[B! hash] ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ockeghem id:ockeghem

hashã«é–¢ã™ã‚‹ockeghemã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (12)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

git ã‚³ãƒŸãƒƒãƒˆ ID ã®è¡çªç¢ºçŽ‡ - 2011-12-28 - ã¯ã¦ãªã‚‹ã›ã ã„ã‚ã‚Š
git ã¯ã‚³ãƒŸãƒƒãƒˆã‚’ SHA1 ã§ç®¡ç†ã—ã¦ã„ã‚‹ã“ã¨ã¯ã€ã“ã‚“ãªå ´æœ«ã®æ—¥è¨˜ã‚’å¥½ãã“ã®ã‚“ã§ã”è¦§ã«ãªã‚‰ã‚Œã¦ã„ã‚‹çš†ã•ã‚“ãªã‚‰ã‚ˆãã”å˜ã˜ã‹ã¨æ€ã„ã¾ã™ãŒã€æœ€è¿‘ãƒ¡ã‚¤ãƒ‰ã‚¬ãƒãƒ£ãƒ”ãƒ³å…ˆç”Ÿã®ã€Œé©å‘½ã®æ—¥ã€…ï¼ git ã®sha1ã¯ä½•æ¡ã‚ã‚Œã°å®‰å…¨ã‹ã€ãªã©ã€Linux ã«ãŠã„ã¦ Git ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã® 7 æ¡è¡¨ç¤ºã®ã‚³ãƒŸãƒƒãƒˆ ID ãŒè¢«ã‚Šã¾ãã£ã¦ã„ã‚‹ã¨è©±é¡Œã®ã‚ˆã†ã§ã™ã®ã§ã€ã“ã‚Œã«ã¤ã„ã¦è€ƒãˆã¦ã¿ã¾ã—ã‚‡ã†ã€‚ ã•ã¦ã€ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã«ã¤ã„ã¦ã¯æ˜”ã¾ã¨ã‚ãŸã“ã¨ãŒã‚ã‚Šã¾ã™ãŒã€ã‚ˆã†ã™ã‚‹ã« Radium Software Development ã•ã‚“ã®è¨˜äº‹ãŒç´ æ™´ã‚‰ã—ã„ã¨ã„ã†è©±ã§ã™ã€‚ãã‚Œã«ã‚ˆã‚‹ã¨ã€Bob Jenkins æ›°ãã€Œ2^n å€‹ã®ã‚ãƒ¼ã«é–¢ã—ã¦ï¼Œè¡çªã®å¯èƒ½æ€§ã‚’ 1/(2^m) ç¨‹åº¦ã«æŠ‘ãˆãŸã„ãªã‚‰ã°ï¼Œ 2(n+m) ãƒ“ãƒƒãƒˆã®ãƒãƒƒã‚·ãƒ¥å€¤ã‚’ç”¨ã„ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€ã ãã†ãªã€‚ Linuxã®ã‚³ãƒŸãƒƒãƒˆæ•°ã¯ 220k=~262144=2^18 ãªã®ã§ã€è¡çªç¢ºçŽ‡
ockeghem 2011/12/28
èˆˆå‘³æ·±ã„>ã€Ž2^n å€‹ã®ã‚ãƒ¼ã«é–¢ã—ã¦ï¼Œè¡çªã®å¯èƒ½æ€§ã‚’ 1/(2^m) ç¨‹åº¦ã«æŠ‘ãˆãŸã„ãªã‚‰ã°ï¼Œ 2(n+m) ãƒ“ãƒƒãƒˆã®ãƒãƒƒã‚·ãƒ¥å€¤ã‚’ç”¨ã„ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€ã€Žçµè«–: git ã¯ã¾ã¬ã‘ã€

hash
ãƒªãƒ³ã‚¯
å¿˜ã‚ŒãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å•ã„åˆã‚ã›ã‚‰ã‚Œã‚‹ã‚·ã‚¹ãƒ†ãƒ ãªã‚“ã¦ä½œã£ã¡ã‚ƒã„ã‘ãªã„ | åˆä»£ç·¨é›†é•·ãƒ–ãƒã‚°â€•å®‰ç”°è‹±ä¹…
ä»Šæ—¥ã¯ã€ã¡ã‚‡ã£ã¨ã—ãŸã‚·ã‚¹ãƒ†ãƒ æ§‹ç¯‰ã‚’ç™ºæ³¨ã™ã‚‹ã¨ãã«é‡è¦ãªãƒã‚¤ãƒ³ãƒˆã¨ãªã‚‹ã€é¡§å®¢æƒ…å ±ç®¡ç†ã®è©±é¡Œã‚’ã€‚ãƒ†ãƒ¼ãƒžã¯ã€ŒãŠå®¢ã•ã‚“ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ã©ã†ä¿å˜ã™ã‚‹ã‹ã€ã§ã™ã€‚ å¾¡ç¤¾ã«ã¯ã€ãŸã¨ãˆã°ECã‚µã‚¤ãƒˆã®ä¼šå“¡ã‚„é¡§å®¢å‘ã‘SNSãªã©ã®ã€ãŠå®¢ã•ã‚“ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã‚’ã—ã¦ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒã‚°ã‚¤ãƒ³ã™ã‚‹ã‚ˆã†ãªã‚·ã‚¹ãƒ†ãƒ ãŒã‚ã‚Šã¾ã™ã‹ï¼Ÿ ã‚ã‚‹ã¨ã—ãŸã‚‰ã€ãã®ã‚·ã‚¹ãƒ†ãƒ å†…ã§ã€ãŠå®¢ã•ã‚“ãã‚Œãžã‚Œã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ã©ã‚“ãªé¢¨ã«ç®¡ç†ã•ã‚Œã¦ã„ã‚‹ã‹æŠŠæ¡ã—ã¦ã„ã¾ã™ã‹ï¼Ÿ ã¾ãŸã¯ã€ã‚·ã‚¹ãƒ†ãƒ æ§‹ç¯‰ã®ç™ºæ³¨æ™‚ã«ã€ã©ã‚“ãªé¢¨ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ç®¡ç†ã™ã‚‹ã‚ˆã†ãªä»•æ§˜ã«ã—ã¾ã—ãŸã‹ï¼Ÿ ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚„å€‹äººæƒ…å ±ã®ç®¡ç†ã«ã¯æ³¨æ„ã—ã¦ã„ã¦ã‚‚ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¿å˜æ–¹æ³•ã¯ã€ã‚ã¾ã‚Šæ°—ã«ã—ã¦ã„ãªã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ã—ã‹ã—ã€ãã‚Œã§ã¯ã¾ãšã„ã®ã§ã™ã€‚ã‚·ã‚¹ãƒ†ãƒ æ§‹ç¯‰æ™‚ã«æ£ã—ã„ä»•æ§˜ã§ç™ºæ³¨ã—ãªã„ã¨ã€ä½•ã‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡ŒãŒç™ºç”Ÿã—ãŸã¨ãã«ã€æ€ã„ãŒã‘ã¬å¤§ããªç¯„å›²ã«å½±éŸ¿ã™ã‚‹å•é¡Œã«ãªã£ã¦ã—ã¾ã„ã‹ããªã„ã®ã§ã™ã€‚ çµè«–ã‹ã‚‰ã„ã†ã¨ã€ãŠ
ockeghem 2011/10/02
ã“ã†ã„ã†å…¥é–€çš„ãªèªã¿ç‰©ã§æ™®é€šã«ã‚½ãƒ«ãƒˆãŒèª¬æ˜Žã•ã‚Œã‚‹ã“ã¨ãŒæ„Ÿæ…¨æ·±ã„ã€‚ã§ã‚‚ã€å¯é€†ã®æš—å·åŒ–ã«ã‚‚ãƒ¡ãƒªãƒƒãƒˆã¯ã‚ã‚‹ã‚ˆã€‚ç¶šãã¯YAPCã‚ã‚‹ã„ã¯ #wasbook ã§

password

hash
ãƒªãƒ³ã‚¯
ã‚°ãƒ©ãƒœ(GPU)ã®åŠ›ã§MD5ã‚’è§£èª - ã†ã•ãŽæ–‡å¦æ—¥è¨˜
CPUã§ã¯ãªãã€ã‚°ãƒ©ãƒ•ã‚£ãƒƒã‚¯ãƒœãƒ¼ãƒ‰ã«æè¼‰ã•ã‚Œã¦ã„ã‚‹GPUã®åŠ›ã‚’ä½¿ã£ã¦ã€MD5ã‚„SHA-1ãªã©ã®ãƒãƒƒã‚·ãƒ¥å€¤ã‚’è§£èªã™ã‚‹ã¨ã„ã†ã®ã‚’è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ ãã£ã‹ã‘ã¯PCã®åˆ·æ–°ã€‚ã‚²ãƒ¼ãƒ ãªã©ã¯ã—ãªã„ã®ã§ã€DUAL DVI-IãŒä»˜ã„ã¦ã„ã‚Œã°ä½•ã§ã‚‚ã„ã„ã‚„ã¨æ€ã£ã¦ã€ŒVAPOR-X HD 5770 1G GDDR5 PCI-E DUAL DVI-I/HDMI/DP OC Versionã€ã¨ã„ã†ã‚«ãƒ¼ãƒ‰ã‚’13,980å††ã§è³¼å…¥ã€‚ ã“ã®ATI HD5770ãŒã€GPUã‚’ä½¿ã£ã¦ãƒãƒƒã‚·ãƒ¥å€¤ã‚’ãƒ–ãƒ«ãƒ¼ãƒˆãƒ•ã‚©ãƒ¼ã‚¹ã§è§£èªã™ã‚‹ã€ŒIGHASHGPUã€ã«å¯¾å¿œã—ã¦ã„ãŸã®ã§ã€ä»¥å‰ã‹ã‚‰è©¦ã—ã¦ã¿ãŸã‹ã£ãŸã®ã§ä½¿ã£ã¦ã¿ã¾ã—ãŸã€‚ IGHASHGPUã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã¯ã“ã®è¾ºã‚Šã‹ã‚‰ Ivan Golubev's blog - Cryptography, code optimizations, GPUs & CPUs and other http://www.g
ockeghem 2011/06/29
ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¿å˜ã«é–¢ã—ã¦ã¯ã€MD5ãŒå±é™ºã§SHA-256ãªã‚‰å®‰å…¨ã¨ã„ã†ã‚ã‘ã§ã¯ãªã„ã€‚è¨ˆç®—é€Ÿåº¦ãŒå•é¡Œãªã®ã§ã€ç·å½“ãŸã‚Šã«ã¯ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ã‚ã‚‹ã„ã¯è‰¯ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ã¤ã‘ã•ã›ã‚‹

hash

password
ãƒªãƒ³ã‚¯
CakePHP Authã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã§ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ»ãƒãƒƒã‚·ãƒ¥ã‚’ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ã™ã‚‹ã«ã¯ï¼Ÿ - ScriptWorks.JP
ã€Ž ä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ ã€ã§è§£èª¬ã•ã‚Œã¦ã„ãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ»ãƒãƒƒã‚·ãƒ¥ã®ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ã‚’CakePHPã§å®Ÿè£…ã—ã¦ã¿ã¾ã—ãŸã€‚ ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°å‡¦ç†ã®è‚ã¨ãªã‚‹éƒ¨åˆ†ã¯æ›¸ç±ã«æ›¸ã„ã¦ã‚ã‚‹å†…å®¹ã®ã¾ã¾ã§ã™ã®ã§(æ±—)ã€è¨å®šæ–¹æ³•ã‚’ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ ã€ æ³¨æ„äº‹é … ã€‘ ä»Šå›žå®Ÿè£…ã—ãŸStretchAuthã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã®å°Žå…¥ã«ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰( ãƒãƒƒã‚·ãƒ¥ )ã®å†ç™»éŒ²ãŒå¿…è¦ã§ã™ã€‚ ã¾ãŸã€é‹ç”¨ä¸ã®ã‚·ã‚¹ãƒ†ãƒ ã¸ã®å°Žå…¥ã‚„å°Žå…¥å¾Œã®è¨å®šå¤‰æ›´ã«ã‚ˆã‚Šã€ãƒãƒƒã‚·ãƒ¥æ–¹å¼ã‚„ã‚¹ãƒˆãƒ¬ãƒƒãƒå›žæ•°ãŒç•°ãªã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒDBã¸ç™»éŒ²ã•ã‚Œã¾ã™ã®ã§ã€å¿…ãšDBåŠã³ã‚·ã‚¹ãƒ†ãƒ ã®ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ã‚’è¡Œã£ã¦ã‹ã‚‰ãŠè©¦ã—ãã ã•ã„ã€‚ â€» è«¸èˆ¬ã®äº‹æƒ…ã«ã‚ˆã‚Šã€CakePHP-1.2.10 ã§ã—ã‹å‹•ä½œç¢ºèªã—ã¦ã„ã¾ã›ã‚“ã®ã§ 1.3 ã‚„ 2.0 ã§å‹•ã„ãŸæ–¹ã¯ @scriptwork ã¾ã§æ•™ãˆã¦é ‚ã‘ã‚‹ã¨åŠ©ã‹ã‚Šã¾ã™ ãã‚Œã§ã¯ã¾ãš bootstrap.php ã§ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãƒ¼ã‚’
ockeghem 2011/05/27
ã€Œã€Žä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ã€ã§è§£èª¬ã•ã‚Œã¦ã„ãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ»ãƒãƒƒã‚·ãƒ¥ã®ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°ã‚’CakePHPã§å®Ÿè£…ã—ã¦ã¿ã¾ã—ãŸã€<ç´ æ™´ã‚‰ã—ã„ #wasbook

cakephp

hash

security

wasbook
ãƒªãƒ³ã‚¯
åŒã˜ãƒ•ã‚¡ã‚¤ãƒ«ãªã‚“ã ã‹ã‚‰ã€ã¿ã‚“ãªã§ä»²è‰¯ãã‚·ã‚§ã‚¢ã—ã¾ã—ã‚‡ã†ï¼(Dropboxè«‡) - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯æ¥½ã—ã„ã‹ãï¼Ÿ Part 1
ã“ã®ã¨ã“ã‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é¢ã§ã®å•é¡Œã«ã¤ã„ã¦ä½•ã‹ã¨å©ã‹ã‚Œã¦ã„ã‚‹ Dropboxã€‚å…ˆæœˆã¯åˆ©ç”¨è¦ç´„ã®æ”¹è¨‚ã§æ‰¹åˆ¤ã•ã‚Œã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®å®Ÿè£…ä¸Šã®å•é¡Œã‚’æŒ‡æ‘˜ã•ã‚Œã¦æ”¹ä¿®ã—ã€å…ˆé€±ã«ãªã£ã¦ã¤ã„ã« FTCã«æ˜¯æ£ã®ç”³ã—ç«‹ã¦ã¾ã§ã•ã‚Œã¦ã—ã¾ã£ãŸã€‚ ä¸€ç•ªã®å•é¡Œã¯ã“ã®å‰ã®ã‚¨ãƒ³ãƒˆãƒªã«ã‚‚æ›¸ã„ãŸã‚ˆã†ã«ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ‡ãƒ¼ã‚¿ã‚’æš—å·åŒ–ã™ã‚‹éµã‚’ãƒ¦ãƒ¼ã‚¶ãƒ¼ã§ã¯ãªã DropboxãŒç®¡ç†ã—ã¦ã„ã‚‹ç‚¹ã ã€‚ã‚‚ã¡ã‚ã‚“ Dropboxã‚‚ãã®ç‚¹ã¯ååˆ†èªè˜ã—ã¦ã„ã¦ã€åŽ³é‡ãªã‚¢ã‚¯ã‚»ã‚¹ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«ã‚’è¡Œã£ã¦ãŠã‚Šå¾“æ¥å“¡ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ‡ãƒ¼ã‚¿ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ã‚ˆã†ã«ã—ã¦ã„ã‚‹ã¨ä¸»å¼µã—ã¦ã„ã‚‹ã€‚ã—ã‹ã—ã™ã§ã«è¨€ã‚ã‚Œã¦ã„ã‚‹ã‚ˆã†ã«ã€ä»–ã®é¡žä¼¼ã®ã‚µãƒ¼ãƒ“ã‚¹ã§ã¯éµã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã ã‘ãŒæŒã£ã¦ã„ã¦ã€ã‚µãƒ¼ãƒ“ã‚¹æä¾›è€…å´ã¯ä¿æŒã—ãªã„ã‚‚ã®ã‚‚å¤šã„ã€‚ãªãœ Dropboxã«ãã‚ŒãŒã§ããªã„ã®ã‹? æ‰¹åˆ¤ã•ã‚Œã‚‹å¤§ããªãƒã‚¤ãƒ³ãƒˆã§ã‚ã‚‹ã€‚ ãã‚Œã¨ä¸Šè¨˜ã®å•é¡Œã»ã©ã§ã¯ãªã„ãŒã€ã‚‚ã†ä¸€ã¤åˆ¥ã®å•é¡Œã‚‚æŒ‡æ‘˜ã•ã‚Œã¦ã„ã‚‹ã€‚ã©ã†ã‚„ã‚‰ Dropboxã¯
ockeghem 2011/05/19
ã€Žå®‰å…¨ã¨ã¯è¨€ãˆãªã„ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’ä½¿ã£ã¦ã„ã‚‹å ´åˆã«ã¯å•é¡ŒãŒèµ·ã“ã‚Šã†ã‚‹ã€<å®‰å…¨ãªãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã§ã‚‚è¡çªã®å¯èƒ½æ€§ã¯ã‚ã‚Šã¾ã™ã

hash

security
ãƒªãƒ³ã‚¯
Barracuda Networks Victims of an SQL Injection Attack
Introduction On April 11th 2011, at nine in the evening, Barracuda Networks posted a grim entry on their blog. Their network had been hacked. Thousands of their confidential customer and employee records were stolen. In an ironic twist of fate, the company that advocates security through itâ€™s own Web Application Firewall were victims to the most common and oldest type of attack against web servers
ockeghem 2011/05/15
ãƒãƒƒã‚·ãƒ¥ä¿å˜ï¼ˆã‚½ãƒ«ãƒˆãªã—ï¼‰ã•ã‚ŒãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®è§£èªã®å®Ÿä¾‹ã¨ã—ã¦èˆˆå‘³æ·±ã„via @kitagawa_takuji

security

password

hash
ãƒªãƒ³ã‚¯
gawker mediaã®ã«ã®ã¾ãˆã«ãªã‚‰ãªã„ã‚ˆã†ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä¿å˜ã™ã‚‹æ–¹æ³• - karasuyamatenguã®æ—¥è¨˜
gawker mediaãŒãƒãƒƒã‚¯ã•ã‚Œã¦æƒ¨æ†ºãŸã‚‹ã“ã¨ã«ãªã£ã¦ã„ã‚‹ã€‚ãƒ¦ãƒ¼ã‚¶ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒæ•°ä¸‡(ï¼Ÿ)ã¨æ¼ã‚Œã¦ã€åŒã˜ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½¿ã„å›žã—ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ã®åˆ¥ã‚µãƒ¼ãƒ“ã‚¹(ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã‚„ãƒ¡ãƒ¼ãƒ«)ã¾ã§è¦—ã‹ã‚Œã‚‹ãƒãƒ¡ã«ã€‚ã©ã†ã—ã¦ã“ã†ãªã£ãŸã‹ã«ã¯è‰²ã€…ã‚ã‚‹ã‚“ã ã‚ã†ã©ã€ä¸€ç•ªãƒžã‚ºã‹ã£ãŸã®ã¯å¼±ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æš—å·åŒ–ã®ä»•æ–¹ã ã€‚ ãã“ã§ã€Codaã•ã‚“ã‹ã‚‰ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºè€…ã¸ã®ã‚¢ãƒ‰ãƒã‚¤ã‚¹ï¼š bcryptã‚’ä½¿ãˆã€bcryptã‚’ä½¿ãˆã€bcryptã‚’ä½¿ãˆã€bcryptã‚’ä½¿ãˆã€ã€ã€ http://codahale.com/how-to-safely-store-a-password/ MD5, SHA1, SHA256, SHA512, SHA-3ãªã©ã¯ä½¿ã‚ãªã„ã“ã‚Œã‚‰ã¯ãƒ‡ãƒ¼ã‚¿ã®æ•´åˆæ€§ãƒã‚§ãƒƒã‚¯ç”¨ã®é«˜é€Ÿãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã€‚é«˜é€Ÿã¯ãƒ‡ãƒ¼ã‚¿ãƒã‚§ãƒƒã‚¯ã«ã¯ã„ã„ãŒã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’éš ã™ã«ã¯ã‚ˆããªã„ã€‚ ä»Šæ™‚ã®pcã¯æ¯Žç§’330ãƒ¡ã‚¬ã®md5ã‚’è¨ˆç®—ã§ãã‚‹ã€‚6æ–‡å—
ockeghem 2010/12/15
è¨€ã£ã¦ã„ã‚‹ã“ã¨ã¯å…¨éƒ¨æ£ã—ã„ã‘ã©ã€bcryptè‡ªä½“ãŒãƒãƒƒã‚·ãƒ¥ï¼ˆ?ï¼‰ã¨ã—ã¦å¦¥å½“ã‹ã©ã†ã‹ã¯åˆ†ã‹ã‚‰ãªã„ã€‚ã“ã“ã«æ›¸ã„ã¦ã‚ã‚‹ã“ã¨ã¯ã€sha-2+Salting+Stretchingã§å®Ÿç¾ã§ãã‚‹

password

hash

security
ãƒªãƒ³ã‚¯
ç¬¬40å›žã€€MOPSï¼šå®‰å…¨æ€§ã®é«˜ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒãƒƒã‚·ãƒ¥ä½œæˆãƒ„ãƒ¼ãƒ« - phpass | gihyo.jp
ç¬¬32å›žã€€PHP ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœˆé–“ï¼ˆMonth of PHP Sercurityï¼‰ã§ã€ŒPHP ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æœˆé–“ã€ï¼ˆâ MOPS - Month of PHP Securityï¼‰ã«ã¤ã„ã¦ç°¡å˜ã«ç´¹ä»‹ã—ã¾ã—ãŸã€‚ ä»Šå›žã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å®‰å…¨ã«ä¿å˜ã™ã‚‹ãƒ„ãƒ¼ãƒ«ã®ç´¹ä»‹ã§ã™ã€‚ä»Šã¾ã§æ•°å›žã«æ¸¡ã£ã¦MOPSã®æˆæžœã®ä¸€éƒ¨ã‚’ç´¹ä»‹ã—ã¦ãã¾ã—ãŸãŒã€ä»Šå›žã§æœ€å¾Œã§ã™ã€‚ MOPS Submission 10: How to manage a PHP applicationâ€™s users and passwords http://www.php-security.org/2010/05/26/mops-submission-10-how-to-manage-a-php-applications-users-and-passwords/index.html ã“ã®è«–æ–‡ã¯1ä½ã‚’å–å¾—ã—ãŸè«–æ–‡ã§ã™ã€‚Drupal 7ã§ã“ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒåˆ©ç”¨ã•ã‚Œã¦ã„
ockeghem 2010/11/04
å¤§å¤‰æœ‰ç”¨ãªå†…å®¹ã€‚saltã¨stretchingã‚’ç´¹ä»‹ã™ã‚‹æ•°å°‘ãªã„è¨˜äº‹ã€‚ãŸã ã€è¨³è€…ã®è£œè¶³ã¯æ™‚ã€…ä½™è¨ˆã€‚ä¾‹ãˆã°ã€SHA-1ã‚„SHA-256ã§ã‚‚ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã¯ä½œæˆå¯èƒ½

security

password

hash

salt
ãƒªãƒ³ã‚¯
guro_chanã®æ—¥è¨˜ Â» ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã‚’ç”¨ã„ã¦md5ãƒãƒƒã‚·ãƒ¥å€¤ã‹ã‚‰å¹³æ–‡ã‚’å¾—ã‚‹
éšåˆ†ä»¥å‰ã‹ã‚‰ãšã£ã¨æ°—ã«ãªã£ã¦ã„ãŸãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã«æ¼¸ãå–ã‚Šçµ„ã‚“ã ã€‚ ç·å½“ãŸã‚Šæ”»æ’ƒã§ãƒãƒƒã‚·ãƒ¥å€¤ã‹ã‚‰å¹³æ–‡ã‚’å¾—ã‚‹å ´åˆã€(1)å¹³æ–‡ã‚’æŽ¨æ¸¬ã—ã€(2)ãã®ãƒãƒƒã‚·ãƒ¥å€¤ã‚’è¨ˆç®—ã—ã€(3)è§£æžã—ãŸã„ãƒãƒƒã‚·ãƒ¥å€¤ã¨æ¯”è¼ƒã™ã‚‹ã€ã¨ã„ã†ãƒ—ãƒã‚»ã‚¹ã‚’çµŒã‚‹ã€‚å¹³æ–‡ã®é•·ã•ã‚„æ§‹æˆã™ã‚‹æ–‡å—ã«ã‚ˆã£ã¦ã¯å¤§å¤‰ãªæ™‚é–“ã‚’å¿…è¦ã¨ã™ã‚‹ã€‚ç¿»ã£ã¦ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã‚’ä½¿ã†æ–¹æ³•ã§ã¯ã€äºˆã‚è§£æžç”¨ã®ãƒ‡ãƒ¼ã‚¿ã‚’ç”¨æ„ã—ã¦è‡¨ã‚€ã€‚ãã®ãŸã‚ç·å½“ãŸã‚Šæ”»æ’ƒã§è¨€ã†ã¨ã“ã‚ã®(1)ã¨(2)ã®ãƒ—ãƒã‚»ã‚¹ãŒäº‹å®Ÿä¸Šã€å¿…è¦ãªããªã‚‹ã€‚(3)+Î±ã®å‡¦ç†ã§æ¸ˆã‚€ã‹ã‚‰è§£æžã«è¦ã™ã‚‹æ™‚é–“ãŒåŠ‡çš„ã«çŸããªã‚‹ã€ã¨ã„ã†ä»•çµ„ã¿ã§ã‚ã‚‹ã€‚å¿™ã—ã„ãƒ“ã‚¸ãƒã‚¹ãƒ‘ãƒ¼ã‚½ãƒ³ã«ãƒžãƒƒãƒã™ã‚‹ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã¨è¨€ãˆã‚‹ã€‚ ã—ã‹ã—ãªãŒã‚‰ã€è€ƒãˆå¾—ã‚‹ã‚ã‚‰ã‚†ã‚‹æ–‡å—åˆ—ã®çµ„ã¿åˆã‚ã›ã¨ãã®ãƒãƒƒã‚·ãƒ¥å€¤ã®ãƒ‡ãƒ¼ã‚¿ã¯ä¸€èˆ¬çš„ã«å¤¥ã—ã„æ•°ã«ãªã‚‹ã€‚ä¾‹ãˆã° 8 æ–‡å—ã®å°æ–‡å—ã‚¢ãƒ«ãƒ•ã‚¡ãƒ™ãƒƒãƒˆã®æ–‡å—åˆ—ã ã‘ã§è€ƒãˆã¦ã‚‚ã€çµ„ã¿åˆã‚ã›ã®æ•°ã¯ 26 ã® 8 ä¹—ã™ãªã‚ã¡ 208827064
ockeghem 2010/08/11
md5

rainbow

hash
ãƒªãƒ³ã‚¯
MD5ã‚’è§£æžã™ã‚‹Webã®ã‚µãƒ¼ãƒ“ã‚¹ - ã†ã•ãŽæ–‡å¦æ—¥è¨˜
MD5ãŒè„†å¼±ã¨è¨€ã‚ã‚Œã¦ã„ã¦ã€ã‚‚ã†ä½¿ã£ã¡ã‚ƒãƒ€ãƒ¡ã¨çƒ™å°ã‚’æŠ¼ã•ã‚Œã¦ã„ã¦ã‚‚ã€ã•ã™ãŒã«ãƒãƒƒã‚·ãƒ¥å€¤ã‹ã‚‰é€†ç®—ã—ã¦è§£æžã™ã‚‹ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒå˜åœ¨ã™ã‚‹ã‚ã‘ã‚‚ãªãã€è§£æžã«ã¯ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã‚’ä½¿ã£ã¦ã„ã¾ã™ã€‚ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã¨ã„ã†ã®ã¯ã€å¹³æ–‡ã¨ãã®ãƒãƒƒã‚·ãƒ¥å€¤ã‚’DBã®ãƒ†ãƒ¼ãƒ–ãƒ«ã«æ ¼ç´ã—ã¦ãŠã„ã¦ã€ãƒãƒƒã‚·ãƒ¥å€¤ã§æ¤œç´¢ã™ã‚‹ã¨ã„ã†ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã§ã™ã€‚ï¼ˆã“ã®å ´åˆã¯ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã˜ã‚ƒãªãã¦ã€ãŸã ã®å¹³æ–‡ã¨ãƒãƒƒã‚·ãƒ¥å€¤ã®ãƒ†ãƒ¼ãƒ–ãƒ«ã‹ã‚‚ã€‚ å‚ç…§ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ« - Wikipediaï¼‰ ãŸã¨ãˆã°ã€ã€Œpasswordã€ã¨ã„ã†å¹³æ–‡ã‚’MD5ã§ãƒãƒƒã‚·ãƒ¥åŒ–ã™ã‚‹ã¨ã€Œ5f4dcc3b5aa765d61d8327deb882cf99ã€ã¨ãªã‚Šã¾ã™ã€‚ã“ã†ã„ã£ãŸå¯¾å¿œã‚’è¡¨ã«ãŸãã•ã‚“å…¥ã‚Œã¦ãŠãã“ã¨ã§ã€MD5ã®ãƒãƒƒã‚·ãƒ¥å€¤ã§æ¤œç´¢ã™ã‚‹ã¨å…ƒã®å¹³æ–‡ãŒè¦‹ã¤ã‹ã‚‹ã¨ã„ã†ã‚ã‘ã§ã™ã€‚ MD5ã®ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ãŒWebä¸Šã‹ã‚‰ä½¿ãˆã‚‹ã‚µã‚¤ãƒˆã¯çµæ§‹ã‚ã‚‹ã‚ˆã†ã§ã€ã„ãã¤ã‹ã‚’ãƒ”ãƒƒã‚¯ã‚¢ãƒƒãƒ—ã€‚ã©ã®ã‚µã‚¤
ockeghem 2009/10/08
å…ˆç”Ÿã€ãã‚Œã¯ãƒ¬ã‚¤ãƒ³ãƒœãƒ¼ãƒ†ãƒ¼ãƒ–ãƒ«ã¨ã¯ã„ã„ã¾ã›ã‚“â€¦ / http://ja.wikipedia.org/wiki/%E3%83%AC%E3%82%A4%E3%83%B3%E3%83%9C%E3%83%BC%E3%83%86%E3%83%BC%E3%83%96%E3%83%AB ç‰å‚ç…§

security

md5

hash

salt

ã¾ãŸä¸Šé‡Žå®£ã‹
ãƒªãƒ³ã‚¯
[ThinkIT] ç¬¬10å›žï¼šãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆé–¢æ•°ã®å®Ÿè£… (1/2)
ockeghem 2009/04/03
2ãƒšãƒ¼ã‚¸ç›®ã€Ž@print($_REQUEST['textfield1']);ã€

xss

security

hash

å¤§åž£é–ç”·
ãƒªãƒ³ã‚¯
OpenSSH æƒ…å ± - [misc][æš—å·]ã€ŒåŽŸç†ã‹ã‚‰å¦ã¶ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒ»ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€€ç¬¬4å›žã€€ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã€ã®å•é¡Œç‚¹
åŽŸç†ã‹ã‚‰å¦ã¶ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒ»ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€€ç¬¬4å›žã€€ãƒãƒƒã‚·ãƒ¥é–¢æ•°ï¼šITproã®å•é¡Œç‚¹ã‚’æŒ™ã’ã¦ã„ãã¾ã™. ä¸€é€šã‚Šæ›¸ãã¾ã—ãŸ. ä½œæˆä¸ã®æ®µéšŽã§ã¯é–“é•ã£ã¦ã„ãŸéƒ¨åˆ†ãŒã‚ã£ãŸã®ã‚’ç¢ºèªã—ã¦ã„ã¾ã™ãŒ, ä¿®æ£ã—ãŸã¤ã‚‚ã‚Šã§ã™. ç§ã‚‚æš—å·å±‹ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã®ã§, æ–‡ç« ã®å†…å®¹ã®ä¿è¨¼ã¯è‡´ã—ã¾ã›ã‚“. ä¿®æ£ã®å¾¡æŒ‡æ‘˜ã¯æ“è¿Žã—ã¾ã™. å°Žå…¥éƒ¨ ãƒ‡ãƒ¼ã‚¿æ§‹é€ ã¨ã—ã¦ã®ãƒãƒƒã‚·ãƒ¥/ãƒãƒƒã‚·ãƒ¥ãƒ»ãƒ†ãƒ¼ãƒ–ãƒ«ã¨æš—å·æŠ€è¡“ã®ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã‚’æ··åŒã—ã¦èª¬æ˜Žã™ã‚‹ã®ã¯, èª¤è§£ã‚’ç”Ÿã‚€ãŠãã‚ŒãŒã‚ã‚Šã¾ã™. ä»®ã«æš—å·æŠ€è¡“ã®ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã®èª¬æ˜Žã®ä¸ã§ãƒ‡ãƒ¼ã‚¿æ§‹é€ ã¨ã—ã¦ã®ãƒãƒƒã‚·ãƒ¥ã«è§¦ã‚Œã‚‹å ´åˆã§ã‚‚, ç•°ãªã‚‹ã‚‚ã®ã¨èª¬æ˜Žã—ãŸã»ã†ãŒã‚ˆã„ã§ã—ã‚‡ã†. ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã®èª¬æ˜Žã¨ã—ã¦, ä¸€æ–¹å‘æ€§ã ã‘ãŒæŒ™ã’ã‚‰ã‚Œã¦ã„ã¾ã™ãŒè¡çªè€æ€§ã«ã¤ã„ã¦ã‚‚è§¦ã‚Œã¦ãŠãã¹ãã§ã™. å¾Œã®ã‚³ãƒ©ãƒ ã§è¡çªè€æ€§ã«ã¤ã„ã¦è§¦ã‚Œã‚‰ã‚Œã¦ã„ã¾ã™ãŒ, å†…å®¹ã¯ä¸æ£ç¢ºã§ã™. ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã®å®Ÿé¨“ ã“ã®éƒ¨åˆ†ã®å†…å®¹ã«å•é¡Œã¯ã‚ã‚Šã¾ã›ã‚“. ãŸã ã—, å…ˆã«è¡
ockeghem 2008/01/07
ç´ æ™´ã‚‰ã—ã„è§£èª¬ã¨ãƒ„ãƒƒã‚³ãƒŸâ€¦ã¨æ€ã£ãŸã‚‰ @haruyama ã•ã‚“ã ã£ãŸã€‚ç´å¾—

security

hash
ãƒªãƒ³ã‚¯
1