[B! Yahoo!] mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mi1kman id:mi1kman

Yahoo!ã«é–¢ã™ã‚‹mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (18)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

<script>alert("xss");</script>ã“ã‚Œã§ã‚ãªãŸã‚‚ãŠã—ã¾ã„ã§ã™ã€‚ - http://detail.chiebuku... - Yahoo!çŸ¥æµè¢‹
å¤ã„ãƒ–ãƒ©ã‚¦ã‚¶ã€Javaã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¨ã¯ã¾ã£ãŸãé–¢ä¿‚ã‚ã‚Šã¾ã›ã‚“ã€‚ ã¨ã‚Šã‚ãˆãšã€ä»Šæ—¥ã‚ã£ãŸã“ã¨ã‚’æ›¸ã„ã¦ãŠãã¾ã™ã€‚ ä»Šæ—¥ã®åˆå‰ã®æ®µéšŽã§ã¯ã€å³ã‚µã‚¤ãƒ‰ãƒãƒ¼ã«ã€Œã‚ãªãŸãŒæœ€è¿‘è¦‹ãŸQï¼†Aã€ãŒè¡¨ç¤ºã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ ç¾åœ¨ã¯è¡¨ç¤ºã™ã‚‹ãŸã‚ã®ã‚³ãƒ¼ãƒ‰ãŒå‰Šé™¤ã•ã‚Œã¦ãŠã‚Šã€è¡¨ç¤ºã•ã‚Œã¦ãŠã‚Šã¾ã›ã‚“ã€‚ ã“ã®ã€Œæœ€è¿‘è¦‹ãŸã€œã€ã«è¡¨ç¤ºã•ã‚Œã‚‹å†…å®¹ã¯ã€ã‚µãƒ¼ãƒãƒ¼å´ã§æ›¸ã„ã¦ã„ã‚‹ã®ã§ã¯ãªãã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã€ã¤ã¾ã‚Šã€InternetExplorerã‚„Chromeã€Firefoxã€Safariã®ãƒãƒ¼ã‚«ãƒ«ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã¨ã„ã†æ‰€ã«é–²è¦§å±¥æ´ãŒè²¯ã‚ã‚‰ã‚Œã¦ãŠã‚Šã€ãã‚Œã‚’è¡¨ç¤ºã™ã‚‹ã‚ˆã†ã«ãªã£ã¦ã¾ã—ãŸã€‚ ã“ã‚Œã‚’ã‚µãƒ¼ãƒãƒ¼å´ã§ã‚„ã‚ŠãŸããªã„ç†ç”±ãŒã‚ã‚‹ã®ã‹ã€é¢å€’ãã•ã‹ã£ãŸã®ã‹ã€ã“ã®æ–¹æ³•ã§ã‚‚ã¡ã‚ƒã‚“ã¨ã‚„ã‚Œã°å•é¡Œãªã„ã¨è¨€ãˆã°å•é¡Œãªã„ã®ã§ã€ãã®åˆ¤æ–ã¯å„è‡ªã«å§”ãã¾ã™ãŒã€è‡´å‘½çš„ã«é§„ç›®ã ã£ãŸã®ã¯ã€è³ªå•ã®ã‚¿ã‚¤ãƒˆãƒ«ã®ä¸ã«HTMLã®ã‚¿ã‚°ãŒæ··ã˜ã£ã¦ã„ã¦ã‚‚å¯¾å‡¦ã—ã¦ã„ãªã‹ã£ãŸãŸã‚ã€è³ªå•ã®ã‚¿ã‚¤ãƒˆãƒ«ã«æ‚ªæ„ã‚ã‚‹
mi1kman 2013/07/22
XSS

Yahoo!
ãƒªãƒ³ã‚¯
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
mi1kman 2012/08/01
è„†å¼±æ€§

Google Chrome

Yahooãƒ„ãƒ¼ãƒ«ãƒãƒ¼

Yahoo!

Safari
ãƒªãƒ³ã‚¯
ä½¿ã„å›žã—ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ç‰¹ã«æ³¨æ„ã€ç±³Yahoo!ã§ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±æµå‡º ï¼ ï¼ IT
2012/07/13 7æœˆ12æ—¥ã€ç±³Yahoo!ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æƒ…å ±ã€45ä¸‡ä»¶ä»¥ä¸ŠãŒæµå‡ºã—ãŸã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ãŸã€‚å ±é“ã«ã‚ˆã‚Œã°ã€æµå‡ºã—ãŸã®ã¯ã€ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ãƒ‘ãƒ–ãƒªãƒƒã‚·ãƒ³ã‚°ã‚µãƒ¼ãƒ“ã‚¹ã€ŒYahoo! Voicesã€ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆç´„40ä¸‡ä»¶ã€‚Yahoo!ã¯æµå‡ºã®äº‹å®Ÿã‚’èªã‚ãªãŒã‚‰ã‚‚ã€ç›—ã¾ã‚ŒãŸã®ã¯ã€ŒYahoo! Contributor Networkã€ï¼ˆæ—§Associated Contentï¼‰ã®å¤ã„ãƒ•ã‚¡ã‚¤ãƒ«ã§ã‚ã‚Šã€ã€Œæœ‰åŠ¹ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒå«ã¾ã‚Œã¦ã„ãŸã®ã¯ã“ã®ã†ã¡5ï¼…ã«æº€ãŸãªã„ã€ã¨ä¸»å¼µã—ã¦ã„ã‚‹ã€‚ ã“ã‚Œã«å…ˆç«‹ã¡ã€ã€ŒD33ds Companyã€ã¨åä¹—ã‚‹é›†å›£ãŒã€Yahoo!ã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã‚’è¡Œã£ã¦ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ã‚’å–å¾—ã—ãŸã¨ä¸»å¼µã—ã€ãƒªã‚¹ãƒˆã‚’å…¬é–‹ã—ã¦ã„ãŸã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ãƒ—ãƒ¬ãƒ¼ãƒ³ãƒ†ã‚ã‚¹ãƒˆã®çŠ¶æ…‹ã§ã€ãƒãƒƒã‚·ãƒ¥åŒ–ï¼æš—å·åŒ–ã•ã‚Œã¦ã„ãªã‹ã£ãŸã¨ã„ã†ã€‚ ã“ã®ãƒªã‚¹ãƒˆã‚’åˆ†æžã—ãŸSucuriã‚„ãƒžã‚«ãƒ•ã‚£ãƒ¼ã«ã‚ˆã‚Œã°ã€æµå‡ºã—
mi1kman 2012/07/14
Yahoo!

ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹
ãƒªãƒ³ã‚¯
ç±³ãƒ¤ãƒ•ãƒ¼ã‹ã‚‰Yahooã€Gmailã€Hotmailã€AOLç‰ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰45ä¸‡ä»¶æµå‡ºï¼ è¢«å®³ç¢ºèªæ–¹æ³•
ç±³ãƒ¤ãƒ•ãƒ¼ã‹ã‚‰Yahooã€Gmailã€Hotmailã€AOLç‰ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰45ä¸‡ä»¶æµå‡ºï¼ è¢«å®³ç¢ºèªæ–¹æ³•2012.07.13 14:00 satomi ç±³ãƒ¤ãƒ•ãƒ¼ãŒãƒãƒƒã‚«ãƒ¼é›†å›£ï½¢D33Ds Companyï½£ã«ä¾µå…¥ã•ã‚Œã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆ453,492ä»¶ã®ãƒã‚°ã‚¤ãƒ³æƒ…å ±ãŒã‚µã‚¤ãƒˆã«å…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ è‡ªåˆ†ã®ãƒ¡ãƒ¼ãƒ«ãŒå¤§ä¸ˆå¤«ã‹ã©ã†ã‹çŸ¥ã‚ŠãŸã„äººã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼šç¤¾ï½¢Sucuriï½£ã®ç¢ºèªã‚µã‚¤ãƒˆã§ãƒ¡ã‚¢ãƒ‰å…¥ã‚Œã¦ç·‘ã®ãƒœã‚¿ãƒ³æŠ¼ã—ã¦ã¿ã¦ãã ã•ã„ãã€‚å› ã¿ã«ãƒªãƒ¼ã‚¯ã—ãŸã®ã¯Yahooãƒ¡ãƒ¼ãƒ«ã ã‘ã˜ã‚ƒãªã„ã§ã™ã‚ˆï½žã€‚ ï½¢ï¼ˆSucuriã«ã‚ˆã‚‹ã¨ï¼‰Yahoo.comã®ãƒ¡ãƒ¼ãƒ«ã¯135599ä»¶ã ãŒã€ã•ã‚‰ã«Gmaill.comãŒ106185ä»¶ã€hotmail.comãŒ54393ä»¶ã€aol.comãŒ24677ä»¶ã€ msn.comãŒ6282ä»¶ãƒªãƒ¼ã‚¯ã—ã¦ã„ã‚‹ã¨ã„ã†ã€‚ï½£ï¼ˆã‚½ãƒ¼ã‚¹ï¼šTechCrunchï¼‰ Ars Technicaã«ã‚ˆã‚‹ã¨ã€ãƒãƒƒã‚«ãƒ¼é›†å›£ã¯UNIO
mi1kman 2012/07/14
Yahoo!

ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰50ä¸‡ä»¶æµå‡ºã€ãƒ¤ãƒ•ãƒ¼ãŒãƒãƒƒã‚«ãƒ¼ã®æ‰‹å£ã‚’èª¿æŸ»
ç±³ãƒ‹ãƒ¥ãƒ¼ãƒ¨ãƒ¼ã‚¯ï¼ˆNew Yorkï¼‰ã®ã‚¿ã‚¤ãƒ ã‚ºã‚¹ã‚¯ã‚¨ã‚¢ï¼ˆTimes Squareï¼‰ã«æŽ²ã’ã‚‰ã‚ŒãŸã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæ¤œç´¢å¤§æ‰‹ãƒ¤ãƒ•ãƒ¼ï¼ˆYahoo!ï¼‰ã®åºƒå‘Šï¼ˆ2008å¹´4æœˆ22æ—¥æ’®å½±ã€è³‡æ–™å†™çœŸï¼‰ã€‚(c)AFP/Getty Images/Chris Hondros ã€7æœˆ13æ—¥ AFPã€‘ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæ¤œç´¢å¤§æ‰‹ãƒ¤ãƒ•ãƒ¼ï¼ˆYahoo!ï¼‰ã¯12æ—¥ã€åŒç¤¾ã®ã‚µãƒ¼ãƒãƒ¼ã®ã²ã¨ã¤ã‹ã‚‰50ä¸‡äººåˆ†ã«è¿‘ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ç›—ã‚“ã ãƒãƒƒã‚«ãƒ¼é›†å›£ã®æ‰‹å£ã«ã¤ã„ã¦èª¿æŸ»ä¸ã ã¨ç™ºè¡¨ã—ãŸã€‚ ã€ŒD33DSã€ã¨åä¹—ã‚‹ã“ã®ãƒãƒƒã‚«ãƒ¼é›†å›£ã¯ã€æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„ãƒ•ã‚¡ã‚¤ãƒ«å†…ã«ã‚ã£ãŸå¤§é‡ã®ãƒ‡ãƒ¼ã‚¿ã‚’ãƒ¤ãƒ•ãƒ¼ã‹ã‚‰ç›—ã‚“ã§ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã«æŠ•ç¨¿ã—ã€ã€Œã“ã‚Œã¯è„…ã—ã§ã¯ãªãè¦é˜ã ã€ã¨ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’ç™ºã—ã¦ã„ãŸã€‚ ãƒ¤ãƒ•ãƒ¼ãŒç¢ºèªã—ãŸã¨ã“ã‚ã€æŠ•ç¨¿ã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã®æµå‡ºæºã¯ã€Œãƒ¤ãƒ•ãƒ¼ãƒ»ã‚³ãƒ³ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚¿ãƒ¼ãƒ»ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ï¼ˆYahoo! Contributor Networkï¼‰ã€ï¼ˆæ—§ã‚¢ã‚½ã‚·ã‚¨ãƒ¼ãƒ†
mi1kman 2012/07/14
Yahoo!

ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹
ãƒªãƒ³ã‚¯
Yahoo!ãƒ¡ãƒ¼ãƒ«
mi1kman 2012/05/29
Gmailã¿ãŸã„ã«ãƒ¡ãƒ¼ãƒ«ã®å†…å®¹ã‚’èªã‚“ã§åºƒå‘Šå‡ºã™ã£ã¦ã•

ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼

Yahoo!
ãƒªãƒ³ã‚¯
ãƒ¤ãƒ•ãƒ¼ã®ãƒã‚°ã‚¤ãƒ³ã«é–¢ã™ã‚‹å¾®å¦™ãªè¨˜äº‹ã§OpenIDã«ã‚ã‚‰ã¬ç–‘ã„ï¼Ÿ - r-weblife
ã“ã‚“ã°ã‚“ã¯ã€ritouã§ã™ã€‚ ã“ã®è¨˜äº‹ã‚’èªã¾ã‚ŒãŸæ–¹ã¯ã„ã‚‹ã§ã—ã‚‡ã†ã‹ã€‚ http://journal.mycom.co.jp/news/2011/05/19/098/index.html ä¸æ£ãƒã‚°ã‚¤ãƒ³ãŒæ€¥å¢—ã—ãŸã¨ã„ã‚ã‚Œã€æ¼ãˆã„ã—ã¦ã„ã‚‹ç–‘æƒ‘ã¾ã§å‡ºã¦ããŸãƒ¤ãƒ•ãƒ¼ã‹ã‚‰ã®å…¬å¼ã‚³ãƒ¡ãƒ³ãƒˆã‚’è§£èª¬ã™ã‚‹èª¬æ˜Žã®ã‚ˆã†ã§ã™ã€‚ ã“ã“ã§ã„ã†å…¬å¼ã‚³ãƒ¡ãƒ³ãƒˆã¨ã¯ã€ã“ã‚Œã®ã“ã¨ã§ã™ã‹ãã€‚ Yahoo! JAPAN - ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«ã®è¨˜äº‹ã‚’è¦‹ã¦ã„ãã¾ã™ã€‚ Yahoo! JAPAN IDã¯ã€åŒä¸€IDã‚’å¤–éƒ¨ã®Webã‚µãƒ¼ãƒ“ã‚¹ã§ã‚‚åˆ©ç”¨ã§ãã‚‹ã€ŒOpenIDã€ã«æº–æ‹ ã—ã¦ã„ã‚‹ã€‚Yahoo! JAPANã§ã¯ãƒã‚°ã‚¤ãƒ³ã®å±¥æ´ã‚’ç¢ºèªã§ãã‚‹ã€Œãƒã‚°ã‚¤ãƒ³å±¥æ´ã€ãƒšãƒ¼ã‚¸ãŒç”¨æ„ã•ã‚Œã¦ã„ã‚‹ãŒã€ã“ã®ç”»é¢ã«ã¯ã€å¤–éƒ¨ã®ã‚µãƒ¼ãƒã‚’çµŒç”±ã—ã¦Yahoo! JAPANã®èªè¨¼æ©Ÿèƒ½ã¸ã‚¢ã‚¯ã‚»ã‚¹ã‚’è¡Œã£ãŸã‚‚ã®ã®å±¥æ´ã‚‚è¡¨ç¤ºã•ã‚Œã‚‹ã€‚ http://journal.mycom.
mi1kman 2011/05/25
ãã‚Œã‚‚ã“ã‚Œã‚‚Yahoo!JapanãŒã€Œå¤–éƒ¨ã‚µãƒ¼ãƒ“ã‚¹ã€ã¨è¨€è‘‰ã‚’æ¿ã™ã‹ã‚‰ã§ã—ã‚‡ã†ã€‚ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã§ã¯ã€æŠ€è¡“çš„ã«æ£ã—ã„äº‹ã‚’ã¯ã£ãã‚Šã¨æ›¸ã„ã¦æ¬²ã—ã„ã§ã™ã‚ˆããƒ¼ã€‚

Yahoo!

OpenID
ãƒªãƒ³ã‚¯
ãƒ¤ãƒ•ãƒ¼ã«ãŠã‘ã‚‹ã‚¤ãƒ³ãƒ—ãƒƒãƒˆãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€Œä½•ã‚‚ä¿¡ã˜ã‚‹ãªã€ (Yahoo! JAPAN Tech Blog)
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã“ã‚“ã«ã¡ã¯ã€Rï¼†Dçµ±æ‹¬æœ¬éƒ¨ é–‹ç™ºæŽ¨é€²å®¤ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ æŠ€è¡“ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ãƒšã‚·ãƒ£ãƒªã‚¹ãƒˆã®æˆ¸ç”°ã€€è–«ã§ã™ã€‚ ä»Šå›žã¯ã€ç§ãŸã¡ãŒæ™®æ®µã‹ã‚‰ãƒ¤ãƒ•ãƒ¼ã®ã‚·ã‚¹ãƒ†ãƒ ã«å¯¾ã™ã‚‹å…¥åŠ›ã«ã©ã®ã‚ˆã†ãªæ³¨æ„ã‚’æ‰•ã£ã¦ã„ã‚‹ã®ã‹ã€ãã®ã„ãã¤ã‹ã‚’ã”ç´¹ä»‹è‡´ã—ã¾ã™ã€‚ å…¥åŠ›ã¨ã¯? Webã‚µã‚¤ãƒˆã‚’é‹å–¶ã—ã¦ã„ã‚‹å ´åˆã€ã©ã®ã‚ˆã†ãªå…¥åŠ›ãŒã‚ã‚‹ã§ã—ã‚‡ã†ã‹ï¼Ÿ ãŸã¨ãˆã°ã€Webã‚µãƒ¼ãƒ“ã‚¹ã«ã¯ã€ä»¥ä¸‹ã®å…¥åŠ›ãŒã‚ã‚Šã¾ã™ã€‚ Cookie URL GET/POSTã®ãƒ‡ãƒ¼ã‚¿ ãƒ•ã‚¡ã‚¤ãƒ«ã®ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ ãã®ä»–ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ ãã®ã»ã‹ã«ã‚‚ã„ãã¤ã‚‚ã‚ã‚Šã¾ã™ã€‚ ç’°å¢ƒå¤‰æ•° è¨å®šãƒ•ã‚¡ã‚¤ãƒ« ã‚¯ãƒãƒ¼ãƒ©ãŒå–å¾—ã—ãŸãƒ‡ãƒ¼ã‚¿ ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ä¼æ¥ã®APIã‹ã‚‰å–å¾—ã—ãŸãƒ‡ãƒ¼ã‚¿ï¼ˆXMLã‚„JSONãªã©ï¼‰ ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ä¼æ¥ã®å…¥ç¨¿ç”¨ F
mi1kman 2011/03/24
ãƒ¤ãƒ•ãƒ¼ã®ã€ŒRï¼†Dçµ±æ‹¬æœ¬éƒ¨ é–‹ç™ºæŽ¨é€²å®¤ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ æŠ€è¡“ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ãƒšã‚·ãƒ£ãƒªã‚¹ãƒˆã€ã§ã‚³ãƒ¬ã€‚æœ¬å½“ã«å®³æ‚ªãªã®ã§ä»–æ‰€ã«åºƒã‚ãªã„ã§æ¬²ã—ã„ã€‚ã€Œä½•ã‚‚ä¿¡ã˜ãªã„ã€ã¨å¿ƒã®ä¸ã€ãƒ¤ãƒ•ãƒ¼ã®ä¸ã ã‘ã§æ€ã£ã¦ã¦æ¬²ã—ã„ã€‚

Yahoo!

ã‚µãƒ‹ã‚¿ã‚¤ã‚ºè„³

æ‹¡å¤§å†ç”Ÿç”£

ãŠå‰ãŒãã†æ€ã†ã‚“ãªã‚‰

ãã†ãªã‚“ã ã‚ã†ã€

ãŠå‰ã‚“ä¸ã§ã¯ãª
ãƒªãƒ³ã‚¯
ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã¸ã®CSRFã«ã‚ˆã‚‹ã‚»ãƒƒã‚·ãƒ§ãƒ³å›ºå®š - çŸ¥ã‚‰ãªã„ã‘ã©ãã£ã¨ãã†ã€‚
å±é™ºãªã®ã‹ã‚ˆãã‚ã‹ã‚“ãªã„ã§ã™ã‘ã©ã€ã¯ã¦ãƒ€åˆã‚æ›¸ãã¾ã™ http://ido.nu/ayaya/yj.htmlï¼ˆå¯¾ç–ã•ã‚Œã¦ãŸï¼ï¼‰ iframe å†…ã§ http://login.yahoo.co.jp/config/login ã« logout=1 ã‚’ POST ã—ã¦å¼·åˆ¶çš„ã«ãƒã‚°ã‚¢ã‚¦ãƒˆçŠ¶æ…‹ã«ã™ã‚‹ ãƒã‚°ã‚¤ãƒ³ãƒ•ã‚©ãƒ¼ãƒ ã® form ã‚¿ã‚°éƒ¨åˆ†ã‚’ã‚¹ã‚¯ãƒ¬ã‚¤ãƒ”ãƒ³ã‚°ã—ã€ã‚ã‚‰ã‹ã˜ã‚ç”¨æ„ã—ã¦ãŠã„ãŸ Yahoo! JAPAN ID ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’åŸ‹ã‚è¾¼ã‚€ ãã® HTML ã‚’ iframe ã«ãƒãƒ¼ãƒ‰ã—ã€submit() ã§ POST ã•ã›ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ç”¨æ„ã—ã¦ãŠã„ãŸã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§ãƒã‚°ã‚¤ãƒ³ã•ã›ã‚‹ ãƒ¡ãƒ¼ãƒ«ã§ã€Œä½æ‰€æƒ…å ±ã‚’æ›´æ–°ã—ãªã„ã¨ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒæ¶ˆãˆã¾ã™ã€ã¨ã‹æ›¸ã„ã¦èª˜å°Žã—ãŸã‚‰ã€ã©ã®ãã‚‰ã„é‡£ã‚Œã‚‹ã‹ãªã‚ ã‚ãƒ¼ã‚ã¨ã€å€‹äººæƒ…å ±ã®å…¥åŠ›ã ã‘ã˜ã‚ƒãªãã¦ã€OAuth ã®èªå¯ã¨ã‹æ¨©é™ã‚’ä¸Žãˆã‚‹æ“ä½œã‚‚ã¾ãšã„ ãƒšãƒ¼ã‚¸ã¯ SSL ã«ãªã£ã¦ã„ã¦ã€ã‚¢ãƒ‰ãƒ¬ã‚¹
mi1kman 2010/01/22
ã‚€ã‚€ã‚€ã“ã‚Œã¯ç¢ºã‹ã«

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Yahoo!

è„†å¼±æ€§

ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬º

CSRF

ã‚»ãƒƒã‚·ãƒ§ãƒ³ç®¡ç†
ãƒªãƒ³ã‚¯
ãƒ¤ãƒ•ãƒ¼ä¸å…·åˆã€ãƒ¡ãƒ¼ãƒ«ï¼”ï¼“äººåˆ†ã®ä¸èº«è¦‹ã‚‰ã‚Œã‚‹ : ç¤¾ä¼š : YOMIURI ONLINEï¼ˆèªå£²æ–°èžï¼‰
ãƒ¤ãƒ•ãƒ¼ã¯ï¼’ï¼™æ—¥ã€å…¬å¼ã‚µã‚¤ãƒˆã®ä¸€éƒ¨ã«ä¸å…·åˆãŒã‚ã‚Šã€ãƒ¤ãƒ•ãƒ¼ãƒ¡ãƒ¼ãƒ«ã®åˆ©ç”¨è€…ï¼”ï¼“äººãŒã€ä»–äººã«ãƒ¡ãƒ¼ãƒ«ã®ä¸èº«ã‚’è¦‹ã‚‰ã‚Œã‚‹ãƒˆãƒ©ãƒ–ãƒ«ãŒã‚ã£ãŸã¨ç™ºè¡¨ã—ãŸã€‚ åŒç¤¾ã«ã‚ˆã‚‹ã¨ã€ãƒ—ãƒã‚°ãƒ©ãƒ ã®æ›´æ–°æ™‚ã«ãƒŸã‚¹ãŒã‚ã‚Šã€ä»Šæœˆï¼‘ï¼•æ—¥ã‹ã‚‰ï¼’ï¼æ—¥ã«ã‹ã‘ã¦æ–°ãŸã«ï¼©ï¼¤ã‚’å–å¾—ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã€ã™ã§ã«åˆ¥äººãŒç™»éŒ²æ¸ˆã¿ã®ï¼©ï¼¤ã ã£ãŸå ´åˆã€ãã®åˆ¥äººã®ãƒ¡ãƒ¼ãƒ«ã‚„åˆ©ç”¨å±¥æ´ãªã©ãŒè¦‹ã‚‰ã‚Œã‚‹çŠ¶æ…‹ã«ãªã£ãŸã€‚ è¨ˆï¼™ï¼“ï¼™äººã®ãƒ¡ãƒ¼ãƒ«ã‚„åˆ©ç”¨å±¥æ´ãªã©ãŒä¸€æ™‚ã€ï¼©ï¼¤ç™»éŒ²ã—ã‚ˆã†ã¨ã—ãŸäººã«è¦‹ã‚‰ã‚Œã‚‹çŠ¶æ…‹ã«ãªã‚Šã€ã†ã¡ï¼”ï¼“äººã¯ãƒ¡ãƒ¼ãƒ«ã‚’é–‹ã„ãŸè¨˜éŒ²ãŒæ®‹ã£ã¦ã„ãŸã€‚å€‹äººæƒ…å ±ã®æ‚ªç”¨ãªã©ã¯ä»Šã®ã¨ã“ã‚å ±å‘Šã•ã‚Œã¦ãŠã‚‰ãšã€ï¼’ï¼™æ—¥åˆå¾Œã‹ã‚‰æ£å¸¸åŒ–ã—ã¦ã„ã‚‹ã¨ã„ã†ã€‚ åŒç¤¾ã¯ã€Œå¤§å¤‰æ·±ããŠã‚ã³ç”³ã—ä¸Šã’ã¾ã™ã€‚å†ç™ºé˜²æ¢ã‚’å¾¹åº•ã—ã¦ã„ããŸã„ã€ã¨ã‚³ãƒ¡ãƒ³ãƒˆã—ã¦ã„ã‚‹ã€‚
mi1kman 2009/12/30
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Yahoo!

ãƒ¡ãƒ¼ãƒ«
ãƒªãƒ³ã‚¯
Inside Yahoo!ãƒ¡ãƒ¼ãƒ« ç¬¬2è©±ã€Œåˆ†æžï¼è¿·æƒ‘ãƒ¡ãƒ¼ãƒ«ã€ (Yahoo! JAPAN Tech Blog)
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã“ã‚“ã«ã¡ã¯ã€ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒãƒƒãƒˆé–‹ç™ºéƒ¨ã®å³¶è²« å’Œä¹Ÿã§ã™ã€‚ æœ¬é€£è¼‰ã§ã¯ã€ä»Šã¾ã§ã‚ã¾ã‚Šè§¦ã‚Œã‚‰ã‚Œã¦ã“ãªã‹ã£ãŸYahoo!ãƒ¡ãƒ¼ãƒ«ã®è¿·æƒ‘ãƒ¡ãƒ¼ãƒ«å¯¾ç–ã¨ã€é›»åãƒ¡ãƒ¼ãƒ«ã«é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã”ç´¹ä»‹ã—ã¦ã„ã¾ã™ã€‚ä»Šå›žã¯å‰å›žã«å¼•ãç¶šãã€Yahoo!ãƒ¡ãƒ¼ãƒ«ã§å®Ÿæ–½ã—ã¦ã„ã‚‹ Botnet ã®åˆ†æžã¨å¯¾ç–ã«ã¤ã„ã¦ã€ãã®å–ã‚Šçµ„ã¿ã®ä¸€éƒ¨ã‚’ã”ç´¹ä»‹ã•ã›ã¦ã„ãŸã ãã¾ã™ã€‚ ã”æ³¨æ„ å‡ºå…¸å…ƒã®èª¬æ˜Žã®ãŸã‚ã€ã„ãã¤ã‹å¤–éƒ¨ãƒªãƒ³ã‚¯ãŒã‚ã‚Šã¾ã™ã€‚ãƒªãƒ³ã‚¯å…ˆã«ã¤ã„ã¦ã¯ä¿è¨¼ã—ã¦ãŠã‚Šã¾ã›ã‚“ã®ã§ã”äº†æ‰¿ãã ã•ã„ã€‚ ã“ã®è¨˜äº‹ã®æ€§è³ªä¸Šã€è¿·æƒ‘ãƒ¡ãƒ¼ãƒ«ã®æ€§è³ªã‚„é€ä¿¡æ‰‹æ³•ã«ã¤ã„ã¦è§¦ã‚Œã¦ã„ã‚‹ç®‡æ‰€ãŒã‚ã‚Šã¾ã™ãŒã€é›»åãƒ¡ãƒ¼ãƒ«ã‚„ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã®ä¸æ£åˆ©ç”¨ã‚’åŠ©é•·ã™ã‚‹æ„å›³ã®ã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚èªã¿ç‰©ã¨ã—ã¦ãŠæ¥½ã—ã¿ãã ã•ã„ã€‚ ã¯ã˜ã‚ã« å‰å›žã®è¨˜äº‹
mi1kman 2009/09/09
Yahoo!

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è¿·æƒ‘ãƒ¡ãƒ¼ãƒ«

spam

èˆˆå‘³æ·±ã„

ãƒœãƒƒãƒˆãƒãƒƒãƒˆ
ãƒªãƒ³ã‚¯
Yahoo!ãŒé–‹å§‹ã—ãŸã€Œãƒã‚°ã‚¤ãƒ³ã‚¢ãƒ©ãƒ¼ãƒˆã€æ©Ÿèƒ½ã‚’é–‹å§‹ã€‚ãã‚Œã§ã‚‚ä¹—ã£å–ã‚Šã®å±é™ºæ€§ãŒã‚ã‚‹ä»¶ | ã²ã¨ã…ãƒ–ãƒã‚°
â– ãƒã‚°ã‚¤ãƒ³ã‚¢ãƒ©ãƒ¼ãƒˆè¨å®šæ–¹æ³• ã€Œç™»éŒ²æƒ…å ±ã€ã®ãƒšãƒ¼ã‚¸ã‚’è¡¨ç¤º æœ¬äººç¢ºèªã®ãŸã‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ› å³ã‚µã‚¤ãƒ‰ãƒãƒ¼ã®ã€Œãƒã‚°ã‚¤ãƒ³ã‚¢ãƒ©ãƒ¼ãƒˆã€ã‚’ã‚¯ãƒªãƒƒã‚¯ æœ¬äººç¢ºèªã®ãŸã‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ› åˆ©ç”¨è¨å®šã§ã€Œåˆ©ç”¨ã™ã‚‹ã€ã€é€šçŸ¥å…ˆãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ç™»éŒ²æ¸ˆã¿ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’é¸æŠžï¼ˆè¤‡æ•°åŒ–ï¼‰ ã€Œè¨å®šã™ã‚‹ã€ã‚’ã‚¯ãƒªãƒƒã‚¯ ä»¥ä¸Šã§è¨å®šãŒå®Œäº†ã€‚ä»¥é™ã€Yahoo!IDã«ãƒã‚°ã‚¤ãƒ³ã™ã‚‹ãŸã³ã«è¨å®šã—ãŸãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã«é€šçŸ¥ã•ã‚Œã¾ã™ã€‚ é€šå¸¸ã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«ã¯ã‚¢ãƒ©ãƒ¼ãƒˆãƒ¡ãƒ¼ãƒ«ãŒé€ã‚‰ã‚Œã¾ã™ãŒã€æœ¬äººç¢ºèªã®ãŸã‚ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã™ã‚‹ã ã‘ã®å ´åˆã¯é€ã‚‰ã‚Œãªã„ã‚ˆã†ã§ã™ã€‚ â– ãƒã‚°ã‚¤ãƒ³ãƒãƒƒã‚¯ã‚’è§£é™¤ã™ã‚‹æ–¹æ³• Yahoo!IDã«ãƒã‚°ã‚¤ãƒ³ã‚’ã™ã‚‹ ãƒã‚°ã‚¤ãƒ³ãƒãƒƒã‚¯çŠ¶æ…‹ã§ã‚ã‚‹äº‹ã‚’ãŠçŸ¥ã‚‰ã›ã™ã‚‹ãƒšãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã€‚ã€Œãƒã‚°ã‚¤ãƒ³ãƒãƒƒã‚¯ã‚’è§£é™¤ã™ã‚‹ã€ã‚’ã‚¯ãƒªãƒƒã‚¯ ã€Œè§£é™¤ãƒ¡ãƒ¼ãƒ«ã‚’é€ä¿¡ã™ã‚‹ã€ã‚’ã‚¯ãƒªãƒƒã‚¯ é€šçŸ¥å…ˆãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã«ãƒ¡ãƒ¼ãƒ«ãŒé€ã‚‰ã‚Œã‚‹ã®ã§ã€æœ¬æ–‡ä¸ã®URLã¸ã‚¢ã‚¯ã‚»ã‚¹ã€‚ï¼ˆæœ‰åŠ¹æœŸé™1æ™‚é–“ï¼‰ è§£é™¤ã™
mi1kman 2009/05/19
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Yahoo!
ãƒªãƒ³ã‚¯
ãƒŸã‚¯ã‚·ã‚£ã‚„All Aboutã€ãƒ¤ãƒ•ãƒ¼ã®ã‚¿ãƒ¼ã‚²ãƒ†ã‚£ãƒ³ã‚°åºƒå‘Šã€Œã‚¤ãƒ³ã‚¿ãƒ¬ã‚¹ãƒˆãƒžãƒƒãƒã€å°Žå…¥
ãƒ¤ãƒ•ãƒ¼ã¨åä¼šç¤¾ã®ã‚ªãƒ¼ãƒãƒ¼ãƒãƒ¥ã‚¢ã¯3æœˆ25æ—¥ã€Webã‚µã‚¤ãƒˆã®åˆ©ç”¨è€…ãŒèˆˆå‘³ã‚’æŒã¤åˆ†é‡Žã®åºƒå‘Šã‚’é¸ã‚“ã§è¡¨ç¤ºã™ã‚‹ã‚¿ãƒ¼ã‚²ãƒ†ã‚£ãƒ³ã‚°åºƒå‘Šã‚µãƒ¼ãƒ“ã‚¹ã€Œã‚¤ãƒ³ã‚¿ãƒ¬ã‚¹ãƒˆãƒžãƒƒãƒã€ã‚’ã€ææºä¼æ¥ãŒé‹å–¶ã™ã‚‹ãƒ‘ã‚½ã‚³ãƒ³å‘ã‘ã‚µã‚¤ãƒˆã«4æœˆã‚ˆã‚Šé †æ¬¡å°Žå…¥ã™ã‚‹ã¨ç™ºè¡¨ã—ãŸã€‚ã“ã‚Œã¾ã§ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆã€ŒYahoo! Japanã€ã‚’ä¸å¿ƒã«ã‚¤ãƒ³ã‚¿ãƒ¬ã‚¹ãƒˆãƒžãƒƒãƒã®åºƒå‘Šã‚’æŽ²è¼‰ã—ã¦ããŸãŒã€ä»Šå¾Œã¯ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚µãƒ¼ãƒ“ã‚¹ã€Œmixiã€ã‚„ç·åˆæƒ…å ±ã‚µã‚¤ãƒˆã€ŒAll Aboutã€ã«ã‚‚æŽ²è¼‰ã™ã‚‹ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¬ã‚¹ãƒˆãƒžãƒƒãƒã¯ã€ã‚µã‚¤ãƒˆåˆ©ç”¨è€…ãŒé–²è¦§ã—ã¦ã„ã‚‹Webãƒšãƒ¼ã‚¸ã®å†…å®¹ã‚„éŽåŽ»ã®é–²è¦§å±¥æ´ã€æœ€è¿‘ã®æ¤œç´¢ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã‚’åˆ†æžã—ã€åˆ©ç”¨è€…ã®èˆˆå‘³ã€é–¢å¿ƒã«ã‚ˆã‚Šè¿‘ã„åºƒå‘Šã‚’è¡¨ç¤ºã™ã‚‹ã€‚ é–²è¦§ä¸ã®Webãƒšãƒ¼ã‚¸å†…å®¹ã ã‘ã‚’åˆ†æžã—ã¦åºƒå‘Šã‚’è¡¨ç¤ºã™ã‚‹å¾“æ¥ã®ã‚µãƒ¼ãƒ“ã‚¹ã€Œã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãƒžãƒƒãƒã€ã‚’æŽ¡ç”¨ã™ã‚‹ä¼æ¥ãŒã€4æœˆã‹ã‚‰5æœˆã«ã‹ã‘ã¦ã‚¤ãƒ³ã‚¿ãƒ¬ã‚¹ãƒˆãƒžãƒƒãƒã¸ã¨åˆ‡ã‚Šæ›¿ãˆã¦ã„ãäºˆå®šã€‚mixiã‚„All Aboutã®ã»ã‹ã€ãƒãƒ¼ã‚¿ãƒ«
mi1kman 2009/03/26
ã€Œã‚¤ãƒ³ã‚¿ãƒ¬ã‚¹ãƒˆãƒžãƒƒãƒã¯ã€ã‚µã‚¤ãƒˆåˆ©ç”¨è€…ãŒé–²è¦§ã—ã¦ã„ã‚‹Webãƒšãƒ¼ã‚¸ã®å†…å®¹ã‚„éŽåŽ»ã®é–²è¦§å±¥æ´ã€æœ€è¿‘ã®æ¤œç´¢ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã‚’åˆ†æžã—ã€åˆ©ç”¨è€…ã®èˆˆå‘³ã€é–¢å¿ƒã«ã‚ˆã‚Šè¿‘ã„åºƒå‘Šã‚’è¡¨ç¤ºã™ã‚‹ã€‚ã€

åºƒå‘Š

è¡Œå‹•ã‚¿ãƒ¼ã‚²ãƒ†ã‚£ãƒ³ã‚°

ã‚¿ãƒ¼ã‚²ãƒ†ã‚£ãƒ³ã‚°åºƒå‘Š

Yahoo!
ãƒªãƒ³ã‚¯
ãƒ¤ãƒ•ãƒ¼ãŒyimg.jpã‚’ä½¿ã†æœ¬å½“ã®ãƒ¯ã‚± - æœ€é€Ÿé…ä¿¡ç ”ç©¶ä¼š(@yamaz)
ãƒ¤ãƒ•ãƒ¼ã®ç”»åƒã¯ãªãœyimg.jpãƒ‰ãƒ¡ã‚¤ãƒ³ãªã®ã‹ï¼Ÿ ã‚µã‚¤ãƒˆé«˜é€ŸåŒ–ã®æ‰‹æ³•ã¨ãƒ¤ãƒ•ãƒ¼ã®å¤±æ•—ä¾‹ ã§ãƒ¤ãƒ•ãƒ¼ãŒãªãœãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’å¤‰ãˆã¦ç”»åƒã‚µãƒ¼ãƒã‚’é‹ç”¨ã—ã¦ã„ã‚‹ã‹ãŒæ›¸ã‹ã‚Œã¦ã„ã‚‹.ã€Œé™çš„ãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«å¯¾ã—ã¦ã‚¯ãƒƒã‚ãƒ¼ãƒ•ãƒªãƒ¼ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’ä½¿ã†ã“ã¨ã«ã‚ˆã£ã¦é€Ÿåº¦å‘ä¸Šã‚’ç‹™ã†ã€ã¨ã„ã†ã®ãŒç†ç”±ã¨ã‚ã£ã¦,ã“ã‚Œã¯ã“ã‚Œã§ã‚‚ã¡ã‚ã‚“æ£ã—ã„ã®ã ã‘ã‚Œã©,ã“ã‚Œã¯ã©ã¡ã‚‰ã‹ã¨ã„ã†ã¨å‰¯æ¬¡çš„ãªç†ç”±ã§æœ¬å½“ã®ç†ç”±ã¯é•ã†. ã‚¯ãƒƒã‚ãƒ¼ãƒ•ãƒªãƒ¼ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’ä½¿ã†ã“ã¨ã§æ‚ªæ„ã‚ã‚‹Flashã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãªã©ã‹ã‚‰è‡ªç¤¾ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã‚¯ãƒƒã‚ãƒ¼ã‚’å®ˆã‚‹ãŸã‚ã¨ã„ã†ã®ãŒæœ¬å½“ã®ç†ç”±ã§,ã“ã‚Œã¯ã‚ã¡ã“ã¡ã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã .Flashã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¯å¤–éƒ¨ã®æ¥è€…ã•ã‚“ã«ä½œã£ã¦ã‚‚ã‚‰ã£ãŸã‚Š,åºƒå‘Šã®å…¥ç¨¿ç´ æã¨ã—ã¦å…¥ã£ã¦ãã‚‹ã®ã§,ä¿¡é ¼ã§ããªã„ãƒ‡ãƒ¼ã‚¿ã¨ã—ã¦å–ã‚Šæ‰±ã†å¿…è¦ãŒã‚ã‚Š,ä¸‡ä¸€ã¾ãšã„ãƒ‡ãƒ¼ã‚¿ãŒã‚¢ãƒƒãƒ—ã•ã‚Œã‚‹ã“ã¨ãŒã‚ã£ã¦ã‚‚å¤§ä¸ˆå¤«ã«ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚‹. æœ€è¿‘ãƒ¦ãƒ¼ã‚¶ã‹ã‚‰ã®ä»»æ„ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’å—ã‘ã¤ã‘ã¦åŒä¸€ãƒ‰ãƒ¡ã‚¤ãƒ³ã§é…ä¿¡ã—
mi1kman 2009/01/15
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚ã¨ã§èªã‚€

Yahoo!
ãƒªãƒ³ã‚¯
Yahoo! JAPANã‹ãŸã‚‹ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã€å½ã‚µã‚¤ãƒˆã¯å›½å†…ã«è¨ç½®
Windows SQL Server 2005ã‚µãƒãƒ¼ãƒˆçµ‚äº†ã®4æœˆ12æ—¥ãŒè¿«ã‚‹ã€å ±å‘Šæ¸ˆã¿è„†å¼±æ€§ã®æ·±åˆ»åº¦ã‚‚é«˜ãã€æ—©æ€¥ãªç§»è¡Œã‚’
mi1kman 2009/01/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°

è©æ¬º

Yahoo!
ãƒªãƒ³ã‚¯
Yahoo!ã€Œãƒ¯ã‚¤ãƒ¯ã‚¤ãƒžãƒƒãƒ—ã€ã§è€ƒãˆã‚‹ã€Googleã€Œãƒžã‚¤ãƒžãƒƒãƒ—ã€å•é¡Œ
ã€ŒGoogle ãƒžãƒƒãƒ—ã€ã®ã€Œãƒžã‚¤ãƒžãƒƒãƒ—ã€æ©Ÿèƒ½ã«ã‚ˆã£ã¦ã€å€‹äººæƒ…å ±ãªã©ãŒæµå‡ºã™ã‚‹ãƒˆãƒ©ãƒ–ãƒ«ãŒ11æœˆã«å…¥ã£ã¦å¤§ããªå•é¡Œã¨ãªã£ãŸã€‚ã€Œãƒžã‚¤ãƒžãƒƒãƒ—ã€ã¨åŒæ§˜ã«ã€ã‚ªãƒ³ãƒ©ã‚¤ãƒ³åœ°å›³ä¸Šã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæƒ…å ±ã‚’ç™»éŒ²ã—ã€ã‚ªãƒªã‚¸ãƒŠãƒ«ã®åœ°å›³ã‚’ä½œæˆãƒ»å…¬é–‹ã§ãã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã¨ã—ã¦ã¯ã€ã€ŒYahoo!åœ°å›³ã€ã®ã€Œãƒ¯ã‚¤ãƒ¯ã‚¤ãƒžãƒƒãƒ—ã€ãŒãƒ¡ã‚¸ãƒ£ãƒ¼ãªã¨ã“ã‚ã ã€‚ã—ã‹ã—ãƒ¤ãƒ•ãƒ¼ã«ã‚ˆã‚Œã°ã€ã€Œãƒžã‚¤ãƒžãƒƒãƒ—ã€ã§å•é¡Œã«ãªã£ã¦ã„ã‚‹ã‚ˆã†ãªãƒˆãƒ©ãƒ–ãƒ«ã¯ç¾åœ¨ã®ã¨ã“ã‚èµ·ãã¦ã„ãªã„ã¨ã„ã†ã€‚ ã€Œãƒžã‚¤ãƒžãƒƒãƒ—ã€ã¨ã€Œãƒ¯ã‚¤ãƒ¯ã‚¤ãƒžãƒƒãƒ—ã€ã‚’æ¯”ã¹ã¦ã€ã¾ãšå¤§ããç•°ãªã‚‹ã®ã¯ã€ãã®ã‚µãƒ¼ãƒ“ã‚¹åç§°ã‹ã‚‰å—ã‘ã‚‹å°è±¡ã ã€‚ãƒ¤ãƒ•ãƒ¼ã«ã‚ˆã‚‹ã¨ã€ã€Œãƒ¯ã‚¤ãƒ¯ã‚¤ãƒžãƒƒãƒ—ã€ã¯ã€ŒåŒã˜å—œå¥½ã‚’æŒã£ãŸäººãŸã¡ãŒå…±æœ‰ã§ãã‚‹æŠ•ç¨¿åœ°å›³ã‚µãƒ¼ãƒ“ã‚¹ã€ã‚’ç›®æŒ‡ã—ã¦é–‹å§‹ã—ãŸã¨ã„ã†ã€‚åœ°å›³ã®å…¬é–‹ãƒ»å…±æœ‰ãŒå‰æã®æƒ…å ±äº¤æ›ã®å ´ã¨ã—ã¦ã€ã€Œæ–‡å—é€šã‚Šãƒ¯ã‚¤ãƒ¯ã‚¤ã€ã‚¬ãƒ¤ã‚¬ãƒ¤ã¨ã¿ã‚“ãªã§æ¥½ã—ã‚€åœ°å›³ã‚’ç›®æŒ‡ã—ã€åˆ©ç”¨ã‚¤ãƒ¡ãƒ¼ã‚¸ã‚’é€£æƒ³ã—ã‚„ã™ã„ãƒãƒ¼ãƒŸãƒ³ã‚°ã¨ã—ã¦å‘½åã—ãŸã€ã€‚ ãŸã ã—ã€ä½œæˆã—ãŸãƒžãƒƒãƒ—
mi1kman 2008/11/23
google

yahoo!

ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼
ãƒªãƒ³ã‚¯
ã€ŒYahoo! HotJobsã€ã‚µã‚¤ãƒˆï¼ŒXSSæ”»æ’ƒã§ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ç”¨ã‚¯ãƒƒã‚ãƒ¼ãŒç›—ã¾ã‚Œã‚‹çŠ¶æ…‹ã«
è‹±Netcraftã¯è‹±å›½æ™‚é–“2008å¹´10æœˆ26æ—¥ï¼Œç±³Yahoo!ã®Webã‚µã‚¤ãƒˆãŒã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼‰æ”»æ’ƒã‚’å—ã‘ï¼Œãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ç”¨ã‚¯ãƒƒã‚ãƒ¼ã‚’ç›—ã‚€JavaScriptã‚³ãƒ¼ãƒ‰ãŒä»•è¾¼ã¾ã‚ŒãŸã¨è¦å‘Šã—ãŸã€‚Netcraftã‹ã‚‰å ±å‘Šã‚’å—ã‘ãŸYahoo!ã¯å¯¾ç–ã‚’æ–½ã—ï¼ŒåŒæ—¥é…ãã«å•é¡Œã‚’è§£æ±ºã—ã¦ã„ã‚‹ã€‚ æ”»æ’ƒã‚’å—ã‘ãŸã®ã¯ï¼Œæ±‚äººæƒ…å ±æ¤œç´¢ã‚µãƒ¼ãƒ“ã‚¹ã€ŒYahoo! HotJobsã€ã®Webã‚µã‚¤ãƒˆã€‚XSSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒ›ãƒ¼ãƒ«ãŒå˜åœ¨ã—ã¦ãŠã‚Šï¼Œæ”»æ’ƒç”¨ã®JavaScriptã‚³ãƒ¼ãƒ‰ã‚’æŒ¿å…¥ã•ã‚Œã‚‹éš™ãŒã‚ã£ãŸã¨ã„ã†ã€‚åŒã‚³ãƒ¼ãƒ‰ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ»ãƒã‚°ã‚¤ãƒ³æ™‚ã«ã€Œyahoo.comã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã®èªè¨¼ç”¨ã‚¯ãƒƒã‚ãƒ¼ã‚’ç›—ã¿ï¼Œç±³å›½å†…ã®Webã‚µãƒ¼ãƒãƒ¼ã«é€ã‚‹ã€‚ èªè¨¼ç”¨ã‚¯ãƒƒã‚ãƒ¼ã‚’å…¥æ‰‹ã—ãŸæ”»æ’ƒè€…ã¯ï¼ŒYahoo!ã®å„ç¨®ã‚µãƒ¼ãƒ“ã‚¹ç”¨ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’çŸ¥ã‚‰ãªãã¦ã‚‚è¢«å®³è€…ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½¿ç”¨ã§ãã¦ã—ã¾ã†ã€‚ä¾‹ãˆã°ã€ŒYahoo! Mailã€ã«ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚Œã‚‹
mi1kman 2008/10/29
XSSã®æ‚ªç”¨äº‹ä¾‹ã¨ã—ã¦

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Yahoo!

XSS

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
Yahoo! JAPAN - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç‰¹é›† 2008æ˜¥ - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ã«å½¹ç«‹ã¤ä¾¿åˆ©ã‚µã‚¤ãƒˆ
mi1kman 2008/03/20
å½¹ã«ç«‹ã¤ã®ã¯CCCã ã‘ã ãª/ç¢ºèªãã‚“ã‚„aguse.jpã®ã©ã“ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ã«å½¹ç«‹ã¤ã®ã‹/Microsoft Updateã¨ã‹ã‚’è¼‰ã›ãŸã»ã†ãŒã‚ˆã£ã½ã©ã¾ã—/VirusTotalã®è§£èª¬éƒ¨åˆ†ã¯ã™ã§ã«â†“ã§è¨€ã‚ã‚Œã¦ã‚‹é€šã‚Š

ã“ã‚Œã¯ã²ã©ã„

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Yahoo!

æ—¥çµŒBP

å½¹ç«‹ãŸãªã„
ãƒªãƒ³ã‚¯
1