[B! security] aroma_blackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

aroma_black id:aroma_black

securityã«é–¢ã™ã‚‹aroma_blackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (74)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Make: Japan | RaspberryÂ Piã‚’æ”»æ’ƒã‹ã‚‰å®ˆã‚‹ãŸã‚ã®æ‰‹é †
2017.09.15 RaspberryÂ Piã‚’æ”»æ’ƒã‹ã‚‰å®ˆã‚‹ãŸã‚ã®æ‰‹é † Text by Justin Klein Keane and Tom Van de Wiele Translated by kanai Raspberry Piã¯ã€ã‚ã‚‰ã‚†ã‚‹ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«ä½¿ãˆã‚‹å¤¢ã®ãƒœãƒ¼ãƒ‰ã ã€‚å®‰ãã¦ã€ç°¡å˜ã«ä½¿ãˆã¦ã€ã•ã¾ã–ã¾ãªOSã«å¹…åºƒãå¯¾å¿œã—ã¦ã„ã¦ã€ãƒ—ãƒã‚°ãƒ©ãƒ å¯èƒ½ãªGPIOãƒ”ãƒ³ã‚„ãƒžãƒ«ãƒã‚³ã‚¢ã®CPUã‚„è¤‡æ•°ã®USBãƒãƒ¼ãƒˆã‚‚å‚™ãˆã¦ã„ã‚‹ã€‚ ä½•ã‹ã‚’è‡ªå‹•åŒ–ã—ãŸã‚Šæƒ…å ±ã‚’é›†ã‚ãŸã‚Šã¨ã„ã£ãŸãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«éžå¸¸ã«é©ã—ã¦ã„ã‚‹Raspberry Piã ãŒã€æ°—ã‚’ã¤ã‘ã¦ã„ãªã„ã¨ã€ãã®å¯æ„›ã„ãƒœãƒ¼ãƒ‰ã‚’ä½¿ã£ãŸç°¡å˜ãªè¶£å‘³ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãŒã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã¸ã®ä¾µå…¥å£ã«ãªã‚‹ãªã©ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã«ãªã£ã¦ã—ã¾ã†æã‚Œã‚‚ã‚ã‚‹ã€‚Raspberry Piã«ã¯ã€ARM Trustzoneã¨é•ã£ã¦ã‚»ã‚ãƒ¥ã‚¢ãƒ–ãƒ¼ãƒˆã®æ©Ÿèƒ½ãŒãªã„ã€‚SDã‚«ãƒ¼ãƒ‰ã‚„OSã¯ç°¡å˜ã«ã¯æš—å·åŒ–ã§ããª
aroma_black 2018/07/15
RaspberryPi

security
ãƒªãƒ³ã‚¯
Dockerã‚³ãƒ³ãƒ†ãƒŠã®ä¸ã§systemdã‚’æ“ä½œã—ãŸã„ã®æ³¨æ„ç‚¹ - sgykfjsm.github.com
Dockerã‚³ãƒ³ãƒ†ãƒŠã‚’ä½¿ã£ã¦Ansibleã®Playbookã‚’ãƒ†ã‚¹ãƒˆã™ã‚‹éš›ã«ã€Playbookã§systemctlã‚’å®Ÿè¡Œã—ã‚ˆã†ã¨ã—ã¦ä»¥ä¸‹ã®ã‚ˆã†ãªã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ãŸã€‚ 1 Failed to get D-Bus connection: Operation not permitted TR;DL ä»¥ä¸‹ã®æ§˜ã«ã‚³ãƒ³ãƒ†ãƒŠã‚’èµ·å‹•ã—ã¦ãŠã„ã¦ã€ãã‚Œã‹ã‚‰docker execã§systemctlã‚’å®Ÿè¡Œã™ã‚Œã°ã‚ˆã„ã€‚ 1 $ docker run --rm --privileged -d -it --security-opt seccomp=unconfined -e "container=docker" centos:7 /sbin/init èª¬æ˜Ž ä»Šå›žã®å•é¡Œã¯å¤§ã¾ã‹ã«è¨€ã†ã¨ã‚³ãƒ³ãƒ†ãƒŠã‹ã‚‰ãƒ›ã‚¹ãƒˆã¸ã®ãƒªã‚½ãƒ¼ã‚¹ã‚¢ã‚¯ã‚»ã‚¹ãŒåˆ¶é™ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã«ã‚ˆã‚‹ã‚‚ã®ã§ã‚ã‚‹ã€‚ã‚ˆã£ã¦ã€ã“ã®ãƒªã‚½ãƒ¼ã‚¹åˆ¶é™ã‚’ä»¥ä¸‹ã®æ§˜ã«ç·©å’Œã—ã¦ã‚ã’ã‚Œã°è‰¯ã„ã€‚ãªãŠ
aroma_black 2018/04/17
docker

security
ãƒªãƒ³ã‚¯
TechCrunch | Startup and Technology News
Fresh off the success of its first mission, satellite manufacturer Apex has closed $95 million in new capital to scale its operations.Â The Los Angeles-based startup successfully launched and commissionedâ€¦
aroma_black 2018/01/30
â€œãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æŒ‡ç´‹ã¯Macã®SSDãƒ‰ãƒ©ã‚¤ãƒ–ã«ä¸€åˆ‡ä¿å˜ã•ã‚Œãªã„ â€”â€” T1ã®Secure Enclaveã¨å‘¼ã°ã‚Œã‚‹éš”é›¢ã•ã‚ŒãŸé ˜åŸŸã«ç½®ã‹ã‚Œã‚‹ã€‚Intel CPUã¯ã€æŒ‡ç´‹ãŒèªè¨¼ã•ã‚ŒãŸæ™‚ã«æˆåŠŸã®åˆå›³ã‚’å—ã‘å–ã‚‹ã ã‘ã â€

security
ãƒªãƒ³ã‚¯
npmjs.com ã§è‘—åã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã«ã‚ˆãä¼¼ãŸåå‰ã®ãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒå¤§é‡ã«ç™ºè¦‹ã•ã‚ŒãŸ - Islands in the byte stream
Malicious packages in npm. Hereâ€™s what to do | Ivan Akulovâ€™s blog People found malicious packages in npm that work like real ones, are named similarly real ones, but collect and send your process environment to a third-party server when you install them è¨³: æ‚ªæ„ã®ã‚ã‚‹ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ãŒnpmã§ç™ºè¦‹ã•ã‚ŒãŸã€‚ãã‚Œã‚‰ã¯ã€å®Ÿéš›ã®ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ã‚ˆãä¼¼ãŸåå‰ã§åŒã˜ã‚ˆã†ã«å‹•ããŒã€ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ™‚ã«ãƒ—ãƒã‚»ã‚¹ã®ç’°å¢ƒå¤‰æ•°ã‚’å¤–éƒ¨ã®ã‚µãƒ¼ãƒã«é€ä¿¡ã™ã‚‹ã€‚ ç™ºè¦‹ã•ã‚ŒãŸãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ä¸€è¦§ã¯å…ƒã‚¨ãƒ³ãƒˆãƒªã‚’ã©ã†ãžã€‚ã“ã®ã‚ˆã†ãªãƒžãƒ«ã‚¦ã‚§ã‚¢ã§ã‚ã‚‹å½ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ä¸€ä¾‹ã‚’ã‚ã’ã‚‹ã¨ã€ ba
aroma_black 2017/08/09
"ã‚ãªãŸã ã‘ã§ãªãä¾å˜ãƒ„ãƒªãƒ¼ä¸ã®èª°ã‹ãŒãƒŸã‚¹ã£ã¦å½ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’ä½¿ã£ãŸã ã‘ã§ã‚ãªãŸã®ç’°å¢ƒãŒæ”»æ’ƒå¯¾è±¡ã«ãªã‚‹"

npm

security
ãƒªãƒ³ã‚¯
Developers.IO 2017ã‚»ãƒƒã‚·ãƒ§ãƒ³ã€ŒAWS Security Best Practices Whitepaperã‚’ã‚¬ãƒƒãƒ„ãƒªèªã¿è§£ãä¼šã€ã§è©±ã—ã¾ã—ãŸ #cmdevio2017 | DevelopersIO
ã‚¯ãƒ©ã‚¹ãƒ¡ã‚½ãƒƒãƒ‰ãŒé‹å–¶ã™ã‚‹ITç³»æŠ€è¡“ãƒ–ãƒã‚°Developers.IOã®ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã‚¤ãƒ™ãƒ³ãƒˆDevelopers.IO 2017ã«ã¦ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã€ŒAWS Security Best Practices Whitepaperã‚’ã‚¬ãƒƒãƒ„ãƒªèªã¿è§£ãä¼šã€ã‚’ç™ºè¡¨ã—ã¾ã—ãŸã€‚ãã®ãƒ¬ãƒãƒ¼ãƒˆã§ã™ã€‚ ç™ºè¡¨ã‚¹ãƒ©ã‚¤ãƒ‰ ã‚»ãƒƒã‚·ãƒ§ãƒ³æ¦‚è¦ ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®å†…å®¹ã¯AWSã§ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«ã¤ã„ã¦å…¬å¼ã«ç™ºè¡Œã—ã¦ã„ã‚‹AWS Security Best Practices Whitepaperã®å†…å®¹ã‚’æ”¹ã‚ã¦ç¢ºèªã—ã‚ˆã†ã¨ã„ã†ã‚‚ã®ã§ã—ãŸã€‚ ã‚ã‚‹ç¨‹åº¦æŠ½è±¡çš„ãªå†…å®¹ãŒæ›¸ã‹ã‚Œã¦ã„ã¾ã™ã®ã§ã€å‚åŠ è€…ã®çš†ã•ã‚“ã®ä¼šç¤¾ã§ã¯ã©ã®ã‚ˆã†ãªå¯¾å¿œã‚’ã—ã¦ã„ã‚‹ã®ã‹ã€ã¨ã„ã†è°è«–ã®æ™‚é–“ã‚‚å°‘ã—ã¨ã‚‰ã›ã¦é ‚ãã¾ã—ãŸã€‚ å¤§ã¾ã‹ãªæµã‚Œã¯ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’è¦‹ã¦ã„ãŸã ãã¨ã—ã¦ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³å†…å®¹ã‚’éŒ²éŸ³ã—ã¦ã„ãŸã®ã§è°è«–ã®å†…å®¹ã‚’ãƒ–ãƒã‚°ã§ã¯ã¾ã¨ã‚ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ è°è«–å†…å®¹ ã‚¹ãƒ©ã‚¤ãƒ‰ã®ä¸ã§ã€Œè°è«–ãƒã‚¤ãƒ³ãƒˆã€
aroma_black 2017/07/12
aws

security
ãƒªãƒ³ã‚¯
BetterTLS
Written by Ian HakenAt Netflix we run a microservices architecture that has hundreds of independent applications running throughout our ecosystem. One of our goals, in the interest of implementing security in depth, is to have end-to-end encrypted, authenticated communication between all of our services wherever possible, regardless of whether or not it travels over the public internet. Most of th
aroma_black 2017/05/17
Chrome58ã‹ã‚‰å…¥ã£ãŸãƒãƒ¼ã‚«ãƒ«ãƒˆãƒ©ã‚¹ãƒˆCAã®å ´åˆã®æŽ¥ç¶šå…ˆæ¤œè¨¼ãŒå¤‰æ›´ã•ã‚Œã¦ãŸç†ç”±ã¯ãŸã¶ã‚“ã“ã‚ŒãŒç›®çš„ãªã‚“ã ã‚ã†ãªã€‚

tls

security
ãƒªãƒ³ã‚¯
OAuth 2.0 å…¨ãƒ•ãƒãƒ¼ã®å›³è§£ã¨å‹•ç”» - Qiita
RFC 6749 (The OAuth 2.0 Authorization Framework) ã§å®šç¾©ã•ã‚Œã¦ã„ã‚‹ 4 ã¤ã®èªå¯ãƒ•ãƒãƒ¼ã€ãŠã‚ˆã³ã€ãƒªãƒ•ãƒ¬ãƒƒã‚·ãƒ¥ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç”¨ã„ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã®å†ç™ºè¡Œã‚’å—ã‘ã‚‹ãƒ•ãƒãƒ¼ã®å›³è§£åŠã³å‹•ç”»ã§ã™ã€‚å‹•ç”»ã¯ YouTube ã¸ã®ãƒªãƒ³ã‚¯ã¨ãªã£ã¦ã„ã¾ã™ã€‚ English version: Diagrams And Movies Of All The OAuth 2.0 Flows è¿½è¨˜ (2019-07-02) èªå¯æ±ºå®šã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«èªå¯ã‚³ãƒ¼ãƒ‰ã‚„ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’æ¸¡ã™æ–¹æ³•ã«ã¤ã„ã¦ã¯ã€åˆ¥è¨˜äº‹ã€ŽOAuth 2.0 ã®èªå¯ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã¨ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã«é–¢ã™ã‚‹èª¬æ˜Žã€ã§è§£èª¬ã—ã¦ã„ã¾ã™ã®ã§ã€ã”å‚ç…§ãã ã•ã„ã€‚ è¿½è¨˜ï¼ˆ2020-03-20ï¼‰ ã“ã®è¨˜äº‹ã®å†…å®¹ã‚’å«ã‚€ã€ç†è€…æœ¬äººã«ã‚ˆã‚‹ã€ŽOAuth & OIDC å…¥é–€ç·¨ã€è§£èª¬å‹•ç”»ã‚’å…¬é–‹ã—ã¾ã—ãŸï¼ 1. èªå¯ã‚³ãƒ¼ãƒ‰ãƒ•ãƒãƒ¼ RF
aroma_black 2017/05/07
oauth

security
ãƒªãƒ³ã‚¯
Let's Encrypt Has Issued Certificates to Over 14,000 PayPal Phishing Sites
How to Fix â€˜ERR_SSL_PROTOCOL_ERRORâ€™ on Google Chrome in Everything Encryption
aroma_black 2017/04/09
é‡‘éŠãŒçµ¡ã‚“ã ã‚Šã™ã‚‹ã‚ˆã†ãªé‡è¦ãªæƒ…å ±ã‚’é€ä¿¡ã™ã‚‹å ´åˆã€ã‚‚ã†EVSSLã¯å¿…é ˆãã‚‰ã„ã«æ€ã£ã¦ãŠã„ãŸæ–¹ãŒã„ã„ã‹ã‚‚ã—ã‚Œãªã„ãªã‚

SSL

security
ãƒªãƒ³ã‚¯
Nikto 2.5 | CIRT.net
aroma_black 2017/03/22
security

tool
ãƒªãƒ³ã‚¯
Docker ä½¿ã†ãªã‚‰çŸ³å·ã•ã‚“ã”ã‚ã‚“ãªã•ã„ã—ã¦ã‚‹å ´åˆã§ã¯ãªã„
Docker ã‚’ Kubernetes ã‚„ Swarm ã§ã‚µãƒ¼ãƒ“ã‚¹ã‚’å®Ÿè¡Œã™ã‚‹å ´åˆã¯ JSON ã‚„ YAML ãªã©ã§äº‹å‰ã«å®šç¾©ã—ãŸã‚‚ã®ã‚’å®Ÿè¡Œã™ã‚‹ã ã‘ãªã®ã§çŸ¥ã£ã¦ã„ã‚‹ã‘ã©ãã‚Œã»ã©è„…å¨ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸãŒ docker ã‚’ä¾¿åˆ©ã‚³ãƒžãƒ³ãƒ‰ã‚„ batch ã¨ã—ã¦è‡ªç”±ã«ä»»æ„ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã—ãŸã„ã¨è¨€ã‚ã‚Œã‚‹ã¨ã¨ãŸã‚“ã« -v /:/rootfs ã¨ã‹ã€--privileged ã•ã‚ŒãŸã‚‰ã©ã†ã—ã‚ˆã†ã¨ã„ã†å£ã«ã¶ã¡å½“ãŸã‚‹ã‚ã‘ã§ã™ã€‚ ã—ã‹ã—ã€å®‰å…¨ã«ä½¿ãˆãŸã‚‰ä¾¿åˆ©ãªã®ã§ãªã‚“ã¨ã‹ãªã‚‰ãªã„ã‹ãªã¨ CentOS 7 ã®å…¬å¼ãƒªãƒã‚¸ãƒˆãƒªã® Docker ãªã‚‰ SELinux ã§ãªã‚“ã¨ã‹ã™ã‚‹æ–¹æ³•ãŒã‚ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ãªã¨èª¿ã¹ã¦ã¿ã¾ã—ãŸã€‚ å…¬å¼ãƒªãƒã‚¸ãƒˆãƒªã® docker ã¯å¤ã„ã‚“ã˜ã‚ƒãªã„ã‹ã¨ç–‘ã£ã¦ã¾ã—ãŸãŒ 1.12.5 ã ã£ãŸã®ã§ã“ã‚Œãªã‚‰æ‚ªããªã„ã€‚ã‚¯ãƒ©ã‚¹ã‚¿ã®æ–¹ã§ã¯ 1.11.1 ä½¿ã£ã¦ã‚‹ã—ã€‚
aroma_black 2017/03/17
rootfsã‚„privilegedã®ã‚³ãƒ³ãƒ†ãƒŠã¯sudoå¿…é ˆã«ã—ã¦sudoersã§ç‰¹å®šã®ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã¤ã‘ãªã„ã‚ˆã†ã«ã™ã‚‹ã®ãŒã‚ˆã„ã‹ã‚‚ã¨ã„ã†è©±

docker

security
ãƒªãƒ³ã‚¯
PHPã®escapeshellcmdã‚’å·¡ã‚‹å†’é™ºã¯mailé–¢æ•°ã‚’çµŒã¦CVE-2016-10033ã«è‡³ã£ãŸ
ã‚¨ã‚°ã‚¼ã‚¯ãƒ†ã‚£ãƒ–ã‚µãƒžãƒª 2011å¹´å§‹ã‚ã«å¾³ä¸¸ãŒescapeshellcmdã®å±é™ºæ€§ã‚’æŒ‡æ‘˜ã—ãŸãŒã€ã“ã®å•é¡Œã¯mailé–¢æ•°ã®additional_parametersçµŒç”±ã§æ”»æ’ƒå¯èƒ½ã§ã‚ã‚‹ã“ã¨ãŒ2013å¹´æœ«ã«æŒ‡æ‘˜ã•ã‚ŒãŸã€‚ãã®å¾Œ2016å¹´æœ«ã«ã€PHPMailerã®è„†å¼±æ€§CVE-2016-10033ã¨ã—ã¦ç¾å®Ÿã®ã‚‚ã®ã¨ãªã£ãŸ çµŒç·¯ 2011/1/1 å¾³ä¸¸ãŒã€ŒPHPã®escapeshellcmdã®å±é™ºæ€§ã€ã‚’æ›¸ã„ã¦ã€ã‚¯ã‚©ãƒ¼ãƒˆæ–‡å—ãŒãƒšã‚¢ã«ãªã£ã¦ã„ã‚‹å ´åˆã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ãªã„ã¨ã„ã†ä»•æ§˜ãŒä½™è¨ˆãªãŠä¸–è©±ã§ã‚ã‚Šã€å±é™ºæ€§ãŒç”Ÿã˜ã¦ã„ã‚‹ã“ã¨ã‚’æŒ‡æ‘˜ 2011/1/7 å¤§åž£ã•ã‚“ãŒãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€Œphpã®escapeshellcmdã®ä½™è¨ˆãªãŠä¸–è©±ã‚’ç„¡ãã™ãƒ‘ãƒƒãƒã€ã«ã¦ä¿®æ£æ¡ˆã‚’æç¤º 2011/10/23 å»£å·ã•ã‚“ãŒã€å¤§åž£ã•ã‚“ã®ãƒ‘ãƒƒãƒæ¡ˆã‚’å°‘ã—ä¿®æ£ã—ã¦bugs.php.netã«ææ¡ˆã€‚ä¿®æ£æ¡ˆã¯å´ä¸‹ã•ã‚Œã€ãƒžãƒ‹ãƒ¥ã‚¢ãƒ«ã‚’ä¿®æ£ã™ã‚‹ã“ã¨ã« 2011/1
aroma_black 2017/01/11
security

php
ãƒªãƒ³ã‚¯
LINEä¹—ã£å–ã‚‰ã‚ŒãŸã®ã§ãã®é®®ã‚„ã‹ãªã‚‹æ‰‹å£ã‚’æ¥ã‚’å¿ã‚“ã§å…¬é–‹ã—ã¾ã—ã‚‡ã† - ã¯ã¦ãªãƒ–ãƒã‚°ã‚’æ¯Žæ—¥æ›¸ã„ã¦ã„ãŸã‚‰10Kgç—©ã›ã¾ã—ãŸï¼
ã©ã†ã‚‚ã€æƒ…å¼±ã§ã™ã€‚ ã„ã‚„ãƒ¼ã€ã‚„ã‚‰ã‚Œã¾ã—ãŸã€‚ å…ˆç¨‹è¦‹äº‹ã«LINEã‚’ä¹—ã£å–ã‚‰ã‚Œã¦ã—ã¾ã„ã¾ã—ãŸã€‚ ä»Šã¾ã§ã¯LINEã§ã€Œä»Šã²ã¾ï¼Ÿã¡ã‚‡ã£ã¨æ‰‹ä¼ã£ã¦ã‚‚ã‚‰ã£ã¦ã„ã„ï¼Ÿã€ã¨ã„ã†ãƒ—ãƒªã‚«ã‚’ãã ã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒæ¥ã‚‹åº¦ã«ã€Œæƒ…ï½—ï½—ï½—å¼±ï½—ï½—ï½—ä¹™ï½—ï½—ï½—ã€ã¨ç¬‘ã£ã¦ã„ãŸã®ã§ã™ãŒã€ä»Šæ—¥ã‹ã‚‰ã¼ãã‚‚ãã¡ã‚‰å´ã§ã™ã€ã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ ä»Šå›žã®ä»¶ã§ã€ã‚„ã¯ã‚Šä¸€ç•ªæ€–ã„ã®ã¯æ©Ÿæ¢°çš„ãªãƒãƒƒã‚ãƒ³ã‚°ã§ãªãã¦å¿ƒã®éš™ã‚’çªã‹ã‚Œã‚‹ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒ»ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ã ãªã¨å®Ÿæ„Ÿã—ã¾ã—ãŸã€‚ é¨™ã•ã‚Œã¡ã‚ƒã£ãŸã‚‰ã‚‚ã†èª¬å¾—åŠ›ã‚ã‚Šã¾ã›ã‚“ãŒã€åƒ•ã¯æ˜”ã‹ã‚‰ãƒãƒƒãƒˆã®ã‚¨ãƒã‚µã‚¤ãƒˆã§é›ãˆãŸçœ¼åŠ›ãŒã‚ã£ã¦ã€ãã†ãã†ãƒãƒƒãƒˆã®ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ãªã©ã«ã¯å¼•ã£ã‹ã‹ã£ãŸã“ã¨ãŒç„¡ã„ã®ã§ã™ãŒã€ãã‚Œã§ã‚‚ã¡ã‚‡ã£ã¨æ°—ãŒç·©ã‚ã°ãƒãƒƒãƒˆã§ã¯æ»ã‚“ã§ã—ã¾ã†ã¨ã„ã†ã‚ˆã„äº‹ä¾‹ã§ã™ã€‚ ã‚ã£ã¡ã‚‡æ¥ãšã‹ã—ã„ã§ã™ãŒã€è‡ªåˆ†ã®æ¥ãŒèª°ã‹ã‚’åŠ©ã‘ã‚‹ã‹ã‚‚ã¨ã„ã†ã“ã¨ã§ã“ã“ã¯ä¸€ç™ºçŠ¶æ³ã‚’å…±æœ‰ã—ã¦ãŠãã¾ã—ã‚‡ã†ã€‚ LINEè©æ¬ºã¯LINEä»¥å¤–ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§æ¥ãŸ åƒ•
aroma_black 2016/12/07
â€œã‚„ã¯ã‚Šä¸€ç•ªæ€–ã„ã®ã¯æ©Ÿæ¢°çš„ãªãƒãƒƒã‚ãƒ³ã‚°ã§ãªãã¦å¿ƒã®éš™ã‚’çªã‹ã‚Œã‚‹ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒ»ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ã ãªã¨å®Ÿæ„Ÿã—ã¾ã—ãŸã€‚â€

security
ãƒªãƒ³ã‚¯
ãƒ–ãƒ©ã‚¦ã‚¶æ‹¡å¼µã®æ¨©é™ã§ã©ã“ã¾ã§æ‚ªã„ã“ã¨ã‚’ã§ãã‚‹ã®ã‹ï¼Ÿã¨ãã®å¯¾ç–ã€ãƒ‡ãƒ¢ã‚ã‚Šã€‘ - Qiita
[2018/07/07 è¿½è¨˜] æœ¬è¨˜äº‹ã§ã¯Chromeæ‹¡å¼µã«ã¤ã„ã¦èª¬æ˜Žã—ã¦ã„ã¾ã™ãŒã€Firefox1ã‚„Edgeã®æ‹¡å¼µæ©Ÿèƒ½ã‚‚ã»ã¼åŒã˜ä»•çµ„ã¿ã§å‹•ã„ã¦ã„ã¾ã™ã€‚ [2023/11/06 è¿½è¨˜] #å‚è€ƒ ãƒšãƒ¼ã‚¸ã‚’è¿½åŠ ã—ã¾ã—ãŸã€‚ Chromeæ‹¡å¼µã€‚ä¾¿åˆ©ãªæ©Ÿèƒ½ã‚’ç°¡å˜ã«è¿½åŠ ã§ãã‚‹ã®ã§ä½¿ã£ã¦ã„ã‚‹äººã‚‚å¤šã„ã¨æ€ã„ã¾ã™ã€‚ ãŸã ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ™‚ã®æ¨©é™ã®æ³¨æ„æ›¸ããŒåˆ†ã‹ã‚Šé›£ã„ã®ã§ç„¡æ¡ä»¶ã«æ‰¿èªï¼ˆè¿½åŠ ï¼‰ã—ã¦ã„ã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã®ã§ã¯ãªã„ã‹ã¨æ€ã‚ã‚Œã¾ã™ã€‚ ãã“ã§ã€æœ¬è¨˜äº‹ã§ã¯Chromeæ‹¡å¼µã®æ¨©é™ã®ç¨®é¡žãƒ»ç¢ºèªæ–¹æ³•ã®ä»–ã€æ‹¡å¼µãŒã©ã“ã¾ã§ï¼ˆæ‚ªã„ã“ã¨ã‚’ï¼‰ã§ãã‚‹ã®ã‹ã¨ãã®å¯¾ç–ã‚’3æ®µéšŽã®æ¨©é™ï¼ˆå±é™ºæ€§ï¼‰ãƒ¬ãƒ™ãƒ«ã”ã¨ã«ç´¹ä»‹ã—ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ä¾¿åˆ©ã ãŒå±é™ºæ€§ã‚‚ã‚ã‚‹Chromeæ‹¡å¼µ Chromeæ‹¡å¼µã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã¨ã€Webãƒšãƒ¼ã‚¸ã‚’èªã‚€ã¨ã„ã†ãƒ–ãƒ©ã‚¦ã‚¶æœ¬æ¥ã®æ©Ÿèƒ½ã ã‘ã§ãªãæ§˜ã€…ãªã“ã¨ãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ä¾‹ãˆã°ã€Webãƒ¡ãƒ¼ãƒ«ã®æ–°ç€é€šçŸ¥ã‚„è¨˜äº‹ãªã©ã®
aroma_black 2016/12/06
chrome

security
ãƒªãƒ³ã‚¯
ãŸã£ãŸ1ãƒã‚¤ãƒˆã®æ›¸ãè¾¼ã¿ãŒå¼•ãèµ·ã“ã™ãƒ«ãƒ¼ãƒˆæ¨©é™ã§ã®å®Ÿè¡Œã®è„†å¼±æ€§ | POSTD
2016å¹´9æœˆ22æ—¥ï¼ˆæœ¨ï¼‰ã€‚ã“ã‚“ãªãƒ¡ãƒ¼ãƒ«ãŒç§ã®ã‚‚ã¨ã«é£›ã³è¾¼ã‚“ã§ãã¾ã—ãŸã€‚ ä»¶åï¼š ares_create_query OOB write c-aresãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆ ã®ãƒ¡ãƒ³ãƒ†ãƒŠã®ã²ã¨ã‚Šã¨ã—ã¦ã€c-aresã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã®æã‚ŒãŒã‚ã‚‹ã¨ã„ã†ãƒ¡ãƒ¼ãƒ«ã‚’å—ã‘å–ã£ãŸã®ã§ã™ã€‚å®Ÿéš›ã€ãã®ã¨ãŠã‚Šã§ã—ãŸã€‚ã“ã®å•é¡Œã‚’çŸ¥ã‚‰ã›ã¦ãã‚ŒãŸã®ã¯ã€ã‹ã¤ã¦ChromeOSã®è„†å¼±æ€§ã‚’Googleã«å ±å‘Šã—ãŸã“ã¨ã‚‚ã‚ã‚‹äººã§ã—ãŸã€‚ ã“ã®c-aresã®ä¸å…·åˆã‚’æ‚ªç”¨ã™ã‚‹ã¨ã€ ChromeOSä¸Šã§ã€rootãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã—ã¦JavaScriptã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹ ã“ã¨ãŒã‚ã‹ã‚Šã¾ã—ãŸã€‚ChromeOSå²ä¸Šæœ€æ‚ªã®è„†å¼±æ€§ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚å ±å‘Šè€…ã«ã¯ã€ç›¸å½“ãªé¡ã®å ±å¥¨é‡‘ãŒè´ˆã‚‰ã‚Œã‚‹ã“ã¨ã§ã—ã‚‡ã†ã€‚ ã“ã®å‹•ãã‚’å®Ÿç¾ã—ãŸã‚Šã€ã©ã†ã‚„ã£ã¦å®Ÿç¾ã™ã‚‹ã®ã‹ã‚’èª¬æ˜Žã—ãŸã‚Šã™ã‚‹ã®ã¯ã¨ã¦ã‚‚é¢å€’ãªä½œæ¥ã ã£ãŸã§ã—ã‚‡ã†ã€‚å ±å‘Šè€…ãŒã“ã‚Œã‚’ç™ºè¦‹ã—ãŸã“ã¨ã€ãã—ã¦ã•ã‚‰ã«æ·±ãæŽ˜ã‚Šä¸‹ã’ã¦ã€å†ç¾å¯
aroma_black 2016/11/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è©•ä¾¡ã¯ã‚ãã¾ã§æŒ‡æ¨™ã§ã—ã‹ãªã„ã¨ã„ã†è©±ã€‚çµå±€äººãŒè©•ä¾¡ã™ã‚‹ã®ã§è©•ä¾¡ã‚‚çµ¶å¯¾ã§ã¯ãªã„ã€‚

security
ãƒªãƒ³ã‚¯
ã€ŒMiraiã€ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰å¾¹åº•è§£å‰–ï¼ãã®ä»•çµ„ã¿ã¨å¯¾ç–ã‚’æŽ¢ã‚‹
Miraiãƒœãƒƒãƒˆãƒãƒƒãƒˆã¨ã¯ Miraiã¯ã€2016å¹´9æœˆ13æ—¥å¤œã€ç±³å›½ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¸ãƒ£ãƒ¼ãƒŠãƒªã‚¹ãƒˆBrian Krebsæ°ã®Webã‚µã‚¤ãƒˆã€ŒKrebs on Securityã€ã«å¯¾ã—ã¦è¡Œã‚ã‚ŒãŸå¤§è¦æ¨¡ãªDDoSæ”»æ’ƒã«ä½¿ç”¨ã•ã‚ŒãŸã¨ã—ã¦è©±é¡Œã«ãªã£ãŸãƒœãƒƒãƒˆãƒãƒƒãƒˆã§ã™ï¼ˆé–¢é€£è¨˜äº‹ï¼‰ã€‚Miraiã¯ä¸»ã«Webã‚«ãƒ¡ãƒ©ã‚„ãƒ«ãƒ¼ã‚¿ãƒ¼ã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ“ãƒ‡ã‚ªãƒ¬ã‚³ãƒ¼ãƒ€ãƒ¼ãªã©ã®IoTãƒ‡ãƒã‚¤ã‚¹ã‚’è¸ã¿å°ã¨ã—ã¦DDoSæ”»æ’ƒã‚’ä»•æŽ›ã‘ã¾ã™ã€‚ å‚è€ƒï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç”¨èªžäº‹å…¸ï¼šDDoSæ”»æ’ƒ æ”»æ’ƒã‚’å—ã‘ãŸå¾Œã«æŠ•ç¨¿ã•ã‚ŒãŸKrebsæ°ã®ãƒ–ãƒã‚°è¨˜äº‹ã«ã‚ˆã‚Œã°ã€åŒã‚µã‚¤ãƒˆã‚’ä¿è·ã—ã¦ã„ãŸAkamaiãŒã€ãƒ”ãƒ¼ã‚¯æ™‚ã«ã¯ãã‚Œã¾ã§ã«çµŒé¨“ã—ãŸæœ€å¤§è¦æ¨¡ã®æ”»æ’ƒã®2å€è¿‘ã„ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚’è¦³æ¸¬ã—ãŸãã†ã§ã™ã€‚ ã¾ãŸã€2016å¹´10æœˆ21æ—¥ã«Twitterã‚„Netflixãªã©ãŒåˆ©ç”¨ã™ã‚‹DNSã‚µãƒ¼ãƒ“ã‚¹ã¸è¡Œã‚ã‚ŒãŸDDoSæ”»æ’ƒã§ã‚‚ã€MiraiãƒœãƒƒãƒˆãƒãƒƒãƒˆãŒåˆ©ç”¨ã•ã‚Œã¦ã„ãŸã®ã§ã¯ãªã„ã‹ã¨æŽ¨å®šã•ã‚Œ
aroma_black 2016/11/09
security
ãƒªãƒ³ã‚¯
Chrome Extensionã®Live HTTP Headersã®èª¿æŸ»(CoolBar.Proå°Žå…¥ ExtensionãŒä½•ã‚’è¡Œã†ã‹ã®èª¿æŸ»)
a.md Chrome Extensionã®Live HTTP Headersã‚’èª¿æŸ»ã—ãŸã€‚Firefoxç”¨ã®ã‚‚ã®ã§ã¯ãªã„ã€‚Firefoxç”¨ã®ã‚‚ã®ã§ã¯ãªã„ã€‚ https://chrome.google.com/webstore/detail/live-http-headers/iaiioopjkcekapmldfgbebdclcnpgnlo 11/7è¿½è¨˜ é¡žä¼¼ or åŒæ§˜ã®æ–¹æ³•ã§é›£èªåŒ–scriptã‚’åŸ‹ã‚è¾¼ã‚“ã§ã„ã‚‹æ‹¡å¼µæ©Ÿèƒ½ãŒå¤§é‡ã«ã‚ã£ãŸãŸã‚ã€Googleã«å ±å‘Šæ¸ˆã¿ã€‚ https://twitter.com/bulkneets/status/795260268221636608 English version: https://translate.google.com/translate?sl=ja&tl=en&js=y&prev=_t&hl=ja&ie=UTF-8&u=https%3A%2F%
aroma_black 2016/11/06
security

chrome
ãƒªãƒ³ã‚¯
HTTP Headers ã¨ã„ã† 5ä¸‡äººãŒä½¿ã£ã¦ã„ã‚‹ Chrome æ‹¡å¼µã®ãƒžãƒ«ã‚¦ã‚§ã‚¢ç–‘æƒ‘ã€‚ã‚»ãƒƒã‚·ãƒ§ãƒ³ç›—ã¾ã‚Œã¦ BTC ã‚‚ç›—ã¾ã‚Œãã†ã«ãªã£ãŸè©±ã€‚ - clock-up-blog
ç–‘æƒ‘ã©ã“ã‚ã‹ 99.99% ãã‚‰ã„é»’ãªè©±ã€‚ ï¼ˆå¾Œè¨˜ï¼šã‚»ãƒƒã‚·ãƒ§ãƒ³ç›—ã¾ã‚ŒãŸã¨æ€ã£ã¦ãŸã‘ã©ã€ã‚ˆãã‚ˆãè€ƒãˆç›´ã—ã¦ã¿ã‚‹ã¨ç”Ÿãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã”ã¨ç›—ã¾ã‚Œã¦ã‚‹å¯èƒ½æ€§ã‚‚ã‚ã‚‹ã—ã‚„ã°ã„ï¼‰ è¿½è¨˜ï¼šç¶šå ± 11æœˆ3æ—¥ ä»Šå›žæŒ‡æ‘˜ã—ãŸ HTTP Headers ä»¥å¤–ã«ã‚‚ã€ã€ŒTab Managerã€ã€ŒGive Me CRXã€ã€ŒLive HTTP Headersã€ç‰ã§åŒæ§˜ï¼ˆï¼Ÿï¼‰ã®å•é¡ŒãŒå ±å‘Šã•ã‚Œã¦ã„ã¾ã™ã€‚ç¬¬ä¸‰è€…ãŒå…ƒã®ä½œè€…ã‹ã‚‰ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢æ¨©åˆ©ã‚’è²·ã„å–ã£ã¦æ‚ªç”¨ã™ã‚‹ã€ã¨ã„ã†ã‚±ãƒ¼ã‚¹ãŒå‰²ã¨ã‚ã‚‹æ¨¡æ§˜ï¼ˆï¼Ÿï¼‰ã€‚çš†ã•ã¾æƒ…å ±ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ 11æœˆ4æ—¥ Zaif ã«ã¤ã„ã¦ã¯ã€ã€Œä¸æ£ãª Chrome æ‹¡å¼µã€ã¨ã€Œã‚¹ã‚¯ãƒªãƒ—ãƒˆã‹ã‚‰ä¿è·ã•ã‚Œã¦ã„ãªã‹ã£ãŸã‚¯ãƒƒã‚ãƒ¼ã€ã®ã‚³ãƒ³ãƒœã«ã‚ˆã‚Šã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒç›—ã¾ã‚Œã¦ã„ãŸå¯èƒ½æ€§ã‚ã‚Šã€‚ Zaif ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³æƒ…å ±ãŒç›—ã¾ã‚ŒãŸåŽŸå› ã®ã²ã¨ã¤ã«ã¤ã„ã¦ã€‚JavaScript ã‹ã‚‰ã‚¯ãƒƒã‚ãƒ¼å€¤ã‚’å–å¾—ã•ã›ãªã„æ–¹æ³•ã€‚ - clock-up-blog
aroma_black 2016/11/04
security
ãƒªãƒ³ã‚¯
Red Hat Customer Portal - Product Security Center
aroma_black 2016/10/26
Redhatè£½å“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã€‚CVEã‚„RHSAã®æ¤œç´¢ã‚‚å¯èƒ½ã€‚

redhat

security
ãƒªãƒ³ã‚¯
ã€ãƒ¬ãƒãƒ¼ãƒˆã€‘Developers.IO 2016 in Fukuokaã§ã€ŒAWSã®ã‚µãƒ¼ãƒ“ã‚¹ã ã‘ã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚’è€ƒãˆã¦ã¿ã‚‹ã€ã‚’è©±ã—ã¦ãã¾ã—ãŸã€‚ | DevelopersIO
æ£®æ°¸ã§ã™ã€‚ åœ°å…ƒç¦å²¡ã§ç™»å£‡ã®æ©Ÿä¼šãŒã‚ã‚‹ã¨ã„ã†ã“ã¨ã§æ‰‹ã‚’ä¸Šã’ã¦ç™ºè¡¨ã•ã›ã¦ã‚‚ã‚‰ã„ã¾ã—ãŸï¼ ãƒ—ãƒ¬ã‚¼ãƒ³è³‡æ–™ è£œè¶³ åˆã®ç¦å²¡ã‚¤ãƒ™ãƒ³ãƒˆã¨ã„ã†ã“ã¨ã§ã‚ã¾ã‚Šæ·±å…¥ã‚Šã—ãªã„ã§èª¬æ˜Žã™ã‚‹ã¨ã„ã†ã“ã¨ã‚’å¿ƒãŒã‘ã¾ã—ãŸã€‚ ã‚¬ãƒå‹¢ã®äººã‹ã‚‰ã™ã‚‹ã¨ç‰©è¶³ã‚Šãªã„ã‹ã¨æ€ã„ã¾ã™ãŒã”äº†æ‰¿ä¸‹ã•ã„ã€‚ ç¦å²¡ã‚ªãƒ•ã‚£ã‚¹ã¤ãã‚Šã¾ã™ã‚ˆï¼ï¼ çµ¶è³›Hiringä¸ã§ã™ã®ã§èˆˆå‘³ã®ã‚ã‚‹æ–¹ã¯ãŠå£°æŽ›ã‘ä¸‹ã•ã„ï¼ ç”³ã—è¾¼ã‚“ã˜ã‚ƒã†ï¼ã¨ã„ã†ã‹ãŸã¯ã“ã¡ã‚‰ã‹ã‚‰ã©ã†ãžï¼ï¼
aroma_black 2016/10/22
aws

security
ãƒªãƒ³ã‚¯
Web over HTTPS
Web over HTTPS DevFest Tokyo 2016 #devfest16 2016/10/0
aroma_black 2016/10/11
security

tls

ssl
ãƒªãƒ³ã‚¯
1 2 3 4 æ¬¡ã®ãƒšãƒ¼ã‚¸