[B! Chrome] mad-pã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mad-p id:mad-p

Chromeã«é–¢ã™ã‚‹mad-pã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

TLSã¨SPDYã®é–“ã§Google ChromeãŒãƒãƒžã£ãŸè„†å¼±æ€§(CVE-2014-3166ã®è§£èª¬) - ã¼ã¡ã¼ã¡æ—¥è¨˜
1. ã¯ã˜ã‚ã«ã€ GoogleãŒãƒãƒžã£ãŸã‚·ãƒªãƒ¼ã‚ºç¬¬3å¼¾ã€‚ä»Šåº¦ã¯ Chrome ã®è„†å¼±æ€§ãŒãƒ†ãƒ¼ãƒžã§ã™ã€‚ å…ˆæ—¥(8æœˆ12æ—¥é ƒï¼‰çªç„¶Google Chromeã§SPDYã®æ©Ÿèƒ½ãŒä¸€æ—¦åœæ¢ã•ã‚Œã¾ã—ãŸã€‚CloudFareã®äººãŒæ°—ã¥ã„ã¦spdy-devã¸ã®MLã®å•ã„åˆã‚ã›ã—ã€ã™ãGoogleã®aglã•ã‚“ã‹ã‚‰ã®è¿”äº‹ã§è¨ˆç”»çš„ã§ä¸€æ™‚çš„ãªã‚‚ã®ã§ã‚ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šã¾ã—ãŸã€‚ twitterã‚„facebookã‚‚SPDYãŒå…¨ã¦ä½¿ãˆãªããªã‚Šéžå¸¸ã«é©šã„ãŸã®ã§ã™ãŒã€ç›´å¾Œã« Chrome ã® Stable/Beta/Dev ãƒãƒ£ãƒ³ãƒãƒ«ãŒã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã•ã‚Œã€ã»ã©ãªãã—ã¦å•é¡ŒãªãSPDYãŒä½¿ãˆã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ ã“ã®ç†ç”±ã¯å…¬å¼ã«ã¯æ˜Žã‚‰ã‹ã«ã•ã‚Œã¦ã„ã¾ã›ã‚“ãŒã€Chromeã®ãƒªãƒªãƒ¼ã‚¹ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã«ãƒ’ãƒ³ãƒˆãŒã‚ã‚Šã¾ã—ãŸã€‚ãã“ã«ã¯ã€ High CVE-2014-3166: Information disclosure in SPDY. Credi
mad-p 2014/08/22
Public Key PinningãŒé‡è¦ãªå½¹å‰²ã‚’æŒã£ã¦ã„ã‚‹ã®ã‹ã€‚å‹‰å¼·ã«ãªã‚Šã¾ã—ãŸ!

spdy

Chrome

security

tls
ãƒªãƒ³ã‚¯
Mac Chromeã®ãƒãƒ¼ã‚«ãƒ«ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã®å ´æ‰€ - akagamimanã®æ—¥è¨˜
Macã®Chromeã«ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§å‚™ã‚ã£ã¦ã„ã‚‹ã€Œå…¨ã¦ã®cookieã¨ã‚µã‚¤ãƒˆãƒ‡ãƒ¼ã‚¿ã€ã«ã¯ã‚½ãƒ¼ãƒˆãŒãªã„ã®ã§ã€ ãƒ»ãƒãƒ¼ã‚«ãƒ«ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã ã‘ã‚’å€‹åˆ¥ã«æ¶ˆã—ãŸã„ã‚“ã˜ã‚ƒãƒã‚²ï¼ ãƒ»ã‚µã‚¤ã‚ºã®å¤§ãã„ãƒãƒ¼ã‚«ãƒ«ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã‚’ä¸Šã‹ã‚‰é †ã«ä¸¦ã¹ã¦æ¶ˆã—ãŸã„ã‚“ã˜ã‚ƒãƒœã‚±ï¼ ã£ã¦ãªã£ã¦éžå¸¸ã«ä¸ä¾¿ã€‚ ãã‚“ãªã¨ãã¯ãƒãƒ¼ã‚«ãƒ«ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã®ä¿å˜å ´æ‰€ã«ã„ã£ã¦ç›´æŽ¥æ¶ˆã—ã¦ã—ã¾ãˆã£ã¦ã“ã¨ã§ã€ /Users/ãƒ¦ãƒ¼ã‚¶å/Library/Application Support/Google/Chrome/Default/Local Storage ã«è¡Œã£ã¦ã‚¶ã‚¯ã‚¶ã‚¯å‰Šé™¤ï¼ï¼ˆç›´æŽ¥ã‚´ãƒŸç®±ã«ã¶ã‚“æŠ•ã’ã‚‹ï¼‰ ãƒãƒ¼ã‚«ãƒ«ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã¯ä¸‹è¨˜ã¿ãŸã„ãªåå‰ã§ä¿å˜ã•ã‚Œã¦ã¾ã™ã€‚ http_www.google.com_0.localstorage http_www.google.com_0.localstorage-journal ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã§å‡ºæ¥ãŸãƒãƒ¼ã‚«ãƒ«ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã¯å…ˆé ãŒã€Œh
mad-p 2014/04/01
mac

localstorage

Chrome
ãƒªãƒ³ã‚¯
Chrome connects to three random domains at startup.
When you start Chrome, it attempts to connect to three random domains like http://aghepodlln/ or http://lkhjasdnpr/. Iâ€™ve seen a few theories about why exactly this happens that brush up against the nefarious. The true rationale is incredibly mundane: hopefully this short summary will clear things up. The goal of the requests is to determine if youâ€™re currently on a network that intercepts and red
mad-p 2013/04/30
IntranetRedirectDetector ã®ã—ã‚ã–ãªã®ã‹ãƒ¼

Chrome

dns
ãƒªãƒ³ã‚¯
Adam Langleyã€ŒCRIME attackã®ä»¶ã€ - ä»¥ä¸‹æ–œã‚èªã‚“ã å†…å®¹
ImperialViolet 2012.9.21ã®ã‚¨ãƒ³ãƒˆãƒª ImperialViolet - CRIME CRIME attackã«ã¤ã„ã¦ ç¾æ™‚ç‚¹ã§ã®å¯¾å¿œ fxã¨è‹¥å¹²é•ã†å¯¾å¿œã—ã¦ã‚‹ç‚¹ ä»Šå¾Œã®chromeã§ã®å¯¾å¿œãƒ—ãƒ©ãƒ³ ã‚’chromeãƒãƒ¼ãƒ ã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãŒã–ã£ãã‚Šæ›¸ã„ã¦ã‚‹ spdy/4ã§å®Œå…¨å¯¾å¿œãªã‚“ã ã‚ã†ãŒã€ãã‚Œã¾ã§ã®ãƒ—ãƒ©ãƒ³ã®å…·ä½“çš„ãªã¨ã“ã‚ã‚’çŸ¥ã‚Œã¦ã‚ˆã‹ã£ãŸ ä»¥ä¸‹æ–œã‚èªã‚“ã å†…å®¹ å‰ã‹ã‚‰æ°—ã«ãªã£ã¦ãŸå•é¡Œ spdyã§ã¯sensitiveãªãƒ‡ãƒ¼ã‚¿ã‚’zlibä½¿ã£ã¦åœ§ç¸®ã™ã‚‹ã®ãŒå®‰å…¨ã‹ã©ã†ã‹ æŽ˜ã‚Šä¸‹ã’ã¦æ¤œè¨¼ã™ã‚‹æš‡ãŒãªã‹ã£ãŸ è‡ªåˆ†ã¨åŒã˜å¿ƒé…ã‚’ã—ã¦ãŸç ”ç©¶è€…ãŒä»–ã«ã‚‚ã„ãŸã€‚ã‚ã‚ŠãŒãŸã„ Firefoxãƒãƒ¼ãƒ ã¨Chromeãƒãƒ¼ãƒ ã«Duongã¨Rizzoã¯äº‹å‰ã«æ•™ãˆã¦ãã‚ŒãŸ chromeãƒãƒ¼ãƒ ãŒä»Šå›žä½œã£ãŸãƒ‘ãƒƒãƒã®è©± ãã®å‰ã«spdyãŒãƒ˜ãƒƒãƒ€ã‚’åœ§ç¸®ã™ã‚‹ä»•çµ„ã¿ã‚’ãŠã•ã‚‰ã„ zlibã®ã‚„ã£ã¦ã‚‹ã“ã¨ã¯ä¸€è¨€ã§ã„ã†ã¨ ã“ã®ãƒªãƒ†ãƒ©ãƒ«ãƒã‚¤
mad-p 2013/01/18
security

spdy

Chrome
ãƒªãƒ³ã‚¯
Chromeã¯ãªãœé€Ÿã„ã®ã‹ ï¼ ï¼ IT
Chromeã®å‹•ä½œãŒåœ§å€’çš„ã«é€Ÿã„ã‚ˆã†ã«æ„Ÿã˜ã¦ã„ã‚‹ã€‚ChromeãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸå½“åˆã€ãã‚ŒãŒãªãœãªã®ã‹ã‚ˆãåˆ†ã‹ã‚‰ãªã‹ã£ãŸã€‚ã‚°ãƒ¼ã‚°ãƒ«ã ã‘ã«ã§ãã¦ã€ã»ã‹ã®Webãƒ–ãƒ©ã‚¦ã‚¶é–‹ç™ºè€…ã«ã§ããªã„ã“ã¨ãªã©ã‚ã‚‹ã‚ˆã†ã«æ€ãˆãªã„ãŒã€ãã‚Œã«ã—ã¦ã¯ã‚ã¾ã‚Šã«é€Ÿã„ã‚ˆã†ã«æ„Ÿã˜ãŸã‹ã‚‰ã ã€‚ ãã®ç–‘å•ã®ã»ã¨ã‚“ã©ã¯ã€Chromeã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆç‰ˆã€ŒChromiumã€ã®å…¬å¼ãƒ–ãƒã‚°ã®è§£èª¬ã§æ°·è§£ã—ãŸã€‚ãƒ–ãƒã‚°ã‚’èªã‚“ã§åˆ†ã‹ã£ãŸã®ã¯ã‚°ãƒ¼ã‚°ãƒ«ã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãŸã¡ãŒä¿¡ã˜ã‚‰ã‚Œãªã„ã»ã©ã®ã‚¹ãƒ”ãƒ¼ãƒ‰ç‹‚ã§ã‚ã‚‹ã“ã¨ã¨ã€ãã®ã‚¹ãƒ”ãƒ¼ãƒ‰ã¸ã®ã“ã ã‚ã‚Šã«ã¯2ç¨®é¡žã®â€œã‚¹ãƒ”ãƒ¼ãƒ‰â€ãŒã‚ã‚‹ã“ã¨ã ã€‚ 1ã¤ã¯å‡¦ç†é€Ÿåº¦ã€ã‚‚ã†1ã¤ã¯å¿œç”é€Ÿåº¦ã ã€‚ç‰¹ã«å¾Œè€…ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ã§ãã‚‹ã ã‘å¾…ãŸã›ãªã„ã€ã‚¤ãƒ©ã¤ã‹ã›ãªã„ã¨ã„ã†ã“ã¨ã«å¯¾ã™ã‚‹å¾¹åº•ã—ãŸã“ã ã‚ã‚Šã¯ã€ã™ã•ã¾ã˜ã„ã€‚ãã®èƒŒå¾Œã«ã¯ã€Œã‚¹ãƒ”ãƒ¼ãƒ‰ã¨ã¯ã€ã¤ã¾ã‚ŠãŠé‡‘ã ã€ã¨ã„ã†æ´žå¯ŸãŒã‚ã‚‹ã‚ˆã†ã ã€‚ 0.5ç§’ã®é…å»¶ã§ãƒ¦ãƒ¼ã‚¶ãƒ¼é›¢ã‚Œ ã‚°ãƒ¼ã‚°ãƒ«å‰µæ¥ç´„1å¹´å¾Œã®1999å¹´
mad-p 2008/12/23
èªã¿ã”ãŸãˆãŒã‚ã£ãŸ

google

Chrome

+ã“ã‚Œã¯ã™ã”ã„
ãƒªãƒ³ã‚¯
1