[B! Incident] atsushifxã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

atsushifx id:atsushifx

Incidentã«é–¢ã™ã‚‹atsushifxã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (15)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

â€œä½¿ã„ã‚„ã™ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰â€ãŒã€å¤§è¦æ¨¡çµ„ç¹”ã®ã‚·ã‚¹ãƒ†ãƒ ã‚’ã¤ã¶ã™â€•â€•ã€Œææ€–ã®å®Ÿè©±ã€ã¯ãªãœèµ·ã“ã£ãŸã®ã‹
ã‚ãªãŸãŒã€Œãã‚“ãªã“ã¨ã€ã‚‚ã†çŸ¥ã£ã¦ã‚‹ã‚ˆï¼ã€ã¨æ€ã†ã‚ˆã†ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çŸ¥è˜ã‚’ã€ã¾ã çŸ¥ã‚‰ãªã„ã‹ã‚‚ã—ã‚Œãªã„äººãŸã¡ã«å‘ã‘ã¦ä½•åº¦ã§ã‚‚ä¼ãˆã‚‹â€•â€•ã“ã‚Œã€ä¸€è¦‹ãƒ ãƒ€ã«æ€ãˆã¾ã›ã‚“ã‹ï¼Ÿ ã§ã‚‚ã€å®Ÿã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‘ä¸Šã«ã¨ã£ã¦éžå¸¸ã«é‡è¦ãªãƒã‚¤ãƒ³ãƒˆã¯ã€Œçš†ã®â€œçŸ¥ã‚‰ãªã‹ã£ãŸï¼â€ã‚’ã©ã‚Œã ã‘æ¸›ã‚‰ã›ã‚‹ã‹ã€ã ã¨ã€ç§ã¯è€ƒãˆã¦ã„ã¾ã™ã€‚ãªãœãªã‚‰ã€å¤šãã®è¢«å®³è€…ã‚’å‡ºã—ãŸæƒ…å ±æ¼ãˆã„äº‹ä»¶ã®ä¸€éƒ¨ã¯ã€åŸºæœ¬çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çŸ¥è˜ãŒâ€œçš†ã«â€ä¼ã‚ã£ã¦ã•ãˆã„ã‚Œã°ã€æœ¬æ¥é˜²ã’ãŸã¯ãšã®ã‚‚ã®ã ã‹ã‚‰ã€‚ ä»Šå›žã€çš†ã•ã‚“ã«ç´¹ä»‹ã™ã‚‹ã®ã¯ã€2018å¹´7æœˆã«å…¬é–‹ã•ã‚ŒãŸã€Œå ±å‘Šæ›¸ã€ã§ã™ã€‚ã“ã‚Œã¯ã€ç”£æ¥æŠ€è¡“ç·åˆç ”ç©¶æ‰€ï¼ˆç”£ç·ç ”ï¼‰ãŒå¤–éƒ¨ã‹ã‚‰ã®ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’â€œè¨±ã—ã¦ã—ã¾ã£ãŸâ€äº‹ä»¶ã®è¢«å®³çŠ¶æ³ã¨åŽŸå› ã‚’æ•´ç†ã—ãŸã€å¤§å¤‰æœ‰ç”¨ãªè³‡æ–™ã§ã™ã€‚ ï¼ˆå‚è€ƒï¼‰ ç”£ç·ç ”ã«å¤–éƒ¨ã‹ã‚‰ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã€å€‹äººæƒ…å ±æ¼ãˆã„ã®æã‚Œï¼ˆITmedia NEWSï¼‰ ç”£ç·ç ”ã‚’è¥²ã£ãŸã®ã¯ã€Œãƒžãƒ«ã‚¦ã‚§ã‚¢ã€ã§ã¯ãªã‹ã£ãŸ ä¸€ä½“ä½•ãŒèµ·ã“ã£ãŸã®ã§ã—ã‚‡ã†ã‹ï¼Ÿã€€ç°¡å˜
atsushifx 2018/08/02
äºŒæ®µéšŽèªè¨¼ï¼‹ç‰©ç†ã‚ãƒ¼ãŒä¸€ç•ªã‚‰ã—ã„ å‚è€ƒ https://www.gizmodo.jp/2018/08/google-employees-secret-to-never-getting-phished-is-using-physical-security-keys.html

ITMedia

security

incident
ãƒªãƒ³ã‚¯
ã‚·ã‚¹ãƒ†ãƒ ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ãƒ„ãƒ¼ãƒ«ã€ŒCCleanerã€ãŒæ”¹ç«„ã®è¢«å®³ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã‚’å¤–éƒ¨é€ä¿¡ï¼Windowså‘ã‘32bitç‰ˆã€ŒCCleanerã€v5.33ã«ãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒæ··å…¥ã€‚227ä¸‡äººã«å½±éŸ¿
atsushifx 2017/09/19
ã“ã†ãªã‚‹ã¨ã€ã‚¢ãƒ—ãƒªã¨ã‚µãƒ¼ãƒé–“ã®é€šä¿¡è‡ªä½“ã‚’ãã£ã¡ã‚Šã¨åˆ¶é™ã™ã‚‹å¿…è¦ãŒå‡ºã¦ããã†

çª“ã®æœ

Incident

CCleaner
ãƒªãƒ³ã‚¯
ãƒ“ã‚¸ãƒã‚¹ç”¨ã‚½ãƒ•ãƒˆã®æ¬ é™¥çªãã‚µã‚¤ãƒãƒ¼æ”»æ’ƒç›¸æ¬¡ã | NHKãƒ‹ãƒ¥ãƒ¼ã‚¹
å›½å†…ã®ï¼‘ä¸‡ä½™ã‚Šã®ä¼æ¥ãªã©ã«æŽ¡ç”¨ã•ã‚Œã¦ã„ã‚‹ãƒ“ã‚¸ãƒã‚¹ç”¨ã‚½ãƒ•ãƒˆã®æ¬ é™¥ã‚’æ‚ªç”¨ã—ã€ç‰¹å®šã®ä¼æ¥ã‚’ç‹™ã£ã¦æ©Ÿå¯†æƒ…å ±ã‚’ç›—ã¿å‡ºã™ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒãŒç›¸æ¬¡ã„ã§ã„ã‚‹ã“ã¨ãŒæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ä¼šç¤¾ã®èª¿æŸ»ã§ã‚ã‹ã‚Šã¾ã—ãŸã€‚æ¬ é™¥ã‚’ä¿®æ£ã™ã‚‹ã‚½ãƒ•ãƒˆã‚‚é…å¸ƒã•ã‚Œã¦ã„ã¾ã™ãŒã€ä»Šã‚‚æ”»æ’ƒã¯ç¶šã„ã¦ã„ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ ã“ã®ã‚½ãƒ•ãƒˆã¯ã€çµ„ç¹”å†…ã®ãƒ‘ã‚½ã‚³ãƒ³ã®ä½¿ç”¨çŠ¶æ³ã‚’ç›£è¦–ã™ã‚‹ã‚‚ã®ã§ã€ä¼šç¤¾å´ã®èª¬æ˜Žã§ã¯å›½å†…ã®ï¼‘ä¸‡ä½™ã‚Šã®ä¼æ¥ã‚„è‡ªæ²»ä½“ãªã©ã§æŽ¡ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ã¨ã“ã‚ãŒã€åŽ»å¹´ï¼–æœˆä»¥é™ã€ã“ã®ã‚½ãƒ•ãƒˆã®æ¬ é™¥ã‚’æ‚ªç”¨ã—ã¦ã‚·ã‚¹ãƒ†ãƒ ã«ä¾µå…¥ã™ã‚‹ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒãŒç›¸æ¬¡ã„ã§ã„ã‚‹ã“ã¨ãŒæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ä¼šç¤¾ã®èª¿æŸ»ã§ã‚ã‹ã‚Šã¾ã—ãŸã€‚ãã‚Œã«ã‚ˆã‚Šã¾ã™ã¨ã€é‡è¦ã‚¤ãƒ³ãƒ•ãƒ©ã®é–¢é€£ãƒ¡ãƒ¼ã‚«ãƒ¼ãªã©è¤‡æ•°ã®ä¼æ¥ãŒç¹°ã‚Šè¿”ã—ä¾µå…¥ã•ã‚Œã€é–‹ç™ºä¸ã®è£½å“ã®æƒ…å ±ã‚„ä¼šè°ã®è°äº‹éŒ²ã€ãƒ¡ãƒ¼ãƒ«ãªã©ãŒç›—ã¿å‡ºã•ã‚ŒãŸã¨ã„ã†ã“ã¨ã§ã™ã€‚ã‚½ãƒ•ãƒˆã‚’é–‹ç™ºã—ãŸä¼šç¤¾ã§ã¯åŽ»å¹´ï¼‘ï¼’æœˆã«æ¬ é™¥ã‚’å…¬è¡¨ã—ã¦ä¿®æ£ç”¨ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’é…å¸ƒã—ã€æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ã®å°‚é–€æ©Ÿé–¢ãªã©ã‚‚æ³¨
atsushifx 2017/04/11
Skyã£ã¦èžã„ãŸã“ã¨ã‚ã‚‹ãªã¨ãŠã‚‚ã£ãŸã‚‰ã€ã“ã‚Œã ã£ãŸã€‚ https://togetter.com/li/831672

NHK

è„†å¼±æ€§

Incident

SKY

ç§˜æ–‡
ãƒªãƒ³ã‚¯
ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼æ¥è€…ã€ã€Œrm -rf /ã€ã§èª¤ã£ã¦å…¨ã‚µãƒ¼ãƒãƒ¼ã®ãƒ‡ãƒ¼ã‚¿ã‚’å‰Šé™¤ - BusinessNewsline
ç±³é›‡ç”¨çµ±è¨ˆã®ç™ºè¡¨å¾Œã«ã€ä¸€æ’ƒã§ãƒ‰ãƒ«å††ãŒ40PIPï½ž100PIPSå‹•ãã“ã¨ãŒå¤šã„ã®ã§ã€ä¸€æ°—ã«æ•°ä¸‡å††ï½žæ•°åä¸‡å††ã®çˆ†ç›Šã‚’å¾—ãŸã„FXãƒˆãƒ¬ãƒ¼ãƒ€ãƒ¼ãŒç±³é›‡ç”¨çµ±è¨ˆå‰ã«ã€ãƒ‰ãƒ«å††ã®ãƒã‚¸ã‚·ãƒ§ãƒ³ã‚’ã¨ã£ã¦ã„ã¾ã™ã€‚ã“ã®ç±³é›‡ç”¨çµ±è¨ˆã®çµæžœã‚’äºˆæ¸¬ã™ã‚‹ã®ã¯ã€ã¨ã¦ã‚‚é›£æ˜“åº¦ãŒé«˜ã„ãŸã‚ã€ç±³é›‡ç”¨çµ±è¨ˆå‰ã«ãƒã‚¸ã‚·ãƒ§ãƒ³ã‚’å–ã‚‹ã“ã¨ã¯ã‚®ãƒ£ãƒ³ãƒ–ãƒ«ã ã¨è¨€ã‚ã‚Œã¦ã„ã‚‹ã®ã§ã€ãŠé‡‘ã‚’çµ¶å¯¾ã«ã†ã—ãªã„ãŸããªã„FXãƒˆãƒ¬ãƒ¼ãƒ€ãƒ¼ã¯ç±³é›‡ç”¨çµ±è¨ˆå‰ã«ãƒã‚¸ã‚·ãƒ§ãƒ³ã‚’å–ã‚‹ã“ã¨ã‚’ã—ãªã„ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†ã€‚ãã†ã¯ã„ã£ã¦ã‚‚ã€ç±³é›‡ç”¨çµ±è¨ˆã®é…åŠ›ã«è² ã‘ã¦ã—ã¾ã„ã€ç±³é›‡ç”¨çµ±è¨ˆå‰å¾Œã«ãƒã‚¸ã‚·ãƒ§ãƒ³ã‚’ã¨ã£ã¦ã—ã¾ã†ã‚“ã§ã™ã‚ˆãã€‚ä»Šå›žã¯ã€ç±³é›‡ç”¨çµ±è¨ˆã«ã¤ã„ã¦è©³ã—ãæ›¸ã„ã¦ã„ããœã€‚ ç±³é›‡ç”¨çµ±è¨ˆã«å‚åŠ ã™ã‚‹ã“ã¨ã®åˆ©ç‚¹ã€‚ ç±³é›‡ç”¨çµ±è¨ˆã®äºˆæƒ³ã‚’çš„ä¸ã•ã›ã‚Œã°ã€è‡ªåˆ†ã®äºˆæƒ³ã‚’å¤§ããä¸Šå›žã‚‹åˆ©ç›Šã‚’å¾—ã‚‹ã“ã¨ãŒã§ãã‚‹ ç±³é›‡ç”¨çµ±è¨ˆã®äºˆæƒ³ã‚’çš„ä¸ã•ã›ã‚Œã°ã€è‡ªåˆ†ã®äºˆæƒ³ã‚’å¤§ããä¸Šå›žã‚‹åˆ©ç›Šã‚’å¾—ã‚‹ã“ã¨ãŒã§ãã‚‹ãŸã‚ã€ä¸€æ—¥ã§ä¼šç¤¾å“¡ã®æ•°å€ã‚‚ã®ãŠé‡‘ã‚’ç¨¼ãŽãŸã„äºº
atsushifx 2016/04/16
æµ·å¤–ã ã£ãŸã®ã‹ã€‚ã¨ã‚Šã‚ãˆãš https://ja.wikipedia.org/wiki/%E3%83%95%E3%82%A1%E3%83%BC%E3%82%B9%E3%83%88%E3%82%B5%E3%83%BC%E3%83%90

Incident

Linux

ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆ

ã‚µãƒ¼ãƒç®¡ç†
ãƒªãƒ³ã‚¯
ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã€
ã€Œä¸æ£ãªå…¥åŠ›ã«å¯¾ã—ã¦è„†å¼±æ€§ã‚’ç™ºç”Ÿã•ã›ãªã„ã‚ˆã†ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¨ã—ã¦ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¡Œã†ã€ã€‚ã‚¢ãƒ›ã‹ã€‚ãƒ—ãƒã‚°ãƒ©ãƒžãªã‚‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¨ã‹æ°—ã«ã™ã‚‹ãªã€‚ã„ã‚„ã€æ°—ã«ã™ã‚‹ãªã¨ã„ã†ã®ã¯è¨€ã„éŽãŽã ã‘ã‚Œã©ã€ã»ã¨ã‚“ã©ã®å ´åˆã«ãŠã„ã¦ã‚ãªãŸã®æ›¸ãã‚³ãƒ¼ãƒ‰ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®å¿…è¦æ€§ã¯ãªã„ã€‚ æ”»æ’ƒè€…ã®ç´°å·¥ã—ãŸå…¥åŠ›ã«ã‚ˆã£ã¦SQL/HTML/JavaScriptãŒå£Šã‚Œã‚‹ã¨ã‹ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ãŒç™ºç”Ÿã™ã‚‹ã¨ã‹ã€ãã†ã„ã£ãŸè„†å¼±æ€§ã¨å‘¼ã°ã‚Œã‚‹ã»ã¨ã‚“ã©ã®ã‚‚ã®ã¯ãŸã ã®ãƒã‚°ã ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã£ã¦ã„ã†ã®ã¯ã‚³ãƒ¼ãƒ‰ã¨ã¯åˆ‡ã‚Šé›¢ã•ã‚ŒãŸé ˜åŸŸã§è¡Œã†DEPã ã£ãŸã‚ŠASLRã ã£ãŸã‚ŠX-Frame-Optionsã ã£ãŸã‚ŠCSPã ã£ãŸã‚Šiframe sandboxã ã£ãŸã‚Šã€ãã†ã„ã†ã‚‚ã®ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã ã€‚ã‚³ãƒ¼ãƒ‰ä¸Šã§æ›¸ãã®ã¯ã€Œã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã—ã¦æ£ã—ãå‹•ä½œã™ã‚‹ãŸã‚ã®å‡¦ç†ã€ã ã‘ã ã€‚ ã‚‚ã¡ã‚ã‚“ä¾‹å¤–ã‚‚ã‚ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã‘ã©ã€ãã‚Œã¯ã‚ãã¾ã§ã‚‚ä¾‹å¤–ã ã€‚æ—¥å¸¸çš„ã«æ›¸ã
atsushifx 2015/02/05
ç…½ã£ã¦ã„ã‚‹ã‘ã©ã€ã‚ˆã†ã™ã‚‹ã«ã¾ãšã¯çœŸã£å½“ã«å‹•ãã‚³ãƒ¼ãƒ‰ã‚’æ›¸ã‘ã€‚ãã®ãŸã‚ã«ã¯ãƒ†ã‚¹ãƒˆã‚’ã—ã‚ã£ã¦ã ã‘ã®è©±ã€‚ã¾ãšã¯çœŸã£å½“ã«å‹•ããƒ—ãƒã‚°ãƒ©ãƒ ã‚’æ›¸ãã“ã¨ãŒå®‰å…¨ãªãƒ—ãƒã‚°ãƒ©ãƒ ã‚’æ›¸ãç¬¬ä¸€æ©

å¢—ç”°

ãƒã‚¿

Programming

Test

Bug

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

Incident
ãƒªãƒ³ã‚¯
GHOST è„†å¼±æ€§ã¯å¦‚ä½•æ§˜ã«ä½¿ã†ã®ã‹ | Webã‚·ã‚¹ãƒ†ãƒ é–‹ç™ºï¼æ•™è‚²ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚¿ã‚¤ãƒ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ¡ãƒ‡ã‚£ã‚¢
å…ˆæ—¥ GHOST ã¨å‘¼ã°ã‚Œã‚‹ glibc ã®è„†å¼±æ€§ãŒç™ºè¡¨ã•ã‚ŒãŸã€‚ãªã‚“ã§ã‚‚ã€ã€Œãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€ã‚‰ã—ã„ã§ã¯ãªã„ã‹ã€‚ã—ã‹ã‚‚æ§˜ã€…ãªãƒ—ãƒã‚°ãƒ©ãƒ ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªéƒ¨åˆ†ã®å•é¡Œã¨ã‚ã£ã¦ã€å½±éŸ¿ç¯„å›²ãŒã¨ã¦ã‚‚åºƒã„ã€‚ãªã‹ãªã‹åŽ„ä»‹ãªã“ã¨ã§ã‚ã‚‹ã€‚ ã¯ã¦ã€ã—ã‹ã—ä¸€ä½“å…¨ä½“ã©ã†ã‚„ã£ã¦ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ã‚ˆã†ã¨ã„ã†ã®ã ã‚ã†ï¼Ÿ è©±ã‚’èžãã«ã€ãŸã‹ãŒæ•°ãƒã‚¤ãƒˆã®æƒ…å ±ã‚’ç¯„å›²å¤–ã®ãƒ¡ãƒ¢ãƒªã«æ›¸ãè¾¼ã‚ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã ã‘ã ã¨ã„ã†ã€‚å®Ÿéš›ãã‚Œã ã‘ã®ã“ã¨ã§ã‚µãƒ¼ãƒãƒ¼ã®ä¹—ã£å–ã‚Šãªã©ã§ãã‚‹ã‚‚ã®ãªã®ã ã‚ã†ã‹ã€‚ãã‚“ãªã‚ã‘ã§ã€ãã®ç–‘å•ã«ç”ãˆã‚‹ã¹ãã€æœ¬è¨˜äº‹ã§ã¯ä»¥ä¸‹ã® URL ã§è§£èª¬ã•ã‚Œã¦ã„ã‚‹å®Ÿéš›ã®æ”»æ’ƒæ–¹æ³•ã‚’è‹¥å¹²ç«¯æŠ˜ã£ã¦ç´¹ä»‹ã—ã¦ã¿ã‚ˆã†ã¨æ€ã†ã€‚ http://www.openwall.com/lists/oss-security/2015/01/27/9 ãªãŠã€æœ¬è¨˜äº‹ã¯ã“ã®è„†å¼±æ€§ãã®ã‚‚ã®ã«å¯¾ã™ã‚‹ç·Šæ€¥åº¦ãªã©ã«ã¤ã„ã¦è¨€
atsushifx 2015/01/31
GHOSTè„†å¼±æ€§ã‚’ä¾‹ã«ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã‹ã‚‰ã©ã†ã‚„ã£ã¦ã‚µãƒ¼ãƒã‚’æ”»æ’ƒã™ã‚‹ã‹ã®è§£èª¬ã€‚ã“ã†ã„ã£ãŸã“ã¨ãŒã‚ã‚‹ã‹ã‚‰ä¸æ–ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã‚„ç›£è¦–ãŒé‡è¦ã«ãªã‚‹

TechBlog

Incident

è„†å¼±æ€§

glibc

GHOSTè„†å¼±æ€§

Buffer Overflow
ãƒªãƒ³ã‚¯
ï¼ˆç·Šæ€¥ï¼‰è¤‡æ•°ã®DNSã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã«ãŠã‘ã‚‹è„†å¼±æ€§ï¼ˆã‚·ã‚¹ãƒ†ãƒ è³‡æºã®éŽåº¦ãªæ¶ˆè²»ï¼‰ã«ã¤ã„ã¦ï¼ˆ2014å¹´12æœˆ25æ—¥æ›´æ–°ï¼‰
--------------------------------------------------------------------- â– ï¼ˆç·Šæ€¥ï¼‰è¤‡æ•°ã®DNSã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã«ãŠã‘ã‚‹è„†å¼±æ€§ï¼ˆã‚·ã‚¹ãƒ†ãƒ è³‡æºã®éŽåº¦ãªæ¶ˆè²»ï¼‰ ã«ã¤ã„ã¦ï¼ˆ2014å¹´12æœˆ9æ—¥å…¬é–‹ï¼‰ - BIND 9ã§ã¯æ¨©å¨DNSã‚µãƒ¼ãƒãƒ¼ã«ã‚‚é™å®šçš„ã«å½±éŸ¿ã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã‚’å¼·ãæŽ¨å¥¨ - æ ªå¼ä¼šç¤¾æ—¥æœ¬ãƒ¬ã‚¸ã‚¹ãƒˆãƒªã‚µãƒ¼ãƒ“ã‚¹ï¼ˆJPRSï¼‰ åˆç‰ˆä½œæˆ 2014/12/09ï¼ˆTueï¼‰ æœ€çµ‚æ›´æ–° 2014/12/25ï¼ˆThuï¼‰ ï¼ˆç±³å›½The CERT Divisionã®æ³¨æ„å–šèµ·ãƒ»Vendor Informationã¸ã®ãƒªãƒ³ã‚¯ã‚’è¿½åŠ ï¼‰ --------------------------------------------------------------------- â–¼æ¦‚è¦ BIND 9ãƒ»Unboundãƒ»PowerDNS Recursorã‚’å«ã‚€è¤‡
atsushifx 2014/12/09
unboundã‚‚ã‹ã€‚DNSã®ãƒ„ãƒªãƒ¼æ§‹é€ ã«ã‚ˆã‚‹å§”ä»»è‡ªä½“ãŒã‚‚ã†é™ç•Œã¨ã„ã†æ„Ÿã˜ã€‚

Security

Incident

DNS

BIND

DNSã‚µãƒ¼ãƒ

unbound
ãƒªãƒ³ã‚¯
å¼Šç¤¾ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸æ”¹ã–ã‚“ã«é–¢ã™ã‚‹ãŠè©«ã³ã¨ã”å ±å‘Š | gihyo.jp
å¼Šç¤¾ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã«ãŠã„ã¦ã€2014å¹´12æœˆ6æ—¥11æ™‚ï½ž14æ™‚ã®ã‚ã„ã ã€ç¬¬ä¸‰è€…ã‹ã‚‰ã®ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚Šã‚µã‚¤ãƒˆãŒæ”¹ã–ã‚“ã•ã‚Œã¦ã„ãŸäº‹ãŒåˆ¤æ˜Žã„ãŸã—ã¾ã—ãŸã€‚ã”åˆ©ç”¨é ‚ã„ã¦ãŠã‚Šã¾ã™ãƒ¦ãƒ¼ã‚¶ã®çš†ã•ã¾ã«ãŠã‹ã‚Œã¾ã—ã¦ã¯ã”è¿·æƒ‘ã‚’ãŠæŽ›ã‘ã„ãŸã—ã¾ã—ã¦ã€æ·±ããŠè©«ã³ç”³ã—ä¸Šã’ã¾ã™ã€‚ ãªãŠã€ç¾åœ¨ã¯è¢«å®³ã‚’å—ã‘ãŸã‚µãƒ¼ãƒã¯å¾©æ—§ä½œæ¥ã‚’å®Ÿæ–½æ¸ˆã¿ã§ã™ã€‚ã”åˆ©ç”¨ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®çš†ã•ã¾ã®å€‹äººæƒ…å ±æµå‡ºç‰ã¯ã€ç¾åœ¨ã®ã¨ã“ã‚ç¢ºèªã•ã‚Œã¦ãŠã‚Šã¾ã›ã‚“ã€‚ è¢«å®³å¯¾è±¡ã‚µã‚¤ãƒˆï¼ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ URLï¼šhttp://gihyo.jp æ”¹ã–ã‚“å†…å®¹ã¨ãã®å½±éŸ¿ ã‚µãƒ¼ãƒã®ä¸èº«ã‚’å…¥ã‚Œæ›¿ãˆã‚‰ã‚Œã€å¤–éƒ¨ã®ã‚µã‚¤ãƒˆã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã‚Œã‚‹ã‚ˆã†ã«è¨å®šã•ã‚Œã¦ã„ãŸã€‚ ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã‚Œã¦ã„ãŸã‚µã‚¤ãƒˆï¼ˆã‚¢ã‚¯ã‚»ã‚¹ã—ãªã„ã‚ˆã†ã”æ³¨æ„ãã ã•ã„â ï¼‰â www.koushin-lawfirm.net live.livelistingreport.com ç¾åœ¨æŠŠæ¡ã—ã¦ã„ã‚‹æ”¹ã–ã‚“ã•ã‚Œã¦ã„ãŸå¯èƒ½æ€§ãŒã‚ã‚‹æœŸé–“ 2014å¹´12æœˆ6æ—¥
atsushifx 2014/12/08
åŒä¸€ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã‚µã‚¤ãƒˆã¨ã„ã†ã®ãŒã‚ãƒ¼ã‹ãªã€‚VPSã‚„ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒãªã‚‰åŒä¸€ãƒŽãƒ¼ãƒ‰ã‚‚ã‚ã‚Šã†ã‚‹ã—ã€ã•ãã‚‰ã‚„AMAZON AWSã¨ã„ã£ãŸã‚µãƒ¼ãƒ“ã‚¹æä¾›å´ã§ã®ç›£è¦–ã‚·ã‚¹ãƒ†ãƒ ã®å¼·åŒ–ãŒå¿…è¦ã ã‚ã†

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Incident

Security

gihyo.jp

æŠ€è¡“è©•è«–ç¤¾
ãƒªãƒ³ã‚¯
ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ã‚’è¨ç½®ã—ãŸä¸€éƒ¨ã‚µã‚¤ãƒˆã«å¯¾ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦å‘Šã«é–¢ã™ã‚‹èª¿æŸ»ã®çµŒéŽã‚’å ±å‘Šã—ã¾ã™ - ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯é–‹ç™ºãƒ–ãƒã‚°
ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ã‚’è¨ç½®ã—ãŸã‚µã‚¤ãƒˆã®ä¸€éƒ¨ã«å¯¾ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®è¦å‘Šã«ã¤ã„ã¦ã€10æœˆ18æ—¥ã«æœ¬ãƒ–ãƒã‚°ã§ãŠçŸ¥ã‚‰ã›ã—ã¾ã—ãŸã€‚ãã®å¾Œã®çµŒéŽã«ã¤ã„ã¦å ±å‘Šã„ãŸã—ã¾ã™ã€‚ ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ã‚’è¨ç½®ã—ãŸã‚µã‚¤ãƒˆã®ä¸€éƒ¨ã«å¯¾ã—ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ãŒåŽŸå› ã¨ã•ã‚Œã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®è¦å‘ŠãŒå ±å‘Šã•ã‚ŒãŸä»¶ã«é–¢ã—ã¦ã€ã¯ã¦ãªã§ã¯10æœˆ15æ—¥ã‚ˆã‚Šèª¿æŸ»ã‚’é–‹å§‹ã—ã€ã“ã‚Œã¾ã§ã«ä»¥ä¸‹ã®4ç‚¹ã‚’ç¢ºèªã—ã¦ã„ã¾ã™ã€‚ ã¯ã¦ãªã®ã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã™ã‚‹æ”»æ’ƒè€…ã®ä¾µå…¥ã¯ãªã„ ã¯ã¦ãªã¨ãƒ¬ã‚¸ã‚¹ãƒˆãƒ©ã®é–“ã®èªè¨¼æƒ…å ±ï¼ˆã‚¢ã‚«ã‚¦ãƒ³ãƒˆï¼‰ã¯æ‚ªç”¨ã•ã‚Œã¦ã„ãªã„ æ¨©å¨DNSã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã™ã‚‹æ”»æ’ƒã§ã¯ãªã„ ã¯ã¦ãªãŒå¥‘ç´„ã™ã‚‹CDNã‚µãƒ¼ãƒ“ã‚¹ã«å¯¾ã™ã‚‹æ”»æ’ƒã§ã¯ãªã„ ã¾ãŸã€ä¸Šè¨˜ã®å•é¡Œã«ã¤ã„ã¦ã€10æœˆ20æ—¥ã«ä¸€èˆ¬ç¤¾å›£æ³•äººJPCERTã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆJPCERT/CCï¼‰ã‚ˆã‚Šãƒ‰ãƒ¡ã‚¤ãƒ³ç™»éŒ²æƒ…å ±ã®å¤‰æ›´ã«é–¢ã™ã‚‹æƒ…å ±ãŒå¯„ã›ã‚‰ã‚Œã€ã¯ã¦ãªã§ã‚‚JPCERT/CCãªã©é–¢ä¿‚æ©Ÿé–¢ã«å”åŠ›ã—ã¦èª¿æŸ»ã‚’
atsushifx 2014/11/06
ã¯ã¦ãªè‡ªä½“ã‚„é–¢é€£ã™ã‚‹ã‚µãƒ¼ãƒã¯æ”»æ’ƒã‚’å—ã‘ã¦ã„ãªã„ã¨ã€‚DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã‚„ä¸€éƒ¨ã®ãƒªã‚¾ãƒ«ãƒãŒæ±šæŸ“ã•ã‚ŒãŸã®ã‹ã‚‚ã€‚

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

security

Incident

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

DNSãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°

ãƒªã‚¾ãƒ«ãƒ
ãƒªãƒ³ã‚¯
è¤‡æ•°ã®å›½å†…ã‚µã‚¤ãƒˆãŒãƒ‰ãƒ¡ã‚¤ãƒ³åãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã•ã‚ŒãŸä»¶ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2014å¹´11æœˆ5æ—¥ã«JPCERT/CCã€JPRSãŒãƒ‰ãƒ¡ã‚¤ãƒ³åãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ã¾ãŸåŒæ—¥æ—¥æœ¬çµŒæ¸ˆæ–°èžç¤¾ãŒåŒç¤¾ã‚µã‚¤ãƒˆãŒã“ã®æ”»æ’ƒã‚’å—ã‘ã¦ã„ãŸã“ã¨ã‚’é€Ÿå ±ã§å ±ã˜ã¾ã—ãŸã€‚*1 ã“ã“ã§ã¯é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ æ³¨æ„å–šèµ·ãƒ»å¯¾ç– JPCERT/CC ç™»éŒ²æƒ…å ±ã®ä¸æ£æ›¸ãæ›ãˆã«ã‚ˆã‚‹ãƒ‰ãƒ¡ã‚¤ãƒ³åãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ· JPRS ï¼ˆç·Šæ€¥ï¼‰ç™»éŒ²æƒ…å ±ã®ä¸æ£æ›¸ãæ›ãˆã«ã‚ˆã‚‹ãƒ‰ãƒ¡ã‚¤ãƒ³åãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã¨ãã®å¯¾ç–ã«ã¤ã„ã¦ï¼ˆ2014å¹´11æœˆ5æ—¥å…¬é–‹ï¼‰ JPRS (PDF) è£œè¶³è³‡æ–™ï¼šç™»éŒ²æƒ…å ±ã®ä¸æ£æ›¸ãæ›ãˆã«ã‚ˆã‚‹ãƒ‰ãƒ¡ã‚¤ãƒ³åãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã¨ãã®å¯¾ç–ã«ã¤ã„ã¦ JPNIC IPã‚¢ãƒ‰ãƒ¬ã‚¹ãƒ»ASç•ªå·/ãƒ‰ãƒ¡ã‚¤ãƒ³åã«é–¢ã™ã‚‹ç™»éŒ²æƒ…å ±ã®ä¸æ£æ›¸ãæ›ãˆã«é–¢ã™ã‚‹æ³¨æ„å–šèµ· ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ æ—¥ä»˜ å‡ºæ¥äº‹ 9æœˆç¬¬1é€± VolexityãŒæ—¥çµŒã§ä¸æ£ãªã‚µã‚¤ãƒˆã¸ã®æŽ¥ç¶šã‚’ç¢ºèªã€‚ 10æœˆ9æ—¥ VolexityãŒBlogè¨˜äº‹ã‚’å…¬é–‹ã€‚ 10æœˆ15æ—¥
atsushifx 2014/11/05
é¢å€’ã ã‘ã©ã€Firefoxã«RequestPolicyã‚’å…¥ã‚Œã¦ã„ãŸè‡ªåˆ†ã¯å‹ã¡çµ„ã£ã½ã„ã€‚è¡¨ç¤ºãŒå´©ã‚Œã‚‹ã“ã¨ã‚‚å¤šã„ã‘ã©ã€å¿…è¦ã®ãªã„ã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãªã„ã¨ã„ã†å®‰å¿ƒæ„Ÿã«ã¯ä»£ãˆãŒãŸã„

Security

Incident

ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯

DNS
ãƒªãƒ³ã‚¯
ç„¡åŠ¹ãªURLã§ã™
ç„¡åŠ¹ãªURLã§ã™ã€‚ ãƒ—ãƒã‚°ãƒ©ãƒ è¨å®šã®åæ˜ å¾…ã¡ã§ã‚ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ã—ã°ã‚‰ãæ™‚é–“ã‚’ãŠã„ã¦å†åº¦ã‚¢ã‚¯ã‚»ã‚¹ã‚’ãŠè©¦ã—ãã ã•ã„ã€‚
atsushifx 2014/09/25
https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ ã®ãƒã‚§ãƒƒã‚¯ã€‚ã¨ã‚Šã‚ãˆãšsh,dashã¯å®‰å…¨ã€‚patchãŒå‡ºã¦ã„ã‚‹ã®ã§ã™ãé©ç”¨ã™ã¹ã—

bash

security

incident

Envrionment
ãƒªãƒ³ã‚¯
Bash specially-crafted environment variables code injection attack
This article was originally published on the Red Hat Customer Portal. The information may no longer be current. Update 2014-09-30 19:30 UTC Questions have arisen around whether Red Hat products are vulnerable toÂ CVE-2014-6277Â andÂ CVE-2014-6278.Â We have determined thatÂ RHSA-2014:1306,Â RHSA-2014:1311,Â andÂ RHSA-2014:1312Â successfully mitigate the vulnerability and no additional actions need to be ta
atsushifx 2014/09/24
bashã«è„†å¼±æ€§ãŒã‚ã‚Šã€‚ç’°å¢ƒå¤‰æ•°ã‚’è¨å®šã™ã‚‹ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§è‡ªç”±ã«ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹ã€‚ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’ä½¿ã£ã¦ã„ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã™ã¹ã¦ã¨ã„ã†ã“ã¨ã§å½±éŸ¿ãŒå¤§ãã„

bash

Red Hat

Security

Incident

ç’°å¢ƒå¤‰æ•°
ãƒªãƒ³ã‚¯
USBã®æ ¹å¹¹ã«è„†å¼±æ€§ç™ºè¦šã€æ»è§’ã¯ãƒ•ã‚¡ãƒ¼ãƒ ã‚¦ã‚§ã‚¢
USBã®æ ¹å¹¹ã«è„†å¼±æ€§ç™ºè¦šã€æ»è§’ã¯ãƒ•ã‚¡ãƒ¼ãƒ ã‚¦ã‚§ã‚¢2014.08.01 10:058,189 ç¦ç”°ãƒŸãƒ› ã‚‚ã†æ‚ªç”¨ã•ã‚Œã¦ã‚‹å¯èƒ½æ€§ã‚‚ã€‚ USBãƒ¡ãƒ¢ãƒªã¯ã‚‚ã¡ã‚ã‚“ã€ãƒ‘ã‚½ã‚³ãƒ³ã¨ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã¨ã‹ãƒžã‚¦ã‚¹ã¨ã‹ã„ã‚ã‚“ãªãƒ‡ãƒ´ã‚¡ã‚¤ã‚¹ã‚’ã¤ãªãã¨ãã€USBã«ã¯ã¿ã‚“ãªãŠä¸–è©±ã«ãªã£ã¦ã¾ã™ã€‚ã§ã‚‚æ–°ãŸãªç ”ç©¶ã§ã€USBã®å‹•ãæ–¹è‡ªä½“ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®æ ¹æœ¬çš„ãªæ¬ é™¥ãŒè¦‹ã¤ã‹ã‚Šã¾ã—ãŸã€‚ã“ã‚Œã«ã‚ˆã£ã¦ã€ã©ã‚“ãªã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã§ã‚‚æ°—ã¥ã‹ãªã„ã†ã¡ã«ä¹—ã£å–ã‚‰ã‚Œã¦ã—ã¾ã†ã‹ã€ã‚‚ã†ä¹—ã£å–ã‚‰ã‚Œã¦ã„ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã‚“ã§ã™ã€‚ Wiredã«ã‚ˆã‚Œã°ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã®Karsten Nohlã•ã‚“ã¨Jakob Lellã•ã‚“ãŒã€USBã®åŸºæœ¬çš„ãªé€šä¿¡æ©Ÿèƒ½ã‚’ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«ã™ã‚‹ãƒ•ã‚¡ãƒ¼ãƒ ã‚¦ã‚§ã‚¢ã‚’ãƒªãƒ´ã‚¡ãƒ¼ã‚¹ãƒ»ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã—ã¾ã—ãŸã€‚å½¼ã‚‰ã¯ã•ã‚‰ã«BadUSBã¨ã„ã†ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚‚ä½œã‚Šã€ãƒ•ã‚¡ãƒ¼ãƒ ã‚¦ã‚§ã‚¢å†…éƒ¨ã«å…¥ã‚Œè¾¼ã¿ã¾ã—ãŸã€‚ãã‚Œã«ã‚ˆã£ã¦ï½¢USBãƒ‡ãƒ´ã‚¡ã‚¤ã‚¹ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚Œã°å®Œå…¨ã«PCã‚’ä¹—ã£å–ã‚‹
atsushifx 2014/08/01
report http://www.wired.com/2014/07/usb-security/ USBã¯ãƒ¡ãƒ¢ãƒªãƒ‡ãƒã‚¤ã‚¹ã¨ã—ã¦PCã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã®ã§Firmwareã«ç´°å·¥ã‚’ã™ã‚‹ã“ã¨ã§PCã¸ã®ãƒ•ãƒ«ã‚¢ã‚¯ã‚»ã‚¹ãŒå¯èƒ½ã«ãªã£ã¦ã—ã¾ã†ã€‚ãŸã¶ã‚“ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã«å¯¾ã—ã¦ã‚‚å¯èƒ½

USB

Security

USBãƒ¡ãƒ¢ãƒª

Firmware

Incident
ãƒªãƒ³ã‚¯
ASCII.jpï¼šãƒ‡ãƒ¼ã‚¿æ¶ˆå¤±ï¼ã‚ã®ã¨ãã€ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã«ãªã«ãŒèµ·ã“ã£ãŸã‹ï¼Ÿ (1/2)ï½œãƒ‡ãƒ¼ã‚¿æ¶ˆå¤±äº‹æ•…ã‹ã‚‰2å¹´ï¼ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã€å†ç”Ÿã¸ã®ç¬¬ä¸€æ©
ä»Šã‹ã‚‰2å¹´å‰ã®2012å¹´ã®6æœˆ20æ—¥ã€ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ä¼šç¤¾ã®ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã¯ã€å¤§è¦æ¨¡ãªé¡§å®¢ãƒ‡ãƒ¼ã‚¿ã®æ¶ˆå¤±äº‹æ•…ã‚’å¼•ãèµ·ã“ã—ãŸã€‚ã‚ã®ã¨ããªã«ãŒèµ·ã“ã£ãŸã‹ï¼Ÿã€€ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã®ã•ã¾ã–ã¾ãªéƒ¨é–€ã®æ‹…å½“ã«ã€å½“æ™‚ã®çŠ¶æ…‹ã‚’æŒ¯ã‚Šè¿”ã£ã¦ã‚‚ã‚‰ã£ãŸã€‚ ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã¯ä»Šã‚‚å¤‰ã‚ã‚‰ãšãƒ“ã‚¸ãƒã‚¹ã‚’å±•é–‹ã—ã¦ã„ã‚‹ ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã®é¡§å®¢ãƒ‡ãƒ¼ã‚¿æ¶ˆå¤±äº‹æ•…ã«é–¢ã™ã‚‹ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ã‚¿ãƒªãƒ¼ã‚’æ›¸ããŸã„ã¨æ€ã£ãŸã€‚äº‹æ•…ã®åŽŸå› ç©¶æ˜Žã‚„è²¬ä»»ã®æ‰€åœ¨ã‚’æ˜Žã‚‰ã‹ã«ã™ã‚‹ã®ã§ã¯ãªãã€å½“äº‹è€…ã®è©±ã‚’ç©ã¿ä¸Šã’ã¦ã„ãã‚ˆã†ãªè¨˜äº‹ãŒæ›¸ããŸã„ã¨æ€ã£ãŸã€‚ ãã—ã¦ã€ä»Šå›žãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã®å…¨é¢çš„ãªå”åŠ›ã«ã‚ˆã‚Šã€äº‹æ•…å½“æ™‚ã‹ã‚‰ç¾å ´ã‚’çµ±çŽ‡ã—ã¦ããŸç¾ä»£è¡¨å–ç· å½¹ç¤¾é•·ã®æ‘ç«¹æ˜Œäººæ°ã‚’ã¯ã˜ã‚ã€å–¶æ¥ã€é–‹ç™ºã€é‹ç”¨ã€ãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°ã€åºƒå ±ã€ã‚µãƒãƒ¼ãƒˆã€ç®¡ç†ãªã©å„éƒ¨é–€ã®æ‹…å½“è€…ã«è©±ã‚’èžãã“ã¨ãŒã§ããŸï¼ˆä»¥ä¸‹ã€æ•¬ç§°ç•¥ãƒ»å½¹è·ã¯ç¾è·ï¼‰ã€‚ äº‹æ•…ã‹ã‚‰2å¹´é–“ã®é–“ã€ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã¯ã²ãŸã™ã‚‰äº‹æ•…ã®å½±éŸ¿ã‚’å—ã‘ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã¸ã®å¯¾å¿œã¨å†
atsushifx 2014/07/23
ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã®ãƒ‡ãƒ¼ã‚¿æ¶ˆå¤±äº‹æ•…ã®æŒ¯ã‚Šè¿”ã‚Šã€‚ã„ã‚ã‚†ã‚‹ã€Œå‹•ã‹ãªã„ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã€ã ãŒä¼šç¤¾åã¨æ‹…å½“è€…ãŒã§ã¦ãã¦æŒ¯ã‚Šè¿”ã‚‹ã ã‘ã§ã‚‚ã™ã”ã„ã€‚

ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Incident

ã‚µãƒ¼ãƒé‹å–¶
ãƒªãƒ³ã‚¯
Critical Vulnerability and Privacy LoopHole Found in RoboForm Password Manager
atsushifx 2014/07/05
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒžãƒãƒ¼ã‚¸ãƒ£ãƒ¼ã‚½ãƒ•ãƒˆã®Roboformã§PINå…¥åŠ›ã‚’ã—ãªãã¦ã‚‚èµ·å‹•ã§ãã‚‹è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã¨ã®ã“ã¨ã€‚

Roboform

Security

Incident

è„†å¼±æ€§

password manager
ãƒªãƒ³ã‚¯
1