[B! security] taketyanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

taketyan id:taketyan

securityã«é–¢ã™ã‚‹taketyanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (39)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

AWS Organizationsã«ã‚ˆã‚‹ãƒžãƒ«ãƒã‚¢ã‚«ã‚¦ãƒ³ãƒˆæˆ¦ç•¥ã¨ãã®å®Ÿè£… - ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ¯ãƒ¼ã‚¯ã‚¹ ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒ–ãƒã‚°
SREãƒãƒ¼ãƒ ã® @tmknom ã§ã™ã€‚ã‚¸ãƒ§ã‚¸ãƒ§5éƒ¨ã®ã‚¢ãƒ‹ãƒ¡åŒ–ã«èˆˆå¥®ã‚’éš ã›ãªã„ä»Šæ—¥ã“ã®ã”ã‚ã§ã™ã€‚ ã¿ãªã•ã‚“ã€AWS Organizationsã¯ä½¿ã£ã¦ã¾ã™ã‹ï¼Ÿ ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ¯ãƒ¼ã‚¯ã‚¹ã§ã‚‚æœ€è¿‘ä½¿ã„å§‹ã‚ã¾ã—ãŸã€‚AWS Organizationsã€è¶…çµ¶ä¾¿åˆ©ã§ã™ã€‚ã“ã‚“ãªã«ä¾¿åˆ©ãªã®ã«ã€æ„å¤–ã¨å…¬é–‹ã•ã‚Œã¦ã‚‹äº‹ä¾‹ãŒå°‘ãªãã¦ã€ãã¬ã¬ã£ã¦ãªã‚Šã¾ã™ã€‚ã¨ã„ã†ã‚ã‘ã§ã€ä½¿ã„å§‹ã‚ãŸã°ã‹ã‚Šã§ã™ãŒã€ã‚µã‚¯ãƒƒã¨å…¬é–‹ã—ã¦ã¿ã¾ã™ã€‚ä»–ã®ä¼šç¤¾ã•ã‚“ã‚‚ã€å…¬é–‹ã—ã¦ãã‚Œï¼ï¼ AWS Organizations ãƒžãƒ«ãƒã‚¢ã‚«ã‚¦ãƒ³ãƒˆæˆ¦ç•¥ å…ˆè¡Œäº‹ä¾‹ã®èª¿æŸ» ã‚³ãƒ³ã‚»ãƒ—ãƒˆç–å®š Terraformæˆ¦ç•¥ Terraformãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã‚ˆã‚‹å…±é€šåŒ– ã‚¤ãƒ³ãƒ•ãƒ©ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆ VPCã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ç©ºé–“ ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ç®¡ç†ãƒãƒªã‚·ãƒ¼ OUï¼ˆOrganizational Unitï¼‰ã®è²¬å‹™ ç®¡ç†ç”¨AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®è²¬å‹™ Masterã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ã‚ˆã‚‹ã‚¢ã‚«ã‚¦ãƒ³ãƒˆç®¡ç† çµ„ç¹” OUï¼ˆOrga
taketyan 2021/05/15
aws

security
ãƒªãƒ³ã‚¯
CSRF is (really) dead
Scott Helme Security researcher, entrepreneur and international speaker who specialises in web techno logies. More posts by Scott Helme. A little while back I wrote a blog post about how "CSRF is dead". It focused on SameSite cookies, a powerful yet simple feature to protect your website against CSRF attacks. As powerful as it was, and as much as it will kill CSRF, you had to enable it on your site
taketyan 2019/09/08
ã‚ã¨ã§èªã‚€

security

chrome
ãƒªãƒ³ã‚¯
ã€Œã•ã‚ˆã†ãªã‚‰ ImageMagickã€ã®è€ƒå¯Ÿ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
taketyan 2018/08/26
imagemagick

security
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2018/07/10/engadget-keyboard-thermal/
taketyan 2018/07/10
åŽŸç†çš„ã«ã¯ã“ã‚Œã¨åŒã˜ https://gigazine.net/news/20140901-steal-atm-pin-codes/ / ATM ã§ã¯æš—è¨¼ç•ªå·å…¥åŠ›ã—ãŸå¾Œã«ã€ãƒ©ãƒ³ãƒ€ãƒ ã«å…¨ãƒœã‚¿ãƒ³ã‚’æŒ‡ã§æ’«ã§ã‚‹ã‚ˆã†ã«ã—ã¦ã„ã‚‹

security
ãƒªãƒ³ã‚¯
HashDoSè„†å¼±æ€§ã¨ã®æˆ¦ã„ï¼ Rubyã‚³ãƒŸãƒƒã‚¿ãƒ¼ãƒ»åœéƒ¨æ˜Œå¹³ãŒæ˜Žã‹ã™ãƒ—ãƒã‚°ãƒ©ãƒ å …ç‰¢åŒ–ã®ãƒŽã‚¦ãƒã‚¦ - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢Hubï½œè‹¥æ‰‹Webã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ã‚ãƒ£ãƒªã‚¢ã‚’è€ƒãˆã‚‹ï¼
HashDoSè„†å¼±æ€§ã¨ã®æˆ¦ã„ï¼Â Rubyã‚³ãƒŸãƒƒã‚¿ãƒ¼ãƒ»åœéƒ¨æ˜Œå¹³ãŒæ˜Žã‹ã™ãƒ—ãƒã‚°ãƒ©ãƒ å …ç‰¢åŒ–ã®ãƒŽã‚¦ãƒã‚¦ éŽåŽ»ã€HashDosã®å½±éŸ¿ã‚’å—ã‘ãŸRubyã€‚è¨€èªžé–‹ç™ºè€…ã¯ã„ã‹ã«ã—ã¦ã“ã†ã—ãŸå•é¡Œã«å¯¾å¿œã—ã¦ããŸã®ã§ã—ã‚‡ã†ã‹ã€‚ã‚³ãƒŸãƒƒã‚¿ãƒ¼ã§ã‚ã‚‹åœéƒ¨æ°ã®è²´é‡ãªè¨˜éŒ²ã‚’å…¬é–‹ã—ã¾ã™ã€‚ 2011å¹´ã®æœ«é ƒã€HashDoSã¨ã„ã†è„†å¼±æ€§ãŒå…¬è¡¨ã•ã‚Œã€Rubyã‚‚ã“ã®å½±éŸ¿ã‚’å—ã‘ãŸã€‚æœ¬ç¨¿ã®ç†è€…ã§ã‚ã‚‹åœéƒ¨æ˜Œå¹³ï¼ˆã†ã‚‰ã¹ãƒ»ã—ã‚‡ã†ã¸ã„ï¼@shyouheiï¼ä»¥ä¸‹ã€åœéƒ¨ï¼‰ã¯ã€å ±å‘Šå½“åˆã‹ã‚‰Rubyå´ã®ãƒãƒ¼ãƒ ãƒ¡ãƒ³ãƒãƒ¼ã¨ã—ã¦ãƒ—ãƒã‚°ãƒ©ãƒ æœ¬ä½“ã®ä¿®æ£ã‚’æ‹…å½“ã—ãŸã€‚ä»¥ä¸‹ã¯ãã®è¨˜éŒ²ã§ã‚ã‚‹ã€‚è¨€èªžé–‹ç™ºè€…ãŸã¡ãŒæ™®æ®µã©ã®ã‚ˆã†ãªã“ã¨ã‚’è€ƒãˆã€ã©ã†ã„ã£ãŸæŠ€è¡“ã‚’ç”¨ã„ã¦é–‹ç™ºã‚„ãƒã‚°ãƒ•ã‚£ãƒƒã‚¯ã‚¹ã‚’è¡Œã£ã¦ã„ã‚‹ã®ã‹ã€‚ãã®æ¦‚è¦ã‚’çŸ¥ã£ã¦ã‚‚ã‚‰ãˆã‚Œã°å¹¸ã„ã ã€‚ ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆæŒ‡å‘ã‚¹ã‚¯ãƒªãƒ—ãƒˆè¨€èªž Ruby HashDoSã®æ¦‚è¦ ãªãœç´„6å¹´å¾Œã®ä»Šã€ä¿®æ£å†…å®¹ã‚’å…¬é–‹ã™ã‚‹ã«è‡³ã£ãŸã‹ï¼Ÿ å‰å²ï¼šã™ã§ã«å†…åŒ…ã•ã‚Œã¦ã„ãŸãƒªã‚¹ã‚¯
taketyan 2018/01/11
PHP 5 ç³»ã§ã¯æ²»ã‚‰ãªã„ã¾ã¾ã ã£ãŸèªè˜ã ã‘ã© 7 ç³»ã§ã¯ã©ã†ãªã£ãŸã‚“ã ã‚ https://qiita.com/yuya_takeyama/items/7a717b334edd60bc6ce3

security

ruby
ãƒªãƒ³ã‚¯
Microsoft already has a fix for that severe WiFi security exploit (updated)
Microsoft already has a fix for that severe WiFi security exploit (updated) The "Krack Attack" WiFi encryption security flaw is more than a little frightening, but you should already be relatively safe if you're using a recent Windows PC. Microsoft has released a patch that fixes the vulnerability on all supported versions of Windows (effectively, 8 or later). Windows isn't as susceptible to the f
taketyan 2017/10/17
ãƒžã‚¸ã‹ã‚ˆ â€œApple hasn't detailed a fix yetâ€

krack

security
ãƒªãƒ³ã‚¯
How Dropbox securely stores your passwords | Dropbox Tech Blog
Itâ€™s universally acknowledged that itâ€™s a bad idea to store plain-text passwords. If a database containing plain-text passwords is compromised, user accounts are in immediate danger. For this reason, as early as 1976, the industry standardized on storing passwords using secure, one-way hashing mechanisms (starting with Unix Crypt). Unfortunately, while this prevents the direct reading of passwords
taketyan 2017/07/28
security
ãƒªãƒ³ã‚¯
è¶…çµ¶æŠ€å·§CSRF / Shibuya.XSS techtalk #7
CSRF, HTML Form Protocol Attack, Cross-protocol scripting attackã«ã¤ã„ã¦
taketyan 2016/03/29
security

mala

csrf

xss
ãƒªãƒ³ã‚¯
èªè¨¼å‡¦ç†ã‚’å®Ÿè£…ã™ã‚‹ãªã‚‰ãƒãƒƒã‚·ãƒ¥ã¯SHAãƒ•ã‚¡ãƒŸãƒªã‚ˆã‚ŠBCryptã‚’ä½¿ãŠã†
ä»Šå›žã¯èªè¨¼ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ãƒãƒƒã‚·ãƒ¥åŒ–ã™ã‚‹éƒ¨åˆ†ã«ã¤ã„ã¦ã®è©±ã§ã™ã€‚ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ãƒãƒƒã‚·ãƒ¥åŒ–ã‚’ã‚‚ã—SHA256ãªã©ã®ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã§ãƒãƒƒã‚·ãƒ¥åŒ–ã—ã¦ã„ã‚‹ã®ã§ã‚ã‚Œã°ã€ã§ãã‚Œã°BCryptã«ä¹—ã‚Šæ›ãˆãŸæ–¹ãŒè‰¯ã„ã‚ˆã€ã¨ã„ã†ã®ãŒä»Šå›žã®è©±ã§ã™ã€‚ è©³ç´°ã¯ã“ã“ãŒå‚è€ƒã«ãªã‚Šã¾ã™ã€‚ ã‚ˆã†ã™ã‚‹ã«SHAã¯é«˜é€Ÿã‚’è€ƒãˆã¦ä½œã‚‰ã‚ŒãŸã®ã§ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ãƒãƒƒã‚·ãƒ¥é–¢æ•°å‘ãã§ã¯ãªã„ã€ã¨ã€‚é«˜é€Ÿã«å®Ÿè¡Œã§ãã¦ã—ã¾ã†ã¨ãã‚Œã ã‘ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã®ä½œæˆãŒå®¹æ˜“ã«ãªã‚‹ã€ã¨ã„ã†ã“ã¨ã§ã™ã‹ã‚‰ã‚»ã‚ãƒ¥ã‚¢ã˜ã‚ƒãªã„ã§ã™ãã€‚ ãŸã ã€ãã‚Œã§ã‚‚BCryptã¨ã‹ã‚’ä½¿ãˆã°ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ãŒã„ã‚‰ãªã„ã‚ˆã€ã¨ã„ã†è¨³ã§ã¯ãªã„ã‚ˆã†ã§ã™ã€‚ã‚ãã¾ã§å¾“æ¥é€šã‚Šè€ƒãˆæ–¹ã¯ãƒãƒƒã‚·ãƒ¥é–¢æ•°ï¼‹ã‚½ãƒ«ãƒˆï¼‹ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ã§ã™ã€‚ ãŸã ã€BCryptã®å®Ÿè£…ã§ã‚ã‚‹jBCryptã‚’ä½¿ã†ã¨ã‹ãªã‚Šæ‰±ã„ãŒæ¥½ã«ãªã‚‹ã®ã§ã¯ãªã„ã‹ã¨æ€ã„ã¾ã™ã€‚ã©ã®ã‚ˆã†ã«æ¥½ã«ãªã‚‹ã‹æ›¸ã„ã¦ãã¾ã™ã€‚ jBCryptã®ä½¿ã„æ–¹ Scalaã§ã‚‚ä½¿ãˆã¾ã™ãŒã€ä»Šå›žã¯
taketyan 2015/09/26
security

bcrypt
ãƒªãƒ³ã‚¯
ã‚¨ãƒ•ã‚»ã‚ãƒ¥ã‚¢ãƒ–ãƒã‚° : ã€ŒSHA-1+saltã€ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ååˆ†ã ã¨æ€ã„ã¾ã™ã‹ï¼Ÿ
ã€ŒSHA-1+saltã€ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ååˆ†ã ã¨æ€ã„ã¾ã™ã‹ï¼Ÿ 2011å¹´02æœˆ09æ—¥17:39 ãƒ„ã‚¤ãƒ¼ãƒˆ fsecure_corporation ãƒ˜ãƒ«ã‚·ãƒ³ã‚ç™ºÂ byï¼šã‚¸ãƒ£ãƒ«ãƒŽãƒ»ãƒãƒ¡ãƒ© ã‚¢ãƒŠãƒ¼ã‚ãƒ¼ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚°ãƒ«ãƒ¼ãƒ—ã€ŒAnonymousã€ãŒå…ˆé ƒã€HBGary Federalã¨ãƒ«ãƒ¼ãƒˆã‚ãƒƒãƒˆãƒ†ã‚¯ãƒŽãƒã‚¸ã®åˆ†æžã¨é–‹ç™ºã«å°‚å¿ƒã—ã¦ã„ã‚‹ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ãƒ•ã‚©ãƒ¼ãƒ©ãƒ ã€Œrootkit.comã€ã‚’ãƒãƒƒã‚ãƒ³ã‚°ã—ãŸã€‚ã€Œrootkit.comã€ã®å…¨ãƒ¦ãƒ¼ã‚¶ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«éšœå®³ãŒèµ·ãã¦ã„ã‚‹ã€‚ ã“ã®ä»¶ã«é–¢é€£ã—ã¦ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã§æ°—ã«å…¥ã£ã¦ã„ã‚‹ãƒˆãƒ”ãƒƒã‚¯ã€ã™ãªã‚ã¡ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒãƒƒã‚·ãƒ¥ã«ã¤ã„ã¦æŒ‡æ‘˜ã—ãŸã„ã€‚ Webï¼ˆãŠã‚ˆã³ãã®ä»–ã®ï¼‰ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒã€ãƒ¦ãƒ¼ã‚¶ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ãƒãƒƒã‚·ãƒ¥ã«MD5ã€SHA1ã¾ãŸã¯SHA-256ã‚’ä½¿ç”¨ã—ã¦ãŠã‚Šã€å…ˆé€²çš„ãªãƒ‡ãƒ™ãƒãƒƒãƒ‘ã•ãˆã€ãã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’saltã—ã¦ã„ã‚‹ã€‚ãã—ã¦ç§ã¯é•·å¹´ã«æ¸¡ã£ã¦ã€saltå€¤ã¯ã©ã®
taketyan 2015/09/26
security
ãƒªãƒ³ã‚¯
Jamie Brown
Jamie Brown Co-founder of Chicmi Chicmi
taketyan 2015/07/27
.git ã‚’é–“é•ã£ã¦å…¬é–‹ã—ãªã„ã‚ˆã†æ°—ã‚’ä»˜ã‘ã‚ã¨ã„ã†è©±ã€‚Subversion ã¨ã‹ã§ã‚‚ã‚ã£ãŸè©±ã ã‘ã© Git ã ã¨ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ä¸¸ã”ã¨å–å¾—ã§ãã¦ã—ã¾ã£ã¦ã•ã‚‰ã«å±é™ºã€‚

git

security
ãƒªãƒ³ã‚¯
äº”å³¶å¤•å¤ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ—ãƒ å¾³ä¸¸æµ©å…ˆç”Ÿã«ä¸€æ—¥å¯†ç€ï¼ä»Šã™ãä½¿ãˆã‚‹ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã‚’ç›—ã‚“ã§ãã¾ã—ãŸ | NO MORE æƒ…å ±æ¼ãˆã„
ã“ã‚“ã«ã¡ã¯ã€äº”å³¶å¤•å¤ã§ã™ï¼ æ™®æ®µã¯ãƒ•ãƒªãƒ¼ãƒ©ãƒ³ã‚¹ã¨ã—ã¦ã‚¤ãƒ©ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¿ãƒ¼ã‚„ãƒ¢ãƒ‡ãƒ«ã®ãŠä»•äº‹ã‚’ã—ã¦ã„ã‚‹ç§ã§ã™ãŒã€ä»Šæ—¥ã¯NO MORE æƒ…å ±æ¼ãˆã„ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ä¸€å“¡ã¨ã—ã¦ã€ä¸€æ—¥ã‚¤ãƒ³ã‚¿ãƒ“ãƒ¥ã‚¢ãƒ¼ã«æŒ‘æˆ¦ã—ã¾ã™ï¼ çªç„¶ã§ã™ãŒçš†ã•ã‚“ã¯ã€æ¯Žæ—¥ã®ç”Ÿæ´»ã®ä¸ã§ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã«ã¤ã„ã¦ã©ã‚Œãã‚‰ã„æ°—ã‚’ã¤ã‘ã¦ã„ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã‹ï¼Ÿ ç§ã‚‚Twitterã‚„Facebookã‚’ã‚ˆãåˆ©ç”¨ã—ã¾ã™ã—ã€ãŠä»•äº‹ã‚‚ãƒ¡ãƒ¼ãƒ«ã§å—ã‘ã¦ã„ã¾ã™ã€‚PCã‚’ä½¿ã†æ©Ÿä¼šã‚‚å¤šã„ã®ã§æƒ…å ±ã®ç®¡ç†ã«ã¯æ°—ã‚’ã¤ã‘ãªãã‚ƒã¨æ€ã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€ã€Œå…·ä½“çš„ã«ä½•ã‚’ã©ã†æ°—ã‚’ã¤ã‘ã‚Œã°ã„ã„ã®ã‹ã‚ã‹ã‚‰ãªã„ï¼ã€ã¨ã„ã†äººã¯ç§ã ã‘ã§ã¯ãªã„ã¯ãšã§ã™ã€‚ ã¨ã„ã†ã“ã¨ã§ä»Šå›žã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«ã¨å‘¼ã°ã‚Œã‚‹å¾³ä¸¸ æµ©ï¼ˆã¨ãã¾ã‚‹ ã²ã‚ã—ï¼‰å…ˆç”Ÿã«å¯†ç€å–æï¼ ãƒ—ãƒãŒã©ã‚“ãªã¨ã“ã‚ã«æ°—ã‚’ã¤ã‘ã¦ã„ã‚‹ã®ã‹ã€ç§ãŸã¡ã®ç”Ÿæ´»ã«ã‚‚æ´»ã‹ã›ãã†ãªãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã‚’ç›—ã‚“ã§ããŸã„ã¨æ€ã„ã¾ã™ï¼ å¾³ä¸¸ æµ©ï¼ˆã¨ãã¾ã‚‹ ã²ã‚ã—ï¼‰å…ˆç”Ÿ HA
taketyan 2015/07/23
é«˜æœ¨æµ©å…‰ç·¨ã¸ã®æœŸå¾…ãŒé«˜ã¾ã‚‹ / id:DustOfHuman å®Ÿéš› LIG ã¿ãŸã„ã§ã™https://twitter.com/TakuyaShin21/status/624054314139435008 ãƒãƒ£ãƒ©ç”· http://liginc.co.jp/omoshiro/pr-omoshiro/157281

security
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã•ã›ã‚‹SaaSã¯å…¨ã¦è„†å¼±ã¨ã„ã†è€ƒãˆæ–¹ - ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã ã¡ãã‚“
ã‚·ãƒ³ã‚¸ã§ã™ã€‚ãã‚“ãªã“ã¨è¨€ã£ãŸã‚‰ãªã‚“ã«ã‚‚ä½¿ãˆãªã„ã˜ã‚ƒç„¡ã„ã‹ï¼ã¨ã„ã†ã®ã¯ãã®é€šã‚Šãªã®ã§ã™ãŒã€cloudpack - CTOéˆ´æœ¨ã¯ã€Œè‡ªç¤¾ã®ADã‹ã‚‰SSOï¼ˆã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ï¼‰ã§ããªã„ã‚µãƒ¼ãƒ“ã‚¹ã¯åŽŸå‰‡æŽ¡ç”¨ã—ãªã„ã‚‚ã‚“ï¼ã€ã¨ã„ã†ãƒãƒªã‚·ãƒ¼ã‚’æŒã£ã¦ã„ã¾ã™ã€‚ã“ã‚Œã£ã¦å®Ÿéš›ã®ã¨ã“ã‚ã©ã†ã§ã—ã‚‡ã†ã‹ï¼Ÿä»Šå›žã¯cloudpackãŒã©ã†ã‚„ã£ã¦SaaSã‚’æŽ¡ç”¨ã™ã‚‹ã‹ã¨ã„ã†å†…éƒ¨è³‡æ–™ã®ä¸€éƒ¨ã‚’ç‰¹åˆ¥ã«å…¬é–‹ã—ã¦ã€SaaSã®é¸ã³æ–¹ã«ã¤ã„ã¦è€ƒãˆã¦ã¿ã¾ã™ã€‚ cloudpackã¯åŽŸå‰‡ã€AWSãªã©ã¸ã®ãƒã‚°ã‚¤ãƒ³ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½¿ã„ã¾ã›ã‚“ã“ã¡ã‚‰ã¯ã€ã€Œæœ€å¼·ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã§AWSãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ–¹æ³•ã€ã§ã”ç´¹ä»‹ã—ãŸé€šã‚Šãªã®ã§è©³ç´°ã¯å‰²æ„›ã—ã¾ã™ãŒã€ç¤¾å†…ã§ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½¿ã†ã‚·ãƒãƒ¥ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã€ã€Œãƒ‘ã‚½ã‚³ãƒ³/Macã«ãƒã‚°ã‚¤ãƒ³ã™ã‚‹ã¨ãã¨ã€SSOã™ã‚‹ã¨ãã®ã¿ã€ã§ã™ã€‚ã©ã¡ã‚‰ã«ã—ã¦ã‚‚ADã®ãƒ¦ãƒ¼ã‚¶ãƒ¼IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã—ã‹ä½¿ã„ã¾ã›ã‚“ã€‚ã¾ã•ã—ãSSOã§ã™ã€‚SAML
taketyan 2015/07/10
USB ã§åˆºã™å¤šè¦ç´ èªè¨¼ãƒ‡ãƒã‚¤ã‚¹ã®ã¨ã“ã§ãƒ†ãƒ¼ãƒ ãƒ©ãƒœã®çŒªåã•ã‚“ãŒãƒŽãƒ¼ãƒˆ PC ç„¡ãã—ã¾ãã‚‹è©±ã®ã“ã¨è€ƒãˆã¦ãŸ

security
ãƒªãƒ³ã‚¯
ä¼æ¥ã‚„ãƒãƒ¼ãƒ å†…ã§ã®ã‚¯ã‚½ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç®¡ç†ã‹ã‚‰è„±å´ã™ã‚‹Meldiumã®ã™ã™ã‚ - ãƒˆãƒ©ãƒ³ã‚¹ãƒªãƒŸãƒƒãƒˆå‰µæ¥è¨˜.author = é«˜å ´å¤§æ¨¹
ä»Šå›žã¯ã€ç§è‡ªèº«ãŒãšã£ã¨èª²é¡Œã«æ„Ÿã˜ã¦ã„ãŸã€Œä¼æ¥ã‚„ãƒãƒ¼ãƒ ã§ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç®¡ç†ã€ã«ã¤ã„ã¦ã€‚ å‰è·ã§å…¨ç¤¾ã®æƒ…å ±ã‚·ã‚¹ãƒ†ãƒ éƒ¨ã«æ‰€å±žã—ã¦ã„ãŸã“ã¨ãŒã‚ã‚‹ã®ã§ã€ä»¥å‰ã‹ã‚‰ä¼æ¥ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¯ã‹ãªã‚Šèˆˆå‘³ãŒã‚ã‚‹ã®ã§ã™ãŒã€å¤§ä¼æ¥ã§ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒã‚¬ãƒã‚¬ãƒã§åˆ©ä¾¿æ€§ãŒç„¡ã„ã€‚é€†ã«ã‚¹ã‚¿ãƒ¼ãƒˆã‚¢ãƒƒãƒ—ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼Ÿã¿ãŸã„ãªæ„Ÿã˜ãŒéžå¸¸ã«å¤šã„ã¨æ€ã„ã¾ã™ã€‚å¤§æŠµã®å ´åˆã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ããˆã€ã‚ã‹ã‚‹ã‚ˆã€ã‚ã‹ã‚‹ã‘ã©é¢å€’ã ã‚ˆãã€ã¿ãŸã„ãªè€ƒãˆã‚’æŒã£ã¦ã„ã‚‹äººãŒå¤šãã€ã‚ã¾ã‚Šç©æ¥µçš„ã§ã¯ç„¡ã„ã‚ˆã†ãªæ°—ãŒã—ã¾ã™ã€‚ä¸€åº¦å¤±æ•—ã—ãŸçµŒé¨“ãŒç„¡ã„ã¨ã‚ã¾ã‚Šèº«è¿‘ã«æ„Ÿã˜ãªã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¨ã„ã†ã¨ã‚„ã‚‹ã“ã¨ã¯ãŸãã•ã‚“ã‚ã‚‹ã‘ã©ã€ã©ã®ä¼æ¥ã‚‚æŠœã‘ã¦ã„ã‚‹ã‚“ã§ã¯ãªã„ã‹ã¨èª²é¡Œè¦–ã—ã¦ã„ãŸã®ãŒã€ãƒãƒ¼ãƒ ã§ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç®¡ç†ã€‚è‡ªåˆ†è‡ªèº«ã‚‚ãƒªã‚¹ã‚¯ã‚ã‚‹ãªã‚ã¨æ€ã„ãªãŒã‚‰æš—ä¸æ¨¡ç´¢ã—ã¦ã„ãŸã‚“ã§ã™ãŒã€ã‚ˆã†ã‚„ããã‚“ãªæ‚©ã¿ã‚’è§£æ±ºã§ãã‚‹Meldiumã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ã‚’è¦‹ã¤ã‘ã¦ã—ã¾ã„ã¾ã—ãŸã€‚ã—ã‹ã‚‚
taketyan 2015/03/30
ã‚ã¨ã§èªã‚€

password

security
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰èªè¨¼
ã«ã‚“ã˜å ±å‘Š
taketyan 2015/02/14
å•é¡ŒãŒã‚ã‚‹ã®ã¯ Wireshark ã˜ã‚ƒãªãã¦ãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ãŒã“ã‚“ãªã«ã‚‚ç°¡å˜ã«ã§ãã¦ã—ã¾ã†ã“ã¨ãŒã¡ã‚ƒã‚“ã¨çŸ¥ã‚‰ã‚Œã¦ãªã„ã€ã£ã¦ã“ã¨ã ã—æ„ç¾©ã®ã‚ã‚‹æ´»å‹•ãªã®ã§ã¯ / ç¢ºèªãã‚“ã¨ã‹ã‚‚æ ¹æœ¬ã«ã¯ãã†ã„ã†æ€æƒ³ãŒã‚ã‚Šãã†

security
ãƒªãƒ³ã‚¯
ssig33.com - ã‚ˆãåˆ†ã‹ã‚‰ãªã„äººã®ãŸã‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ã„ã‚ã„ã‚ã¨åŽŸå‰‡è«–ã¯ã‚ã‚‹ã‚“ã§ã™ãŒã€‚æ˜¨ä»Šã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯è¤‡é›‘åŒ–ã—ã€æ‰±ã†æƒ…å ±ã¯ã‚ˆã‚Šã‚»ãƒ³ã‚·ãƒ†ã‚£ãƒ–ã«ãªã‚Šã€ãã—ã¦ã‚ˆã‚Šå¹…åºƒãä½¿ã‚ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ã‚ˆã£ã¦ã€Œå®‰å…¨ãªã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ä½œã‚‹ãŸã‚ã«å¿…è¦ãªçŸ¥è˜ã¯ã¾ã™ã¾ã™å¢—ãˆã‚‹å‚¾å‘ã«ã‚ã‚Šã¾ã™ã€‚ ã‚ˆãåˆ†ã‹ã£ã¦ãªã„äººã¯ä»¥ä¸‹ã®ã“ã¨ã«ã¨ã‚Šã‚ãˆãšæ°—ã‚’ã¤ã‘ã¾ã—ã‚‡ã† 1. ãªã‚‹ã¹ãè‡ªåˆ†ã§ä½œã‚‰ãªã„ ã“ã‚Œã¯æœ€ã‚‚é‡è¦ãªã“ã¨ã§ã™ã€‚æ¤œç´¢ã™ã‚‹ã€ä»–äººã«èžãã€è‡ªåˆ†ã§è€ƒãˆãªã„ã€‚ã“ã‚Œã¯é‡è¦ã§ã™ã€‚å¤§æŠµã®å•é¡Œã¯ä»–äººãŒä½œã£ã¦ãã‚ŒãŸè§£æ±ºç–ã‚’é©ç”¨ã§ãã¾ã™ã€‚ ä¾‹ãˆã°ã‚»ã‚ãƒ¥ã‚¢ãªå•åˆã›ãƒ•ã‚©ãƒ¼ãƒ ã‚’ä½œã‚‹ã“ã¨ã«ã—ã¾ã—ã‚‡ã†ã€‚æ°—ã‚’ã¤ã‘ã‚‹ã¹ãã“ã¨ã¯ä»¥ä¸‹ã®ã“ã¨ãã‚‰ã„ã§ã—ã‚‡ã†ã‹ã€‚ é€ä¿¡å†…å®¹ã®ç¢ºèªç”»é¢ã‚’è¡¨ç¤ºã™ã‚‹å ´åˆã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å…¥åŠ›ã—ãŸå€¤ã¯é©åˆ‡ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã‚ˆã†ã« é€ä¿¡å†…å®¹ã‚’ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã® DB ã«æ ¼ç´ã™ã‚‹å ´åˆã«ã¯ SQL ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’é˜²ãŒãªã‘ã‚Œã°ãªã‚‰ãªã„ã®ã§ã€ãƒ—ãƒªãƒšã‚¢ãƒ‰ã‚¹ãƒ†ãƒ¼ãƒˆãƒ¡ãƒ³ãƒˆã‚’ç”¨ã„ã‚‹ CSRF å¯¾ç–
taketyan 2015/02/06
security
ãƒªãƒ³ã‚¯
serverspec for CVE-2015-0235
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
taketyan 2015/01/28
ãªã‚‹ã»ã©

serverspec

glibc

security
ãƒªãƒ³ã‚¯
ã‚ˆãã‚ã‚‹ã”è³ªå• | ã‚µãƒãƒ¼ãƒˆ | au
ãƒ¡ãƒ¼ãƒ«ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒã€Œezweb.ne.jpã€ã‹ã‚‰ã€Œau.comã€ã«å¤‰ã‚ã‚‹ã‚“ã§ã™ã‹ï¼Ÿ å½¹ã«ãŸã£ãŸ!Â 0 SMSï¼ˆCï¾’ï½°ï¾™ï¼‰ã®é€å—ä¿¡ã«ã‹ã‹ã‚‹æ–™é‡‘ã¯? å½¹ã«ãŸã£ãŸ!Â 0 auæ–™é‡‘ã®ç· ã‚æ—¥ã€æ”¯æ‰•ã„æœŸæ—¥ã¯ã„ã¤ã§ã™ã‹ï¼Ÿ å½¹ã«ãŸã£ãŸ!Â 0 Wi-Fiã¨ã¯ãªã‚“ã§ã™ã‹ï¼Ÿ å½¹ã«ãŸã£ãŸ!Â 0 ã€Œ0800ã€ã‹ã‚‰å§‹ã¾ã‚‹é›»è©±ç•ªå·ã£ã¦ãªã‚“ã§ã™ã‹ï¼Ÿ å½¹ã«ãŸã£ãŸ!Â 0 å‹æ‰‹ãªé€šä¿¡ã‚’é˜²ãŽãŸã„/ãƒãƒƒã‚¯ã‚°ãƒ©ã‚¦ãƒ³ãƒ‰é€šä¿¡ã‚’æ¢ã‚ã‚‹ã«ã¯ã©ã†ã™ã‚Œã°ã„ã„ã§ã™ã‹ï¼Ÿ å½¹ã«ãŸã£ãŸ!Â 0 ã€au WALLET ãƒ—ãƒªãƒšã‚¤ãƒ‰ã‚«ãƒ¼ãƒ‰ã€‘ã‚«ãƒ¼ãƒ‰ã®æœ‰åŠ¹æœŸé™ã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ å½¹ã«ãŸã£ãŸ!Â 0 SMSã¨ãƒ¡ãƒ¼ãƒ«ã®é•ã„ã¯ä½•ã§ã™ã‹? å½¹ã«ãŸã£ãŸ!Â 0 SMSã¨SNSã®é•ã„ã‚’æ•™ãˆã¦ãã ã•ã„ å½¹ã«ãŸã£ãŸ!Â 0 ã€ãƒ‡ãƒ¼ã‚¿ãƒãƒ£ãƒ¼ã‚¸ã€‘ãƒ‡ãƒ¼ã‚¿ãƒãƒ£ãƒ¼ã‚¸å®¹é‡1GBã®ç›®å®‰ã‚’çŸ¥ã‚ŠãŸã„ å½¹ã«ãŸã£ãŸ!Â 0 ã€ãƒ‹ãƒ¥ãƒ¼ã‚¹ãƒ‘ã‚¹ã€‘ã€Œãƒ‹ãƒ¥ãƒ¼ã‚¹ãƒ‘ã‚¹ã€ã¨ã¯ãªã‚“ã§ã™ã‹ï¼Ÿ ç„¡æ–™ã§ã™ã‹ï¼Ÿ å½¹ã«ãŸã£ãŸ!Â 0 auã‚¹ãƒžãƒ¼
taketyan 2014/10/21
au

security

poodle
ãƒªãƒ³ã‚¯
GitHubãƒ¦ãƒ¼ã‚¶ãƒ¼ã®SSHéµ6ä¸‡å€‹ã‚’èª¿ã¹ã¦ã¿ãŸ - hnwã®æ—¥è¨˜
ï¼ˆ2015/1/30 è¿½è¨˜ï¼‰æ™‚æœŸã¯ä¸æ˜Žã§ã™ãŒã€ç¾æ™‚ç‚¹ã®github.comã¯Ed25519éµã«ã‚‚å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚ ï¼ˆ2016/5/31 è¿½è¨˜ï¼‰ã€ŒGitHubã«ãƒã‚°å ±å‘Šã—ã¦è³žé‡‘$500ã‚’é ‚ã„ãŸè©±ã€ã§ç´¹ä»‹ã—ãŸé€šã‚Šã€æ—¢ã«å¼±ã„éµã¯GitHubã‹ã‚‰å‰Šé™¤ã•ã‚Œã€æ–°è¦ç™»éŒ²ã‚‚ã§ããªããªã£ã¦ã„ã¾ã™ã€‚ GitHub APIã‚’åˆ©ç”¨ã—ã¦ã€GitHubã®31661ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ç™»éŒ²ã•ã‚Œã¦ã„ã‚‹SSHå…¬é–‹éµ64404å€‹ã‚’å–å¾—ã—ã¦ã¿ã¾ã—ãŸã€‚æŠ½å‡ºæ–¹æ³•*1ãŒé©å½“ã™ãŽã¦åã‚ŠãŒã‚ã‚‹ã‚ˆã†ãªæ°—ã‚‚ã—ã¾ã™ãŒã€é¢ç™½ã„çµæžœãŒå¾—ã‚‰ã‚ŒãŸã¨æ€ã†ã®ã§ã¾ã¨ã‚ã¦ã¿ã¾ã™ã€‚ SSHéµã®ç¨®é¡ž éµã®ç¨®é¡ž å€‹æ•° å‰²åˆ RSAéµ 61749 (95.88%) DSAéµ 2647 (4.11%) ECDSAéµ 8 (0.01%) ç´„6ä¸‡å€‹ã®éµã®ã†ã¡ã€8å€‹ã ã‘ECDSAï¼ˆæ¥•å††DSAï¼‰éµãŒè¦‹ã¤ã‹ã‚Šã¾ã—ãŸï¼å¸¸ç”¨ã—ã¦ã„ã‚‹ã®ã‹è©¦ã—ã«ç™»éŒ²ã—ã¦ã¿ãŸã ã‘ãªã®ã‹ã¯ã‚ã‹ã‚Šã¾ã›ã‚“ãŒã€ä½•ã«ã›ã‚ˆ
taketyan 2014/07/05
ssh

security

github
ãƒªãƒ³ã‚¯
DeNA Engineering - DeNAã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆ
æŠ€è¡“ã‚’æ´»ã‹ã—ã€æ–°ã—ã„ä¾¡å€¤ã‚’å‰µé€ ã™ã‚‹ DeNAã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã¯ã€æƒ³åƒã‚’è¶…ãˆã‚‹Delightã‚’å±Šã‘ã‚‹ãŸã‚ã«ä½•ãŒã§ãã‚‹ã‹ã‚’è€ƒãˆã€æŠ€è¡“åŠ›ã¨ç™ºæƒ³åŠ›ã§æ–°ã—ã„ä¾¡å€¤ã‚’ç”Ÿã¿å‡ºã—ã¦ã„ã¾ã™ã€‚ å¤šæ§˜ãªå°‚é–€æ€§ã‚’æŒã£ãŸã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãŒåˆ‡ç£‹ç¢ç£¨ã—ã€äº’ã„ã«åˆºæ¿€ã—åˆãˆã‚‹ç’°å¢ƒã‚„åˆ¶åº¦ãŒã•ã‚‰ãªã‚‹æˆé•·ã¸ã¨ã¤ãªã’ã¾ã™ã€‚
taketyan 2014/07/04
ã€ŒMongoDB ã¯ SQL ã‚’ä½¿ã‚ãªã„ã‹ã‚‰ SQL ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ä¸å¯èƒ½ã€ãªã‚“ã¦è¨€ã‚ã‚Œã¦ãŸã‘ã©åŒã˜åŽŸç†ãŒå¿œç”¨ã§ããã†ã ãª

sql

security
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸