[B! security] tenkomaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

tenkoma id:tenkoma

securityã«é–¢ã™ã‚‹tenkomaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (181)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

GitHub - Roave/SecurityAdvisories: :closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
tenkoma 2019/03/18
Security

php
ãƒªãƒ³ã‚¯
ãƒ—ãƒ¬ãƒŸã‚¢ãƒ ãƒ»ã‚¢ã‚¦ãƒˆãƒ¬ãƒƒãƒˆãŒæƒ…å ±æ¼æ´©ã®èª¿æŸ»çµæžœã‚’å ±å‘Šã€èªè¨¼å¤±æ•—æ™‚ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æµå‡ºèªã‚ã‚‹
ä¸‰è±åœ°æ‰€ãƒ»ã‚µã‚¤ãƒ¢ãƒ³ã¯2018å¹´6æœˆ7æ—¥ã€åŒç¤¾ãŒé‹å–¶ã™ã‚‹ã‚·ãƒ§ãƒƒãƒ”ãƒ³ã‚°ãƒ¢ãƒ¼ãƒ«ã€Œãƒ—ãƒ¬ãƒŸã‚¢ãƒ ãƒ»ã‚¢ã‚¦ãƒˆãƒ¬ãƒƒãƒˆã€ã®ä¼šå“¡æƒ…å ±ãŒæµå‡ºã—ãŸäº‹ä»¶ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼šç¤¾ã«ã‚ˆã‚‹èª¿æŸ»çµæžœã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ç™»éŒ²æ¸ˆã¿ã®ä¼šå“¡ãƒ‡ãƒ¼ã‚¿ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ä¸€è‡´ã—ãŸ24ä¸‡ä»¶ã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã¿ä¸€è‡´ã—ãŸ3ä¸‡ä»¶ã®ã»ã‹ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼æ™‚ã«ã‚¨ãƒ©ãƒ¼ã«ãªã£ãŸIDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®çµ„ã¿åˆã‚ã›ã‚‚æµå‡ºã—ã¦ã„ã‚‹ã¨èªã‚ãŸã€‚
tenkoma 2018/06/07
security
ãƒªãƒ³ã‚¯
ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ¼ãƒ‰ã‚‚æµå‡ºã®å¯èƒ½æ€§ã€æ£®æ°¸ä¹³æ¥ã®æƒ…å ±æ¼æ´©
æ£®æ°¸ä¹³æ¥ã¯2018å¹´5æœˆ9æ—¥ã€åŒç¤¾ã®é€šè²©ã‚µã‚¤ãƒˆã€Œå¥åº·é£Ÿå“é€šè²©ã‚µã‚¤ãƒˆã€ã§ä¼šå“¡æƒ…å ±ãŒæ¼æ´©ã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ä¼šç¤¾ã‹ã‚‰4æœˆ24æ—¥ã€ä¼šå“¡ã®ã‚«ãƒ¼ãƒ‰æƒ…å ±ãŒä¸æ£ã«ä½¿ç”¨ã•ã‚Œè¢«å®³ãŒç”Ÿã˜ã¦ã„ã‚‹ã¨æŒ‡æ‘˜ã•ã‚Œã¦ã€äº‹æ…‹ã‚’æŠŠæ¡ã—ãŸã¨ã—ã¦ã„ã‚‹ã€‚
tenkoma 2018/05/09
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ¼ãƒ‰ã‚’æ˜Žç¤ºçš„ã«ä¿å˜ã—ã¦ãŸã®ã‹ã€æ±ºæ¸ˆæ™‚ã®æƒ…å ±ãŒç›—ã¾ã‚ŒãŸã®ã‹ã€æ–‡ç« ã‹ã‚‰ã¯èªã¿å–ã‚Œãªã„ã‚ˆã†ãªï¼ŸæœŸé–“ãŒé™å®šã•ã‚Œã¦ã„ã‚‹ã‹ã‚‰å¾Œè€…ã§ã—ã‚‡ã†ã‹ï¼Ÿ

security
ãƒªãƒ³ã‚¯
[PDF]WEBäºˆç´„ã‚µãƒ¼ãƒ“ã‚¹ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«é–¢ã™ã‚‹èª¿æŸ»å ±å‘Šæ›¸ï¼ˆè§£æžç·¨ï¼‰ | 2018å¹´3æœˆ28æ—¥ ä¹å·žå•†èˆ¹æ ªå¼ä¼šç¤¾
tenkoma 2018/04/02
security
ãƒªãƒ³ã‚¯
Osushiã«è¦‹ã‚‹ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ - Speaker Deck
All slide content and descriptions are owned by theirÂ creators.
tenkoma 2018/03/31
ç‚Žä¸Šã—ã¦ãŠã„ã—ã„ç‚™ã‚Šsushi ãŒã§ããŸã€ã¨ã„ã†è©±ã‹ãª

security
ãƒªãƒ³ã‚¯
ITãƒ‘ã‚¹ãƒãƒ¼ãƒˆè©¦é¨“ã§å€‹äººæƒ…å ±æ¼ãˆã„ã€€å›£ä½“ç”³è¾¼è€…ã®ã‚·ã‚¹ãƒ†ãƒ ã«ä¸å…·åˆ
æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼ˆIPAï¼‰ã¯3æœˆ13æ—¥ã€ITãƒ‘ã‚¹ãƒãƒ¼ãƒˆè©¦é¨“ã®å›£ä½“ç”³è¾¼è€…ãŒåˆ©ç”¨ã™ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã«ä¸å…·åˆãŒã‚ã‚Šã€è¨ˆ137ä»¶ã®å€‹äººæƒ…å ±ãªã©ãŒæ¼ãˆã„ã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚2ã¤ã®å›£ä½“ç”³è¾¼è€…ãŒç”³ã—è¾¼ã¿æƒ…å ±ã‚’åŒæ™‚ã«ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ãŸã¨ã“ã‚ã€ã‚‚ã†ä¸€æ–¹ã®å›£ä½“æƒ…å ±ã‚’å…¥æ‰‹ã§ãã‚‹ãƒˆãƒ©ãƒ–ãƒ«ãŒç™ºç”Ÿã€‚æ—¢ã«æ¼ãˆã„ã—ãŸæƒ…å ±ã®ç ´æ£„ã‚’ç¢ºèªã—ã€å†ç™ºé˜²æ¢ç–ã‚’è¬›ã˜ãŸã¨ã„ã†ã€‚ 2æœˆ26æ—¥ã€2ã¤ã®å›£ä½“ç”³è¾¼è€…ãŒWebã‚µã‚¤ãƒˆã‹ã‚‰ç”³ã—è¾¼ã¿æƒ…å ±ï¼ˆCSVãƒ•ã‚¡ã‚¤ãƒ«ï¼‰ã‚’åŒæ™‚ã«ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ãŸã¨ã“ã‚ã€åŒæ–¹ã®æƒ…å ±ãŒåˆã‚ã•ã£ã¦è¨˜è¼‰ã•ã‚ŒãŸãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãã‚Œãžã‚Œãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã§ããŸã¨ã„ã†ã€‚ åŒæ—¥ã€å„ç”³è¾¼è€…ã‹ã‚‰ITãƒ‘ã‚¹ãƒãƒ¼ãƒˆè©¦é¨“ã®é‹å–¶å§”è¨—å…ˆã«é€£çµ¡ãŒã‚ã‚Šã€ãƒˆãƒ©ãƒ–ãƒ«ãŒç™ºè¦šã€‚IPAãŒå¾Œæ—¥è¬ç½ªã—ã€å€‹äººæƒ…å ±ã®å»ƒæ£„ã‚’ç¢ºèªã—ãŸã¨ã„ã†ã€‚ä¸å…·åˆãŒç™ºç”Ÿã—ãŸã‚·ã‚¹ãƒ†ãƒ ã¯3æœˆ5æ—¥ã«æ”¹ä¿®ã—ã€ä»Šå¾Œã¯åŒæ§˜ã®äº‹æ…‹ã¯èµ·ããªã„ã¨ã—ã¦ã„ã‚‹ã€‚ å„ç”³è¾¼è€…ä»¥å¤–ã¸ã®å€‹äººæƒ…å ±ã®æ¼ãˆã„ã€æœªä½¿ç”¨ãƒã‚±ãƒƒãƒˆã®ä¸æ£åˆ©ç”¨ã¯ç¢ºèªã—ã¦ã„ãªã„ã¨ã„
tenkoma 2018/03/13
security
ãƒªãƒ³ã‚¯
å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹æ”¹è¨‚ã®ãŠçŸ¥ã‚‰ã›
å¾³ä¸¸æœ¬ã“ã¨ã€ã€Œä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ã€ã¯ã€2011å¹´3æœˆã®ç™ºå£²ä»¥é™å¤§å¤‰å¤šãã®æ–¹ã«èªã‚“ã§ã„ãŸã ãã¾ã—ãŸã€‚ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ãŸã ã€ç™ºå£²ã‹ã‚‰æ—¢ã«7å¹´ãŒçµŒéŽã—ã€å†…å®¹ãŒå¤ããªã£ã¦ããŸæ„Ÿã¯å¦ã‚ã¾ã›ã‚“ã€‚ãŸã¨ãˆã°ã€ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã®èª¬æ˜Žã¯ã»ã¨ã‚“ã©ãªã„ã§ã™ã—ã€OWASP Top 10 2017ã§é¸å…¥ã•ã‚ŒãŸå®‰å…¨ã§ãªã„ãƒ‡ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚¼ãƒ¼ã‚·ãƒ§ãƒ³ã‚„XXEã®èª¬æ˜Žã‚‚ã‚ã‚Šã¾ã›ã‚“ã€‚ãªã«ã‚ˆã‚Šã€Web APIã‚„JavaScriptã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç‰ãŒã»ã¨ã‚“ã©æ›¸ã‹ã‚Œã¦ã„ãªã„ã“ã¨ãŒèª²é¡Œã¨ãªã£ã¦ã„ã¾ã—ãŸã€‚ ãã“ã§ã€ç‰ˆå…ƒã®SBã‚¯ãƒªã‚¨ã‚¤ãƒ†ã‚£ãƒ–ã¨ç›¸è«‡ã—ã¦ã€ã“ã®åº¦æ”¹è¨‚ã™ã‚‹ã“ã¨ã«ã„ãŸã—ã¾ã—ãŸã€‚3æœˆæœ«è„±ç¨¿ã€6æœˆé ƒç™ºå£²ã®è¦‹è¾¼ã¿ã§ã™ã€‚ æ”¹è¨‚ã«ã‚ãŸã‚Šã€ä»¥ä¸‹ã‚’è€ƒãˆã¦ã„ã¾ã™ã€‚ Web APIã¨JavaScriptã«é–¢ã™ã‚‹èª¬æ˜Žã‚’4ç« ã«è¿½åŠ XHR2å¯¾å¿œã«å‘ã‘ã¦CORSã®èª¬æ˜Žã‚’3ç« ã«è¿½åŠ æºå¸¯é›»è©±ã®ç« ã¯ä¸¸ã”ã¨å‰Šé™¤ã—ã¦ã€åˆ¥ã®å†…
tenkoma 2018/03/06
php

security
ãƒªãƒ³ã‚¯
10 Year Old Root Exploit Found in 'man' Command
A 10-year old root exploit was found in the Unix â€œmanâ€ program used for displaying system documentation. The â€œman trap exploitâ€ is triggered when certain key combinations and escape sequences are triggered in malicious man pages, which would be able to use the screen buffer memory to replay login details. Infected man pages have been found in the core utilities of virtually every Linux and BSD dis
tenkoma 2017/11/15
sl ã‚³ãƒžãƒ³ãƒ‰ã®manã¯ç°¡å˜ã«èªç ´ã§ãã‚‹ã—ãƒ¤ãƒã‚¤

joke

security
ãƒªãƒ³ã‚¯
PHP ã® mail() é–¢æ•°ã§ FizzBuzz | ã©ã•ã«ã£ã
â– PHP ã® mail() é–¢æ•°ã§ FizzBuzz _ ã¨ã„ã£ã¦ã‚‚ãƒ«ãƒ¼ãƒ—ã¯ã§ããªã„ã®ã§æ•°å€¤ã¯ç”Ÿã®ãƒªã‚¹ãƒˆã§ä¸Žãˆã‚‹ã‚“ã ã‘ã©ã€‚ $ php -r 'mail("","","","","-be \${tr{\${map{1:2:3:4:5:6:7:8:9:10:11:12:13:14:15:16:17:18:19:20:21:22:23:24:25:26:27:28:29:30:31:32:33:34:35:36:37:38:39:40:41:42:43:44:45:46:47:48:49:50}{\${if={\${eval:\$it em%15}}{0}{FizzBuzz}{\${if={\${eval:\$it em%3}}{0}{Fizz}{\${if={\${eval:\$it em%5}}{0}{Buzz}{\$it em}}}}}}}}}{:}{\\n}}");' 1 2 Fizz 4
tenkoma 2017/05/19
security

debian
ãƒªãƒ³ã‚¯
Struts2ãŒå±é™ºã§ã‚ã‚‹ç†ç”±
ã¯ã˜ã‚ã« 2017å¹´3æœˆã€Struts2ã«ã¾ãŸã—ã¦ã‚‚æ–°ãŸãªè„†å¼±æ€§(S2-045ã€S2-046)ãŒè¦‹ã¤ã‹ã‚Šã€è¤‡æ•°ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«ãŠã„ã¦æƒ…å ±æ¼æ´©ç‰ã®è¢«å®³ãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚ç†è€…ã¯2014å¹´4æœˆï¼ˆãŠã‚ˆã3å¹´å‰ï¼‰ã«ã€Œä¾‹ãˆã°ã€Strutsã‚’é¿ã‘ã‚‹ã€ã¨ã„ã†è¨˜äº‹ã‚’æ›¸ãã¾ã—ãŸãŒã€ä»Šèªã¿è¿”ã—ã¦ã¿ã‚‹ã¨ã€Œã‚„ã‚„èª¿æŸ»ä¸è¶³ã®çŠ¶æ…‹ã§æ›¸ã„ã¦ã—ã¾ã£ãŸãªã€ã¨æ„Ÿã˜ã‚‹ç‚¹ã‚‚ã‚ã‚Šã¾ã™ã€‚ä»Šå›žã€è‰¯ã„ã‚¿ã‚¤ãƒŸãƒ³ã‚°ãªã®ã§ã‚‚ã†ä¸€åº¦Struts2ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ã–ã£ã¨ã¾ã¨ã‚ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ãªãœJavaãªã®ã«ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ã®ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ(ã„ã‚ã‚†ã‚‹RCE)ãŒå¯èƒ½ãªã®ã‹ Struts2ã¯Javaã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã‚ã‚Šã€Javaè£½ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒä¸Šã§å‹•ä½œã—ã¾ã™ã€‚Javaã¯ã„ã‚ã‚†ã‚‹ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«åž‹ã®è¨€èªžã§ã‚ã‚‹ãŸã‚ã€é€šå¸¸ã¯ãƒ©ãƒ³ã‚¿ã‚¤ãƒ ã«ãŠã„ã¦ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ã¯ã§ããšã€RCEã¯é›£ã—ã„ã¯ãšã§ã™ã€‚ Javaã®ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§RCEãŒæˆ
tenkoma 2017/03/27
security

java
ãƒªãƒ³ã‚¯
CDNä¼æ¥Cloudflareã®ãƒã‚°ã§ã€å¤šæ•°ã®ã‚µãƒ¼ãƒ“ã‚¹ã§æ©Ÿå¯†ãƒ‡ãƒ¼ã‚¿æµå‡ºã®å¯èƒ½æ€§ - ITmedia NEWS
å¤šæ•°ã®Webã‚µãƒ¼ãƒ“ã‚¹ã«CDNï¼ˆã‚³ãƒ³ãƒ†ãƒ³ãƒ„é…ä¿¡ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ï¼‰ã‚’æä¾›ã—ã¦ã„ã‚‹ç±³Cloudflareã¯2æœˆ23æ—¥ï¼ˆç¾åœ°æ™‚é–“ï¼‰ã€ã‚¨ãƒƒã‚¸ã‚µãƒ¼ãƒã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã§é¡§å®¢ã®HTTPã‚¯ãƒƒã‚ãƒ¼ã€èªè¨¼ãƒˆãƒ¼ã‚¯ãƒ³ã€HTTP POSTæœ¬ä½“ãªã©ã®æ©Ÿå¯†ãƒ‡ãƒ¼ã‚¿ãŒæµå‡ºã—ã€ã•ã‚‰ã«ãã®ä¸€éƒ¨ã¯Googleã‚„Bingãªã©ã®æ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³ã«ã‚ˆã£ã¦ã‚ãƒ£ãƒƒã‚·ãƒ¥ã•ã‚Œã¦ã„ãŸã¨ç™ºè¡¨ã—ãŸã€‚ ãƒã‚°ã¯æ—¢ã«ä¿®æ£ã•ã‚ŒãŸã€‚ã‚ãƒ£ãƒƒã‚·ãƒ¥ã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã«ã¤ã„ã¦ã¯ã€Googleã€Yahooã€Bingãªã©ã®å”åŠ›ã«ã‚ˆã‚Šã€æ—¢ã«ãƒ‘ãƒ¼ã‚¸ã•ã‚ŒãŸã€‚Cloudflareã¯ã€æµå‡ºã—ãŸãƒ‡ãƒ¼ã‚¿ãŒæ‚ªç”¨ã•ã‚ŒãŸã¨ã„ã†å ±å‘Šã¯ä»Šã®ã¨ã“ã‚ãªã„ã¨ã—ã¦ã„ã‚‹ã€‚ Cloudflareã®ã‚µãƒ¼ãƒ“ã‚¹ã¯ã€ä¾‹ãˆã°Uberã‚„FitBitã€Feedlyãªã©ã€ä¸–ç•Œã®550ä¸‡ä»¥ä¸Šã®ä¼æ¥ãŒåˆ©ç”¨ã—ã¦ã„ã‚‹ã€‚ã“ã®å•é¡Œã®å½±éŸ¿ã‚’å—ã‘ãŸå¯èƒ½æ€§ã®ã‚ã‚‹ä¼æ¥ã®ãƒªã‚¹ãƒˆã‚’ç¬¬ä¸‰è€…ãŒGitHubã§å…¬é–‹ã—ã¦ã„ã‚‹ãŒã€ãã‚Œã‚’ç¢ºèªã™ã‚‹ã‚ˆã‚Šã‚‚ã€è‡ªåˆ†ãŒä½¿ã£ã¦ã„ã‚‹ã‚µ
tenkoma 2017/02/25
security
ãƒªãƒ³ã‚¯
2æœˆåˆã‚ã®è¤‡æ•°ã®å›½å†…ã‚µã‚¤ãƒˆã®æ”¹ã–ã‚“ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2æœˆ4æ—¥ã‹ã‚‰è¤‡æ•°ã®ã‚µã‚¤ãƒˆãŒæ”¹ã–ã‚“ã•ã‚Œã‚‹è¢«å®³ãŒç™ºç”Ÿã—ã¦ã„ã¾ã™ã€‚è¢«å®³ã‚’å—ã‘ãŸã‚µã‚¤ãƒˆã®å¤šãã¯WordPressã§æ§‹ç¯‰ã•ã‚Œã¦ã„ã‚‹ã¨ã¿ã‚‰ã‚Œã€SucuriãŒ2æœˆ1æ—¥ã«å…¬é–‹ã—ãŸè„†å¼±æ€§æƒ…å ±ã¨ã®é–¢é€£ãŒç–‘ã‚ã‚Œã¾ã™ã€‚ã“ã“ã§ã¯æ”¹ã–ã‚“ã®çŠ¶æ³ã€è„†å¼±æ€§æƒ…å ±ã«ã¤ã„ã¦ã¾ã¨ã‚ã¾ã™ã€‚ æ”¹ã–ã‚“è¢«å®³ã¯WordPressã«é›†ä¸ 2æœˆ4æ—¥11æ™‚é ƒã‚ˆã‚ŠZone-Hã¸æŠ•ç¨¿ã•ã‚Œã‚‹æ”¹ã–ã‚“è¢«å®³ã‚’å—ã‘ãŸã‚µã‚¤ãƒˆã®ä»¶æ•°ãŒå¢—ãˆã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ ç¢ºèªã—ãŸæ”¹ã–ã‚“äº‹ä¾‹ã§ã¯æ¬¡ã®ã‚ˆã†ãªã€ŒHacked byã€œã€ã®ã‚ˆã†ãªæ›¸ãè¾¼ã¿ãŒè¡Œã‚ã‚Œã¦ã„ã¾ã—ãŸã€‚ äº‹ä¾‹(1) hacked by NG689Skw äº‹ä¾‹(2) Hacked By SA3D HaCk3D / HaCkeD By MuhmadEmad äº‹ä¾‹(3) hacked by magelang6etar äº‹ä¾‹(4) Hacked by RxR HaCkEr äº‹ä¾‹(5) Hacked By GeNErAL äº‹ä¾‹(6
tenkoma 2017/02/06
ãµã‚€ãƒ¼

wordpress

security
ãƒªãƒ³ã‚¯
æ—¥çµŒBPãƒ‘ã‚¹ãƒãƒ¼ãƒˆ
ã„ã¤ã‚‚ã”åˆ©ç”¨ã„ãŸã ãã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ æ—¥çµŒBPãƒ‘ã‚¹ãƒãƒ¼ãƒˆã¯2020å¹´12æœˆã‚’ã‚‚ã£ã¦ã‚µãƒ¼ãƒ“ã‚¹ã‚’çµ‚äº†ã—ã¾ã—ãŸã€‚ é•·ã‚‰ãã®ã”æ„›é¡§ã‚’ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ å¼•ãç¶šãã€æ—¥çµŒBPã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ãŠæ¥½ã—ã¿ãã ã•ã„ã€‚ https://www.nikkeibp.co.jp/
tenkoma 2011/09/27
security
ãƒªãƒ³ã‚¯
Loading...
tenkoma 2011/09/26
eval: æ–‡å—åˆ—ã‚’æ•°å€¤ã«å¤‰æ›ã™ã‚‹â€¦ãˆã£!?

javascript

security
ãƒªãƒ³ã‚¯
asahi.comï¼ˆæœæ—¥æ–°èžç¤¾ï¼‰ï¼šå…¥æœã‚·ã‚¹ãƒ†ãƒ ã€é€æ˜Žæ€§ã‚ã‚ŠéŽãŽãŸã€€ï¼”å¹´é–“ä¸¸è¦‹ãˆã€€æ„›åª›çœŒ - ç¤¾ä¼š
å°åˆ· é–¢é€£ãƒˆãƒ”ãƒƒã‚¯ã‚¹ï¼®ï¼¥ï¼£ ã€€æ„›åª›çœŒã¯ï¼‘ï¼’æ—¥ã€çœŒç™ºæ³¨ã®åœŸæœ¨å·¥äº‹ãªã©ã«å°Žå…¥ã—ã¦ã„ã‚‹é›»åå…¥æœã‚·ã‚¹ãƒ†ãƒ ã§ã€å…¥æœè€…ãŒãƒ‘ã‚½ã‚³ãƒ³ç”»é¢ã‚’æ“ä½œã™ã‚‹ã¨å…¥æœå‰ã«æœ€ä½Žåˆ¶é™ä¾¡æ ¼ãŒè¦‹ãˆã¦ã—ã¾ã†ä¸å…·åˆãŒã‚ã£ãŸã€ã¨ç™ºè¡¨ã—ãŸã€‚åŒã‚·ã‚¹ãƒ†ãƒ ã¯ï¼”å¹´åŠå‰ã‹ã‚‰ä½¿ã‚ã‚Œã¦ãŠã‚Šã€çœŒã¯é–‹ç™ºã—ãŸï¼®ï¼¥ï¼£ã«ã‚·ã‚¹ãƒ†ãƒ ã®ä¿®æ£ã‚’æŒ‡ç¤ºã—ã€ä»Šå¾Œï¼‘ã‚«æœˆã«äºˆå®šã•ã‚Œã¦ã„ã‚‹å…¥æœã‚’ä¸æ¢ã—ãŸã€‚ ã€€çœŒåœŸæœ¨ç®¡ç†èª²ã«ã‚ˆã‚‹ã¨ã€ï¼™æ—¥ã«å®Ÿæ–½ã•ã‚ŒãŸåŒçœŒå®‡å’Œå³¶å¸‚ã§ã®æ²³å·å·¥äº‹ã®å…¥æœã§ã€æœ€ä½Žåˆ¶é™ä¾¡æ ¼ã¨åŒé¡ã®å…¥æœãŒã‚ã£ãŸã€‚ä¸å¯©ã«æ€ã£ãŸçœŒã®æ‹…å½“è€…ãŒå¿œæœã—ãŸæ¥è€…ã«ç¢ºèªã—ãŸã¨ã“ã‚ã€ã€ŒãŸã¾ãŸã¾é–‹ã„ãŸç”»é¢ã§æœ€ä½Žåˆ¶é™ä¾¡æ ¼ãŒè¦‹ãˆãŸã€ã¨èª¬æ˜Žã€‚çœŒå´ãŒç¢ºèªã—ãŸã¨ã“ã‚ã€ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’è¡¨ç¤ºã™ã‚‹ç”»é¢ï¼ˆã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ç”»é¢ï¼‰ã‚’å‚ç…§ã™ã‚‹ã¨ã€ï¼˜ï¼ï¼ä¸‡å††æœªæº€ã®æŒ‡åç«¶äº‰å…¥æœã¨ï¼’ï¼“å„„å††ä»¥ä¸Šã®ä¸€èˆ¬ç«¶äº‰å…¥æœã®æœ€ä½Žåˆ¶é™ä¾¡æ ¼ï¼ˆèª¿æŸ»åŸºæº–ä¾¡æ ¼ï¼‰ãŒèª°ã«ã§ã‚‚è¦‹ãˆã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ãŸã¨ã„ã†ã€‚ ã€€çœŒã®é›»åå…¥æœã‚·ã‚¹ãƒ†ãƒ ã¯ï¼’ï¼ï¼ï¼—å¹´ï¼”æœˆã«å…¨é¢å°Žå…¥ã•ã‚Œã€ï¼‘ï¼‘
tenkoma 2011/09/13
security
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - è©±é¡Œã®ã€Œã‚«ãƒ¬ãƒã‚°ã€ã€ã—ã‹ã—ã¦ãã®å®Ÿæ…‹ã¯ã€‚
â– è©±é¡Œã®ã€Œã‚«ãƒ¬ãƒã‚°ã€ã€ã—ã‹ã—ã¦ãã®å®Ÿæ…‹ã¯ã€‚ ã“ã“æ•°æ—¥ã€ãƒ†ãƒ¬ãƒ“ã®ãƒ¯ã‚¤ãƒ‰ã‚·ãƒ§ãƒ¼ã§é€£æ—¥å–ã‚Šä¸Šã’ã‚‰ã‚Œã¦ã„ã‚‹ã€Œã‚«ãƒ¬ãƒã‚°ã€ã ãŒã€ä»¥ä¸‹ã®è©±ã¯ã¾ã ãƒžã‚¹ãƒ¡ãƒ‡ã‚£ã‚¢ã§ã¯å–ã‚Šä¸Šã’ã‚‰ã‚Œã¦ã„ãªã„ã‚ˆã†ã ã€‚ ã‚«ãƒ¬ãƒã‚°ã®ã‚µãƒ¼ãƒ“ã‚¹ãŒé–‹å§‹ã•ã‚ŒãŸã®ã¯8æœˆ29æ—¥ã ã£ãŸãŒã€9æœˆ1æ—¥ã«ãƒªã‚¤ãƒ‰ç¤¾ã‹ã‚‰ã€ŒGALAXY S2 è£æ´»ç”¨ãƒã‚¤ãƒ–ãƒ«ã€ã¨ã„ã†ã‚¨ãƒæœ¬*1ãŒå‡ºç‰ˆã•ã‚Œã¦ã„ãŸã€‚ã“ã®æœ¬ã®ä¼ç”»ãƒ»ç·¨é›†ã‚’æ‹…å½“ã—ãŸã®ã¯ã€æœ‰é™ä¼šç¤¾ãƒžãƒ‹ãƒ¥ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§ã‚ã‚Šã€ã‚«ãƒ¬ãƒã‚°ã®ã‚µãƒ¼ãƒ“ã‚¹æä¾›è€…ã¨åŒä¸€ã§ã‚ã‚‹ã“ã¨ãŒåˆ¤æ˜Žã—ã¦ã„ã‚‹ã€‚ ã“ã®æœ¬ã®è¡¨ç´™ã«ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ã€ã€Œã‚¹ã‚¯ãƒ¼ãƒ—!! (ç§˜)ã‚¢ãƒ—ãƒªã§å½¼å¥³ã®å‹•ãã‚’GPSã§ãƒªã‚¢ãƒ«ã«ãƒã‚§ãƒƒã‚¯!ã€ã¨æ›¸ã‹ã‚Œã¦ã„ã‚‹ã€‚ ä½•ã®ã“ã¨ã‹ã¨ã„ã†ã¨ã€ã¾ã•ã«ã€Œã‚«ãƒ¬ãƒã‚°ã€ã®ç´¹ä»‹è¨˜äº‹ã§ã‚ã‚‹ã€‚ ã€Œç¦æ–! ã‚®ãƒªã‚®ãƒªè£ã‚¢ãƒ—ãƒªå¾¹åº•ç ”ç©¶ã€ã¨ã„ã†æœ€çµ‚ç« ã«æŽ²è¼‰ã•ã‚Œã¦ãŠã‚Šã€ä»¥ä¸‹ã®ã‚ˆã†ã«ã€ã€Œå¤§äº‹ãªå½¼å¥³ã®è¡Œå‹•ã‚’è¿½è·¡ãƒã‚§ãƒƒã‚¯!ã€ã€ã€Œæ‚ªç”¨åŽ³ç¦! ç©¶æ¥µã®ã‚¹ãƒˆãƒ¼ã‚ãƒ³ã‚°ã‚¢ãƒ—ãƒª!ã€ã€ã€Œãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼
tenkoma 2011/09/11
ã€Œä¿ºã®ã“ã¨è¦‹ã¦ã‚‹äººãŒã„ã‚‹ã€‚ãã‚Œã‚’æ€ã„å‡ºã•ã›ã¦ãã‚Œã‚‹ã‚“ã§ã™ã€‚ã€å…¬é–‹æ™‚ã¯ã‚¹ãƒ†ãƒ«ã‚¹å‹•ä½œä»•æ§˜ã ã£ãŸã®ã«ã©ã†ã‚„ã£ã¦æ€ã„å‡ºã™ã‚“ã ã‚ã†ã‹

security
ãƒªãƒ³ã‚¯
SSLCertOfLolipop - mizzy.org - Trac
ãƒãƒªãƒãƒƒãƒ—ã® SSL è¨¼æ˜Žæ›¸ã«ã¤ã„ã¦ FFFTPé–‹ç™ºçµ‚äº†ã§å¤§é¨’ãŽã—ã¦ã„ã‚‹äººãŸã¡ã¸ ã«ã¦ã€ SSLè¨¼æ˜Žæ›¸ãŒã¾ã¨ã‚‚ãªã‚‚ã®ã§ãªã„ã¨æŽ¥ç¶šæ™‚ã«ã‚¨ãƒ©ãƒ¼ãŒå‡ºã‚‹ã®ã§ã™ãŒã€ãƒãƒªãƒãƒƒãƒ—ãªã‚“ã‹ã ã¨ ã“ã®ã‚¨ãƒ©ãƒ¼ã‚’ç„¡è¦–ã™ã‚‹ã‚ˆã†ã«å…¬å¼ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«æ›¸ã„ã¦ã‚ã‚‹ã®ã§ã€ã‹ãªã‚Šæ‚ªè³ªã§ã™ã€‚ ã¨æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã®ã§ã€ã“ã‚Œã«ã¤ã„ã¦èª¬æ˜Žã•ã›ã¦é ‚ãã¾ã™ã€‚ ã“ã®æ–¹ãŒæŒ‡æ‘˜ã•ã‚Œã¦ã„ã‚‹ã®ã¯ã€Win FileZillaã®è¨å®š / ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ / ãƒžãƒ‹ãƒ¥ã‚¢ãƒ« - ãƒãƒªãƒãƒƒãƒ—ï¼ ã®ä¸ã®ã€ è¨¼æ˜Žæ›¸ã®ç¢ºèªã‚’è¡Œã„ã¾ã™ã€‚ã€Žä»Šå¾Œã‚‚ã“ã®è¨¼æ˜Žæ›¸ã‚’å¸¸ã«ä¿¡ç”¨ã™ã‚‹(A)ã€ã«ãƒã‚§ãƒƒã‚¯ã‚’å…¥ã‚Œã¦ã€ã€ŽOKã€ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ã¾ã™ã€‚ ã¨ã„ã†éƒ¨åˆ†ã ã¨æ€ã‚ã‚Œã‚‹ã®ã§ã™ãŒã€ç¢ºã‹ã«ã€ç„¡æ¡ä»¶ã§ä¿¡ç”¨ã™ã‚‹ã«ãƒã‚§ãƒƒã‚¯ã‚’å…¥ã‚Œã‚‹ã‚ˆã†ãŠå®¢æ§˜ã«æŒ‡ç¤ºã™ã‚‹ã®ã¯å¤§å¤‰è‰¯ããªã„ã§ã™ãã€‚ ãƒãƒªãƒãƒƒãƒ—ã§ã¯ DigiCert Incç¤¾ ã«ã‚ˆã£ã¦ç™ºè¡Œã•ã‚Œã¦ã„ã‚‹è¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã®ã§ã™ãŒã€Filezillaã§ã¯è¦å‘ŠãŒå‡ºã¦ã—ã¾ã†
tenkoma 2011/09/04
Cyberduckã¯Windowsç‰ˆã‚‚ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ãŸã‚“ã ã£ãŸã€‚ç¾çŠ¶ã€FTPSä½¿ã†ã¨ãã¯ã€Filezillaã‚ªã‚¹ã‚¹ãƒ¡ã§ããªã„ã¨ã„ã†ã“ã¨ã‹ #fb

security

server
ãƒªãƒ³ã‚¯
karelog.jp
This domain may be for sale!
tenkoma 2011/08/31
çµ¶å¥ãƒ¢ãƒŽã â€¦

android

security

privacy
ãƒªãƒ³ã‚¯
UDIDãŒä½¿ãˆãªããªã‚Šãã†ãªã®ã§ã€UIIDã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã—ã¾ã—ãŸ
â– 2012/11/11è¿½è¨˜ iOS 6ã‚ˆã‚Š[[UIDevice currentDevice] identifierForVendor]ã¨ã„ã†APIãŒAppleã‚ˆã‚Šæä¾›ã•ã‚Œã€ã‚ˆã‚Šãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ã«é…æ…®ã—ãŸä¸Šã«ã‚ˆã‚Šå®‰å…¨ãªæ–¹æ³•ã§è‡ªåˆ†ã®é–‹ç™ºã—ãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’åˆ©ç”¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’å€‹åˆ¥ã«èªè¨¼ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚Šã¾ã—ãŸã€‚ãã‚Œã«ä¼´ã„æ‹™ä½œã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚‚identifierForVendorãŒåˆ©ç”¨å¯èƒ½ã§ã‚ã‚Œã°ã“ã¡ã‚‰ã‚’åˆ©ç”¨ã™ã‚‹ã‚ˆã†ã«ä¿®æ£ã„ãŸã—ã¾ã—ãŸã€‚ä»Šå¾Œã¯ã“ã®identifierForVendorï¼ˆã¾ãŸã¯åºƒå‘ŠAPIãªã©ã‚’ä½œã‚‹å ´åˆã§ã‚ã‚Œã°[[UIDevice sharedManager] advertisingIdentifier]ï¼‰ãŒå€‹ä½“èªè˜ã®ä¸»æµã«ãªã£ã¦ã„ãã¨æ€ã‚ã‚Œã¾ã™ã€‚identifierForVendorã¨advertisingIdentifierã®ä»•æ§˜ã¾ã¨ã‚ã¯ http://stackoverflow.c
tenkoma 2011/08/23
iOS

security
ãƒªãƒ³ã‚¯
mixiè¶³ã‚ã¨å»ƒæ¢ã«å¯„ã›ã¦ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š | ã‚³ãƒ¡ãƒ³ãƒˆ mixiã£ã¦ä»Šã»ã¨ã‚“ã©ãŒãƒ¢ãƒã‚¤ãƒ«ã§ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚Œã¦ãŸã¯ãšã ã‘ã©ã€ã‚¹ãƒžãƒ›ä»¥å¤–ã®ã‚¬ãƒ©ã‚±ãƒ¼ã§ã‚‚ã“ã®å•é¡ŒãŒèµ·ãã‚‹ã®ï¼Ÿ
mixiãŒ6å¹´ä»¥ä¸Šã«æ¸¡ã£ã¦æ”¾ç½®ã—ã¦ããŸè¶³ã‚ã¨æ©Ÿèƒ½ã‚’ä½¿ã£ã¦è¨ªå•è€…ã®å€‹äººç‰¹å®šãŒå¯èƒ½ãªè„†å¼±æ€§ã‚’ä¿®æ£ã—ãŸã€‚ç°¡å˜ã«èª¬æ˜Žã™ã‚‹ã¨mixiä»¥å¤–ã®ã‚µã‚¤ãƒˆã‹ã‚‰ã§ã‚‚ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«æ°—ä»˜ã‹ã‚Œãšã«ã€ãã®äººã®mixiã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ç‰¹å®šã™ã‚‹ã¨ã„ã†ã“ã¨ãŒå‡ºæ¥ãŸãŒã€å‡ºæ¥ãªããªã£ãŸã€‚(æ£ç¢ºã«ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæ°—ä»˜ã„ãŸã¨ã—ã¦ã‚‚ç‰¹å®šã•ã‚ŒãŸå¾Œ) ã‚¢ãƒ€ãƒ«ãƒˆã‚µã‚¤ãƒˆãŒè¨ªå•è€…ã®mixiã‚¢ã‚«ã‚¦ãƒ³ãƒˆåŽé›†ã—ãŸã‚Šã€ãƒ¯ãƒ³ã‚¯ãƒªãƒƒã‚¯è©æ¬ºã‚µã‚¤ãƒˆãŒmixiã‚¢ã‚«ã‚¦ãƒ³ãƒˆç‰¹å®šã—ã¦è¿½ã„è¾¼ã¿ã‹ã‘ãŸã‚Šã€çŸ¥ã‚‰ãªã„äººã‹ã‚‰ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸é€ã‚‰ã‚Œã¦ãã¦URLé–‹ã„ãŸã‚‰mixiã‚¢ã‚«ã‚¦ãƒ³ãƒˆç‰¹å®šã•ã‚Œã¦ãŸã‚Šã€ãã†ã„ã†ã“ã¨ãŒä»Šã¾ã§å‡ºæ¥ã¦ã„ãŸã®ãŒå‡ºæ¥ãªããªã£ãŸã€‚ éŽåŽ»ã«ã‚‚ã„ã‚ã‚“ãªäººãŒè¨€åŠã—ã¦ã‚‹ã—ã€ã™ã§ã«çµ‚ã‚ã£ãŸè°è«–ã ã¨æ€ã£ã¦ã‚‹äººã‚‚ã„ã‚‹ã ã‚ã†ã€‚ä¸–é–“ä¸€èˆ¬ã«ã©ã‚Œãã‚‰ã„èªçŸ¥ã•ã‚Œã¦ã„ãŸã®ã‹ã¯ã‚ˆãåˆ†ã‹ã‚‰ãªã„ãŒã€å°‘ãªãã¨ã‚‚æŠ€è¡“è€…ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã®é–“ã§ã¯ã‚ˆãçŸ¥ã‚‰ã‚Œã¦ã„ã‚‹å•é¡Œã ã£ãŸã€‚ http://internet.kil
tenkoma 2011/08/18
ã€Œå¯¾ç–ã€ã«ã¤ã„ã¦ã€‚img:srcã§æŒ‡å®šã•ã‚ŒãŸã¨ãã¯ã‚¹ã‚¯ãƒªãƒ—ãƒˆå®Ÿè¡Œã•ã‚Œãªã„ã—ã€iFrameã§èªã¿è¾¼ã¾ã‚ŒãŸã‹ã©ã†ã‹ã¯ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§window.parent ã‚’èª¿ã¹ã‚Œã°ãƒã‚§ãƒƒã‚¯å¯èƒ½ï¼Ÿ

security

mixi
ãƒªãƒ³ã‚¯
1 2 3 4 5 6 7 8 9 10 æ¬¡ã®ãƒšãƒ¼ã‚¸