[B! security] kazuhookuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ - ã¯ã¦ãªã®å‘ŠçŸ¥

ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28

kazuhooku 2010/10/22

security

ãƒªãƒ³ã‚¯

IE8 XSS Filterã®ä»•æ§˜ãŒå¾®å¦™ã«å¤‰æ›´ã•ã‚Œã¦ã„ãŸã€‚ - è‘‰ã£ã±æ—¥è¨˜

å…ˆæ—¥ã€Google æ—¥æœ¬èªžå…¥åŠ›ã®HTTPã‚’è¦‹ã¦ãŸ id:tokuhirom ã•ã‚“ã«ã€HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã«ã€ŒX-XSS-Protection: 1; mode=blockã€ã¨ã„ã†ã®ãŒå«ã¾ã‚Œã‚‹ã¨ã„ã†ã®ã‚’æ•™ãˆã¦ã‚‚ã‚‰ã£ãŸã‘ã©ã€"mode=block" ã¨ã„ã†ã®ãŒä½•ã‹åˆ†ã‹ã‚‰ãªã‹ã£ãŸã®ã§èª¿ã¹ã¦ã¿ãŸã€‚ çµè«–ã¨ã—ã¦ã¯ã€ä»Šæœˆ3æœˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ›´æ–° ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ± MS10-018 - ç·Šæ€¥ : Internet Explorer ç”¨ã®ç´¯ç©çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ›´æ–°ãƒ—ãƒã‚°ãƒ©ãƒ (980182) ã§è¿½åŠ ã•ã‚ŒãŸæ©Ÿèƒ½ã ã£ãŸã€‚ ã“ã®ç´¯ç©çš„ãªæ›´æ–°ãƒ—ãƒã‚°ãƒ©ãƒ ã«ã¯ã€ãã®ã»ã‹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£ã®å¤‰æ›´ãŒå«ã¾ã‚Œã¾ã™ã‹? ã“ã®æ›´æ–°ãƒ—ãƒã‚°ãƒ©ãƒ ã«ã¯ X-XSS-Protection HTTP ãƒ˜ãƒƒãƒ€ãƒ¼ã¸ã®å¤šå±¤é˜²å¾¡ã®æ›´æ–°ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚å…·ä½“çš„ã«ã¯ã€æ–°ã—ã„ "mode=block" æ§‹æ–‡ã«ã‚ˆã‚Šã€éžç¶™ç¶šçš„ãªèª˜å°Žã«ã‚ˆã‚‹ã‚¯ãƒ

kazuhooku 2010/10/04

security

ãƒªãƒ³ã‚¯

https://dl.acm.org/doi/10.1145/347059.347561

kazuhooku 2010/05/07

security
dev

ãƒªãƒ³ã‚¯

Man-in-the-Middle Attacks Against SSL - Schneier on Security

Man-in-the-Middle Attacks Against SSL Says Matt Blaze: A decade ago, I observed that commercial certificate authorities protect you from anyone from whom they are unwilling to take money. That turns out to be wrong; they donâ€™t even do that much. Scary research by Christopher Soghoian and Sid Stamm: Abstract: This paper introduces a new attack, the compelled certificate creation attack, in which go

kazuhooku 2010/04/13

security

ãƒªãƒ³ã‚¯

RSA says it fathered orphan credential in Firefox, Mac OS

RSA says it fathered orphan credential in Firefox, Mac OS Updated Digital certificate authority RSA Security on Tuesday acknowledged it issued a root authentication credential shipped in in the Mac operating system and Mozilla web browsers and em ail programs, ending four days of confusion about who controlled the ultra-sensitive document. The "RSA Security 1024 V3" certificate is a master credenti

kazuhooku 2010/04/07

security

ãƒªãƒ³ã‚¯

yebo blog: ä¸å›½ã«ã‚ã‚‹DNSãƒ«ãƒ¼ãƒˆã‚µãƒ¼ãƒãŒä¸å¯©ãªå‹•ãã‚’ã—ã¦åœæ¢

2010/03/28 ä¸å›½ã«ã‚ã‚‹DNSãƒ«ãƒ¼ãƒˆã‚µãƒ¼ãƒãŒä¸å¯©ãªå‹•ãã‚’ã—ã¦åœæ¢ Network Worldã«ã‚ˆã‚Œã°ã€24æ—¥å—ç±³ãƒãƒªNICã®DNSç®¡ç†è€…Mauricio Erecheæ°ãŒ I ãƒ«ãƒ¼ãƒˆã‚µãƒ¼ãƒã®æŒ™å‹•ãŒä¸å¯©ã§ã€ä¸å›½ã«ã‚ã‚‹ I ãƒ«ãƒ¼ãƒˆã‚µãƒ¼ãƒã«Facebookã€YouTubeã€Twitterã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å•ã„åˆã‚ã›ã‚‹ã¨æ£ã—ã„IPã‚¢ãƒ‰ãƒ¬ã‚¹ãŒè¿”ã£ã¦ã“ãªã‹ã£ãŸã¨ãƒ¬ãƒãƒ¼ãƒˆã—ãŸã€‚ $ dig @i.root-servers.net www.facebook.com A ; <<>> DiG 9.6.1-P3 <<>> @i.root-servers.net www.facebook.com A ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR

kazuhooku 2010/03/28

security
dns

ãƒªãƒ³ã‚¯

é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ç±³ç©ºæ¸¯ã§Bluetoothã«ã‚ˆã‚‹ä¹—å®¢ã®è¡Œå‹•è¿½è·¡ã¸ã¨ã„ã†å ±é“

â– ç±³ç©ºæ¸¯ã§Bluetoothã«ã‚ˆã‚‹ä¹—å®¢ã®è¡Œå‹•è¿½è·¡ã¸ã¨ã„ã†å ±é“ ã€ŒMutualèªè¨¼ã€ã®ãƒ¡ãƒ³ãƒãƒ¼ã¨IETFã§ç±³å›½ã«æ¥ã¦ã„ã‚‹ã®ã ãŒã€ãƒ›ãƒ†ãƒ«ã®éƒ¨å±‹ã«é…é”ã•ã‚ŒãŸæ˜¨æ—¥ã®æ–°èžã€USA TODAYç´™ã®1é¢ã«ã€ã“ã‚“ãªè¨˜äº‹ãŒè¼‰ã£ã¦ã„ãŸã€‚ Airport device follows fliers' phones - TSA says one goal is to track wait times in security lines å†…å®¹ã‚’è¦ç´„ã™ã‚‹ã¨ã€ç±³å›½TSAï¼ˆå›½åœŸå®‰å…¨ä¿éšœçœé‹è¼¸ä¿å®‰å±€ï¼‰ãŒã€ç©ºæ¸¯ã®æ‰‹è·ç‰©æ¤œæŸ»ã®è¡Œåˆ—ã®å¾…ã¡æ™‚é–“ã‚’æ¸¬å®šã™ã‚‹ç›®çš„ã§ã€äººã€…ã®æºå¸¯é›»è©±ãªã©ã‹ã‚‰ç™ºä¿¡ã•ã‚Œã¦ã„ã‚‹Bluetoothã®MACã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¦³æ¸¬ã™ã‚‹ã“ã¨ã‚’æ¤œè¨Žã—ã¦ã„ã‚‹ã¨ã„ã†ã‚‚ã®ã€‚ Bluetoothã®MACã‚¢ãƒ‰ãƒ¬ã‚¹è¦³æ¸¬ã§ä½•ãŒã§ãã‚‹ã‹ã¯ã€1å¹´å‰ã®æ—¥è¨˜ã€ŒBluetoothã§å±±æ‰‹ç·šã®ä¹—é™ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’è¿½è·¡ã—ã¦ã¿ãŸã€ã«æ›¸ã„ãŸã¨ãŠã‚Šã§ã€éŽåŽ»ã«ã‚‚é¡žä¼¼ã®ç›®

kazuhooku 2010/03/26

ãƒªãƒ³ã‚¯

RedHat ã® openssl ãŒã‚ãƒ¢ã„ - ã©ã•ã«ã£ã

2010å¹´3æœˆ4æ—¥(æœ¨) â– $GENERATE _ BIND ã§ä½¿ã†ã‚¾ãƒ¼ãƒ³ãƒ•ã‚¡ã‚¤ãƒ«ã®æ›¸å¼ã¯ BIND ãŒå‹æ‰‹ã«æ±ºã‚ãŸã‚ã‘ã§ã¯ãªãã€å®Ÿã¯ RFCã§è¦æ ¼åŒ–ã•ã‚Œã¦ã„ã‚‹(ãªã®ã§ã€BIND ã ã‘ã˜ã‚ƒãªãã¦ NSD ã§ã‚‚åŒã˜æ›¸å¼ã€‚djbdns ã¯ç‹¬è‡ªå½¢å¼ã ã‘ã©)ã€‚ _ ã¨ã¯ã„ãˆã€BIND ã¯ãã‚Œã‚’ç”Ÿã®ã¾ã¾ä½¿ã£ã¦ã‚‹ã‚ã‘ã§ã¯ãªãã€å‹æ‰‹ãªæ‹¡å¼µã‚‚ã—ã¦ã„ã‚‹ã€‚ $GENERATEã¨ã‹ã€‚ã“ã‚ŒãŒä½•ãƒ¢ãƒŽã‹ã¨ã„ã†ã¨ã€é€£ç•ªã‚’è‡ªå‹•ç”Ÿæˆã™ã‚‹ãŸã‚ã®ã‚‚ã®ã€‚ $GENERATE 1-10 host-$ IN A 192.0.2.$ â†‘ã¨â†“ã¯åŒç¾©ã€‚ host-1 IN A 192.0.2.1 host-2 IN A 192.0.2.2 host-3 IN A 192.0.2.3 ... host-10 IN A 192.0.2.10 ã¨ã£ã¦ã‚‚æ¥½ã¡ã‚“ã€‚ãŸã ã—ã€$GENERATE ã¯ã‚ãã¾ã§ã‚¾ãƒ¼ãƒ³ãƒ•ã‚¡ã‚¤ãƒ«ã®è¨˜è¿°ã‚’ç°¡ç•¥åŒ–ã™ã‚‹ã ã‘ã§ã€DNS

kazuhooku 2010/03/09

security

ãƒªãƒ³ã‚¯

ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ã¤ã„ã¦ - ã‚·ãƒ§ãƒƒãƒ”ãƒ³ã‚°ã®ã‚µãƒãƒ¼ãƒˆ

æ—¥æœ¬ã«ãŠã‘ã‚‹è²©å£²ãŠã‚ˆã³è¿”é‡‘æ¡ä»¶ Apple Storeã§ãŠè²·ã„ç‰©ã„ãŸã ãã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚Appleè£½å“ã¸ã®ã”æ„›é¡§ã«å¿ƒã‚ˆã‚Šæ„Ÿè¬ã„ãŸã—ã¾ã™ã€‚ãŠå®¢æ§˜ãŒAppleè£½å“ã«ã¤ã„ã¦è©³ã—ãèª¿ã¹ãŸã‚Šã€æ¤œè¨Žã—ãŸã‚Šã€è³¼å…¥ã—ãŸã‚Šã•ã‚Œã‚‹éš›ã«ã€ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã®Apple Storeã€ç›´å–¶åº—ã®Apple Storeã€Appleã®ã‚³ãƒ³ã‚¿ã‚¯ãƒˆã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆ0120-993-993ï¼‰ã®ã„ãšã‚Œã®æ–¹æ³•ã‚’ã”åˆ©ç”¨ã„ãŸã ã„ãŸå ´åˆã§ã‚‚ã€å®Ÿã‚Šã‚ã‚‹ä½“é¨“ã‚’ã—ã¦ã„ãŸã ããŸã„ã¨é¡˜ã£ã¦ãŠã‚Šã¾ã™ã€‚ï¼ˆã“ã®æ–‡æ›¸ã§ã¯ã€ã“ã‚Œã‚‰ã®ç·ç§°ã¨ã—ã¦ã€ŒApple Storeã€ã¨å‘¼ã³ã¾ã™ã€‚ï¼‰ ã„ãšã‚Œã‚’ã”åˆ©ç”¨ã„ãŸã ã„ãŸå ´åˆã‚‚ã€Apple Storeã§ã®ã”è³¼å…¥ã«ã¯åˆ©ç”¨è¦ç´„ãŒé©ç”¨ã•ã‚Œã¾ã™ã€‚Apple Storeã§æ³¨æ–‡ã—ãŸã‚Šè³¼å…¥ã—ãŸã‚Šã™ã‚‹ã“ã¨ã§ã€Appleã®ã€Œãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒãƒªã‚·ãƒ¼ã€ã¨ã€Œåˆ©ç”¨è¦ç´„ã€ã¨ã¨ã‚‚ã«ã€ä»¥ä¸‹ã«æ˜Žè¨˜ã•ã‚ŒãŸæ¡ä»¶ã«åŒæ„ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã®ã§ã”ç•™æ„ãã ã•ã„ã€‚ ä¸€èˆ¬çš„ãªè¿”

kazuhooku 2010/01/20

ã€ŒApple Storeã§ã¯Apple IDã®ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã¯ã”ã–ã„ã¾ã›ã‚“ã€œApple IDã‚’è¡¨ç¤ºã—ãªã„ã‚ˆã†ã«ã™ã‚‹ã«ã¯ã€Cookieã®å‰Šé™¤ã‚’ã—ã¦ã„ãŸã ãã“ã¨ã§å¯èƒ½ã¨ãªã‚Šã¾ã™ã€

ãƒªãƒ³ã‚¯

ã‚´ãƒ«ãƒ•å ´ã®ãªã‹ã¿ (ãã®ã«) 08:03 2009-11-28 - å…¼é›‘è¨˜

æœ€è¿‘ã‚´ãƒ«ãƒ•å ´ã‚’æ–°ã—ã„ãƒžã‚·ãƒ³ã«å¼•è¶Šã—ãŸã®ã§ã€å‰å›žã®è¨˜è¿°ã‚ˆã‚Šè‰²ã€…ã¨ã‚ˆããªã£ãŸéƒ¨åˆ†ã‚‚ã‚ã‚‹ã®ã§ã€ãã‚Œã«ã¤ã„ã¦æ›¸ã„ã¦ã¿ã¾ã™ã€‚ã¨ã„ã£ã¦ã‚‚ sandbox ã«ã¤ã„ã¦ã ã‘ã§ã™ãŒã€‚ http://github.com/shinh/ags/blob/master/be/modules/sandbox.c æ–°ã—ã„ sandbox ã¯ã€ arcus-judge ã®ã‚·ã‚¹ãƒ†ãƒ ã®ã‚„ã£ã¦ã‚‹ã“ã¨ã‚’ã¾ã‚“ã¾ãƒ‘ã‚¯ã£ãŸéƒ¨åˆ†ãŒå¤šã„ã§ã™ã€‚ kernel ã„ã˜ã£ã¡ã‚ƒã†ã¨ãƒ¡ãƒ³ãƒ†å¤§å¤‰ãã†ã ãªãƒ¼ã¨æ€ã£ãŸã®ã§ module ã§ã‚„ã£ã¦ã‚‹ã®ã¨ã€å…¨ä½“çš„ã«è‰²ã€…é›‘ãªã®ãŒå¤§ããªé•ã„ã§ã™ã€‚ http://code.google.com/p/arcus-judge/wiki/ArcusSandbox kernel module ã§ã® system call ã®ãƒ•ãƒƒã‚¯ã¯ã€ /boot/System.map-2.6.26-2-xen-686 ã‚’è¦‹ã¦ sys_cal

kazuhooku 2009/11/28

dev
security

ãƒªãƒ³ã‚¯

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ± - iãƒ¢ãƒ¼ãƒ‰IDã‚’ç”¨ã„ãŸã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ã®DNS Rebindingè„†å¼±æ€§

iãƒ¢ãƒ¼ãƒ‰IDã‚’ç”¨ã„ãŸã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ã®DNS Rebindingè„†å¼±æ€§ HASHã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°æ ªå¼ä¼šç¤¾ å…¬é–‹æ—¥:2009å¹´11æœˆ24æ—¥ æ¦‚è¦ iãƒ¢ãƒ¼ãƒ‰ãƒ–ãƒ©ã‚¦ã‚¶2.0ã®JavaScriptã¨DNS Rebindingå•é¡Œã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚Šã€iãƒ¢ãƒ¼ãƒ‰IDã‚’åˆ©ç”¨ã—ãŸèªè¨¼æ©Ÿèƒ½ï¼ˆä»¥ä¸‹ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ï¼‰ã«å¯¾ã™ã‚‹ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ãŒå¯èƒ½ã¨ãªã‚‹å ´åˆãŒã‚ã‚‹ã“ã¨ã‚’ç¢ºèªã—ãŸã®ã§å ±å‘Šã™ã‚‹ã€‚å±é™ºåº¦ã®é«˜ã„æ”»æ’ƒæ‰‹æ³•ã§ã‚ã‚‹ã®ã§ã€ã‚µã‚¤ãƒˆé‹å–¶è€…ã«ã¯è‡³æ€¥ã®å¯¾ç–ã‚’æŽ¨å¥¨ã™ã‚‹ã€‚ èƒŒæ™¯æºå¸¯é›»è©±ã®ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã¨ã¯ã€ã‚±ãƒ¼ã‚¿ã‚¤ãƒ–ãƒ©ã‚¦ã‚¶ï¼ˆãŸã¨ãˆã°iãƒ¢ãƒ¼ãƒ‰ãƒ–ãƒ©ã‚¦ã‚¶ï¼‰ã«ç”¨æ„ã•ã‚ŒãŸå¥‘ç´„è€…å›ºæœ‰IDã‚’åˆ©ç”¨ã—ãŸç°¡æ˜“çš„ãªèªè¨¼ã§ã‚ã‚Šã€ãƒ¦ãƒ¼ã‚¶ãŒIDã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã—ãªãã¦ã‚‚èªè¨¼ãŒå¯èƒ½ã¨ãªã‚‹ã€‚iãƒ¢ãƒ¼ãƒ‰IDã¯ã€NTTãƒ‰ã‚³ãƒ¢ã®æä¾›ã™ã‚‹å¥‘ç´„è€…å›ºæœ‰IDã®ä¸€ç¨®ã§ã€URLã«guid=ONã¨ã„ã†ã‚¯ã‚¨ãƒªã‚¹ãƒˆãƒªãƒ³ã‚°ã‚’å«ã‚ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ç«¯æœ«å›ºæœ‰ã®7æ¡ã®IDãŒWebã‚µãƒ¼ãƒã«é€

kazuhooku 2009/11/24

security

ãƒªãƒ³ã‚¯

SSLã®è„†å¼±æ€§ã§Twitterã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å…¥æ‰‹ã«æˆåŠŸ

ç ”ç©¶è€…ãŒSSLã®ä¸é–“è€…æ”»æ’ƒã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã—ã€ä»–äººã®Twitterãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥æ‰‹ã™ã‚‹ã“ã¨ã«æˆåŠŸã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ SANS Internet Storm Centerã‚„ç±³IBMå‚˜ä¸‹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥Internet Security Systemsï¼ˆISSï¼‰ã®ãƒ–ãƒã‚°ã«ã‚ˆã‚‹ã¨ã€TLSï¼SSLãƒ—ãƒãƒˆã‚³ãƒ«ã«ä¸é–“è€…æ”»æ’ƒã®è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸå•é¡Œã§ã€ç ”ç©¶è€…ãŒã“ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã—ã¦Twitterã®ãƒã‚°ã‚¤ãƒ³æƒ…å ±ã‚’ç›—ã¿å‡ºã™ã“ã¨ã«æˆåŠŸã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ è„†å¼±æ€§ã¯TLSï¼SSLã®ãƒªãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®éŽç¨‹ã«å˜åœ¨ã—ã€ç†è«–çš„ã«ã¯ä¸é–“è€…æ”»æ’ƒã«ã‚ˆã£ã¦HTTPSã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ãƒ‡ãƒ¼ã‚¿ã‚’æŒ¿å…¥ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚‹ã¨ã•ã‚Œã¦ã„ãŸãŒã€å½“åˆã®æƒ…å ±ã§ã¯å®Ÿéš›ã«æ‚ªç”¨ã™ã‚‹ã®ã¯é›£ã—ã„ã¨è¦‹ã‚‰ã‚Œã¦ã„ãŸã€‚ ã—ã‹ã—ISSãªã©ã«ã‚ˆã‚Œã°ã€ç ”ç©¶è€…ã¯ã“ã®è„†å¼±æ€§ã‚’çªã„ã¦è¢«å®³è€…ãŒTwitterã‚µãƒ¼ãƒã«é€ã£ãŸHTTPãƒ‘ã‚±ãƒƒãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã©ã®ãƒã‚°ã‚¤ãƒ³æƒ…å ±ã‚’å–å¾—ã™ã‚‹

kazuhooku 2009/11/17

opensslã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã™ã‚‹ã—ã‹ãªã„ã£ã¦ã“ã¨ã‹

security

ãƒªãƒ³ã‚¯

ã‚†ãƒ¼ã™ã‘ã¹ãƒ¼æ—¥è¨˜

ã‚µã‚ã¨ã¯å½¼å¥³ã®è‡ªå®…è¿‘ãã€æ¹˜å—å°é§…å‰ã®ã‚¹ãƒ¼ãƒ‘ãƒ¼ãƒžãƒ¼ã‚±ãƒƒãƒˆã§å¾…ã¡åˆã‚ã›ã‚’ã—ãŸã€‚å½¼å¥³ã¯è‡ªè»¢è»Šã§å¾Œã‹ã‚‰è¿½ã„ã¤ãã¨è¨€ã„ã€åƒ•ã¯å¤§ããªã‚³ã‚¤ãƒ³ãƒ‘ãƒ¼ã‚ãƒ³ã‚°ã¸è»Šã‚’åœã‚ãŸã€‚ç…™è‰ã‚’ä¸€æœ¬å¸ã£ã¦ã‹ã‚‰ã‚¹ãƒ¼ãƒ‘ãƒ¼ãƒžãƒ¼ã‚±ãƒƒãƒˆã¸å‘ã‹ã†ã¨ã€ã²ã£ãã‚Šãªã—ã«ä¸»å©¦çš„ãªå¥³æ€§ã‹ãŠã°ã‚ã¡ã‚ƒã‚“ãŒå…¥ã‚Šå£ã‚’å‡ºãŸã‚Šå…¥ã£ãŸã‚Šã—ã¦ã„ãŸã€‚æ™‚åˆ»ã¯åˆå¾Œ5æ™‚ã«ãªã‚‹ã€‚æ™‚è¨ˆã‹ã‚‰ç›®ã‚’ä¸Šã’ã‚‹ã¨ã€å¾…ãŸã›ã¡ã‚ƒã£ãŸã‚ãã¨å¤§ã—ã¦æ‚ªã³ã‚Œã¦ãªã„æ§˜åã§ã‚µã‚ãŒæ‰‹ã¶ã‚‰ã§ã‚„ã£ã¦ããŸã€‚ ãŠç¤¼ã«æ–™ç†ã‚’ä½œã‚‹ã¨ã¯ã„ãˆã€ã‚µã‚ã®å®¶ã«ã¯é£ŸæãŒååˆ†è¶³ã‚Šã¦ã„ãªã„ã‚‰ã—ãã€ã“ã†ã—ã¦ã‚¹ãƒ¼ãƒ‘ãƒ¼ãƒžãƒ¼ã‚±ãƒƒãƒˆã«å¯„ã‚‹ã“ã¨ã«ãªã£ãŸã€‚ã‚µã‚ã¯é‡Žèœã‚³ãƒ¼ãƒŠãƒ¼ã‹ã‚‰ç²¾è‚‰ã‚³ãƒ¼ãƒŠãƒ¼ã¾ã§ã€ã¾ã‚‹ã§å„ªç§€ãªã‚«ãƒ¼ãƒŠãƒ“ã«å°Žã‹ã‚Œã‚‹ã‚ˆã†ã«ç„¡é§„ãªãç‚¹æ¤œã—ã¦ã„ã£ãŸã€‚æ¬²ã—ã„é£ŸæãŒã‚ã‚‹ã¨ã€2ç§’é–“ç¨‹åº¦ãã‚Œã‚‰ã‚’å‡è¦–ã—ã€ä¸€åº¦æ‰‹ã«å–ã£ãŸã˜ã‚ƒãŒã„ã‚‚ã‚„ã‚‰è±šè‚‰ã‚„ã‚‰ã‚’è¿·ã†ã“ã¨ãªãåƒ•ãŒæŒã£ã¦ã„ã‚‹ã‚«ã‚´ã«æ”¾ã‚Šè¾¼ã‚“ã ã€‚æœ€å¾Œã«ã‚¢ãƒ«ã‚³ãƒ¼ãƒ«é£²æ–™ãŒå†·ã‚„ã•ã‚Œã¦ã„ã‚‹æ£šã®å‰ã¸è¡Œãã¨ã€ç§ãŒé£²ã‚€ã‹ã‚‰ã¨ãƒ

kazuhooku 2009/11/09

www.amazn.com(oãªã—)ã‚‚wwwAMZNcmã«å¤‰æ›´ã•ã‚ŒãŸã‚Šã™ã‚‹ã®ã§å´ã£ã¦å±é™ºã˜ã‚ƒãªã„ã‹ãªãã€‚çµå±€ãƒ‰ãƒ¡ã‚¤ãƒ³ã¯çŸç¸®ã§ããªã„ã¨æ€ã†ã€‚ã€Œãƒ‰ãƒ¡ã‚¤ãƒ³ã€ã®å®šç¾©ã«ã¤ã„ã¦ã¯ã€cookie ã®ã€Œãƒ‰ãƒ¡ã‚¤ãƒ³ã€ã®å®šç¾©ã¨å…¨ãåŒä¸€ã§ã€‚

security

ãƒªãƒ³ã‚¯

Camilla's genealogy

Camilla's genealogy Ben's Mastodon Ben's Twitter

kazuhooku 2009/11/08

security

ãƒªãƒ³ã‚¯

PHPä»¥å¤–ã§ã¯: æ—¢ã«ã‚ãŸã‚Šå‰ã«ãªã‚Šã¤ã¤ã‚ã‚‹æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ - å¾³ä¸¸æµ©ã®æ—¥è¨˜(2009-09-14)

_æ—¢ã«ã‚ãŸã‚Šå‰ã«ãªã‚Šã¤ã¤ã‚ã‚‹æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ å¤§åž£é–ç”·ã•ã‚“ã®æ—¥è¨˜ã€Œä½•æ•…ã‹ã‚ãŸã‚Šå‰ã«ãªã‚‰ãªã„æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã«ç«¯ã‚’ç™ºã—ã¦ã€å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ãªã©ã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®å¦¥å½“æ€§ãƒã‚§ãƒƒã‚¯ã‚’ã©ã†è¡Œã†ã‹ãŒè°è«–ã«ãªã£ã¦ã„ã¾ã™ã€‚ãƒã‚§ãƒƒã‚¯è‡ªä½“ãŒå¿…è¦ã§ã‚ã‚‹ã“ã¨ã¯çš†ã•ã‚“åŒæ„ã®ã‚ˆã†ã§ã™ãŒã€ ãƒã‚§ãƒƒã‚¯æ‹…å½“ã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã€åŸºç›¤ã‚½ãƒ•ãƒˆï¼ˆè¨€èªžã€ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ãªã©ï¼‰ã‹ å…¥åŠ›ãƒ»å‡¦ç†ãƒ»å‡ºåŠ›ã®ã©ã“ã§ãƒã‚§ãƒƒã‚¯ã™ã‚‹ã®ã‹ ã¨ã„ã†ç‚¹ã§ã€ã•ã¾ã–ã¾ãªæ„è¦‹ãŒå¯„ã›ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚å¤§åž£ã•ã‚“è‡ªèº«ã¯ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒå…¥åŠ›æ™‚ç‚¹ã§ãƒã‚§ãƒƒã‚¯ã™ã¹ãã¨ä¸»å¼µã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã‚Œã«å¯¾ã—ã¦ã€ã„ã‚„åŸºç›¤ã‚½ãƒ•ãƒˆã§ãƒã‚§ãƒƒã‚¯ã™ã¹ãã ã¨ã‹ã€æ–‡å—åˆ—ã‚’ã€Œä½¿ã†ã¨ãã€ã«ãƒã‚§ãƒƒã‚¯ã™ã¹ãã ã¨ã„ã†æ„è¦‹ãŒå‡ºã¦ã„ã¾ã™ã€‚ ãŸã¨ãˆã°ã€id:ikepyonã®æ—¥è¨˜ã€Œ[ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£]ä½•æ•…ã‹ã‚ãŸã‚Šå‰ã«ãªã‚‰ãªã„æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã€ã§ã¯ã€ã“ã®ãƒã‚§ãƒƒã‚¯ã¯åŸºç›¤ã‚½ãƒ•

kazuhooku 2009/09/14

è¨€åŠã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚multipart ãª POST ã® content-disposition ãƒ˜ãƒƒãƒ€ã« file ã‚¢ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ãƒˆãŒã‚ã‚‹ã‚„ã¤ä»¥å¤–ã¯å•ç”ç„¡ç”¨ã§æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‘ã¦ã„ã„ã‚“ã§ã—ã‚‡ã†ã‹

security

ãƒªãƒ³ã‚¯

â– ã‚„ã¯ã‚Šé€€åŒ–ã—ã¦ã„ãŸæ—¥æœ¬ã®Webé–‹ç™ºè€…ã€Œãƒ‹ã‚³ãƒ‹ã‚³å‹•ç”»Ã—iPhone OSã€ã®å ´åˆ ä¸€å¹´å‰ã€ã€Œé€€åŒ–ã—ã¦ã‚†ãæ—¥æœ¬ã®Webé–‹ç™ºè€…ã€ã¨ã„ã†é¡Œã§ã€ã‚±ãƒ¼ã‚¿ã‚¤Webã®æŠ€è¡“é¢ã§ã®è›¸å£ºåŒ–ã«ã¤ã„ã¦æ¬¡ã®ã‚ˆã†ã«æ›¸ã„ãŸã€‚ iPhoneã«å¥‘ç´„è€…å›ºæœ‰IDé€ä¿¡æ©Ÿèƒ½ãŒæè¼‰ã•ã‚Œã‚‹æ—¥ ï¼ˆç•¥ï¼‰ã“ã†ã—ã¦é€€åŒ–ã—ã¦ã‚†ãã‚±ãƒ¼ã‚¿ã‚¤WebãŒã€æ—¥æœ¬ã®ã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ã¨ãªã£ã¦ã—ã¾ã„ã€ã„ã¤ã®æ—¥ã‹ã€PCå‘ã‘ã®æ™®é€šã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¾ã§ã€å˜ä¸€IDã®å…¨ã‚µã‚¤ãƒˆé€ä¿¡ãŒå¿…é ˆã«ãªã£ã¦ã—ã¾ã†ã®ã§ã¯ãªã„ã‹ã¨å±æƒ§ã—ãŸã€‚ ï¼ˆç•¥ï¼‰iPod touchã§NAVITIMEã‚’å‹•ã‹ã—ã¦ã¿ãŸã¨ã“ã‚ã€ä¸‹ã®å›³ã®ã‚ˆã†ã«ãªã£ãŸã€‚ ï¼ˆç•¥ï¼‰å¥‘ç´„è€…å›ºæœ‰IDãŒãªã„ã¨ã©ã†ã‚„ã£ã¦ä¼šå“¡ç™»éŒ²ã‚·ã‚¹ãƒ†ãƒ ã‚’ä½œã£ãŸã‚‰ã„ã„ã®ã‹ã‚ã‹ã‚‰ãªã„ã‚“ã˜ã‚ƒãªã„ã®ã‹â€¦â€¦ã¨ã„ã†ã®ã¯ã•ã™ãŒã«ç©¿ã¡éŽãŽã ã¨æ€ã„ãŸã„ã€‚NAVITIMEã‹ã‚‰ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ãƒ¢ãƒã‚¤ãƒ«ã«å¯¾ã—ã¦ã€å¥‘ç´„è€…å›ºæœ‰IDé€ä¿¡ç”¨ãƒ—ãƒã‚ã‚·ã‚µãƒ¼ãƒã®ç”¨æ„ã‚’è¦è«‹ã—ã¦ã„ã‚‹â€¦â€¦ãªã‚“ã¦ã“ã¨ãŒãªã‘ã‚Œ

kazuhooku 2009/08/04

dev
security

ãƒªãƒ³ã‚¯

2009/07/14 å¼·ã„Webãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ãã‚Œã»ã©å¿…è¦ã§ã¯ãªã„? ã‚·ãƒ¥ãƒŠã‚¤ã‚¢ãƒ¼ãŒãƒ–ãƒã‚° Schneier on Security ã§HotSec '07ã§ã®è«–æ–‡ "Do Strong Web Passwords Accomplish Anything?" ã‚’è©±é¡Œã«ã—ã¦ã„ã‚‹ã€‚è«–æ–‡ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ã«ä¸Žãˆã‚‰ã‚Œã‚‹ä¼çµ±çš„ãªãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æƒ…å ±ã¯æ™‚ä»£é…ã‚Œã§ã‚ã‚‹ã“ã¨ãŒåˆ†ã‹ã£ãŸã¨ã®ã“ã¨ã€‚å¼·ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºã‚„ã‚ãƒ¼ãƒã‚®ãƒ³ã‚°ãªã©ã‚’ä½¿ã£ãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ç›—ã‚€æ”»æ’ƒã‹ã‚‰ãƒ¦ãƒ¼ã‚¶ã‚’ä¿è·ã™ã‚‹ã“ã¨ã¯ã§ããªã„ä¸Šã«ã€ãƒ¦ãƒ¼ã‚¶ã«ã¯ã‹ãªã‚Šã®è² æ‹…ãŒæŽ›ã‹ã£ã¦ã—ã¾ã†ã€‚ã‚‚ã¡ã‚ã‚“ã€å¼±éŽãŽã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ãƒ–ãƒ«ãƒ¼ãƒˆãƒ•ã‚©ãƒ¼ã‚¹æ”»æ’ƒã§ç ´ã‚‰ã‚Œã¦ã—ã¾ã†ã€‚ã—ã‹ã—ãªãŒã‚‰ã€æ¯”è¼ƒçš„å¼±ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰(ç´„20ãƒ“ãƒƒãƒˆ)ãŒã‚¹ãƒªãƒ¼ã‚¹ãƒˆãƒ©ã‚¤ã‚¯ã®ãƒ«ãƒ¼ãƒ« (ä¾‹ãˆã°3å›žé–“é•ãˆã‚‹ã¨ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒãƒãƒƒã‚¯ã™ã‚‹)ãŒã‚ã‚‹é™ã‚Šã€ä¸€ã¤ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«å¯¾ã—ã¦ãƒ–ãƒ«ãƒ¼ãƒˆãƒ•ã‚©ãƒ¼ã‚¹æ”»æ’ƒã§ç ´ã‚‹ã®ã¯éžç¾å®Ÿã§ã‚ã‚‹ã“ã¨ãŒ

kazuhooku 2009/07/14

security

ãƒªãƒ³ã‚¯

http://tokumaru.org/d/20080722.html

kazuhooku 2009/07/10

ã€Œç§è¦‹ã€œã€ä»¥é™

security

ãƒªãƒ³ã‚¯

asahi.comï¼ˆæœæ—¥æ–°èžç¤¾ï¼‰ï¼šã€Œåˆ¥äººã€çµ¦ä»•ãŒé¦–ç›¸ã«ãƒ¯ã‚¤ãƒ³ã€€å®˜é‚¸ã€å½é€ èº«åˆ†è¨¼ã‚’è¦‹é€ƒã™ - ç¤¾ä¼š

å½é€ ã•ã‚ŒãŸèµ¤å‚ãƒ—ãƒªãƒ³ã‚¹ãƒ›ãƒ†ãƒ«ã®èº«åˆ†è¨¼ï¼ˆä¸Šï¼‰ã€‚åˆ¥äººã®æ°åã‚„è™šå½ã®ç”Ÿå¹´æœˆæ—¥ãŒè¨˜å…¥ã•ã‚ŒãŸå°ç´™ã«ã€å‰å¹´ã®è‡ªåˆ†ã®èº«åˆ†è¨¼ï¼ˆä¸‹ï¼‰ã‹ã‚‰åˆ‡ã‚Šå–ã£ãŸé¡”å†™çœŸã‚’ã¯ã‚Šä»˜ã‘ãŸã‚¤ã‚¨ãƒ¡ãƒ³ã®ã‚µãƒ¬ãƒå¤§çµ±é ˜ï¼ˆå·¦ï¼‰ã‹ã‚‰çŸå‰£ã‚’è´ˆã‚‰ã‚Œã‚‹å°æ³‰é¦–ç›¸ï¼ï¼ï¼•å¹´ï¼‘ï¼‘æœˆï¼—æ—¥ã€é¦–ç›¸å®˜é‚¸ ã€€æ±äº¬éƒ½åƒä»£ç”°åŒºã®é¦–ç›¸å®˜é‚¸ã§ï¼ï¼•å¹´ã€å°æ³‰é¦–ç›¸ï¼ˆå½“æ™‚ï¼‰ã¨å¤–å›½é¦–è„³ãŒãƒ†ãƒå¯¾ç–ãªã©ã‚’å”è°ã—ãŸå¾Œã®å¤•é£Ÿä¼šã«ã€çµ¦ä»•æ‹…å½“ã®èµ¤å‚ãƒ—ãƒªãƒ³ã‚¹ãƒ›ãƒ†ãƒ«ï¼ˆæ±äº¬ã€ç¾ã‚°ãƒ©ãƒ³ãƒ‰ãƒ—ãƒªãƒ³ã‚¹ãƒ›ãƒ†ãƒ«èµ¤å‚ï¼‰ã®ã‚¹ã‚¿ãƒƒãƒ•ãŒå½é€ èº«åˆ†è¨¼ï¼ˆå…¥é¤¨è¨¼ï¼‰ã‚’ä½¿ã£ã¦åˆ¥äººã«ãªã‚Šã™ã¾ã—å…¥é¤¨ã€å®˜é‚¸å´ã‚‚æ°—ã¥ã‹ãšé€šã—ã¦ã„ãŸã“ã¨ãŒã‚ã‹ã£ãŸã€‚äº‹å‰ã«å®˜é‚¸å´ã«åå‰ã‚’å±Šã‘ã¦ã‚ã£ãŸã‚¹ã‚¿ãƒƒãƒ•ãŒæ¬ å‹¤ã—ã€ãƒ›ãƒ†ãƒ«å´ãŒæ¬ å‹¤è€…ã«ãªã‚Šã™ã¾ã™ã‚ˆã†æŒ‡ç¤ºã—ãŸã¨ã„ã†ã€‚ ã€€å®˜é‚¸äº‹å‹™æ‰€ã¯ã€Œãƒ›ãƒ†ãƒ«ã‚’ä¿¡é ¼ã—ã¦ã„ãŸã€ã¨èª¬æ˜Žã™ã‚‹ãŒã€å±æ©Ÿç®¡ç†å•é¡Œã®å°‚é–€å®¶ã¯ã€Œé˜²çŠ¯æ„è˜ãŒã‚ã¾ã‚Šã«ä½Žãã€ä»–å›½ã§ã¯è€ƒãˆã‚‰ã‚Œãªã„ã€ã¨æŒ‡æ‘˜ã—ã¦ã„ã‚‹ã€‚ ã€€å½é€ èº«åˆ†è¨¼ãŒä½¿ã‚ã‚ŒãŸã®ã¯ä¸æ±ã‚¤ã‚¨ãƒ¡ãƒ³ã®ã‚µãƒ¬ãƒå¤§çµ±é ˜ã‚‰ãŒæ—¥æœ¬

kazuhooku 2009/06/22

security

ãƒªãƒ³ã‚¯

>ã»ãƒ¼ã‚‰ã€ã€é«˜æœ¨æµ©å…‰æ°ã®è¶³éŸ³ãŒãƒ»ãƒ» ã€ŒJavaã¯é…ã„ã€ä½ã§ã‚¬ã‚¿ã‚¬ã‚¿è¨€ã‚ãªã„ã§ã—ã‚‡ã€‚ å°‘ãªãã¨ã‚‚æ€¥å…ˆé‹’ã«ãªã‚‰ã‚“ã§ã‚‚ä»–ã®äººãŒãƒ‡ã‚£ã‚¹ã£ã¦ãã‚Œã‚‹ã€‚ å…¥åŠ›æ™‚ã®æ¤œè¨¼ãƒ»ã‚µãƒ‹ã‚¿ã‚¤ã‚¸ãƒ³ã‚°ãŒXSSé˜²æ¢ã®å¯¾ç–ã§ã™ è¦å‘Šã¯å‡ºã¾ã™ãŒSSLã§ã™æš—å·ã§ã™å®‰å…¨ã§ã™å•é¡Œã‚ã‚Šã¾ã›ã‚“ ã“ã®åœ°æ–¹è‡ªæ²»ä½“/å®˜å…¬åºã‚µã‚¤ãƒˆã«ãƒªãƒ³ã‚¯ã™ã‚‹å ´åˆã¯è¨±å¯ã‚’ã¨ã£ã¦ãã ã•ã„ ç„¡ç·šLANã¯WEP256ã€MACã§åˆ¶é™ã‚’ã‹ã‘ã‚‹ä½ã¯å½“ç„¶ã§ã™ã googleã‚¹ãƒˆãƒªãƒ¼ãƒˆãƒ“ãƒ¥ãƒ¼ã¯ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ã«é…æ…®ã—ã¦ã‚ãƒãƒ³ã¨é¡”ã‚’æ¶ˆã—ã¦ã„ã¾ã™ ã“ã®ä½ã‚’ãƒ–ãƒã‚°ã§çŸ¥ã£ãŸã‹ã‚¨ãƒ³ãƒˆãƒªã—ã¾ãã‚Œã°ã€ä½™è£•ã§ãƒ–ã‚¯ãƒžã‚³ãƒ¡ãƒ³ãƒˆã—ã¦ã‚‚ã‚‰ãˆã¾ã™ã€‚ ä¾‹ãˆã°ã€ŒXSSè€æ€§ã‚’å‘ä¸Šã•ã›ã‚‹ã€ãŸã£ãŸä¸€ã¤ã®è§£æ±ºç–ã€ãªã©ç…½ã£ã¦ã¿ã¦ãã ã•ã„ã€‚ ãã†ã™ã‚Œã°ã€Œå‡ºé±ˆç›®ã€åŠå¯é€šã€ä¼¼éžã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å±‹ã€ãªã©ãªã©ã€æš–ã‹ã„è¨€è‘‰ã‚’é ‚ã‘ã¾ã™ã‚ˆï½—

kazuhooku 2009/06/18

ãƒªãƒ³ã‚¯

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (65)

securityã«é–¢ã™ã‚‹kazuhookuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (199)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (65)

securityã«é–¢ã™ã‚‹kazuhookuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (199)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (65)

securityã«é–¢ã™ã‚‹kazuhookuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (199)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆç¬¬5é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹