#faq
Key Reinstallation Attacks Breaking WPA2 by forcing nonce reuse Discovered by Mathy Vanhoef of imec-DistriNet, KU Leuven, 2017 Introduction We discovered serious weaknesses in WPA2, a protocol that secures all modern protected Wi-Fi networks. An attacker within range of a victim can exploit these weaknesses using key reinstallation attacks (KRACKs). Concretely, attackers can use this novel attack
Compromise On Checkout - Vulnerabilities in SCM Tools · The Recurity Lablog
The Recurity Lablog Posts computer security, research, reverse engineering and high level considerations First Round: Git LFS In mid May 2017, I was about to go on my two month parental leave, when I stumbled across a nifty vulnerability in Git LFS, which is developed by the fine people at GitHub. The actual vulnerability was shockingly simple: Git LFS can be configured (partially) by a .lfsconfig
CCS Injection脆弱性(CVE-2014-0224)発見ã®çµŒç·¯ã«ã¤ã„ã¦ã®ç´¹ä»‹ - OpenSSL #ccsinjection Vulnerability
èŠæ± ã§ã™ã€‚CCS Injection脆弱性(CVE-2014-0224)発見ã®çµŒç·¯ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ ãƒã‚°ã®ç°¡å˜ãªè§£èª¬ OpenSSLãŒãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯ä¸ã«ä¸é©åˆ‡ãªçŠ¶æ…‹ã§ChangeCipherSpecã‚’å—ç†ã—ã¦ã—ã¾ã†ã®ãŒä»Šå›žã®ãƒã‚°ã§ã™ã€‚ ã“ã®ãƒã‚°ã¯OpenSSLã®æœ€åˆã®ãƒªãƒªãƒ¼ã‚¹ã‹ã‚‰å˜åœ¨ã—ã¦ã„ã¾ã—ãŸã€‚ 通常ã®ãƒãƒ³ãƒ‰ã‚·ã‚§ãƒ¼ã‚¯ã§ã¯ã€å³ã®å›³ã®ã‚ˆã†ãªé †åºã§ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’交æ›ã—ã¾ã™(RFC5246 The Transport Layer Security (TLS) Protocol Version 1.2 §7.3より作æˆ)。 ChangeCipherSpecã¯å¿…ãšã“ã®ä½ç½®ã§è¡Œã†ã“ã¨ã«ãªã£ã¦ã„ã¾ã™ã€‚OpenSSLã‚‚ChangeCipherSpecã‚’ã“ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§é€ä¿¡ã—ã¾ã™ãŒã€å—ä¿¡ã¯ä»–ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§ã‚‚è¡Œã†ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã—ãŸã€‚ã“れを悪用ã™ã‚‹ã“ã¨ã§ã€æ”»æ’ƒè€…ãŒé€šä¿¡ã‚’解èªãƒ»æ”¹ã–ã‚“å¯èƒ½ã§ã™ã€‚ 発見ã®å›°é›£ã•
GitHubã€ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãƒšãƒ¼ã‚¸ã®å…¨ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’「github.ioã€ã«ç§»è¡Œ
GitHubã€ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãƒšãƒ¼ã‚¸ã®å…¨ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’「github.ioã€ã«ç§»è¡Œï¼šã‚»ã‚ュリティ強化を目的㫠米GitHubã¯4月5æ—¥ã€GitHubã§ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã•ã‚Œã¦ã„るデベãƒãƒƒãƒ‘ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãƒšãƒ¼ã‚¸ã‚’å…¨ã¦ã€æ–°ã—ã„専用ドメインã®ã€Œgithub.ioã€ã«ç§»è¡Œã•ã›ã‚‹ã¨ç™ºè¡¨ã—ãŸã€‚ ç±³GitHubã¯4月5æ—¥ã€GitHubã§ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã•ã‚Œã¦ã„るデベãƒãƒƒãƒ‘ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãƒšãƒ¼ã‚¸ã‚’å…¨ã¦ã€æ–°ã—ã„専用ドメインã®ã€Œgithub.ioã€ã«ç§»è¡Œã•ã›ã‚‹ã¨ç™ºè¡¨ã—ãŸã€‚github.comを標的ã¨ã—ãŸã‚¯ãƒã‚¹ãƒ‰ãƒ¡ã‚¤ãƒ³æ”»æ’ƒã‚’仕掛ã‘られãŸã‚Šã€ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºã«github.comã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒæ‚ªç”¨ã•ã‚Œã‚‹ã®ã‚’防ãç‹™ã„ã ã¨èª¬æ˜Žã—ã¦ã„る。 対象ã¨ãªã‚‹ã®ã¯ã€Œãƒ¦ãƒ¼ã‚¶ãƒ¼å.github.comã€ã®ã‚ˆã†ãªgithubã®ã‚µãƒ–ドメインを使ã£ãŸãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãƒšãƒ¼ã‚¸ã§ã€ä»Šå¾Œã¯å…¨ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ãŒã€Œãƒ¦ãƒ¼ã‚¶ãƒ¼å.github.ioã€ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã‚Œã‚‹ã€‚ユ
Nettica VPN Service » Make Your Own Cloud
Welcome to Nettica!Join the Cloud! We are a cloud-based VPN service built on WireGuardâ„¢ technology, providing fast, secure connections to local and cloud resources. Create your own cloud! Seamlessly switch between local and multi-cloud environments managed with the Nettica Agent. Command and control your networks! Our OAuth2 and role-based access control features ensure a secure environment. Get s
CPU-bound Encryption (TRESOR, TreVisor, ARMORED)
TRESOR Runs Encryption Securely Outside RAM TRESOR is a secure implementation of AES which is resistant against cold boot attacks. The basic idea behind this implementation is to store the secret key inside CPU registers rather than in RAM. All computations take place only on registers, no AES state is ever going to RAM. In particular, the x86 debug registers are misused as secure key storage. Run
InternetExplorerã®ã‚¼ãƒãƒ‡ã‚¤ï¼ˆCVE-2014-1776）をã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
æ¦‚è¦ MicrosoftãŒ2014å¹´4月27æ—¥ã€InternetExplorerã®è„†å¼±æ€§æƒ…å ±ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚FireEyeã«ã‚ˆã‚Œã°ã“ã®è„†å¼±æ€§ã‚’悪用ã™ã‚‹æ¨™çš„型攻撃を確èªã—ã¦ãŠã‚Šã€åŒç¤¾ã§ã¯ã€ŒOperation Clandestine Fox.ã€ã¨åå‰ã‚’付ã‘ã¦ã„ã¾ã™ã€‚æ—¢ã«åã®è„†å¼±æ€§ã‚’ä¿®æ£ã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯IEã®ã‚¼ãƒãƒ‡ã‚¤ã«é–¢ä¿‚ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ Microsoftã®å…¬é–‹æƒ…å ± 脆弱性ã«ã‚ˆã‚‹å½±éŸ¿ã‚„ãã®å¯¾è±¡ã€æ”»æ’ƒã‚·ãƒŠãƒªã‚ªã®è©³ç´°ã¯ä»¥ä¸‹ã‚’å‚照。 マイクãƒã‚½ãƒ•ãƒˆ ã‚»ã‚ュリティ アドãƒã‚¤ã‚¶ãƒª 2963983 Internet Explorer ã®è„†å¼±æ€§ã«ã‚ˆã‚Šã€ãƒªãƒ¢ãƒ¼ãƒˆã§ã‚³ãƒ¼ãƒ‰ãŒå®Ÿè¡Œã•ã‚Œã‚‹ ã‚»ã‚ュリティ アドãƒã‚¤ã‚¶ãƒª 2963983「Internet Explorer ã®è„†å¼±æ€§ã«ã‚ˆã‚Šã€ãƒªãƒ¢ãƒ¼ãƒˆã§ã‚³ãƒ¼ãƒ‰ãŒå®Ÿè¡Œã•ã‚Œã‚‹ã€ã‚’公開 - 日本ã®ã‚»ã‚ュリティãƒãƒ¼ãƒ - Site Home - Tec
Heartbleed Bug
The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private network
ï¼»4ï¼½DNSリãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚° | 日経 xTECH（クãƒã‚¹ãƒ†ãƒƒã‚¯ï¼‰
DNSリãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°æ”»æ’ƒã¨ã¯ã€ãƒ‰ãƒ¡ã‚¤ãƒ³å（FQDN）ã«å¯¾å¿œã™ã‚‹IPアドレスをçŸæ™‚é–“ã«å¤‰æ›´ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ç½ サイトã«ä»•æŽ›ã‘ãŸJavaScriptã‹ã‚‰ã€æ”»æ’ƒå¯¾è±¡ã‚µã‚¤ãƒˆã«å¯¾ã—ã¦åŒä¸€ç”Ÿæˆå…ƒãƒãƒªã‚·ãƒ¼ã®ç¯„囲ã§æ”»æ’ƒã‚’仕掛ã‘る技法ã§ã‚る。 DNSリãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã¯ç‰¹æ®Šãªæ”»æ’ƒã§ã‚ã‚Šã€èªè¨¼ã‚’回é¿ã—ãŸã‚Šã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’ä¹—ã£å–ã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ã‘ã§ã¯ãªã„。ã“ã®ãŸã‚ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã®ã‚µã‚¤ãƒˆãŒã“ã®æ‰‹æ³•ã§æ”»æ’ƒã•ã‚Œã‚‹ã“ã¨ã¯ã‚ã¾ã‚Šãªãã€ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã®å†…å´ã®ã‚µãƒ¼ãƒãƒ¼ã§ã€ã‹ã¤ãƒ‘スワードãŒåˆ†ã‹ã£ã¦ã„ã‚‹ã‚‚ã®ï¼ˆãƒ‡ãƒ•ã‚©ãƒ«ãƒˆãƒ‘スワードを変更ã—ã¦ã„ãªã„ルーターãªã©ï¼‰ãŒå…¸åž‹çš„ãªæ”»æ’ƒå¯¾è±¡ã ã£ãŸã€‚ ã—ã‹ã—IPアドレスをãªã‚Šã™ã¾ã™ç›®çš„ã«ã¯ã€DNSリãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°æ”»æ’ƒãŒæ‚ªç”¨å¯èƒ½ã 。攻撃者ã¯å›³5ã®ã‚ˆã†ã«ç½ ã®ãƒšãƒ¼ã‚¸ã‚’用æ„ã—ã¦ã€è¢«å®³è€…ãŒé–²è¦§ã™ã‚‹ã®ã‚’å¾…ã¤ã€‚被害者ãŒç½ ã®ãƒšãƒ¼ã‚¸ã‚’閲覧ã™ã‚‹ã¨ã€ä»¥ä¸‹ã®ä»•çµ„ã¿ãŒå‹•ã出ã™ã€‚ （1）DNSサーãƒãƒ¼ã®Aレコードをæ“作ã—ã¦
FMV Q&A - [Internet Explorer 7] 「ã“ã®Web ページãŒã‚¯ãƒªãƒƒãƒ—ボードã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã®ã‚’許å¯ã—ã¾ã™ã‹ï¼Ÿã€ã¨è¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ - FMVサãƒãƒ¼ãƒˆ : 富士通パソコン
インターãƒãƒƒãƒˆã«æŽ¥ç¶šã—ã¦ã„ã‚‹ã¨ã€æ¬¡ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ 「ã“ã®Web ページãŒã‚¯ãƒªãƒƒãƒ—ボードã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã®ã‚’許å¯ã—ã¾ã™ã‹ï¼Ÿã€ ã“ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã«ã¤ã„ã¦æ•™ãˆã¦ãã ã•ã„。 ã¾ãŸã€è¡¨ç¤ºã•ã‚ŒãŸå ´åˆã®å¯¾å‡¦æ–¹æ³•ã‚’æ•™ãˆã¦ãã ã•ã„。 「ã“ã®Web ページãŒã‚¯ãƒªãƒƒãƒ—ボードã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã®ã‚’許å¯ã—ã¾ã™ã‹?ã€ã¨ã„ã†ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ã€Internet Explorerã®ã‚»ã‚ュリティè¨å®šã®å½±éŸ¿ã§ã€ç‰¹å®šã®ãƒ›ãƒ¼ãƒ ページを開ãã¨è¡¨ç¤ºã•ã‚Œã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ メッセージãŒè¡¨ç¤ºã•ã‚ŒãŸå ´åˆã¯ã€ã€Œè¨±å¯ã—ãªã„ã€ãƒœã‚¿ãƒ³ã‚’クリックã—ã€æ¬¡ã®æ‰‹é †ã§Internet Explorerã®ã‚»ã‚ュリティã®è¨å®šã‚’変更ã™ã‚‹ã“ã¨ã‚’ãŠå‹§ã‚ã—ã¾ã™ã€‚ 「アクセスを許å¯ã™ã‚‹ã€ãƒœã‚¿ãƒ³ã‚’クリックã™ã‚‹ã¨ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚’経由ã—ã¦ç¬¬ä¸‰è€…ã«ã‚¯ãƒªãƒƒãƒ—ボードã®å†…容を確èªã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ クリップボードã¨ã¯ã€ãƒ•ã‚¡ã‚¤ãƒ«ã‚’コピーã—ãŸã‚Šã€åˆ‡ã‚Šå–ã£ãŸã‚Šã—ãŸã¨ãã®
Technology | Latest News & Analysis | The Australian Financial Review | AFR
AIThings you can do with AI that are actually usefulOne of them could save you $1 million and a lifetime of misery. May 31, 2024John Davidson SponsoredSiemens AustraliaThe real power – and potential – of industrial AIThe nation could face an opportunity cost of $35.7 billion in gross domestic product (GDP) per year should it fail “to introduce AI systems to world standards in key industriesâ€.
PS3 Hacked!! - J
例ã®PS3ãƒãƒƒã‚¯ã‚’ç†è§£ã™ã‚‹ãŸã‚ã«ã€PPC64ãŠã‚ˆã³PS3ã®ãƒ¡ãƒ¢ãƒªç®¡ç†ã¨ä»®æƒ³åŒ–ã®ä»•çµ„ã¿ã‚’ç†è§£ã—ã¦ãŠã“ã†ã€‚目標ã¯ã€ã‚ã®è§£èª¬ã‚’èªã‚る程度ã«ãªã‚‹ãƒ¬ãƒ™ãƒ«ã§ã€‚ (調ã¹ãªãŒã‚‰æ›¸ã„ã¦ã‚‹ã®ã§æµã‚ŒãŒå°‘ã—変ã‹ã‚‚) 手元ã«ã¯PowerPC Operating Environment Architecture Book III Ver2.02(以下Book III)を用æ„ã—ã¦ãŠã„ã¦ã»ã—ã„。 ã„ãã¤ã‹PPC64用語を解説ã—ã¦ãŠã“ã†ã€‚ LPAR PPC64ã§ã¯ã€x86ã§ã„ã†ä»®æƒ³åŒ–ã¿ãŸã„ãªã‚‚ã®â€¦OSã®ä¸Šä½ã«ã„るプãƒã‚°ãƒ©ãƒ を書ã仕組ã¿ã¯ã€Logical Partitioning(LPAR)ã¨åå‰ãŒä»˜ã‘られã¦ãŠã‚Šã€ã‚¢ãƒ¼ã‚テクãƒãƒ£ã®ä¸€éƒ¨ã¨ã—ã¦å®šç¾©ã•ã‚Œã¦ã„る。 ã‚ã¨ã€x86ã§ã„ã†ä»®æƒ³åŒ–ã¯ã€FullVirtualization支æ´ã®æ„味ãŒå¼·ã„ãŒã€PowerPCã®LPARã¯ParaVirtualization支æ´ã£ã½ã„æ„Ÿã˜ã ã¨æ€ã†ã€‚
SecurityTeam/Roadmap/KernelHardening - Ubuntu Wiki
There are several kernel hardening features that have appeared in other hardened operating systems that would improve the security of Ubuntu, and Linux in general. They have been controversial, so this page attempts to describe them, including their controversy and discussion over the years, so as much information is available to make an educated decision about potential implementations. Variation
Cross-Origin Resource Sharing (W3C Working Draft 27 July 2010)
Participate: GitHub whatwg/fetch (new issue, open issues) Chat on Matrix Commits: GitHub whatwg/fetch/commits Snapshot as of this commit @fetchstandard Tests: web-platform-tests fetch/ (ongoing work) Translations (non-normative): 日本語 简体ä¸æ–‡ Abstract The Fetch standard defines requests, responses, and the process that binds them: fetching. Goals The goal is to unify fetching across the web platform a
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Google Issue Tracker
Amazon.co.jp: TPMベーシック: 組込ã¿ã‚·ã‚¹ãƒ†ãƒ ã«ãŠã‘ã‚‹TPMã®ä½¿ç”¨: スティーブンã‚ニー (è‘—), エスアイビーアクセス (翻訳), Kinney,Steven (原å): 本
Amazon.co.jp: Understanding Cryptography: A Textbook for Students and Practitioners: Paar, Christof (è‘—), Pelzl, Jan (è‘—), Preneel, Bart (ã¯ã—ãŒã): 本
連載: IBM Watson Workspace #鬼ã‚㋠アプリケーション開発: 第 7 回: IBM Watson Workspace 㧠AI を利用ã—ãŸã‚¢ãƒ—リ連æºã®å®Ÿç¾ #鬼ã‚㋠解説（å‰ç·¨ï¼‰
Infineon DRM/encryption chip succumbs to physical attack
Security considerations: peeing in the sandbox; or why you cannot trust ebuilds not to do any harm
{{#tags}}- {{label}}
{{/tags}}