[B! security][javascript] maRkã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

maRk id:maRk

securityã¨javascriptã«é–¢ã™ã‚‹maRkã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ã€ŒNoScriptã€ã‚’ã‚„ã‚ã¦ã€ŒRequestPolicyã€ã«ã—ãŸ
â– ã€ŒNoScriptã€ã‚’ã‚„ã‚ã¦ã€ŒRequestPolicyã€ã«ã—ãŸ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å±‹ãŒã€Firefoxãƒ¦ãƒ¼ã‚¶ã«ã€ŒNoScriptã€ã®ä½¿ç”¨ã‚’æŽ¨å¥¨ã™ã‚‹ã“ã¨ãŒã—ã°ã—ã°ã‚ã‚‹ãŒã€ç§ã¯è³›åŒã—ãªã„ã€‚ JPCERT/CCã€æŠ€è¡“ãƒ¡ãƒ¢ã€Œå®‰å…¨ãªWebãƒ–ãƒ©ã‚¦ã‚¶ã®ä½¿ã„æ–¹ã€ã‚’å…¬é–‹, INTERNET Watch, 2008å¹´11æœˆ4æ—¥ *1 æŠ€è¡“ãƒ¡ãƒ¢ âˆ’ å®‰å…¨ãªWebãƒ–ãƒ©ã‚¦ã‚¶ã®ä½¿ã„æ–¹, JPCERT/CC, 2008å¹´11æœˆ4æ—¥ IV. å„ Web ãƒ–ãƒ©ã‚¦ã‚¶ã«å…±é€šã™ã‚‹è¨å®šä¸Šã®æ³¨æ„äº‹é … 1. ã‚¹ã‚¯ãƒªãƒ—ãƒˆç‰ã®å®Ÿè¡Œã‚’åˆ¶é™ã™ã‚‹ JavaScript ç‰ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚„ï¼ˆç•¥ï¼‰ã¯ï¼ˆç•¥ï¼‰Ajax ã«ä»£è¡¨ã•ã‚Œã‚‹ã‚¤ãƒ³ã‚¿ãƒ©ã‚¯ãƒ†ã‚£ãƒ–ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ãŒå®Ÿç¾ã§ãã‚‹ãªã©ã€é«˜ã„åˆ©ä¾¿æ€§ãŒå¾—ã‚‰ã‚Œã¾ã™ã€‚åé¢ã€PC ä¸Šã®é‡è¦ãªãƒ•ã‚¡ã‚¤ãƒ«ã‚’å‰Šé™¤ãƒ»å¤‰æ›´ã™ã‚‹ãªã©ã€æ‚ªæ„ã‚’æŒã£ãŸå‡¦ç†ãŒè¡Œã‚ã‚Œã‚‹å¯èƒ½æ€§ã‚‚ã‚ã‚Šã¾ã™ã€‚å¾“ã£ã¦ç„¡åˆ¶é™ã«ã‚¹ã‚¯ãƒªãƒ—ãƒˆç‰ã‚’å®Ÿè¡Œã§ãã‚‹ã‚ˆã†ã«ã—ã¦ãŠãã®ã¯
maRk 2009/05/31
javascript

security

add-ons

extensions
ãƒªãƒ³ã‚¯
JPCERT/CCã€JavaScriptãŒåŸ‹ã‚è¾¼ã¾ã‚Œã‚‹Webã‚µã‚¤ãƒˆæ”¹ã–ã‚“ã«æ³¨æ„å–šèµ·
Windows SQL Server 2005ã‚µãƒãƒ¼ãƒˆçµ‚äº†ã®4æœˆ12æ—¥ãŒè¿«ã‚‹ã€å ±å‘Šæ¸ˆã¿è„†å¼±æ€§ã®æ·±åˆ»åº¦ã‚‚é«˜ãã€æ—©æ€¥ãªç§»è¡Œã‚’
maRk 2009/05/20
security

virus

javascript

Adobe
ãƒªãƒ³ã‚¯
ã€ŒGENOã‚¦ã‚£ãƒ«ã‚¹ã€ãŒãƒ¤ãƒã„ï¼—ã¤ã®ç†ç”±ã€‚ã“ã‚Œã¯ã‚‚ã£ã¨é¨’ãŒã‚Œã‚‹ã¹ãã€‚ - ãƒŒãƒ«ã‚ã®ã¤ã¶ã‚„ã
maRk 2009/05/18
security

javascript

Flash

virus
ãƒªãƒ³ã‚¯
javascript - ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚¯æ®ºã—ãªbookmarklet : 404 Blog Not Found
2009å¹´03æœˆ05æ—¥02:30 ã‚«ãƒ†ã‚´ãƒªLightweight Languages javascript - ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚¯æ®ºã—ãªbookmarklet æ„å¤–ãªç›²ç‚¹ã€‚ ä¸»è¦ãƒ–ãƒ©ã‚¦ã‚¶ã™ã¹ã¦ã«å½±éŸ¿ã™ã‚‹ã€Œã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã€æ”»æ’ƒã¨ã¯ ã—ã‹ã—ã€ ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚¯ - ç´ äººãŒãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚’å‹‰å¼·ã™ã‚‹ãƒ–ãƒã‚° Firefoxãƒ¦ãƒ¼ã‚¶ã¯NoScriptã‚’ä½¿ã†ã‹ã€about:configã‹ã‚‰permissions.default.subdocumentã‚’3ã«ã—ã¾ã—ã‚‡ã†ã€‚ ã¨ã„ã†ã®ã¯ã‚ã¾ã‚Šã«åŽ³ã—ãæ‚²ã—ã„ã€‚å¯¾ç–ã—ã‚ˆã†ã¯æžœãŸã—ã¦ãªã„ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿ ãã®çµæžœãŒã€ã“ã¡ã‚‰ã€‚ clickUnJack javascript:(function(d,u){var s=d.createElement('script');s.charset='UTF-8';s.src=u;d.body.appendChild(s)})(do
maRk 2009/03/05
javascript

security

å°é£¼å¼¾
ãƒªãƒ³ã‚¯
ã‚¢ãƒ«ãƒ‘ã‚«ç‰§å ´ã€€é‚£é ˆãƒ“ãƒƒã‚°ãƒ•ã‚¡ãƒ¼ãƒ : Firefoxã‚¢ãƒ‰ã‚ªãƒ³ã®NoScriptã®ä»•æ§˜ã®ç½ªã‚’ã¯ã¦ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã«æ“¦ã‚Šä»˜ã‘ã‚‹ã®ã¯ãŠæ¢ã‚ãªã•ã„
å‚è€ƒè³‡æ–™ http://b.hatena.ne.jp/entry/http://takagi-hiromitsu.jp/diary/20081125.html%23p01 ãªã‚“ã‹é˜¿å‘†ãªã“ã¨æ›¸ã„ã¦ã„ã‚‹äººãŒã„ã‚‹ã®ã§è¨€åŠã—ã¦ãŠãã€‚ noscriptå…¥ã‚Œã¦ã‚‹ã¨ï¼ˆä¿¡é ¼ã—ã¦ã‚‹ã‚µã‚¤ãƒˆä»¥å¤–ã§ã¯ï¼‰å‹•ã‹ãªã„ï¼Ÿ/ã²ã¨ã¾ãšæ—§ãƒãƒ¼ã‚¸ãƒ§ãƒ³ä½¿ã£ã¦ã¾ã™ã€‚ ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ - é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - æ–°ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®ç™»éŒ²ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã¯ä½¿ã£ã¦ã¯ã„ã‘ãªã„ ç«ç‹ã§NoScriptä½¿ã£ã¦ã‚‹ã¨ã€ã©ã£ã¡ã«ã—ã‚æ—§ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã—ã‹ä½¿ã„ç‰©ã«ãªã‚‰ãªã„ã‚“ã ã‚ˆã ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ - é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - æ–°ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®ç™»éŒ²ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã¯ä½¿ã£ã¦ã¯ã„ã‘ãªã„ æ®‹å¿µã€æ–°æ—§ã©ã¡ã‚‰ã‚‚å‹•ãã¾ã›ã‚“ã€‚ ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã¯ãã®ãƒšãƒ¼ã‚¸ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ä¸Šã§å‹•ãã¾ã™ã€‚ãã®ãƒšãƒ¼ã‚¸ã‚’ä¿¡é ¼ã™ã‚‹ã‚‚ã®ã¨ã—ãªã„é™ã‚Šã€ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã¯å‹•ãã¾
maRk 2008/11/26
ã¯ã¦ãª

javascript

security
ãƒªãƒ³ã‚¯
å„ã‚µã‚¤ãƒˆã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ãŸã£ãŸä¸€ã¤ã®ãƒžã‚¹ã‚¿ãƒ¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã ã‘ã§ã™ã¹ã¦ç®¡ç†ã§ãã‚‹ã™ã”ã„ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã€ŒSuperGenPassã€
ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã¨ã¯ã€ãƒšãƒ¼ã‚¸ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ãŠæ°—ã«å…¥ã‚Šã«å…¥ã‚Œã‚‹ä»£ã‚ã‚Šã«JavaScriptã®ãƒ—ãƒã‚°ãƒ©ãƒ ã‚³ãƒ¼ãƒ‰ã‚’å…¥ã‚Œã¦ãŠãã“ã¨ã§ã€ãã‚Œã‚’é¸ã‚“ã æ™‚ã«ã¡ã‚‡ã£ã¨ã—ãŸæ©Ÿèƒ½ãŒã™ãã«å®Ÿè¡Œã§ãã‚‹ã¨ã„ã†ä¾¿åˆ©ãªã‚‚ã®ã€‚ ã§ã€ä»Šå›žã®ã€ŒSuperGenPassã€ã¯å˜ä¸€ã®ãƒžã‚¹ã‚¿ãƒ¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã•ãˆè¦šãˆã¦ãŠã‘ã°ã€å„ã‚µã‚¤ãƒˆã”ã¨ã«ã™ã¹ã¦é•ã†ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ¥µã‚ã¦ç°¡å˜ã«åˆ©ç”¨ã§ãã‚‹ã¨ã„ã†ã‹ãªã‚Šã™ã”ã„ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã§ã€åˆ¥é€”ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚„æ‹¡å¼µæ©Ÿèƒ½ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹å¿…è¦ãªã—ã€è¦šãˆã¦ãŠãã®ã¯ãŸã£ãŸä¸€ã¤ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€ãªãŠã‹ã¤å„ã‚µã‚¤ãƒˆã”ã¨ã«é•ã†ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¨å®šã§ãã‚‹ã¨ã„ã†ã‚¹ã‚°ãƒ¬ãƒ¢ãƒŽã¨ãªã£ã¦ã„ã¾ã™ã€‚ è¨å®šæ–¹æ³•ã‚„ä½¿ã„æ–¹ã¯ä»¥ä¸‹ã‹ã‚‰ã€‚ SuperGenPass: A Free Bookmarklet Password Generator. http://supergenpass.com/ ã¾ãšã€ŒBrowser compatibility ?ã€ã§ä½¿ç”¨ã—ã¦
maRk 2008/07/29
security

web

javascript
ãƒªãƒ³ã‚¯
1