[B! security] ayato0211ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ayato0211 id:ayato0211

securityã«é–¢ã™ã‚‹ayato0211ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚¨ãƒ•ã‚»ã‚ãƒ¥ã‚¢ãƒ–ãƒã‚° : BlackHat 2012/Defcon 20 ãƒ¬ãƒãƒ¼ãƒˆ
BlackHat 2012/Defcon 20 ãƒ¬ãƒãƒ¼ãƒˆ 2012å¹´08æœˆ21æ—¥14:38 ãƒ„ã‚¤ãƒ¼ãƒˆ yj_ukai ãƒ•ã‚©ãƒ†ã‚¤ãƒ¼ãƒ³ãƒ•ã‚©ãƒ†ã‚£æŠ€è¡“ç ”ç©¶æ‰€ã€€éµœé£¼ã§ã™ã€‚ BlackHat/Defconã«ä»Šå¹´ã‚‚è¡Œã£ã¦ã¾ã„ã‚Šã¾ã—ãŸã€‚ç§ã¯Content Review Boardã¨ã—ã¦ã®å‚åŠ ã§ã™ãŒã€å¼Šç¤¾ã‹ã‚‰ã¯æŠ€è¡“æˆ¦ç•¥å®¤ã®å¤§å±…ãŒWindows Phone 7é–¢é€£ã®ãƒˆãƒ”ãƒƒã‚¯ã§è¬›æ¼”ã—ã¦å‚ã‚Šã¾ã—ãŸã€‚ å¤§å±…ã®ç¾åœ°ãƒ¬ãƒãƒ¼ãƒˆãªã©ã¯å¼Šç¤¾ã®Blog(æœ¬è¨˜äº‹ã®ä¸‹æ®µã«ãƒªãƒ³ã‚¯å‚ç…§)ã«æŽ²è¼‰ã•ã‚Œã¦ã„ã¾ã™ãŒã€ç§ã®ç¾åœ°ãƒ¬ãƒãƒ¼ãƒˆã¯å°‘ã€…é…ã‚Œã°ã›ãªãŒã‚‰ã“ã¡ã‚‰ã§æŽ²è¼‰ã•ã›ã¦ã„ãŸã ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ç§ã¯ã€BlackHat/Defconã«2003å¹´ã‹ã‚‰å‚åŠ ã—ã¦ã„ã¾ã™ã€‚å¼Šç¤¾ãŒè¨ç«‹ã•ã‚ŒãŸ2007å¹´ä»¥é™ã¯ã€è¡Œãå¹´ã‚‚ã‚ã‚Œã°è¡Œã‹ãªã„å¹´ã‚‚ã‚ã‚‹ã¨ã„ã†çŠ¶æ³ã§ã™ãŒã€æ˜¨å¹´åº¦ã‹ã‚‰ã¯BlackHatã®è«–æ–‡å¯©æŸ»ã‚’è¡Œã†Reviewerã«ãªã£ãŸäº‹ã‚‚ã‚ã‚Šã€Las Vegasã¯æ˜¨å¹´
ayato0211 2012/08/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ä¼æ¥

Windows

security
ãƒªãƒ³ã‚¯
ãƒ•ã‚©ãƒ¼ãƒ è‡ªå‹•å…¥åŠ›(x-autocompletetype)ã®å®Ÿé¨“
â€»ã”æ³¨æ„ï¼š ã‚¦ã‚¤ãƒ«ã‚¹ãƒã‚¹ã‚¿ãƒ¼ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ç’°å¢ƒã ã¨ã€ã“ã®è¨˜äº‹ã¯èªã‚ãªã„ã‚ˆã†ã§ã™ (â†’å‚è€ƒç”»åƒ) (x-autocompletetypeã¨ã¯ï¼Ÿ) Webã‚µã‚¤ãƒˆã®ãƒ•ã‚©ãƒ¼ãƒ ã«ãƒ¯ãƒ³ã‚¯ãƒªãƒƒã‚¯ã§å€‹äººæƒ…å ±ã‚’è‡ªå‹•å…¥åŠ›ã—ã¦ãã‚Œã‚‹ä¾¿åˆ©æ©Ÿèƒ½ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ã«ã€ã‚ã‚‰ã‹ã˜ã‚åå‰ã‚„ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„ä½æ‰€ã‚„ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ç•ªå·ãªã©ã®æƒ…å ±ã‚’è¨å®šã—ã¦ãŠãã€‚ ã‚¢ãƒ³ã‚±ãƒ¼ãƒˆã‚µã‚¤ãƒˆã¨ã‹ã«è¶…ä¾¿åˆ© å…¥åŠ›ãŒè‹¦æ‰‹ãªã‚ªã‚«ãƒ³ã‚‚ä¾¿åˆ© ã¨ã«ã‹ãã¹ã‚“ã‚Š Google Chrome ã®ã¿å¯¾å¿œã—ã¦ã‚‹ (2012å¹´4æœˆ4æ—¥æ™‚ç‚¹)ã€‚ ä¾¿åˆ©ã™ãŽã¦ä»Šå¾Œã€ä»–ã®ãƒ–ãƒ©ã‚¦ã‚¶ã‚‚è¿½éšå¿…è‡³ã€‚ (ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒè‡ªå‹•å…¥åŠ›ã‚’ä½¿ã†ã«ã¯) Google Chrome è¨å®š â†’ å€‹äººè¨å®š â†’ è‡ªå‹•å…¥åŠ›è¨å®šã®ç®¡ç† â†’ ä½æ‰€æ°åãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ç‰ã‚’å…¥ã‚Œã¦ãŠã (Webãƒšãƒ¼ã‚¸å´ã§ã®è‡ªå‹•å…¥åŠ›ã®è¨å®š) inputã«x-autocompletetypeå±žæ€§ã‚’ã¤ã‘ã¦ã€å€¤ã‚’ em ail ã¨ã‹ sname
ayato0211 2012/04/04
security
ãƒªãƒ³ã‚¯
è¦šãˆã®ãªã„ãƒã‚·ã‚¢èªžã‚¢ãƒ—ãƒªãŒAndroidç«¯æœ«ã«ã€Google Playã®ä¸å…·åˆèªã‚ã‚‹
ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸè¦šãˆã®ãªã„ãƒã‚·ã‚¢èªžã®ã‚¢ãƒ—ãƒªãŒSamsungè£½ã®ç«¯æœ«ã«è¡¨ç¤ºã•ã‚Œã‚‹ã¨ã„ã†å ±å‘ŠãŒç›¸æ¬¡ãŽã€Googleã¯Google Playã«ä¸å…·åˆãŒã‚ã£ãŸã“ã¨ã‚’èªã‚ãŸã¨ã„ã†ã€‚ Googleã®Androidã‚’æè¼‰ã—ãŸSamsungè£½ã®ç«¯æœ«ã§ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸè¦šãˆã®ãªã„ãƒã‚·ã‚¢èªžã®ã‚¢ãƒ—ãƒªãŒè¡¨ç¤ºã•ã‚Œã‚‹ã¨ã®å ±å‘ŠãŒç›¸æ¬¡ã„ã§ã„ã‚‹ã¨ã„ã†ã€‚ITæƒ…å ±ã‚µã‚¤ãƒˆã®VergeãŒ3æœˆ26æ—¥ä»˜ã§ä¼ãˆãŸã€‚Googleã¯ã‚¢ãƒ—ãƒªé…ä¿¡ã‚µãƒ¼ãƒ“ã‚¹ã®Google Playã«ä¸å…·åˆãŒã‚ã£ãŸã“ã¨ã‚’èªã‚ã€å¯¾å¿œã«å½“ãŸã£ã¦ã„ã‚‹ã¨ã„ã†ã€‚ Vergeã«ã‚ˆã‚‹ã¨ã€å•é¡Œã®ã‚¢ãƒ—ãƒªã¯ãƒã‚·ã‚¢èªžã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ—ãƒªã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸè¦šãˆã¯ãªã„ã®ã«Samsungè£½ç«¯æœ«ã®ç”»é¢ã«è¡¨ç¤ºã•ã‚Œã€ã‚¢ãƒ³ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã®ãŒé›£ã—ã„ã¨ã„ã†å ±å‘ŠãŒå¯„ã›ã‚‰ã‚Œã¦ã„ã‚‹ã¨ã„ã†ã€‚ ãã®å¾Œã®å–æã§ã€åŽŸå› ã¯å€‹ã€…ã®ã‚¢ãƒ—ãƒªã«å‰²ã‚Šå½“ã¦ã‚‰ã‚ŒãŸè˜åˆ¥åã«ã‚ã£ãŸã“ã¨ãŒåˆ¤æ˜Žã€‚Androidå‘ã‘ã‚¢ãƒ—ãƒªã¯å…¨ã¦ã€And
ayato0211 2012/03/28
security

Google
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (4)

securityã«é–¢ã™ã‚‹ayato0211ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (4)

securityã«é–¢ã™ã‚‹ayato0211ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ã‚¨ãƒ•ã‚»ã‚­ãƒ¥ã‚¢ãƒ–ãƒ­ã‚° : BlackHat 2012/Defcon 20 ãƒ¬ãƒãƒ¼ãƒˆ

ãƒ•ã‚©ãƒ¼ãƒ è‡ªå‹•å…¥åŠ›(x-autocompletetype)ã®å®Ÿé¨“

è¦šãˆã®ãªã„ãƒ­ã‚·ã‚¢èªžã‚¢ãƒ—ãƒªãŒAndroidç«¯æœ«ã«ã€Google Playã®ä¸å…·åˆèªã‚ã‚‹

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (4)

securityã«é–¢ã™ã‚‹ayato0211ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ã‚¨ãƒ•ã‚»ã‚ãƒ¥ã‚¢ãƒ–ãƒã‚° : BlackHat 2012/Defcon 20 ãƒ¬ãƒãƒ¼ãƒˆ

ãƒ•ã‚©ãƒ¼ãƒ è‡ªå‹•å…¥åŠ›(x-autocompletetype)ã®å®Ÿé¨“

è¦šãˆã®ãªã„ãƒã‚·ã‚¢èªžã‚¢ãƒ—ãƒªãŒAndroidç«¯æœ«ã«ã€Google Playã®ä¸å…·åˆèªã‚ã‚‹

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹