[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] d6rkaizã®ãƒ

d6rkaiz id:d6rkaiz

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹d6rkaizã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (86)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æ–°MacBook Proï¼ˆM3ï¼‰ã§ã‚‚æ©Ÿå¯†æƒ…å ±ãŒæ¼ãˆã„ã€€2020å¹´ä»¥é™ã®Appleè£½å“å…¨ã¦ã«è„†å¼±æ€§ã€€ç±³å›½ãƒãƒ¼ãƒ ãŒç™ºè¡¨
ã“ã®ã‚³ãƒ¼ãƒŠãƒ¼ã§ã¯ã€2014å¹´ã‹ã‚‰å…ˆç«¯ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ã®ç ”ç©¶ã‚’è«–æ–‡å˜ä½ã§è¨˜äº‹ã«ã—ã¦ã„ã‚‹Webãƒ¡ãƒ‡ã‚£ã‚¢ã€ŒSeamlessã€ï¼ˆã‚·ãƒ¼ãƒ ãƒ¬ã‚¹ï¼‰ã‚’ä¸»å®°ã™ã‚‹å±±ä¸‹è£•æ¯…æ°ãŒåŸ·ç†ã€‚æ–°è¦æ€§ã®é«˜ã„ç§‘å¦è«–æ–‡ã‚’å±±ä¸‹æ°ãŒãƒ”ãƒƒã‚¯ã‚¢ãƒƒãƒ—ã—ã€è§£èª¬ã™ã‚‹ã€‚ Twitter: ï¼ shiropen2 ç±³ã‚¸ãƒ§ãƒ¼ã‚¸ã‚¢å·¥ç§‘å¤§å¦ãªã©ã«æ‰€å±žã™ã‚‹ç ”ç©¶è€…ã‚‰ãŒç™ºè¡¨ã—ãŸè«–æ–‡ã€ŒiLeakage: Browser-based Timerless Speculative Execution Attacks on Apple Devicesã€ã¯ã€Macã€iPadã€iPhoneãªã©ã®Appleè£½å“ã«æè¼‰ã®Safariã‚’æ¨™çš„ã¨ã—ãŸã‚µã‚¤ãƒ‰ãƒãƒ£ãƒãƒ«æ”»æ’ƒã«é–¢ã™ã‚‹ç ”ç©¶å ±å‘Šã§ã‚ã‚‹ã€‚ ã“ã®æ”»æ’ƒã¯ã€æœ€è¿‘ç™ºå£²ã•ã‚ŒãŸM3ãƒãƒƒãƒ—ã‚’æè¼‰ã—ãŸæ–°åž‹MacBook Proã§ã‚‚æˆåŠŸã—ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®æ›´æ–°çŠ¶æ³ã«é–¢ã‚ã‚‰ãšã€Appleè£½å“ã«ã¨ã£ã¦ä¾ç„¶ã¨ã—ã¦è„…å¨ã§ã‚ã‚‹ã“ã¨ã‚’ç¤ºã—ãŸã€‚ ã€ŒiLeakageã€
d6rkaiz 2023/11/30
apple

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Safari

javascript
ãƒªãƒ³ã‚¯
Pixelã§ç·¨é›†ã—ãŸç”»åƒâ†’å…ƒç”»åƒã‚’å¾©å…ƒã§ãã‚‹ã“ã¨ãŒåˆ¤æ˜Žã—ã¦é¨’å‹•ã«ã€‚å®Ÿè¨¼ãƒ„ãƒ¼ãƒ«ã‚‚å…¬é–‹ã€ã‚„ã˜ã†ã¾Watchã€‘
d6rkaiz 2023/03/20
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
macOSã«å‚™ã‚ã‚‹è¤‡æ•°ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å±¤ã‚’çªç ´ã—ã¦ã™ã¹ã¦ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’èªã¿å–ã‚‹ã“ã¨ãŒã§ãã‚‹è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚Œã‚‹
AppleãŒé–‹ç™ºã™ã‚‹macOSã«ç”¨æ„ã•ã‚Œã¦ã„ã‚‹è¤‡æ•°ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¬ã‚¤ãƒ¤ãƒ¼ã‚’çªç ´ã—ã€Macã«å˜åœ¨ã™ã‚‹ã™ã¹ã¦ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’èªã¿å–ã£ãŸã‚Šã‚¦ã‚§ãƒ–ã‚«ãƒ¡ãƒ©ã‚’åˆ¶å¾¡ã—ãŸã‚Šã§ãã‚‹è„†å¼±æ€§ã‚’ã€ã‚ªãƒ©ãƒ³ãƒ€ã«æ‹ ç‚¹ã‚’ç½®ãã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ãƒ»Computestã®ç ”ç©¶éƒ¨é–€ã§ã‚ã‚‹Sector 7ã®ç ”ç©¶è€…ãŒç™ºè¦‹ã—ã¾ã—ãŸã€‚ Process injection: breaking all macOS security layers with a single vulnerability Â· Sector 7 https://sector7.computest.nl/post/2022-08-process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability/ A Single Flaw Broke Every Layer of Sec
d6rkaiz 2022/08/17
macOS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
iPhoneã‹ã‚‰å‰Šé™¤ã—ã‚ˆã†ï¼ äººæ°—1ä½ã ã£ãŸPDFã‚¢ãƒ—ãƒªã«ãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒæ½œã‚“ã§ã„ãŸ | ãƒ©ã‚¤ãƒ•ãƒãƒƒã‚«ãƒ¼ãƒ»ã‚¸ãƒ£ãƒ‘ãƒ³
iPhone 15 Pro MaxãŒ4.7ä¸‡å††OFFã®è¡æ’ƒã€‚åž‹è½ã¡ã§ã‚‚ã„ã„ãªã‚‰å³ãƒãƒOKã§ã™ #Amazonåˆå£²ã‚Š
d6rkaiz 2022/08/15
åŽŸæ–‡ https://www.macobserver.com/news/fraudulent-chinese-apps-elude-apples-strict-mac-app-store-review-process/

macOS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ãƒ‡ãƒã‚¤ãƒˆ ãƒˆãƒ¼ãƒžãƒ„ ã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°åˆåŒä¼šç¤¾ãŒå½“ç¤¾ã®ç§˜å¯†æƒ…å ±ã‚’æ¼æ´©ã—ãŸä»¶ï¼ˆPDFï¼‰ | ã‚¤ã‚ªãƒ³æ ªå¼ä¼šç¤¾
d6rkaiz 2022/06/18
ãƒ‡ãƒˆãƒã‚¤ãƒˆãƒˆãƒ¼ãƒžãƒ„è¦šãˆã¦ãŠã“ã†ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

æƒ…å ±æ¼æ´©
ãƒªãƒ³ã‚¯
ã»ã¨ã‚“ã©ã®CPUã‹ã‚‰ãƒªãƒ¢ãƒ¼ãƒˆã§æš—å·åŒ–ã‚ãƒ¼ã‚’å¥ªå–ã§ãã‚‹æ”»æ’ƒæ‰‹æ³•ã€ŒHertzbleed Attackã€ãŒç™ºè¡¨ã•ã‚Œã‚‹
ã‚¢ãƒ¡ãƒªã‚«ã®è¤‡æ•°å¤§å¦ã‹ã‚‰ãªã‚‹ç ”ç©¶ãƒãƒ¼ãƒ ãŒå…¨ã¦ã®Intelè£½CPUãŠã‚ˆã³è¤‡æ•°ã®AMDè£½CPUã‚’å¯¾è±¡ã«ã—ãŸã‚µã‚¤ãƒ‰ãƒãƒ£ãƒãƒ«æ”»æ’ƒã®æ–°æ‰‹æ³•ã€ŒHertzbleed Attackã€ã‚’å…¬è¡¨ã—ã¾ã—ãŸã€‚ç ”ç©¶ãƒãƒ¼ãƒ ã¯Hertzbleed Attackã‚’ç”¨ã„ã‚‹ã“ã¨ã§æ”»æ’ƒå¯¾è±¡CPUã®æš—å·åŒ–ã‚’çªç ´ã§ãã‚‹ã¨ä¸»å¼µã—ã¦ãŠã‚Šã€Intelã¨AMDã¯å¯¾ç–æ–¹æ³•ã‚’ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã—ã¦ã„ã¾ã™ã€‚ Hertzbleed Attack https://www.hertzbleed.com/ â—†Hertzbleed Attackã¯ã©ã‚“ãªæ”»æ’ƒãªã®ã‹ Hertzbleed Attackã¯CPUãŒè¨ˆç®—å‡¦ç†ã‚’è¡Œã†éš›ã®æ¶ˆè²»é›»åŠ›ã‚’åˆ†æžã™ã‚‹ã“ã¨ã§æš—å·åŒ–ã‚ãƒ¼ã‚’å¥ªå–ã™ã‚‹æ”»æ’ƒæ‰‹æ³•ã§ã™ã€‚æ¶ˆè²»é›»åŠ›ã®åˆ†æžã«ã‚ˆã£ã¦æ©Ÿå¯†æƒ…å ±ã‚’ç›—ã¿å‡ºã™æ‰‹æ³•(å˜ç´”é›»åŠ›è§£æž)ã¯å¤ãã‹ã‚‰ç ”ç©¶ã•ã‚Œã¦ã„ã¾ã—ãŸãŒã€å˜ç´”é›»åŠ›è§£æžã§ã¯æ”»æ’ƒå¯¾è±¡ã®æ¶ˆè²»é›»åŠ›ã‚’é«˜ã„ç²¾åº¦ã§æ¸¬å®šã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã—ãŸã€‚ã—ã‹ã—ã€ä»Šå›žç™ºè¡¨ã•ã‚ŒãŸH
d6rkaiz 2022/06/16
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
[PDF]æˆ‘ãŒå›½ã®å…¬çš„æ©Ÿé–¢ã‚„ä¼æ¥ç‰ã®å½ã‚µã‚¤ãƒˆã«ã”æ³¨æ„ãã ã•ã„ï¼ˆæ³¨æ„å–šèµ·ï¼‰ / ä»¤å’Œ4å¹´6æœˆ15æ—¥ å†…é–£å®˜æˆ¿å†…é–£ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼
d6rkaiz 2022/06/16
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
macOS 13 Venturaã‚„iOS 16ã§ã¯CAPTCHAã®ä»£ã‚ã‚Šã«Private Access Tokenã‚’åˆ©ç”¨ã—ãŸè¨¼æ˜ŽãŒå¯èƒ½ã«ã€‚
macOS 13 Venturaã‚„iOS 16ã§ã¯CAPTCHAsã®ä»£ã‚ã‚Šã«Private Access Tokensã‚’åˆ©ç”¨ã—ãŸè¨¼æ˜ŽãŒå¯èƒ½ã«ãªã‚‹ãã†ã§ã™ã€‚è©³ç´°ã¯ä»¥ä¸‹ã‹ã‚‰ã€‚ ç¾åœ¨ã€ãƒã‚°ã‚¤ãƒ³ã‚’å¿…è¦ã¨ã™ã‚‹å¤šãã®ã‚µã‚¤ãƒˆã§ã€ãƒã‚°ã‚¤ãƒ³ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒãƒœãƒƒãƒˆã§ã¯ãªãæœ¬å½“ã®äººé–“ã‹ã‚’åˆ¤æ–ã™ã‚‹ãŸã‚ã€äººé–“ã—ã‹åˆ¤å®šã§ããªã„æ–‡å—ã‚’è¡¨ç¤ºã—ã¦å…¥åŠ›ã•ã›ãŸã‚Šã€ç”»åƒä¸ã‹ã‚‰è»Šã‚„å‹•æ¤ç‰©ã€é“è·¯æ¨™è˜ãªã©ã®ç‰¹å®šã®ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‚’å«ã‚€ã‚¨ãƒªã‚¢ã‚’é¸æŠžã•ã›ã‚‹ã€ŒCAPTCHA* (ç§ã¯ãƒãƒœãƒƒãƒˆã§ã¯ã‚ã‚Šã¾ã›ã‚“)ã€ãƒ†ã‚¹ãƒˆãŒåˆ©ç”¨ã•ã‚Œã¦ã„ã¾ã™ãŒã€ *Completely Automated Public Turing test to tell Computers and Humans Apart (å®Œå…¨ã«è‡ªå‹•åŒ–ã•ã‚ŒãŸã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã¨äººé–“ã‚’åŒºåˆ¥ã™ã‚‹å…¬é–‹ãƒãƒ¥ãƒ¼ãƒªãƒ³ã‚°ãƒ†ã‚¹ãƒˆ) WWDC22ã®ã€ŒReplace CAPTCHAs with Private Access
d6rkaiz 2022/06/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

CAPTCHA
ãƒªãƒ³ã‚¯
ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ï¼šã‚ªãƒ¼ãƒ—ãƒ³ã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ã§iPhoneã‚„Macã®CAPTCHAã‚’æŽ’é™¤ã™ã‚‹
æœ¬æ—¥ã€å½“ç¤¾ã¯ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç™ºè¡¨ã—ã¾ã—ãŸã€‚ã“ã‚Œã¯ã€æœ¬ç‰©ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒãŠå®¢æ§˜ã®ã‚µã‚¤ãƒˆã‚’è¨ªã‚Œã¦ã„ã‚‹ã“ã¨ã‚’æ¤œè¨¼ã™ã‚‹ã€å®Œå…¨ã«ä¸å¯è¦–ã§ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆãªæ–¹æ³•ã§ã™ã€‚macOSã¾ãŸã¯iOSã®æ¬¡æœŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ãªã©ã€ã“ã‚Œã‚‰ã®ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹è¨ªå•è€…ã¯ã€CAPTCHAã‚’å®Œäº†ã—ãŸã‚Šå€‹äººãƒ‡ãƒ¼ã‚¿ã‚’æä¾›ã™ã‚‹ã“ã¨ãªãã€è‡ªåˆ†ãŒäººé–“ã§ã‚ã‚‹ã“ã¨ã‚’è¨¼æ˜Žã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ã“ã‚Œã«ã‚ˆã‚Šã€ã“ã‚Œã‚‰ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«æä¾›ã•ã‚Œã‚‹CAPTCHAã®ã»ã¼100%ãŒæŽ’é™¤ã•ã‚Œã¾ã™ã€‚ ã“ã‚Œã¯ã©ã†ã„ã†ã“ã¨ãªã®ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å ´åˆï¼š å½“ç¤¾ã¯ã€ãŠå®¢æ§˜ã®ãƒ¢ãƒã‚¤ãƒ«Webä½“é¨“ã‚’ã‚ˆã‚Šå¿«é©ã«ã™ã‚‹ã¨åŒæ™‚ã«ã€ä»–ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚ˆã‚Šã‚‚ã•ã‚‰ã«ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆãªã‚‚ã®ã«ã—ã¾ã™ã€‚ ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹iOSã¾ãŸã¯Macãƒ‡ãƒã‚¤ã‚¹(ãã®ä»–ã®ãƒ‡ãƒã‚¤ã‚¹ã¯è¿‘æ—¥å…¬é–‹äºˆå®šï¼)ãŒCloudflareãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹éš›ã«CAPT
d6rkaiz 2022/06/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

CAPTCHA
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒžãƒãƒ¼ã‚¸ãƒ£ã®LastPassã¨1PasswordãŒç›¸æ¬¡ã„ã§FIDO/WebAuthnã¸ã®å¯¾å¿œã‚’ç™ºè¡¨ã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹ã®æ™‚ä»£ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒžãƒãƒ¼ã‚¸ãƒ£ã®å˜åœ¨æ„ç¾©ã¯ã©ã†ãªã‚‹ã®ã‹ï¼Ÿ
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒžãƒãƒ¼ã‚¸ãƒ£ã®LastPassã¨1PasswordãŒç›¸æ¬¡ã„ã§FIDO/WebAuthnã¸ã®å¯¾å¿œã‚’ç™ºè¡¨ã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ¬ã‚¹ã®æ™‚ä»£ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒžãƒãƒ¼ã‚¸ãƒ£ã®å˜åœ¨æ„ç¾©ã¯ã©ã†ãªã‚‹ã®ã‹ï¼Ÿ LastPassã¨1PasswordãŒç›¸æ¬¡ã„ã§FIDO/WebAuthnã¸ã®å¯¾å¿œã‚’ç™ºè¡¨ã—ã¾ã—ãŸã€‚ Passwordless is possible. Introducing Passwordless login by LastPass. The first password manager committed to a FIDO-supported #Passwordless future. Learn more: https://t.co/8UKhZPrkcZ pic.twitter.com/Nzk3F7payK â€” LastPass (@LastPass) June 6, 2022 Weâ€™ve joined
d6rkaiz 2022/06/13
èªè¨¼

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
GitHub ã® OAuth å®Ÿè£…ã®ä»•æ§˜é•åã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®è€ƒæ…®äº‹é … - Qiita
æœ¬ç¨¿ã¯ GitHub Docs ã® "Authorizing OAuth Apps" ãƒšãƒ¼ã‚¸ã«æ›¸ã‹ã‚Œã¦ã„ã‚‹æƒ…å ±ã«åŸºã¥ã„ã¦ã„ã¾ã™ã€‚è‹±èªžç‰ˆã¯ã“ã¡ã‚‰ â†’ "Spec Violations in GitHub OAuth Implementation and Security Considerations" ä»•æ§˜é•åç®‡æ‰€ èªå¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã® response_type ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãƒ¼ãŒãªã„ã€‚å½“ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãƒ¼ã¯å¿…é ˆã§ã‚ã‚‹ã€‚RFC 6749 (The OAuth 2.0 Authorization Framework) Section 4.1.1 (Authorization Request) å‚ç…§ã€‚ ãƒˆãƒ¼ã‚¯ãƒ³ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆãŒ application/x-www-form-urlencoded ã®ã‚ˆã†ã§ã‚ã‚‹ã€‚ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã¯å¸¸ã« application/json ã§ãªã‘ã‚Œã°ãªã‚‰ãª
d6rkaiz 2022/04/20
OAuth

github

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Herokuã®OAuthãƒˆãƒ¼ã‚¯ãƒ³æµå‡ºã§ã€ã‚„ã£ã¦ãŠãã¨ã„ã„ã“ã¨ãƒªã‚¹ãƒˆï¼ˆã‚³ãƒ¡ãƒ³ãƒˆå¤§æ“è¿Žï¼‰
2022å¹´4æœˆ16æ—¥(æ—¥æœ¬æ™‚é–“)ã«ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ãŒã‚ã£ãŸã€Heroku/Travis-CIã®OAuthãƒˆãƒ¼ã‚¯ãƒ³ã®æµå‡ºãŠã‚ˆã³æ‚ªç”¨ã‚’å—ã‘ã¦ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã—ã¦ã‚„ã£ã¦ãŠãã¨ã„ã„ã“ã¨ã‚’ã¾ã¨ã‚ã¾ã—ãŸã€‚ GitHubã®Organizationã®ã‚ªãƒ¼ãƒŠãƒ¼å‘ã‘ã¨å€‹äººå‘ã‘ã§åˆ†ã‘ã¦ã‚ã‚Šã¾ã™ã€‚ è¿½è¨˜: è¤‡æ•°ã®è£œè¶³ã®ã‚³ãƒ¡ãƒ³ãƒˆã‚’é ‚ãã€è¨˜äº‹ã«ã‚‚å–ã‚Šè¾¼ã‚“ã§ã„ã¾ã™ã€‚ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ï¼ æ³¨æ„ åŸ·ç†è€…ã¯GitHub, Heroku, Travis-CIã®å°‚é–€å®¶ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã“ã®è¨˜äº‹ã¯èª¤ã£ã¦ã„ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ã“ã®è¨˜äº‹ã¯ç¾åœ¨èª¿æŸ»ä¸ã®å•é¡Œã«ã¤ã„ã¦æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚æœ€æ–°æƒ…å ±ã¯å¿…ãšå…¬å¼ã‚µã‚¤ãƒˆã‚’ã”ç¢ºèªãã ã•ã„ã€‚ GitHub Heroku Travis CI ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã®æ¦‚è¦ GitHubãŒHerokuã¨Travis-CIã®OAuthã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ç™ºè¡Œã—ãŸãƒˆãƒ¼ã‚¯ãƒ³ãŒæµå‡ºãƒ»æ‚ªç”¨ã—ãŸã“ã¨ã§ã€ãã‚Œã‚‰ã®é€£æºãŒæœ‰åŠ¹ã ã£ãŸå¤šãã®Organi
d6rkaiz 2022/04/17
heroku

github

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

OAuth
ãƒªãƒ³ã‚¯
RSAã«å¯¾ã™ã‚‹ãƒ•ã‚§ãƒ«ãƒžãƒ¼æ”»æ’ƒ - Qiita
ã¯ã˜ã‚ã«ï¼ˆIntroductionï¼‰ RSAã®éµãƒšã‚¢ã®ç”Ÿæˆæ–¹æ³•ã«ãƒŸã‚¹ãŒã‚ã‚Šè„†å¼±æ€§ã¨ãªã£ã¦ã—ã¾ã£ãŸå®Ÿè£…ä¾‹ãŒã‚ã£ãŸã‚ˆã†ã§ã™ã€‚ å…ƒã®æ–‡çŒ®ã‚’æ©Ÿæ¢°ç¿»è¨³ï¼ˆã¡ã‚‡ã£ã¨ä¿®æ£ï¼‰ã—ã¦ã¿ã¾ã™ã€‚ åŽŸæ–‡ã®ãƒ‡ãƒ¢ã‚’ã‚„ã£ã¦ã¿ãŸã¨ã“ã‚ã€æ¡ˆå¤–å‹•ã„ãŸã®ã§å…ˆã«ãƒ‡ãƒ¢ã‚’è¨˜ã—ã¾ã™ã€‚ ãƒ‡ãƒ¢ï¼ˆDemoï¼‰ ã¾ãšã¯ã€ç´ æ•°$p$ã¨$q$ã‚’ç”Ÿæˆã—ã¦$N$ã‚’æ±‚ã‚ã‚‹ã¨ã“ã‚ã§ã™ã€‚ â€»ï¼šéµé•·ãŒ2048bitãªã®ã§å¤šå°‘æ™‚é–“ãŒã‹ã‹ã‚Šã¾ã™ã€‚ å•é¡Œã¨ãªã£ãŸãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒã“ã®ã‚ˆã†ãªãƒã‚¸ãƒƒã‚¯ã§ã‚ã£ãŸã‹ã¯ä¸æ˜Žã§ã™ãŒã€ç¿»è¨³ã—ãŸè³‡æ–™ã‚’å‚è€ƒã«ä½œæˆã—ã¦ã„ã¾ã™ã€‚ import random as rnd import sympy key_length = 2048 distance = 10000 p = 0 q = 0 # ä¹±æ•°Xã‚’ç”Ÿæˆã™ã‚‹ã€‚ X = rnd.randrange(2, pow(2, key_length)) for i in range(distance): #
d6rkaiz 2022/03/20
ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ

RSA

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
è„†å¼±æ€§æƒ…å ±å…±æœ‰ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ - MyJVN ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãƒã‚§ãƒƒã‚«
MyJVN ã«ã‚ˆã†ã“ã MyJVN ã¯ JVN iPediaã®æƒ…å ±ã‚’ã€åˆ©ç”¨è€…ãŒåŠ¹çŽ‡çš„ã«æ´»ç”¨ã—ã¦é ‚ã‘ã‚‹ã‚ˆã†ã«ã€ è„†å¼±æ€§å¯¾ç–æƒ…å ±ã‚’åŠ¹çŽ‡çš„ã«åŽé›†ã—ãŸã‚Šã€åˆ©ç”¨è€…ã®PCä¸Šã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚ŒãŸã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ è£½å“ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’å®¹æ˜“ã«ãƒã‚§ãƒƒã‚¯ã™ã‚‹ç‰ã®æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹ä»•çµ„ã¿ï¼ˆãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ï¼‰ã§ã™ã€‚
d6rkaiz 2009/12/27
Windows

è„†å¼±æ€§

ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ãƒ‰ãƒƒãƒˆ ã‚¸ãƒ£ãƒ‘ãƒ³ | æ£ã—ã„CSRFå¯¾ç–ã€ã—ã¦ã¾ã™ã‹ï¼Ÿ
ã‚ã‚‹Anonymous Cowardæ›°ãã€"æœ€è¿‘Webã‚¢ãƒ—ãƒªã®CSRFè„†å¼±æ€§ã¸ã®å¯¾ç–ãŒæ³¨ç›®ã•ã‚Œã¦ã„ã¾ã™ãŒã€30æ—¥ã«é‡‘åºŠæ°ãŒã€Œé–‹ç™ºè€…ã®ãŸã‚ã®æ£ã—ã„CSRFå¯¾ç–ã€ã¨ã„ã†ç§€é€¸ãªãƒ†ã‚ã‚¹ãƒˆã‚’ç™ºè¡¨ã—ã¦ãã‚Œã¾ã—ãŸã€‚ Googleã§ã€ŒCSRF å¯¾ç–ã€ã§æ¤œç´¢ã™ã‚‹ã¨é«˜æœ¨æµ©å…‰æ°ã®ã€Œã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆCSRFï¼‰ã®æ£ã—ã„å¯¾ç–æ–¹æ³•ã€ãŒãƒˆãƒƒãƒ—ã«å‡ºã¦ãã¾ã™ãŒã€é‡‘åºŠæ°ã«ã‚ˆã‚‹ã¨ã€ã“ã®æ–¹æ³•ã¯èª¤ã£ãŸå¯¾ç–ã§ã‚ã‚Šã€ŒCSSXSSè„†å¼±æ€§ãŒçŸ¥ã‚‰ã‚Œã¦ã„ã‚‹ç¾åœ¨ã§ã¯ã€çµ¶å¯¾ã«å®Ÿæ–½ã™ã¹ãã§ãªã„ã‚‚ã®ã€ã¨ã®ã“ã¨ã§ã™ã€‚ã“ã®å¯¾ç–ã¯ã€IPAã®ã€Œæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç™½æ›¸2006å¹´ç‰ˆã€ã‚„ã€Œç”¨èªžã€ŒCSRFã€@é³©ä¸¸ãã‚ã£ã•ã‚Š (ç”¨èªžé›†)ã€ã»ã‹æ›¸ç±ãªã©ã«ã‚‚æ›¸ã‹ã‚Œã¦ãŠã‚Šã€é‡‘åºŠæ°ã¯ã€Œè¨˜äº‹ã®å†…å®¹ã‚’è¨‚æ£ã—ã¦ã„ãŸã ããŸã„ã€ã¨ã—ã¦ã„ã¾ã™ã€‚ã‚¹ãƒ©ãƒ‰ã®é–‹ç™ºè€…ã®ã¿ãªã•ã‚“ã¯ãã¡ã‚“ã¨æ£ã—ã„CSRFå¯¾ç–ã‚’ã—ã¦ã„ã¾ã™ã‹ï¼Ÿ"
d6rkaiz 2009/12/19
è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

CSRF

Slashdot
ãƒªãƒ³ã‚¯
æ‹›å¾…ã•ã‚Œãšã«æ–°ã¯ã¦ãªãƒã‚¤ã‚¯(h2)ã‚’ä½¿ã†æ–¹æ³• - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
æ·±å¤œã«â€¦ ã“ã‚“ã«ã¡ã¯ã“ã‚“ã«ã¡ã¯ï¼ï¼ æœ¬æ—¥ã²ã£ãã‚Šã¨ãƒ™ãƒ¼ã‚¿ãƒ†ã‚¹ãƒˆãŒã‚¹ã‚¿ãƒ¼ãƒˆã—ãŸ æ–°ã¯ã¦ãªãƒã‚¤ã‚¯ ( http://h2.hatena.ne.jp/ ) ãªã‚“ã ã‘ã© ã“ã‚Œã£ã¦æ‹›å¾…åˆ¶ã‚‰ã—ãã¦ã€æ‹›å¾…çŠ¶ãŒå±Šã‹ãªã„ã“ã¨ã«ã¯ä¸ã«å…¥ã‚Œãªã„ã‚‰ã—ã„ã‚“ã§ã™â€¦ï¼ (ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã‚‚ http://h2.hatena.ne.jp/x ã«é£›ã°ã•ã‚Œã‚‹ã ã‘) æ®‹å¿µâ€¦ â€¦ã¨ã€æ€ã„ãã‚„â€¦ï¼ æ‹›å¾…ã•ã‚Œãªãã¦ã‚‚ä¸ã«å…¥ã‚‹æ–¹æ³•ãŒã€ã¡ã‚ƒã‚“ã¨ç”¨æ„ã•ã‚Œã¦ã„ãŸã¿ãŸã„ãªã®ã§ã€ ã“ã“ã§ã€ã‚ã‹ã‚Šã‚„ã™ããŠä¼ãˆã—ã¦ãŠãã¾ã™ãï¼ (ã‚‚ã—ã‹ã—ãŸã‚‰æœã«ã¯ä»•æ§˜å¤‰æ›´ã•ã‚Œã¦ã„ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã‹ã‚‰ã€èˆˆå‘³ãŒã‚ã‚‹ãªã‚‰æ—©ã‚ã«ã‚„ã£ã¦ãŠã„ãŸæ–¹ãŒã„ã„ã‹ã‚‚ï¼Ÿ) http://h2.hatena.ne.jp/(è‡ªåˆ†ã®ID)/setting.body_type ã«ã‚¢ã‚¯ã‚»ã‚¹ ã€Œã‹ã‚‰ã ã‚’ãˆã‚‰ã¶ã€ã¨ã„ã†ç”»é¢ã«ãªã‚‹ã®ã§ã€é©å½“ãªã‚‚ã®ã«ãƒã‚§ãƒƒã‚¯ã‚’ã¤ã‘ã¦ã€Œç€æ›¿ãˆã‚‹ã€ãƒœã‚¿ãƒ³ã‚’æŠ¼ã™ ã‚ã¨ã¯ã€Œãƒžã‚¤ãƒšãƒ¼ã‚¸ã€
d6rkaiz 2009/11/29
ã¯ã¦ãª

ãƒã‚¿

ã“ã‚Œã¯ã²ã©ã„

ã“ã‚Œã¯ã™ã”ã„

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
æŒ‡å®šã—ãŸå ´æ‰€ã«å‹•ããŒã‚ã£ãŸæ™‚ã ã‘é€šçŸ¥ã—ã¦ãã‚Œã‚‹ç›£è¦–ã‚«ãƒ¡ãƒ©ã‚¢ãƒ—ãƒªã€ŒVitamin Dã€ | ãƒ©ã‚¤ãƒ•ãƒãƒƒã‚«ãƒ¼ãƒ»ã‚¸ãƒ£ãƒ‘ãƒ³
æœ€è¿‘ã¯ã€Vitamin Dã¨åŒã˜ã‚ˆã†ã«ç„¡æ–™ã ã£ãŸã‚Šã€ã»ã¨ã‚“ã©ãŠé‡‘ãŒæŽ›ã‹ã‚‰ãšã«ä½¿ãˆã‚‹ç›£è¦–ã‚«ãƒ¡ãƒ©ã‚¢ãƒ—ãƒªãŒå¢—ãˆã¾ã—ãŸã€‚ã§ã™ãŒã€ãã®å¤šãã¯ã‚«ãƒ¡ãƒ©ã®æŽ¢çŸ¥æ©Ÿèƒ½ãŒã‚ã¾ã‚Šã«ã‚‚ä½Žã‹ã£ãŸã‚Šã€ã‚‚ã—ãã¯é€†ã«åå¿œãŒè‰¯éŽãŽãŸã‚Šã€ãªã‹ãªã‹èª¿åº¦è‰¯ã„ã‚‚ã®ã¯å°‘ãªã‹ã£ãŸã¨æ€ã„ã¾ã™ã€‚ã¡ã‚‡ã£ã¨é¢¨ãŒå¹ã„ã¦ã‚«ãƒ¼ãƒ†ãƒ³ãŒã‚†ã‚‰ã‚ã„ãŸã‚Šã€åºã«ã‚¹ã‚ºãƒ¡ãŒé£›ã‚“ã§æ¥ãŸã‚Šã—ãŸãã‚‰ã„ã§ã€ã„ã¡ã„ã¡ç›£è¦–ã‚«ãƒ¡ãƒ©ã®ç”»åƒã‚’æºå¸¯ã«é€ã£ã¦ã“ã‚‰ã‚Œã‚‹ã¨ã€è¿·æƒ‘ãƒ¡ãƒ¼ãƒ«ã‹ã¨æ€ã£ã¦ã—ã¾ã„ãã†ã§ã™ã€‚ ãã®ç‚¹Vitamin Dã¯ã€ç›£è¦–ã‚«ãƒ¡ãƒ©ã®ç”»é¢ã®ä¸ã§ç‰¹ã«é‡è¦ãªã‚¨ãƒªã‚¢ã¨ç‰©ä½“ã®å¤§ãã•ã‚’æŒ‡å®šã§ãã‚‹ã®ã§ã€ãã®ã‚¨ãƒªã‚¢ã®ä¸ã§æŒ‡å®šã—ãŸå¤§ãã•ä»¥ä¸Šã®ã‚‚ã®ãŒå‹•ã„ãŸå ´åˆã®ã¿ã€é€šçŸ¥ç”»åƒã‚’é€ã‚‹ã‚ˆã†ã«è¨å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ è¨å®šã®ä»•æ–¹ã¯ã„ãŸã£ã¦ç°¡å˜ã§ã™ã€‚è¨å®šã‚¦ã‚£ã‚¶ãƒ¼ãƒ‰ãŒå‡ºã¦ãã¾ã™ã®ã§ã€ãã®æŒ‡ç¤ºã«å¾“ã„ãªãŒã‚‰ã€Œãƒ‰ã‚¢ã‹ã‚‰äººãŒå‡ºã¦ã„ã£ãŸæ™‚ã€ã¨ã‹ã€Œè»ŠãŒé§è»Šã—ãŸæ™‚ã€ãªã©ã®è¨å®šã‚’ã™ã‚Œã°ã„ã„ã®ã§ã™ã€‚è¨å®šã®ãƒ‡ãƒ¢å‹•ç”»ã‚‚ã‚ã‚Šã¾ã™
d6rkaiz 2009/11/20
ã‚«ãƒ¡ãƒ©

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ç›£è¦–
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ã®é—˜ã„ ç›®æ¬¡
ç›®æ¬¡ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ã®é—˜ã„ ç¾çŠ¶ã®èªè¨¼æ‰‹æ³• èªè¨¼ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ã®å•é¡Œç‚¹ ç”Ÿä½“èªè¨¼ã®å•é¡Œç‚¹ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å•é¡Œç‚¹ å¢—äº•ã®Webã‚µãƒ¼ãƒ“ã‚¹ å¢—äº•ã®Webã‚µãƒ¼ãƒ“ã‚¹ ç†æƒ³çš„ãªèªè¨¼ å®Ÿç¾è¦ä»¶ ã‚¨ãƒ”ã‚½ãƒ¼ãƒ‰è¨˜æ†¶ã®ç‰¹å¾´ ã‚¨ãƒ”ã‚½ãƒ¼ãƒ‰è¨˜æ†¶ã‚’ç”¨ã„ãŸèªè¨¼ ãªãžãªãžãƒ‰ã‚¢ å•é¡Œã®ä¾‹ ãªãžãªãžãƒ‰ã‚¢ã®å•é¡Œç‚¹ ç”»åƒèªè¨¼ DÃ©jÃ Vu PassFace VisKey ç”»åƒé¸æŠžã«ã‚ˆã‚‹ãªãžãªãžèªè¨¼ ç”»åƒé¸æŠžæ–¹å¼ã®åˆ©ç‚¹ ç”»åƒé¸æŠžæ–¹å¼ã®å•é¡Œç‚¹ ç”»åƒ+ãƒ†ã‚ã‚¹ãƒˆé¸æŠžã«ã‚ˆã‚‹ãªãžãªãžèªè¨¼ æœ¬æ£š.orgã®ä¾‹ èªè¨¼å•é¡Œç”»é¢ èªè¨¼ã‚’è§£ã„ãŸå¾Œã®çŠ¶æ…‹ ãƒ‡ãƒ¢: æœ¬æ£š.org èªè¨¼å•é¡Œä½œæˆ ãƒ¦ãƒ¼ã‚¶ãŒä½œã£ãŸãªãžãªãž ãƒ¦ãƒ¼ã‚¶ãŒä½œã£ãŸãªãžãªãž ãƒ¦ãƒ¼ã‚¶ãŒä½œã£ãŸãªãžãªãž ç”»åƒ+ãƒ†ã‚ã‚¹ãƒˆé¸æŠžã®åˆ©ç‚¹ å½ç”ã®ç”Ÿæˆ ç”»åƒ+ãƒ†ã‚ã‚¹ãƒˆé¸æŠžã®å•é¡Œç‚¹ IQAuth.com mixiã§ã®ä½¿ç”¨ä¾‹ ãƒ‡ãƒ¢: IQAuth.com IQAuthã®å®Ÿè£… é‹ç”¨å®Ÿç¸¾ ãã®ä»–ã®ç”»åƒèªè¨¼ ã¾ã¨ã‚ End
d6rkaiz 2009/10/27
èªè¨¼

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

password

ç”»åƒ
ãƒªãƒ³ã‚¯
Firefox Add-ons: Firefox ç”¨ã®ä¸€èˆ¬çš„ãªãƒ—ãƒ©ã‚°ã‚¤ãƒ³
Why do Java, Silverlight, Adobe Acrobat and other plugins no longer work? Since Firefox version 52 was released March 7, 2017, installed NPAPI plugins have not been supported in Firefox, except for Adobe Flash Player. Some of the plugins that no longer load in Firefox, even though they may be installed on your computer, include Java, Microsoft Silverlight and Adobe Acrobat. Over the past few years
d6rkaiz 2009/10/15
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Firefox

plugin

webã‚µãƒ¼ãƒ“ã‚¹
ãƒªãƒ³ã‚¯
htmlspecialcharsã®Shift_JISãƒã‚§ãƒƒã‚¯æ¼ã‚Œã«ã‚ˆã‚‹XSSå›žé¿ç–
è£œè¶³ ã“ã®è¨˜äº‹ã¯æ—§å¾³ä¸¸æµ©ã®æ—¥è¨˜ã‹ã‚‰ã®è»¢è¼‰ã§ã™ï¼ˆå…ƒURLã€ã‚¢ãƒ¼ã‚«ã‚¤ãƒ–ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯1ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯2ï¼‰ã€‚ å‚™å¿˜ã®ãŸã‚è»¢è¼‰ã„ãŸã—ã¾ã™ãŒã€ã“ã®è¨˜äº‹ã¯2009å¹´10æœˆ9æ—¥ã«å…¬é–‹ã•ã‚ŒãŸã‚‚ã®ã§ã€å½“æ™‚ã®å¾³ä¸¸ã®è€ƒãˆã‚’ç¤ºã™ã‚‚ã®ã‚’ã€åŸºæœ¬çš„ã«å†…å®¹ã‚’å¤‰æ›´ã›ãšã«ãã®ã¾ã¾è»¢è¼‰ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ è£œè¶³çµ‚ã‚ã‚Š ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€PHPã®htmlspecialcharsé–¢æ•°ã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒã‚§ãƒƒã‚¯ä¸å‚™ã‚’ã¤ã„ãŸã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS)è„†å¼±æ€§ã«ã¤ã„ã¦ã€PHPå´ã®ãƒ‘ãƒƒãƒãŒæä¾›ã•ã‚Œãªã„çŠ¶æ³ã§ã®å›žé¿ç–ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ ä½•ãŒå•é¡Œã‹ PHPã«ãŠã„ã¦ã€XSSå¯¾ç–ã«ã¯htmlspecialcharsã«ã‚ˆã£ã¦è¨˜å·ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã“ã¨ãŒè¡Œã‚ã‚Œã¾ã™ã—ã‹ã—ã€htmlspecialcharsã‚’åˆ©ç”¨ã—ã¦ã„ã¦ã‚‚ã€Shift_JISã®å…ˆè¡Œãƒã‚¤ãƒˆã‚’åˆ©ç”¨ã—ã¦ã€XSSãŒç™ºç”Ÿã™ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ ä¾‹ãˆã°ã€ä»¥ä¸‹ã®ã‚ˆã†ãªINPUTãŒã‚
d6rkaiz 2009/10/11
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

php

htmlspecialchars

è³‡æ–™
ãƒªãƒ³ã‚¯
1 2 3 4 5 æ¬¡ã®ãƒšãƒ¼ã‚¸