[B! security] nilabã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

nilab id:nilab

securityã«é–¢ã™ã‚‹nilabã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (1,033)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½œæˆã—ãŸã‚‰æœ€åˆã«ã‚„ã‚‹ã¹ãã“ã¨ -ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç·¨- - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? JAWS-UG åˆå¿ƒè€…æ”¯éƒ¨ #22 ãƒãƒ³ã‚ºã‚ªãƒ³ç”¨ã®è³‡æ–™ã§ã™ã€‚ ç›®çš„ AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä¸æ£åˆ©ç”¨ã•ã‚Œãªã„ãŸã‚ã«ã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½œæˆã—ãŸã‚‰ã¾ãšã‚„ã‚‹ã¹ãã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‘¨ã‚Šã®è¨å®šã‚’è¡Œã„ã¾ã™ã€‚ å‰æ AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½œæˆæ¸ˆã¿ã§ã‚ã‚‹ã“ã¨ AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ãƒã‚°ã‚¤ãƒ³ã—ã¦ã„ã‚‹ã“ã¨ ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ã¯æ±äº¬ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ã‚’åˆ©ç”¨ã—ã¾ã™ ãƒãƒ³ã‚ºã‚ªãƒ³æ‰‹é † ã‚¢ã‚«ã‚¦ãƒ³ãƒˆå‘¨ã‚Šã®è¨å®š ãƒ«ãƒ¼ãƒˆã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã®å‰Šé™¤ â€»ãƒ«ãƒ¼ãƒˆã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã¯ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ä½œæˆã•ã‚Œã¦ãŠã‚Šã¾ã›ã‚“ã€‚ã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã‚’ä½œæˆæ¸ˆã¿ã®æ–¹ã‚’å¯¾è±¡ã¨ã—ã¾ã™ã€‚ ãƒ«ãƒ¼ãƒˆã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¯å…¨ã¦ã®ã‚µãƒ¼ãƒ“ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒå‡ºæ¥ã¦ã—ã¾ã†
nilab 2020/05/10
ãƒ«ãƒ¼ãƒˆã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã®å‰Šé™¤ã€ãƒ«ãƒ¼ãƒˆã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®MFAæœ‰åŠ¹åŒ–ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒãƒªã‚·ãƒ¼ã®å¤‰æ›´ã€IAMã‚°ãƒ«ãƒ¼ãƒ—ã®ä½œæˆã€IAMãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ä½œæˆã€MFAè¨å®šã€ãƒã‚®ãƒ³ã‚°è¨å®šã€CloudTrailã®æœ‰åŠ¹åŒ–ã€GuardDutyã®æœ‰åŠ¹åŒ–

aws

security
ãƒªãƒ³ã‚¯
Oracle Blogs
nilab 2019/06/07
ã€Œ>jdk-10\bin\keytool -cacerts -list | find "Certificate" /cã€ã€ŒBy default the cacerts keystore password is changeit.ã€

java

security
ãƒªãƒ³ã‚¯
è¨¼æ˜Žæ›¸ãƒ•ã‚¡ã‚¤ãƒ«ã®å ´æ‰€ã®å¤‰æ›´ (Sun Java System Application Server 9.1 ç®¡ç†ã‚¬ã‚¤ãƒ‰)
nilab 2019/06/07
ã€Œé–‹ç™ºç”¨ã¨ã—ã¦æä¾›ã•ã‚Œã¦ã„ã‚‹ã‚ãƒ¼ã‚¹ãƒˆã‚¢ãƒ•ã‚¡ã‚¤ãƒ«ã¨ãƒˆãƒ©ã‚¹ãƒˆã‚¹ãƒˆã‚¢ãƒ•ã‚¡ã‚¤ãƒ«ã¯ã€domain-dir/config ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«æ ¼ç´ã•ã‚Œã¦ã„ã¾ã™ã€ã€Œ-Dcom.sun.appserv.nss.db=${com.sun.aas.instanceRoot}/NSS-database-directoryã€

java

security
ãƒªãƒ³ã‚¯
keytool ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ãƒ¼ã‚’ä½¿ã£ã¦è¨¼æ˜Žæ›¸ã‚’ç”Ÿæˆã™ã‚‹ (Sun Java System Application Server 9.1 ç®¡ç†ã‚¬ã‚¤ãƒ‰)
nilab 2019/06/07
ã€Œã‚ãƒ¼ã‚¹ãƒˆã‚¢ã¾ãŸã¯éžå…¬é–‹éµã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆä»¥å¤–ã®å€¤ã«å¤‰æ›´ã—ãŸå ´åˆã«ã¯ã€å‰è¿°ã®ã‚³ãƒžãƒ³ãƒ‰ã® changeit ã‚’ãã®æ–°ã—ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ç½®ãæ›ãˆã¦ãã ã•ã„ã€

java

security
ãƒªãƒ³ã‚¯
JDK åŒæ¢±ã®èªè¨¼å±€è¨¼æ˜Žæ›¸ç®¡ç†ãƒ•ã‚¡ã‚¤ãƒ«ã€Œcacertsã€ã‚’è¦‹ã¦ã¿ã‚‹ - Corredor
Java ãƒ—ãƒã‚°ãƒ©ãƒ ã‹ã‚‰ã¨ã‚ã‚‹ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®èªè¨¼ãŒä¸Šæ‰‹ãè¡Œã‹ãªã‹ã£ãŸã®ã§èª¿ã¹ãŸã€‚ JDK ã«ã¯ cacerts ã¨ã„ã†ãƒ•ã‚¡ã‚¤ãƒ«ãŒå«ã¾ã‚Œã¦ã„ã¦ã€Java ãƒ—ãƒã‚°ãƒ©ãƒ ãŒå‹•ä½œã™ã‚‹æ™‚ã«å‚ç…§ã™ã‚‹ã€Œãƒ«ãƒ¼ãƒˆèªè¨¼å±€ã€ã®è¨¼æ˜Žæ›¸ãŒç®¡ç†ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã ã£ãŸã€‚ ãƒ–ãƒ©ã‚¦ã‚¶ãªã‚“ã‹ãŒæŒã£ã¦ã„ã‚‹èªè¨¼å±€æƒ…å ±ã¨ã¯ã¾ãŸé•ã†ã‚ˆã†ãªã®ã§ã€ã©ã‚“ãªèªè¨¼å±€ãŒç™»éŒ²ã•ã‚Œã¦ã„ã‚‹ã‹ç¢ºèªã—ã¦ã¿ã‚‹ã€‚ cacerts ãƒ•ã‚¡ã‚¤ãƒ«ã®å ´æ‰€ ä¸èº«ã‚’è¦‹ã‚‹ èªè¨¼å±€ã‚’çŸ¥ã‚‹ cacerts ãƒ•ã‚¡ã‚¤ãƒ«ã®å ´æ‰€ cacerts ãƒ•ã‚¡ã‚¤ãƒ«ã¯ JAVA_HOME é…ä¸‹ã€./lib/security/ ã«æ ¼ç´ã•ã‚Œã¦ã„ã‚‹ã€‚ MacOS ã§ $ brew cask install java ã¨å©ã„ã¦ã€OpenJDK 11.0.2 ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸå ´åˆã®ãƒ•ãƒ«ãƒ‘ã‚¹ã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã£ãŸã€‚ /Library/Java/JavaVirtualMachines/openjdk-11.0.2.
nilab 2019/06/07
ã€Œcacerts ãƒ•ã‚¡ã‚¤ãƒ«ã¯ JAVA_HOME é…ä¸‹ã€./lib/security/ ã«æ ¼ç´ã•ã‚Œã¦ã„ã‚‹ã€ã€Œã‚ãƒ¼ã‚¹ãƒˆã‚¢ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ changeit ã«ãªã£ã¦ã„ã‚‹ã€

java

security
ãƒªãƒ³ã‚¯
ä¾¿åˆ©ã§å±é™ºãªnpm install
nilab 2019/05/12
flatmap-stream, event-stream ã®è©±ã€‚ã€Œä¿¡ç”¨ãŒç©ã¿é‡ãã‚‰ã‚ŒãŸãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã§ã‚ã£ã¦ã‚‚ä¿¡ç”¨ã§ããªã„ã€ã€Œnpmãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ä¾å˜é–¢ä¿‚ã™ã¹ã¦ã‚’ç²¾æŸ»ã—ã¦ã‹ã‚‰ä½¿ç”¨ã™ã‚‹ã®ã¯ç¾å®Ÿçš„ã§ã¯ãªã„ã€

node.js

security
ãƒªãƒ³ã‚¯
Optionsbleed - HTTP OPTIONS method can leak Apache's server memory | The Fuzzing Project
If you're using the HTTP protocol in everday Internet use you are usually only using two of its methods: GET and POST. However HTTP has a number of other methods, so I wondered what you can do with them and if there are any vulnerabilities. One HTTP method is called OPTIONS. It simply allows asking a server which other HTTP methods it supports. The server answers with the "Allow" header and gives
nilab 2017/09/21
Optionsbleed - HTTP OPTIONS method can leak Apache's server memory | The Fuzzing Project

security

apache
ãƒªãƒ³ã‚¯
SIOS Tech Lab - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãŸã‚ã«ãªã‚‹æŠ€è¡“ãƒˆãƒ”ãƒƒã‚¯ã‚¹
2025-12-17Azureä¸Šã«ã‚»ãƒ«ãƒ•ãƒžãƒãƒ¼ã‚¸ãƒ‰ãªElasticæ¤œè¨¼ç’°å¢ƒã‚’æ§‹ç¯‰ï¼è©³ç´°ãªæ‰‹é †æ›¸ã‚’å…¬é–‹
nilab 2017/09/21
ã€Œ2.2.34ä»¥å‰ã¨2.4.27ä»¥å‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã€.htaccessã§Limitãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒä½¿ãˆã‚‹å ´åˆã€ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰æ”»æ’ƒè€…ãŒãƒ—ãƒã‚»ã‚¹ãƒ¡ãƒ¢ãƒªã‚„ãƒ‡ãƒ¼ã‚¿ã‚’èªã¿å–ã‚‹ã“ã¨ãŒã§ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚(*)ã‚µãƒ¼ãƒãŒbusyã®æ™‚ã«ç™ºç”Ÿã—ã¾ã™ã€

security

apache
ãƒªãƒ³ã‚¯
åƒãå¥³æ€§å‘ã‘ãƒãƒƒãƒˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒŸãƒŠãƒ¼ã€€ã€ŽKASPERSKY After 7 Seminarã€ é–‹å‚¬æ—¥ç¨‹æ¡ˆå†… Survey
nilab 2016/04/04
ï¾œï¾—ï¾€( Â´âˆ€ï½€) ã€ŒãŠä»•äº‹å¸°ã‚Šã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨å¥³ååŠ›Upã—ã¾ã›ã‚“ã‹ï¼Ÿã€ åƒãå¥³æ€§å‘ã‘ãƒãƒƒãƒˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒŸãƒŠãƒ¼ã€€ã€ŽKASPERSKY After 7 Seminarã€ é–‹å‚¬æ—¥ç¨‹æ¡ˆå†… Survey

study_session

security
ãƒªãƒ³ã‚¯
è¶…çµ¶æŠ€å·§CSRF / Shibuya.XSS techtalk #7
CSRF, HTML Form Protocol Attack, Cross-protocol scripting attackã«ã¤ã„ã¦
nilab 2016/03/29
ã€ŒCSRF, HTML Form Protocol Attack, Cross-protocol scripting attackã«ã¤ã„ã¦ã€

security
ãƒªãƒ³ã‚¯
æœ¬æ—¥ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒ©ãƒ [å›½æ°‘ã‚’å®ˆã‚‹æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚µã‚¤ãƒˆ] - ãƒ‡ã‚¸ã‚¿ãƒ«åˆå¿ƒè€…ãƒ»é«˜é½¢ã®ç«‹å ´ã‹ã‚‰è€ƒãˆã‚‹ã€Žæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã€ è€ãƒ†ã‚¯ç ”ç©¶ä¼š äº‹å‹™å±€é•· è¿‘è—¤ã€€å‰‡å
ï¼’æœˆï¼‘æ—¥ï½žï¼“æœˆï¼‘ï¼˜æ—¥ã¯ã€Œã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœˆé–“ã€ã§ã™ã€‚ æ™®åŠå•“ç™ºæ´»å‹•ã¸ã”å”åŠ›ãã ã•ã„ã€‚ ä¸å¯©ãªãƒ¡ãƒ¼ãƒ«ã«ã‚ˆã‚‹æƒ…å ±æ¼ãˆã„è¢«å®³ã‚„å€‹äººæƒ…å ±ã®æµå‡ºãªã©ã€ç”Ÿæ´»ã«å½±éŸ¿ã‚’åŠã¼ã™ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹å•é¡ŒãŒå¤šæ•°å ±ã˜ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ èª°ã‚‚ãŒå®‰å¿ƒã—ã¦ITã®æ©æµã‚’äº«å—ã™ã‚‹ãŸã‚ã«ã¯ã€å›½æ°‘ä¸€äººã²ã¨ã‚ŠãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ã®é–¢å¿ƒã‚’é«˜ã‚ã€ã“ã‚Œã‚‰ã®å•é¡Œã«å¯¾å¿œã—ã¦ã„ãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã“ã®ãŸã‚ã€æ”¿åºœã§ã¯ã€ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹æ™®åŠå•“ç™ºå¼·åŒ–ã®ãŸã‚ã€ï¼’æœˆï¼‘æ—¥ã‹ã‚‰ï¼“æœˆï¼‘ï¼˜æ—¥ã¾ã§ã‚’ã€Œã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœˆé–“ã€ã¨ã—ã€å›½æ°‘ã®çš†æ§˜ã«ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ã®é–¢å¿ƒã‚’é«˜ã‚ã€ç†è§£ã‚’æ·±ã‚ã¦ã„ãŸã ããŸã‚ã€ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹æ§˜ã€…ãªå–çµ„ã‚’é›†ä¸çš„ã«è¡Œã£ã¦ã„ãã¾ã™ã€‚
nilab 2016/03/10
ã‚¹ãƒžãƒ›æ™‚ä»£ã®ã€Œãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€ã®ã‚ã‚Šæ–¹ã‚’å†è€ƒã—ã‚ˆã†[ã¿ã‚“ãªã§ã—ã£ã‹ã‚Šã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£]

security
ãƒªãƒ³ã‚¯
Facebookã®æ¤œç´¢æ©Ÿèƒ½ã§æºå¸¯ç•ªå·ãŒè¡¨ç¤ºã•ã‚Œã¦ã—ã¾ã†å•é¡Œã¨å¯¾å‡¦æ³•ã¾ã¨ã‚ - ã„ã¾ãƒˆãƒ”
éžå…¬é–‹ã«ã—ã¦ã„ã¦ã‚‚facebookã®æ¤œç´¢ã§è‡ªåˆ†ã®æºå¸¯ç•ªå·ãŒä»–äººã«çŸ¥ã‚‰ã‚Œã¦ã—ã¾ã†å¯èƒ½æ€§ãŒã‚ã‚‹ï¼Ÿ ã¨ã„ã†ã“ã¨ãŒã‚ã‹ã£ãŸã®ã§ã€æ³¨æ„å–šèµ·ã®æ„å‘³ã‚’è¾¼ã‚ã¦è¨˜äº‹ã«ã¾ã¨ã‚ã¾ã—ãŸã€‚ ã“ã¨ã®ç™ºç«¯ã¯çŸ¥ã‚‰ãªã„ç•ªå·ã‹ã‚‰ã‚·ãƒ§ãƒ¼ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒæ¥ãŸã“ã¨ã€‚ åƒ•ãŒTVã«å‡ºãŸã¨ã„ã†ã“ã¨ã‚’æ›¸ã„ã¦ã„ã‚‹ã®ã§è¿·æƒ‘ãƒ¡ãƒ¼ãƒ«ã§ã¯ç„¡ã„ã£ã½ã„ã—ã€ãŸã¶ã‚“çŸ¥äººã®èª°ã‹ã ã‚ã†ã‘ã©ç›¸æ‰‹ãŒã‚ã‹ã‚‰ãªã„ã€‚ ãã®ã¾ã¾ç›¸æ‰‹ã« ã€Œã‚ãªãŸã¯èª°ã§ã™ã‹ï¼Ÿã€ã¨èžãã®ã‚‚å¤±ç¤¼ãªã®ã§ ã¾ãšã¯ç•ªå·ã‚’ã‚°ãƒ¼ã‚°ãƒ«æ¤œç´¢ã—ã¾ã—ãŸã€‚ å½“ç„¶ã€å‡ºã¾ã›ã‚“ã‚ˆãã€‚ ä»Šã©ããƒãƒƒãƒˆã«æºå¸¯ç•ªå·ã‚’å…¬é–‹ã—ã¦ã„ã‚‹äººãªã‚“ã¦ã„ãªã„ã®ã§ã€ã™ã¹ã¦ã®é›»è©±ç•ªå·ã‚’æ©Ÿæ¢°çš„ã«ç¶²ç¾…ã—ãŸãƒšãƒ¼ã‚¸ã ã‘ãŒä¸¦ã³ã¾ã™ã€‚ ãã—ã¦æœ¬é¡Œã¯ã“ã“ã‹ã‚‰ã€‚ ä½•æ°—ãªã—ã«ãã®æ™‚é–‹ã„ã¦ã„ãŸfacebookã®æ¤œç´¢ãƒœãƒƒã‚¯ã‚¹ã«æºå¸¯ç•ªå·ã‚’å…¥ã‚ŒãŸã‚‰ã€ è¡¨ç¤ºã•ã‚ŒãŸã®ã§ã™ã€‚ ç•ªå·ã®æŒã¡ä¸»ãŒã€‚ ç¢ºã‹ã«ã€å°‘ã—é ã„çŸ¥ã‚Šåˆã„ã§ã—ãŸã€‚ èª°ãªã®ã‹ã‚ã‹ã£ã¦ã‚ˆã‹ã£ãŸã€‚ ã‘ã‚Œã©å‹é”ã‚‚ã€å…±é€šã®å‹é”ã‚‚
nilab 2016/03/09
ã€Œè¨å®šâ†’ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼â†’ç§ã‚’æ¤œç´¢ã§ãã‚‹äººã€ã€Œã€Œé›»è©±ç•ªå·ã‚’ä½¿ã£ã¦ç§ã‚’æ¤œç´¢ã§ãã‚‹äººã€ã¨ã„ã†é …ç›®ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã€Œå…¨å“¡ã€ã«ãªã£ã¦ã„ã‚‹ã€ã€æ³¨æ„ã€‘facebookã®æ¤œç´¢æ©Ÿèƒ½ã§æºå¸¯ç•ªå·ãŒè¡¨ç¤ºã•ã‚Œã¦ã—ã¾ã†å•é¡Œã¨å¯¾å‡¦æ³•ã¾ã¨ã‚

facebook

security
ãƒªãƒ³ã‚¯
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æŽ¨æ¸¬ã«ã‚ˆã‚‹ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹äº‹æ¡ˆã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2016å¹´1æœˆ22æ—¥ã€ã‚¢ã‚¤ãƒ‰ãƒ«ã‚„è·å ´ã®åŒåƒšã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¸ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’è¡Œã£ã¦ã„ãŸã¨ã—ã¦å²é˜œçœŒã®ç”·æ€§ãŒé€®æ•ã•ã‚Œã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ å²é˜œçœŒå…¬å¼ç™ºè¡¨ 2016å¹´3æœˆ2æ—¥ [PDF] æœ¬çœŒè·å“¡ã®å‡¦åˆ†ã«ã¤ã„ã¦ ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ æ—¥æ™‚ å‡ºæ¥äº‹ 2013å¹´8æœˆ22æ—¥é ƒ å²é˜œçœŒç·åˆåŒ»ç™‚ã‚»ãƒ³ã‚¿ãƒ¼ã§è·å“¡ã®å€‹äººæƒ…å ±ã‚’ä¸æ£ã«å–å¾—ã€‚ 2014å¹´4æœˆ1æ—¥ã€œ9æœˆ12æ—¥ çœŒåºã®PCã‚’é€šã˜ã¦ç”·æ€§ãŒè·å“¡ã®å€‹äººæƒ…å ±ã‚’å–å¾—ã€‚ 2014å¹´9æœˆã€œ2015å¹´6æœˆ28æ—¥ å–å¾—ã—ãŸæƒ…å ±ã‚’ã‚‚ã¨ã«è·å“¡ã®SNSã¸ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã€‚ 2015å¹´11æœˆ ç¥žå¥ˆå·çœŒè¦ãŒç¦ç”°æœ±åã•ã‚“ã‚„ç’ƒä¹ƒã•ã‚“ã¸ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã®è¢«å®³ã«ã¤ã„ã¦é€£çµ¡ã€‚*1 2015å¹´12æœˆ ç¥žå¥ˆå·çœŒè¦ãŒç”·æ€§ã®é–¢ä¿‚å…ˆã¸å®¶å®…æœç´¢ ã€œ2015å¹´æœ« ç”·æ€§ãŒå²é˜œçœŒç·å‹™äº‹å‹™ã‚»ãƒ³ã‚¿ãƒ¼ã«æ‰€å±žã€‚ 2016å¹´1æœˆ22æ—¥ ç¥žå¥ˆå·çœŒè¦ãŒå²é˜œçœŒè·å“¡ç”·æ€§ã‚’ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ç¦æ¢æ³•é•åç‰ã§é€®æ•ã€‚ 2016å¹´2æœˆ5æ—¥ ç¥ž
nilab 2016/01/26
ã€Œãƒã‚°ã‚¤ãƒ³ã™ã‚‹IDã¨ã—ã¦ã€Œakaneã€ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ã€Œakane1116ã€(åå‰ï¼‹èª•ç”Ÿæœˆæ—¥)ã€ã€Œè¤‡æ•°ã®ã‚µãƒ¼ãƒ“ã‚¹ã§ä½¿ã„ã¾ã‚ã—ã€ã€Œä½•å›žã‹é€šçŸ¥ãŒæ¥ã¦ã„ãŸãŒæ”¾ç½®ã—ã¦ãŠã‚Šã€ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’å—ã‘ãŸã“ã¨ã«ã¤ã„ã¦å…¨ãæ°—ä»˜ã„ã¦ã„ãªã‹ã£ãŸã€

password

security
ãƒªãƒ³ã‚¯
ã€æ³¨æ„ã€‘iOS9.2.1ã¯ã€3å¹´è¶Šã—ã®è„†å¼±æ€§ã«å¯¾å‡¦ã—ãŸé‡è¦ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆï¼ - iPhone Mania
ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã°ã‹ã‚Šã®iOS9.2.1ã¯ã€ãƒ›ãƒ†ãƒ«ã‚„ã‚«ãƒ•ã‚§ã®Wi-Fiã¸ã®æŽ¥ç¶šæ™‚ã«é€šä¿¡å†…å®¹ã‚’ç›—ã¿å–ã‚‰ã‚Œã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹è„†å¼±æ€§ã«å¯¾å¿œã—ãŸã€é‡è¦ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§ã‚ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šã¾ã—ãŸã€‚ iOS9.2.1ã¯åœ°å‘³ã ãŒé‡è¦ãªã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆï¼ iPhoneã‚„iPadå‘ã‘ã®æœ€æ–°OSã¨ã—ã¦ã€iOS9.2.1ãŒ20æ—¥ã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚ ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆå†…å®¹ãŒã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã¨ã€MDMã‚µãƒ¼ãƒã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹å ´åˆã«Appã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚’å®Œäº†ã§ããªã„ã“ã¨ãŒã‚ã‚‹å•é¡Œãªã©ã®ãƒã‚°ä¿®æ£ã€ã¨ã€æ–°æ©Ÿèƒ½ãŒç››ã‚Šè¾¼ã¾ã‚ŒãŸã‚ã‘ã§ã‚‚ãªãåœ°å‘³ãªã‚‚ã®ãªã®ã§ã€ã‚ã¾ã‚Šèˆˆå‘³ã‚’æŒã£ã¦ã„ãªã„æ–¹ã‚‚å¤šã„ã“ã¨ã¨æ€ã„ã¾ã™ã€‚ ã—ã‹ã—ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥Skycureã®ç ”ç©¶è€…ã€Adi Sharabaniæ°ã¨Yair Amitæ°ã«ã‚ˆã‚‹ã¨ã€iOS9.2.1ã¯ã€Wi-FiæŽ¥ç¶šæ™‚ã«é€šä¿¡å†…å®¹ã‚’ç›—ã¿å–ã‚‰ã‚Œã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹è„†å¼±æ€§ã¸ã®å¯¾å¿œãŒå«ã¾ã‚ŒãŸã€é‡è¦
nilab 2016/01/21
ã€Œãƒ›ãƒ†ãƒ«ã‚„ã‚«ãƒ•ã‚§ã®Wi-Fiã¸ã®æŽ¥ç¶šæ™‚ã«é€šä¿¡å†…å®¹ã‚’ç›—ã¿å–ã‚‰ã‚Œã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹è„†å¼±æ€§ã«å¯¾å¿œã—ãŸã€é‡è¦ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã€

security
ãƒªãƒ³ã‚¯
2016å¹´1æœˆ Oracle Java SE ã®ã‚¯ãƒªãƒ†ã‚£ã‚«ãƒ«ãƒ‘ãƒƒãƒã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·
å„ä½ JPCERT-AT-2016-0005 JPCERT/CC 2016-01-20 <<< JPCERT/CC Alert 2016-01-20 >>> 2016å¹´1æœˆ Oracle Java SE ã®ã‚¯ãƒªãƒ†ã‚£ã‚«ãƒ«ãƒ‘ãƒƒãƒã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã«é–¢ã™ã‚‹æ³¨æ„å–šèµ· https://www.jpcert.or.jp/at/2016/at160005.html I. æ¦‚è¦ Oracle ç¤¾ã® Java SE JDK ãŠã‚ˆã³ JRE ã«ã¯ã€è¤‡æ•°ã®è„†å¼±æ€§ãŒã‚ã‚Šã¾ã™ã€‚é éš”ã®ç¬¬ä¸‰è€…ã¯ã€ã“ã‚Œã‚‰ã®è„†å¼±æ€§ã‚’ä½¿ç”¨ã™ã‚‹ã“ã¨ã§ã€Java ã‚’ä¸æ£çµ‚äº†ã•ã›ãŸã‚Šã€ ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã•ã›ãŸã‚Šã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚è„†å¼±æ€§ã®è©³ç´°ã«ã¤ã„ã¦ã¯ã€ Oracle ç¤¾ã®æƒ…å ±ã‚’ç¢ºèªã—ã¦ãã ã•ã„ã€‚ Oracle ç¤¾ãŒæä¾›ã™ã‚‹ä¿®æ£æ¸ˆã¿ã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã¸ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã™ã‚‹ã“ã¨ã‚’ãŠå‹§ ã‚ã—ã¾ã™ã€‚ Oracle Critical Patch Update Ad
nilab 2016/01/20
Java SE JDK/JRE 8 Update 71 ä»¥é™ã«æ›´æ–°ã™ã‚‹ã“ã¨ã€‚ãªãŠ Java 6 ã¨ 7 ã«ã‚‚è„†å¼±æ€§ã‚ã‚‹ã‘ã©ã‚µãƒãƒ¼ãƒˆã¯ç„¡ã„ã®ã§æ»äº¡ã€‚ / 2016å¹´1æœˆ Oracle Java SE ã®ã‚¯ãƒªãƒ†ã‚£ã‚«ãƒ«ãƒ‘ãƒƒãƒã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·

java

security
ãƒªãƒ³ã‚¯
ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ãƒ‹ãƒ¥ãƒ¼ã‚¹ã€‘ã‚¹ãƒžãƒ›é€£æºã‚¢ãƒ—ãƒªã®é–‹ç™ºè€…æƒ…å ±ãŒãƒãƒƒãƒˆçµŒç”±ã§é–²è¦§å¯èƒ½ã« - ãƒ‡ãƒ³ã‚½ãƒ¼ï¼ˆ1ãƒšãƒ¼ã‚¸ç›® / å…¨1ãƒšãƒ¼ã‚¸ï¼‰ï¼šSecurity NEXT
nilab 2016/01/19
ã€Œã‚«ãƒ¼ãƒŠãƒ“ãƒ¦ãƒ¼ã‚¶ãƒ¼å‘ã‘ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã€ŒNaviConã€ã®é€£æºã‚¢ãƒ—ãƒªé–‹ç™ºè€…å‘ã‘ã‚µã‚¤ãƒˆã«ç™»éŒ²ã—ã¦ã„ãŸé–¢ä¿‚è€…371äººåˆ†ã®å€‹äººæƒ…å ±ã€ã‚¹ãƒžãƒ›é€£æºã‚¢ãƒ—ãƒªã®é–‹ç™ºè€…æƒ…å ±ãŒãƒãƒƒãƒˆçµŒç”±ã§é–²è¦§å¯èƒ½ã« - ãƒ‡ãƒ³ã‚½ãƒ¼

security
ãƒªãƒ³ã‚¯
iOSå®Ÿæ©Ÿã®SSLé€šä¿¡ã‚’ãƒ—ãƒã‚ã‚·ã«ã‚ˆã£ã¦å‚å—ã—ãŸã‚Šæ”¹ã–ã‚“ã™ã‚‹æ–¹æ³• - Qiita
ã¯ã˜ã‚ã« ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªé–‹ç™ºã§APIã‚’ä»‹ã—Web/APIã‚µãƒ¼ãƒãƒ¼ã¨ã‚„ã‚Šã¨ã‚Šã‚’ã™ã‚‹å ´åˆã€ã€Œhttpsã‚’ä½¿ã£ã¦ã„ã‚Œã°é€šä¿¡ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ãƒãƒ¬ãªã„ã€ãªã‚“ã¦ã“ã¨ã¯ãªãã€Webã‚¢ãƒ—ãƒªã§ãƒ„ãƒ¼ãƒ«ã‚’ä½¿ã£ã¦ã§ãã‚‹ã®ã¨åŒã˜ã‚ˆã†ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã¯é€šä¿¡å†…å®¹ã®ç¢ºèªã‚„æ”¹ç«„ãªã©ãŒã§ãã¾ã™ã€‚ ãã®ãŸã‚ã€ãã®ã“ã¨ã‚’å‰æã«ã‚¢ãƒ—ãƒªã‚„ã‚µãƒ¼ãƒãƒ¼APIã®è¨è¨ˆã¨å®Ÿè£…ã‚’è¡Œã‚ãªã„å ´åˆã€ã‚¢ãƒ—ãƒªåˆ©ç”¨è€…ã«ã‚ˆã‚‹ã‚²ãƒ¼ãƒ ã‚¹ã‚³ã‚¢çµæžœé€ä¿¡ã®æ”¹ç«„ã‚„ã€ã‚½ãƒ¼ã‚·ãƒ£ãƒ«ã‚²ãƒ¼ãƒ ã«ãŠã‘ã‚‹ãƒ¬ã‚¤ãƒ‰ãƒœã‚¹ãªã©ã¸ã®ãƒ€ãƒ¡ãƒ¼ã‚¸æ“ä½œã€ECã‚µã‚¤ãƒˆã‚¢ãƒ—ãƒªã§ã®è³¼å…¥æ“ä½œãªã©ã‚‚å¯èƒ½ã«ãªã£ã¦ã—ã¾ã„ã¾ã™ã€‚ ã¾ãŸã€æœ€è¿‘è‡ªåˆ†ã¯ã€Œç„¡æ–™ã§éŸ³æ¥½è´ãæ”¾é¡Œ!! - ãƒãƒƒãƒˆãƒ©ã‚¸ã‚ªã€ã¨ã„ã†ã‚¢ãƒ—ãƒªã‚’ãƒªãƒªãƒ¼ã‚¹ã—ãŸã®ã§ã™ãŒã€ã“ã®ã‚¢ãƒ—ãƒªã«å°Žå…¥ã™ã‚‹ã‚¹ã‚¿ãƒ†ã‚£ãƒƒã‚¯ãƒªãƒ³ã‚¯ãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒä¸æ˜Žãªå¤–éƒ¨ã‚µãƒ¼ãƒãƒ¼ã¸é€šä¿¡ã—ã¦ã„ãªã„ã‹ã€SSLã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹ã¤ã‚‚ã‚ŠãŒãã†ã§ãªã„é€šä¿¡ã‚’ã—ã¦ã—ã¾ã£ã¦ã„ãªã„ã‹ã®ãƒã‚§ãƒƒã‚¯ã‚’ã™ã‚‹ãŸã‚ã€è‡ªåˆ†ã¯mitmproxyã¨ã„ã†
nilab 2016/01/06
iPhone - iOSå®Ÿæ©Ÿã®SSLé€šä¿¡ã‚’ãƒ—ãƒã‚ã‚·ã«ã‚ˆã£ã¦å‚å—ã—ãŸã‚Šæ”¹ã–ã‚“ã™ã‚‹æ–¹æ³• - Qiita

security

ios

ssl
ãƒªãƒ³ã‚¯
ã‚µãƒ³ãƒªã‚ªã‹ã‚‰æƒ…å ±æµå‡ºã‹ã€ãƒãƒãƒ¼ã‚ãƒ†ã‚£ã‚µã‚¤ãƒˆã®DBè¦‹ã¤ã‹ã‚‹
ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ°åã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã©330ä¸‡ä»¶ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ã‚’è¨˜éŒ²ã—ãŸã€Œsanriotown.comã€ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãŒã‚ªãƒ³ãƒ©ã‚¤ãƒ³ä¸Šã§ç™ºè¦‹ã•ã‚ŒãŸã¨ã„ã†ã€‚ ç±³ITæƒ…å ±ã‚µã‚¤ãƒˆã®CSOã¯12æœˆ19æ—¥ä»˜ã§ã€ã‚µãƒ³ãƒªã‚ªãŒé‹å–¶ã™ã‚‹ãƒãƒãƒ¼ã‚ãƒ†ã‚£ã®ãƒ•ã‚¡ãƒ³ã‚µã‚¤ãƒˆã€Œsanriotown.comã€ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãŒã‚ªãƒ³ãƒ©ã‚¤ãƒ³ä¸Šã§è¦‹ã¤ã‹ã£ãŸã¨ä¼ãˆãŸã€‚ CSOã«ã‚ˆã‚‹ã¨ã€ã“ã®å•é¡Œã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã®ã‚¯ãƒªã‚¹ãƒ»ãƒ“ãƒƒã‚±ãƒªãƒ¼æ°ãŒç±³å›½æ™‚é–“ã®19æ—¥ã«ç™ºè¦‹ã—ãŸã€‚ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ä¸Šã§è¦‹ã¤ã‹ã£ãŸåŒã‚µã‚¤ãƒˆã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«ã¯330ä¸‡ä»¶ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ãŒè¨˜éŒ²ã•ã‚Œã¦ã„ã¦ã€ç™»éŒ²ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ°åã€èª•ç”Ÿæ—¥ã€æ€§åˆ¥ã€å›½ã€é›»åãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ï¼ˆSHA-1ã§ãƒãƒƒã‚·ãƒ¥åŒ–ã•ã‚Œã¦ã„ã‚‹ãŒã‚½ãƒ«ãƒˆåŒ–ã¯ã•ã‚Œã¦ã„ãªã„ï¼‰ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¿˜ã‚ŒãŸå ´åˆã®ç§˜å¯†ã®è³ªå•ã¨ç”ãˆãªã©ãŒéœ²å‘ˆã•ã‚Œã¦ã„ãŸã€‚ SHA-1ã¯å±é™ºæ€§ãŒæŒ‡æ‘˜ã•ã‚Œã€ä½¿ç”¨åœæ¢ãŒå‹§å‘Šã•ã‚Œã¦ã„ã‚‹ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã€‚ãƒ“ãƒƒã‚±ãƒªãƒ¼æ°ã¯Macå‘ã‘ã‚½ãƒ•
nilab 2015/12/22
sanriotown.comã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‹ã‚‰330ä¸‡ä»¶ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒæµå‡ºã€‚æ°åã€èª•ç”Ÿæ—¥ã€æ€§åˆ¥ã€å›½ã€é›»åãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰(SHA-1ã§ãƒãƒƒã‚·ãƒ¥åŒ–ã€‚ã‚½ãƒ«ãƒˆåŒ–ç„¡ã—)ã€ç§˜å¯†ã®è³ªå•ã¨ç”ãˆãªã©ãŒéœ²å‘ˆã€‚åŽŸå› ã¯MongoDBã®è¨å®šãƒŸã‚¹ã€‚

security
ãƒªãƒ³ã‚¯
æ”»æ’ƒè€…ãŒã‚ˆãä½¿ã†Windowsã‚³ãƒžãƒ³ãƒ‰ã®ãƒ©ãƒ³ã‚ãƒ³ã‚°ç™ºè¡¨ï½žãƒžãƒ«ã‚¦ã‚§ã‚¢æ„ŸæŸ“è¢«å®³ã®é˜²æ¢ã«ã€ä½¿ã‚ãªã„Windowsã‚³ãƒžãƒ³ãƒ‰ã®åˆ¶é™ã‚’ã€€
nilab 2015/12/03
æ”»æ’ƒè€…ãŒã‚ˆãä½¿ã†Windowsã‚³ãƒžãƒ³ãƒ‰ã®ãƒ©ãƒ³ã‚ãƒ³ã‚°ç™ºè¡¨ï½žãƒžãƒ«ã‚¦ã‚§ã‚¢æ„ŸæŸ“è¢«å®³ã®é˜²æ¢ã«ã€ä½¿ã‚ãªã„Windowsã‚³ãƒžãƒ³ãƒ‰ã®åˆ¶é™ã‚’ -INTERNET Watch

security
ãƒªãƒ³ã‚¯
[SECURITY] [DSA 3403-1] libcommons-collections3-java security update
nilab 2015/11/25
Debian ã® Apache Commons Collections è„†å¼±æ€§å¯¾å¿œã€‚ / [SECURITY] [DSA 3403-1] libcommons-collections3-java security update

java

lib

security
ãƒªãƒ³ã‚¯
1 2 3 4 5 6 7 8 9 10 æ¬¡ã®ãƒšãƒ¼ã‚¸