[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] materia-x64ã®ãƒ

materia-x64 id:materia-x64

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹materia-x64ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (12)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ€ã‚¤ãƒ¤ãƒ«Q2é¢¨ã®é›»è©±ç•ªå·ã§Instagramã‚„Googleã‚„Microsoftã‹ã‚‰é‡‘ã‚’ã‚€ã—ã‚Šã¨ã‚Œã‚‹è„†å¼±æ€§
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ãŒã€ã¨ã¦ã‚‚èˆˆå‘³æ·±ã„è„†å¼±æ€§ã‚’å ±å‘Šã—ã¦å ±å¥¨é‡‘ã‚’ã‚‚ã‚‰ã£ãŸè¨˜äº‹ãŒä¸ŠãŒã£ã¦ã„ã‚‹ã€‚ How I Could Steal Money from Instagram, Google and Microsoft â€“ Arne Swinnen's Security Blog ãƒ—ãƒ¬ãƒŸã‚¢ãƒ ãƒŠãƒ³ãƒãƒ¼ã¨ã„ã†é›»è©±ä¸Šã®ã‚µãƒ¼ãƒ“ã‚¹ãŒã‚ã‚‹ã€‚ã“ã‚Œã¯ä¸€æ™‚æœŸæ—¥æœ¬ã§è¡Œã‚ã‚Œã¦ã„ãŸãƒ€ã‚¤ãƒ¤ãƒ«Q2ã¨åŒç‰ã®ä»•çµ„ã¿ã‚’æŒã¤ã‚µãƒ¼ãƒ“ã‚¹ã§ã€ãƒ—ãƒ¬ãƒŸã‚¢ãƒ ãƒŠãƒ³ãƒãƒ¼ã¨ã„ã†é›»è©±ç•ªå·ã«ã‹ã‘ãŸé›»è©±ã®é€šè©±æ–™ã¯ã€é€šå¸¸ã‚ˆã‚Šé«˜ã„ã€‚é€šè©±æ–™ã®å·®åˆ†ã¯ã€é›»è©±ã‚µãƒ¼ãƒ“ã‚¹ã®æä¾›å…ƒã«æ”¯æ‰•ã‚ã‚Œã‚‹ã€‚ ãƒ€ã‚¤ãƒ¤ãƒ«Q2ã¯é›»è©±è¶Šã—ã«ä½•ã‚‰ã‹ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã—ã¦ã€é›»è©±æ–™é‡‘ã§åˆ©ç”¨æ–™ã‚’å¾´åŽã§ãã‚‹ã€æ‰‹è»½ãªä»•çµ„ã¿ã ã£ãŸã€‚ãã®åˆ©ç”¨ä¾‹ã¯ã€æŠ•è³‡é¡§å•ã€ã‚¢ãƒ€ãƒ«ãƒˆã€å ã„ã€äººç”Ÿ ç›¸è«‡ã€ç¾©æ´é‡‘ã€ãƒ€ã‚¤ãƒ¤ãƒ«ã‚¢ãƒƒãƒ—ISPãªã©ã«åˆ©ç”¨ã•ã‚Œã¦ã„ãŸã€‚ãƒ€ã‚¤ãƒ¤ãƒ«Q2è‡ªä½“ã¯2014å¹´ã«çµ‚ã‚ã£ãŸãŒã€æµ·å¤–ã§ã¯ã¾ã åŒç‰ã®ä»•çµ„ã¿ã‚’ã‚‚ã¤ã‚µãƒ¼ãƒ“ã‚¹
materia-x64 2016/07/18
ãŠã‰ãƒ¼ã€‚ãªã‚‹ã»ã©ã€‚

é›»è©±ç•ªå·

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
AWSã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¤§äººé”ãŒå¯„ã£ã¦ãŸã‹ã£ã¦è°è«–ã™ã‚‹ä¼šã«è¡Œã£ã¦ããŸ | ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã ã¡ãã‚“
ã‚·ãƒ³ã‚¸ã§ã™ã€‚AWSã®ãƒ¦ãƒ¼ã‚¶ãƒ¼è‡ªèº«ãŒæ´»å‹•ã™ã‚‹JAWS-UGã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€éƒ¨éšŠã§ã‚ã‚‹ã€Security-JAWSç¬¬ä¸€å›žç›®ãŒé–‹å‚¬ã•ã‚Œã¾ã—ãŸã€‚ã‚¤ãƒ™ãƒ³ãƒˆå‚åŠ è€…æ•°ã¯å®šå“¡40äººã€ç”³è¾¼è€…194äººã¨å¤§ç››æ³ã™ãŽãŸã€‚ã‚·ãƒ³ã‚¸ã¯é‹å–¶å§”å“¡ã¨ã„ã†ã“ã¨ã§ã€ç”Ÿã¾ã‚Œã¦åˆã‚ã¦å—ã‘ä»˜ã‘ã‚’ã‚„ã£ã¦ã¿ã¾ã—ãŸãŒã€ã¿ãªã•ã‚“ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒå¼·å›ºãªã®ã§ãªã‹ãªã‹å—ä»˜ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãŒè‹¦åŠ´ã—ãŸã¨ã„ã†è©±ã§ã™ã€‚ é‹å–¶å§”å“¡é›†åˆ 18æ™‚é›†åˆã§ã™ã€‚æ„å¤–ã¨ã¡ã‚ƒã‚“ã¨é›†ã¾ã£ãŸã€‚ã¨ã‚Šã‚ãˆãšã‚¿ãƒªãƒ¼ã‚ºã§ä¼‘æ†©ã€‚ LACã•ã‚“æä¾›ã®æœ€é«˜ã®ä¼šå ´ ã“ã‚ŒãŒçœ‹æ¿Debutï¼ï¼ ã‹ãƒ¼ã‚‰ãƒ¼ã®ãƒ¼ï¼Ÿ ãµã‚€ãµã‚€ ãµã‚€ãµã‚€ï¼Ÿ è¿·å®®ã‹ ã¤ã„ãŸ ã¯ã—ã‚ƒãå¤§äººé” å”çªã«å§‹ã¾ã‚‹ã‚«ãƒ¡ãƒ©ãƒãƒˆãƒ« ã‚¯ãƒ©ãƒ¡ã‚½ã®æ£®æ°¸ã•ã‚“ã§ã™ å—ã‘ä»˜ã‘é–‹å§‹ï¼å—ä»˜ç¬¬ä¸€å·ã¯ ã¾ã•ã‹ã®AWSã®ä¸ã®äººã§ã—ãŸï¼ˆAWS JAPAN äº€ç”°ã•ã‚“ï¼‰ ã¯ã£ã˜ã¾ã£ã‚‹ã‚ˆãƒ¼ Security-JAWSç”Ÿã¿ã®è¦ªã€ãƒˆãƒ¬ãƒ³ãƒ‰ãƒžã‚¤ã‚¯ãƒå—åŽŸã•ã‚“ãŒå¸ä¼šã‚’å‹™ã‚ã¾ã™ã€‚
materia-x64 2016/05/18
aws

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚°ãƒ«ãƒ¼ãƒ—ãƒãƒªã‚·ãƒ¼ã§Chromeã®LINEæ‹¡å¼µæ©Ÿèƒ½ã‚„Chromeãƒªãƒ¢ãƒ¼ãƒˆãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ã‚’ç¦æ¢ã—ã‚ˆã†ï¼ - å®¶åºå†…ã‚¤ãƒ³ãƒ•ãƒ©ç®¡ç†è€…ã®ç‹¬ã‚Šè¨€ï¼ˆã¯ãªãšãã‚“ã®æ—¥è¨˜ã£ã½ã„ã®ï¼‰
PCã§æ°—è»½ã«LINEãŒã§ãã‚‹Google Chromeç‰ˆã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªç™»å ´ï¼ : LINEå…¬å¼ãƒ–ãƒã‚°ã®æŠ•ç¨¿ã‚’è¦‹ãŸçž¬é–“ã«ã€ãƒ‰ã‚ãƒƒã¨ã—ã¾ã—ãŸã€‚ ãã—ã¦ã€ADã§å‡ºæ¥ãã†ã ã‚ˆãã£ã¦æ€ã£ãŸã¾ã¾æ”¾ç½®ã—ã¦ã¾ã—ãŸ(æ±— ãƒ‰ã‚ãƒƒã¨ã—ãŸç†ç”±ã¯ã€ç¤¾å“¡ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¯Usersã‚°ãƒ«ãƒ¼ãƒ—ã ã—ã€ä¸‡ãŒä¸€LINEã®ã‚µã‚¤ãƒˆã‹ã‚‰ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ©ãƒ¼ã‚’èµ·å‹•ã—ãŸã¨ã—ã¦ã‚‚ç®¡ç†è€…ã®IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã—ãªã‘ã‚Œã°ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ããªã„ã‹ã‚‰å¤§ä¸ˆå¤«ï¼ã£ã¦æ€ã£ã¦ãŸã‚“ã§ã™ã‚‚ã®ã€‚ ã¨ã“ã‚ãŒã§ã™ã‚ˆã€Chromeã®æ‹¡å¼µæ©Ÿèƒ½ã£ã¦ã“ã¨ã¯ã€ãŸã¨ãˆç¤¾å“¡ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒæ–°ã—ã„ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¿½åŠ ã§ããªã„ã‚ˆã†ã«è¨å®šã—ã¦ã„ãŸã¨ã—ã¦ã‚‚ã€å°Žå…¥å¯èƒ½ã£ã¦ã“ã¨ã«ãªã£ã¦ã—ã¾ã„ã¾ã™ã€‚ Chromeã®LINE æ‹¡å¼µæ©Ÿèƒ½ã§ä½•ãŒã§ãã‚‹ã®ï¼Ÿ ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸æ©Ÿèƒ½(ã‚¹ãƒžãƒ›ãƒ»ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ç‰ˆã®LINEã¨åŒæ§˜) ç”»é¢ã®å…±æœ‰æ©Ÿèƒ½(ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ç‰ˆã®LINEã¨åŒæ§˜) ãƒ•ã‚¡ã‚¤ãƒ«é€ä¿¡æ©Ÿèƒ½(ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ç‰ˆã®LINEã¨åŒæ§˜)
materia-x64 2016/01/01
Google Chrome

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è¨å®š
ãƒªãƒ³ã‚¯
ã€ŒéŠ€è¡Œã‹ã‚‰ï¼‘ä¸‡ï¼”ï¼ï¼ï¼ä»¶ã®æƒ…å ±æµå‡ºã€ã‚’å½“äº‹è€…ç›®ç·šã§è§£èª¬ã—ãŸã„
å‡ºä¼šã„ç³»ã‚µã‚¤ãƒˆé‹å–¶è€…ã¨ç¹‹ãŒã‚Šã®ã‚ã‚‹æ–¹ã‚ˆã‚Šç›´æŽ¥è©±ã‚’èžãã“ã¨ãŒã§ãã¾ã—ãŸã€‚ æ–‡æ‰ãŒãªã„ãªãŒã‚‰ã‚‚å‡ºæ¥ã‚‹ã ã‘å½“äº‹è€…å´ã‹ã‚‰ã®ç›®ç·šã§è§£èª¬ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ å…ˆã«è¨€ã„ã¾ã™ãŒã€æœ¬ä»¶ã¯å‡ºä¼šã„ç³»ã‚µã‚¤ãƒˆè‡ªèº«ãŒè¢«å®³è€…ã§ã‚‚ã‚ã‚Šã¾ã™ã®ã§ã€ã€Œå‡ºä¼šã„ç³»ã‚µã‚¤ãƒˆãªã‚“ã¦å…¨éƒ¨ã‚µã‚¯ãƒ©ã‚µã‚¤ãƒˆã ã‚?ã€ã¿ãŸã„ãªå…ˆå…¥è¦³ã‚’ãŠæŒã¡ã®æ–¹ã¯ä¸€æ—¦æ¨ã¦ã¦é ‚ãã¨ç†è§£ã—ã‚„ã™ã„ã‹ã¨æ€ã„ã¾ã™ã€‚çœŸã£å½“ã«é‹å–¶ã•ã‚Œã¦ã„ã‚‹å‡ºä¼šã„ç³»ã‚µã‚¤ãƒˆãŒè¢«å®³è€…ã§ã™ã€‚ ã¾ãšæµå‡ºã—ãŸã§ã‚ã‚ã†æƒ…å ±ã¨ã¯ä½•ãªã®ã‹?ã€Œæ®‹é«˜ç…§ä¼šãƒ€ã‚¤ãƒ¤ãƒ«ã€ã¯ã€å¥‘ç´„è€…ãŒæŒã¤å£åº§ã®æ®‹é«˜ã‚„ã€é€šå¸³ã«ã€Œå°å—ã•ã‚Œã†ã‚‹ã€å–å¼•æ˜Žç´°ã‚‚éŸ³å£°ã§çŸ¥ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ä¾‹ãˆã° ã€Œ27-11-27 æŒ¯è¾¼ ãƒ•ã‚°ã‚¿ãƒžã‚¹ã‚ª *30,000ã€ ã€Œ27-11-30 æŒ¯è¾¼ ã‚¤ã‚½ãƒŽã‚«ãƒ„ã‚ª *10,000ã€ ã“ã®ã‚ˆã†ãªå…¥å‡ºé‡‘ã®å–å¼•ã‚’ã€éŸ³å£°ã§çŸ¥ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã‚‚ã¡ã‚ã‚“å¥‘ç´„è€…(å¥‘ç´„å›£ä½“)è‡ªèº«ã—ã‹ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ã¯ãšã®æƒ…å ±ãªã‚ã‘ã§ã™ãŒã€ã“ã®æ®‹é«˜ç…§ä¼šãƒ€ã‚¤ãƒ¤ãƒ«ã®æ“
materia-x64 2015/12/01
é›»è©±ç•ªå·

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

é‡‘èž
ãƒªãƒ³ã‚¯
OpenSSL #ccsinjection Vulnerability
[English] æœ€çµ‚æ›´æ–°æ—¥: Mon, 16 Jun 2014 18:21:23 +0900 CCS Injection Vulnerability æ¦‚è¦ OpenSSLã®ChangeCipherSpecãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®å‡¦ç†ã«æ¬ é™¥ãŒç™ºè¦‹ã•ã‚Œã¾ã—ãŸã€‚ ã“ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€æš—å·é€šä¿¡ã®æƒ…å ±ãŒæ¼ãˆã„ã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ã‚µãƒ¼ãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ä¸¡æ–¹ã«å½±éŸ¿ãŒã‚ã‚Šã€è¿…é€Ÿãªå¯¾å¿œãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ã€‚ æ”»æ’ƒæ–¹æ³•ã«ã¯å……åˆ†ãªå†ç¾æ€§ãŒã‚ã‚Šã€æ¨™çš„åž‹æ”»æ’ƒç‰ã«åˆ©ç”¨ã•ã‚Œã‚‹å¯èƒ½æ€§ã¯éžå¸¸ã«é«˜ã„ã¨è€ƒãˆã¾ã™ã€‚ å¯¾ç– å„ãƒ™ãƒ³ãƒ€ã‹ã‚‰æ›´æ–°ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã‚‹ã¨æ€ã‚ã‚Œã‚‹ã®ã§ã€ãã‚Œã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã“ã¨ã§å¯¾ç–ã§ãã¾ã™ã€‚ ï¼ˆéšæ™‚æ›´æ–°ï¼‰ Ubuntu Debian FreeBSD CentOS Red Hat 5 Red Hat 6 Amazon Linux AMI åŽŸå› OpenSSLã®ChangeCipherSpecãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®å‡¦ç†ã«ç™ºè¦‹
materia-x64 2014/06/06
openssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
XMLHttpRequestã‚’ä½¿ã£ãŸCSRFå¯¾ç– - è‘‰ã£ã±æ—¥è¨˜
åˆã‚ã›ã¦èªã‚“ã§ãã ã•ã„ï¼šFlashã¨ç‰¹å®šãƒ–ãƒ©ã‚¦ã‚¶ã®çµ„ã¿åˆã‚ã›ã§cross originã§ã‚«ã‚¹ã‚¿ãƒ ãƒ˜ãƒƒãƒ€ä»˜ä¸ŽãŒå‡ºæ¥ã¦ã—ã¾ã†å•é¡ŒãŒæœªã ã«ç›´ã£ã¦ã„ãªã„è©± (2014-02/07) XMLHttpRequestã‚’ä½¿ã†ã“ã¨ã§ã€Cookieã‚„ãƒªãƒ•ã‚¡ãƒ©ã€hiddenå†…ã®ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ä½¿ç”¨ã›ãšã«ã‚·ãƒ³ãƒ—ãƒ«ã«CSRFå¯¾ç–ãŒè¡Œãˆã‚‹ã€‚POSTã™ã‚‹JavaScriptã¯ä»¥ä¸‹ã®é€šã‚Šã€‚(2013/03/04:ã‚³ãƒ¼ãƒ‰ä¸€éƒ¨ä¿®æ£) function post(){ var s = "mail=" + encodeURIComponent( document.getElementById("mail").value ) + "&msg=" + encodeURIComponent( document.getElementById("msg").value ); var xhr = new XMLHttpRequest(); xhr
materia-x64 2013/03/02
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

javascript

CSRF

XMLHttpRequest
ãƒªãƒ³ã‚¯
Javaã«æ–°ãŸãªã€Œã‚¼ãƒãƒ‡ã‚¤ã€ã®è„†å¼±æ€§ã€æ—¢ã«æ‚ªç”¨æ”»æ’ƒã‚‚æ¨ªè¡Œ
æ‚ªåé«˜ã„ã€ŒBlackholeã€ã‚„ã€ŒNuclear Packã€ãªã©ã®ãƒ„ãƒ¼ãƒ«ã‚ãƒƒãƒˆãŒæ—¢ã«ã“ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã—ã¦ã„ã‚‹ã¨ã„ã†ã€‚US-CERTã¯Webãƒ–ãƒ©ã‚¦ã‚¶ã§Javaã‚’ç„¡åŠ¹ã«ã™ã‚‹å¯¾ç–ã‚’å¥¨åŠ±ã—ã¦ã„ã‚‹ã€‚ ç±³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿé–¢ã®US-CERTã¯1æœˆ10æ—¥ã€ã€ŒJava 7 Update 10ã€ã¾ã§ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«æœªè§£æ±ºã®æ·±åˆ»ãªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã¨ã—ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã‚’å…¬é–‹ã—ãŸã€‚ã“ã®è„†å¼±æ€§ã‚’çªã„ãŸæ”»æ’ƒã‚‚æ—¢ã«æ¨ªè¡Œã—ã¦ã„ã‚‹ã¨ã„ã†ã€‚ US-CERTã«ã‚ˆã‚‹ã¨ã€è„†å¼±æ€§ã¯ã€ŒJava Management Extensionsï¼ˆJMXï¼‰ MBeanã€ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã«å˜åœ¨ã™ã‚‹ã€‚æ”»æ’ƒè€…ãŒã“ã®å•é¡Œã‚’æ‚ªç”¨ã—ã¦ç´°å·¥ã‚’æ–½ã—ãŸHTMLæ–‡æ›¸ã‚’ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«é–²è¦§ã•ã›ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰èªè¨¼ã‚’å—ã‘ãšã«ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã§ãã¦ã—ã¾ã†æã‚ŒãŒã‚ã‚‹ã¨ã„ã†ã€‚ å…±é€šè„†å¼±æ€§è©•ä¾¡ã‚·ã‚¹ãƒ†ãƒ CVSSã«ã‚ˆã‚‹æ·±åˆ»åº¦è©•ä¾¡ã¯ã€ãƒ™ãƒ¼ã‚¹ã‚¹ã‚³ã‚¢ã§æœ€é«˜å€¤ã®ã€Œ10.0ã€ã€‚ã“ã®è„†å¼±
materia-x64 2013/01/12
java

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
å°±æ´»ç”Ÿã®ã¿ãªã•ã‚“ã¸ ï½žæ–‡ç³»ï¼Ÿç†ç³»ï¼Ÿï½ž Â« ã‚µãƒ¼ãƒãƒ¼ãƒ¯ãƒ¼ã‚¯ã‚¹ç¤¾é•·ãƒ–ãƒã‚°
ã‚µãƒ¼ãƒãƒ¼ã‚¯ã‚¹CEOãƒ–ãƒã‚°ã€€å¤§çŸ³è”µäººä¹‹åŠ©ã®ã€Œé›²ã‚’ã¤ã‹ã‚€ã‚ˆã†ãªè©±ã€ã¯ã€ ã€Œã¯ã¦ãªãƒ–ãƒã‚°ã€ã¸ç§»è¡Œè‡´ã—ã¾ã—ãŸã€‚ æ—§ãƒ–ãƒã‚°è¨˜äº‹ã®URLã‹ã‚‰ãŠè¶Šã—ã®çš†æ§˜ã¯è‡ªå‹•ã§æ–°ãƒ–ãƒã‚°ã¸è»¢é€ã•ã‚Œã¾ã™ã€‚ è»¢é€ã•ã‚Œãªã„å ´åˆã€æã‚Œå…¥ã‚Šã¾ã™ãŒä¸‹è¨˜URLã‹ã‚‰ç§»å‹•ã‚’ãŠé¡˜ã„è‡´ã—ã¾ã™ã€‚ æ–°URLï¼šhttps://ceo.serverworks.co.jp/ å¼•ãç¶šãã€å¤§çŸ³è”µäººä¹‹åŠ©ã®ã€Œé›²ã‚’ã¤ã‹ã‚€ã‚ˆã†ãªè©±ã€ã‚’å®œã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚
materia-x64 2013/01/01
ä½•ã§ã‚‚ç¤¾å†…ã«ç½®ã‹ãªã„ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šãƒ€ãƒ¡ã¨ã‹ã ã¨è€å®³ã¨å‘¼ã°ã‚Œã‚‹æ—¥ã‚‚è¿‘ã„ã‚“ã ã‚ã†ãªï¼â€œã€ŒLANã ã‹ã‚‰ä¿¡ç”¨ã§ãã‚‹ã€ã¨ã„ã†ç›²ä¿¡ã¯äº‹å®Ÿã¨åã—ã¦ã„ã‚‹ã¨è¨€ã‚ã–ã‚‹ã‚’å¾—ã¾ã›ã‚“ã€‚â€,â€œã‚¹ã‚¿ãƒã§ãƒ‰ãƒ¤é¡”ã‚’ã—ãªãŒã‚‰æ›¸ã„ã¦ã„ã¾ã™â€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ISMS
ãƒªãƒ³ã‚¯
ã€ŒCVE-2012-4681:Oracle Java7 ä»»æ„ã®OSã‚³ãƒžãƒ³ãƒ‰ãŒå®Ÿè¡Œå¯èƒ½ãªè„†å¼±æ€§ã€ã®æ”»æ’ƒæ‰‹æ³•è§£èª¬ - ( ê’ªâŒ“ê’ª) ã‚†ã‚‹ã‚ˆã‚æ—¥è¨˜
Ocacle Java7ã§ä»»æ„ã®OSã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œå¯èƒ½ãªè„†å¼±æ€§ãŒã‚ã‚‹ã€ã¨è©±é¡Œã«ãªã‚Šã¾ã—ãŸã€‚ JVNTA12-240A: Oracle Java 7 ã«è„†å¼±æ€§ æœ¬æ—¥ãƒ‘ãƒƒãƒãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚ Oracleã€Javaã®æ·±åˆ»ãªè„†å¼±æ€§ã‚’å…¬è¡¨â€•æ”»æ’ƒè€…ã¯ãƒªãƒ¢ãƒ¼ãƒˆã§ã‚ã‚‰ã‚†ã‚‹æ“ä½œãŒå¯èƒ½ã€”ä»Šæœãƒ‘ãƒƒãƒç·Šæ€¥ãƒªãƒªãƒ¼ã‚¹ã€• Alert for CVE-2012-4681 PoCã‚³ãƒ¼ãƒ‰ã‚‚å…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã®è„†å¼±æ€§ã‚’çªãæ”»æ’ƒã¯ã©ã®ã‚ˆã†ãªã‚‚ã®ã‹èˆˆå‘³ãŒã‚ã£ãŸã®ã§ã€èª¿ã¹ã¦ã¿ã¾ã—ãŸã€‚ èª¿æŸ»çµæžœã¯ã€ä»Šé€±ã«è¡Œã‚ã‚ŒãŸ8æœˆ29æ—¥ JJUG Night Seminar ~ Java VM&LT&ç´æ¶¼ä¼š ~(æ±äº¬éƒ½) ã§è©±ã—ã¦ããŸã®ã§ã™ãŒã€ãƒ‘ãƒƒãƒã‚‚å‡ºãŸã“ã¨ã ã—ãƒ–ãƒã‚°ã«ã‚‚æ›¸ã„ã¦ã¿ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ Javaã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¢ãƒ‡ãƒ«ã«ã¤ã„ã¦ Javaã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯ã€ã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹ãƒ¢ãƒ‡ãƒ«ã«ã‚ˆã£ã¦ç¢ºä¿ã•ã‚Œã¦ã„ã¾ã™ã€‚ã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹ã¯ã€JVMä¸Šã§å®Ÿè¡Œã•
materia-x64 2012/08/31
ã“ã£ã¡ã ãƒ»ãƒ»ãƒ»

java

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
( ê’ªâŒ“ê’ª) ã‚†ã‚‹ã‚ˆã‚æ—¥è¨˜
ã©ã†ã‚‚ã€ã—ã„ãŸã‘ã§ã™ã€‚ åŽ»å¹´ã‚ãŸã‚Šã‹ã‚‰ãƒãƒ¼ãƒ¬ã‚¤ãƒ¤ãƒ¼å‘¨ã‚Šã®çŸ¥è˜ã‚’å……å®Ÿã•ã›ã‚ˆã†ã¨æ€ã„ã€ ä½Žãƒ¬ã‚¤ãƒ¤ã‚’çŸ¥ã‚ŠãŸã„äººã®ãŸã‚ã®Cã‚³ãƒ³ãƒ‘ã‚¤ãƒ©ä½œæˆå…¥é–€ ã‚’èªã‚“ã§Cã‚³ãƒ³ãƒ‘ã‚¤ãƒ©ã‚’æ›¸ã„ã¦ã¿ãŸã‚Šx86_64ã®å‹‰å¼·ã‚’ã—ãŸã‚Šã—ã¦ã„ã¾ã—ãŸã€‚ ä»Šå¹´ã«å…¥ã£ã¦ã‹ã‚‰ã€ã‚ˆã‚Šãƒãƒ¼ãªãƒ¬ã‚¤ãƒ¤ãƒ¼ã€å…·ä½“çš„ã«ã¯ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ã‚„OSã«ã¤ã„ã¦ã‚‚ã†å°‘ã—çŸ¥ã‚ŠãŸã„ã¨æ€ã„å§‹ã‚ã€æ‰‹é ƒãªæ›¸ç±ã‚’æŽ¢ã—ã¦ã„ã¾ã—ãŸã€‚ CPUãªã©ã®ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢å‘¨ã‚Šã«ã¤ã„ã¦ã¯æ¦‚è¦ã—ã‹çŸ¥ã‚‰ãªãã¦æ‰‹ã‚’å‹•ã‹ã—ãŸã“ã¨ãŒãªã„ã®ã§ã€å®Ÿéš›ã«ä½•ã‹ä½œã‚ŠãªãŒã‚‰å¦ã¹ã‚‹ã‚‚ã®ã¨ã—ã¦ã€ O'Reilly Japan - ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚·ã‚¹ãƒ†ãƒ ã®ç†è«–ã¨å®Ÿè£… ã«æŒ‘æˆ¦ã™ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ O'Reilly Japan - ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚·ã‚¹ãƒ†ãƒ ã®ç†è«–ã¨å®Ÿè£… æˆæžœç‰©ã¯ä»¥ä¸‹ã®ãƒªãƒã‚¸ãƒˆãƒªã«ç½®ã„ã¦ã‚ã‚Šã¾ã™ã€‚ yuroyoro/nand2tetris çµè«–ã‹ã‚‰è¨€ã†ã¨ã€ã‚„ã£ã¦ã¿ã¦å¤§å¤‰æ¥½ã—ã‚ã¾ã—ãŸï¼ ç‰¹ã«ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢å‘¨ã‚Šã¯ä»Šã¾ã§æŒ‘æˆ¦ã—ãŸã“
materia-x64 2012/08/31
ã‚‚ã†PoCå‡ºã¦ã‚‹ã‚“ã ãƒ»ãƒ»ãƒ»

java

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ãƒ–ãƒãƒƒã‚¯ã•ã‚ŒãŸã‚µã‚¤ãƒˆã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹è£æŠ€10é€£ç™ºï¼ : ãƒ©ã‚¤ãƒ•ãƒãƒƒã‚«ãƒ¼ï¼»æ—¥æœ¬ç‰ˆï¼½
DIY , Firefox , Google , Linux , Microsoft , Mozilla , PC æœ¬ä½“ , Webãƒ„ãƒ¼ãƒ« , Windows , ãã®ä»– , ãã®ä»– , ã‚¢ãƒ‰ã‚ªãƒ³ , ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ , ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ãƒ„ãƒ¼ãƒ« , ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ , ãƒ•ãƒªãƒ¼ã‚½ãƒ•ãƒˆ , ãƒ–ãƒ©ã‚¦ã‚¶ ãƒ–ãƒãƒƒã‚¯ã•ã‚ŒãŸã‚µã‚¤ãƒˆã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹è£æŠ€10é€£ç™ºï¼ æŽ²è¼‰æ—¥æ™‚ï¼š2010.04.26 08:00Â Â ã‚³ãƒ¡ãƒ³ãƒˆ [0] , ãƒˆãƒ©ãƒƒã‚¯ãƒãƒƒã‚¯ [0] Photo by chidorian ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¨ã„ã†ã®ã¯ãƒ•ãƒªãƒ¼ãªå ´æ‰€ã§ã‚ã‚‹ã€ã¨è¨€ã„ã¤ã¤ã‚‚ã€è·å ´ãªã©ã®ãƒ‘ã‚½ã‚³ãƒ³ã§ã¯ã‚¢ã‚¯ã‚»ã‚¹ãŒåˆ¶é™ã•ã‚Œã¦ã„ãŸã‚Šã€ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ãŒå¤šéŽãŽã§ç¹‹ãŒã‚‰ãªã‹ã£ãŸã‚Šãªã©ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ ä»Šã™ãç‰¹å®šã®å‹•ç”»ã‚’è¦‹ãŸã„ã€ã¾ãŸã¯ã‚ã‚‹ã‚µã‚¤ãƒˆã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã€ä»Šã™ãã“ã®torrentã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ãŸã„ï¼ã€€ãªã©ã®ä¸éƒ½åˆã«ç›´é¢ã—ãŸéš›ã«å½¹ç«‹ã¤è£æŠ€ã‚’10é€šã‚Šä¸€
materia-x64 2010/04/28
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã¾ã¨ã‚

lifehack
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ã“ã“ã¾ã§ç ´ç¶»ã—ã¦ã„ã‚‹ã‚±ãƒ¼ã‚¿ã‚¤IDèªè¨¼ï¼ˆç°¡å˜ãƒã‚°ã‚¤ãƒ³ï¼‰
â– ã“ã“ã¾ã§ç ´ç¶»ã—ã¦ã„ã‚‹ã‚±ãƒ¼ã‚¿ã‚¤IDèªè¨¼ï¼ˆç°¡å˜ãƒã‚°ã‚¤ãƒ³ï¼‰ 2009å¹´å¤ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ç•Œéšˆã§ã¯ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ãŒå±ã†ã„ã¨ã„ã†è©±é¡Œã§æŒã¡åˆ‡ã‚Šã ã£ãŸã€‚IPã‚¢ãƒ‰ãƒ¬ã‚¹åˆ¶é™ã‚’ã—ã¦ã„ã¦ã‚‚çªç ´ã§ãã¦ã—ã¾ã†ã®ã§ã¯ãªã„ã‹ã¨ã„ã†è©±ã ã£ãŸã€‚ å®Ÿéš›ã«å‹•ã„ã¦ã™ãä½¿ãˆã‚‹ã€ŒPHPã«ã‚ˆã‚‹ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã‚µãƒ³ãƒ—ãƒ«ã€ã‚’ä½œã£ã¦ã¿ã¾ã—ãŸ, ke-tai.org, 2009å¹´7æœˆ31æ—¥ SoftBank Mobileã®æºå¸¯ç”¨Gatewayã‚’PCã§é€šã‚‹æ–¹æ³•ã®ãƒ¡ãƒ¢, Perlã¨ã‹memoã¨ã‹æ—¥è¨˜ã¨ã‹ã€‚, 2009å¹´8æœˆ1æ—¥ ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã®æºå¸¯ç”¨Gatewayã‚’PCã§é€šã‚‹æ–¹æ³•ãŒã‚ã‚‹ã‚ˆã†ã§ã™, ke-tai.org, 2009å¹´8æœˆ4æ—¥ ã“ã‚Œã¯è¦ã™ã‚‹ã«æ¬¡ã®ã‚ˆã†ãªè©±ã ã£ãŸã€‚ ã¾ãšã€SoftBankã®æºå¸¯é›»è©±ã§ç‰¹å®šã®APN mailwebservice.softbank.ne.jp ã§ãƒãƒƒãƒˆæŽ¥ç¶šã—ã¦ã€æ‰€å®šã®Proxyã‚µãƒ¼ãƒ sbwap
materia-x64 2010/04/28
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

æºå¸¯

Security

proxy
ãƒªãƒ³ã‚¯
1