[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] chanpon0ã®ãƒ

chanpon0 id:chanpon0

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹chanpon0ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (20)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã¨ã¯ï¼Ÿæ”»æ’ƒã«è©²å½“ã™ã‚‹ã‚‚ã®ã¯ï¼Ÿäº‹ä¾‹ãƒ»å¯¾ç–ã¾ã§
ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã¯ã€Webã‚µã‚¤ãƒˆã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã—ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æ¬ºãã€æ„å›³ã—ãªã„ã‚¯ãƒªãƒƒã‚¯ã‚„ã‚¿ãƒƒãƒ—ã‚’èª˜å°Žã™ã‚‹æ‚ªè³ªãªæ”»æ’ƒæ‰‹æ³•ã§ã™ã€‚ é€æ˜Žãªç½ ãƒšãƒ¼ã‚¸ã‚’æ£è¦ãƒšãƒ¼ã‚¸ä¸Šã«é‡ãã¦ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ“ä½œã‚’å¥ªå–ã™ã‚‹æ‰‹å£ãŒç”¨ã„ã‚‰ã‚Œã€å€‹äººæƒ…å ±ã®ä¸æ£å–å¾—ã‚„ä¸æ£é€é‡‘ãªã©ã®è¢«å®³ã«ã¤ãªãŒã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ æœ¬è¨˜äº‹ã§ã¯ã€ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã®ä»•çµ„ã¿ã‚„ç‰¹å¾´ã€å…·ä½“çš„ãªæ”»æ’ƒæ‰‹æ³•ã€ãã‚Œã«ã‚ˆã‚‹è¢«å®³äº‹ä¾‹ã«ã¤ã„ã¦è©³ã—ãè§£èª¬ã—ã¾ã™ã€‚ ã•ã‚‰ã«ã€ã‚µã‚¤ãƒˆé‹å–¶è€…ãŒå–ã‚‹ã¹ãå¯¾ç–ã‚„ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã§ãã‚‹äºˆé˜²æ³•ã«ã¤ã„ã¦ã‚‚ã”ç´¹ä»‹ã€‚ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã®è„…å¨ã‹ã‚‰èº«ã‚’å®ˆã‚‹ãŸã‚ã«å¿…è¦ãªçŸ¥è˜ã‚’èº«ã«ã¤ã‘ã¾ã—ã‚‡ã†ã€‚ ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ï¼ˆClickjackingï¼‰ã¯ã€Webã‚µã‚¤ãƒˆã®è„†å¼±æ€§ã‚’çªã„ã¦ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’é¨™ã—ã¦æ„å›³ã—ãªã„ã‚¯ãƒªãƒƒã‚¯ã‚„ã‚¿ãƒƒãƒ—ã‚’ã•ã›ã‚‹æ”»æ’ƒæ‰‹æ³•ã§ã™ã€‚æ”»æ’ƒè€…ã¯ã€é€æ˜Žãªç½ ã®ãƒšãƒ¼ã‚¸ã‚’æ£è¦ã®ãƒšãƒ¼ã‚¸ã®ä¸Šã«é‡ãã¦é…ç½®ã—ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚¯ãƒªãƒƒã‚¯ã‚’èª˜å°Žã—ã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯è¦‹ãˆã¦ã„ã‚‹
chanpon0 2019/05/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
ä¸å›½ãŒã‚¢ãƒ¡ãƒªã‚«ã¨ã®ã€Œã‚µã‚¤ãƒãƒ¼å”å®šã€ç· çµå¾Œã‚‚ç¹°ã‚Šè¿”ã—ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã‚’è¡Œã£ã¦ã„ã‚‹ã“ã¨ãŒç™ºè¦š
By Bill Smith ä¸å›½æ”¿åºœã‚„å¤§ä¼æ¥ã«ã‚ˆã‚‹ç”£æ¥ã‚¹ãƒ‘ã‚¤ã¯ã€ã‚¢ãƒ¡ãƒªã‚«ã§ã®ãƒˆã‚¦ãƒ¢ãƒã‚³ã‚·æ³¥æ£’ã«ã¤ãªãŒã‚‹ã»ã©ã«ã•ã¾ã–ã¾ãªåˆ†é‡Žã§è¡Œã‚ã‚Œã¦ã„ã‚‹ã‚ˆã†ã§ã™ãŒã€ãã‚“ãªä¸å›½ã¨ã‚¢ãƒ¡ãƒªã‚«ã®é–“ã§2015å¹´9æœˆ25æ—¥ã«æ´å²çš„ãªã‚µã‚¤ãƒãƒ¼å”å®šãŒçµã°ã‚Œã¾ã—ãŸã€‚ã“ã‚Œã¯ã€ã€Œä¸¡å›½å®¶ãŒç«¶åˆä¼æ¥ãªã©ã®æŒã¤ä¼æ¥ç§˜å¯†ãªã©ã®çŸ¥çš„è²¡ç”£ã‚’ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆçµŒç”±ã§ç›—ã¿å‡ºã™ã‚ˆã†ãªã‚µã‚¤ãƒãƒ¼çŠ¯ç½ªã‚’è¡Œã‚ãªã„ã€ã¾ãŸã€æ•…æ„ã«ãã†ã„ã£ãŸè¡Œã„ã‚’ã‚µãƒãƒ¼ãƒˆã—ãªã„ã“ã¨ã«åˆæ„ã™ã‚‹ã€ã¨ã„ã†å†…å®¹ã®ã‚‚ã®ã ã£ãŸã®ã§ã™ãŒã€å”å®šãŒçµã°ã‚Œã¦ã‹ã‚‰3é€±é–“ä»¥ä¸ŠãŒçµŒéŽã—ãŸç¾åœ¨ã‚‚ä¸å›½ã‹ã‚‰ã®æ”»æ’ƒãŒå¤šæ•°æ¤œçŸ¥ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ã¦ã„ã¾ã™ã€‚ The Latest on Chinese-affiliated Intrusions into Commercial Companies Â» Adversary Manifesto http://blog.crowdstrike.com/the-la
chanpon0 2016/04/22
china chopper

ã‚ã¨ã§èªã‚€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
å°‚é–€å®¶ãŒæ³£ãã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£9ã¤ã®èª¤è§£ã¨ç¾å®Ÿ
å°‚é–€å®¶ãŒæ³£ãã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£9ã¤ã®èª¤è§£ã¨ç¾å®Ÿ2015.03.15 10:006,697 satomi è„†å¼±æ€§ã€ã‚¦ã‚¤ãƒ«ã‚¹ã€ä¸æ£ä¾µå…¥ã§äººç”Ÿå°ç„¡ã—ã€å›½ãŒå±ãªã„â€¦ã¨ã„ã†ãƒ‹ãƒ¥ãƒ¼ã‚¹ã®é€£ç¶šã§ã™ãŒã€ç¾å®Ÿã®ãƒªã‚¹ã‚¯ã¯ã„ã‹ã»ã©ã®ã‚‚ã®ãªã®ã‹ï¼Ÿ å°‚é–€å®¶ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã‚¦ã‚½&ãƒ›ãƒ³ãƒˆã‚’ãšã°ã‚Šè¨Šãã¦ã¿ã¾ã—ãŸã€‚ä»¥ä¸‹ãŒå›žç”é›†ã€‚å°è¦‹å‡ºã—ã¯å…¨éƒ¨ï½¢ãƒ›ãƒ³ãƒˆï½£ã®æ–¹ã§ã™ã€‚ 1. å¼·ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ä¸–ã®ã»ã¨ã‚“ã©ã®æ”»æ’ƒã¯è¿½ã£æ‰•ãˆã‚‹ ç±³Yahooæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœ€é«˜åŸ·è¡Œè²¬ä»»è€…ã®Alex Stamosã•ã‚“ã¯è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ç©´ã‚’ã©ã†æ‚ªç”¨ã™ã‚‹ã®ã‹è€ƒãˆã‚‹ã®ãŒä»•äº‹ã€‚æ¥µæ‚ªãƒãƒƒã‚¯ã‹ã‚‰å˜ç´”ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°ã«ã‚ˆã‚‹è©æ¬ºã¾ã§ã€ã‚ã‚‰ã‚†ã‚‹æ‰‹å£ã®ã‚‚ã®ã‚’è¦‹ã¦ãã¾ã—ãŸã€‚ãã®ã‚ãƒ£ãƒªã‚¢ã§ã‚ã‹ã£ãŸã®ã¯ã€å¤§ä½“ã©ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚‚é€šç”¨ã™ã‚‹ç°¡å˜ãªã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ãŒãµãŸã¤ã‚ã‚‹ã“ã¨ã§ã™ã€‚ã²ã¨ã¤ã¯å¼·ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€ã‚ã¨ã²ã¨ã¤ã¯2æ®µéšŽèªè¨¼ã§ã™ã€‚ ãƒžã‚¹ã‚³ãƒŸã¯æœ€ã‚‚ãƒ‡ã‚£ãƒ¼ãƒ—ã§æœ€ã‚‚é«˜åº¦ãª
chanpon0 2015/03/15
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰

ã‚ã¨ã§èªã‚€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹Bashè„†å¼±æ€§ã®å³æ»æ¡ä»¶ #ShellShock - ã‚ã‚‚ãŠãã°
æ¡ä»¶1. /bin/shã®å®Ÿä½“ãŒbashã®ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ RHEL CentOS Scientific Linux Fedora Amazon Linux openSUSE Arch Linux (è‡ªã‚‰è¨å®šã—ãŸå ´åˆ: Debian, Ubuntu) æ¡ä»¶2. å‹•ä½œç’°å¢ƒ CGI (ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒã§ã‚ã‚ŠãŒã¡ãªCGIãƒ¢ãƒ¼ãƒ‰ã®PHPç‰ã‚‚å«ã‚€) Passenger(Ruby) æ¡ä»¶3. ãƒ—ãƒã‚°ãƒ©ãƒ å†…å®¹ Passengerã¯å…¨æ»äº¡ *1 systemã‚„ `command`ã€ '| /usr/lib/sendmail' ãªã©ã§å¤–éƒ¨ã‚³ãƒžãƒ³ãƒ‰å®Ÿè¡Œ *2 PHPã®mailã‚„mb_send_mailã€ãã®ä»–ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ç‰ã‚’ä»‹ã—ãŸãƒ¡ãƒ¼ãƒ«é€ä¿¡ *3 ä»¥ä¸‹ã¯æ¡ä»¶1ãŒä¸è¦ æ˜Žç¤ºçš„ã«bashã‚’å‘¼ã¶ å…ˆé ã§ #!/bin/bash ã‚„ #!/usr/bin/env bash ã—ã¦ã„ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å®Ÿè¡Œ (rbenv
chanpon0 2014/09/26
security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

bash
ãƒªãƒ³ã‚¯
è¢«å®³ã®å‰ã«ï¼Macã‚’è²·ã£ãŸã‚‰çµ¶å¯¾ã«ã‚„ã‚‹ã¹ã10ã®ç„¡æ–™ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–
Macã‚’å®‰å¿ƒã—ã¦åˆ©ç”¨ã™ã‚‹ãŸã‚ã«ã¯ã€åŸºæœ¬çš„ãªã‚¦ã‚¤ãƒ«ã‚¹å¯¾ç–ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ã€‚ã‚¦ã‚¤ãƒ«ã‚¹ã¯Macã®æ£å¸¸ãªå‹•ä½œã‚’å¦¨ã’ã‚‹ã ã‘ã§ã¯ãªãã€SNSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä¹—ã£å–ã‚‰ã‚ŒãŸã‚Šã‚¦ã‚¤ãƒ«ã‚¹ã‚’å‹äººã«é€ã£ã¦ã—ã¾ã£ãŸã‚Šãªã©ã€å¤šå¤§ãªæ‚ªå½±éŸ¿ã‚’åŠã¼ã™ã‚‚ã®ã§ã™ã€‚ ä»Šå›žã¯ã€Macã‚’åˆ©ç”¨ã™ã‚‹éš›ã®ã‚¦ã‚¤ãƒ«ã‚¹å¯¾ç–ã®å¿…è¦æ€§ã‚„ã€å…·ä½“çš„ãªå¯¾ç–æ–¹æ³•ãªã©ã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚ãƒ“ã‚¸ãƒã‚¹ã§Macã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹äººã¯ã‚‚ã¡ã‚ã‚“ã€ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆç”¨ã®Macã§ã‚‚ã‚¦ã‚¤ãƒ«ã‚¹å¯¾ç–ã¯å¿…é ˆã§ã™ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ„è˜ã‚’é«˜ã‚ã€ã‚¦ã‚¤ãƒ«ã‚¹æ„ŸæŸ“ã®ãƒˆãƒ©ãƒ–ãƒ«ã‚’æœªç„¶ã«é˜²ã„ã§ã„ãã¾ã—ã‚‡ã†ã€‚
chanpon0 2014/09/22
Mac

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚ã¨ã§è¦‹ã‚‹
ãƒªãƒ³ã‚¯
www\.google\.com ã«å˜åœ¨ã™ã‚‹æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰åˆ‡ã‚Šæ›¿ãˆã«ã‚ˆã‚‹Self-XSS - A602
First published Sat Aug 23 23:57:12 2014 +0900 ; substantive revision Sat Feb 14 12:41:39 2015 +0900 Tags : Security XSS ã¾ã¨ã‚ å¯†ã‹ã«ç´°å·¥ã•ã‚ŒãŸãƒšãƒ¼ã‚¸ã‚„Googleã®æ¤œç´¢çµæžœç”»é¢ã§ã€æ–‡å—åŒ–ã‘ã‚’ç›´ã™ãŸã‚ã«ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’åˆ‡ã‚Šæ›¿ãˆã‚‹ã¨ãƒã‚°ã‚¤ãƒ³ã—ã¦ã„ã‚‹Googleã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‹ã‚‰æƒ…å ±ãŒæ¼ã‚Œã‚‹è„†å¼±æ€§ãŒã‚ã‚‹ã€‚ Googleã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯æ‰‹å‹•ã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’åˆ‡ã‚Šæ›¿ãˆã‚‹ã¹ãã§ã¯ãªã„ã¨è€ƒãˆã¦ã„ã‚‹ã®ã§ã€ã“ã®è„†å¼±æ€§ã¯ä¿®æ£ã•ã‚Œãªã„ã€‚ æ¦‚è¦ ä»¥ä¸‹ã®ãƒšãƒ¼ã‚¸ã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’Shift_JISã«åˆ‡ã‚Šæ›¿ãˆã‚‹ã¨ www\.google\.co\..* ä¸Šã§XSSãŒç™ºå‹•ã—ã¾ã™ã€‚ PoC 1: Googleãƒžãƒƒãƒ—ã®iframeåŸ‹ã‚è¾¼ã¿ http://www.tsg.ne.jp/n
chanpon0 2014/08/26
google

xss

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

encoding

æ–‡å—åŒ–ã‘
ãƒªãƒ³ã‚¯
æ›´æ–°ï¼šInternet Explorer ã®è„†å¼±æ€§å¯¾ç–ã«ã¤ã„ã¦(CVE-2014-1776)ï¼šIPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
Microsoft ç¤¾ã® Internet Explorer ã«ã€æ‚ªæ„ã®ã‚ã‚‹ç´°å·¥ãŒã•ã‚ŒãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’é–‹ãã“ã¨ã§ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ãŒå®Ÿè¡Œã•ã‚Œã‚‹è„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚ ã“ã®è„†å¼±æ€§ãŒæ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ—ãƒã‚°ãƒ©ãƒ ãŒç•°å¸¸çµ‚äº†ã—ãŸã‚Šã€æ”»æ’ƒè€…ã«ã‚ˆã£ã¦ãƒ‘ã‚½ã‚³ãƒ³ã‚’åˆ¶å¾¡ã•ã‚Œã€æ§˜ã€…ãªè¢«å®³ãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ Microsoft ç¤¾ã¯ã€Œè„†å¼±æ€§ã‚’æ‚ªç”¨ã—ã‚ˆã†ã¨ã™ã‚‹é™å®šçš„ãªæ¨™çš„åž‹æ”»æ’ƒã‚’ç¢ºèªã—ã¦ã„ã¾ã™ã€‚ã€ã¨å…¬è¡¨ã—ã¦ãŠã‚Šã€ä»Šå¾Œè¢«å®³ãŒæ‹¡å¤§ã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ãŸã‚ã€è‡³æ€¥ã€ä¿®æ£ãƒ—ãƒã‚°ãƒ©ãƒ (MS14-021)ã‚’é©ç”¨ã—ã¦ä¸‹ã•ã„ã€‚ Microsoft ç¤¾ã¯ã€5 æœˆ 2 æ—¥ã‚ˆã‚Šã€Windows Update ã§æœ¬è„†å¼±æ€§ã«å¯¾ã™ã‚‹ä¿®æ£ãƒ—ãƒã‚°ãƒ©ãƒ ã®é…ä¿¡ã‚’é–‹å§‹ã—ã¾ã—ãŸã€‚ ä»¥ä¸‹ã® Microsoft è£½å“ãŒå¯¾è±¡ã§ã™ã€‚ Internet Explorer 6 Internet Explorer 7 Internet Explorer 8
chanpon0 2014/05/01
security

IE

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Microsoftã®è„†å¼±æ€§ç·©å’Œãƒ„ãƒ¼ãƒ«ã€ŒEMETã€ã¯ã“ã†ä½¿ã† - ã‚¼ãƒãƒ‡ã‚¤æ”»æ’ƒã‹ã‚‰èº«ã‚’å®ˆã‚‹æœ‰åŠ¹ãªæ‰‹æ®µ
æˆ‘ã€…ãŒæ¯Žæœˆé©ç”¨ã—ã¦ã„ã‚‹Windows OSã®æ›´æ–°ãƒ—ãƒã‚°ãƒ©ãƒ ã¯ã€ç™ºè¦‹ã•ã‚ŒãŸè„†å¼±æ€§ã‚’ç‹™ã£ã¦æ”»æ’ƒã™ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‹ã‚‰OSã‚’å®ˆã‚‹ãŸã‚ã€ç©´(è„†å¼±æ€§)ã‚’ãµã•ã„ã ãƒ•ã‚¡ã‚¤ãƒ«ã«ç½®ãæ›ãˆã‚‹ã‚‚ã®ã ã€‚ä»–æ–¹ã§ã€æœªä¿®æ£ã®è„†å¼±æ€§ãŒå˜åœ¨ã™ã‚‹å ´åˆã€æ›´æ–°ãƒ—ãƒã‚°ãƒ©ãƒ ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã‚‹ã¾ã§ã€æ”»æ’ƒã‹ã‚‰èº«ã‚’å®ˆã‚‹æ‰‹ç«‹ã¦ã¯é™ã‚‰ã‚Œã¦ã—ã¾ã†ã€‚æœªä¿®æ£ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã—ãŸæ”»æ’ƒã¯ã€Œã‚¼ãƒãƒ‡ã‚¤æ”»æ’ƒã€ã¨å‘¼ã°ã‚Œã€æœ€è¿‘ã§ã¯Internet ExplorerãŒæŠ±ãˆã¦ã„ãŸæœªä¿®æ£ã®è„†å¼±æ€§ã‚’çªã„ãŸã‚¼ãƒãƒ‡ã‚¤æ”»æ’ƒãŒç™ºç”Ÿã—ã€å¤§ããªã‚¤ãƒ³ãƒ‘ã‚¯ãƒˆã‚’ä¸ŽãˆãŸ(ã“ã®è„†å¼±æ€§ã¯10æœˆã®æœˆä¾‹ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§å¯¾å‡¦æ¸ˆã¿)ã€‚ â– ä¸€å¤ªéƒŽã¨æ—¥æœ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ç‹™ã£ãŸã‚¼ãƒãƒ‡ã‚¤æ”»æ’ƒãŒç™ºç”Ÿã—ã¦ã„ãŸ - ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ â– Microsoft Officeã‚„Windows Vistaã«è„†å¼±æ€§ - æ¨™çš„åž‹ã®ã‚¼ãƒãƒ‡ã‚¤æ”»æ’ƒã‚‚ç¢ºèª â– IEã‚¼ãƒãƒ‡ã‚¤è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸãƒ©ãƒƒã‚¯ã®ã€Œæ°´é£²ã¿å ´åž‹æ”»æ’ƒã€èª¬æ˜Žä¼š - çŠ¯äººãŒä¸é‹ã ã£ãŸç†ç”±ã¨ã¯? â–
chanpon0 2014/05/01
security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Windows
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2014/04/08/20140407massive-security-bug-in-openssl-could-effect-a-huge-chunk-of-the-internet/
chanpon0 2014/04/09
security

SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Part4ã€€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã¨å¼·åˆ¶ãƒ–ãƒ©ã‚¦ã‚¸ãƒ³ã‚°
Part4ã§ã¯ï¼Œãƒ¦ãƒ¼ã‚¶ãƒ¼ã®Webãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’é€ã‚Šè¾¼ã¿ï¼Œãã‚Œã‚’å®Ÿè¡Œã•ã›ã‚‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®æ‰‹å£ã¨å¯¾ç–ï¼ŒãŠã‚ˆã³å¼·åˆ¶ãƒ–ãƒ©ã‚¦ã‚¸ãƒ³ã‚°ã®æ‰‹å£ã¨å¯¾ç–ã‚’è©³ã—ãè¦‹ã¦ã„ã“ã†ã€‚ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã¯ï¼Œãƒ¦ãƒ¼ã‚¶ãƒ¼ã®Webãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’é€ã‚Šè¾¼ã¿ï¼Œãã‚Œã‚’å®Ÿè¡Œã•ã›ã‚‹æ”»æ’ƒæ‰‹æ³•ã§ã‚ã‚‹ï¼ˆå›³1ï¼‰ã€‚ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚’ç›—ã‚€ã®ã«ä½¿ã‚ã‚Œã‚‹ã“ã¨ãŒå¤šã„ã€‚ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚’ç›—ã‚€ã»ã‹ã®æ‰‹å£ã¯Webã‚µã‚¤ãƒˆã¨ãƒ–ãƒ©ã‚¦ã‚¶ã®é–“ã®é€šä¿¡ã‚’SSLã§æš—å·åŒ–ã—ã¦ã„ã‚Œã°é˜²ã’ã‚‹ãŒï¼Œã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã¯SSLã‚’ä½¿ã£ã¦ã„ã¦ã‚‚é˜²ã’ãªã„ã€‚ ã»ã¨ã‚“ã©ã®Webã‚¢ãƒ—ãƒªã¯Cookieï¼ˆã‚¯ãƒƒã‚ãƒ¼ï¼‰ã¨ã„ã†ãƒ†ã‚ã‚¹ãƒˆå½¢å¼ã®ãƒ‡ãƒ¼ã‚¿ã§ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚’ç®¡ç†ã—ã¦ã„ã‚‹ã€‚ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ãŒæ¨™çš„ã«ã™ã‚‹ã®ã¯ã“ã®Cookieã ã€‚ç›—ã‚“ã Cookieã‚’ã‚¯ãƒ©ãƒƒã‚«ãŒä½¿ãˆã°ï¼Œã©ã®ãƒ‘ã‚½ã‚³ãƒ³ã‹ã‚‰ã§ã‚‚æ£è¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ãªã‚Šã™ã¾ã—ã¦ç‹™ã£ãŸWebã‚µã‚¤ãƒˆã«ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã§
chanpon0 2014/01/31
ã‚ã¨ã§è¦‹ã‚‹

Security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
è„†å¼±æ€§ã‚’åˆ©ç”¨ã—ãŸæ”»æ’ƒæ‰‹æ³•ï¼ˆ3ï¼‰ --- ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒ»ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«ã¨OSã‚³ãƒžãƒ³ãƒ‰ãƒ»ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³
ãƒã‚¤ãƒ³ãƒˆ â—ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒ»ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«ã¨ã¯ï¼Œã€Œ../ã€ã®ã‚ˆã†ãªæ–‡å—åˆ—ã‚’ä½¿ã£ã¦Webã‚µãƒ¼ãƒãƒ¼ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒ»ãƒ‘ã‚¹ã‚’ã•ã‹ã®ã¼ã‚Šï¼ˆæ¨ªæ–ã—ã¦ï¼‰ï¼Œå…¬é–‹ã•ã‚Œã¦ã„ãªã„ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ‰‹æ³•ã®ã“ã¨ã§ã‚ã‚‹ â—OSã‚³ãƒžãƒ³ãƒ‰ãƒ»ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¯ï¼Œãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒ»ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«ã®æ‰‹æ³•ã‚’ç”¨ã„ã¦OSã‚³ãƒžãƒ³ãƒ‰ãŒã‚ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚¢ã‚¯ã‚»ã‚¹ã—ï¼ŒOSã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹æ‰‹æ³•ã®ã“ã¨ã§ã‚ã‚‹ â—ã©ã¡ã‚‰ã®æ‰‹æ³•ã‚‚ï¼ŒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ï¼Œå…·ä½“çš„ã«ã¯ã€Œå…¥åŠ›ã•ã‚Œã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹ãƒ‡ãƒ¼ã‚¿ã«å¯¾ã™ã‚‹è€ƒæ…®ä¸è¶³ã€ã‚’æ‚ªç”¨ã™ã‚‹æ”»æ’ƒæ‰‹æ³•ã§ã‚ã‚‹ å‰å›žã¯ï¼ŒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã®å¤§æž ã‚’ç¢ºèªã—ã¾ã—ãŸã€‚ä»Šå›žã¯ã€Œãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒ»ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«ã€ã¨ã€ŒOSã‚³ãƒžãƒ³ãƒ‰ãƒ»ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã€ã®è©³ç´°ã‚’å¦ã³ã¾ã™ã€‚ã„ãšã‚Œã‚‚Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ï¼ã€Œå…¥åŠ›ã•ã‚Œã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹ãƒ‡ãƒ¼ã‚¿ã«å¯¾ã™ã‚‹è€ƒæ…®ä¸è¶³ã€ã‚’ç‹™ã£ãŸæ”»æ’ƒæ‰‹æ³•ã§ã™ã€‚ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒ»ãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«ã®ã‚«ãƒ©ã‚¯ãƒª ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆ
chanpon0 2014/01/31
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Security

ã‚ã¨ã§è¦‹ã‚‹
ãƒªãƒ³ã‚¯
websec-room.comÂ -Â websec room ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±
This webpage was generated by the domain owner using Sedo Domain Parking. Disclaimer: Sedo maintains no relationship with third party advertisers. Reference to any specific service or trade mark is not controlled by Sedo nor does it constitute or imply its association, endorsement or recommendation.
chanpon0 2014/01/01
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Googleã‚°ãƒ«ãƒ¼ãƒ—ãŒã‚ã¾ã‚Šã«ã‚‚æƒ…å ±ãƒ€ãƒ€æ¼ã‚ŒçŠ¶æ…‹ã§å¤±ç¥žã—ãŸ - Hagex-day info
ã‚²ã‚¹ãƒƒåHagexã‚‚ä»Šå›žã¯ã€ŒãŸã‚ã„ããƒãƒ»ã‚«ãƒ»ãƒ“ãƒ»ãƒªãƒ¼ã€ã‚’æ€ã‚ãšç†±å”±ã—ã¾ã—ãŸã€‚ ãŸã‚ã„ãâ™ªã€€ãƒã‚«ãƒ“ãƒªãƒ¼â™ªã€€å¿ƒã‚’ä¹±ã™å—é¢¨â™ªâ™ª ã‚ˆãã‚ã‹ã‚‰ãªã„å°Žå…¥ã«ãªã£ã¦ã—ã¾ã„ã¾ã—ãŸãŒã€ã¿ãªã•ã‚“ã¯ã€Googleã‚°ãƒ«ãƒ¼ãƒ—ã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”å˜ã˜ã§ã—ã‚‡ã†ã‹ï¼Ÿ ãã®åã®é€šã‚Šã€GoogleãŒé‹å–¶ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã§ã€ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆçš„ãªã‚µãƒ¼ãƒ“ã‚¹ã‚’ç°¡å˜ã«å§‹ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚æ‰‹è»½ã«åˆ©ç”¨ã§ãã‚‹åé¢å¤§ããªå•é¡Œã‚‚ã‚ã‚Šã€ãªã‚“ã¨åˆæœŸè¨å®šã§ã¯ã€ŒæŠ•ç¨¿ã•ã‚ŒãŸãƒ¡ãƒ¼ãƒ«ãŒã™ã¹ã¦ç¬¬ä¸‰è€…ã§ã‚‚è¦‹ã‚‰ã‚Œã¦ã—ã¾ã†ã€ã®ã§ã™ã€‚ å…ˆæ—¥ã€å®˜å…¬åºã‚„ç—…é™¢ãŒGoogleã‚°ãƒ«ãƒ¼ãƒ—ã‚’åˆ©ç”¨ã—ã€æƒ…å ±ãŒãƒ€ãƒ€æ¼ã‚ŒçŠ¶æ…‹ãªã®ã‚’èªå£²æ–°èžã«ã‚¹ãƒƒãƒ‘æŠœã‹ã‚Œã€ãƒ‹ãƒ¥ãƒ¼ã‚¹ã«ãªã‚Šã¾ã—ãŸã€‚ ãƒ»å†…éƒ¨ãƒ¡ãƒ¼ãƒ«èª°ã§ã‚‚é–²è¦§ã€Œã‚°ãƒ¼ã‚°ãƒ«ã‚°ãƒ«ãƒ¼ãƒ—ã€åˆ©ç”¨ï¼ˆèªå£²æ–°èžï¼‰ ãã—ã¦ã€æ˜¨æ—¥ã¯ECã‚µã‚¤ãƒˆãŒGoogleã‚°ãƒ«ãƒ¼ãƒ—ã‚’åˆ©ç”¨ã—ã€é¡§å®¢æƒ…å ±ãŒæ¼ã‚Œã¦ã„ã‚‹ã¨ã„ã†æŒ‡æ‘˜ã®ã‚¨ãƒ³ãƒˆãƒªãƒ¼ãŒæ³¨ç›®ã•ã‚Œã¾ã—ãŸ ãƒ»EC ã‚µã‚¤ãƒˆã®ä½¿ç”¨ã‚’å³åˆ»è¾žã‚ã‚ï¼ï¼ï¼ï¼ˆs
chanpon0 2013/08/08
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

google
ãƒªãƒ³ã‚¯
WebView ã®è„†å¼±æ€§ç·¨ - Android ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š
chanpon0 2013/01/19
security

webview

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ï¼»ã¯ã¾ã¡ã¡ã‚ƒã‚“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¬›åº§ï¼½ã“ã“ãŒã‚ãƒŸã®è„†å¼±ãªã¨ã“ã‚â€¦ï¼ è¨˜äº‹ä¸€è¦§ | gihyo.jp
é‹å–¶å…ƒã®ãƒã‚´ Copyright Â© 2007-2024 All Rights Reserved by Gijutsu-Hyoron Co., Ltd. ãƒšãƒ¼ã‚¸å†…å®¹ã®å…¨éƒ¨ã‚ã‚‹ã„ã¯ä¸€éƒ¨ã‚’ç„¡æ–ã§åˆ©ç”¨ã™ã‚‹ã“ã¨ã‚’ç¦æ¢ã—ã¾ã™â ã€‚å€‹åˆ¥ã«ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ãŒè¨å®šã•ã‚Œã¦ã„ã‚‹è¨˜äº‹ç‰ã¯ãã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã«å¾“ã„ã¾ã™ã€‚
chanpon0 2012/06/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

ã‚ã¨ã§è¦‹ã‚‹
ãƒªãƒ³ã‚¯
PHPã§GnuPGã‚’ä½¿ã£ã¦ã¿ã‚‹
ã“ã‚“ã«ã¡ã¯ã€‚æ©‹æœ¬ã§ã™ã€‚ ä»Šæ—¥ã¯PHPã§GnuPGã‚’ä½¿ã£ã¦ã€OpenPGPæ–¹å¼ã«ã‚ˆã‚‹æš—å·åŒ–ã‚’è¡Œã†æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ PHPã§GnuPGã‚’æ‰±ã†ãŸã‚ã«ã¯ã€PECLã®gnupgæ‹¡å¼µãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ä½¿ã„ã¾ã™ã€‚ ã¾ãšã¯ãƒ—ãƒ¬ãƒ¼ãƒ³ãƒ†ã‚ã‚¹ãƒˆã«å¯¾ã—ã¦æš—å·åŒ–ã¨ç½²åã‚’è¡Œã†æ–¹æ³•ã§ã™ã€‚ ã©ã¡ã‚‰ã‚‚å°‚ç”¨ã®ãƒ¡ã‚½ãƒƒãƒ‰ã‚’ä½¿ã†ã“ã¨ã§ç°¡å˜ã«è¡Œã†ã“ã¨ãŒã§ãã¾ã™ã€‚ ä»¥ä¸‹ãŒä½¿ç”¨ä¾‹ã§ã™ã€‚ <?php //Â æš—å·åŒ–ç”¨ãƒ•ã‚£ãƒ³ã‚¬ãƒ¼ãƒ—ãƒªãƒ³ãƒˆï¼ˆç›¸æ‰‹ã®éµï¼‰ã€ç½²åç”¨ã®ãƒ•ã‚£ãƒ³ã‚¬ãƒ¼ãƒ—ãƒªãƒ³ãƒˆï¼ˆè‡ªåˆ†ã®éµï¼‰ã€ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚º $crypt_fpÂ =Â 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'; $sign_fpÂ =Â 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'; $passphraseÂ =Â 'fugafuga'; $plain_textÂ =Â 'hogehoge'; $gnupgÂ =Â new
chanpon0 2012/05/23
æš—å·

php

gpg

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
PC
æœ€å¾Œã®Windows 10è„±å‡ºè¨ˆç”» é›£ã—ããªã£ãŸWindowsãƒ‘ã‚½ã‚³ãƒ³é¸ã³ã€Copilot+ PCã‚’ã©ã†è©•ä¾¡ã™ã‚‹ã‹ 2024.12.13
chanpon0 2011/10/26
security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

firefox

ã‚¢ãƒ‰ã‚ªãƒ³
ãƒªãƒ³ã‚¯
WIRESHARKï¼ˆãƒ¯ã‚¤ã‚¢ã‚·ãƒ£ãƒ¼ã‚¯ï¼‰
EtherealãŒWiresharkï¼ˆãƒ¯ã‚¤ã‚¢ã‚·ãƒ£ãƒ¼ã‚¯ï¼‰ã¨ã„ã†åå‰ã«ãªã‚Šã¾ã—ãŸã€‚ Etherealã®é ƒã‹ã‚‰ãšã£ã¨ãŠä¸–è©±ã«ãªã£ã¦ã„ã¾ã™ã€‚ä¾¿åˆ©ãªãƒ„ãƒ¼ãƒ«ãªã®ã§ã€ä½¿ã„ã“ãªã—ã¦ã¿ã¦ãã ã•ã„ã€‚ PR ç›®æ¬¡ ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« åˆæœŸè¨å®šã‚’å¤‰æ›´ã—ã‚ˆã† ã‚ãƒ£ãƒ—ãƒãƒ£ã‚¹ã‚¿ãƒ¼ãƒˆæ–¹æ³• ãƒ•ã‚£ãƒ«ã‚¿ ãƒ•ãƒãƒ¼ã‚°ãƒ©ãƒ• ãƒªãƒ³ã‚¯ æ›´ã«è©³ã—ã ï¼‘ï¼Žãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ http://www.wireshark.org/ ã®Get Wireshark Now ã‚’ã‚¯ãƒªãƒƒã‚¯ã€‚ SOURCEFORGE.NETã«ã¤ãªãŒã‚Šã¾ã™ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒãƒƒãƒ—ã‚¢ãƒƒãƒ—ãŒå‡ºã‚‹å ´åˆã¯ã€ãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã‚’é¸æŠžã—ã¦å…ˆã«é€²ã‚“ã§ãã ã•ã„ã€‚ InternetExplorer7ã®å ´åˆã€ä»¥ä¸‹ã®ã‚ˆã†ã«ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šéƒ¨ã«ãƒãƒƒãƒ—ã‚¢ãƒƒãƒ—ãƒãƒ¼ãŒè¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ã“ã‚Œã‚’å³ã‚¯ãƒªãƒƒã‚¯ã—ã€ãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã‚’é¸æŠžã—ã¦ãã ã•ã„ã€‚ ï¼’ï¼Žã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ãŸãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãƒ€
chanpon0 2011/10/19
network

software

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«æ©Ÿèƒ½ãŒå……å®Ÿã€KUNAI Lite for Androidçš„ãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¿ã‚¤ãƒ«
ã€Œã‚µã‚¤ãƒœã‚¦ã‚ºãƒ¢ãƒã‚¤ãƒ« KUNAI Liteã€ã¯ã€é€šå‹¤ãªã©ã®â€œã™ãé–“æ™‚é–“â€ã‚’ä»•äº‹ã«ä½¿ã†æœ‰åŠ›ãƒ„ãƒ¼ãƒ«ã®ä¸€ã¤ã ã€‚ç„¡å„Ÿæä¾›ãŒé–‹å§‹ã•ã‚ŒãŸAndroidç‰ˆã¯ä»–äººã®äºˆå®šç¢ºèªã‚„æ–½è¨äºˆç´„ã«ã‚‚å¯¾å¿œã—ã€ã‚ˆã‚Šæ´»ç”¨ã‚·ãƒ¼ãƒ³ãŒåºƒãŒã£ãŸã€‚ã“ã“ã§ã¯ã€ã€ŒKUNAI Lite for Androidã€ãŒã„ã‹ã«åŠ¹çŽ‡åŒ–ã‚’å›³ã‚Œã‚‹ã‹ã‚’ãƒ“ã‚¸ãƒã‚¹ãƒžãƒ³ã®1æ—¥ã®è¡Œå‹•ã‚’è¿½ã„ãªãŒã‚‰æ¤œè¨¼ã™ã‚‹ã€‚ AM9:00ã€å•†è«‡ã«å‘ã‹ã†é§…ã®ãƒ›ãƒ¼ãƒ ã€‚Næ°ã¯å®¢å…ˆã§ã®é‡è¦ãªå•†è«‡ã«å‘ã‹ã†ãŸã‚ã€ä¸€æ—¥ã®ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ç¢ºèªã—ãªãŒã‚‰ç™ºè»Šæ™‚åˆ»ã‚’å¾…ã£ã¦ã„ãŸã€‚çªç„¶éœ‡ãˆã‚‹å·¦æ‰‹ã®Androidç«¯æœ«ã€‚è‡ªç¤¾ã‹ã‚‰ã®é›»è©±ã ã€‚ é¡”ã‚’ã—ã‹ã‚ãªãŒã‚‰Næ°ã¯ã€é€šè©±ã‚’å§‹ã‚ãŸã€‚ã©ã†ã‚„ã‚‰ç¤¾å†…ã§ãƒˆãƒ©ãƒ–ãƒ«ãŒã‚ã£ãŸã‚‰ã—ã„ã€‚ã—ã‹ã—å•†è«‡ã®æ™‚é–“ã‚‚ã›ã¾ã£ã¦ãŠã‚Šã€é›»è»Šã«ä¹—ã‚Šè¾¼ã¾ãªãã¦ãªã‚‰ãªã„ãƒ»ãƒ»ãƒ»ã€‚ å‡ºå…ˆã‹ã‚‰ã§ã‚ã£ã¦ã‚‚ã€ç¤¾å†…æƒ…å ±ã®ãƒžãƒ¡ãªãƒã‚§ãƒƒã‚¯ã¯å¿…è¦ã€‚ä»Šã‚„å½“ç„¶ã®ãƒ“ã‚¸ãƒã‚¹ã‚¹ã‚¿ã‚¤ãƒ«ã ã€‚ã ãŒiPhoneã‚„Androidæè¼‰æ©Ÿå™¨ã¨ã„ã£ãŸã‚¹
chanpon0 2011/03/11
Android

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚ã¨ã§è¦‹ã‚‹
ãƒªãƒ³ã‚¯
PHPã§ç°¡å˜ã«é…åˆ—ã®å€¤ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã™ã‚‹æ–¹æ³• - ã·ãŽãŒã½ãŽ
PHPã¨ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS)ã‚’ç™ºç”Ÿã—ãªã„ã‚ˆã†ã«ã™ã‚‹ã«ã¯å‡ºåŠ›æ™‚ã«é©åˆ‡ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã•ã›ã‚‹ã¨ã„ã†ã®ã¯ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é–‹ç™ºã™ã‚‹äººãŸã¡ã«ã¨ã£ã¦ã¯ä»Šã¯å¸¸è˜ã¨ãªã£ã¦ã„ã¾ã™ã€‚ ã—ã‹ã—ã€PHPã®ã‚ˆã†ã«ã€HTMLã«åŸ‹ã‚è¾¼ã‚“ã§åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ãªè¨€èªžã§ã¯ã¤ã„ã€Œã†ã£ã‹ã‚Šã€ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã‚’å¿˜ã‚Œã¦ã—ã¾ã„XSSãŒ..ã¨ã„ã†ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ CakePHPã‚„symfonyãªã©ã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã‚’ä½¿ã£ã¦ã„ã‚Œã°ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯å´ã§é©åˆ‡ã«å‡¦ç†ã•ã›ã‚‹äº‹ãŒå¯èƒ½ã§ã™ãŒã€ãã†ã„ã£ãŸãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã‚’ä½¿ã£ã¦ã„ãªã„ã¨ãã«ã§ãã‚‹ã ã‘ç°¡å˜ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—å‡¦ç†ã™ã‚‹æ–¹æ³•ã®ï¼‘ã¤ã‚’ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ æœ€çµ‚çš„ãªã‚µãƒ³ãƒ—ãƒ« ã©ã†ã‚„ã£ã¦å®Ÿç¾ã™ã‚‹ã‹ã¯å¾Œã«ã—ã¦å®Ÿéš›ã®ã‚µãƒ³ãƒ—ãƒ«ã§ã©ã®ã‚ˆã†ãªå‹•ä½œã«ãªã‚‹ã‹ã‚’ã¿ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ <?php $str = '<script>alert("test")</script>'; $t
chanpon0 2010/12/18
é…åˆ—ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—

ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—

php

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

xss
ãƒªãƒ³ã‚¯
1