[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] grattã®ãƒ

gratt id:gratt

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹grattã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (25)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

AWSã¦ã‚™ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–å…¨éƒ¨ç››ã‚Š[åˆç´šã‹ã‚‰ä¸ç´šã¾ã¦ã‚™]
å¼Šç¤¾ã‚¯ãƒ©ã‚¹ãƒ¡ã‚½ãƒƒãƒ‰æ ªå¼ä¼šç¤¾ä¸»å‚¬ã®ã‚¤ãƒ™ãƒ³ãƒˆã€ŒDevelopers.IO 2019 TOKYOã€ã§ã®ç™»å£‡è³‡æ–™ã§ã™ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ãƒ¡ã‚¬ç››ã‚Šãƒžãƒƒã‚¯ã‚¹ ãƒ–ãƒã‚°: https://dev.classmethod.jp/cloud/aws/developers-io-2019-tokyo-all-securiâ€¦
gratt 2019/11/06
aws

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ãˆã£å¾³ä¸¸å…ˆç”ŸãŒ2äººã„ã‚‹ï¼ï¼Ÿ çœŸå†¬ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ©ãƒƒãƒ—å¯¾æ±ºã§äº”å³¶å¤•å¤ã‚’æŒ¯ã‚Šå‘ã‹ã›ã‚‹ã®ã¯ã©ã£ã¡ã ï¼ï¼ | NO MORE æƒ…å ±æ¼ãˆã„
ãŠä¹…ã—ã¶ã‚Šã§ã™ã€äº”å³¶å¤•å¤ã§ã™ï¼ ä»¥å‰ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ—ãƒã§ã‚ã‚‹å¾³ä¸¸æµ©å…ˆç”Ÿã®ä¸€æ—¥ã«å¯†ç€ã—ã€ãŸãã•ã‚“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã‚’å‹‰å¼·ã—ã¦ãã¾ã—ãŸã€‚ ä»Šå›žã€ã¾ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ãŠè©±ã‚’èžã‘ã‚‹ã¨ã„ã†ã“ã¨ã§ã€ã€ŽNO MORE æƒ…å ±æ¼ãˆã„ã€ã‚’é‹å–¶ã™ã‚‹MOTEXã•ã‚“ã®ã‚ªãƒ•ã‚£ã‚¹ã«ã‚„ã£ã¦ãã¾ã—ãŸï¼ ãã‚Œã§ã¯ã€ã•ã£ããå¾³ä¸¸å…ˆç”Ÿã®ã‚‚ã¨ã¸è¡Œãã¾ã—ã‚‡ã†ï¼ å¾³ä¸¸å…ˆç”Ÿã€ãŠã˜ã‚ƒã¾ã—ã¾ãƒ¼ã™ï¼ å¾³ä¸¸å…ˆç”Ÿ ã€Œã‚„ã‚å¤•å¤ã•ã‚“ã€ã“ã‚“ã«ã¡ã¯ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ—ãƒã€å¾³ä¸¸ã§ã™ã€‚ä»Šæ—¥ã‚‚å¤‰ã‚ã‚‰ãšç¶ºéº—ã ãã€ å¾³ä¸¸ æµ©ï¼ˆã¨ãã¾ã‚‹ ã²ã‚ã—ï¼‰å…ˆç”ŸHASHã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°æ ªå¼ä¼šç¤¾ãƒ»ä»£è¡¨å–ç· å½¹ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ—ãƒã€‚ã‚·ã‚¹ãƒ†ãƒ ã®è„†å¼±æ€§è¨ºæ–ã‚„ã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°æ¥å‹™ã®ã‹ãŸã‚ã‚‰ã€ãƒ–ãƒã‚°ã‚„å‹‰å¼·ä¼šãªã©ã‚’é€šã˜ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å•“è’™æ´»å‹•ã‚‚è¡Œã†ã™ã”ã„äººã€‚ ã‚†ã†ã‹ ã€Œå…ˆç”Ÿã€ãŠä¹…ã—ã¶ã‚Šã§ã™ã€‚å…ˆæ—¥ã¯ã„ã‚ã„ã‚ã¨æ•™ãˆã¦ã„ãŸã ã„ã¦ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ä»Šæ—¥ã‚‚ã¾ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ãŸãã•ã‚“
gratt 2016/01/09
æœ€å¾Œã«ãƒ†ãƒ˜ãƒšãƒãŒã‚ã£ã¦ã‚ˆã‹ã£ãŸã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ä»Šã©ãã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®è©±é¡Œç·ã¾ã¨ã‚ - PHPã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹2015ç™ºè¡¨è³‡æ–™
2. ã‚¢ã‚¸ã‚§ãƒ³ãƒ€ â€¢ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–ã‚‚ã‚Œã®è²¬ä»»ã‚’é–‹ç™ºä¼šç¤¾ã« å•ã†åˆ¤æ±º â€¢ PHPå…¥é–€æ›¸ã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è„†å¼±æ€§ã®çŠ¶æ³ â€¢ O/Rãƒžãƒƒãƒ‘ã‚„SQLã‚¸ã‚§ãƒãƒ¬ãƒ¼ã‚¿ãƒ¼ã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ ã‚·ãƒ§ãƒ³ã®è©±é¡Œ â€“ Rails SQL Injection Examplesã®ç´¹ä»‹ â€“ Zend Frameworkã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ â€“ JSON SQL Injection â€“ Drupageddon(CVE-2014-3704) Copyright Â© 2008-2015 HASH Consulting Corp. 2 3. å¾³ä¸¸æµ©ã®è‡ªå·±ç´¹ä»‹ â€¢ çµŒæ´ â€“ 1985å¹´ äº¬ã‚»ãƒ©æ ªå¼ä¼šç¤¾å…¥ç¤¾ â€“ 1995å¹´ äº¬ã‚»ãƒ©ã‚³ãƒŸãƒ¥ãƒ‹ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚·ã‚¹ãƒ†ãƒ æ ªå¼ä¼šç¤¾(KCCS)ã«å‡ºå‘ãƒ»è»¢ç± â€“ 2008å¹´ KCCSé€€è·ã€HASHã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°æ ªå¼ä¼šç¤¾è¨ç«‹ â€¢ çµŒé¨“ã—ãŸã“ã¨ â€“ äº¬ã‚»ãƒ©å…¥ç¤¾å½“æ™‚ã¯CADã€è¨ˆç®—å¹¾ä½•
gratt 2015/10/03
PHP

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ãã“ãã“ã‚»ã‚ãƒ¥ã‚¢ãªlinuxã‚µãƒ¼ãƒãƒ¼ã‚’ä½œã‚‹ - Qiita
å…ˆæ—¥ã€Œã‚µãƒ¼ãƒãƒ¼ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šãŒãªã«ã™ã‚Œã°ã„ã„ã‹ã‚ã‹ã‚‰ãªã„ã€ã¨ç›¸è«‡ã‚’ã†ã‘ã¾ã—ã¦ã€‚ è‡ªåˆ†ã‚‚åˆå¿ƒè€…ã®æ™‚ã©ã“ã¾ã§ã‚„ã‚Œã°ã„ã„ã‹ã‚ã‹ã‚‰ãšæ‰‹å½“ãŸã‚Šã—ã ã„ã«ã‚„ã£ã¦æ²¼ã«å…¥ã£ã¦ã„ãŸã®ã‚’æ€ã„å‡ºã—ãªãŒã‚‰è‡ªé¯–æ§‹ç¯‰ã—ãŸã¨ãã®ãƒ¡ãƒ¢ã‚’å…ƒã«ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ æ³¨æ„ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¯ç”¨é€”ã‚„å ´åˆãªã©ã«ã‚ˆã£ã¦é•ã„ã¾ã™ã€‚ è‡ªåˆ†ã§ç†è§£ã—ãŸã†ãˆã§è‡ªå·±è²¬ä»»ã§ãŠããŒã„ã—ã¾ã™ã€‚ å¯¾è±¡èªè€… Linuxã®ã‚µãƒ¼ãƒãƒ¼ã‚’å»ºã¦æ…£ã‚Œã¦ã„ãªã„äºº Linuxã¯ã‚ã‚‹ç¨‹åº¦ã•ã‚ã‚Œã‚‹äºº(è‡ªåˆ†ã§ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’å…¥ã‚ŒãŸã‚Šã€ã‚µãƒ¼ãƒ“ã‚¹ã‚’æ¢ã‚ãŸã‚Šã§ãã‚‹) ãƒ©ã‚¤ãƒ³ãƒŠãƒƒãƒ— â˜†ã¯å°Žå…¥ã®é‡è¦åº¦ã¨å°Žå…¥ã®å®¹æ˜“ã•ã‹ã‚‰å€‹äººçš„åè¦‹ã‹ã‚‰ã¤ã‘ãŸå€¤ã§ã™ã€‚ 4ã¤ä»¥ä¸ŠãŒ"æœ€ä½Žé™ã‚„ã‚‹ã“ã¨"ã ã¨æ€ã£ã¦ãã ã•ã„ã€‚ sshd
gratt 2014/12/30
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Linux
ãƒªãƒ³ã‚¯
ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å…¥é–€ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
gratt 2014/09/22
php

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
5.6. PHPåˆ©ç”¨æ™‚ã®æ‰‹é † â€” Infomation Security Policy alpha documentation
5.6.1. å…¬å¼ã«æŽ¨å¥¨ã•ã‚Œã¦ã„ãªã„æ©Ÿèƒ½ãƒ»é–¢æ•°ã®åˆ©ç”¨ç¦æ¢Â¶ PHP: PHP 5.3.x ã§æŽ¨å¥¨ã•ã‚Œãªã„æ©Ÿèƒ½ - Manual ã‚„ PHP: PHP 5.4.x ã§æŽ¨å¥¨ã•ã‚Œãªããªã‚‹æ©Ÿèƒ½ - Manual ã«ä¸Šã’ã‚‰ã‚Œã¦ã„ã‚‹æ©Ÿèƒ½ã‚„é–¢æ•°ã¯åˆ©ç”¨ã—ã¦ã¯ãªã‚‰ãªã„. 5.6.3. PHPã‚³ãƒ¼ãƒ‰ã‚’è©•ä¾¡ã™ã‚‹é–¢æ•°ãƒ»æ©Ÿèƒ½ã®åˆ©ç”¨ç¦æ¢Â¶ PHPã‚³ãƒ¼ãƒ‰ã‚’è©•ä¾¡ã™ã‚‹, eval() preg_replace()ã®â€™eâ€™ä¿®é£¾å ã¯, åˆ©ç”¨ã—ã¦ã¯ãªã‚‰ãªã„. ãŸã ã—, åˆ©ç”¨ãŒç¤¾å†…ã«é™ã‚‰ã‚Œã¦ã„ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã«ã¤ã„ã¦ã¯, eval()ã¯åˆ©ç”¨ã—ã¦ã‚‚ã‚ˆã„. preg_replaceã®â€™eâ€™ä¿®é£¾åã«ã¤ã„ã¦ã¯ preg_replace_callback()ã‚’åˆ©ç”¨ã™ã‚‹ã“ã¨.
gratt 2014/07/26
php

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
å¤šç™ºã™ã‚‹Webæ”¹ã–ã‚“ã«å‚™ãˆã¦inotifywaitã«ã‚ˆã‚‹æ”¹ã–ã‚“æ¤œçŸ¥ã‚’å°Žå…¥ã—ãŸ
Webã‚µã‚¤ãƒˆã®æ”¹ã–ã‚“äº‹ä»¶ãŒå¤šç™ºã—ã¦ã„ã¾ã™ã€‚Webã‚µã‚¤ãƒˆã«å¯¾ã™ã‚‹åŸºæœ¬çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ–½ç–ã‚’å®Ÿæ–½ã—ã¦ã„ã‚Œã°ã¾ãšè¢«å®³ã«ã‚ã†ã“ã¨ã¯ãªã„ã¨ã¯æ€ã†ã‚‚ã®ã®ã€å…¨ã¦ã®æ‰‹å£ãŒå…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ã®ã§ã€ä½•ã¨ãªãã€Œå«Œãªæ„Ÿã˜ã€ã‚‚ã—ã¾ã™ã€‚ ã€å‚è€ƒã€‘ Web ã‚µã‚¤ãƒˆæ”¹ã–ã‚“ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·(JPCERT/CC) 2013å¹´6æœˆã®å‘¼ã³ã‹ã‘ ã€Œ ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆãŒæ”¹ã–ã‚“ã•ã‚Œãªã„ã‚ˆã†ã«å¯¾ç–ã‚’ï¼ ã€(IPA) @Police ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆæ”¹ã–ã‚“äº‹æ¡ˆã®å¤šç™ºã«ä¿‚ã‚‹æ³¨æ„å–šèµ·ã«ã¤ã„ã¦(pdf) 5æœˆã‹ã‚‰å¤šç™ºã—ã¦ã„ã‚‹HPæ”¹ã–ã‚“ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã‚’ã¾ã¨ã‚ã¦ã¿ãŸã€‚ - piyolog å½“æ–¹ã®ã‚µã‚¤ãƒˆï¼ˆä¼šç¤¾ã€å€‹äººï¼‰ã¯ã€ä¸€é€šã‚Šã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ–½ç–ã¯å®Ÿæ–½ã—ã¦ã„ã‚‹ã¤ã‚‚ã‚Šã§ã™ãŒã€çµ¶å¯¾ã«æ”¹ã–ã‚“ã•ã‚Œãªã„ã‹ã¨ã„ã†ã¨ã€æ”¹ã–ã‚“ã•ã‚Œã‚‹ã“ã¨ã¯æƒ³å®šã—ã¦ãŠã‹ãªã‘ã‚Œã°ãªã‚‰ãªã„ã¨è€ƒãˆã¦ã„ã¾ã™ã€‚ å½“æ–¹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ–½ç–ã®ä¾‹ FTPã‚’ã‚„ã‚ã€sshã®ã¿ã§ç®¡ç†é‹ç”¨ sshã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰èªè¨¼ã‚’
gratt 2013/06/21
web

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

inotifywait
ãƒªãƒ³ã‚¯
ãƒ‘ãƒ–ãƒªãƒƒã‚¯ã‚¯ãƒ©ã‚¦ãƒ‰ä¸Šã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’è€ƒãˆã‚‹ ï½žåˆ©ç”¨è€…ã«æœ‰ç›Šãª10ã®ãƒ’ãƒ³ãƒˆï½žï¼ˆå¾Œç·¨ï¼‰ |
â– #ï¼–ï¼šãƒ›ã‚¹ãƒˆåž‹IPS ã¯ã‚ãªãŸã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®ˆã‚‹æ£ç¾©ã®å‘³æ–¹ ä¸è¦ãªã‚µãƒ¼ãƒ“ã‚¹ã¯åœæ¢ã—ã¦ãŠãã€ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã‚’ä½¿ã£ã¦ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒåˆ©ç”¨ã—ãªã„ãƒãƒ¼ãƒˆã‚’é–‰ã˜ã¦ã„ã¦ã‚‚ã€ã•ã‚‰ãªã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã®å¯¾ç–ã¯å¿…è¦ãªã®ã‹ï¼Ÿã€€ç”ãˆã¯å‹¿è«– YES ã§ã™ã€‚Webã‚µãƒ¼ãƒã‚’ä¾‹ã«è€ƒãˆã¦ã¿ã¾ã—ã‚‡ã†ã€‚ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã®åˆ¶å¾¡ã§ã¯ã€æ—¢ã« 80ï¼443ç•ªã®ãƒãƒ¼ãƒˆã‚’ä½¿ã£ãŸã‚¤ãƒ³ãƒã‚¦ãƒ³ãƒ‰ã®æŽ¥ç¶šã—ã‹è¨±å¯ã•ã‚Œã¦ã„ã¾ã›ã‚“ã€‚ãŸã ã—ã€æ”»æ’ƒè€…ã‹ã‚‰ã¿ã‚Œã°ã€ã“ã‚Œã ã‘ã§å……åˆ†ãªã®ã§ã™ã€‚OS ã®è„†å¼±æ€§ã‚’çªã„ãŸã‚Šã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ç ´å£Šã‚’è©¦ã¿ã‚‹ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚„ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®ã‚ˆã†ãªæ”»æ’ƒã‚’ HTTP(S) ã®ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã€80ï¼443ç•ªãƒãƒ¼ãƒˆã‹ã‚‰å®Ÿç¾ã§ãã‚‹ã®ã§ã™ã‹ã‚‰ã€‚ã ã‹ã‚‰ã“ãã€å€‹ã€…ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ä¸Šã§ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ¬ãƒ™ãƒ«ã§å¯¾ç–ã‚’è¡Œã†ã«ã¯ã€ãƒ›ã‚¹ãƒˆåž‹ã® IPSï¼ˆIntrusion Prevention Systemã€ä¸æ£ä¾µå…¥é˜²
gratt 2013/06/09
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
å¾³ä¸¸æœ¬ã«è¼‰ã£ã¦ã„ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
2. æœ¬æ—¥ãŠè©±ã—ã™ã‚‹å†…å®¹ â€¢ ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‹ã‚‰ã®æƒ…å ±æ¼æ´©ã«æ³¨æ„ â€¢ ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°å…¥é–€ â€¢ Ajaxã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å…¥é–€ â€¢ ãƒ‰ãƒªãƒ©ãƒ³ãƒ‰ ã‚«ãƒ¼ãƒ‰å¢—æ®–ç¥ã‚Šã¯ã“ã†ã—ã¦ãŠã“ã£ãŸâ€¦ã‹ã‚‚? Copyright Â© 2012 HASH Consulting Corp. 2 3. å¾³ä¸¸æµ©ã®è‡ªå·±ç´¹ä»‹ â€¢ çµŒæ´ â€“ 1985å¹´ äº¬ã‚»ãƒ©æ ªå¼ä¼šç¤¾å…¥ç¤¾ â€“ 1995å¹´ äº¬ã‚»ãƒ©ã‚³ãƒŸãƒ¥ãƒ‹ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚·ã‚¹ãƒ†ãƒ æ ªå¼ä¼šç¤¾(KCCS)ã«å‡ºå‘ãƒ»è»¢ç± â€“ 2008å¹´ KCCSé€€è·ã€HASHã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°æ ªå¼ä¼šç¤¾è¨ç«‹ â€¢ çµŒé¨“ã—ãŸã“ã¨ â€“ äº¬ã‚»ãƒ©å…¥ç¤¾å½“æ™‚ã¯CADã€è¨ˆç®—å¹¾ä½•å¦ã€æ•°å€¤ã‚·ãƒŸãƒ¥ãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ãªã©ã‚’æ‹…å½“ â€“ ãã®å¾Œã€ä¼æ¥å‘ã‘ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚½ãƒ•ãƒˆã®ä¼ç”»ãƒ»é–‹ç™ºãƒ»äº‹æ¥åŒ–ã‚’æ‹…å½“ â€“ 1999å¹´ã‹ã‚‰ã€æºå¸¯é›»è©±å‘ã‘ã‚¤ãƒ³ãƒ•ãƒ©ã€ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã®ä¼ç”»ãƒ»é–‹ç™ºã‚’æ‹…å½“ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«ç›´é¢ã€ç ”ç©¶ã€ç¤¾å†…å±•é–‹ã€å¯„ç¨¿ãªã© ã‚’é–‹å§‹ â€“
gratt 2012/04/25
webã‚µãƒ¼ãƒ“ã‚¹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
CentOS ã§è¡Œãªã£ã¦ãŠããŸã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®š: ã‚ã‚‹ SE ã®ã¤ã¶ã‚„ã
ã¯ã˜ã‚ã« Linux ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã£ã¦ãªã‹ãªã‹ã¾ã¨ã¾ã£ãŸã‚‚ã®ãŒãªã„ã®ã§ã€ã„ã‚ã‚“ãªã‚µã‚¤ãƒˆã‚’å‚è€ƒã«ã—ãªãŒã‚‰è¨å®šã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚æƒ³å®šã¯Web ã‚µãƒ¼ãƒãƒ¼ã§ã€ä½¿ç”¨ã—ã¦ã„ã‚‹ Linux ã¯ CentOS 6.2 ã§ã™ã€‚ è¨å®šå†…å®¹ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ å…¨ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆ ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ã® root ãƒã‚°ã‚¤ãƒ³ã‚’ç„¡åŠ¹ã«ã™ã‚‹ å…¬é–‹éµæš—å·æ–¹å¼ã‚’ä½¿ç”¨ã—ãŸ SSH ãƒã‚°ã‚¤ãƒ³è¨å®š iptables è¨å®š SSH ãƒãƒ¼ãƒˆç•ªå·ã®å¤‰æ›´ ä¸è¦ãªã‚µãƒ¼ãƒ“ã‚¹ã‚’åœæ¢ ãƒã‚°ç›£è¦–è¨å®š ãƒ•ã‚¡ã‚¤ãƒ«æ”¹ã–ã‚“æ¤œçŸ¥ãƒ„ãƒ¼ãƒ«è¨å®š ã‚¦ã‚£ãƒ«ã‚¹å¯¾ç–ã‚½ãƒ•ãƒˆè¨å®š Apache ã®è¨å®š å…¨ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆ æœ€åˆã«ä»¥ä¸‹ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã—ã¦ã€å…¨ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’æœ€æ–°ã®çŠ¶æ…‹ã«ã™ã‚‹ã€‚ # yum â€“y update å¾Œã¯è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚ŒãŸæ™‚ã€ã¾ãŸã¯å®šæœŸçš„ã«ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’è¡Œã†ã€‚ ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ã® root ãƒã‚°ã‚¤ãƒ³ã‚’ç„¡åŠ¹ã«ã™ã‚‹ ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ãƒ¡
gratt 2012/03/20
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

centos
ãƒªãƒ³ã‚¯
å·¥è—¤ä¼¸æ²»ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£äº‹ä»¶ç°¿ ç‰¹é›†
2019.7.18 Thu 8:15 äºˆå‘Šã€Scan PREMIUM å…ˆè¡Œä¸€æŒ™é…ä¿¡ã€‘ä½œå®¶ä¸€ç”°å’Œæ¨¹æ°ã«èžãã€å·¥è—¤ä¼¸æ²»ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£äº‹ä»¶ç°¿ æ–°ã‚·ãƒ¼ã‚ºãƒ³ã€Œãƒ¬ãƒ”ãƒ¥ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³æ”»æ’ƒã®ç½ ã€ã§æ–°ã—ãå–ã‚Šçµ„ã‚“ã ã“ã¨PR å·¥è—¤ä¼¸æ²»ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£äº‹ä»¶ç°¿ ã‚·ãƒ¼ã‚ºãƒ³ï¼˜ã€Œãƒ¬ãƒ”ãƒ¥ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³æ”»æ’ƒã®ç½ ã€ã¯ã€Scan PREMIUM ä¼šå“¡å‘ã‘ã«å‰ç·¨å¾Œç·¨ã®ï¼’å›žã«åˆ†ã‘æ¥é€±ãƒ»ã•æ¥é€±å…ˆè¡Œä¸€æŒ™é…ä¿¡ã•ã‚Œã€ãã®å¾Œï¼˜æœˆã®å¤ä¼‘ã¿æ˜Žã‘ä»¥é™ä¸€èˆ¬èªè€…å‘ã‘ã«é †æ¬¡å…¬é–‹ã•ã‚Œã¾ã™ã€‚ã©ã†ãžã”æœŸå¾…ä¸‹ã•ã„ã€‚
gratt 2012/02/07
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã¯ã¦ãªãƒ–ãƒã‚° | ç„¡æ–™ãƒ–ãƒã‚°ã‚’ä½œæˆã—ã‚ˆã†
æ¥å¹´ã‚‚ä½œã‚ŠãŸã„ï¼ãµãã®ã¨ã†æ–™ç†ã‚’æº€å–«ã—ãŸã€€2024å¹´æ˜¥ã®è¨˜éŒ² æ˜¥ã¯è‡ªç‚ŠãŒæ¥½ã—ã„å£ç¯€ 1å¹´ã®ä¸ã§æœ€ã‚‚è‡ªç‚ŠãŒæ¥½ã—ã„å£ç¯€ã¯æ˜¥ã ã¨æ€ã†ã€‚ã‚¹ãƒ¼ãƒ‘ãƒ¼ã®æ£šã«ã‚„ã‚ã‚‰ã‹ãªè‰²åˆã„ã®é‡ŽèœãŒä¸¦ã¶ã¨è‡ªç„¶ã¨ã“ã“ã‚ãŒå¼¾ã‚€ã€‚ ä¸ã§ã‚‚ã¨ãã‚ãã®ã¯å±±èœã ã€‚æ—©ã„ã¨2æœˆä¸‹æ—¬ã”ã‚ã‹ã‚‰ä¸¦ã³å§‹ã‚ã‚‹ãã‚Œã¯ã€ã‚¿ãƒ©ã®èŠ½ã€ãµãã®ã¨ã†ã¨ç¶šãã€æ¡œã®é ƒã«ã¯ã†ã‚‹ã„ã€ã‚¦ãƒ‰ã€ã“â€¦
gratt 2010/11/08
mac

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ç°¡å˜ãªä½œæ¥ã§WordPressã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚¢ãƒƒãƒ—ã™ã‚‹ãƒãƒƒãƒ—ã‚¹
ãƒ–ãƒã‚°ãƒ„ãƒ¼ãƒ«ã€ŒWordPressã€ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ™‚ã«ã€ç°¡å˜ãªä½œæ¥ã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚¢ãƒƒãƒ—ã™ã‚‹ãƒãƒƒãƒ—ã‚¹ã‚’WP Engineerã‹ã‚‰ç´¹ä»‹ã—ã¾ã™ã€‚ Small Security Tipps for your WordPress Install ä»¥ä¸‹ã€ãã®ãƒã‚¤ãƒ³ãƒˆã‚’æ„è¨³ã—ãŸã‚‚ã®ã§ã™ã€‚ ã¯ã˜ã‚ã« WordPressã®æ¨™æº–ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã¯éžå¸¸ã«ç°¡å˜ã§ã€WordPressã®äººæ°—ã®è¦å› ã®ä¸€ã¤ã¨ã‚‚ã„ãˆã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚’è¡Œã†éš›ã«å°‘ã—æ‰‹ã‚’åŠ ãˆã‚‹ã“ã¨ã§ã€ä¸æ£ãªã‚¢ã‚¯ã‚»ã‚¹ã‚’ã‚ˆã‚Šé›£ã—ã„ã‚‚ã®ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ãƒ†ãƒ¼ãƒ–ãƒ«ã®ãƒ—ãƒ¬ãƒ•ã‚£ãƒƒã‚¯ã‚¹ DBã§ä½¿ç”¨ã™ã‚‹ãƒ†ãƒ¼ãƒ–ãƒ«ã®ãƒ—ãƒ¬ãƒ•ã‚£ãƒƒã‚¯ã‚¹ã‚’æ¨™æº–ã®ã€Œwp_ã€ã‹ã‚‰ç•°ãªã‚‹æ–‡å—åˆ—ã«å¤‰æ›´ã—ã¾ã™ã€‚ è¨å®šæ–¹æ³• ã€Œwp-config.phpã€ã®ã€Œ$table_prefix = 'wp_';ã€ã®ã€Œwp_ã€ã‚’å¤‰æ›´ã—ã¾ã™ã€‚ èªè¨¼ç”¨ãƒ¦ãƒ‹ãƒ¼ã‚¯ã‚ãƒ¼ WordPressã®å®‰å…¨æ€§ã‚’ã‚¢ãƒƒãƒ—ã™ã‚‹ãŸã‚ã«ã€
gratt 2009/11/12
wordpress

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
CentOS ã® Apache ã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸èªè¨¼(ä¿®æ£ç‰ˆ) - tkoshima.net
CentOSã®Apacheã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸èªè¨¼ã‚’ã—ã¦ã¿ã‚‹ã€‚CentOS5ã®å ´åˆã€ã¡ã‚‡ã£ã¨æ‰‹é †ã‚’å·¥å¤«ã—ãªã„ã¨IEã§ã¤ãªãŒã‚‰ãªã‹ã£ãŸã®ã§ä¸€éƒ¨ä¿®æ£ã—ã¾ã—ãŸã€‚(OpenSSLã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®é–¢ä¿‚ã ã¨æ€ã†ã‘ã©ã€‚ï¼‰ IEã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚’ã‚¤ãƒ³ãƒãƒ¼ãƒˆã—ã¦ã¤ãªãã¨ã€ ã€Œè¨¼æ˜Žã®ãƒ‘ã‚¹ã®è¨¼æ˜Žæ©Ÿé–¢ã¯è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã‚‹æ¨©é™ãŒãªã„ã‹ã€ã“ã®è¨¼æ˜Žæ›¸ã‚’ã‚¨ãƒ³ãƒ‰ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£è¨¼æ˜Žæ›¸ã¨ã—ã¦ä½¿ã†ãªã„ã¨ãŒã§ããªã„ãŸã‚ã€ã“ã®è¨¼æ˜Žæ›¸ã¯ç„¡åŠ¹ã§ã™ã€‚ã€ ã¨ãªã£ã¦ã—ã¾ã†ä»¶ã®å¯¾å¿œã§ã™ã€‚ openssl.cnfã§ã€ã€ŒbasicConstraints=CA:trueã€ã§CAã‚’ä½œæˆã—ã¦ã„ãªã„ã¨å‡ºã‚‹æ§˜åã€‚ ä½œæ¥ã¯ã€Œ/var/www/sslã€ã§è¡Œã„ã€ç‹¬è‡ªèªè¨¼å±€ã®ãƒ•ã‚©ãƒ«ãƒ€ã¯ã€Œ/var/www/ssl/hogeCAã€ã«ä½œã‚Šã¾ã™ã€‚ã¾ãŸè¨¼æ˜Žæ›¸ã®æœŸé™ã¯10å¹´(3650æ—¥)ã«ã—ã¦ã‚ã‚Šã¾ã™ã€‚ â—†ä½œæ¥æº–å‚™ ä½œæ¥ãƒ•ã‚©ãƒ«ãƒ€ä½œæˆ mkdir -p /var/www
gratt 2009/07/03
clientã‚ãƒ¼ã®ç½®ãå ´æ‰€ã¨ã‹ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§æŒ‡å®šã—ã¦ã»ã—ã„ãœã£

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
PHPã§ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«ã¤ã„ã¦ã®ãƒ¡ãƒ¢ - Liner Note
gratt 2008/10/27
php

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã§ã‚‚OSSãªã‚‰ã‚³ã‚³ã¾ã§ã§ãã‚‹--ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£OSSæˆç†Ÿåº¦è©•ä¾¡
å°åˆ·ã™ã‚‹ ãƒ¡ãƒ¼ãƒ«ã§é€ã‚‹ ãƒ†ã‚ã‚¹ãƒˆ HTML é›»åæ›¸ç± PDF ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ ãƒ†ã‚ã‚¹ãƒˆ é›»åæ›¸ç± PDF ã‚¯ãƒªãƒƒãƒ—ã—ãŸè¨˜äº‹ã‚’Myãƒšãƒ¼ã‚¸ã‹ã‚‰èªã‚€ã“ã¨ãŒã§ãã¾ã™ æ—¥æœ¬OSSæŽ¨é€²ãƒ•ã‚©ãƒ¼ãƒ©ãƒ ã¯ã“ã®ã»ã©ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åˆ†é‡Žã§ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ï¼ˆOSSï¼‰ã®æˆç†Ÿåº¦ã‚’è©•ä¾¡ã—ãŸã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£OSSã®æˆç†Ÿåº¦è©•ä¾¡ã€ï¼ˆVer 1.0ï¼‰ã‚’å…¬è¡¨ã—ãŸï¼ˆPDFå½¢å¼ï¼‰ã€‚åŒãƒ•ã‚©ãƒ¼ãƒ©ãƒ ã®ã‚µãƒ¼ãƒéƒ¨ä¼šã«è¨ç½®ã•ã‚Œã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¿ã‚¹ã‚¯ãƒ•ã‚©ãƒ¼ã‚¹ï¼ˆTFï¼‰ã«ã‚ˆã£ã¦ä½œæˆã•ã‚Œã¦ã„ã‚‹ã€‚ ã“ã®æ–‡æ›¸ã¯ã€ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åˆ†é‡Žã§OSSãŒã©ã®ç¨‹åº¦ã‚«ãƒãƒ¼ã—ã¦ã„ã‚‹ã®ã‹ã€ã©ã“ã‚’ã‚«ãƒãƒ¼ã—ã¦ã„ãªã„ã®ã‹ã‚’æ˜Žç¢ºã«ã™ã‚‹ã€ï¼ˆä¸»æŸ»ã‚’å‹™ã‚ã‚‹ã€ã‚µã‚¤ã‚ªã‚¹ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ã®é¢å’Œæ¯…æ°ï¼‰ã¨ã„ã†ç›®çš„ã§ã€å•†ç”¨è£½å“ã¨OSSã§ãã‚Œãžã‚Œã‚«ãƒãƒ¼ã—ã¦ã„ã‚‹ç¯„å›²ã‚’æ˜Žç¢ºåŒ–ã—ã¦ã„ã‚‹ã€‚ ãŸã¨ãˆã°ã€ä¾µå…¥æ¤œçŸ¥ã‚·ã‚¹ãƒ†ãƒ ï¼ˆIDSï¼‰ã§ã¯å•†ç”¨è£½å“ã¨ã—ã¦ã€ŒISS Real Secure Network Sensorã€
gratt 2008/10/22
oss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
iptables ã® ipt_recent ã§ ssh ã® brute force attack å¯¾ç–
å¿…è¦ãªçŸ¥è˜ ã“ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã§ã¯ã€æ¬¡ã®ã“ã¨ã¯åˆ†ã‹ã£ã¦ã„ã‚‹ã‚‚ã®ã¨ã—ã¦è©±ã‚’é€²ã‚ã¾ã™ã€‚ iptables ã®ä½¿ã„ã‹ãŸ TCP ã«ãŠã‘ã‚‹ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ç¢ºç«‹ã®æ‰‹é †ï¼ˆSYN ã®ç«‹ã£ã¦ã‚‹ãƒ‘ã‚±ãƒƒãƒˆã€ã£ã¦ä½•ï¼Ÿ ã¨ã„ã†ãã‚‰ã„ãŒåˆ†ã‹ã£ã¦ã„ã‚Œã°ã‚ˆã„ï¼‰ ç”¨èªž è©¦è¡Œãƒ»ãƒã‚°ã‚¤ãƒ³è©¦è¡Œãƒ»æ”»æ’ƒ ã©ã‚Œã‚‚ã€ãƒã‚°ã‚¤ãƒ³ã‚’ã—ã‚ˆã†ã¨ã™ã‚‹ã“ã¨ï¼ˆ ssh -l fobar example.com ç‰ ã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ï¼‰ã‚’æŒ‡ã—ã¾ã™ã€‚ [email protected]'s password: ã¨ã‹ ãŒè¡¨ç¤ºã•ã‚Œã‚‹çŠ¶æ…‹ã¾ã§è¡Œã‘ãŸã‚‰ã€Œè©¦è¡ŒãŒæˆåŠŸã—ãŸã€ã¨ã„ã†ã“ã¨ã«ã—ã¾ã™ã€‚ã“ ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã§èª¬æ˜Žã—ã¦ã„ã‚‹å¯¾ç–ã§ã¯ã€ãã‚Œä»¥å‰ã®æ®µéšŽã§å¼¾ã‹ã‚Œã‚‹ã‚ˆã†ã« ãªã‚Šã¾ã™ï¼ˆ ssh -l fobar example.com ã‚’å®Ÿè¡Œã™ã‚‹ã¨ ssh: connect to host example.com port 22: Connection refused ç‰ã¨è¡¨ç¤ºã•ã‚Œã‚‹
gratt 2008/08/26
iptables

linux

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
çŸ¥ã£ã¦ãŠããŸã„SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®å–å¾—ã¾ã§ - livedoor ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼ Blog(ãƒ–ãƒã‚°)
ã“ã‚“ã«ã¡ã‚ã€‚ãƒ¢ãƒã‚¤ãƒ«ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼ã®é£¯ç”°çž¬ã§ã™ã€‚ ã‚¦ã‚§ãƒ–ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼ã®ä¸ã«ã¯ã€SSL ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŒå¿…è¦ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®æ§‹ç¯‰ã‚’æ‹…å½“ã—ãŸäººã¯å°‘ãªããªã„ã¨æ€ã„ã¾ã™ã€‚ ä»Šå›žã¯ SSL ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’å–å¾—ã™ã‚‹ã«ã‚ãŸã‚Šã€ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼ãŒçŸ¥ã£ã¦ãŠã„ãŸæ–¹ãŒå¹¸ã›ã«ãªã‚Œã‚‹å¿…è¦æœ€ä½Žé™ãªäº‹é …ã‚’ç°¡æ½”ã«ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ å‰²æ„›ã—ã¦ã„ã‚‹éƒ¨åˆ†ã‚‚ã‹ãªã‚Šã‚ã‚Šã¾ã™ãŒã€è©³ç´°ã¾ã§çªã£è¾¼ã‚€ã¨1ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã§ã¯åŽã¾ã‚Šãã‚‰ãªã„ãŸã‚ã€ä½•å’ã”ç†è§£ã„ãŸã ã‘ã‚Œã°ã¨æ€ã„ã¾ã™... ã€01ã€‘SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã£ã¦ä½•ã ã‚ã†? SSL ã‚’ä¸€è¨€ã§ã¾ã¨ã‚ã‚‹ã¨ã€ä½æ‰€ã‚„ã‚«ãƒ¼ãƒ‰ç•ªå·ãªã©ã‚’æš—å·åŒ–ã—ã¦ç¬¬ä¸‰è€…ãŒå‚å—ã—ã¦ã‚‚ãƒ‡ãƒ¼ã‚¿ã®æ”¹ã–ã‚“ã‚„ç›—è´ã‚’é˜²ãã¨ã„ã£ãŸæŠ€è¡“ãŒ SSL ã§ã™ã€‚ SSL ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¨ã„ã†ã®ã¯ã€ãã® SSL ã®æš—å·åŒ–æŠ€è¡“ã‚’åˆ©ç”¨ã™ã‚‹ã‚µãƒ¼ãƒã®èº«å…ƒã‚’ã€ç¬¬ä¸‰è€…ã§ã‚ã‚‹èªè¨¼å±€ãŒä¿è¨¼ã™ã‚‹ã“ã¨ã‚’ç¤ºã™ã‚‚ã®ã§ã™ã€‚ã“ã®è¨¼æ˜Žæ›¸ã®ä¸ã«ã¯ SSL ã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒé–“ã®é€šä¿¡ã‚’æš—å·åŒ–
gratt 2008/08/26
webåˆ¶ä½œ

sslè¨¼æ˜Žæ›¸

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
è©³ç´°ãŒæ˜Žã‹ã•ã‚ŒãŸDNSã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ»ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã®æ–°æ‰‹æ³•
2008å¹´7æœˆã‹ã‚‰ä¸–ç•Œçš„ã«è©±é¡Œã«ãªã£ã¦ã„ã‚‹DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ»ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã‚’åŠ¹çŽ‡çš„ã«å®Ÿç¾ã™ã‚‹æ‰‹æ³•ã«ã¤ã„ã¦ï¼Œç™ºè¦‹è€…ã§ã‚ã‚‹ãƒ€ãƒ³ãƒ»ã‚«ãƒŸãƒ³ã‚¹ã‚ãƒ¼æ°ãŒï¼ŒBlack Hat 2008ã®å¸ä¸Šã§ãƒ—ãƒ¬ã‚¼ãƒ³ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¡Œã„ã¾ã—ãŸï¼ˆ8æœˆ6æ—¥ï¼‰ã€‚ã“ã®ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ»ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã®ãœã„å¼±æ€§ã«ã¤ã„ã¦ã¯ï¼Œã„ã‚ã„ã‚å‹•ããŒã‚ã‚Šã¾ã—ãŸã®ã§ï¼Œãœã„å¼±æ€§ã«é–¢é€£ã™ã‚‹ã‚¤ãƒ™ãƒ³ãƒˆã‚’è¿½ã„ã‹ã‘ã¦ãŠãã¾ã—ã‚‡ã†ã€‚ â– ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ»ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã®ãœã„å¼±æ€§ã®å¯¾å¿œçµŒéŽ ã¾ãšã¯ï¼Œãœã„å¼±æ€§ã«ä»£è¡¨çš„ãªã‚¤ãƒ™ãƒ³ãƒˆä¸€è¦§ã§ã™ã€‚ä»–ã®é–¢é€£ã‚¤ãƒ™ãƒ³ãƒˆã«ã¤ã„ã¦ã¯ï¼Œ Status Tracking Note TRTA08-190Bï¼šè¤‡æ•°ã® DNS å®Ÿè£…ã«ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ»ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã®ãœã„å¼±æ€§ ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ 2008å¹´7æœˆ8æ—¥ BINDã‚’å«ã‚€è¤‡æ•°ã®DNSã‚µãƒ¼ãƒãƒ¼ãŒï¼Œãƒ€ãƒ³ãƒ»ã‚«ãƒŸãƒ³ã‚¹ã‚ãƒ¼æ°ãŒæŒ‡æ‘˜ã™ã‚‹ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ»ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã‚’åŠ¹çŽ‡çš„ã«å®Ÿç¾ã™ã‚‹æ‰‹æ³•ã«å¯¾ã—ã¦ãœã„å¼±ã§ã‚ã£ãŸã“ã¨ã‹ã‚‰ï¼Œå¯¾ç–ç‰ˆãŒãƒªãƒª
gratt 2008/08/26
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

dns
ãƒªãƒ³ã‚¯
å„ã‚µã‚¤ãƒˆã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ãŸã£ãŸä¸€ã¤ã®ãƒžã‚¹ã‚¿ãƒ¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã ã‘ã§ã™ã¹ã¦ç®¡ç†ã§ãã‚‹ã™ã”ã„ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã€ŒSuperGenPassã€
ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã¨ã¯ã€ãƒšãƒ¼ã‚¸ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ãŠæ°—ã«å…¥ã‚Šã«å…¥ã‚Œã‚‹ä»£ã‚ã‚Šã«JavaScriptã®ãƒ—ãƒã‚°ãƒ©ãƒ ã‚³ãƒ¼ãƒ‰ã‚’å…¥ã‚Œã¦ãŠãã“ã¨ã§ã€ãã‚Œã‚’é¸ã‚“ã æ™‚ã«ã¡ã‚‡ã£ã¨ã—ãŸæ©Ÿèƒ½ãŒã™ãã«å®Ÿè¡Œã§ãã‚‹ã¨ã„ã†ä¾¿åˆ©ãªã‚‚ã®ã€‚ ã§ã€ä»Šå›žã®ã€ŒSuperGenPassã€ã¯å˜ä¸€ã®ãƒžã‚¹ã‚¿ãƒ¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã•ãˆè¦šãˆã¦ãŠã‘ã°ã€å„ã‚µã‚¤ãƒˆã”ã¨ã«ã™ã¹ã¦é•ã†ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ¥µã‚ã¦ç°¡å˜ã«åˆ©ç”¨ã§ãã‚‹ã¨ã„ã†ã‹ãªã‚Šã™ã”ã„ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã§ã€åˆ¥é€”ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚„æ‹¡å¼µæ©Ÿèƒ½ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹å¿…è¦ãªã—ã€è¦šãˆã¦ãŠãã®ã¯ãŸã£ãŸä¸€ã¤ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€ãªãŠã‹ã¤å„ã‚µã‚¤ãƒˆã”ã¨ã«é•ã†ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¨å®šã§ãã‚‹ã¨ã„ã†ã‚¹ã‚°ãƒ¬ãƒ¢ãƒŽã¨ãªã£ã¦ã„ã¾ã™ã€‚ è¨å®šæ–¹æ³•ã‚„ä½¿ã„æ–¹ã¯ä»¥ä¸‹ã‹ã‚‰ã€‚ SuperGenPass: A Free Bookmarklet Password Generator. http://supergenpass.com/ ã¾ãšã€ŒBrowser compatibility ?ã€ã§ä½¿ç”¨ã—ã¦
gratt 2008/07/29
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸