[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] mizdraã®ãƒ

mizdra id:mizdra

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹mizdraã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ ^ ã¨ $ ã§ã¯ãªã \A ã¨ \z ã‚’ä½¿ãŠã†
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ç‰ã§ã€å®Œå…¨ä¸€è‡´ã‚’ç¤ºã™ç›®çš„ã§ ^ ã¨ $ ã‚’ç”¨ã„ã‚‹æ–¹æ³•ãŒä¸€èˆ¬çš„ã§ã™ãŒã€æ£ã—ãã¯ \A ã¨ \z ã‚’ç”¨ã„ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚Rubyã®å ´åˆ ^ ã¨ $ ã‚’ä½¿ã£ã¦å®Œå…¨ä¸€è‡´ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¡Œã†ã¨è„†å¼±æ€§ãŒå…¥ã‚Šã‚„ã™ã„ãƒ¯ãƒŠã¨ãªã‚Šã¾ã™ã€‚Perlã‚„PHPã®å ´åˆã¯ã€Rubyç¨‹ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒä¸å…·åˆãŒç”Ÿã˜ã‚‹ã®ã§ \A ã¨ \z ã‚’ä½¿ã†ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†ã€‚ ã¯ã˜ã‚ã« å¤§åž£ã•ã‚“ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€ŒPHPerå‘ã‘ã€Ruby/Railsã®è½ã¨ã—ç©´ã€ã«ã¯ã€Rubyã®è½ã¨ã—ç©´ã¨ã—ã¦ã€å®Œå…¨ä¸€è‡´æ¤œç´¢ã®æŒ‡å®šã¨ã—ã¦ã€æ£è¦è¡¨ç¾ã® ^ ã¨ $ ã‚’æŒ‡å®šã™ã‚‹ä¾‹ãŒã€Ruby on Rails Security Guideã‹ã‚‰ã®å¼•ç”¨ã¨ã—ã¦ç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã®æ£è¦è¡¨ç¾ã¯ã€XSSå¯¾ç–ã¨ã—ã¦ã€httpã‚¹ã‚ãƒ¼ãƒ ã‚ã‚‹ã„ã¯httpsã‚¹ã‚ãƒ¼ãƒ ã®URLã®ã¿ã‚’è¨±å¯ã™ã‚‹æ£è¦è¡¨ç¾ã®ã¤ã‚‚ã‚Šã§ã™ã€‚ /^https?:\/\/[^\n]+$/
mizdra 2018/08/26
perl

Ruby

php

æ£è¦è¡¨ç¾

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Osushiã«è¦‹ã‚‹ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ - Speaker Deck
All slide content and descriptions are owned by theirÂ creators.
mizdra 2018/03/30
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

javascript
ãƒªãƒ³ã‚¯
é€£è¼‰ï¼šWebã‚µã‚¤ãƒˆé‹å–¶è€…ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç¢ºä¿ã®å¿ƒå¾—
äº‹ä¾‹ã‹ã‚‰å¦ã¶Webã‚µã‚¤ãƒˆã®è„†å¼±ç‚¹ã¨ãã®å¯¾å¿œ é€£è¼‰ï¼šWebã‚µã‚¤ãƒˆé‹å–¶è€…ã® ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç¢ºä¿ã®å¿ƒå¾— ç¬¬3å›ž ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚µãƒ¼ãƒã®æ§‹ç¯‰ã€é‹ç”¨ã‹ã‚‰ç™ºç”Ÿã™ã‚‹è„†å¼±ç‚¹ã¨ãã®å¯¾ç– å°å€‰ç§€æ• ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚·ã‚¹ãƒ†ãƒ ã‚ºæ ªå¼ä¼šç¤¾ ãƒ†ã‚¯ãƒ‹ã‚«ãƒ«ã‚µãƒãƒ¼ãƒˆéƒ¨ 2002/5/15 å‰å›žã®ã€ŒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒã«å˜åœ¨ã™ã‚‹ã•ã¾ã–ã¾ãªè„†å¼±ç‚¹ã€ã§ã¯ã€Webã‚µãƒ¼ãƒã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒãªã©ã«é–¢ã™ã‚‹éŽåŽ»ã«ã‚ã£ãŸã•ã¾ã–ã¾ãªè„†å¼±ç‚¹ã«ã¤ã„ã¦è€ƒå¯Ÿã—ãŸã€‚ä»Šå›žã¯ã€ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚µãƒ¼ãƒã®é‹ç”¨ã€æ§‹ç¯‰ãªã©ã‹ã‚‰ç™ºç”Ÿã™ã‚‹è„†å¼±ç‚¹ã€ãŠã‚ˆã³ãã®å¯¾ç–æ–¹æ³•ãªã©ã‚’ç´¹ä»‹ã™ã‚‹ ã€‚ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®è€ƒæ…®ãŒæœ€ã‚‚ã•ã‚Œã«ãã„ãƒã‚¤ãƒ³ãƒˆã¨ãªã£ã¦ã„ã‚‹ã®ãŒç¾çŠ¶ã ã€‚ä»Šå¾Œæœ¬è¨˜äº‹ã‚’åŸºã«ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«å¯¾ã™ã‚‹æ„è˜ã‚’é«˜ã‚ã¦ã»ã—ã„ã€‚ Webã‚µã‚¤ãƒˆã«ãŠã„ã¦ã€å®Ÿã¯ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®è€ƒæ…®ãŒæœ€ã‚‚ã•ã‚Œã«ãã„ãƒã‚¤ãƒ³ãƒˆã¨ãªã£ã¦ã„ã‚‹ã€‚é€šå¸¸ã®ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†ã®ç¾å ´ã‚’
mizdra 2017/01/21
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
GitHubãƒ¦ãƒ¼ã‚¶ãƒ¼ã®SSHéµ6ä¸‡å€‹ã‚’èª¿ã¹ã¦ã¿ãŸ - hnwã®æ—¥è¨˜
ï¼ˆ2015/1/30 è¿½è¨˜ï¼‰æ™‚æœŸã¯ä¸æ˜Žã§ã™ãŒã€ç¾æ™‚ç‚¹ã®github.comã¯Ed25519éµã«ã‚‚å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚ ï¼ˆ2016/5/31 è¿½è¨˜ï¼‰ã€ŒGitHubã«ãƒã‚°å ±å‘Šã—ã¦è³žé‡‘$500ã‚’é ‚ã„ãŸè©±ã€ã§ç´¹ä»‹ã—ãŸé€šã‚Šã€æ—¢ã«å¼±ã„éµã¯GitHubã‹ã‚‰å‰Šé™¤ã•ã‚Œã€æ–°è¦ç™»éŒ²ã‚‚ã§ããªããªã£ã¦ã„ã¾ã™ã€‚ GitHub APIã‚’åˆ©ç”¨ã—ã¦ã€GitHubã®31661ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ç™»éŒ²ã•ã‚Œã¦ã„ã‚‹SSHå…¬é–‹éµ64404å€‹ã‚’å–å¾—ã—ã¦ã¿ã¾ã—ãŸã€‚æŠ½å‡ºæ–¹æ³•*1ãŒé©å½“ã™ãŽã¦åã‚ŠãŒã‚ã‚‹ã‚ˆã†ãªæ°—ã‚‚ã—ã¾ã™ãŒã€é¢ç™½ã„çµæžœãŒå¾—ã‚‰ã‚ŒãŸã¨æ€ã†ã®ã§ã¾ã¨ã‚ã¦ã¿ã¾ã™ã€‚ SSHéµã®ç¨®é¡ž éµã®ç¨®é¡ž å€‹æ•° å‰²åˆ RSAéµ 61749 (95.88%) DSAéµ 2647 (4.11%) ECDSAéµ 8 (0.01%) ç´„6ä¸‡å€‹ã®éµã®ã†ã¡ã€8å€‹ã ã‘ECDSAï¼ˆæ¥•å††DSAï¼‰éµãŒè¦‹ã¤ã‹ã‚Šã¾ã—ãŸï¼å¸¸ç”¨ã—ã¦ã„ã‚‹ã®ã‹è©¦ã—ã«ç™»éŒ²ã—ã¦ã¿ãŸã ã‘ãªã®ã‹ã¯ã‚ã‹ã‚Šã¾ã›ã‚“ãŒã€ä½•ã«ã›ã‚ˆ
mizdra 2016/05/19
ssh

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
å…¬é–‹éµæš—å·æ–¹å¼
1976å¹´ã€ ãƒ›ã‚¤ãƒƒãƒˆãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ãƒ»ãƒ‡ã‚£ãƒ•ã‚£ãƒ¼ ï¼ˆWhitfield Diffieï¼‰ ã¯ æš—å·ã®ä¸–ç•Œã«é©å‘½ã‚’èµ·ã“ã—ã¾ã—ãŸã€‚ ãã‚Œã¾ã§ã®æš—å·ã¯ã€ ã™ã¹ã¦ ç§˜å¯†éµæš—å·æ–¹å¼ ï¼ˆprivate key encryption systemï¼‰ ã¨å‘¼ã°ã‚Œã‚‹ã‚‚ã®ã§ã—ãŸã€‚ ãŸã¨ãˆã°ä¸‹å›³ã®ã‚ˆã†ã«ã€ A ã¯ H ã«ã€ B ã¯ A ã«ã€ C ã¯ U ã«â€¦ ã¨ã„ã†ãµã†ã«æ–‡å—ã‚’ç½®ãæ›ãˆã‚‹ã“ã¨ã«ã™ã‚‹ã¨ã€ "I LOVE YOU" ã¯ "M TVNX SVK" ã«ãªã‚Šã¾ã™ã€‚ ã“ã‚Œãªã‚‰ã“ã®æ‰‹ç´™ãŒèª°ã‹ã«ç›—ã¾ã‚ŒãŸã¨ã—ã¦ã‚‚ã€ ä½•ãŒæ›¸ã„ã¦ã‚ã‚‹ã‹åˆ†ã‹ã‚‰ãªã„ã®ã§å®‰å¿ƒã§ã™ã€‚ ã¨ã“ã‚ãŒã€ ç›¸æ‰‹ãŒã“ã®æ‰‹ç´™ã‚’èªã‚ã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ã¯ã€ æš—å·åŒ–ã«ä½¿ã£ãŸ ã€Œéµã€ ã‚’åˆ¥é€”é€ã£ã¦ãŠã‹ãªãã¦ã¯ãªã‚Šã¾ã›ã‚“ã€‚ éµãŒæ¼æ´©ã™ã‚‹æã‚ŒãŒã‚ã‚Šã€ å®‰å…¨ã¨ã¯ã„ã„ãã‚Œã¾ã›ã‚“ã€‚ ãƒ‡ã‚£ãƒ•ã‚£ãƒ¼ãŒè€ƒãˆãŸã®ã¯ã€ éµã‚’äºŒã¤ä½¿ã†ã“ã¨ã§ã™ã€‚ ã²ã¨ã¤ã¯å…¬é–‹éµ ï¼ˆpublic keyï¼‰ã€‚ ã€Œå…¬
mizdra 2016/02/18
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

RSA

å…¬é–‹éµæš—å·
ãƒªãƒ³ã‚¯
å…¬é–‹éµæš—å·ã¨é›»åç½²åã®åŸºç¤ŽçŸ¥è˜ - Qiita
ã¨ãã«ã€è‹±èªžã® decryption ã‚’æ—¥æœ¬èªžã§ãªã‚“ã¨å‘¼ã¶ã‹ã¯äººã«ã‚ˆã£ã¦ã¾ã¡ã¾ã¡ã§ã™ã€‚ å¾©å· ã¨å‘¼ã‚“ã§ã„ã‚‹äººã‚‚ã„ã‚‹ã®ã§ã™ãŒã€å¾©å·ã¯ decode ã®è¨³èªžã¨ã—ã¦ä½¿ã„ãŸã„ã®ã§ã€ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ å¹³æ–‡åŒ– ã‚’ä½¿ã„ã¾ã™ã€‚ å…¬é–‹éµæš—å·ã¨ã¯ çŽ„é–¢ã®éµã¯é–‰ã‚ã‚‹ã¨ãã‚‚é–‹ã‘ã‚‹ã¨ãã‚‚åŒã˜éµã‚’ä½¿ã„ã¾ã™ã€‚é‡‘åº«ã®éµã‚‚æ™®é€šã¯ãã†ã§ã™ã€‚ã§ã¯ é‡‘åº«ã«è²´é‡å“ã‚’è©°ã‚ã¦é€ã£ã¦ã‚‚ã‚‰ã†æ™‚ã¯ã©ã†ã§ã—ã‚‡ã†? é‡‘åº«ã‚’é–‰ã‚ã‚‹éµã¨é–‹ã‘ã‚‹éµãŒåŒã˜ã ã¨ã€é‡‘åº«ã«ã‚‚ã®ã‚’è©°ã‚ã¦ã‚‚ã‚‰ã†ç›¸æ‰‹ã«ãã®éµã‚’æ¸¡ã™å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ãã®éµã‚’éƒµé€ã§é€ã‚ã†ã¨ã—ãŸã‚‰ã€é€”ä¸ã§èª°ã‹ã«è¦‹ã‚‰ã‚Œã¦è¤‡è£½ã‚’ä½œã‚‰ã‚Œã¦ã—ã¾ã†ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚å¤§äº‹ãªã‚‚ã®ã‚’é€ã‚‹ãŸã‚ã«éµã‚’ã‹ã‘ã‚ˆã†ã¨ã—ã¦ã„ã‚‹ã®ã«ã€åŒã˜åŠ´åŠ›ã‚’ã‹ã‘ã¦éµã‚’å—ã‘æ¸¡ã•ãªã‘ã‚Œã°ã„ã‘ãªã„ã¨ãªã‚‹ã¨æœ¬æœ«è»¢å€’ã§ã™ã€‚ ã“ã‚Œã¯ã€æš—å·é€šä¿¡ã§ã‚‚åŒã˜ã“ã¨ãŒè¨€ãˆã¾ã™ã€‚ ãã“ã§ã€æš—å·é€šä¿¡ã«ãŠã„ã¦ é–‰ã‚ã‚‹ã“ã¨ã—ã‹ã§ããªã„éµ ã¨ é–‹ã‘ã‚‹ã“ã¨ã—ã‹ã§ããªã„éµ ã®ãƒšã‚¢ã‚’ä½¿ã†ã“
mizdra 2016/02/18
åˆ†ã‹ã‚Šã‚„ã™ã„

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1