[B! Security][golang] clavierã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

clavier id:clavier

Securityã¨golangã«é–¢ã™ã‚‹clavierã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Goã§ã‚»ã‚ãƒ¥ã‚¢ã«ãƒã‚®ãƒ³ã‚°ã™ã‚‹zlog
TL; DR Goã§ç§˜åŒ¿å€¤ã‚’ãƒã‚°ã«å‡ºåŠ›ã—ãªã„ã‚ˆã†ã«ã™ã‚‹ zlog ã¨ã„ã†ãƒã‚¬ãƒ¼ã‚’ä½œã‚Šã¾ã—ãŸã€‚ ä»¥ä¸‹ã€çµŒç·¯ã‚„ä½¿ã„æ–¹ã®èª¬æ˜Žã§ã™ã€‚ èƒŒæ™¯ï¼šã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã«ãŠã‘ã‚‹ãƒã‚®ãƒ³ã‚°ã¨ç§˜åŒ¿å€¤ã®å•é¡Œ Webã‚µãƒ¼ãƒ“ã‚¹ã‚’å«ã‚€å¤šãã®ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã®ã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ã€ã‚µãƒ¼ãƒ“ã‚¹ã®æŒ™å‹•ã«é–¢ã™ã‚‹ãƒã‚°ã‚’å‡ºåŠ›ãƒ»è¨˜éŒ²ã—ã¦ãŠãã®ãŒä¸€èˆ¬çš„ã§ã™ã€‚ç¶™ç¶šçš„ã«ãƒã‚°ã‚’å‡ºåŠ›ã—ã¦ãŠãã“ã¨ã§ã€ãƒˆãƒ©ãƒ–ãƒ«ã‚·ãƒ¥ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚„ãƒ‡ãƒãƒƒã‚°ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã®å¯¾å¿œã‚„ç›£æŸ»ã€æ€§èƒ½æ”¹å–„ã®æ‰‹ãŒã‹ã‚Šãªã©ã«æ´»ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãƒã‚°ã«å«ã¾ã‚Œã‚‹æƒ…å ±ãŒå¤šã„ã»ã©å•é¡Œã‚’è§£æ±ºã™ã‚‹ãŸã‚ã®æ‰‹ãŒã‹ã‚ŠãŒå¢—ãˆã‚‹ãŸã‚ã€ï¼ˆé™åº¦ã¯ã‚ã‚‹ã‚‚ã®ã®ï¼‰ãªã‚‹ã¹ãå¤šãã®æƒ…å ±ã‚’æŽ²è¼‰ã™ã‚‹ã€ã‚ã‚‹ã„ã¯è¨å®šã«ã‚ˆã£ã¦æƒ…å ±é‡ã‚’å¢—ã‚„ã›ã‚‹ã‚ˆã†ã«ã—ã¦ãŠãã¨ä¾¿åˆ©ã§ã™ã€‚ ã—ã‹ã—ä¸€æ–¹ã§ã€ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã§å‡ºåŠ›ã™ã‚‹ã®ã¯æœ›ã¾ã—ããªã„æƒ…å ±ã‚‚ã‚ã‚Šã¾ã™ã€‚ èªè¨¼ã«åˆ©ç”¨ã•ã‚Œã‚‹æƒ…å ±ï¼šãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€APIãƒˆãƒ¼ã‚¯ãƒ³ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒˆãƒ¼ã‚¯ãƒ³ãªã©ã€ãã‚Œã‚’ä½¿ã†ã“ã¨ã§åˆ¥ã®
clavier 2021/11/06
golang

logging

ã‚ã¨ã§èªã‚€

security
ãƒªãƒ³ã‚¯
è©³èª¬ OCIã‚³ãƒ³ãƒ†ãƒŠãƒ©ãƒ³ã‚¿ã‚¤ãƒ youki@ç¬¬15å›ž ã‚³ãƒ³ãƒ†ãƒŠæŠ€è¡“ã®æƒ…å ±äº¤æ›ä¼š
https://github.com/containers/youki/tree/f1acccb65452252556713683557e587379399246 https://github.com/opencontainers/runc/tree/v1.0.2
clavier 2021/11/03
container

golang

rust

linux

security
ãƒªãƒ³ã‚¯
Let's EncryptãŒã¯ã¾ã£ãŸGolangã®è½ã¨ã—ç©´ - ã¼ã¡ã¼ã¡æ—¥è¨˜
0. çŸã„ã¾ã¨ã‚ 300ä¸‡ä»¥ä¸Šã®è¨¼æ˜Žæ›¸ã®å¤±åŠ¹ã‚’è¿«ã‚‰ã‚ŒãŸLet's Encryptã®ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã¯ã€ŒGolangã§ã‚ˆãã‚ã‚‹é–“é•ã„ã€ã¨æ›¸ã‹ã‚Œã¦ã„ã‚‹ã‚ˆã†ãªãƒã‚°ãŒåŽŸå› ã§ã—ãŸã€‚ 1. ã¯ã˜ã‚ã«ã€ Let's Encryptã¯ã€ç„¡æ–™ã§ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’è‡ªå‹•åŒ–ã—ã¦ç™ºè¡Œã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’è¡Œã†éžå–¶åˆ©å›£ä½“ã¨ã—ã¦2014å¹´ã«è¨ç«‹ã•ã‚Œã¾ã—ãŸã€‚ 2015å¹´ã«ã‚µãƒ¼ãƒ“ã‚¹é–‹å§‹ã•ã‚Œã‚‹ã¨è¨¼æ˜Žæ›¸ã®ç™ºè¡Œæ•°ã¯ãã‚“ãã‚“ä¼¸ã³ã€å…ˆæœˆæœ«ã®ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ã§ã¯ç´¯è¨ˆ10å„„æžšã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ãŸã“ã¨ãŒã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã•ã‚Œã¾ã—ãŸã€ŒLet's Encrypt Has Issued a Billion Certificatesã€ã€‚CTLogã®èª¿æŸ»ã‹ã‚‰ã€2020å¹´2æœˆæœ«ã®æ™‚ç‚¹ã§ã¯æœ‰åŠ¹ãªå…¨è¨¼æ˜Žæ›¸ã®38.4%ãŒLet's Encryptã®è¨¼æ˜Žæ›¸ã§ã‚ã‚‹ã¨ã¿ã‚‰ã‚Œã¦ã„ã¾ã™ã€ŒCertificate Validity Datesã€ã€‚ ç„¡æ–™ã®è¨¼æ˜Žæ›¸ã‚’æä¾›ã—ã¦ã‚‚ã‚‰ãˆã‚‹ã®ã¯éžå¸¸ã«å¬‰ã—
clavier 2020/03/10
golang

security
ãƒªãƒ³ã‚¯
The Illustrated TLS Connection: Every Byte Explained
The session begins with the client saying "Hello". The client provides the following: protocol version client random data (used later in the handshake) an optional session id to resume a list of cipher suites a list of compression methods a list of extensions TLS sessions are broken into the sending and receiving of "records", which are blocks of data with a type, a protocol version, and a length.
clavier 2020/01/01
TLS

golang

visualization

security
ãƒªãƒ³ã‚¯
OWASP/Go-SCPã‚’èªã‚“ã§ã‚»ã‚ãƒ¥ã‚¢ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã¨Goã‚’å¦ã¶ - My External Storage
ã“ã®è¨˜äº‹ã¯Go Advent Calendar 2019ã®4æ—¥ç›®ã®è¨˜äº‹ã«ãªã‚‹ã€‚ 3æ—¥ç›®ã¯@ikawahaã•ã‚“ã®ã€ŒGoa v3 ã®ãƒ†ã‚¹ãƒˆã‚’ã‚·ãƒ¥ãƒƒã¨ã™ã‚‹]ã€ã ã£ãŸã€‚ æœ¬è¨˜äº‹ã§ã¯Open Web Application Security Projectï¼ˆOWASP)ãŒå…¬é–‹ã—ã¦ã„ã‚‹Go-SCPãƒªãƒã‚¸ãƒˆãƒªã‚’ç´¹ä»‹ã™ã‚‹ã€‚ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼‰ã‚„ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆCSRFï¼‰ãªã©ã€æ§˜ã€…ãªè„†å¼±æ€§ãŒæ½œã‚€å¯èƒ½æ€§ãŒã‚ã‚‹ã€‚ è„†å¼±æ€§å¯¾ç–ã®æ›¸ç±ã¨ã—ã¦ã¯ã€ä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ï¼ˆå¾³ä¸¸æœ¬ï¼‰ãªã©ãŒæœ‰åã ã‚ã†ã€‚ Go-SCPãƒªãƒã‚¸ãƒˆãƒªã«ã¯Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿè£…ã™ã‚‹éš›ã«å¿…è¦ãªè„†å¼±æ€§ã®çŸ¥è˜ã¨ã€Goã‚’ä½¿ã£ãŸè„†å¼±æ€§å¯¾ç–ã®å®Ÿè£…æ–¹æ³•ãŒå«ã¾ã‚Œã¦ã„ã‚‹ã€‚ https://github.com/OWASP/Go-SCP TL;DR OWASPã¨ã„ã†WEB
clavier 2019/12/04
security

golang

owasp
ãƒªãƒ³ã‚¯
GopherCon Russia 2019 - Security Checklist for a Go Developer
Video (Russian, original): https://youtu.be/7g90BhAzWtk Video (English, translated): https://youtu.be/I3O9WOixg28 Security Checklist for a Go Developer Elena Grahovac GopherCon Russia 2019
clavier 2019/04/21
Security

golang
ãƒªãƒ³ã‚¯
Goãªã©ã§ä½œã‚‹è„†å¼±æ€§å¯¾ç–ã‚²ãƒ¼ãƒ / go-bigbridge
@Fukuoka.go #11 https://fukuokago.connpass.com/event/87684/
clavier 2018/06/20
golang

security
ãƒªãƒ³ã‚¯
1