[B! ie][security] issmã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

issm id:issm

ieã¨securityã«é–¢ã™ã‚‹issmã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (12)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

United States
Tell the truth: Do you want AI lie detectors in the workplace?The question is controversial and rai ses a host of questions, such as: do AI lie detectors even work?
issm 2012/12/14
security

ie

browser
ãƒªãƒ³ã‚¯
Tãƒã‚¤ãƒ³ãƒˆãƒ„ãƒ¼ãƒ«ãƒãƒ¼ã‚’å°Žå…¥ã™ã‚‹ã¨SSLé€šä¿¡ã®å±¥æ´ã¾ã§ã‚‚ãŒç›—è´å¯èƒ½ã«ãªã‚‹
twitterãªã©ã§Tãƒã‚¤ãƒ³ãƒˆãƒ„ãƒ¼ãƒ«ãƒãƒ¼ã®åˆ©ç”¨è¦ç´„ãŒè©±é¡Œã«ãªã£ã¦ã„ã¾ã™ã€‚ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€Tãƒã‚¤ãƒ³ãƒˆãƒ„ãƒ¼ãƒ«ãƒãƒ¼ã‚’å®Ÿéš›ã«å°Žå…¥ã—ã¦æ°—ã¥ã„ãŸç‚¹ã‚’å ±å‘Šã—ã¾ã™ã€‚çµè«–ã¨ã—ã¦ã€å½“è©²ãƒ„ãƒ¼ãƒ«ãƒãƒ¼ã‚’å°Žå…¥ã™ã‚‹ã¨ã€åˆ©ç”¨è€…ã®ã‚¢ã‚¯ã‚»ã‚¹å±¥æ´ï¼ˆSSLå«ã‚€ï¼‰ãŒå¹³æ–‡ã§é€ä¿¡ã•ã‚Œã€ç›—è´å¯èƒ½ãªçŠ¶æ…‹ã«ãªã‚Šã¾ã™ã€‚ è¿½è¨˜(2012/08/10 20:10) ãŸãã•ã‚“ã®æ–¹ã«èªã‚“ã§ã„ãŸã ãã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ä¸€éƒ¨ã«èª¤è§£ãŒã‚ã‚‹ã‚ˆã†ã§ã™ãŒã€ãƒ„ãƒ¼ãƒ«ãƒãƒ¼ãŒé€ä¿¡ã—ã¦ã„ã‚‹å†…å®¹ã¯URLã ã‘ã§ã€Cookieã‚„ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã¾ã§ã‚‚é€ä¿¡ã—ã¦ã„ã‚‹ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚URLã‚’é€ä¿¡ã™ã‚‹ã ã‘ã§ã‚‚ã€ä»¥ä¸‹ã«ç¤ºã™å±é™ºæ€§ãŒã‚ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ è¿½è¨˜çµ‚ã‚ã‚Š è¿½è¨˜(2012/08/13 23:50) ãƒã‚¤ãƒ³ãƒˆãƒ„ãƒ¼ãƒ«ãƒãƒ¼ã«ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ãŒã‚ã‚Šã€WEBé–²è¦§å±¥æ´ã®é€ä¿¡ãŒSSLé€šä¿¡ã«å¤‰æ›´ã•ã‚Œã¾ã—ãŸã€‚å¾“ã£ã¦ã€WEBé–²è¦§å±¥æ´ãŒç›—è´å¯èƒ½ãªçŠ¶æ³ã¯å›žé¿ã•ã‚Œã¾ã—ãŸã€‚æœ¬æ—¥22:50é ƒç¢ºèªã—ã¾ã—ãŸã€‚
issm 2012/08/10
security

ie

http

https
ãƒªãƒ³ã‚¯
JSONã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã‚’ã©ã“ã¾ã§ã‚„ã‚‹ã‹å•é¡Œ - è‘‰ã£ã±æ—¥è¨˜
Ajaxãªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦ã€ã‚µãƒ¼ãƒã‹ã‚‰JSONã‚’è¿”ã™å ´åˆã«ã€JSONè‡ªä½“ã¯validã§ã‚ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšã€(IEã®éƒ½åˆã§)ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒä¸è¶³ã—ã¦ã„ã¦è„†å¼±æ€§ã«ã¤ãªãŒã£ã¦ã‚‹å ´åˆãŒã‚ã‚‹ã®ã§ã€æ›¸ã„ã¦ãŠãã¾ã™ã€‚ ç™ºç”Ÿã™ã‚‹ã‹ã‚‚ã—ã‚Œãªã„è„†å¼±æ€§ JSONã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒä¸è¶³ã—ã¦ã„ã‚‹å ´åˆã«ç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹è„†å¼±æ€§ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ JSONå†…ã«å«ã¾ã‚Œã‚‹æ©Ÿå¯†æƒ…å ±ã®æ¼ãˆã„ XSS ãã‚Œãžã‚Œã®è©³ç´°ã«ã¤ã„ã¦ã¯å¾Œè¿°ã—ã¾ã™ã€‚ é–‹ç™ºå´ã§ã‚„ã‚‹ã¹ãã“ã¨ æ–‡å—åˆ—ä¸ã®Unicodeæ–‡å—ã¯ "\uXXXX" ãªå½¢å¼ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã¨ã¨ã‚‚ã«ã€ASCIIãªç¯„å›²ã§ã‚ã£ã¦ã‚‚ã€Œ/ã€ã€Œ<ã€ã€Œ>ã€ã€Œ+ã€ã‚‚åŒæ§˜ã«ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€å‰è¿°ã®è„†å¼±æ€§ã‚’é˜²ãã“ã¨ãŒã§ãã¾ã™ã€‚ Perlã§ã‚ã‚Œã°ã€ä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã«ãªã‚Šã¾ã™ã€‚JSON->ascii(1) ã«ç¶šã‘ã¦ã€JSONæ–‡å—åˆ—ã‚’æ£è¦è¡¨ç¾ã§ç½®æ›ã—ã¦ã„ã‚‹ã‚ãŸã‚ŠãŒã‚ãƒ¢ã«ãªã‚Šã¾ã™ã€‚ use utf8; u
issm 2011/07/06
security

json

http

ie

browser
ãƒªãƒ³ã‚¯
X-Content-Type-Options: nosniff ã¤ã‹ã‚ãªã„ã‚„ã¤ã¯æ»ãã°ã„ã„ã®ã«! - è‘‰ã£ã±æ—¥è¨˜
2011-01-06: IE8ã¨ã„ã†ã“ã¨ã‚’è¿½è¨˜ & ã¡ã‚‡ã£ã¨é–“é•ã„ã‚’ä¿®æ£ã€‚ã‚ã‘ã¾ã—ã¦ãŠã‚ã§ã¨ã†ã”ã–ã„ã¾ã™ã€‚ å¹´æ˜Žã‘æ—©ã€…ã§ã™ãŒã€Internet Explorerã®è©±é¡Œã§ã™ã€‚IEã¯ã”å˜ã˜ã®é€šã‚Šã€Content-Type ã ã‘ã§ãªãã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®å†…å®¹ãªã©ã‚‚ sniff ã™ã‚‹ã“ã¨ã§ãƒ•ã‚¡ã‚¤ãƒ«ã‚¿ã‚¤ãƒ—ã‚’æ±ºå®šã—ã¦ã„ã‚‹ãŸã‚ã€ç”»åƒãƒ•ã‚¡ã‚¤ãƒ«ã‚„ãƒ†ã‚ã‚¹ãƒˆãƒ•ã‚¡ã‚¤ãƒ«ã‚’HTMLã¨åˆ¤å®šã—ã¦ã—ã¾ã„ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ãŒç™ºç”Ÿã™ã‚‹ã“ã¨ãŒæ˜”ã‹ã‚‰ãŸã³ãŸã³å ±å‘Šã•ã‚Œã¦ã„ã¾ã—ãŸ*1ã€‚ç¾åœ¨ã¯å¹¾åˆ†ãƒžã‚·ã«ãªã£ãŸã¨ã¯ã„ãˆã€IEã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚¿ã‚¤ãƒ—ã®åˆ¤å®šã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¯éžå¸¸ã«é›£è§£ã§ã‚ã‚Šã€ç¾åœ¨ã§ã‚‚çŠ¶æ³ã«ã‚ˆã£ã¦ã¯Webã‚µã‚¤ãƒˆé‹å–¶è€…ã®ã¾ã£ãŸãæ„å›³ã—ã¦ã„ãªã„ã‹ãŸã¡ã§ã®XSSãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ãŒã‚ã£ãŸã‚Šã—ã¾ã™ã€‚ãã†ã„ã†ã‚ã‘ã§ã€IEãŒã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ sniff ã—ã¦HTMLä»¥å¤–ã®ã‚‚ã®ã‚’HTMLæ‰±ã„ã—ã¦ã—ã¾ã†ã“ã¨ã‚’é˜²ããŸã‚ã«ã€å‹•çš„ã«ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ç”Ÿæˆã—ã¦ã„ã‚‹å ´åˆã«
issm 2011/01/06
http

security

xss

ie
ãƒªãƒ³ã‚¯
#05ã€€ãƒ–ãƒ©ã‚¦ã‚¶ã®ãƒãƒƒãƒ‰ãƒŽã‚¦ãƒã‚¦ã€€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ç·¨ | gihyo.jp
ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãªã©ã‚’ä½¿ã„ã“ãªã™ãŸã‚ã«ã€ã‚¹ãƒˆãƒ¬ã‚¹ã‚’æ„Ÿã˜ãªãŒã‚‰ã‚‚ã—ã¶ã—ã¶è¦šãˆãªã‘ã‚Œã°ãªã‚‰ãªã„ã‚ˆã†ãªãƒŽã‚¦ãƒã‚¦ã€ã€Œâ ãƒãƒƒãƒ‰ãƒŽã‚¦ãƒã‚¦ã€ãŒãƒ†ãƒ¼ãƒžã®æœ¬é€£è¼‰ã€ç¬¬5å›žã®ä»Šå›žã¯ãƒ–ãƒ©ã‚¦ã‚¶ã®BKã‚’ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®æ‰±ã„ã«é–¢é€£ã™ã‚‹ã‚‚ã®ã«çµžã£ã¦å–ã‚Šä¸Šã’ãŸã„ã¨æ€ã„ã¾ã™ã€‚ IEã®Content sniffing é€šå¸¸ã€ãƒ–ãƒ©ã‚¦ã‚¶ã¯HTTPã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®Content-Typeãƒ˜ãƒƒãƒ€ã«å¿œã˜ã¦ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ã©ã®ã‚ˆã†ã«å‡¦ç†ã™ã‚‹ã‹æ±ºã‚ã¾ã™ãŒã€Internet Explorer 7ï¼ˆIE7ï¼‰ã¯ã“ã®ãƒ˜ãƒƒãƒ€ã‚’ç„¡è¦–ã™ã‚‹ã¨ããŒã‚ã‚Šã¾ã™[1]â ã€‚ ãŸã¨ãˆã°ã€ãƒªã‚¹ãƒˆ1ã®ã‚ˆã†ãªãƒ•ã‚¡ã‚¤ãƒ«ã‚’test.txtã¨ã„ã†åå‰ã§Webã‚µãƒ¼ãƒã«ç½®ã„ã¦ã€IE7ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€ã‚µãƒ¼ãƒã‹ã‚‰Content-Type:text/plainï¼ˆãŸã ã®ãƒ†ã‚ã‚¹ãƒˆãƒ•ã‚¡ã‚¤ãƒ«ï¼‰ã¨ã—ã¦é€ã‚‰ã‚Œã¦ãã¦ã„ã‚‹ã«ã‚‚ã‹ã‹ã‚ã‚‰ãšã€HTMLã¨ã—ã¦è§£é‡ˆã•ã‚Œã¦ã—ã¾ã„ã¾ã™ï¼ˆå›³1â ï¼‰â ã€‚ ãƒªã‚¹ãƒˆ1ã€€test.tx
issm 2009/10/18
http

browser

security

ie
ãƒªãƒ³ã‚¯
ï¼»ç„¡è¦–ã§ããªã„ï¼½IEã®Content-Typeç„¡è¦–
ï¼»ç„¡è¦–ã§ããªã„ï¼½IEã®Content-Typeç„¡è¦–ï¼šæ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼ˆ2ï¼‰ï¼ˆ1/2 ãƒšãƒ¼ã‚¸ï¼‰ XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ ç„¡è¦–ã§ããªã„IEã®ã€ŒContent-Typeç„¡è¦–ã€å•é¡Œ çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ã€ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã§ã™ã€‚ ç¬¬2å›žã§ã¯ã€Internet Explorerï¼ˆä»¥ä¸‹ã€IEï¼‰ã®ä»•æ§˜ã§ã‚‚ç‰¹ã«æ‚ªåé«˜ã„ã€ŒContent-Typeç„¡è¦–ã€ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ IEã®Content-Typeç„¡è¦–å•é¡Œã¯éžå¸¸ã«è¤‡é›‘ã§ã€ç§è‡ªèº«ã‚‚å®Œå…¨ã«èª¬æ˜Žã§ãã‚‹è‡ªä¿¡ã¯ãªã„ã®ã§ã™ãŒã€ãã‚Œã§ã‚‚ã‚»ã‚ãƒ¥ã‚¢ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é–‹ç™ºã™ã‚‹ã†ãˆã§é¿ã‘ã¦ã¯é€šã‚Œãªã„å•é¡Œã§ã™ã®ã§ã€å–ã‚Šä¸Šã’ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚
issm 2009/08/15
ie

browser

security

http
ãƒªãƒ³ã‚¯
æ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ç¬¬1å›ž ï¼»ã“ã‚Œã¯ã²ã©ã„ï¼½IEã®å¼•ç”¨ç¬¦ã®è§£é‡ˆ âˆ’ ï¼ IT
XSSã«CSRFã«SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«â€¦â€¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚°ãƒ©ãƒžãŒçŸ¥ã£ã¦ãŠãã¹ãè„†å¼±æ€§ã¯ã„ã£ã±ã„ã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬é€£è¼‰ã§ã¯ã€ãã®ã‚ˆã†ãªãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚‚ã®â€œä»¥å¤–â€ã‚‚æŽ˜ã‚Šä¸‹ã’ã¦ã„ãã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ å°ã•ãªè©±é¡ŒãŒé¢ç™½ã„ çš†ã•ã‚“ã€ã¯ã˜ã‚ã¾ã—ã¦ã€‚ã¯ã›ãŒã‚ã‚ˆã†ã™ã‘ã¨ç”³ã—ã¾ã™ã€‚ ã€Œæ•™ç§‘æ›¸ã«è¼‰ã‚‰ãªã„Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã¨ã„ã†ã“ã¨ã§ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢é€£ã™ã‚‹ã€æ™®æ®µã‚ã¾ã‚Šè¦‹æŽ›ã‘ãªã„ã‚ˆã†ãªå°ã•ãªè©±é¡Œã‚’å–ã‚Šä¸Šã’ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ã‚»ã‚ãƒ¥ã‚¢ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã«ã€é–‹ç™ºè€…ã®æ–¹ã ã‘ã§ãªãã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§æ¤œæŸ»ã‚’è¡Œã†æ–¹ã€…ã«ã‚‚èªã‚“ã§ã„ãŸã ããŸã„ã¨æ€ã£ã¦ã„ã¾ã™ã€‚é‡ç®±ã®éš…ã‚’æ¥Šæžã§ã»ã˜ãã‚‹ã‚ˆã†ãªå°ã•ãªè©±é¡Œã°ã‹ã‚Šã§ã™ãŒã€çš†ã•ã‚“ã‚ˆã‚ã—ããŠé¡˜ã„ã—ã¾ã™ã€‚ ã•ã¦ç¬¬1å›žã¯ã€Internet ExplorerãŒHTMLã‚’è§£é‡ˆã™ã‚‹éš›ã®å¼•ç”¨
issm 2009/03/02
security

html

browser

ie

javascript

xss
ãƒªãƒ³ã‚¯
è„†å¼±æ€§æ¤œè¨¼ç”¨ç”»åƒã‚’ä½œæˆ (Kanasansoft Web Lab.)
ã“ã®ç”»åƒã¯ã€MicrosoftÂ InternetÂ Explorerã®ç”»åƒãƒ•ã‚¡ã‚¤ãƒ«ã«å¯¾ã™ã‚‹è„†å¼±æ€§ã‚’ã€æ¤œè¨¼ã™ã‚‹ãŸã‚ã®ã‚‚ã®ã§ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãŒç”»åƒã‚’æŠ•ç¨¿ã§ãã€æŠ•ç¨¿ã•ã‚ŒãŸç”»åƒã‚’ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã§è¡¨ç¤ºã™ã‚‹ã‚ˆã†ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å ´åˆã€ã“ã®è„†å¼±æ€§ãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ å®Ÿéš›ã«æŠ•ç¨¿ã‚’è¡Œã„ã€æ¤œè¨¼ã—ã¦ã¿ã¦ä¸‹ã•ã„ã€‚è‡ªåˆ†ã®ç®¡ç†ä¸‹ã§ã¯ãªã„ã‚µã‚¤ãƒˆã§è¡Œã£ãŸå ´åˆã€ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ç‰ã®çŠ¯ç½ªè¡Œç‚ºã«å•ã‚ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã®ã§å–ã‚Šæ‰±ã„ã«ã¯ã”æ³¨æ„ä¸‹ã•ã„ã€‚ ã€ŒXSS:CrossÂ SiteÂ Scriptingã€ã¨alertãŒè¡¨ç¤ºã€ã€ŒPhishingã€ã¨ç”»é¢ã«è¡¨ç¤ºã€åˆ¥ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦(ã¾ãŸã¯åˆ¥ã‚¿ãƒ–)ãŒé–‹ãã€ŒSessionÂ Hijackingã€ãŒGoogleã«ã¦æ¤œç´¢ç‰ã®å‹•ä½œãŒç¢ºèªã•ã‚ŒãŸå ´åˆã€ãã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡ŒãŒã‚ã‚Šã¾ã™ã€‚ CrossÂ SiteÂ Scriptingã‚’ã¯ã˜ã‚ã€SessionÂ Hijackingç‰ã€Ja
issm 2008/06/28
security

ie

image
ãƒªãƒ³ã‚¯
Googleã‚¹ãƒ—ãƒ¬ãƒƒãƒ‰ã‚·ãƒ¼ãƒˆã®A1ã‚»ãƒ«ã«HTMLã‚’æ›¸ã„ã¦CSVã§ä¿å˜ã™ã‚‹ã¨â€¦ | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«
Google Docsã‚¹ãƒ—ãƒ¬ãƒƒãƒ‰ã‚·ãƒ¼ãƒˆã®æœ€åˆã®ã‚»ãƒ«ã«HTMLã‚’æ›¸ã„ã¦CSVã§ä¿å˜ã™ã‚‹ã¨â€¦ Google Docsã«ã¯ä»Šã®ã¨ã“ã‚ãƒ¯ãƒ¼ãƒ‰ãƒ—ãƒã‚»ãƒƒã‚µã€ã‚¹ãƒ—ãƒ¬ãƒƒãƒ‰ã‚·ãƒ¼ãƒˆã€ãƒ—ãƒ¬ã‚¼ãƒ³ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ã®3ã¤ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒç”¨æ„ã•ã‚Œã¦ã„ã‚‹ã‚ã‘ã ãŒã€ã†ã¡ã‚¹ãƒ—ãƒ¬ãƒƒãƒ‰ã‚·ãƒ¼ãƒˆã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«IEã«é–¢é€£ã—ãŸèˆˆå‘³æ·±ã„è„†å¼±æ€§ãŒã‚ã‚‹ã“ã¨ãŒç™ºè¦šã—ãŸã€‚ã“ã‚Œã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®Billy Riosæ°ã«ã‚ˆã£ã¦ç™ºè¦‹ã•ã‚ŒãŸã‚‚ã®ã€‚ã™ã§ã«åŒè„†å¼±æ€§ã¯ä¿®æ£ã•ã‚Œã¦ã„ã‚‹ãŒã€Gmailã®ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆå½è£…ã®ã¨ãã®ã‚ˆã†ã«æ³¨æ„ã—ã¦ãŠãã¹ãå†…å®¹ã ã€‚ ã“ã®è„†å¼±æ€§(ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°)ã‚’åˆ©ç”¨ã•ã‚ŒãŸå ´åˆã€æ”»æ’ƒè€…ã¯GoogleãŒæä¾›ã—ã¦ã„ã‚‹Gmailã‚„Google Codeã€Google Docsã®ã»ã‹ã®ã‚µãƒ¼ãƒ“ã‚¹ãªã©è¨±å¯ã•ã‚Œã¦ã„ãªã„ã‚µãƒ¼ãƒ“ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒåŽŸç†çš„ã«å¯èƒ½ã«ãªã‚‹ã€‚ã“ã‚Œã¯IEãŒContent-Typesã®æŒ‡å®šã•ã‚ŒãŸã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®è§£
issm 2008/04/17
ï¼ˆå¼•ç”¨ï¼‰Google Docsã®æƒ³å®šãŒç”˜ã‹ã£ãŸã®ã‹IEã®æŽ¨è«–ãŒãŠç¯€ä»‹ã ã£ãŸã®ã‹ã¯ã‚ã‹ã‚‰ãªã„

security

google

ie
ãƒªãƒ³ã‚¯
IEã¨Firefoxã§ã€Œãƒªãƒ•ã‚¡ãƒ©ã‚’é€ä¿¡ã—ãªã„è¨å®šã€ã‚’ã™ã‚‹ : LINE Corporation ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€ä½ã€…æœ¨ã§ã™ã€‚ ä»–ç¤¾ã‚µã‚¤ãƒˆã¸ã®ãƒªãƒ³ã‚¯ãŒå«ã¾ã‚Œã‚‹ã‚ˆã†ãªé–‹ç™ºç’°å¢ƒã§ä½œæ¥ã‚’é€²ã‚ã‚‹å ´åˆã€ä½¿ç”¨ã—ã¦ã„ã‚‹ãƒ–ãƒ©ã‚¦ã‚¶ã‚’ã€Œãƒªãƒ•ã‚¡ãƒ©ã‚’é€ä¿¡ã—ãªã„è¨å®šã€ã«ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã†ã£ã‹ã‚Šã‚¯ãƒªãƒƒã‚¯ã—ã¦ã—ã¾ã£ãŸã‚µã‚¤ãƒˆã«é€ä¿¡ã—ãŸãƒªãƒ•ã‚¡ãƒ©ã‹ã‚‰ã€Œé–‹ç™ºç’°å¢ƒã®URLãŒã°ã‚Œã¦ã—ã¾ã†ã€ã¨ã„ã†å±é™ºã‚’é˜²ããŸã‚ã§ã™ã€‚ ã¤ã¾ã‚Šã€ãƒªãƒ•ã‚¡ãƒ©ã‚’é€ä¿¡ã™ã‚‹è¨å®šã®ã¾ã¾é–‹ç™ºç’°å¢ƒã§ä½œæ¥ã‚’é€²ã‚ã‚‹ã“ã¨ã¯ã€ã€Œã‚¹ãƒ¼ãƒ„ã®å†…ãƒã‚±ãƒƒãƒˆã«ã‚ãƒ£ãƒã‚¯ãƒ©ã®ãƒžãƒƒãƒãŒå…¥ã£ãŸã¾ã¾ã«ãªã£ã¦ã„ã‚‹ã€ã®ã¨åŒã˜ãã‚‰ã„ç„¡é˜²å‚™ãªçŠ¶æ…‹ã¨ã„ãˆã¾ã™ã€‚æƒ¨äº‹ãŒèµ·ã“ã‚‹å‰ã«ã€ã—ã£ã‹ã‚Šã¨æº–å‚™ã‚’ã—ã¦ãŠãã¾ã—ã‚‡ã†ã€‚ ã€ŽInternet Explorerã€ã®å ´åˆ ã€ŽInternet Explorerã€ï¼ˆä»¥ä¸‹ã€IEï¼‰ã®å ´åˆã¯ã€ŒProxomitronã€ã‚’ä½¿ã†æ–¹æ³•ã‚‚ã‚ã‚Šã¾ã™ãŒã€ãƒªãƒ•ã‚¡ãƒ©ã‚’é€ä¿¡ã—ãªã„è¨å®šã ã‘ã§ã‚ã‚Œã°ã€ŒFiddler2ã€ã®ã»ã†ãŒç°¡å˜ã§ã™ã®ã§ã€ã“ã“ã§ã¯ãã®æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ Fiddler2 ã‚’ä½¿ã£ã¦IE
issm 2007/12/12
web

dev

security

firefox

ie
ãƒªãƒ³ã‚¯
ITæˆ¦è¨˜ - IEã‚’è¯éº—ã«æ’ƒå¢œã™ã‚‹ä¸€è¡Œ
ã¯ã„ï¼ ã“ã‚“ã«ã¡ã¯ï¼ï¼ï¼ï¼ï¼ ä»Šæ—¥ã¯ã€å¶ç„¶ãƒ–ãƒ©ã‚¯ãƒ©ç™ºè¦‹ã—ã¡ã‚ƒã£ãŸã‹ã‚‰ã€ãã‚Œã‚’ãŠä¼ãˆã—ã¾ã™ãï¼ ã“ã‚Œã ã‚ˆï¼ <script>document.createStyleSheet().addRule('html > body', 'display:block');</script> â†’ ã‚µãƒ³ãƒ—ãƒ« (IEã ã¨ãƒ–ãƒ©ã‚¦ã‚¶ãŒå›ºã¾ã£ãŸä¸Šã«ãƒ¡ãƒ¢ãƒª 1.5 GB ãã‚‰ã„ãã£ã¡ã‚ƒã†ã‚ˆï¼ æ³¨æ„ã—ã¦ãï¼) IE6ã¨ã‹IE6ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆãƒ–ãƒ©ã‚¦ã‚¶ã ã¨ç¢ºå®Ÿã«è½ã¡ã¡ã‚ƒã†ã¿ãŸã„ã ãï¼IE7ã¯è½ã¡ãªã„ã‘ã©ï¼ CSSStyleSheet ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã« addRule ã§åå«ã‚»ãƒ¬ã‚¯ã‚¿ã‚’ã‚ã¦ã‚‹ã¨ãƒ€ãƒ¡ãªã‹ã‚“ã˜ã‹ãªï¼ ã¡ãªã¿ã« display:block ã®ç®‡æ‰€ã¯ã©ã‚“ãªãƒ—ãƒãƒ‘ãƒ†ã‚£ã§ã‚‚è½ã¡ã‚‹ã‚ˆï¼ ãªã«ã“ã‚Œï¼ã‚ˆãã‚ã‹ã‚“ãªã„ã‘ã©é¢ç™½ã„ãâ€¦ï¼ Firefoxã¨ã‹Operaå¤§å¥½ãã£åã¯ã€ã“ã‚Œã‚’ãŸãã•ã‚“ãƒãƒ©ã¾ã„ã¦IEã®ã‚·ã‚§ã‚¢ã‚’ã©ã‚“ã©ã‚“ä¸‹ã’ã¡ã‚ƒ
issm 2007/08/12
javascript

security

ie
ãƒªãƒ³ã‚¯
IEã‚’è¯éº—ã«æ’ƒå¢œã™ã‚‹ä¸€è¡Œ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼(Hatena)
ã¯ã„ï¼ ã“ã‚“ã«ã¡ã¯ï¼ï¼ï¼ï¼ï¼ ä»Šæ—¥ã¯ã€å¶ç„¶ãƒ–ãƒ©ã‚¯ãƒ©ç™ºè¦‹ã—ã¡ã‚ƒã£ãŸã‹ã‚‰ã€ãã‚Œã‚’ãŠä¼ãˆã—ã¾ã™ãï¼ ã“ã‚Œã ã‚ˆï¼ <style>*{position:relative}</style><table><input></table> â†’ ã‚µãƒ³ãƒ—ãƒ« (IEã ã¨ãƒ–ãƒ©ã‚¦ã‚¶ãŒçµ‚äº†ã—ã¡ã‚ƒã†ã‚ˆï¼ æ³¨æ„ã—ã¦ãï¼) IE6ã¨ã‹IE6ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆãƒ–ãƒ©ã‚¦ã‚¶ã ã¨ç¢ºå®Ÿã«è½ã¡ã¡ã‚ƒã†ã¿ãŸã„ã ãï¼ IE7ã¯ç¢ºèªã—ã¦ãªã„ã‘ã©ï¼ tableã¨ã‹trã®ç›´ä¸‹ã«ã€inputã¨ã‹selectãŒã‚ã£ã¦ã€ ãã®ã‚ãŸã‚Šã«cssã®å…¨ç§°ã‚»ãƒ¬ã‚¯ã‚¿ã§position:relativeãŒã‚ãŸã£ã¦ã„ã‚‹ã¨ãƒ€ãƒ¡ãªã‹ã‚“ã˜ã‹ãªï¼ ã¡ãªã¿ã«inputã«styleã§ç›´æŽ¥relativeã‚ã¦ã¦ã‚‚è½ã¡ãªã‹ã£ãŸã‚ˆï¼ ãªã«ã“ã‚Œï¼ ã‚ˆãã‚ã‹ã‚“ãªã„ã‘ã©é¢ç™½ã„ãâ€¦ï¼ Firefoxã¨ã‹Operaå¤§å¥½ãã£åã¯ã€ ã“ã‚Œã‚’ãŸãã•ã‚“ãƒãƒ©ã¾ã„ã¦IEã®ã‚·ã‚§ã‚¢ã‚’ã©ã‚“ã©ã‚“ä¸‹ã’ã¡ã‚ƒãˆã°ã„ã„ã¨æ€ã†ã‚ˆï¼
issm 2007/08/08
ie

security

ã“ã‚Œã¯ã™ã”ã„

bug
ãƒªãƒ³ã‚¯
1