[B! æ¨©é™] ionisã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ionis id:ionis

æ¨©é™ã«é–¢ã™ã‚‹ionisã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æŽ¥ç¶šå…ƒ IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã«åŸºã¥ã„ã¦ IAM æ¨©é™ã‚’å¤‰æ›´ã‚’ã—ãŸã„ | DevelopersIO
ä»Šæ—¥ã¯ãƒ¦ãƒ¼ã‚¶ãŒæ„è˜ã™ã‚‹ã“ã¨ãªãã€æŽ¥ç¶šå…ƒ IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã«ã‚ˆã£ã¦ IAM æ¨©é™ã‚’ã€Œç®¡ç†è€…æ¨©é™ã€ã€Œå‚ç…§æ¨©é™ã€ã«åˆ‡ã‚Šæ›¿ãˆã‚‹æ–¹æ³•ã‚’ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ã‚„ã‚ŠãŸã„ã“ã¨ã‚’çµµã«ã™ã‚‹ã¨ã€ä»¥ä¸‹ã®ã¨ãŠã‚Šã§ã™ã€‚ ä¾‹ãˆã°ã€ã‚ªãƒ•ã‚£ã‚¹ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒªã‚¢å†…ãªã©ç‰¹å®šã® IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„ã‚‹å ´åˆã¯ã€ã€Œç®¡ç†è€…æ¨©é™ã€ã¨ã—ã¦åˆ©ç”¨ã§ãã€è‡ªå®…ãªã©ãƒ‘ãƒ–ãƒªãƒƒã‚¯ã‚¢ã‚¯ã‚»ã‚¹ã®å ´åˆã«ã¯ã€Œå‚ç…§æ¨©é™ã€ã®ã¿ã«æ¨©é™ãŒå¤‰ã‚ã‚‹æƒ³å®šã§ã™ã€‚ ä»Šå›žã¯ IAM ç®¡ç†ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§ã®ã¿ IAM ãƒ¦ãƒ¼ã‚¶ã‚’ç™ºè¡Œã—ã€AWS ãƒªã‚½ãƒ¼ã‚¹ã®ã‚ã‚‹ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ã¯ã‚¹ã‚¤ãƒƒãƒãƒãƒ¼ãƒ«ã§ãƒã‚°ã‚¤ãƒ³ã™ã‚‹æƒ³å®šã§æ¤œè¨¼ã—ã¦ã„ã¾ã™ãŒã€ã‚¹ã‚¤ãƒƒãƒãƒãƒ¼ãƒ«ã—ãªã„ç’°å¢ƒã§ã‚‚åŒã˜ã“ã¨ã¯å‡ºæ¥ã‚‹ã‹ã¨æ€ã„ã¾ã™ã€‚ IAM ãƒ¦ãƒ¼ã‚¶ãƒ¼æº–å‚™ï¼ˆã‚¹ã‚¤ãƒƒãƒå…ƒ AWS ã‚¢ã‚«ã‚¦ãƒ³ãƒˆå´ï¼‰ IAM ç®¡ç†ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã« IAM ãƒ¦ãƒ¼ã‚¶ã‚’ä½œæˆã—ã¾ã™ã€‚AWS ã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã«ã¯ã“ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã® IAM ãƒ¦ãƒ¼ã‚¶ã§ãƒã‚°ã‚¤ãƒ³ã—ã€å„ç’°å¢ƒã«ã‚¹ã‚¤ãƒƒãƒãƒãƒ¼
ionis 2019/06/20
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

IAM

aws

æ¨©é™
ãƒªãƒ³ã‚¯
12 Case Studies for the Access Controls of Web Application #appsecapac2014
12 Case Studies for the Access Controls of Web ApplicationÂ #appsecapac2014
ionis 2018/07/26
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

OWASP

æ¨©é™

ç®¡ç†
ãƒªãƒ³ã‚¯
Dirty COW (CVE-2016-5195)
Dirty COW (CVE-2016-5195) is a privilege escalation vulnerability in the Linux Kernel View Exploit Details What is the CVE-2016-5195? CVE-2016-5195 is the official reference to this bug. CVE (Common Vulnerabilities and Exposures) is the Standard for Information Security Vulnerability Names maintained by MITRE. Why is it called the Dirty COW bug? "A race condition was found in the way the Linux ker
ionis 2016/10/21
è„†å¼±æ€§

linux

æ¨©é™
ãƒªãƒ³ã‚¯
So-net ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é€šä¿¡
ç‰¹ã«æ–ã‚Šã®ãªã„é™ã‚Šã€è¨˜è¼‰ã®é‡‘é¡ã¯ã™ã¹ã¦ç¨Žè¾¼é‡‘é¡ã§ã™ã€‚æ¶ˆè²»ç¨Žã®è¨ˆç®—ä¸Šã€å®Ÿéš›ã®è«‹æ±‚é¡ã¨ç•°ãªã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚½ãƒ•ãƒˆã‚’ãŠç”³ã—è¾¼ã¿æ¸ˆã¿ã®æ–¹ã¸ å„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚½ãƒ•ãƒˆã‚’ãŠç”³ã—è¾¼ã¿å¾Œã€ã”åˆ©ç”¨ã«ã‚ãŸã£ã¦ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚’è¡Œã†å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ è¨å®šå®Œäº†ã—ã¦ã„ãªã„æ–¹ã¯ã€ä¸‹è¨˜ã‚ˆã‚ŠãŠæ‰‹ç¶šãã‚’ãŠé¡˜ã„ã—ã¾ã™ã€‚
ionis 2016/06/13
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Android

æ¨©é™

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
Androidãƒ‘ãƒ¼ãƒŸã‚·ãƒ§ãƒ³åˆ¥ï¼ä½•ã—ã¦ã‚“ã®ï¼Ÿ#3 AFFECTS_BATTERYç·¨ | Workpiles
å‰å›žã«ç¶šã„ã¦Androidãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³ãŒä½•ã«ä½¿ç”¨ã•ã‚Œã¦ã„ã‚‹ã‹ã®ç¢ºèªã§ã™ã€‚ ä»Šå›žã¯ã€AFFECTS_BATTERYã‚°ãƒ«ãƒ¼ãƒ—ã§ã™ã€‚ #1ï¼šLOCATIONç·¨ #2ï¼šSTORAGE,CAMERAç·¨ å‰å›žåŒæ§˜ã«protectionLevelãŒnormal,dangerousã®ã¿èª¬æ˜Žã—ã¾ã™ã€‚ AFFECTS_BATTERY é›»æºã¸ã®å½±éŸ¿ çŸæ™‚é–“ã§é›»æ± ã‚’æ¶ˆè²»ã™ã‚‹æ©Ÿèƒ½ã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼å‘ã‘ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³ã®èª¬æ˜Ž ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³ Level èª¬æ˜Ž ä½¿ã‚ã‚Œæ–¹
ionis 2016/06/13
Wi-Fiãƒžãƒ«ãƒã‚ãƒ£ã‚¹ãƒˆã®å—ä¿¡ã‚’è¨±å¯ã€‚ãƒžãƒ«ãƒã‚ãƒ£ã‚¹ãƒˆã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ä½¿ç”¨ã—ã¦ã€Wi-Fiãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã®ã™ã¹ã¦ã®ãƒ‡ãƒã‚¤ã‚¹ã«é€ä¿¡ã•ã‚ŒãŸãƒ‘ã‚±ãƒƒãƒˆã‚’å—ä¿¡ã™ã‚‹ã“ã¨ã‚’è¨±å¯ã€‚ãƒžãƒ«ãƒã‚ãƒ£ã‚¹ãƒˆä»¥å¤–ã®ãƒ¢ãƒ¼ãƒ‰ã‚ˆã‚Šã‚‚é›»æ± æ¶ˆè²»é‡ãŒå¤§

Android

æ¨©é™
ãƒªãƒ³ã‚¯
èªã¿å–ã‚Šæ¨©é™ãŒãªãå®Ÿè¡Œæ¨©é™ã ã‘ã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒå®Ÿè¡Œã§ãã‚‹ã®ã¯ãªãœï¼Ÿ - ã‚«ãƒ¼ãƒãƒ«ã®ã‚½ãƒ¼ã‚¹ã‚’èªã‚€ - - çŒ«åž‹ã®è“„éŸ³æ©Ÿã¯ 1 åˆ†é–“ã« 45 å›žã«ã‚ƒã‚ã¨é³´ã
ãã£ã‹ã‘ã¯ã“ã®ãƒ„ã‚¤ãƒ¼ãƒˆã€‚ åŸºç¤Žçš„ãªã“ã¨ãªã‚“ã ã‚ã†ã‘ã©ç†è§£ã§ãã¦ãªã„ã“ã¨ã€‚ èªã¿å–ã‚Šæ¨©é™ã®ãªã„å®Ÿè¡Œæ¨©é™ã ã‘ã®ãƒ•ã‚¡ã‚¤ãƒ«ã£ã¦ã©ã†ã„ã†æ‰±ã„ã«ãªã‚‹ã‚“ã ã‚ã†ã€‚â€” ã‚‘ã¬ã½ã„æ”¹@é›»æŽ¢ãŒå‡ºï¼ˆã‚“ï¼‰ãŸã‚“ï¼Ÿ (@NPoi) March 27, 2014 å®Ÿéš›ã«ã‚„ã£ã¦ã¿ã‚‹ã¨ã‚ã‹ã‚‹ã‘ã©ã€å®Ÿè¡Œæ¨©é™ã ã‘ã¤ã„ã¦ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã¯å®Ÿè¡Œå¯èƒ½ã§ã™ã€‚ã§ã‚‚ã€ã€Œèªã¿è¾¼ã‚ãªã„ã®ã«å®Ÿè¡Œã§ãã‚‹ã€ã¨ã„ã†ã®ã¯ç›´æ„Ÿã«åã™ã‚‹ã‚ˆã†ãªæ°—ã‚‚ã—ã¾ã™ãã€‚ã ã£ã¦ã€å®Ÿè¡Œã™ã‚‹ãŸã‚ã«ã¯ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ãƒ¡ãƒ¢ãƒªã«èªã¿è¾¼ã‚€å¿…è¦ãŒã‚ã‚Šã¾ã™ã‹ã‚‰ï¼ã§ã¯ãªãœå®Ÿè¡Œæ¨©é™ã ã‘ã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒå®Ÿè¡Œã§ãã‚‹ã®ã‹ã€ãã®ä»•çµ„ã¿ã‚’è§£èª¬ã—ã¾ã™ã€‚ å®Ÿè¡Œã¨ã¯ãªã«ã‹ã€ã©ã†ã„ã†ä»•çµ„ã¿ãªã®ã‹ Linux ã«ãŠã„ã¦å®Ÿè¡Œã¨ã¯ã€Œforkã—ã¦execã™ã‚‹ã€ã§ã™ï¼ˆãã®ã¸ã‚“ã®è©³ã—ã„è©±ã¯ ãƒ—ãƒã‚»ã‚¹ã•ã‚“ ã‚’èªã‚‚ã†ï¼ï¼‰ã€‚ fork ã‚‚ exec ã‚‚ã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ«ï¼ˆæ£ç¢ºã«ã¯ execve ãŒã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ«ã§ exec ã¯ãã®ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã ã‘
ionis 2014/04/27
ãƒ•ã‚¡ã‚¤ãƒ«

linux

æ¨©é™

ãƒ—ãƒã‚»ã‚¹
ãƒªãƒ³ã‚¯
MySQL - ãƒ¦ãƒ¼ã‚¶ã®æ“ä½œï¼ˆä½œæˆã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å¤‰æ›´ã€å‰Šé™¤ï¼‰
MYSQLã®ãƒ¦ãƒ¼ã‚¶é–¢é€£ã‚³ãƒžãƒ³ãƒ‰ã®ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã„ã¾ã™ã€‚ [toc] ãƒ¦ãƒ¼ã‚¶ã®ä½œæˆ ãƒ¦ãƒ¼ã‚¶åã¯åŠè§’è‹±æ•°ã®16æ–‡å—ã¾ã§ã§ã™ã€‚ æ§‹æ–‡ GRANTæ¨©é™ ONÂ *.*Â TO ãƒ¦ãƒ¼ã‚¶å IDENTIFIED BY 'ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰'ã€€WITH GRANT OPTION; å…¨ã¦ã®æ¨©é™ã‚’ä¸ŽãˆãŸå ´åˆ ALL PRIVILEGESã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ï¼å…¨ã¦ã®æ¨©é™ã‚’ä¸Žãˆã‚‹ WITH GRANT OPTIONã€€ã€€ã€€ã€€ ï¼æ¨©é™ã®æ›¸ãæ›ãˆã‚’è¨±å¯ã™ã‚‹ ä½¿ç”¨ä¾‹ mysql> GRANT ALL PRIVILEGES ON *.* TO sasuke IDENTIFIED BY 'aaa' WITH GRANT OPTION; Query OK, 0 rows affected (0.03 sec) ä¸€éƒ¨æ¨©é™ã€SELECT,INSERTã®ã¿ä¸ŽãˆãŸå ´åˆ ä½¿ç”¨ä¾‹ mysql> GRANT INSERT,SELECT ON *.* TO
ionis 2009/07/28
ãªã‚“ã‹æ¯Žå›žèª¿ã¹ã‚‹æ°—ãŒã™ã‚‹ã®ã§ã€‚

mysql

æ¨©é™

è§£èª¬
ãƒªãƒ³ã‚¯
Linuxã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ«ã®å‹‰å¼·(ãã®ï¼‘ï¼”) - Webãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚’ã—ã¦ã¿ã‚ˆã†!!
Linuxã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ« ä½œè€…: å¡šè¶Šä¸€é›„å‡ºç‰ˆç¤¾/ãƒ¡ãƒ¼ã‚«ãƒ¼: æŠ€è¡“è©•è«–ç¤¾ç™ºå£²æ—¥: 2000/06ãƒ¡ãƒ‡ã‚£ã‚¢: å˜è¡Œæœ¬è³¼å…¥: 3äºº ã‚¯ãƒªãƒƒã‚¯: 56å›žã“ã®å•†å“ã‚’å«ã‚€ãƒ–ãƒã‚° (35ä»¶) ã‚’è¦‹ã‚‹ å‰å›žã¯ã“ã¡ã‚‰ ä»Šå›žã‹ã‚‰åå‰ä»˜ããƒ‘ã‚¤ãƒ—ã‚’ä½¿ã£ãŸãƒ—ãƒã‚»ã‚¹é–“é€šä¿¡ã«ã¤ã„ã¦ã¾ã¨ã‚ã¾ã™ã€‚ å‰å›žã¾ã§ã‚„ã£ã¦ã„ãŸåŒ¿åãƒ‘ã‚¤ãƒ—ã¯ãƒ•ã‚¡ã‚¤ãƒ«ãƒ‡ã‚£ã‚¹ã‚¯ãƒªãƒ—ã‚¿ã‚’ä»‹ã—ã¦ãƒ‘ã‚¤ãƒ—ã¸ãƒ‡ãƒ¼ã‚¿ã‚’æ›¸è¾¼ã‚“ã ã‚Šã€èªã¿è¾¼ã‚“ã ã‚Šã—ã¦ã„ã¾ã—ãŸã€‚ã¤ã¾ã‚Šãƒ‘ã‚¤ãƒ—ã«ã¯åå‰ãŒã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ ä»Šå›žã‹ã‚‰ã¾ã¨ã‚ã‚‹åå‰ä»˜ããƒ‘ã‚¤ãƒ—ã¯ã‚¹ãƒšã‚·ãƒ£ãƒ«ãƒ•ã‚¡ã‚¤ãƒ«ã¨å‘¼ã°ã‚Œã‚‹ç‰¹æ®Šãªãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä»‹ã—ã¦ãƒ‡ãƒ¼ã‚¿ã‚’ã‚„ã‚Šã¨ã‚Šã—ã¾ã™ã€‚ãƒ•ã‚¡ã‚¤ãƒ«ã«ã¯å½“ç„¶åå‰ãŒã‚ã‚Šã€ãã®åå‰ã‚’ä½¿ç”¨ã—ã¦ãƒ‡ãƒ¼ã‚¿ã‚’èªã¿æ›¸ãã™ã‚‹ã®ã§ã€Œåå‰ä»˜ãã€ã¨ã‚ã–ã‚ã–å‘¼ã‚“ã§ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ åå‰ä»˜ããƒ‘ã‚¤ãƒ—ã‚’åˆ©ç”¨ã™ã‚‹æ–¹æ³•ã¨ã—ã¦ã¯ä»¥ä¸‹ã®æ–¹æ³•ãŒã‚ã‚Šã¾ã™ã€‚ 1. mknodã‚³ãƒžãƒ³ãƒ‰ã‚’åˆ©ç”¨ã—ãŸæ–¹æ³• mknodã¨ã„ã†ã‚³ãƒžãƒ³ãƒ‰ã¯åå‰ä»˜ããƒ‘ã‚¤ãƒ—ã«é™ã‚‰ãšã€ã‚¹ãƒšã‚·
ionis 2008/10/22
åå‰ã¤ããƒ‘ã‚¤ãƒ—

ãƒ•ã‚¡ã‚¤ãƒ«

æ¨©é™
ãƒªãƒ³ã‚¯
1