417081103/
june29 2017/01/12
browser

usability

security

thinking
ãƒªãƒ³ã‚¯
1