[B! html5][security] Oooã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Ooo id:Ooo

html5ã¨securityã«é–¢ã™ã‚‹Oooã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

WebRTCã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¬ãƒãƒ¼ãƒˆ Â· A Study of WebRTC Security
WebRTCã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¬ãƒãƒ¼ãƒˆ ã‚ã‚‰ã¾ã— WebRTC(Web Real-Time Communication)ã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³æŠ€è¡“ã®æ˜¨ä»Šã®ãƒˆãƒ¬ãƒ³ãƒ‰ã®ä¸€ã¤ã ã€‚WebRTCã‚’åˆ©ç”¨ã™ã‚‹ã¨ã€ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ç„¡ã—ã§ã€ã¾ãŸä»–ã®æ¡ä»¶ã‚‚ç„¡ã—ã§ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ã‚³ãƒŸãƒ¥ãƒ‹ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿç¾ã§ãã‚‹ã€‚ã ãŒã€ãã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã¨ã—ã¦æ€§è³ªã‹ã‚‰ã€WebRTCã‚’æŽ¡ç”¨ã—ã‚ˆã†ã¨ã™ã‚‹äººãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®ä¸å®‰ã‚’è¦šãˆã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã ã‚ã†ã€‚æœ¬ãƒ¬ãƒãƒ¼ãƒˆã¯WebRTCã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦æ˜Žã‚‰ã‹ã«ã—ã€ä»–ã®æŠ€è¡“ã¨æ¯”è¼ƒã—ã¦WebRTCã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒå„ªã‚Œã¦ã„ã‚‹ã“ã¨ã‚’è§£èª¬ã™ã‚‹ã€‚ 1. å°Žå…¥ WebRTCã¯ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®Webãƒ™ãƒ¼ã‚¹ã®æŠ€è¡“ã§ã‚ã‚Šã€ãƒ¦ãƒ¼ã‚¶ãŒãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ãƒ¡ãƒ‡ã‚£ã‚¢é€šä¿¡ã‚’ã€ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ç„¡ã—ã§å®Ÿç¾å¯èƒ½ãªæŠ€è¡“ã ã€‚é©åˆ‡ãªãƒ–ãƒ©ã‚¦ã‚¶ã‚’åˆ©ç”¨ã™ã‚Œã°ã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’ãƒ–ãƒ©ã‚¦ã‚ºã™ã‚‹ã ã‘ã§ã€ä»–è€…ã«ç™ºä¿¡ã—ã¦é€šè©±ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ WebRTCã®ä¸»ãªãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã¯
Ooo 2015/08/05
JavaScript

webrtc

api

security

html5
ãƒªãƒ³ã‚¯
monoweb.infoÂ -Â ã“ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã¯è²©å£²ç”¨ã§ã™ï¼Â -Â monoweb ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±
ã“ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã¯è²©å£²ç”¨ã§ã™ï¼ monoweb.info ã¯ã€ã‚ãªãŸãŒãŠæŽ¢ã—ã®æƒ…å ±ã®å…¨ã¦ã®æœ€æ–°ã‹ã¤æœ€é©ãªã‚½ãƒ¼ã‚¹ã§ã™ã€‚ä¸€èˆ¬ãƒˆãƒ”ãƒƒã‚¯ã‹ã‚‰ã“ã“ã‹ã‚‰æ¤œç´¢ã§ãã‚‹å†…å®¹ã¯ã€monoweb.infoãŒå…¨ã¦ã¨ãªã‚Šã¾ã™ã€‚ã‚ãªãŸãŒãŠæŽ¢ã—ã®å†…å®¹ãŒè¦‹ã¤ã‹ã‚‹ã“ã¨ã‚’é¡˜ã£ã¦ã„ã¾ã™ï¼
Ooo 2014/10/23
JavaScript

html5

CSP

Security
ãƒªãƒ³ã‚¯
HTML5 ã‚’åˆ©ç”¨ã—ãŸWeb ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«é–¢ã™ã‚‹èª¿æŸ»å ±å‘Šæ›¸
HTML5 ã¯ã€WHATWG ãŠã‚ˆã³ W3C ãŒ HTML4 ã«ä»£ã‚ã‚‹æ¬¡ä¸–ä»£ã® HTML ã¨ã—ã¦ç–å®šã‚’é€²ã‚ã¦ã„ã‚‹ä»•æ§˜ã§ã‚ã‚Šã€HTML5 ãŠã‚ˆã³ãã®å‘¨è¾ºæŠ€è¡“ã®åˆ©ç”¨ã«ã‚ˆã‚Šã€Web ã‚µã‚¤ãƒˆé–²è¦§è€… (ä»¥ä¸‹ã€ãƒ¦ãƒ¼ã‚¶) ã®ãƒ–ãƒ©ã‚¦ã‚¶å†…ã§ã®ãƒ‡ãƒ¼ã‚¿æ ¼ç´ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒé–“ã§ã®åŒæ–¹å‘é€šä¿¡ã€ä½ç½®æƒ…å ±ã®å–å¾—ãªã©ã€å¾“æ¥ã® HTML4 ã‚ˆã‚Šã‚‚æŸ”è»Ÿã‹ã¤åˆ©ä¾¿æ€§ã®é«˜ã„ Web ã‚µã‚¤ãƒˆã®æ§‹ç¯‰ãŒå¯èƒ½ã¨ãªã£ã¦ã„ã¾ã™ã€‚åˆ©ä¾¿æ€§ãŒå‘ä¸Šã™ã‚‹ä¸€æ–¹ã§ã€ãã‚Œã‚‰ã®æ–°æŠ€è¡“ãŒæ”»æ’ƒè€…ã«æ‚ªç”¨ã•ã‚ŒãŸéš›ã«ãƒ¦ãƒ¼ã‚¶ãŒå—ã‘ã‚‹å½±éŸ¿ã«é–¢ã—ã¦ã€ååˆ†ã«æ¤œè¨¼ã‚„å‘¨çŸ¥ãŒã•ã‚Œã¦ã„ã‚‹ã¨ã¯è¨€ãˆãšã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ãŒã•ã‚Œãªã„ã¾ã¾æ™®åŠãŒé€²ã‚€ã“ã¨ãŒå±æƒ§ã•ã‚Œã¦ã„ã¾ã™ã€‚ JPCERT/CCã§ã¯ã€HTML5 ã‚’åˆ©ç”¨ã—ãŸå®‰å…¨ãª Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºã®ãŸã‚ã®æŠ€è¡“æ›¸ã‚„ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã®ãƒ™ãƒ¼ã‚¹ã¨ãªã‚‹ä½“ç³»çš„ãªè³‡æ–™ã®æä¾›ã‚’ç›®çš„ã¨ã—ã¦ã€æ‡¸å¿µã•ã‚Œã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã‚’æŠ½å‡ºã—ãŸä¸Šã§æ¤œè¨Žã‚’åŠ ãˆã€ãã‚Œã‚‰ã®å•é¡Œ
Ooo 2014/01/05
HTML

html5

JavaScript

security

web
ãƒªãƒ³ã‚¯
ã“ã¦ã•ãAjax:WebSocketãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆdisableã¨ãªã£ãŸä»¶ - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
æ‹™è‘—ï¼ˆã€Œå¾¹åº•è§£èª¬ HTML5 APIã‚¬ã‚¤ãƒ‰ãƒ–ãƒƒã‚¯ ã‚³ãƒŸãƒ¥ãƒ‹ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ç³»APIç·¨ã€ï¼‰ã®è£œè¶³ãƒ»ä¿®æ£POSTã§ã™ã€‚ p.24ã«WebSocketã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ãƒ–ãƒ©ã‚¦ã‚¶ãŒè¨˜è¼‰ã•ã‚Œã¦ã„ã¾ã™ãŒã€å‘¨çŸ¥ã®é€šã‚Šã€ä»¥ä¸‹ã®ãƒ–ãƒ©ã‚¦ã‚¶ã§ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆdisableã«ãªã‚Šã¾ã—ãŸã€‚ FireFox4 Opera11 ã¡ãªã¿ã«ã€åŸ·ç†ä»¥é™ã‚µãƒãƒ¼ãƒˆã‚’é–‹å§‹ã—ãŸ iOS4.2.1ã®safari ã¯ã€ç¾çŠ¶ä½¿ãˆã‚‹çŠ¶æ…‹ã§ã™ã€‚ disableã¨ãªã£ãŸç†ç”±ã¯ã€ç¾çŠ¶å®Ÿè£…ã•ã‚Œã¦ã„ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ï¼ˆDraft76ï¼‰ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸãŸã‚ã€‚è„†å¼±æ€§ãŒFixã•ã‚ŒãŸä»•æ§˜ãŒIETFã§å›ºã¾ã‚Œã°ã€ãƒžã‚¤ãƒŠãƒ¼ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã‚ã£ã¦ã‚‚å†ã³å¯¾å¿œã™ã‚‹ã¨ã®ã“ã¨ã€‚ http://hacks.mozilla.org/2010/12/websockets-disabled-in-firefox-4/ è„†å¼±æ€§ã®è©³ç´°ã¯ã€Adamã•ã‚“ã®ãƒ¬ãƒãƒ¼ãƒˆã§è¿°ã¹ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ ãŸã ã—
Ooo 2011/05/28
html5

Security

network

WebSocket

javascript

browser
ãƒªãƒ³ã‚¯
Samy Kamkar - evercookie - virtually irrevocable persistent cookies
October 11, 2010: Reported on the front page of the New York Times Find the latest details, code, and implementations on github @ https://github.com/samyk/evercookie DESCRIPTION evercookie is a javascript API available that produces extremely persistent cookies in a browser. Its goal is to identify a client even after they've removed standard cookies, Flash cookies (Local Shared Objects or LSOs),
Ooo 2011/02/05
storage

cookie

html5

javascript

Browser

security
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (14)

html5ã¨securityã«é–¢ã™ã‚‹Oooã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (14)

html5ã¨securityã«é–¢ã™ã‚‹Oooã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

WebRTCã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ãƒ¬ãƒãƒ¼ãƒˆ Â· A Study of WebRTC Security

monoweb.infoÂ -Â ã“ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã¯è²©å£²ç”¨ã§ã™ï¼Â -Â monoweb ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±

HTML5 ã‚’åˆ©ç”¨ã—ãŸWeb ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«é–¢ã™ã‚‹èª¿æŸ»å ±å‘Šæ›¸

ã“ã¦ã•ãAjax:WebSocketãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆdisableã¨ãªã£ãŸä»¶ - livedoor Blogï¼ˆãƒ–ãƒ­ã‚°ï¼‰

Samy Kamkar - evercookie - virtually irrevocable persistent cookies

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (14)

html5ã¨securityã«é–¢ã™ã‚‹Oooã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

WebRTCã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¬ãƒãƒ¼ãƒˆ Â· A Study of WebRTC Security

monoweb.infoÂ -Â ã“ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã¯è²©å£²ç”¨ã§ã™ï¼Â -Â monoweb ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±

HTML5 ã‚’åˆ©ç”¨ã—ãŸWeb ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«é–¢ã™ã‚‹èª¿æŸ»å ±å‘Šæ›¸

ã“ã¦ã•ãAjax:WebSocketãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆdisableã¨ãªã£ãŸä»¶ - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹