[B! kazuho] issmã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

issm id:issm

kazuhoã«é–¢ã™ã‚‹issmã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (13)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

JSX ã¯ãªãœã€Œé€Ÿã„ã€ã®ã‹ - kazuhoã®ãƒ¡ãƒ¢ç½®ãå ´
ãªãœã€Œé€Ÿã„ã€ã®ã‹ã€ã«ã¤ã„ã¦ JSX é–‹ç™ºè€…ã®ç«‹å ´ã‹ã‚‰ã€‚ ãŸã¨ãˆã°ã€ã‚·ãƒ¥ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚²ãƒ¼ãƒ ã§ä¸€ç•ªé‡ãŸã„å‡¦ç†ã¯ä½•ã‹ã€‚è¨€ã†ã¾ã§ã‚‚ãªãè¡çªåˆ¤å®šã€‚å¤šæ•°ã®å¼¾ã‚„æ•µæ©Ÿã®è¡çªåˆ¤å®šã‚’æ¯Žãƒ•ãƒ¬ãƒ¼ãƒ ã”ã¨ã«è¡Œã†å¿…è¦ãŒã‚ã‚Šã€ã“ã®æ¼”ç®—ãŒé‡ãŸã„ã€‚ JSX ã«åŒæ¢±ã•ã‚Œã¦ã„ã‚‹ web/example/shooting.jsx ã«ã¯è¡çªåˆ¤å®šã®ã‚³ãƒ¼ãƒ‰ãŒè¤‡æ•°ã‚ã‚‹ãŒã€ä¸€ç•ªé‡ãŸã„ã®ã¯ Bullet#update é–¢æ•°ã§ã€ãã®å‡¦ç†ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹*1ã€‚ for (var rockKey in st.rocks) { var rock = st.rocks[rockKey]; if (this.detectCollision(rock)) { if (rock.hp == 0) return false; inDisplay = false; if (--rock.hp == 0) { st.score = Math.min(st.s
issm 2012/06/03
kazuho

jsx

javascript
ãƒªãƒ³ã‚¯
Cache::LRU ãŒé€Ÿã„ç†ç”± - Articles Advent Calendar 2010 Hacker
å…ˆæ—¥ã€ã‚ªãƒ³ãƒ¡ãƒ¢ãƒªãªã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« Cache::LRU ã‚’æ›¸ãã¾ã—ãŸã€‚Kazuho's Weblog: Cache::LRU (a handy and fast in-memory cache module in pure-perl) ã‚’è¦‹ã¦ã„ãŸã ã‘ã‚Œã°ã€Cache::LRU ãŒä»–ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚ˆã‚Šé€Ÿã„ã“ã¨ã¯æ˜Žã‚‰ã‹ã ã¨æ€ã„ã¾ã™ã€‚é€Ÿåº¦å·®ã®åŽŸå› ã¨ã—ã¦ã¯æ©Ÿèƒ½ã‚„å®Ÿè£…ä¸Šã®å·®ç•°ã‚‚ã‚ã‚‹ã®ã§ã™ãŒã€è¨è¨ˆä¸Šã®å·¥å¤«ã‚‚ Cache::LRU ãŒé€Ÿã„ç†ç”±ã®ã²ã¨ã¤ã§ã™ã€‚ LRU (Least Recently Used) ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’å‚™ãˆãŸã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’å®Ÿè£…ã—ã‚ˆã†ã¨æ€ã†ã¨ã€ ã‚¨ãƒ³ãƒˆãƒªãƒ«ãƒƒã‚¯ã‚¢ãƒƒãƒ—ã®ãŸã‚ã®ãƒãƒƒã‚·ãƒ¥ ã‚¢ã‚¯ã‚»ã‚¹é †ã‚’è¡¨ç¾ã™ã‚‹ãŸã‚ã®ãƒªã‚¹ãƒˆ ã®ï¼’ç¨®é¡žã‚’çµ„ã¿åˆã‚ã›ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ãƒªã‚¹ãƒˆã‚’è¡¨ç¾ã™ã‚‹æ‰‹æ³•ã¨ã—ã¦ã¯é…åˆ—ã‚’åˆ©ç”¨ã™ã‚‹ã‚‚ã®ã¨ãƒªãƒ³ã‚¯ãƒªã‚¹ãƒˆã‚’åˆ©ç”¨ã™ã‚‹ã‚‚ã®ãŒã‚ã‚Šã¾ã™ãŒã€Perl ã ã¨å‰è€…ã®ã»ã†ãŒé€Ÿã„ã€ã¨ã„ã†ã“ã¨ã¯
issm 2011/08/01
jpac2010

kazuho

cache-lru

cache

perl
ãƒªãƒ³ã‚¯
Cache::LRU (a handy and fast in-memory cache module in pure-perl)
Cache::LRU (a handy and fast in-memory cache module in pure-perl) Last week, after not being able to find a handy and fast cache module, I decided to write one by myself, and the outcome is Cache::LRU. Cache::LRU is an in-memory cache module written in pure-perl. It has no dependencies, and the code is less than 100 lines long. Yet it is faster than other modules as the result of a primitive bench
issm 2011/08/01
kazuho

cache-lru

cache

perl
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: Perl ã§ä¸¦åˆ—å‡¦ç† (using ãƒžãƒ«ãƒãƒ—ãƒã‚»ã‚¹)
issm 2011/03/10
kazuho

perl

programming
ãƒªãƒ³ã‚¯
ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒãƒãƒ¼ãƒ‰ã§ããŸã‚‰ã€ãã®é–¢æ•°ã‚’å‘¼ã¶ - kazuhoã®ãƒ¡ãƒ¢ç½®ãå ´
ã£ã¦å‡¦ç†ã‚’æ›¸ããŸã„å ´åˆãŒã‚ã‚‹*1ã‘ã©ã€ãã†ã„ã†å ´åˆã¯ã€ my $access_allowed = eval { require Authen::Libwrap } && host_ctl('tiarra', $sock); ã¿ãŸã„ãªæ„Ÿã˜ã§ã‚ˆã‹ã£ãŸã‚‰ã—ã„ã€‚ã£ã¦ id:tokuhirom ã«æ•™ãˆã¦ã‚‚ã‚‰ã£ãŸ *1:ãŸã¨ãˆã° Tiarra (ã‚ã‚‹ã„ã¯Perl) ã‹ã‚‰hosts.allowã¨ã‹ä½¿ã£ã¦ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã™ã‚‹è©± - kazuhoã®ãƒ¡ãƒ¢ç½®ãå ´ ã«ãŠã‘ã‚‹ Authen::Libwrap::host_ctl
issm 2010/12/03
kazuho

perl

tips
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: Compressing URLs in your Webapp, for size and speed
Last year I had a chance to talk about the internals of our service: Pathtraq at Percona Performance Conference (slides), in which I described the methods we use to compress the URLs in our database to below 40% of the original size, however had not released the source code since then.Â I am sorry for the delay, but have finally uploaded the code to github.com/kazuho/url_compress. It is generally
issm 2010/10/21
kazuho

algorithm

url
ãƒªãƒ³ã‚¯
GitHub - kazuho/url_compress: a static PPM-based URL compressor / decompressor
url_compress - a static PPM-based URL compressor / decompressor (c) 2008-2010 Cybozu, Labs. Inc. INTRODUCTION The library is a compressor / decompressor specifically designed to compress URLs. Expected compression ratio is from 25% to 40% of the original size. The compressed form does not preserve the original order however it is possible to perform a prefix search without decompressing the URLs.
issm 2010/10/21
kazuho

tool

url

mysql
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: My Slides at YAPC::Asia 2010 (Writing Prefork Servers / Workers, Unix Programming with Perl)
The slides I used for my presentations at YAPC::Asia 2010 are now available from the links below. Thank you to those who came, and JPA and the volunteer stuff for running the event. I hope you enjoyed (will enjoy) my slides!
issm 2010/10/18
kazuho

yapcasia2010

yapcasia

ãƒ—ãƒ¬ã‚¼ãƒ³

perl

unix

linux

server
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: (Twitter ã® XSS è„†å¼±æ€§ã«é–¢é€£ã—ã¦) æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã®æ£ã—ã„ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ‰‹æ³•ã«ã¤ã„ã¦
æ˜¨æ—¥ã® Twitter ã® XSS é¨’ãŽã¯ã€ã¾ã çš†ã•ã‚“ã®è¨˜æ†¶ã«æ–°ã—ã„ã“ã¨ã¨æ€ã„ã¾ã™ã€‚ã„ã„æ©Ÿä¼šãªã®ã§ã€ãƒ„ã‚¤ãƒ¼ãƒˆã®ã‚ˆã†ãªæ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ‰‹æ³•ã«ã¤ã„ã¦è§¦ã‚Œã¦ãŠããŸã„ã¨æ€ã„ã¾ã™ã€‚ Twitter ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ã€å˜ãªã‚‹å¹³æ–‡ï¼ˆãƒ—ãƒ¬ã‚¤ãƒ³ãƒ†ã‚ã‚¹ãƒˆï¼‰ã§ã¯ãªãã€ã€Œ@è‹±æ•°å—ã€ã®ã‚ˆã†ãªä»–ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¸ã®è¨€åŠã¨ã€Œhttp://ã€œã€ã®ã‚ˆã†ãª URL ã‚’è‡ªå‹•çš„ã«ãƒã‚¤ãƒ‘ãƒ¼ãƒªãƒ³ã‚¯åŒ–ã™ã‚‹æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã§ã™ã€‚ ã“ã®ã‚ˆã†ãªè¤‡æ•°ã®ãƒ«ãƒ¼ãƒ«ã‚’ã‚‚ã¤æ§‹é€ åŒ–ãƒ†ã‚ã‚¹ãƒˆã‚’ HTML åŒ–ã™ã‚‹éš›ã«ã¯ã€ã©ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ã‚’æ›¸ã‘ã°ã„ã„ã®ã§ã—ã‚‡ã†ï¼Ÿã€€ã¾ãšã€Œ@ã€œã€ã‚’ãƒªãƒ³ã‚¯åŒ–ã—ã¦ã‹ã‚‰ã€URL ã‚’ãƒªãƒ³ã‚¯åŒ–ã™ã‚Œã°ã„ã„ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿã€€ãã‚Œã ã¨ã€@ã€œ ã®ã‚’ãƒªãƒ³ã‚¯åŒ–ã—ãŸ A HREF ã‚¿ã‚°ã®ä¸ã® URL ãŒã•ã‚‰ã«ãƒªãƒ³ã‚¯åŒ–ã•ã‚Œã¦ã„ã¾ã„ã¾ã™ãã€‚ ã§ã¯ã€URL ã‚’ãƒªãƒ³ã‚¯åŒ–ã—ã¦ã‹ã‚‰ @ã€œ ã‚’ãƒªãƒ³ã‚¯åŒ–ã™ã‚Œã°ã„ã„ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿã€€ãã‚Œã ã¨ã€@ ã‚’å«ã‚€ URL ãŒã‚ã£ãŸå ´åˆã«
issm 2010/09/22
kazuho

xss

security

html

perl

text
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: REST ã«ãŠã‘ã‚‹ãƒˆãƒ©ãƒ³ã‚¶ã‚¯ã‚·ãƒ§ãƒ³ã«ã¤ã„ã¦ (Re: Web ã‚’æ”¯ãˆã‚‹æŠ€è¡“)
ã¨ã„ã„ã¤ã¤ã€ã²ã¨ã¤ã ã‘ç†è§£ã§ããªã„ã¨ã„ã†ã‹ã€ç´å¾—ã§ããªã„ã¨ã“ã‚ãŒã€‚ãƒˆãƒ©ãƒ³ã‚¶ã‚¯ã‚·ãƒ§ãƒ³ã®ã¨ã“ã‚ãŒãªã‚“ã ã‹RESTã£ã½ããªã„ã®ãŒã™ã”ãæ°—ã«ãªã‚‹ Webã‚’æ”¯ãˆã‚‹æŠ€è¡“ -HTTPã€URIã€HTMLã€ãã—ã¦REST (WEB+DB PRESSãƒ—ãƒ©ã‚¹ã‚·ãƒªãƒ¼ã‚º)(å±±æœ¬ é™½å¹³) - ãŸã ã®ã«ã£ã(2010-04-23) ã€ŒWeb ã‚’æ”¯ãˆã‚‹æŠ€è¡“ã€ã¯è‡ªåˆ†ã‚‚ã¨ã¦ã‚‚ã„ã„æœ¬ã ã¨æ€ã† (æ•™ç§‘æ›¸ã¨ã—ã¦ã™ã°ã‚‰ã—ã„ã—å¾©ç¿’ç”¨ã¨ã—ã¦ã‚‚èªã¿ã‚„ã™ã„ã®ã§ã‚¤ã‚¤) ã®ã§ã™ãŒã€ãƒˆãƒ©ãƒ³ã‚¶ã‚¯ã‚·ãƒ§ãƒ³ã®æ‰€ã ã‘ã¯åˆ†ã‹ã‚Šã¥ã‚‰ã„ãªã¨æ„Ÿã˜ã¾ã—ãŸã€‚ãã®åŽŸå› ã¯ã€atomic transaction ã§è§£æ±ºã§ãã‚‹èª²é¡Œã‚’ä¾‹ã¨ã—ã¦ä½¿ã£ã¦ã„ã‚‹ã¨ã„ã†ç‚¹ã¨ã€ãƒˆãƒ©ãƒ³ã‚¶ã‚¯ã‚·ãƒ§ãƒ³ã¨æ›´æ–°ã‚¯ã‚¨ãƒªã®ãƒ¬ã‚¤ãƒ¤åˆ†å‰²ãŒã•ã‚Œã¦ã„ãªã„ã€ã¨ã„ã†ï¼’ã¤ã®ç‚¹ã«ã‚ˆã‚‹ã‚‚ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ HTTP ä¸Šã§ãƒˆãƒ©ãƒ³ã‚¶ã‚¯ã‚·ãƒ§ãƒ³ã‚’è¡¨ç¾ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã‚±ãƒ¼ã‚¹ã®ã»ã¨ã‚“ã©ã¯ã€atomic transaction ã§ã¯ãªã
issm 2010/05/16
kazuho

http

https

rest

web
ãƒªãƒ³ã‚¯
2010å¹´ä»£ã«ã¯ Apache ã® mpm_prefork ã¨ã‹æµè¡Œã‚‰ãªã„ (ã‚‚ã—ãã¯ HTTP keep-alive ã®ãƒ¡ãƒªãƒƒãƒˆã¨ãƒ‡ãƒ¡ãƒªãƒƒãƒˆ) - kazuhoã®ãƒ¡ãƒ¢ç½®ãå ´
HTTP ã®æŒç¶šçš„æŽ¥ç¶šã®åŠŸç½ªã«ã¤ã„ã¦ ã¯ã˜ã‚ã«ã€HTTP ã®æŒç¶šçš„æŽ¥ç¶š (keep-alive) ã®ãƒ¡ãƒªãƒƒãƒˆã«ã¤ã„ã¦ã€‚æŒç¶šçš„æŽ¥ç¶šã‚’ä½¿ã†ãƒ¡ãƒªãƒƒãƒˆã¯ã€ä»¥ä¸‹ã®ï¼’ç‚¹ã€‚ TCP æŽ¥ç¶šã®ç¢ºç«‹ã«ã‹ã‹ã‚‹æ™‚é–“ã®ç¯€ç´„*1 TCP ã®æŽ¥ç¶šã¨åˆ‡æ–ã«å¿…è¦ãªè³‡æº (CPUã¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯) ã®ç¯€ç´„ ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ã€œãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿é–“ã®é€šä¿¡ã§ã€æŒç¶šçš„æŽ¥ç¶šã‚’ä½¿ã†ç†ç”±ã¯ã€ã“ã®ã†ã¡ã®å‰è€…ã€‚ç‰¹ã«å¤ªå¹³æ´‹ã‚’è¶…ãˆã‚‹ã‚ˆã†ãªã‚±ãƒ¼ã‚¹ã ã¨ã€TCP æŽ¥ç¶šã«0.2ç§’ã¨ã‹ã‹ã‹ã‚‹ã®ã§ã€ãƒ¡ãƒªãƒƒãƒˆãŒå¤§ãã„ã€‚ ä¸€æ–¹ã€æŒç¶šçš„æŽ¥ç¶šã®ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã¯ã€ æŽ¥ç¶šãŒåˆ‡æ–ã•ã‚Œã‚‹ã¾ã§ã®é–“ã€ãã®æŽ¥ç¶šã‚’ç¶æŒã™ã‚‹ãŸã‚ã«ã‚³ã‚¹ãƒˆãŒã‹ã‹ã‚‹ (ä¸»ã¨ã—ã¦ãƒ¡ãƒ¢ãƒªãŒç„¡é§„ã«ãªã‚‹) ã¨ã„ã†ç‚¹ã«ãªã‚‹ã€‚ç‰¹ã«ã€ï¼‘ãƒ—ãƒã‚»ã‚¹ï¼‘ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’å‰æã¨ã™ã‚‹ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ (ä¾‹: mod_perl) ã ã¨ã€ãƒ¡ãƒ¢ãƒªã®ç„¡é§„ä½¿ã„ãŒã€ã¨ã¦ã‚‚ã²ã©ã„ã“ã¨ã«ãªã‚‹ã€‚ ãã“ã§ã€ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰ã®æŽ¥ç¶šã‚’å—ã‘ã‚‹ HTTP ã‚µãƒ¼ãƒã¨ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³
issm 2010/03/27
kazuho

httpd

http

apache
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: CSRF å¯¾ç– w. JavaScript
Â« PERL5WEBDB | ãƒ¡ã‚¤ãƒ³ | IIS ã®ãƒã‚°ã‚’ tail -f Â» 2006å¹´04æœˆ11æ—¥ CSRF å¯¾ç– w. JavaScript CSSXSS ã«å¯¾ã—ã¦è„†å¼±ã§ãªã„ CSRF å¯¾ç–ã¨ã¯ã©ã®ã‚ˆã†ãªã‚‚ã®ã‹ã€ã¨ã„ã†è°è«–ãŒç¶šã„ã¦ã„ã‚‹ã‚ˆã†ã§ã™ãŒã€JavaScript ã‚’ç”¨ã„ã¦ã‚ˆã„ã®ã§ã‚ã‚Œã°ã€ç°¡å˜ãªå¯¾ç–æ‰‹æ³•ãŒå˜åœ¨ã™ã‚‹ã¨æ€ã„ã¾ã™ã€‚ CSRF å¯¾ç–ã§ã¯ã€ãƒ•ã‚©ãƒ¼ãƒ ã® hidden ãƒ‘ãƒ©ãƒ¡ã‚¿ã«ã€ãªã‚“ã‚‰ã‹ã®ãƒˆãƒ¼ã‚¯ãƒ³ã‚’åŸ‹ã‚è¾¼ã‚€ã“ã¨ã§ã€ç¬¬ä¸‰è€…ã«ã‚ˆã‚‹ãƒ•ã‚©ãƒ¼ãƒ å½é€ ã‚’é˜²æ¢ã™ã‚‹ã®ãŒä¸€èˆ¬çš„ã§ã™ã€‚ã—ã‹ã—ã€ CSSXSS ã‚’ç”¨ã„ã¦ã€ãã®ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç¬¬ä¸‰è€…ãŒèªã¿å‡ºã›ã¦ã—ã¾ã†ã¨ã„ã†ç‚¹ãŒã€å•é¡Œã‚’ã‚„ã‚„ã“ã—ãã—ã¦ã„ã‚‹ã‚ˆã†ã«æ€ãˆã¾ã™æ³¨2ã€‚ ã—ã‹ã—ã€ JavaScript ã‚’ç”¨ã„ã¦è‰¯ã„ç’°å¢ƒã§ã¯ã€å˜ç´”ãªå¯¾ç–ãŒå˜åœ¨ã™ã‚‹ã¨æ€ã„ã¾ã™ã€‚ HTML å†…ã«ã‚ã‚‰ã‹ã˜ã‚ãƒˆãƒ¼ã‚¯ãƒ³ã‚’åŸ‹ã‚è¾¼ã‚“ã§ãŠãã®ã§ã¯ãªãã€ãƒ•ã‚©ãƒ¼ãƒ é€ä¿¡æ™‚ã«ã€ãƒ–ãƒ©ã‚¦ã‚¶å´ã§ãƒˆãƒ¼ã‚¯ãƒ³ã‚’åŸ‹
issm 2010/03/15
csrf

javascript

security

kazuho
ãƒªãƒ³ã‚¯
Kazuho@Cybozu Labs: Writing Hot-deployable servers (introduction of Server::Starter)
Yesterday at YAPC::Asia 2009, I did a LT introducing verious techniques to write hot-deployable servers, and introduced a perl module called Server::Starter that encapsulates the burden of developing support for hot-deployment within each TCP server program. The presentation slides are on Slideshare.
issm 2010/02/08
kazuho

yapcasia2009

perl

server
ãƒªãƒ³ã‚¯
1