æ¨æºæç§æ¸ã·ãªã¼ãº ãåãåããçªå£
38. Trivia 100åé¡ï¼Name the X files episode that focuses on âa hacker conâ.ï¼ãã©ããXãã¡ã¤ã«ãã®ä¸ã§âa hacker conâãé¡æã«ããã¨ãã½ã¼ãã¯ä½ï¼ï¼ 39. Trivia 100åé¡ï¼Name the X files episode that focuses on âa hacker conâ.ï¼ãã©ããXãã¡ã¤ã«ãã®ä¸ã§âa hacker conâãé¡æã«ããã¨ãã½ã¼ãã¯ä½ï¼ï¼ã¨ãããããã¿ã¤ãã«å ¨é¨è©¦ãã¦ã¿ãã°ï¼
You are accessing this page via HTTP. We recommend you using HTTPS: https://ksnctf.sweetduet.info/ ã³ã³ãã¥ã¼ã¿ã»ãã¥ãªãã£ã«é¢ããåé¡ãåºé¡ãã¾ãã ååé¡ããFLAG_123456xyzã¨ããå½¢å¼ã®çãï¼flagï¼ãæ¢ãã¦ãã ããã Twitterã§ãã°ã¤ã³ããã¨ãã©ã³ãã³ã°ã«åå ã§ãã¾ãã ctfq.u1tramarine.blue 以å¤ã¸ã®æ»æã¯ããªãã§ãã ããã Attacks are only allowed to ctfq.u1tramarine.blue. Tweet
2013/06/11ãã³ã¼ã¹ï¼å ç¥ãã£ã¦ã ãå ç¥ãã£ã¦ããè¨äºã¯ãããã¨ã¼ã¸ã§ã³ãæ§ããã°[netagent-blog.jp]ã«æ²è¼ããã¦ããè¨äºã§ãããç¾å¨ãããã¨ã¼ã¸ã§ã³ãã«å¨ç±ãã¦ããªãã©ã¤ã¿ã¼ã®è¨äºãå«ã¿ã¾ãã 6æ9æ¥ï¼æ¥ï¼ ã«æ¾æ ããããã»ãÃãã¦ãã®ããã¦ãã®è£å´ã«ã¤ã㦠2013å¹´6æ9æ¥ã«æ¾æ ããã¾ããããã¸ãã¬ããã»ãÃãã¦ãã«é¢ãã¾ãã¦ãåé¿ã大ããããã§ãã®ã§æ®å½±ã®è£å´ããç´¹ä»ãããã¾ãã ã¾ããçªçµã³ã¼ãã¼å ã®åé ã«ãç´¹ä»ããã ãã¾ããå¼ç¤¾è£½åãé²äººãã«ã¤ãã¦ã¯ãå¼ç¤¾ãã©ã®ãããªä¼ç¤¾ãªã®ããç°¡åã«ç´¹ä»ããã¨ãããã¨ã§ãè¦ããã¾ããããé²äººã¯ã¡ã¼ã«ã«ããæ¨çåæ»æãé²ãããã®è£½åã§ãã®ã§ããã®å¾ã®å¯¾æ±ºã«ã¯ä¸å使ç¨ãã¦ãã¾ããã å®éã®å¯¾æ±ºã«éãã¦é²å¾¡å´ã«æ±ããããã®ã¯ããµã¼ãã¹ããã¯ãä¿®æ£ããã°ã©ã ã®å ¨ãå½ã¦ããã¦ããªããã½ã³ã³ä¸ã§ãèå¼±æ§ã確å®ã«åå¨ãã¦ãããµã¼
ããããããªã人ã®ããã®äºåç¥è ã¤ã¡ã¼ã¸çã«ã¯ãããªãããã§ãã ã»éè¡ï¼ãã½ã³ã³ï¼ã«ãéï¼ç»åï¼ãä¿ç®¡ãã¦ããã¾ã ã»ãããçã¾ããï¼ãããã³ã°ï¼ã®ãé²ãã®ãç®çã§ã ã»ã¨ãããçªçµå´ãç¨æããéè¡ã®å»ºç©ã¯ããããï¼ãã¼ã¸ã§ã³ãå¤ãï¼ã§ã ã»ãããªå»ºç©ãªã®ã§ä¾µå ¥çµè·¯ï¼èå¼±æ§ã»ã»ãã¥ãªãã£ãã¼ã«ï¼ã ããã§ã ã»ã»ãã¥ãªãã£çã«ã¯è£ä¿®å·¥äºï¼ãããããã¦ãï¼ããããã£ããã®ã®ãçªçµãé¢ç½ããªããªãã®ã§ä¸å¯ ã»ããã§ãéè¡èªä½ã«ä¾µå ¥ãããã®ã¯è«¦ãã¦ããéãä¿åããé庫ãé ä¸ã«ãã¾ãã(TrueCryptã§æå·å) ã»ããã¦åè² éå§ãæã£ãããéè¡ã«ä¾µå ¥ããã ãã§ãçµæ§æéãããã£ã¦ããããã§ã ã»ã¨ã¯ãããããã¯èå¼±æ§ãæ®ããã¾ã¾ã®ã·ã¹ãã ã§ãããæ¡ã®å®éè¡ã«ã¯ä¾µå ¥ããã¦ãã¾ãã¾ãã ã»é庫ãè¦ã¤ãã£ã¦ãã¾ãã¾ãã ã»ã¨ãããé庫ãç ´ãã®ãé常ã«é£ããã£ããããæéå¶éãããã®ãã¢ãã â¦ã¨ã
令å3å¹´9ææ´æ° ãã¤ãã³ãã¼ï¼ç¤¾ä¼ä¿éã»ç¨çªå·å¶åº¦ï¼ã¯ä»¤å3å¹´9æ1æ¥ãããã¸ã¿ã«åºã«ç§»è»¢ãã¾ããã å¹³æ28å¹´1æ4æ¥ãã令å3å¹´8æ31æ¥ã«æ²è¼ããæ å ±ã¯ãå½ç«å½ä¼å³æ¸é¤¨ã¤ã³ã¿ã¼ãããè³æåéä¿åäºæ¥ï¼WARPï¼ãã¼ã ãã¼ã¸ã«ã¦å¾¡è¦§ããã ãã¾ãã
3æ20æ¥ã«éå½ã§çºçãã大è¦æ¨¡ãµã¤ãã¼æ»æï¼é¢é£è¨äº1ãé¢é£è¨äº2ï¼ãåæå¤çºçã«çºçãã¦ãããã¨ãããã¦ã£ã«ã¹ãç¨ãããµã¤ãã¼ããï¼ãµã¤ãã¼æ¦äºï¼ã¨ãã話ãæãæåã«ãªã£ã¦ããã çè ã¯ãä»åã®äºä»¶ã¯ãéå½ã«ãããéæ£è¦Windowsã®åå¨ãå¼ãéã«ãªã£ãã¨æ¨æ¸¬ãã¦ããããªãããã®ããã«å¤æããããé ã追ã£ã¦è§£èª¬ãã¦ãããã ã¾ãã2003å¹´ã«å¤§æµè¡ããSQL Server 2000ã«ææããSQL Slammerã¨ããã¦ã£ã«ã¹ã®åå¨ãæãåºãã¦ã»ããããã®ã¨ãã¯ãç±³å½ã¨ä¸¦ãã§éå½ã§ã大ããªé¨åã¨ãªããä¸æã¤ã³ã¿ã¼ãããã使ããªããªã©ã®å¤§æ··ä¹±ã¨ãªã£ãï¼é¢é£è¨äº3ãé¢é£è¨äº4ï¼ããã®å¤§ããªè¦å ã¯éå½å ã§å¤§éã®æµ·è³çWindowsãå©ç¨ããã¦ãããã¨ã§ãè¤æ°ã®ãµã¼ãã¼ã§é©åãªéç¨åã³ã»ãã¥ãªãã£ããããé©ç¨ããã¦ãããããã®ããéå½å ã§ã¦ã£ã«ã¹ææãä¸æ°ã«åºãããéå½å ã®ã¤ã³ã¿ã¼ããããã
ç±³å½ã®å¤§ææ¤ç´¢ãµã¼ãã¹ãã°ã¼ã°ã«ããã大æãµã¤ããå«ãè¤æ°ã®ï¼·ï½ ï½ãµã¤ãã¸ã®ã¢ã¯ã»ã¹ããããã¯ãã¦ãããã¨ãï¼æ¥ãããã£ããã°ã¼ã°ã«æ¥æ¬æ³äººã«ããã¨ãã¦ã¼ã¶ã¼ã®å®å ¨ç¢ºä¿çã®ä¸ç°ã¨ãã¦èªåã§è¡ããã¦ããã¨ããããããã¯ããã¦ãã大æãµã¤ãã«ã¯ããæ¯æ¥ï½ï½ããããã¤ãããã¥ã¼ã¹ããå«ã¾ãã¦ããããã°ã¼ã°ã«æ¥æ¬æ³äººã«ããã¨ãããã¯ãã»ã¼ããã©ã¦ã¸ã³ã°æ©è½ãã¨ããããã®ãµã¤ãã«ã¢ã¯ã»ã¹ããã¨ããã½ã³ã³ãã¹ãã¼ããã©ã³ãæ害ãåããå¯è½æ§ãããã¨å¤æããå ´åã«ãã¢ã¯ã»ã¹ããããã¯ããã¨ããããããã¤ãã£ã¦ãä½ãåé¡ã ã£ããã¯åå¥ã«ã¯èª¬æã§ããªããï¼åºå ±é¨ï¼ã¨ãããã対象ã¨ãªãã®ã¯ããã½ã³ã³ç¨ã®ã°ã¼ã°ã«æ¤ç´¢ã ãã§ãªããã¢ã³ããã¤ãä»æ§ã®ã¹ãã¼ããã©ã³ãã°ã¼ã°ã«æ¤ç´¢ã使ããã対象ã¨ãªãããï¼æ¥åå¾ã®æç¹ã§è¤æ°ãã対象ãµã¤ãã«ãæ¯æ¥ï½ï½ããããã¤ãããã¥ã¼ã¹ãã¯å«ã¾ãã¦ãããå®éã«ã°ã¼ã°ã«ã§æ¥æ¬èªæ¤ç´¢ãã¦
ã¦ã§ããã¯ããã¸ã®ãµã¼ãããããã¯ã¼ã¯ã®ãå®ãããã¦ãã yone ã§ããä»å¾ã社å ã§å®éã«ä½¿ã£ã¦ããã½ããã¦ã§ã¢ã»è¨å®ã»æ§æãªã©ã®è±ç¥èã®ãç´¹ä»ããã¦ããããã¨æã£ã¦ãã¾ããå··ã«ããæ å ±ã®åæ²ã«ãªãã¾ãããå®ç¨¼åäºä¾ã®ä¸ã¤ã¨ãã¦ãåèã«ãªãã°å¹¸ãã§ãã 1. ãéã®ããã証ææ¸ã¯è¦ããªã HTTPS ã使ã£ãã¦ã§ããµã¤ããç«ã¡ä¸ããã¨ããSSL ãµã¼ã証ææ¸å±ãããããµã¼ã証ææ¸ãè³¼å ¥ããã®ãæ®éã§ãã ã¨ããããä¼ç¤¾å ãç¹å®ã®ã¡ã³ãã¼å ã ãã§å©ç¨ãããµã¼ãã§ããã°ãå¿ ããã証ææ¸å±ãããã証ææ¸ãè³¼å ¥ããå¿ è¦ã¯ãªãã®ã§ãã ä»åã¯ã証ææ¸å±ããããè²·ããã«èªåã§è¨¼ææ¸å±ãããä½ã£ã¦èªåã§è¨¼ææ¸ãçºè¡ããHTTPS ãµã¤ããç«ã¡ä¸ããæ¹æ³ããç´¹ä»ãã¾ãã ãã®è¨¼ææ¸ã®æ£å¼å称ã¯ãèªå·±ç½²å証ææ¸ã§ãããæ¬ç¨¿ã§ã¯ãªã¬ãªã¬è¨¼ææ¸ã¨è¡¨è¨ãããã¨ã«ãã¾ãã(ç¬) 試ãã«ãããªã¬ãªã¬è¨¼ææ¸ãã§æ¤ç´¢ã
ã¾ããOpenSSLãã¤ã³ã¹ãã¼ã«ããã¦ããã¨ãã¦é²ãã¾ãã æ¬æ¥ãä¿¡é ¼ã®ããèªè¨¼å±ã«èªè¨¼ãã¦ãããã¾ãã ä»åã¯ãèªåã§èªè¨¼ããããã®èªå·±èªè¨¼å±ãä½æãã¾ãã CAã®ä½æã¯ã/usr/local/ssl/CAã«è¡ãã¾ãã ããããããã£ã¬ã¯ããªãä½æãã¦ããã¾ãã OpenSSLãã¤ã³ã¹ãã¼ã«ããã¦ãããã£ã¬ã¯ããªã«ãã miscãã£ã¬ã¯ããªã«CA.shã¨ããã¹ã¯ãªãããããã¾ãã ãã®ã¹ã¯ãªããã§èªè¨¼å±ãæ§ç¯ãããã¨ãã§ãã¾ãã CA.shãCAã®ä½æå ´æã«ã³ãã¼ãã¾ãã cp CA.sh /usr/local/ssl/CA æ§ç¯ããå ´æçãå¤æ´ããããã¹ã¯ãªãããå°ãä¿®æ£ãã¾ãã openssl.cnfã®[CA_default]-dirãåæ§ã«ä¿®æ£ãã¾ãã DAYS="-day 3650" CATOP=/usr/local/ssl/CA CAKEY=./cakey.pem CACER
2012/03/28 ãã°ã¤ã³ãå ¥åãã©ã¼ã ãªã©ãå«ã¾ããªããã¼ã¸ãå«ããWebãµã¤ãå ¨ä½ã®SSLåãæ¤è¨ãã¦ã»ããââæ¥æ¬ããªãµã¤ã³ã¯3æ28æ¥ã常æSSLï¼Always-on SSLï¼ã«é¢ãã説æä¼ãéå¬ããã ç±³ã·ãã³ãã㯠ã·ãã³ããã¯ãã©ã¹ããµã¼ãã·ãº ãããã¯ããã¼ã±ãã£ã³ã° ã·ãã¢ãã£ã¬ã¯ã¿ã¼ã®ããã»ã°ãªãã¯ãã³æ°ã¯ããWebãµã¤ãã®ã»ãã¥ãªãã£ã¯ã¯ãªãã£ã«ã«ãªåé¡ã«ãªã£ã¦ãããã¨è¿°ã¹ã主ã«2ã¤ã®æ»æã·ããªãªãããã¨èª¬æããã 1ã¤ã¯ãæ£è¦ã®Webãµã¤ããæ»æè ã«ä¹ã£åããã¦ãã¢ã¯ã»ã¹ãã¦ããã¦ã¼ã¶ã¼ã«ãã«ã¦ã§ã¢ãä»è¾¼ãã§ãã¾ãã±ã¼ã¹ããã1ã¤ã¯ãéä¿¡çµè·¯ã§çè´ããæ å ±ã«ãããªããã¾ãï¼ã»ãã·ã§ã³ãã¤ã¸ã£ãã¯ï¼ã ã ç¹ã«å¾è ã®åé¡ã«å¯¾ãããç°¡åãã¤ã³ã¹ãå¹çã«åªãã解決çãã常æSSLã ãï¼ã°ãªãã¯ãã³æ°ï¼ã¨ããããã§ã«ãFacebookãTwitterãGoogleãPay
ã¦ã¼ã¶ã¼åããã¹ã¯ã¼ãçã®æ©å¯æ å ±ãWebãã©ã¦ã¶ããå ¥åããå ´åãçè´ãããæãããããããWebãµã¼ãã¼éã®éä¿¡å 容ãæå·åããã ããã§ã¯ãWebãµã¼ãã¼ã«mod_sslãå°å ¥ãã¦ãURLãhttp://ï½ã§ã¯ãªããhttps://ï½ã§ã¢ã¯ã»ã¹ãããã¨ã«ãã£ã¦ãWebãµã¼ãã¼éã®éä¿¡å 容ãæå·åããããã«ããã ãªããWebãµã¼ãã¼ã¨ã®éä¿¡å 容ãæå·åããã«ã¯ããµã¼ãã¼è¨¼ææ¸ãçºè¡ããå¿ è¦ãããããããã§ã¯ãèªä½ãµã¼ãã¼è¨¼ææ¸ãçºè¡ãã¦åã¯ã©ã¤ã¢ã³ãã«ã¤ã³ãã¼ãããã â»ãµã¼ãã¼è¨¼ææ¸ãåã¯ã©ã¤ã³ãã¸ã¤ã³ãã¼ãããªãã¦ãæå·åéä¿¡ã¯è¡ããããã¯ã©ã¤ã¢ã³ããéä¿¡ãããã³ï¼Webãã©ã¦ã¶èµ·åæ¯ï¼ã«ã»ãã¥ãªãã£ã®è¦åã表示ããã¦ãã¾ã [root@centos ~]# cd /etc/pki/tls/certs/ãâããã£ã¬ã¯ããªç§»å [root@centos certs]# sed -i
â OpenSSLã®ã¤ã³ã¹ãã¼ã« OpenSSLã¯ããã©ã«ãã§ã¯ã/usr/local/ssl ã«ã¤ã³ã¹ãã¼ã«ããã¾ããããã©ã«ãã®ã¤ã³ã¹ãã¼ã«å ãå¤æ´ããå ´åã¯ã--openssldir ã§æå®ãã¾ããããã§ã¯ããªãã·ã§ã³ãæå®ããã«ã¤ã³ã¹ãã¼ã«ãè¡ãã¾ãã $ cd /usr/local/src $ tar xzvf openssl-0.9.7d.tar.gz $ cd openssl-0.9.7d.tar.gz $ ./config $ make $ make test $ su # make install â mod_ssl ã®çµã¿è¾¼ã¿ mod_ssl ãçµã¿è¾¼ãã«ã¯Apache ã®ã½ã¼ã¹ããã±ã¼ã¸ãç½®ãã¦ãããã£ã¬ã¯ããªã«ç§»åããåã³ã³ãã¤ã«ãã¾ããconfigure ãªãã·ã§ã³ã«ã¯ãSSLã使ããããã«ã--enable-ssl ãä»ãå ãã¾ãããã®ä»ãå¿ è¦ãªã¢ã¸ã¥ã¼ã«ãããã°å
Outbound Port 80 blocking ⽵竹 <takesako@shibuya.pm.org> http://www.janog.gr.jp/meeting/janog31/program/OP80B.html [ ] � MacBook Air â¾è¡ï¨ � [ ] � â¾è¡ï¨ â¼äºº � [ ] � â¼å ¥ � [ ] � â¼äºº � [ ] � â½¤ç¨ Google Wireshark ⾯é¢â¼äºº Firesheep � 2010 10â½æ �Firefox � �Eric Butlerâ½æ° � LAN facebook Twitter â½æ HTTP Cookie � �PoC⽰示 Firesheep â¾¯é¢ Eric  Butlerâ½æ°â½¤ç¨ Firesheep � Web �Amazon.com CNET dropbox Evernote Facebook Flickr Gith
èªåè»ã»ãã¥ãªãã£æ¤æ»ãµã¼ãã¹ å½ãµã¼ãã¹ã¯ãããã«ã¼ã¨ã³ã¸ãã¢ãã¼ã ããèªåè»ã«å¯¾ãã¦æ»æè è¦ç¹ã§ã®ä¾µå ¥ãã¹ããè¡ãã ç¾ç¶æ½å¨ãã¦ããã»ãã¥ãªãã£ã®å¼±ç¹ã調æ»ãããã¨ã«ããã製åã¨ãã¦ã®ã»ãã¥ãªãã£ã¬ãã«åä¸ãæ¯æ´ãããµã¼ãã¹ã§ãã èªåè»ã»ãã¥ãªãã£æ¤æ»ãµã¼ãã¹è©³ç´° ããã«ã¼ã¨ã³ã¸ãã¢ãã¼ã 詳細
Google2段éèªè¨¼ãè¨å®ããå¾ãiPhoneã§Gmailãåä¿¡ã§ããªããªã£ãå ´åã®å¯¾å¦æ³2012.12.26 20:308,277 ååã®ãºã¢ã¼ãã§ã¯Googleã®2段éèªè¨¼ããã»ã¹ã®è¨å®æ¹æ³ã«ã¤ãã¦åãä¸ãã¾ãããã»ãã¥ãªãã£å¼·åã®ããã«å®éã«ãã®ããã»ã¹ãè¨å®ãã¦ã¿ããã¨ãã人ãå¤ãã¨æãã¾ããç§ãå®éã«è¨å®ããã®ã§ããããã®ç´å¾ã«iPhoneã§Gmailãåä¿¡ã§ããªããªã£ã¦ãã¾ãã¾ãããGoogleã®ãã«ãåç»ãè¦ãã¨ãã¾ã 2段éããã»ã¹ã«å¯¾å¿ãã¦ããªãã¢ããªï¼ä¾ï¼iPhoneã®GmailãOutlookãªã©ã®ã¡ã¼ã©ã¼ï¼ãããããã§ããããã®ã¢ããªã§2段éèªè¨¼ããã»ã¹ãæå¹ã«ããã«ã¯ãå¥éåºæã®ãã¹ã¯ã¼ãè¨å®ãå¿ è¦ã«ãªãã¾ãã ã¨ããããã§ãããã§ã¯iPhoneã®Gmailãã¯ããã2段éèªè¨¼ããã»ã¹æªå¯¾å¿ã®ã¢ããªã§ã®è¨å®æ¹æ³ã説æãã¾ãã 1.ï½¢ã¢ããªã±ã¼ã·ã§ã³åºæã®ãã¹ã¯ã¼ã
ä»æãæãããæ¹ããã¡ã¼ã«ããã£ã¦ç§ã¯iPhoneãã¾ãã¾ãã¨è¦ã¤ãã¦ãã¾ãã¾ãããããã¯ãã®ããã°ã«ã以åç»å ´ãããä¸æµã®ç 究è ãã®ãç§ã®å¸«å ã§ãã ãããã¡ã¼ã«ã®å 容ã¯ããããªãã®ã§ãããããã¾æµ·å¤ã«ããã®ã ããåè¡ãã¦ãã人ãæ¥ç ã«ãªã£ã¦ãã¾ããæè¡ã«ãéãå¿ è¦ãªã®ã§éã£ã¦ãããªãããã¨ããå 容ã§ãã¤ã¾ãã¯è©æ¬ºã¡ã¼ã«ã§ãã ã·ã°ããã£ã¾ã§ãçä¼¼ã¦ãã¾ããã誰ãã師å ã®ã¡ã¼ã«ã¢ãã¬ã¹ãä¹ã£åã£ãã®ã§ãã### ï¼æ®µéèªè¨¼ã使ãã 師ã¯å¨å²ã«ã³ã³ãã¥ã¼ã¿ã®ã¦ã£ã¶ã¼ãã大å¢ãã¾ãã®ã§ãã£ã¨é©åã«å¯¾å¿ãã¨ããã¦ãããã®ã¨æãã¾ãã ãããä¸åº¦ã¢ã«ã¦ã³ããä¹ã£åãããã¨ãä½æé²ãå«ãã¦å¥ªããã¦ãã¾ãã¾ãã®ã§ãã¤ã¾ã§ãèªåã®ååãé¨ã£ã¦å人ã親æã«ããããè©æ¬ºã¡ã¼ã«ãéããããªã¹ã¯ãç¶ãã¾ãã ç§ã®å¨å²ã§ãä»å¹´ã«å ¥ã£ã¦Gmailãä¹ã£åããã¦ããããè©æ¬ºã¡ã¼ã«ãé£ãã§ããã¨ããã±ã¼ã¹ãè¤æ°ããã¾
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}