[B! DoS] mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mi1kman id:mi1kman

DoSã«é–¢ã™ã‚‹mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚ãƒ³ã‚°ã‚½ãƒ•ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚½ãƒ•ãƒˆã«è„†å¼±æ€§ã€ã‚µãƒ¼ãƒ“ã‚¹å¦¨å®³ã®æã‚Œ
ã‚ãƒ³ã‚°ã‚½ãƒ•ãƒˆã¯3æœˆ1æ—¥ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã‚½ãƒ•ãƒˆè£½å“ã€ŒKingsoft Internet Security 2011ã€ã«ã€ã‚µãƒ¼ãƒ“ã‚¹é‹ç”¨å¦¨å®³ï¼ˆDoSï¼‰æ”»æ’ƒã«ã¤ãªãŒã‚‹æã‚ŒãŒè¦‹ã¤ã‹ã£ãŸã¨ç™ºè¡¨ã—ãŸã€‚åŒç¤¾ã¯æ—¢ã«ä¿®æ£å¯¾å¿œã‚’å›³ã£ã¦ã„ã‚‹ã€‚ è„†å¼±æ€§ã¯åŒã‚½ãƒ•ãƒˆã®ãƒ‡ãƒã‚¤ã‚¹ãƒ‰ãƒ©ã‚¤ãƒã«å˜åœ¨ã—ã€ãƒ‘ãƒ¼ã‚½ãƒŠãƒ«ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«æ©Ÿèƒ½ã«å½±éŸ¿ã‚’ä¸Žãˆã‚‹ã¨ã„ã†ã€‚è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚Œã‚‹ã¨ã€ã‚·ã‚¹ãƒ†ãƒ ã«ãƒã‚°ã‚¤ãƒ³å¯èƒ½ãªç¬¬ä¸‰è€…ãŒDoSæ”»æ’ƒã‚’ä»•æŽ›ã‘ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€‚ãªãŠã€æœ€æ–°ç‰ˆè£½å“ã®Kingsoft Internet Security 2012ã¯ã“ã®è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ãªã„ã¨ã„ã†ã€‚ åŒç¤¾ã¯2æœˆ20æ—¥ã«å®Ÿæ–½ã—ãŸã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§ã“ã®è„†å¼±æ€§ã‚’ä¿®æ£ã€‚ãƒ‘ã‚¿ãƒ¼ãƒ³ãƒ•ã‚¡ã‚¤ãƒ«ã®æ›´æ–°æ—¥ãŒåŒæ—¥ä»¥é™ã§ã‚ã‚Œã°ä¿®å¾©æ¸ˆã¿ã ã¨ã—ã¦ã„ã‚‹ã€‚
mi1kman 2012/03/02
å‚è€ƒâ†’http://jvn.jp/jp/JVN31517714/index.html

è„†å¼±æ€§

DoS

ã‚ãƒ³ã‚°ã‚½ãƒ•ãƒˆ
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å¯¾ã™ã‚‹åºƒç¯„ãªDoSæ”»æ’ƒæ‰‹æ³•(hashdos)ã®å½±éŸ¿ã¨å¯¾ç–
28C3(28th Chaos Communication Congress)ã«ãŠã„ã¦ã€Effective Denial of Service attacks against web application platformsï¼ˆWebãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«å¯¾ã™ã‚‹åŠ¹æžœçš„ãªã‚µãƒ¼ãƒ“ã‚¹å¦¨å®³æ”»æ’ƒï¼‰ã¨é¡Œã™ã‚‹ç™ºè¡¨ãŒã‚ã‚Šã¾ã—ãŸï¼ˆã‚¿ã‚¤ãƒ ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«ã€è¬›æ¼”ã‚¹ãƒ©ã‚¤ãƒ‰ï¼‰ã€‚ ã“ã‚Œã«ã‚ˆã‚‹ã¨ã€PHPã‚’ã¯ã˜ã‚ã¨ã™ã‚‹å¤šãã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«å¯¾ã—ã¦ã€CPUè³‡æºã‚’æž¯æ¸‡ã•ã›ã‚‹ã‚µãƒ¼ãƒ“ã‚¹å¦¨å®³æ”»æ’ƒ(DoSæ”»æ’ƒ)ãŒå¯èƒ½ãªæ‰‹æ³•ãŒè¦‹ã¤ã‹ã£ãŸã¨ã„ã†ã“ã¨ã§ã™ã€‚ã“ã®æ”»æ’ƒã¯ã€hashdos ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚ æ¦‚è¦PHPãªã©å¤šãã®è¨€èªžã§ã¯ã€æ–‡å—åˆ—ã‚’ã‚ãƒ¼ã¨ã™ã‚‹é…åˆ—ï¼ˆé€£æƒ³é…åˆ—ã€ãƒãƒƒã‚·ãƒ¥ï¼‰ãŒç”¨æ„ã•ã‚Œã¦ãŠã‚Šã€HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚‚é€£æƒ³é…åˆ—ã®å½¢ã§æä¾›ã•ã‚Œã¾ã™ã€‚PHPã®å ´åˆã€$_GETã€$_POSTãªã©ã§ã™ã€‚ é€£æƒ³é…åˆ—ã®å®Ÿè£…ã«ã¯
mi1kman 2011/12/31
å‚è€ƒã«ãªã‚‹

è„†å¼±æ€§

DoS

hashdos
ãƒªãƒ³ã‚¯
Apache Killer (CVE-2011-3192) - cNotes: Current Status Notes
å…ˆé€±ã‹ã‚‰è©±é¡Œã«ãªã£ã¦ã„ã‚‹Apache Killerã€‚ ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰RangeæŒ‡å®šã‚’å«ã‚€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å¤§é‡ã«é€ã‚‹ã“ã¨ã§ã€ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã®ãƒ¡ãƒ¢ãƒªã¨CPUã‚’æ¶ˆè²»ã•ã›ã‚‹ã¨ã„ã†ã‚‚ã®ã§ãƒãƒ¼ã‚¸ãƒ§ãƒ³1.3ç³»ãŠã‚ˆã³2ç³»ã®ã™ã¹ã¦ãŒå¯¾è±¡ã€‚ã€ŒRange header DoSã€ã¨ã„ã†ã®ã§ã™ã‹ã€‚ ã‹ãªã‚Šå¼·åŠ›ãªåŠ¹æžœãŒã‚ã‚Šã¾ã™ã€‚ã€‚ã€‚ã€‚ã€‚ ã—ã‹ã‚‚ã€æ”»æ’ƒã‚³ãƒ¼ãƒ‰ãŒè¤‡æ•°ã§ã¾ã‚ã£ã¦ã„ã‚‹ã›ã„ã‹ã€ã“ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ãŒæµã‚ŒãŸå¾Œã€25æ—¥å¤œã€œ26æ—¥å¤œã«ã‹ã‘ã¦å¤§é‡ã®æ”»æ’ƒãŒè¦³æ¸¬ã•ã‚Œã¾ã—ãŸã€‚ ãŸã¨ãˆã°ã€‚ T 2011/08/26 15:12:42.000000 x.x.x.x:45302 -> x.x.x.x:10080 [A] HEAD /xxxxxx.jpg HTTP/1.1..Host: xxx.xxx.xxx..Range:by : : T 2011/08/26 17:26:09.000000 x.x.x.x:63163 -> x.x.x.x:808
mi1kman 2011/08/29
ã€Œã—ã‹ã‚‚ã€æ”»æ’ƒã‚³ãƒ¼ãƒ‰ãŒè¤‡æ•°ã§ã¾ã‚ã£ã¦ã„ã‚‹ã›ã„ã‹ã€ã“ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ãŒæµã‚ŒãŸå¾Œã€25æ—¥å¤œï½ž26æ—¥å¤œã«ã‹ã‘ã¦å¤§é‡ã®æ”»æ’ƒãŒè¦³æ¸¬ã•ã‚Œã¾ã—ãŸã€‚ã€

Apache

DoS

Apacke Killer
ãƒªãƒ³ã‚¯
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹DoS(Deny of Service)ã‚’èª¿ã¹ã¦ã¿ãŸã€‚ - akira_youã®ç§è¦‹
Wikileaksã¸ã®(or å‘¨è¾ºã‹ã‚‰)ã®DDoSã¨ã‹ã§ã€DoSã£ã¦å˜èªžã‚’ã¡ã‚‡ãã¡ã‚‡ãèžãã®ã§ãµã¨æ°—ã«ãªã£ã¦èª¿ã¹ã¦ã¿ãŸã€‚ä¾‹ãˆã°ã€namazuã‚’ä½¿ã£ã¦å…¨æ–‡æ¤œç´¢ã‚’è¡Œã£ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã§ä»¥ä¸‹ã®æ¤œç´¢ã‚’è¡Œã†ã¨ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§60ç§’é–“ã‚ã„ã£ã±ã„CPUã«è² è·ã‚’æŽ›ã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã“ã®æ€§è³ªã«ã¤ã„ã¦ã¯namazuå…¬å¼ã‚µã‚¤ãƒˆã§ã‚‚è¨€åŠã•ã‚Œã¦ã¦ã„ã¾ã™ã€‚(http://www.namazu.org/security.html)/(.|.){200}/ã“ã‚Œã¯æ£è¦è¡¨ç¾ã®æ€§è³ªã«ã‚ˆã‚‹ã‚‚ã®ã§ã€çœŸé¢ç›®ã«è§£é‡ˆã™ã‚‹ã¨ä»»æ„æ–‡å—Aã«ãƒžãƒƒãƒã™ã‚‹ã‹ã€ä»»æ„æ–‡å—Bã«ãƒžãƒƒãƒã™ã‚‹ã‹ã®é€£ç¶šãŒ200å›žç¶šãæ–‡å—åˆ—ã‚’æ¤œç´¢ã™ã‚‹äº‹ã«ãªã‚Šã¾ã™ã€‚ã“ã“ã§ã¯ã‚ã‹ã‚Šã‚„ã™ã„ã‚ˆã†ã«æœ€åˆã®.ã‚’Aã€å¾Œã®.ã‚’Bã¨è¡¨ç¾ã—ã¦ã„ã¾ã™ãŒã€å®Ÿéš›ã«ã¯ã©ã¡ã‚‰ã‚‚ã€Œä»»æ„æ–‡å—ã€ãªã®ã§ä¸¡æ–¹ã¨ã‚‚ãƒžãƒƒãƒã—ã¾ã™ã€‚ä¸¡æ–¹ã¨ã‚‚ãƒžãƒƒãƒã™ã‚‹ã®ã§ã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã¯é¦¬é¹¿æ£ç›´ã«ä¸¡æ–¹ã®å¯èƒ½æ€§ãŒã‚ã‚‹ã‚‚ã®ã¨ã—ã¦ã€è‰²ã€…è©¦ã™ã“ã¨ã«ãªã‚Šã¾
mi1kman 2010/12/25
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

DoS

æ£è¦è¡¨ç¾

å‚è€ƒã«ãªã‚‹

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
BigDecimal ã® DoS è„†å¼±æ€§
Posted by maki on 10 Jun 2009 Rubyæ¨™æº–ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®ä¸€ã¤ã§ã‚ã‚‹BigDecimalã«ã€DoS(Denial Of Service)çŠ¶æ…‹ã‚’å¼•ãèµ·ã“ã—ã¦ã—ã¾ã†è„†å¼±æ€§ãŒå˜åœ¨ã™ã‚‹ã“ã¨ãŒç™ºè¦‹ã•ã‚Œã¾ã—ãŸã€‚ BigDecimalã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‹ã‚‰æµ®å‹•å°æ•°ç‚¹æ•°(Float)ã¸ã®å¤‰æ›ã«å•é¡ŒãŒã‚ã‚Šã€æ”»æ’ƒè€…ã¯segmentation faultsã‚’å¼•ãèµ·ã“ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ ActiveRecordãƒ©ã‚¤ãƒ–ãƒ©ãƒªã¯ã“ã®ãƒ¡ã‚½ãƒƒãƒ‰ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹ãŸã‚ã€å¤šãã®Railsã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯ã“ã®è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ã€ã“ã‚Œã¯Railsã®ã¿ã®å•é¡Œã§ã¯ãªãã€Rubyã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å…¨ä½“ã«å½±éŸ¿ã®èµ·ã“ã‚Šã†ã‚‹å•é¡Œã§ã™ã€‚ å½±éŸ¿ æ”»æ’ƒè€…ã¯å·¨å¤§ãªBigDecimalã®æ•°å€¤ã‚’å¤‰æ›ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€DoSçŠ¶æ…‹ã‚’å¼•ãèµ·ã“ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ ãã®ä¸€ä¾‹ã‚’ä»¥ä¸‹ã«ç¤ºã—ã¾ã™ã€‚ è„†å¼±æ€§ã®å˜åœ¨ã™ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.8ç³» 1
mi1kman 2009/06/11
Ruby

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

DoS

BigDecimal
ãƒªãƒ³ã‚¯
United States
AI and AR can supercharge â€˜ambient computingâ€™A 33-year-old vision is now fully realizable thanks to the coming ubiquity of generative AI and augmented reality (AR) glasses.
mi1kman 2009/06/09
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

DoS

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
1