[B! security] akira1908jpã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

akira1908jp id:akira1908jp

securityã«é–¢ã™ã‚‹akira1908jpã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (14)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ITéƒ¨é–€ãŒé ã‚’æŠ±ãˆã‚‹ã€ŒCentOSçµ‚äº†å•é¡Œã€ã€€ãªãœä¼æ¥ã¯å¾Œç¶™OSã«ã€ŒAlmaLinuxã€ã‚’é¸ã¶ã®ã‹
ITéƒ¨é–€ãŒé ã‚’æŠ±ãˆã‚‹ã€ŒCentOSçµ‚äº†å•é¡Œã€ã€€ãªãœä¼æ¥ã¯å¾Œç¶™OSã«ã€ŒAlmaLinuxã€ã‚’é¸ã¶ã®ã‹ï¼šç§»è¡Œå…ˆã®æ¤œè¨Žã§ç•™æ„ã™ã¹ãã“ã¨ ç„¡å„Ÿã®Linuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã§ã‚ã‚‹ã€ŒCentOSã€ã®æ›´æ–°ãŒ2024å¹´6æœˆã«çµ‚äº†ã—ãŸã€‚ãã®ã¾ã¾ä½¿ã„ç¶šã‘ã‚‹ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã«ãªã‚‹ãŒã€æœ‰å„Ÿã®ã€ŒRed Hat Enterprise Linuxã€ã¸ã®ç§»è¡Œã¯æ¤œè¨¼ã‚‚å«ã‚ã€ã‚³ã‚¹ãƒˆé¢ã§èª²é¡ŒãŒã‚ã‚‹ã‚±ãƒ¼ã‚¹ã‚‚å¤šã„ã€‚æ—¥æœ¬èªžã‚µãƒãƒ¼ãƒˆã‚‚æ¬²ã—ã„ã¨ã“ã‚ã ã€‚ç¾å®Ÿçš„ãªç§»è¡Œå…ˆã‚’è§£èª¬ã™ã‚‹ã€‚ ç„¡å„Ÿã®Linuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã—ã¦æ™®åŠã—ã¦ã„ã‚‹ã€ŒCentOSã€ã‚’åˆ©ç”¨ã™ã‚‹ä¼æ¥ãŒä»Šã€å²è·¯ã«ç«‹ãŸã•ã‚Œã¦ã„ã‚‹ã€‚ã€ŒCentOS Linux 8ã€ã¯ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒ2021å¹´æœ«ã«æ‰“ã¡åˆ‡ã‚‰ã‚Œã€ã€ŒCentOS Linux 7ã€ã®æ›´æ–°ãŒ2024å¹´6æœˆã«çµ‚äº†ã—ãŸã€‚ä»Šå¾Œã‚‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‘ãƒƒãƒã‚’é©ç”¨ã—ã¦å®‰å…¨ã«ä½¿ã†ãŸã‚ã«ã¯ã€ãƒ™ãƒ³ãƒ€ãƒ¼ãŒæœ‰å„Ÿã§æä¾›ã—ã¦ã„ã‚‹CentOSã®å»¶é•·
akira1908jp 2024/10/09
CentOS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

linux

é–‹ç™º

security
ãƒªãƒ³ã‚¯
Webã‚µãƒ¼ãƒ“ã‚¹ã«ãŠã‘ã‚‹ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã®ä»•æ§˜ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦³ç‚¹ - Flatt Security Blog
ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€‚æ ªå¼ä¼šç¤¾Flatt Security ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®æ‘ä¸Š @0x003f ã§ã™ã€‚ æœ¬ç¨¿ã§ã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ä¸Šã§å®Ÿè£…ã•ã‚Œã‚‹ã€Œãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã€ã®å®Ÿè£…ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’ã„ãã¤ã‹ç¤ºã—ã€ãã®ã€Œä»•æ§˜ã®ä¸ã§èµ·ãã†ã‚‹è„†å¼±æ€§ã€ã¨ãã®å¯¾ç–ã«ã¤ã„ã¦è§£èª¬ã—ã¦ã„ãã¾ã™ã€‚ ã€Œãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã€ã¯ToBã€ToCå•ã‚ãšå¤šãã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§å®Ÿè£…ã•ã‚Œã¦ã„ã‚‹æ©Ÿèƒ½ã§ã€XSSã‚„SQL Injectionã€Session Fixationã¨ã„ã£ãŸã‚ˆã†ãªå…¸åž‹çš„ãªè„†å¼±æ€§ã®è¦³ç‚¹ã«ã¤ã„ã¦ã¯ã€ãªã‚“ã‚‰ã‹ã®è§£èª¬ã‚’è¦‹ãŸã“ã¨ã®ã‚ã‚‹æ–¹ã‚‚å¤šã„ã¨æ€ã„ã¾ã™ã€‚ ã—ã‹ã—ã€ã€Œä»•æ§˜ã®è„†å¼±æ€§ã€ã¨ã„ã†ã®ã¯ã‚ã¾ã‚Šå¤šãèªžã‚‰ã‚Œã¦ã„ãªã„å°è±¡ã§ã™ã€‚ä»Šå›žã¯ãã®ã‚ˆã†ãªã‚¿ã‚¤ãƒ—ã®è„†å¼±æ€§ã«ã¤ã„ã¦ã®è§£èª¬ã‚’è¡Œã„ã¾ã™ã€‚ãªãŠã€IDaaSã‚’ç”¨ã„ãšã«è‡ªå‰ã§ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã‚’å®Ÿè£…ã—ã¦ã„ã‚‹ã‚±ãƒ¼ã‚¹ã‚’è¤‡æ•°ãƒ‘ã‚¿ãƒ¼ãƒ³æƒ³å®šã—ã¦ã„ã¾ã™ã€‚ ã¯ã˜ã‚ã« ãƒã‚°ã‚¤ãƒ³æ©Ÿèƒ½ã®ä»•æ§˜ãƒ‘ã‚¿ãƒ¼ãƒ³ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
akira1908jp 2022/01/25
security

ã‚µãƒ¼ãƒ“ã‚¹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰

web

ä»•æ§˜

èªè¨¼
ãƒªãƒ³ã‚¯
Meet Face ID and Touch ID for the Web
People often see passwords are the original sin of authentication on the web. Passwords can be easy to guess and vulnerable to breaches. Frequent reuse of the same password across the web makes breaches even more profitable. As passwords are made stronger and unique, they can quickly become unusa ble for many users. Passwords indeed look notorious, but are passwords themselves the probl em, or is it
akira1908jp 2020/10/20
security

web

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
AWS Single Sign-On ãŒæ±äº¬ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ã§åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸ | Amazon Web Services
Amazon Web Services ãƒ–ãƒã‚° AWS Single Sign-On ãŒæ±äº¬ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ã§åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸ ã¿ãªã•ã‚“ã€ã“ã‚“ã«ã¡ã¯ã€‚ã‚¢ãƒžã‚¾ãƒ³ ã‚¦ã‚§ãƒ– ã‚µãƒ¼ãƒ“ã‚¹ ã‚¸ãƒ£ãƒ‘ãƒ³ã€ ã‚·ãƒ‹ã‚¢ã‚¢ãƒ‰ãƒœã‚±ã‚¤ãƒˆã®äº€ç”°ã§ã™ã€‚ AWS Single Sign-On (SSO) ãŒæ±äº¬ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ã§ã”åˆ©ç”¨é ‚ã‘ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã®ã§ãŠçŸ¥ã‚‰ã›ã„ãŸã—ã¾ã™ã€‚ AWS SSO AWS SSOã¯è¤‡æ•°ã® AWS ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¨ãƒ“ã‚¸ãƒã‚¹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã®ä¸€å…ƒçš„ãªç®¡ç†ã‚’å®Ÿç¾ã—ã€1ã‹æ‰€ã‹ã‚‰ã®ã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ã‚¢ã‚¯ã‚»ã‚¹ã‚’ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«æä¾›ã—ã€AWS Organizations ã«ã‚ã‚‹ã™ã¹ã¦ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«å¯¾ã™ã‚‹ã‚¢ã‚¯ã‚»ã‚¹ã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚¯ã‚»ã‚¹è¨±å¯ã‚’ç°¡å˜ã«ä¸€å…ƒç®¡ç†ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚AWS Organizationã¨ã®é€£æºã«ã‚ˆã‚Šã€å€‹ã€…ã®AWS ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ãŠã‘ã‚‹è¿½åŠ ã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—ã‚’å¿…è¦ã¨ã™ã‚‹ã“ã¨ãªãã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«å¿…è¦ãªã‚¢
akira1908jp 2020/09/08
aws

security

ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³

ã‚¢ã‚«ã‚¦ãƒ³ãƒˆ

web
ãƒªãƒ³ã‚¯
SSL (TLS) å¯¾å¿œãƒ—ãƒãƒˆã‚³ãƒ«ã®ãƒªã‚¹ãƒˆ - Qiita
å¾¡ç¤¾ã®å¸¸æ™‚SSL (TLS) ã¸ã®å¯¾å¿œã¯ãŠæ¸ˆã¿ã§ã™ã‹ã€‚ã¨ã„ã†ã‚ã‘ã§æœ¬ç¨¿ã§ã¯RFCã§æ¨™æº–åŒ–ã•ã‚Œã¦ã„ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ«ã®ã†ã¡ã€SSL (TLS) ã«å¯¾å¿œæ¸ˆã¿ã®ã‚‚ã®ã‚’åˆ—æŒ™ã—ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ç”¨èªžã®å®šç¾© æœ¬ç¨¿ã§ã¯ã€ä»¥ä¸‹ã®ç”¨èªžã‚’ä½¿ã„ã¾ã™ã€‚ Implicit TLS ï¼ˆæš—é»™ã®TLSï¼‰ TCPã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³é–‹å§‹ã¨åŒæ™‚ã«TLSã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒã„ããªã‚Šå§‹ã¾ã‚‹æ–¹å¼ã§ã™ã€‚httpsãªã©ã¯ã“ã‚Œã§ã™ã€‚å¹³æ–‡é€šä¿¡ç”¨ã¨æš—å·é€šä¿¡ç”¨ã«åˆ¥ã€…ã®ãƒãƒ¼ãƒˆã‚’å‰²ã‚Šå½“ã¦ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ãŒã€ãã®ã¶ã‚“ä½Žãƒ¬ã‚¤ãƒ†ãƒ³ã‚·ãƒ¼ã‚’å®Ÿç¾ã§ãã¾ã™ã€‚ Explicit TLS ï¼ˆæ˜Žç¤ºçš„TLSï¼‰ TCPã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ãŒç¢ºç«‹ã™ã‚‹ã¨ã€æœ€åˆã¯å¹³æ–‡ã§é€šä¿¡ãŒå§‹ã¾ã‚Šã€ãã“ã‹ã‚‰TLSã¸ç§»è¡Œã™ã‚‹æ–¹å¼ã§ã™ã€‚STARTTLSã¨ã‹ã€ãã‚“ãªæ„Ÿã˜ã®ã‚³ãƒžãƒ³ãƒ‰ãŒç”¨æ„ã•ã‚Œã¦ã„ã‚‹ã®ãŒã“ã‚Œã§ã™ã€‚ç‰¹å¾´ã¨ã—ã¦ã¯ã€å¹³æ–‡é€šä¿¡ã¨æš—å·é€šä¿¡ã‚’åŒã˜ãƒãƒ¼ãƒˆã§ã‚«ãƒãƒ¼ã§ãã¾ã™ã€‚å¹³æ–‡ã§å§‹ã¾ã£ã¦æš—å·ã¸åˆ‡ã‚Šæ›¿ã‚ã‚‹ã¨ã„ã†æ‰‹é †ã‚’è¸ã‚€åˆ†ã€ãƒ¬
akira1908jp 2020/07/24
security

google

SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

rfc

network
ãƒªãƒ³ã‚¯
AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½œã£ãŸã‚‰æœ€åˆã«ã‚„ã‚‹ã¹ãã“ã¨ ï½žä»¤å’Œå…ƒå¹´ç‰ˆï½ž | DevelopersIO
ã¯ã˜ã‚ã« ä¸å±±ï¼ˆé †ï¼‰ã§ã™ 4å¹´ã»ã©å‰ã«ã“ã®è¨˜äº‹ã®ã‚¿ã‚¤ãƒˆãƒ«ã¨åŒã˜ãƒ†ãƒ¼ãƒžã§è³‡æ–™ã‚’ä½œæˆã—ãŸã“ã¨ãŒã‚ã‚‹ã®ã§ã™ãŒã€å¤ã„å†…å®¹ãŒã‚ã£ãŸã‚Šæ–°ã—ã„ã‚µãƒ¼ãƒ“ã‚¹ã®ã“ã¨ãŒå«ã¾ã‚Œã¦ã„ãªã‹ã£ãŸã‚Šã™ã‚‹ã®ã§æ”¹ã‚ã¦ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ä»¤å’Œã ã—ï¼ ãã®æ™‚ã®è³‡æ–™ã¯ã“ã¡ã‚‰ã§ã™ï¼ˆã‚¯ãƒ©ã‚¹ãƒ¡ã‚½ãƒƒãƒ‰ã«ã‚¸ãƒ§ã‚¤ãƒ³ã™ã‚‹ãã‚‰ã„2å¹´å‰ã§ã™ï¼‰ã€‚ AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½œã£ãŸã‚‰æœ€åˆã«ã‚„ã‚‹ã¹ãã“ã¨ ã‚µã‚¤ãƒ³ã‚¢ãƒƒãƒ— ï¼ˆæ¥å‹™åˆ©ç”¨ã®å ´åˆï¼‰éžå€‹äººãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã‚µã‚¤ãƒ³ã‚¢ãƒƒãƒ— ã‚µãƒãƒ¼ãƒˆãƒ—ãƒ©ãƒ³ã®ç¢ºèª IDç®¡ç† / æ¨©é™ç®¡ç† CloudTrailã®æœ‰åŠ¹åŒ– ãƒ«ãƒ¼ãƒˆã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®MFAè¨å®š IAM User / IAM Groupã®ä½œæˆ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒãƒªã‚·ãƒ¼ã®è¨å®š GuardDutyã®æœ‰åŠ¹åŒ– Security Hubã®æœ‰åŠ¹åŒ– è«‹æ±‚ IAM Userã«ã‚ˆã‚‹è«‹æ±‚æƒ…å ±ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹è¨±å¯ æ”¯æ‰•é€šè²¨ã®å¤‰æ›´ Budgetã®è¨å®š Cost Explorerã®æœ‰åŠ¹åŒ– Cost Usage Report
akira1908jp 2019/05/20
ã‚¢ã‚«ã‚¦ãƒ³ãƒˆ

aws

è¨å®š

security
ãƒªãƒ³ã‚¯
ãƒªãƒ³ã‚¯ã‚’ä½œã‚‹æ™‚ã® target="_blank" ã®å±é™ºæ€§ - éš™ã‚ã‚‰ã°å¯ã‚‹
html ã§ ãƒªãƒ³ã‚¯ã‚’æ–°ã—ã„ã‚¿ãƒ–(ã‚„ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦)ã§é–‹ã‹ã›ãŸã„å ´åˆã€target="_blank" ã‚’æŒ‡å®šã™ã‚‹ãŒã€ ã“ã®ä½¿ã„æ–¹ã«ã¯è½ã¨ã—ç©´ãŒã‚ã‚‹ã‚‰ã—ã„ã€‚ www.jitbit.com ãƒªãƒ³ã‚¯ã‚’é–‹ã„ãŸå…ˆã® javascript ã‹ã‚‰ã€é–‹ã„ãŸå…ƒã®ãƒšãƒ¼ã‚¸ã‚’æ“ä½œã§ãã¦ã—ã¾ã†ã¨ã®ã“ã¨ã€‚ æ°—ã«ãªã£ãŸã®ã§ç¢ºèªã—ã¦ã¿ãŸã€‚ æ‚ªç”¨ã®ãƒ‘ã‚¿ãƒ¼ãƒ³ insecure.html ãŒæœ€åˆã«é–‹ããƒšãƒ¼ã‚¸ã§ã€ã“ã“ã« target="_blank" ãªãƒªãƒ³ã‚¯ãŒã‚ã‚‹ã€‚ ã“ã®ãƒªãƒ³ã‚¯ã‚’æŠ¼ã™ã¨ new_window.html ã‚’æ–°ã—ã„ã‚¿ãƒ–ã§é–‹ãã€‚ ã“ã® new_window.html ã« javascript ãŒä»•è¾¼ã¾ã‚Œã¦ãŠã‚Šã€å…ƒãƒšãƒ¼ã‚¸ã‚’æ“ä½œã•ã‚Œã‚‹ã¨ã„ã†è©±ã€‚ å…·ä½“çš„ã«ã¯ window.opener.location="./evil.html" ã¨å®Ÿè¡Œã™ã‚‹ã¨ã€å…ƒã‚¿ãƒ–ã¯ evil.html ã«é·ç§»ã™ã‚‹ã€‚ å®Ÿéš›è©¦ã—ã¦ã¿ãŸã®ãŒ ã“ã“ã€‚ ãƒªãƒ³ã‚¯ã‚’é–‹
akira1908jp 2019/02/04
javascript

html

security

web

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
SSLè¨¼æ˜Žæ›¸ã¨ã¯ï¼Ÿ åŸºç¤Žã‹ã‚‰å¦ã¶SSLã‚³ãƒ©ãƒ Â | ã•ãã‚‰ã®SSL
ã•ãã‚‰ã®SSLã‚³ãƒ©ãƒ SSLã¨ã¯ï¼Ÿã¨ã„ã£ãŸåŸºæœ¬ã®ç†è§£ã‹ã‚‰ã€ãã®å¿…è¦æ€§ã‚„é¸ã³æ–¹ã®ã‚³ãƒ„ã€æœ€æ–°æƒ…å ±ã¾ã§ã€ åˆå¿ƒè€…ã«ã‚‚ä¸Šç´šè€…ã«ã‚‚å½¹ç«‹ã¤ã‚³ãƒ©ãƒ ã‚’æ›´æ–°ã—ã¦ã„ã¾ã™ã€‚ ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºãƒ¡ãƒ¼ãƒ«ãŒå¢—åŠ ã—ã¦ã„ã‚‹ä¸ã€VMCã¨BIMIã®ä»•çµ„ã¿ã«ã‚ˆã‚Šã€Gmailãªã©ã§é€ä¿¡è€…ã®ãƒã‚´ãŒè¡¨ç¤ºã•ã‚Œã€è©æ¬ºãƒ¡ãƒ¼ãƒ«ã‚’è¦‹åˆ†ã‘ã‚‹æ–°ã—ã„æ‰‹æ®µãŒæä¾›ã•ã‚Œã¾ã™ã€‚VMCã¯é€ä¿¡å´ãŒè¨å®šã—ã€å—ä¿¡å´ã¯BIMIã®ç¢ºèªæ–¹æ³•ã‚’çŸ¥ã£ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ å…ˆæ—¥ã€ŒRSAæš—å·ã‚’é«˜é€Ÿã§è§£èªã§ãã‚‹ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’é–‹ç™ºã—ãŸã€ã¨ä¸»å¼µã™ã‚‹â€æœªæŸ»èªâ€ã®è«–æ–‡ãŒç™ºè¡¨ã•ã‚Œã€SNSä¸Šã§ã€ŒRSAæš—å·ã€ãŒãƒˆãƒ¬ãƒ³ãƒ‰å…¥ã‚Šã™ã‚‹çã—ã„äº‹æ…‹ãŒèµ·ãã¾ã—ãŸã€‚ä»Šå›žã¯å®Ÿéš›ã«RSAæš—å·ã‚’é«˜é€Ÿã§è§£èªã§ããŸã‚‰ä½•ãŒèµ·ãã‚‹ã®ã‹ï¼Ÿæœ¬å½“ã«ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¯çµ‚ã‚ã‚‹ã®ã‹ï¼Ÿã¨ã„ã†ç‚¹ã«ã¤ã„ã¦è€ƒãˆã¦ã¿ã¾ã—ã‚‡ã†ã€‚
akira1908jp 2018/08/20
SSL

security
ãƒªãƒ³ã‚¯
Let's Encrypt ç·åˆãƒãƒ¼ã‚¿ãƒ«
Let's Encrypt æœ€æ–°æƒ…å ± ãƒ»ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã¨ ACME v2 ã¸å¯¾å¿œãŒå®Œäº†ã—ã¾ã—ãŸï¼ˆ2018å¹´03æœˆ15æ—¥ æ›´æ–°ï¼‰ â€»æŠ€è¡“çš„ãªè©³ç´°ã«ã¤ã„ã¦ã¯ ACME v2 ã¨ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã®æŠ€è¡“æƒ…å ± ã‚’ã”è¦§ãã ã•ã„ã€‚ â€»ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã®å–å¾—ã«ã¯ã€ACME v2 ãƒ—ãƒãƒˆã‚³ãƒ«ã«å¯¾å¿œã—ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ DNS ã«ã‚ˆã‚‹èªè¨¼ãŒå¿…è¦ã§ã™ã€‚è¨¼æ˜Žæ›¸ã®å–å¾—ãƒ»æ›´æ–°ã®éš›ã«ã€DNS ã®ã€ŒTXT ãƒ¬ã‚³ãƒ¼ãƒ‰ã€ã«ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç™»éŒ²ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ â€»ã‚µãƒ–ã‚¸ã‚§ã‚¯ãƒˆã®ä»£æ›¿åï¼ˆSAN : Subject Alternative Nameï¼‰ã‚’ä½¿ç”¨ã—ãŸ è¤‡æ•°ã®ãƒ‰ãƒ¡ã‚¤ãƒ³åãƒ»ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³åã«å¯¾ã—ã¦æœ‰åŠ¹ãªè¨¼æ˜Žæ›¸ ã‚‚å¼•ãç¶šãå–å¾—å¯èƒ½ã§ã™ã€‚ Let's Encrypt ã«ã¤ã„ã¦ Let's Encrypt ã¯ã€èªè¨¼å±€ï¼ˆCAï¼‰ã¨ã—ã¦ã€ŒSSL/TLSã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã€ã‚’ç„¡æ–™ã§ç™ºè¡Œã™ã‚‹ã¨ã¨ã‚‚ã«ã€è¨¼æ˜Žæ›¸ã®ç™ºè¡Œãƒ»ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ»
akira1908jp 2017/03/21
OS

SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

https
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã®è„†å¼±æ€§èª¿æŸ»ãƒ„ãƒ¼ãƒ«ã€è„†å¼±æ€§å¦ç¿’ã‚½ãƒ•ãƒˆãªã©
ãƒ©ãƒƒã‚¯ ITãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«çµ±æ‹¬æœ¬éƒ¨ ESSäº‹æ¥éƒ¨ ã‚·ã‚¹ãƒ†ãƒ ã‚¢ã‚»ã‚¹ãƒ¡ãƒ³ãƒˆéƒ¨ æ‹…å½“éƒ¨é•·ã€‚å…¥ç¤¾ä»¥æ¥ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ä¼æ¥ãªã©ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ã‚’æ‰‹æŽ›ã‘ã‚‹ã€‚æœ€è¿‘é£¼ã„å§‹ã‚ãŸãƒ•ã‚§ãƒ¬ãƒƒãƒˆã¨å‰ã‹ã‚‰ã„ã‚‹æ„›ã—ã®çŒ«ã¨ã®ã‘ã‚“ã‹ã«æ‚©ã¾ã•ã‚Œã¦ã„ã‚‹ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“è€…ã®å±±å´Ž åœå¾ã•ã‚“ãŒã‚ªã‚¹ã‚¹ãƒ¡ã™ã‚‹ãƒ•ãƒªãƒ¼ã‚½ãƒ•ãƒˆã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã«ä½¿ã†ã€ŒOWASP Zed Attack Proxyï¼ˆZAPï¼‰ã€ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å¦ç¿’ã«ä½¿ã†ã€ŒAppGoatã€ã€Windowsä¸Šã§Linuxã‚³ãƒžãƒ³ãƒ‰ã«ã‚ˆã‚‹æ“ä½œã‚’å¯èƒ½ã«ã™ã‚‹ã€ŒCygwinã€ã®ä¸‰ã¤ã€‚æœ€åˆã®äºŒã¤ã¯ã€ä¼æ¥ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹…å½“è€…ã‚„ã‚·ã‚¹ãƒ†ãƒ é–‹ç™ºè€…ãŒã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¦ç¿’ã™ã‚‹ãŸã‚ã®å…¥é–€ãƒ„ãƒ¼ãƒ«ã¨ã—ã¦ã´ã£ãŸã‚Šã ã€‚ OWASP ZAPã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã‚’èª¿ã¹ã‚‰ã‚Œã‚‹ã‚½ãƒ•ãƒˆã€‚é€šä¿¡ã®ä¸èº«ã‚’ç¢ºèªã—ãŸã‚Šæ¢ã‚ãŸã‚Šã™ã‚‹ã€Œãƒ—ãƒã‚ã‚·ãƒ¼ã€ã¨ã€Webã‚µã‚¤ãƒˆå†…ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ãƒªã‚¹ãƒˆã‚¢ãƒƒãƒ—ã™ã‚‹ã€Œã‚¹ãƒ‘ã‚¤ãƒ€ãƒ¼ã€ã€ã‚»ã‚ãƒ¥
akira1908jp 2016/09/12
security

web

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ãƒ«ãƒ¼ã‚¿ãƒ¼ã®æ¬ é™¥ã§è¢«å®³ç›¸æ¬¡ãŽç•°ä¾‹ã®ç¤¾å‘Šã€€NHKãƒ‹ãƒ¥ãƒ¼ã‚¹
ãƒ‘ã‚½ã‚³ãƒ³å‘¨è¾ºæ©Ÿå™¨ãƒ¡ãƒ¼ã‚«ãƒ¼ã®ãƒã‚¸ãƒ†ãƒƒã‚¯ç¤¾ã¯ã€ï¼“å¹´å‰ã«è²©å£²ã‚’çµ‚ãˆãŸã€Œãƒ«ãƒ¼ã‚¿ãƒ¼ã€ã¨å‘¼ã°ã‚Œã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŽ¥ç¶šæ©Ÿå™¨ã®æ¬ é™¥ãŒã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã«æ‚ªç”¨ã•ã‚Œã‚‹è¢«å®³ãŒç›¸æ¬¡ã„ã§ã„ã‚‹ã“ã¨ã‹ã‚‰ã€ï¼’æ—¥ã€å¤§æ‰‹æ–°èžï¼•ç´™ã«ç¤¾å‘Šã‚’æŽ²è¼‰ã—ã€åˆ©ç”¨è€…ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å¤‰æ›´ãªã©ã‚’å‘¼ã³ã‹ã‘ã‚‹ç•°ä¾‹ã®å¯¾å¿œã‚’å–ã‚Šã¾ã—ãŸã€‚ ã“ã®æ¬ é™¥ã‚’æ”¾ç½®ã—ãŸã¾ã¾ã§ã€ãƒ«ãƒ¼ã‚¿ãƒ¼ã‚’åˆ©ç”¨ã—ãŸçµæžœã€ãƒãƒƒãƒˆã®æŽ¥ç¶šã«å¿…è¦ãªï¼©ï¼¤ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒå¤–éƒ¨ã«æµå‡ºã—ã€ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã«æ‚ªç”¨ã•ã‚Œã‚‹è¢«å®³ãŒç¶šã„ã¦ã„ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ ãƒ¡ãƒ¼ã‚«ãƒ¼ã§ã¯ã€ï¼“å¹´å‰ã«ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ãªã©ã‚’é€šã˜ã¦ã“ã®æ¬ é™¥ã‚’å…¬è¡¨ã—ã¦ã„ã¾ã™ãŒã€ï¼’æ—¥æ”¹ã‚ã¦ã€å¤§æ‰‹æ–°èžï¼•ç´™ã«ç¤¾å‘Šã‚’æŽ²è¼‰ã—ã€ãƒ«ãƒ¼ã‚¿ãƒ¼ã®åˆ©ç”¨è€…ã«ã€ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã‚’é€šã˜ã¦æœ€æ–°ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã«æ›´æ–°ã™ã‚‹ã¨ã¨ã‚‚ã«ã€ãƒãƒƒãƒˆæŽ¥ç¶šã®éš›ã«å¿…è¦ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¤‰æ›´ã™ã‚‹ã‚ˆã†ç•°ä¾‹ã®å‘¼ã³ã‹ã‘ã‚’è¡Œã„ã¾ã—ãŸã€‚ ã¾ãŸè¦è¦–åºã‚‚ç‰¹è¨ãƒšãƒ¼ã‚¸ã‚’é–‹è¨ã—ã€ãƒã‚¸ãƒ†ãƒƒã‚¯ç¤¾ã®ãƒ«ãƒ¼ã‚¿ãƒ¼ã®åˆ©ç”¨è€…ã«æ³¨æ„ã‚’å‘¼ã³ã‹ã‘ã¦ã„ã¾ã™ã€‚ è£½å“ã«é–¢ã™ã‚‹è©³ã—
akira1908jp 2015/06/02
security

ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
Home
Workbench is a powerful, web-based suite of tools designed for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Workbench includes robust support for the Force.com Partner, Bulk, Rest, Streaming, Metadata, and Apex APIs that allows users to describe, query, manipulate, and migrate both data and metadata in Salesforce.com organizations directly in
akira1908jp 2014/04/10
â€œhttps://workbench.developerforce.comâ€

management

security

force.com
ãƒªãƒ³ã‚¯
SAMLèªè¨¼ãŒã§ãã‚‹ã¾ã§ - Cybozu Inside Out | ã‚µã‚¤ãƒœã‚¦ã‚ºã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€Slashãƒãƒ¼ãƒ ã®æ¸¡è¾ºã§ã™ã€‚ Slashãƒãƒ¼ãƒ ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†ã‚„èªè¨¼å‘¨ã‚Šãªã©ã®ã€cybozu.comã®å„ã‚µãƒ¼ãƒ“ã‚¹ã«å…±é€šã™ã‚‹æ©Ÿèƒ½ã‚’é–‹ç™ºã—ã¦ã„ã¾ã™ã€‚ä»Šå›žã¯ã€3æœˆã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã€SAMLèªè¨¼ã‚’ç”¨ã„ãŸã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³æ©Ÿèƒ½1ã«ã¤ã„ã¦ãŠè©±ã•ã›ã¦é ‚ãã¾ã™ã€‚cybozu.comã§ã®SAMLèªè¨¼ã®æ¦‚è¦ã«ãã‚ãˆã¦ã€ãã‚Œã‚‰ã®æ©Ÿèƒ½ã‚’ã©ã®ã‚ˆã†ã«è¨è¨ˆãƒ»å®Ÿè£…ã—ã¦ã„ã£ãŸã‹ã€ã¨ã„ã†èª°ã‚‚èˆˆå‘³ãªã„ãƒ‹ãƒƒãƒãªè©±é¡Œã‚’æ‰±ã„ã¾ã™ã€‚ SAML2 ã£ã¦ï¼Ÿ ã€ŒSAMLãªã‚“ã¦èžã„ãŸã“ã¨ç„¡ã„ã‘ã©ãªã‚“ã¨ãªãèˆˆå‘³ãŒã‚ã‚‹ãžï¼ï¼ã€ã¨ã„ã†ç‰©å¥½ããªæ–¹ã®ãŸã‚ã«ã€SAMLã®æ¦‚è¦ã¨cybozu.comã§ã®åˆ©ç”¨ã«ã¤ã„ã¦ã€ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ãã‚“ãªã‚‚ã®ã¯æ—¢ã«çŸ¥ã£ã¦ã„ã‚‹ã¨ã„ã†SAMLçŒ›è€…ãªæ–¹ã¯èªã¿é£›ã°ã—ã¦é ‚ã„ã¦æ§‹ã„ã¾ã›ã‚“ã€‚ SAMLã¯Security Assertion Markup Languageã®ç•¥ã§ã€OASIS3ã«ã‚ˆã£ã¦ç–å®šã•ã‚ŒãŸã€ç•°ãªã‚‹ã‚»ã‚ãƒ¥ãƒª
akira1908jp 2013/04/08
èªè¨¼

security
ãƒªãƒ³ã‚¯
ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã®ç›®çš„ã¨å®Ÿç¾æ–¹æ³•
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã‘ã‚‹ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã«é–¢é€£ã—ã¦ã€ãã®ç›®çš„ã¨å®Ÿç¾æ–¹æ³•ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ è°è«–ã®å‰æ ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€èªè¨¼æ–¹å¼ã¨ã—ã¦ã€ã„ã‚ã‚†ã‚‹ãƒ•ã‚©ãƒ¼ãƒ èªè¨¼ã‚’å‰æã¨ã—ã¦ã„ã¾ã™ã€‚ãƒ•ã‚©ãƒ¼ãƒ èªè¨¼ã¯ä¿—ãªè¨€ã„æ–¹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€HTMLãƒ•ã‚©ãƒ¼ãƒ ã§IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å…¥åŠ›ãƒ•ã‚©ãƒ¼ãƒ ã‚’ä½œæˆã—ã€ãã®å…¥åŠ›å€¤ã‚’ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å´ã§æ¤œè¨¼ã™ã‚‹èªè¨¼æ–¹å¼ã®ã“ã¨ã§ã™ã€‚IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å…¥åŠ›ã¯æœ€åˆã®1å›žã§ã™ã¾ã›ãŸã„ãŸã‚ã€é€šå¸¸ã¯Cookieã‚’ç”¨ã„ã¦èªè¨¼çŠ¶æ…‹ã‚’ä¿æŒã—ã¾ã™ã€‚ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã¨ã¯ã€ä¿æŒã•ã‚ŒãŸèªè¨¼çŠ¶æ…‹ã‚’ç ´æ£„ã—ã¦ã€èªè¨¼ã—ã¦ã„ãªã„çŠ¶æ…‹ã«æˆ»ã™ã“ã¨ã§ã™ã€‚ Cookieã‚’ç”¨ã„ãŸèªè¨¼çŠ¶æ…‹ä¿æŒ å‰è¿°ã®ã‚ˆã†ã«ã€èªè¨¼çŠ¶æ…‹ã®ä¿æŒã«ã¯Cookieã‚’ç”¨ã„ã‚‹ã“ã¨ãŒä¸€èˆ¬çš„ã§ã™ãŒã€Cookieã« auth=1 ã¨ã‹ã€userid=tokumaru ãªã©ã®ã‚ˆã†ã«ã€ãƒã‚°ã‚¤ãƒ³çŠ¶æ…‹ã‚’ã€Œãã®ã¾ã¾ã€Cookieã«ä¿æŒã™ã‚‹ã¨è„†å¼±æ€§ã«ãªã‚Šã¾ã™
akira1908jp 2013/02/15
session

security

èªè¨¼

cookie
ãƒªãƒ³ã‚¯
1