[B! security] msyktã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

msykt id:msykt

securityã«é–¢ã™ã‚‹msyktã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (13)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

BeyondProd Â |Â Documentation Â |Â Google Cloud
Send feedback BeyondProd Stay organized with collections Save and categorize content based on your preferences. This content was last updated in May 2024, and represents the status quo as of the time it was written. Google's security policies and systems may change going forward, as we continually improve protection for our customers. This document describes how Google implements security in our i
msykt 2019/12/18
security

microservice
ãƒªãƒ³ã‚¯
ãƒã‚¹ãƒˆé‡åæš—å· TLS ãŒ AWS KMS ã§ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¾ã—ãŸ | Amazon Web Services
Amazon Web Services ãƒ–ãƒã‚° ãƒã‚¹ãƒˆé‡åæš—å· TLS ãŒ AWS KMS ã§ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¾ã—ãŸ AWS Key Management ServiceÂ (AWS KMS) ãŒ KMS API ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã«æŽ¥ç¶šã™ã‚‹éš›ã«ä½¿ã‚ã‚Œã‚‹ Transport Layer Security (TLS) ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æš—å·åŒ–ãƒ—ãƒãƒˆã‚³ãƒ«ã«ãŠã‘ã‚‹ãƒã‚¹ãƒˆé‡åæš—å·ãƒã‚¤ãƒ–ãƒªãƒƒãƒ‰éµäº¤æ›ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¾ã—ãŸã€‚ã“ã®æŠ•ç¨¿ã§ã¯ã€ãƒã‚¹ãƒˆé‡åæš—å· TLS ã¨ã¯ä½•ã‹ã€ ãƒã‚¤ãƒ–ãƒªãƒƒãƒ‰éµäº¤æ›ã¨ã¯ä½•ã‹ã€ ãªãœã“ã‚Œã‚‰ã®æŠ€è¡“ãŒé‡è¦ã‹ ã€ã“ã®æ©Ÿèƒ½ã§ã©ã®ã‚ˆã†ãªãƒ¡ãƒªãƒƒãƒˆã‚’å¾—ã‚‰ã‚Œã‚‹ã®ã‹ã€ãã—ã¦ãƒ•ã‚£ãƒ¼ãƒ‰ãƒãƒƒã‚¯ã®æ–¹æ³•ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ ãƒã‚¹ãƒˆé‡åæš—å· TLS ã¨ã¯? ãƒã‚¹ãƒˆé‡åæš—å· TLS ã¯ã€ãƒã‚¹ãƒˆé‡åæš—å·ã®æš—å·ãƒ—ãƒãƒˆã‚³ãƒ«ã‚’è¿½åŠ ã™ã‚‹æ©Ÿèƒ½ã§ã™ã€‚ AWS ã¯ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã® TLS å®Ÿè£…ã§ã‚ã‚‹ s2n ã‚’ä½¿ç”¨ã—ã¦ã„ã¾ã™ã€‚2019å¹´6æœˆã«
msykt 2019/11/22
â€œè¨˜éŒ²ã•ã‚ŒãŸ TLS ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã¯å°†æ¥çš„ã«å¤§è¦æ¨¡ãªé‡åã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã§å¾©å·å‡ºæ¥ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚TLS æŽ¥ç¶šã®ä¸Šã§é€ä¿¡ã•ã‚Œã¦ã„ã‚‹ãƒ‡ãƒ¼ã‚¿ã®é•·æœŸé–“ã®æ©Ÿå¯†æ€§ç¶æŒãŒå¿…è¦ãªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é–‹ç™ºã—ã¦ã„ã‚‹å ´åˆã€å¤§è¦æ¨¡ãªé‡å

aws

security
ãƒªãƒ³ã‚¯
ãƒ“ã‚ºãƒªãƒ¼ãƒã€è„†å¼±æ€§ã¨å¯¾å¿œå„ªå…ˆåº¦ã‚’è‡ªå‹•ã§å¯è¦–åŒ–ã™ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹è„†å¼±æ€§ç®¡ç†ãƒ„ãƒ¼ãƒ«ã€Œyamoryã€ã‚’ãƒªãƒªãƒ¼ã‚¹
EnterpriseZineï¼ˆã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚ºã‚¸ãƒ³ï¼‰ç·¨é›†éƒ¨ã§ã¯ã€æƒ…å ±ã‚·ã‚¹ãƒ†ãƒ æ‹…å½“ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹…å½“ã®æ–¹ã€…å‘ã‘ã«ã€EnterpriseZine Dayã€Security Online Dayã€DataTechã¨ã„ã†ã€3ã¤ã®ã‚¤ãƒ™ãƒ³ãƒˆã‚’é–‹å‚¬ã—ã¦ãŠã‚Šã¾ã™ã€‚ãã‚Œãžã‚Œç·¨é›†éƒ¨ç‹¬è‡ªã®åˆ‡ã‚Šå£ã§ã€æ¥ç•Œãƒˆãƒ¬ãƒ³ãƒ‰ã‚„æœ€æ–°äº‹ä¾‹ã‚’ç¶²ç¾…ã€‚æœ€æ–°ã®å‹•å‘ã‚’çŸ¥ã‚‹ã“ã¨ãŒã§ãã‚‹å ´ã¨ã—ã¦ã€å¥½è©•ã‚’å¾—ã¦ã„ã¾ã™ã€‚
msykt 2019/08/28
ãƒ“ã‚ºãƒªãƒ¼ãƒãŒã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹è„†å¼±æ€§ç®¡ç†ãƒ„ãƒ¼ãƒ«ã‚’ä½œã£ãŸã¨ã€‚æ„å¤–ã€‚

oss

security
ãƒªãƒ³ã‚¯
SPAã§ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ç®¡ç†ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ - Qiita
ç·¨é›†å±¥æ´ â€» SessionStorageâ†’LocalStorageï¼ˆæ°¸ç¶šåŒ–ã•ã‚Œã‚‹æ–¹ã¯ã“ã¡ã‚‰ã ã£ãŸï¼‰ â€» OPTIONãƒ¡ã‚½ãƒƒãƒ‰â†’OPTIONSãƒ¡ã‚½ãƒƒãƒ‰ â€» JWTã«ã¤ã„ã¦å°‘ã—èª¿ã¹ãŸã®ã§LocalStorageæ¬„ã‚’è¿½è¨˜ æ¦‚è¦ Frontend Meetup vol.1 - SPAã‚’èªžã‚Šå°½ãã™ä¼š!ã®LTè³‡æ–™ã§ã™ã€‚ ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã®ã‚¬ãƒå‹¢ã«ã¯å½“ãŸã‚Šå‰ã®å†…å®¹ã«ãªã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ SPAæŽ¢ã‚ŠæŽ¢ã‚Šãªã®ã§ã€ã”æŒ‡æ‘˜ã‚ã‚Œã°ã‚³ãƒ¡ãƒ³ãƒˆãªã©ã§é ‚ã‘ã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ è‡ªå·±ç´¹ä»‹ï¼ˆå¾Œã§æ¶ˆã™ï¼‰ åå‰ï¼šã—ã°ãŸã“/uryyyyyyy æ‰€å±žï¼šæ ªå¼ä¼šç¤¾ã‚ªãƒ—ãƒˆ å¾—æ„åˆ†é‡Žï¼šScala/Play2/Spark/React æœ€è¿‘ã¯React/Redux/TypeScriptã§æ›¸ã„ã¦ã¾ã™ã€‚ materializeã‚’å°Žå…¥ã—ãŸã®ã§ã™ãŒjQueryãªã‹ãªã‹è¾›ã„ã€‚ã€‚ã€‚ ã“ã®è³‡æ–™ã§è©±ã™ã“ã¨ SPAã§ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ç®¡ç† CSRFå¯¾ç– CORS SPAã§
msykt 2019/01/12
spa

security
ãƒªãƒ³ã‚¯
æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ã®æƒ…å ±æ¼ãˆã„ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2015å¹´6æœˆ1æ—¥ã€è·å“¡PCãŒãƒžãƒ«ã‚¦ã‚§ã‚¢ã«æ„ŸæŸ“ã—ãŸã“ã¨ã«ã‚ˆã‚Šã€æƒ…å ±æ¼ãˆã„ãŒç™ºç”Ÿã—ãŸã“ã¨ã‚’æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ãŒç™ºè¡¨ã—ã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ å…¬å¼ç™ºè¡¨ æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ 2015å¹´6æœˆ1æ—¥ (PDF) æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ã®å€‹äººæƒ…å ±æµå‡ºã«ã¤ã„ã¦ 2015å¹´6æœˆ3æ—¥ (PDF) å€‹äººæƒ…å ±æµå‡ºã®ãŠè©«ã³ - æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ ç†äº‹é•· æ°´å³¶è—¤ä¸€éƒŽ (å¹³æˆï¼’ï¼—å¹´ï¼–æœˆï¼’æ—¥) 2015å¹´6æœˆ3æ—¥ (PDF) å€‹äººæƒ…å ±æµå‡ºã®å ±é“ç™ºè¡¨ã‚’æ‚ªç”¨ã—ãŸä¸å¯©ãªé›»è©±ç‰ã«ã”æ³¨æ„ãã ã•ã„ï¼ 2015å¹´6æœˆ3æ—¥ (PDF) æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ã®å€‹äººæƒ…å ±ãŒæµå‡ºã—ãŸãŠå®¢æ§˜ã¸ã®ãŠè©«ã³ã«ã¤ã„ã¦ 2015å¹´6æœˆ6æ—¥ (PDF) æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã®ä¸€æ™‚åœæ¢ã«ã¤ã„ã¦ 2015å¹´6æœˆ8æ—¥ (PDF) æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã®æš«å®šå¯¾å¿œã«ã¤ã„ã¦ 2015å¹´6æœˆ22æ—¥ (PDF) æ—¥æœ¬å¹´é‡‘æ©Ÿæ§‹ã®å€‹äººæƒ…å ±ãŒæµå‡ºã—ãŸãŠå®¢æ§˜ã¸ã®ãŠè©«ã³ã«ã¤ã„ã¦ 2015å¹´6æœˆ
msykt 2015/06/02
security
ãƒªãƒ³ã‚¯
AWS ã§ä½œã‚‹ã‚·ã‚¹ãƒ†ãƒ ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è€ƒ - æ°´æ·±1024m
AWS ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’è¤‡æ•°äººã§ä½¿ã£ã¦ã‚·ã‚¹ãƒ†ãƒ ã‚’ä½œã£ã¦ã„ãæ™‚ã«ã€ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®é¢ã‹ã‚‰ã‚„ã‚‹ã¹ãã“ã¨ã«ã¤ã„ã¦ã€‚ ä¸»ã« Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æƒ³å®šã—ãŸå†…å®¹ã§ã™ãŒã€ç‰¹ã«æ›¸ã„ã¦ã‚ã‚‹ã“ã¨ã¯ç‰¹æ®Šã§ã¯ãªã„ã¨æ€ã„ã¾ã™ã€‚ å„æ‰€ã® Blog ã«ã‚‚è¨˜äº‹æ›¸ã‹ã‚Œã¦ã¾ã™ãŒæ€ã£ã¦ã„ã‚‹ã“ã¨ã‚’ã¤ã‚‰ã¤ã‚‰ã¨æ›¸ã„ã¦ã¿ã¾ã™ã€‚ ãªã‚“ã‹å¤‰ãªã“ã¨è¨€ã£ã¦ãŸã‚‰ã”æŒ‡æ‘˜ãã ã•ã„ã€‚ å‚è€ƒ: AWSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒæ°—ã«ãªã‚‹ãªã‚‰èªã‚“ã§ãŠãã¹ãAWS ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ - yoshidashingo ã¯ã˜ã‚ã« (AWS ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¨ IAM ãƒ¦ãƒ¼ã‚¶) å‰æã¨ã„ã†ã‹ç”¨èªžã®è©±ã€‚ AWS ã‚¢ã‚«ã‚¦ãƒ³ãƒˆ ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä½œæˆæ™‚ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒã‚°ã‚¤ãƒ³ã—ã¦ä½¿ã†ãƒ¦ãƒ¼ã‚¶ IAM ãƒ¦ãƒ¼ã‚¶ AWS ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‹ã‚‰ç™ºè¡Œã§ãã‚‹ã€ãƒ¦ãƒ¼ã‚¶åã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒã‚°ã‚¤ãƒ³ã—ã¦ä½¿ã†ãƒ¦ãƒ¼ã‚¶ AWS ã‚¢ã‚«ã‚¦ãƒ³ãƒˆå‘¨ã‚Š AWS ã‚¢ã‚«ã‚¦ãƒ³ãƒˆ (ãƒ«ãƒ¼ãƒˆãƒ¦ãƒ¼ã‚¶) ã§ä½œæ¥ã§ããªã„ã‚ˆã†ã«
msykt 2014/09/23
aws

security
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : Chromeã®SHA1è¨¼æ˜Žæ›¸ã®ã‚¢ãƒ©ãƒ¼ãƒˆè¡¨ç¤ºãƒãƒªã‚·ã®å•é¡Œç‚¹ - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
è¡¨ã‚’è¦‹ã¦ã„ãŸã ã‘ã‚Œã°ã‚ã‹ã‚‹é€šã‚Šã€Microsoft Windowsã®SHA1ç§»è¡Œãƒãƒªã‚·ã«æ¯”ã¹ã¦ã€Chromeã¯ã‹ãªã‚Šã‚¢ã‚°ãƒ¬ãƒƒã‚·ãƒ–ãªè¨å®šã«ãªã£ã¦ãŠã‚Šã€é–‹ç™ºç‰ˆã¯2014å¹´9æœˆ26æ—¥ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‹ã‚‰ã€å®‰å®šç‰ˆã¯2014å¹´11æœˆé ƒãƒªãƒªãƒ¼ã‚¹ã®39ã‹ã‚‰æ£å¸¸ãªHTTPSæŽ¥ç¶šã§ãªã„ã‹ã®ã‚ˆã†ãªã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹è¡¨ç¤ºã¨ãªã£ã¦ã—ã¾ã„ã¾ã™ã€‚ ä»Šå›žã®Chromeã®SHA1å¯¾å¿œãƒãƒªã‚·ã®å•é¡Œç‚¹ ä»Šå›žã®Google Chromeã®SHA1è¨¼æ˜Žæ›¸ã«å¯¾ã™ã‚‹å¯¾å¿œè¨ˆç”»ã¯æ§˜ã€…ãªå•é¡ŒãŒã‚ã‚‹ã¨è€ƒãˆã¦ã„ã¦ã€è«–ç‚¹ã‚’æ•´ç†ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ æœ€ã‚‚é‡è¦ã ã¨æ€ã†ã®ãŒã€ãƒ–ãƒ©ã‚¦ã‚¶æ¯Žã«HTTPSã®ã‚¨ãƒ©ãƒ¼ã‚„å•é¡Œã«å¯¾ã™ã‚‹è¡¨ç¤ºã®æ„å‘³ãŒç•°ãªã£ã¦ã—ã¾ã†ã¨ã„ã†ç‚¹ã§ã™ã€‚ä»Šå›žã®SHA1è¨¼æ˜Žæ›¸ã®è¡¨ç¤ºã®è¨ˆç”»ãŒãƒ–ãƒ©ã‚¦ã‚¶ãƒ™ãƒ³ãƒ€ãƒ¼æ¯Žã«ç•°ãªã‚‹ã®ã¯ãƒ¦ãƒ¼ã‚¶ãŒæ··ä¹±ã™ã‚‹ã“ã¨ã«ãªã‚Šã€è‰¯ããªã‹ã£ãŸã¨æ€ã„ã¾ã™ã€‚æœ¬æ¥ãªã‚‰CA Browser Forumã®Baseline Profileãªã©ã§ã€æ¥ç•Œã§æ„æ€
msykt 2014/09/13
security

chrome
ãƒªãƒ³ã‚¯
Why Google is Hurrying the Web to Kill SHA-1
Hilbert map of hashing algorithms, by Ian Boyd Most of the secure web is using an insecure algorithm, and Google's just declared it to be a slow-motion emergency. Something like 90% of websites that use SSL encryption â€” â€” use an algorithm called SHA-1 to protect themselves from being impersonated. This guarantees that when you go to , you're visiting the real Facebook and not giving your password
msykt 2014/09/13
security
ãƒªãƒ³ã‚¯
Nessus on EC2ã§ã‚·ã‚¹ãƒ†ãƒ ã®è„†å¼±æ€§ã‚’æ¤œæŸ»ã™ã‚‹ | DevelopersIO
ã¯ã˜ã‚ã« ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯ã‚¯ãƒ©ã‚¦ãƒ‰ã§ã‚‚ã‚ªãƒ³ãƒ—ãƒ¬ãƒŸã‚¹ã¨å¤‰ã‚ã‚‰ãšé‡è¦ã§ã™ã€‚AWSã®å…±æœ‰è²¬ä»»ãƒ¢ãƒ‡ãƒ«ã«ãŠã„ã¦ã€ç‰©ç†çš„ãªãƒ•ã‚¡ã‚·ãƒªãƒ†ã‚£ã‚„ã‚¤ãƒ³ãƒ•ãƒ©éƒ¨åˆ†ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯AWSã«ã¦æ‹…ä¿ã•ã‚Œã¾ã™ãŒã€OSã‚„ãƒŸãƒ‰ãƒ«ã‚¦ã‚§ã‚¢ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ã¤ã„ã¦ã¯åˆ©ç”¨è€…è‡ªã‚‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¬ãƒ™ãƒ«ã‚’é«˜ã‚ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ãã“ã§ä»Šå›žã¯Amazon EC2ã§ã€è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã§ã‚ã‚‹Nessusã‚’ä½¿ã£ã¦ã¿ã¾ã—ãŸã€‚ è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã¨ã¯ è‡ªèº«ãŒç®¡ç†ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒã«å¯¾ã—ã€ä¾µå…¥ã‚„ã‚µãƒ¼ãƒ“ã‚¹å¦¨å®³ãªã©ã«ç”¨ã„ã‚‰ã‚Œã‚‹æ”»æ’ƒæ‰‹æ®µã‚’è©¦è¡Œã—ã¦ã€è„†å¼±æ€§ã®æœ‰ç„¡ã‚’ç¢ºèªã™ã‚‹ãƒ„ãƒ¼ãƒ«ã§ã™ã€‚åºƒç¾©ã§è¨€ãˆã°ã€é–‹æ”¾ã•ã‚Œã¦ã„ã‚‹é€šä¿¡ãƒãƒ¼ãƒˆã‚’èª¿ã¹ã‚‹ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒŠã‚‚è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã®ä¸€ç¨®ã¨è¨€ãˆã‚‹ã§ã—ã‚‡ã†ã€‚è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã¯æ”»æ’ƒæ‰‹æ®µã‚’ãƒ‘ã‚¿ãƒ¼ãƒ³ã¨ã—ã¦æŒã¡ã€ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ã§ç™ºè¦‹ã•ã‚ŒãŸé–‹æ”¾ãƒãƒ¼ãƒˆã«å¯¾ã—ã¦æ”»æ’ƒæ‰‹æ®µã‚’è©¦è¡Œã™ã‚‹ã“ã¨ã§ã€æ”»æ’ƒã‚’å—ã‘ã‚‹ãƒªã‚¹ã‚¯ã®é«˜ã„è„†å¼±æ€§ã‚’ç™ºè¦‹ã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã¾ã™ã€‚ æœ‰åãªã‚‚ã®ã§ã¯Reti
msykt 2014/05/22
aws

security
ãƒªãƒ³ã‚¯
ã‚¨ãƒ•ã‚»ã‚ãƒ¥ã‚¢ãƒ–ãƒã‚° : å†éŒ²ï¼šãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯æœ¬å½“ã«SHA-1+saltã§ååˆ†ã ã¨æ€ã„ã¾ã™ã‹ï¼Ÿ
å†éŒ²ï¼šãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯æœ¬å½“ã«SHA-1+saltã§ååˆ†ã ã¨æ€ã„ã¾ã™ã‹ï¼Ÿ 2012å¹´06æœˆ07æ—¥19:05 ãƒ„ã‚¤ãƒ¼ãƒˆ sean_sullivan ãƒ˜ãƒ«ã‚·ãƒ³ã‚ç™ºÂ byï¼šã‚·ãƒ§ãƒ¼ãƒ³ãƒ»ã‚µãƒªãƒãƒ³ æ˜¨æ—¥ã€ä¸€éƒ¨ãƒ¡ãƒ³ãƒãƒ¼ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«éšœå®³ãŒèµ·ããŸã¨ã„ã†å ±é“ã‚’ã€LinkedInãŒèªã‚ãŸã€‚ ä»¥ä¸‹ã¯å½¼ã‚‰ã®ãƒ–ãƒã‚°ã‹ã‚‰ã®æƒ…å ±ã ï¼š ã€Œæˆ‘ã€…ãŒå…ˆé ƒå°Žå…¥ã—ãŸå¼·åŒ–ç‰ˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¯ã€ç¾è¡Œã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®ãƒãƒƒã‚·ãƒ¥ã¨saltãŒå«ã¾ã‚Œã¦ãŠã‚Šã€ä»Šå›žã®å½±éŸ¿ã§ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¤‰æ›´ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚‚ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«éšœå®³ãŒèµ·ãã¦ã„ãªã„ãƒ¡ãƒ³ãƒãƒ¼ã«ã‚‚åˆ©ç›Šã‚’ä¸Žãˆã‚‹ã ã‚ã†ã€‚ã€ ãƒãƒƒã‚·ãƒ¥ã¨saltï¼Ÿ ãã‚Œã§ååˆ†ãªã®ã‹ï¼Ÿã€€ãã‚Œã¯ä»¥ä¸‹ã®å†éŒ²è¨˜äº‹ï¼ˆã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’å«ã‚€ï¼‰ã§ã€æ˜¨å¹´ã€ã‚¨ãƒ•ã‚»ã‚ãƒ¥ã‚¢ã®ã‚¸ãƒ£ãƒ«ãƒŽãƒ»ãƒãƒ¡ãƒ©ãŒå‘ˆã—ãŸç–‘å•ã ã€‚ â€”â€”â€”â€”â€” ã‚¢ãƒŠãƒ¼ã‚ãƒ¼ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚°ãƒ«ãƒ¼ãƒ—ã€ŒAnonymousã€ãŒå…ˆé ƒã€HBGary Federalã¨ãƒ«ãƒ¼ãƒˆã‚ãƒƒãƒˆãƒ†ã‚¯ãƒŽãƒã‚¸ã®åˆ†æž
msykt 2012/06/11
security

web
ãƒªãƒ³ã‚¯
é€£è¼‰: IBM Watson Workspace #é¬¼ã‚ã‹ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™º: ç¬¬ 7 å›ž: IBM Watson Workspace ã§ AI ã‚’åˆ©ç”¨ã—ãŸã‚¢ãƒ—ãƒªé€£æºã®å®Ÿç¾ #é¬¼ã‚ã‹ è§£èª¬ï¼ˆå‰ç·¨ï¼‰
IBM Developer is your one-stop location for getting hands-on training and learning in-demand skills on relevant techno logies such as generative AI, data science, AI, and open source.
msykt 2012/06/01
security

ajax
ãƒªãƒ³ã‚¯
http://blog.monoweb.info/article/2012031523.html
msykt 2012/03/18
security

javascript
ãƒªãƒ³ã‚¯
å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹
In some of the feedback I have gotten on the openID Connect spec, the statement is made that Connect is too complicated. That OAuth 2.0 is all you need to do authentication. Many point to Identity Proâ€¦ è‹±èªžèªã¿ãŸããªã„ã¨ã„ã†äººã®ãŸã‚ã«ç°¡å˜ã«è§£èª¬ã™ã‚‹ã¨â€¦ OAuth 2.0 ã® implicit flow ã‚’ä½¿ã£ã¦ã€Œèªè¨¼ã€ã‚’ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã€ã¨ã£ã¦ã‚‚å¤§ããªç©´ãŒé–‹ãã¾ã™ã€‚ ã‚«ãƒƒãƒˆï¼†ãƒšãƒ¼ã‚¹ãƒˆã‚¢ã‚¿ãƒƒã‚¯ãŒå¯èƒ½ã ã‹ã‚‰ã§ã™ã€‚ OAuth èªè¨¼ï¼Ÿã¯ã€å›³ï¼‘ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ å›³ï¼‘ OAuth èªè¨¼ï¼Ÿã®æµã‚Œ ä¸€è¦‹ã€å•é¡Œãªã•ãã†ã«è¦‹ãˆã¾ã™ã€‚ã—ã‹ã—ã€ãã‚Œã¯ã™ã¹ã¦ã®ã‚µã‚¤ãƒˆãŒã€Œè‰¯ã„ã‚µã‚¤ãƒˆã€ãªã‚‰ã°ã§ã™ã€‚ Site_A
msykt 2012/02/02
security

oauth
ãƒªãƒ³ã‚¯
1