[B! security] odzã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

odz id:odz

securityã«é–¢ã™ã‚‹odzã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (53)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€Œä¸è¯ã‚¦ã‚§ãƒ–ã‚«ãƒ¡ãƒ©ã€ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦ - é»’æž—æªŽã®ãŠéƒ¨å±‹â™¬
é»’æž—æªŽã§ã™ã€‚ ä»Šæ—¥ã¯ã€IPã‚«ãƒ¡ãƒ©ã‚’ãƒãƒƒã‚ãƒ³ã‚°ã—ã¦ã„ã“ã†ã¨æ€ã„ã¾ã™ã€‚ â—†æœ€åˆã« å··ã§è©±é¡Œã®IPã‚«ãƒ¡ãƒ©ã€ŽVSTARCAM Mini WIFI IP Camera æŠ€è¡“åŸºæº–é©åˆèªå®šæ¸ˆã¿æœ‰ç·š/ç„¡ç·šLANå¯¾å¿œãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚«ãƒ¡ãƒ© C7823WIPã€ã‚’ãƒãƒƒã‚ãƒ³ã‚°ã—ã¦ã€ã©ã‚“ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã‹è€ƒãˆã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ hardshopper.hatena blog.com æœ€åˆã«ç–‘ã£ãŸã“ã¨ã¯ã‚¹ãƒ”ãƒ¼ã‚«ãƒ¼ã®ç ´æã«ã‚ˆã‚‹ã‚·ã‚¹ãƒ†ãƒ éŸ³å£°ã®ãƒœãƒ¤ãã ã£ãŸã®ã§ã€ã‚¦ã‚§ãƒ–ã‚«ãƒ¡ãƒ©ã§å†ç”Ÿã•ã‚Œã‚‹éŸ³å£°ãƒ‡ãƒ¼ã‚¿ã‚’æŠ½å‡ºã—ã¦ã¿ã¾ã—ãŸãŒã€è©²å½“ã—ãã†ãªéŸ³å£°ãƒ‡ãƒ¼ã‚¿ã¯ã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ ä¸å›½ã‚«ãƒ¡ãƒ©éŸ³å£° - Google ãƒ‰ãƒ©ã‚¤ãƒ– é‡‘æ›œæ—¥ã«ã“ã‚“ãªé¢ç™½ã„è©±ãŒé™ã£ã¦ããŸã®ã§ã€é€Ÿæ”»ãƒãƒã£ã¦è²·ã„ã¾ã—ãŸã€‚ åŒã˜ã‚·ã‚¹ãƒ†ãƒ ã‚’ä½¿ã£ã¦ã„ã‚‹ã‚«ãƒ¡ãƒ©ã‚’è³¼å…¥ã—ã¦ãƒãƒƒã‚ãƒ³ã‚°ã—ã¦ã„ãŸã®ã§ã€ãã“ã¾ã§æ™‚é–“æŽ›ã‘ãšã«ãƒãƒƒã‚ãƒ³ã‚°ã§ãã‚‹ã ã‚ã†ã¨ã„ã£ãŸã¨ã“ã‚ã§ã—ãŸã€‚ (å›³)IPã‚«ãƒ¡ãƒ© ç§
odz 2017/08/12
security

IoT
ãƒªãƒ³ã‚¯
æ›´æ–°ï¼šä¸–ç•Œä¸ã§æ„ŸæŸ“ãŒæ‹¡å¤§ä¸ã®ãƒ©ãƒ³ã‚µãƒ ã‚¦ã‚§ã‚¢ã«æ‚ªç”¨ã•ã‚Œã¦ã„ã‚‹Microsoftè£½å“ã®è„†å¼±æ€§å¯¾ç–ã«ã¤ã„ã¦ï¼šIPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
2017å¹´3æœˆ15æ—¥(æ—¥æœ¬æ™‚é–“)ã«Microsoftè£½å“ã«é–¢ã™ã‚‹è„†å¼±æ€§ã®ä¿®æ£ãƒ—ãƒã‚°ãƒ©ãƒ MS17-010ãŒå…¬è¡¨ã•ã‚Œã¾ã—ãŸã€‚ ã“ã®è„†å¼±æ€§ãŒãƒ©ãƒ³ã‚µãƒ ã‚¦ã‚§ã‚¢ã®æ„ŸæŸ“ã«æ‚ªç”¨ã•ã‚Œå›½å†…ã‚’å«ã‚ä¸–ç•Œå„å›½ã§è¢«å®³ãŒç¢ºèªã•ã‚Œã€è‹±å›½ã§ã¯åŒ»ç™‚æ©Ÿé–¢ã«ãŠã„ã¦æ¥å‹™ã«æ”¯éšœãŒå‡ºã‚‹ãªã©ã®æ·±åˆ»ãªå½±éŸ¿ãŒç™ºç”Ÿã—ã¦ã„ã¾ã™ã€‚ ãƒ©ãƒ³ã‚µãƒ ã‚¦ã‚§ã‚¢ã«æ„ŸæŸ“ã™ã‚‹ã¨ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒæš—å·åŒ–ã•ã‚Œã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãŒä½¿ç”¨ã§ããªã„è¢«å®³ãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ä»Šå›žè¦³æ¸¬ã•ã‚Œã¦ã„ã‚‹ãƒ©ãƒ³ã‚µãƒ ã‚¦ã‚§ã‚¢ã¯ Wanna Cryptor ã¨å‘¼ã°ã‚Œã‚‹ãƒžãƒ«ã‚¦ã‚§ã‚¢ (WannaCrypt, WannaCry, WannaCryptor, Wcry ç‰ã¨ã‚‚å‘¼ã°ã‚Œã‚‹) ã®äºœç¨®ã§ã‚ã‚‹ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ â€»ãƒ©ãƒ³ã‚µãƒ ã‚¦ã‚§ã‚¢ã¨ã¯ã€ã€ŒRansomï¼ˆèº«ä»£é‡‘ï¼‰ã€ã¨ã€ŒSoftwareï¼ˆã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ï¼‰ã€ã‚’çµ„ã¿åˆã‚ã›ãŸé€ èªžã§ã™ã€‚æ„ŸæŸ“ã—ãŸãƒ‘ã‚½ã‚³ãƒ³ã«ç‰¹å®šã®åˆ¶é™ã‚’ã‹ã‘ã€ãã®åˆ¶é™ã®è§£é™¤ã¨å¼•ãæ›ãˆã«é‡‘éŠã‚’è¦æ±‚
odz 2017/05/15
security
ãƒªãƒ³ã‚¯
ãŠçŸ¥ã‚‰ã›&ã‚¤ãƒ™ãƒ³ãƒˆ | Apache Struts2ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã—ãŸä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã¤ã„ã¦ | NICT-æƒ…å ±é€šä¿¡ç ”ç©¶æ©Ÿæ§‹
NICTãƒ¦ãƒ‹ãƒãƒ¼ã‚µãƒ«ã‚³ãƒŸãƒ¥ãƒ‹ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ç ”ç©¶æ‰€ã§ã¯ã€Apache Struts2ã®è„†å¼±æ€§ã®å…¬è¡¨ã‚’è¸ã¾ãˆã¦ã€3æœˆ13æ—¥ï¼ˆæœˆï¼‰ä»¥é™ã€NICTãŒä½œæˆã—ãŸéŸ³å£°å¯¾è©±ç ”ç©¶ç”¨ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢é–‹ç™ºã‚ãƒƒãƒˆï¼ˆMCMLéŸ³å£°ã‚¤ãƒ³ã‚¿ãƒ©ã‚¯ã‚·ãƒ§ãƒ³SDKï¼‰ã‚’å¤–éƒ¨ã®ç ”ç©¶è€…ç‰ã«æä¾›ã™ã‚‹å…¬é–‹ã‚µãƒ¼ãƒã®é‹ç”¨ã‚’åœæ¢ã—ã¦ã„ã¾ã™ã€‚ ãã®å¾Œã®å†…éƒ¨èª¿æŸ»ã«ã‚ˆã‚Šã€å½“è©²ã‚µãƒ¼ãƒã¯å¤–éƒ¨ã‹ã‚‰éžå¸¸ã«æ—©ã„æ®µéšŽã«ä¸æ£ã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’å—ã‘ã¦ãŠã‚Šã€ã‚µãƒ¼ãƒã®ä¸ã«ã€åˆ©ç”¨è€…ã®IDã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã€æš—å·åŒ–ã•ã‚ŒãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æƒ…å ±ãŒå«ã¾ã‚Œã¦ã„ã‚‹ã“ã¨ãŒã€5æœˆ1æ—¥ï¼ˆæœˆï¼‰ä»˜ã‘ã§åˆ¤æ˜Žã—ã¾ã—ãŸã€‚
odz 2017/05/09
security
ãƒªãƒ³ã‚¯
SIOS Tech. Lab - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãŸã‚ã«ãªã‚‹æŠ€è¡“ãƒˆãƒ”ãƒƒã‚¯ã‚¹
2024-10-23 çŸ¥ã£ã¦ãŠãã¨ã¡ã‚‡ã£ã¨ä¾¿åˆ©ï¼ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ãƒžãƒãƒ¼ã‚¸ãƒ£ã«ã¤ã„ã¦2 ï½žDebian ç³»ã‚·ã‚¹ãƒ†ãƒ ç·¨ï½ž
odz 2017/04/06
kernel

security
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã‘ã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ç®¡ç†ã«ã¤ã„ã¦
#LTé§†å‹• 29ã§ã®ç™ºè¡¨ã‚¹ãƒ©ã‚¤ãƒ‰
odz 2016/09/13
security
ãƒªãƒ³ã‚¯
ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã§å¿…è¦ã«ãªã‚‹ã‹ãªãã£ã¦æ€ã£ã¦åƒ•ãŒOAuth2ã¨OpenID Connectã‚’ãªã‚“ã¨ãªãåˆ†ã‹ã‚‹ã‚ˆã†ã«ãªã‚‹ã¾ã§ã®ç‰©èªž - Mitsuyuki.Shiiba
ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã®å‹‰å¼·ã¯æ°—ãŒå‘ãã¾ã¾ã«ãµã‚‰ãµã‚‰ã¨ã€‚æ¢…ç”°ã®åœ°ä¸‹è¡—ã‚’æ©ã„ã¦ã‚‹æ„Ÿã˜ã§ï¼ï¼ˆâ†ã¤ã¾ã‚Šè¿·ã£ã¦ã‚‹ï¼‰ å…ƒã€…ã¯ã€Pivotal Japanã•ã‚“ã®ã€ã“ã®ã€Œä»Šæ—¥ã‹ã‚‰å›ã‚‚ãƒ’ãƒ¼ãƒãƒ¼ã ï¼ã€çš„ãªã‚¿ã‚¤ãƒˆãƒ«ã«æƒ¹ã‹ã‚Œã¦Java(Spring Cloud)ã§ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ä½œã‚‹ãžãƒ¼ã£ã¦é€²ã‚ã¦ã¿ãŸã®ã§ã‚ã£ãŸã€‚ãŒã€æ—©é€Ÿãã®2ã®ã€Œèªå¯ã‚µãƒ¼ãƒãƒ¼ã‚’ç«‹ã¡ä¸Šã’ã‚ˆã†ï¼ã€ã§ã€Œã‚ãƒ¼ã€ã“ã‚ŒçŸ¥ã‚‰ãªã„ã€‚åˆ†ã‹ã‚“ãªã„ã€‚ã‚‚ã†å¯ãŸã„ã€‚ã€ã¨ãªã£ã¦ã—ã¾ã£ãŸã®ã ã£ãŸã€‚ ãã‚“ãªåƒ•ãŒã€Œãªã‚“ã¨ãªãåˆ†ã‹ã£ãŸï¼ã€ã«ãªã‚‹ã¾ã§ã®ç‰©èªžã€‚ãƒ»ãƒ»ãƒ»ã«ãªã‚‹ã¯ãšï¼ˆã“ã“ã‚’æ›¸ã„ã¦ã‚‹ä»Šã¯ã¾ã åˆ†ã‹ã£ã¦ãªã„ï¼‰ã€‚ ãŸã¶ã‚“1ãƒ¶æœˆã—ãŸã‚‰ä½•ã‚’èªã‚“ã ã‹å¿˜ã‚Œã¦ã‚‹ã¨æ€ã†ã®ã§è¨˜éŒ²ã—ã¨ãã“ã¨ã«ã—ãŸã€‚ github.com ã‚´ãƒ¼ãƒ« OAuth 2.0ã£ã¦èžã„ãŸã“ã¨ã‚ã‚‹ã‘ã©ã€ã‚ˆãçŸ¥ã‚‰ãªã„ã€‚ã“ã®è¾ºã€ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã®èªè¨¼ãƒ»èªå¯éƒ¨åˆ†ã§å¿…è¦ãã†ã ãªãƒ¼ã£ã¦æ€ã†ã®ã§ã€OpenID 2.0ã¨OpenID Connectã‚‚å«
odz 2016/07/13
ã‚ã¨ã§èªã‚€

OpenID

oauth

security
ãƒªãƒ³ã‚¯
ã€é€Ÿå ±ã€‘Linuxã‚«ãƒ¼ãƒãƒ«è„†å¼±æ€§ã€CVE-2016-0728ã€‘ - ã‚µãƒ¼ãƒãƒ¼ãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒ–ãƒã‚°
ã‚µãƒ¼ãƒãƒ¼ãƒ¯ãƒ¼ã‚¯ã‚¹ã€€ã‚µãƒãƒ¼ãƒˆçª“å£ã‚ˆã‚Šç·Šæ€¥ã§ãŠçŸ¥ã‚‰ã›ã„ãŸã—ã¾ã™ã€‚ é€Ÿå ± Linuxã‚«ãƒ¼ãƒãƒ«3.8ä»¥é™ã®ã‚·ã‚¹ãƒ†ãƒ ã«ãŠã„ã¦ ãƒãƒ¼ã‚«ãƒ«ãƒ¦ãƒ¼ã‚¶ãŒrootæ¨©é™ã‚’å–å¾—å¯èƒ½ã¨ãªã‚‹è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚Œã¾ã—ãŸã€‚ è„†å¼±æ€§ã®æ¦‚è¦ è„†å¼±æ€§ã®è©³ç´°ã¯ä»¥ä¸‹ã®è¨˜äº‹ã‚’ã”å‚ç…§ãã ã•ã„ ANALYSIS AND EXPLOITATION OF A LINUX KERNEL VULNERABILITY (CVE-2016-0728) ä¸»ã«ãƒ‰ãƒ©ã‚¤ãƒãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‡ãƒ¼ã‚¿ã€èªè¨¼ã‚ãƒ¼ã€æš—å·åŒ–ã‚ãƒ¼ã¨ã‚«ãƒ¼ãƒãƒ«å†…ã®ä»–ã®ãƒ‡ãƒ¼ã‚¿ã‚’ä¿æŒã¾ãŸã¯ã‚ãƒ£ãƒƒã‚·ãƒ¥ã™ã‚‹ ã‚ãƒ¼ãƒªãƒ³ã‚°ã¨ã„ã†æ©Ÿæ§‹ã«ãŠã„ã¦ã“ã®ã‚ãƒ¼ãƒªãƒ³ã‚°ãƒ‡ãƒ¼ã‚¿ã‚’ç½®ãæ›ãˆã‚‹ãƒ—ãƒã‚»ã‚¹ã«ãŠã„ã¦è„†å¼±æ€§ãŒå˜åœ¨ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Š ä»¥å‰ã«è§£æ”¾ã•ã‚ŒãŸã‚ãƒ¼ãƒªãƒ³ã‚°ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã«ã‚ˆã£ã¦ä½¿ç”¨ã•ã‚Œã‚‹ãƒ¡ãƒ¢ãƒªã‚’ä»‹ã—ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ç©ºé–“ã‹ã‚‰åˆ¥ã®ã‚«ãƒ¼ãƒãƒ«ã‚ªãƒ–ã‚¸ã‚§ã‚¯ãƒˆã‚’å‰²ã‚Šå½“ã¦ã‚³ãƒ¼ãƒ‰ã®å®Ÿè¡ŒãŒå¯èƒ½ã¨ãªã‚Šã¾ã™ã€‚ ã“ã®è„†å¼±æ€§ã®å›žé¿ç–ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ å¯èƒ½ãªé™ã‚Šæ—©æ€¥
odz 2016/01/20
linux

Security

kernel
ãƒªãƒ³ã‚¯
ã©ã•ã«ã£ã
2008å¹´8æœˆ4æ—¥(æœˆ) â– ç„¡é¡Œ _ å¤•æ–¹ã®é›·ã§åœé›»ã—ãŸã¿ãŸã„ã€‚å¸°ã£ã¦ããŸã‚‰ã„ã‚ã‚“ãªå®¶é›»ãŒãƒªã‚»ãƒƒãƒˆã•ã‚Œã¦ã‚ã¡ã“ã¡ç‚¹æ»…ã—ã¦ãŸã€‚ã¤ãƒ¼ã‹ã€ãªã‚“ã§é›»åãƒ¬ãƒ³ã‚¸ã«æ™‚è¨ˆãŒå¿…è¦ãªã‚“ã ã‚ã†ãªã€‚ã‚¿ã‚¤ãƒžãƒ¼ã˜ã‚ƒãªãã¦ã€‚ _ è‡ªå®…ã‚µãƒ¼ãƒã¯å¼•é€€ã—ãŸãƒŽãƒ¼ãƒˆ PC ã§ã€ãƒãƒƒãƒ†ãƒªãƒ¼ã¨ã„ã†åã® UPS ã¤ãã ã‹ã‚‰åœé›»ãŒé•·æ™‚é–“ã«ãªã‚‰ãªã‘ã‚Œã°æ»ã¬ã“ã¨ã¯ãªã„ã‘ã©ã€ãƒ«ãƒ¼ã‚¿ãŒè½ã¡ã‚‹ã®ã§å¤–éƒ¨ã¨ã®æŽ¥ç¶šãŒåˆ‡ã‚Œã‚‹ã®ã¯ã©ã†ã—ã‚ˆã†ã‚‚ãªã„ã€‚åœé›»ã§ãƒãƒƒãƒ†ãƒªãƒ¼é§†å‹•ã«ãªã£ã¦ã„ãŸã®ã¯ã€ã‚µãƒ¼ãƒã®ãƒã‚°ã«ã‚ˆã‚‹ã¨ 18:55 ã‹ã‚‰50ç§’ç¨‹åº¦ãªã‚“ã ã‘ã©ã€ãƒ«ãƒ¼ã‚¿ã®ãƒã‚°ã‚’è¦‹ã‚‹ã¨ãã‚Œä»¥å¤–ã«ã‚‚ 18:02 ã‹ã‚‰13åˆ†ã»ã©æŽ¥ç¶šãŒåˆ‡ã‚Œã¦ã„ãŸæ¨¡æ§˜ã€‚æŽ¥ç¶šã‚’å›žå¾©ã—ã‚ˆã†ã¨ä½•åº¦ã‚‚ãƒªãƒˆãƒ©ã‚¤ã™ã‚‹ãƒã‚°ãŒæ®‹ã£ã¦ã‚‹ã®ã§åœé›»ã˜ã‚ƒãªã‹ã£ãŸã®ã¯ç¢ºã‹ãªã‚“ã ã‘ã©ã€ã„ã£ãŸã„ä½•ãŒç†ç”±ã§åˆ‡ã‚Œã¦ãŸã‚“ã ã‚ã€‚å›žç·šå±‹ã•ã‚“ã®éšœå®³æƒ…å ±ã‚’è¦‹ã«è¡Œã£ã¦ã‚‚ãªã‚“ã«ã‚‚è¼‰ã£ã¦ãªã„ã—ã€‚ _ ãã‚“ãªã‚ã‘ã§ã€ã“ã®æ™‚é–“ã«ã†ã¡ã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã¤ãªãŒ
odz 2008/08/09
security
ãƒªãƒ³ã‚¯
ã€ŒMD5 ã®å®‰å…¨æ€§ã®é™ç•Œã«é–¢ã™ã‚‹èª¿æŸ»ç ”ç©¶ã€ã«é–¢ã™ã‚‹å ±å‘Šæ›¸ | ã‚¢ãƒ¼ã‚«ã‚¤ãƒ– | IPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
æœ¬ãƒšãƒ¼ã‚¸ã®æƒ…å ±ã¯2008å¹´7æœˆæ™‚ç‚¹ã®ã‚‚ã®ã§ã™ã€‚ 1991 å¹´ã«é–‹ç™ºã•ã‚Œã€ç¾åœ¨ã§ã‚‚åºƒãç”¨ã„ã‚‰ã‚Œã¦ã„ã‚‹MD5 (Message Digest 5)ã¨å‘¼ã°ã‚Œã‚‹ãƒãƒƒã‚·ãƒ¥é–¢æ•°ãŒã€è§£æžæŠ€è¡“ã®é€²æ©ã«ã‚ˆã‚Šå®‰å…¨æ€§ã®ä½Žä¸‹ãŒæŒ‡æ‘˜ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã‹ã‚‰ã€MD5 ã‚’åˆ©ç”¨ã™ã‚‹ä¸Šã§ã®é™ç•Œã‚’èª¿æŸ»ã—ã¾ã—ãŸã€‚ç‰¹ã«ã€é›»åãƒ¡ãƒ¼ãƒ«ã‚·ã‚¹ãƒ†ãƒ ã§ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç–ã¨ã—ã¦ç”¨ã„ã‚‰ã‚Œã¦ã„ã‚‹APOP (Authenticated Post Office Protocol) ã«ãŠã„ã¦ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰è§£èªã®å¯å¦ãƒ»å¼·åº¦ã‚’å®Ÿè¨¼ãƒ»ç¢ºèªã™ã‚‹ã¨ã¨ã‚‚ã«ã€å½“é¢ã®å¯¾å¿œç–æ¤œè¨Žã¨ãã®æœ‰åŠ¹æ€§ã®ç¢ºèªã‚’è¡Œã„ã¾ã—ãŸã€‚ æ¦‚è¦ æœ¬èª¿æŸ»ç ”ç©¶ã§ã¯ã€MD5 ã®ãƒãƒƒã‚·ãƒ¥å€¤ã‹ã‚‰å…ƒã®æƒ…å ±ã‚’ç‰¹å®šã™ã‚‹æ‰‹æ³•ã«é–¢ã™ã‚‹å†ç¢ºèªã€ä¸¦ã³ã«å®Ÿç’°å¢ƒã§ã®æ¤œè¨¼ã‚’è¡Œã„ã€MD5 ã‚’åˆ©ç”¨ã™ã‚‹ä¸Šã§ã®é™ç•Œã‚’æ˜Žã‚‰ã‹ã«ã—ã¾ã—ãŸã€‚ èª¿æŸ»ç ”ç©¶ã®æˆæžœ APOP æ–¹å¼ã‚’ç”¨ã„ã‚‹é›»åãƒ¡ãƒ¼ãƒ«ã‚·ã‚¹ãƒ†ãƒ ã¨APOP ã®è„†å¼±æ€§ã‚’çªãæ”»æ’ƒã‚µãƒ¼ãƒãƒ¼ã‚’æ§‹ç¯‰ã—ã€å®Ÿéš›ã¨
odz 2008/08/03
security
ãƒªãƒ³ã‚¯
ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒæ„Ÿã˜ã‚‹ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ï¼Œã“ã“ãŒä¸æº€ã€ ç¬¬1å›žï¼šã€ŒãªãœUSBãƒ¡ãƒ¢ãƒªãƒ¼ãŒä½¿ç”¨ç¦æ¢ï¼Ÿã€ã«ï¼Œã‚·ã‚¹ãƒ†ãƒ ç®¡ç†è€…ã¯ã©ã†ç”ãˆã‚‹ã¹ãã‹ï¼šITpro
ãƒ‘ã‚½ã‚³ãƒ³èªŒã€Œæ—¥çµŒPC21ã€ã®ç·¨é›†éƒ¨ã«ã¯ï¼Œæ§˜ã€…ãªèªè€…ã‹ã‚‰ã€Œè‡ªåˆ†ã®ä¼šç¤¾ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã¯ï¼Œã“ã“ãŒä¸æº€ã ã€ã¨ã„ã†æŠ•æ›¸ãŒå¯„ã›ã‚‰ã‚Œã¦ã„ã‚‹ã€‚ã“ã‚Œã‚‰ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å£°ã«ï¼Œæƒ…å ±ã‚·ã‚¹ãƒ†ãƒ éƒ¨é–€ã¯ã©ã®ã‚ˆã†ã«å¿œãˆã¦ã„ã‘ã°è‰¯ã„ã ã‚ã†ã‹ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚³ãƒ³ã‚µãƒ«ã‚¿ãƒ³ãƒˆã®æ¿±æœ¬å¸¸ç¾©æ°ã¨å…±ã«ï¼Œãã®ç”ãˆã‚’è€ƒãˆã¦ã¿ã‚ˆã†ã€‚ ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ä¸æº€ ç§ã®ä¼šç¤¾ã§ã¯ï¼ŒUSBãƒ¡ãƒ¢ãƒªãƒ¼ã®ä½¿ç”¨ãŒç¦æ¢ã•ã‚Œã¦ã„ã¾ã™ã€‚ã¨ã„ã†ã®ã‚‚ä»¥å‰ï¼Œæ¥å‹™ãƒ‡ãƒ¼ã‚¿ã‚’USBãƒ¡ãƒ¢ãƒªãƒ¼ã«å…¥ã‚Œã¦æŒã¡å‡ºã—ãŸäººãŒï¼Œãã‚Œã‚’ç´›å¤±ã—ã¦ã—ã¾ã†é¨’ãŽãŒã‚ã£ãŸã‹ã‚‰ã§ã™ã€‚ã¨ã¦ã‚‚ä¾¿åˆ©ãªãƒ„ãƒ¼ãƒ«ãªã®ã«ï¼Œä¼šç¤¾ã§ä½¿ãˆãªã„ã®ã¯ä¸æº€ãŒå‹Ÿã‚Šã¾ã™ã€‚ãŠã‹ã’ã§è‡ªå®…ä½œæ¥ãŒã§ããšã€‚æ®‹æ¥æ™‚é–“ãŒå¢—ãˆã‚‹ç¾½ç›®ã«ãªã‚Šã¾ã—ãŸã€‚æƒ…å ±ã‚·ã‚¹ãƒ†ãƒ éƒ¨é–€ã¯ãªãœï¼Œã“ã®ã‚ˆã†ãªã“ã¨ã‚’ã™ã‚‹ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿ ä»Šå›žï¼Œã“ã®ãŠé¡Œã‚’å–ã‚Šä¸Šã’ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã®ã«ã¯ï¼Œç†ç”±ãŒã‚ã‚Šã¾ã™ã€‚å®Ÿã¯ã“ã®ãŠé¡Œã«ã¯ï¼Œä¼æ¥ãŒç›´é¢ã—ã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®å•é¡Œç‚¹ãŒï¼Œã™ã¹ã¦è©°ã¾ã£ã¦ã„ã‚‹
odz 2008/06/30
security
ãƒªãƒ³ã‚¯
ãˆã‚€ã‘ã„ã•ã‚“æ›°ãã€Œçµå±€ç„¡ä¿®æ£ã®ã¾ã¾å…¬é–‹ã•ã‚Œã¦ã—ã¾ã„ã¾ã—ãŸã€ - hoshikuzu | star_dust ã®æ›¸æ–Ž
ãªã‚“ã®ã“ã¨ï¼Ÿ â—æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã«èµ·å› ã™ã‚‹è¤‡æ•°ã® XSS è„†å¼±æ€§ http://www.mozilla-japan.org/security/announce/2008/mfsa2008-13.html ç„¡ä¿®æ£ã¨ã¯ï¼Ÿ â—å½“æ—¥è¨˜20080118ã«é–¢é€£ã‹â€¦ http://d.hatena.ne.jp/hoshikuzu/20080118 ISO-2022-JPã®ä»•æ§˜ã¨ãƒ‘ãƒƒãƒ(ã©ã¡ã‚‰ã‚‚åºƒãå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™)ã‚’èªã‚ã°çž¬é–“çš„ã«æ€ã„ã¤ããã†ãªå¤‰å½¢ç‰ˆã®æ”»æ’ƒ æ°—ã«ãªã‚‹ã“ã¨ ISO-2022ç³»ã€Shift_JISç³»ä»¥å¤–ã®ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã«ãŠã„ã¦ã‚‚ã€éžASCIIæ–‡å—åˆ—ã®å–ã‚Šæ‰±ã„ã«ä¸å‚™ãŒã€Œã‚ã£ãŸã€ã¨åˆ¤æ–ã§ãã‚‹ã“ã¨ã€‚ä»Šå›žã®ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªã«ã¯ãã‚Œã‚‰ãŒè§¦ã‚Œã‚‰ã‚Œã¦ã„ãªã„ã“ã¨ã€‚ ã„ãšã‚Œã«ã›ã‚ˆ ã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰ã«ã—ã¦ã¿ã‚‹ã¨æ¥è…¹ã‹ã‚‚ã—ã‚Œãªã„ãŒã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã«ãŠã„ã¦ä¸æ£ãªã‚‚ã®ã¯ã‚„ã¯ã‚ŠHTMLã®ä¸€éƒ¨ã¨ã—ã¦åŸ‹ã‚è¾¼ã¾ã‚Œã¦ã¯ã„ã‘ãªã„
odz 2008/03/30
security
ãƒªãƒ³ã‚¯
OpenIDã«æ¬ ã‘ã¦ã„ã‚‹ã€Œè©•åˆ¤æƒ…å ±ã€ â€• ï¼ IT
2007å¹´12æœˆã«OpenID 2.0ã®æœ€çµ‚ä»•æ§˜ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã°ã‹ã‚Šã ã¨ã„ã†ã®ã«ã€æ°—ã®æ—©ã„äººãŒã„ã‚‹ã‚‚ã®ã§ã€ã™ã§ã«OpenIDã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã§ã¯ã€ŒOpenID 3.0ã€ã¨ã„ã†è¨€ã„æ–¹ã‚’ã™ã‚‹äººãŒå‡ºã¦ãã¦ã„ã‚‹ã€‚OpenIDã®å—å®¹ãŒæ€¥é€Ÿã«é€²ã‚“ã§ã„ã‚‹ç†ç”±ã®1ã¤ã¯ã€ç”¨é€”ã‚’é™å®šã—ã¦ã‚·ãƒ³ãƒ—ãƒ«ã«ã—ãŸã“ã¨ã«ã‚ã‚‹ã®ã ã‚ã†ãŒã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ãŒè§£æ±ºã™ã¹ãèª²é¡Œã¯å¹…åºƒã„ã€‚ä¾‹ãˆã°æ¥ç•Œå›£ä½“ã®ãƒªãƒãƒ†ã‚£ãƒ»ã‚¢ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ãŒã“ã‚Œã¾ã§ã«ç–å®šã—ãŸä»•æ§˜ã‚„å–ã‚Šçµ„ã‚“ã§ã„ã‚‹ä»•æ§˜æ¡ˆã‚’è¦‹ã‚Œã°ã€OpenIDãŒè§£æ±ºã—ã¤ã¤ã‚ã‚‹å•é¡ŒãŒã€å·¨å¤§ãªãƒ‘ã‚ºãƒ«ã®ä¸€éƒ¨åˆ†ã«éŽãŽãªã„ã“ã¨ãŒã‚ˆãåˆ†ã‹ã‚‹ã€‚ãƒªãƒãƒ†ã‚£ã§ã¯ä¾‹ãˆã°â€œAdvanced Clientâ€ã¨ã‹â€œSmart Clientâ€ã¨ã„ã†å‘¼ã³åã§ã€ãƒãƒƒãƒˆã«æŽ¥ç¶šã§ããªã„ãƒ¢ãƒã‚¤ãƒ«ç«¯æœ«ã§ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã‚’è¡Œã†ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã€ŒLiberty Alliance ID-WSF Advanced Client 1.0 Specific
odz 2008/03/02
OpenID

security
ãƒªãƒ³ã‚¯
Area Vicus Oryzae
Area Vicus Oryzaeã¸ã‚ˆã†ã“ã å‰å£ä¸Š: ã“ã“ã¯ç¨²æ‘é›„ =JANE=ãŒä½œæˆãƒ»é‹å–¶ã™ã‚‹ã‚µã‚¤ãƒˆã§ã™ã€‚ä¸èº«ã¯å½¹ã«ç«‹ã¤ã“ã¨ã‚‚ç«‹ãŸãªã„ã“ã¨ã‚‚ã‚ã‚‹ã§ã—ã‚‡ã†ã—ã€è¨˜è¼‰ã•ã‚ŒãŸå†…å®¹ã¯å¯èƒ½ãªé™ã‚Šæ£ç¢ºã‚’æœŸã™ã¤ã‚‚ã‚Šã§ã‚ã‚‹ã¨ã¯ã„ãˆåŸºæœ¬çš„ã«ç„¡ä¿è¨¼ã§ã™ã€‚ã—ãŸãŒã£ã¦æœ¬ã‚µã‚¤ãƒˆã®å†…å®¹ã«ã—ãŸãŒã£ãŸçµæžœãªã‚“ã‚‰ã‹ã®ä¸å…·åˆãŒç™ºç”Ÿã—ãŸã¨ã—ã¦ã‚‚ä¸€åˆ‡ä¿è¨¼ã¯ã„ãŸã—ã‹ãã¾ã™ã®ã§ã‚ã—ã‹ã‚‰ãšã€‚ ãŸã ã—ã€ã”è³ªå•ãƒ»ã”æ„è¦‹ç‰ã¯éšæ™‚å—ã‘ä»˜ã‘ã¾ã™ã®ã§ã€ä½•ã‹ã‚ã£ãŸã‚‰ä¸Šè¨˜ã‚¢ãƒ‰ãƒ¬ã‚¹ã¾ã§ã€‚
odz 2008/02/10
security
ãƒªãƒ³ã‚¯
å®‰å…¨ãªãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚·ã‚¹ãƒ†ãƒ ã¯ã‚ã‚‹ã®ã‹ | æ°´ç„¡æœˆã°ã‘ã‚‰ã®ãˆã³æ—¥è¨˜
ã¾ãŸã—ã¦ã‚‚ã€Œä¾‹ãˆã°ã€PHPã€ã®ã‚ˆã†ãªè©±ã§ç››ã‚Šä¸ŠãŒã£ã¦ã„ã‚‹ã‚ˆã†ã§ã™ãŒã€ãã‚Œã¨ã¯ã‚ã‚“ã¾ã‚Šé–¢ä¿‚ãªã„ã¨ã“ã‚ã«åå¿œâ€¦â€¦ã€Œå®‰å…¨ãªWebã‚¢ãƒ—ãƒªã®ãŸã‚ã«è¨€èªžãŒã§ãã‚‹ã“ã¨ (www.rubyist.net)ã€ã€‚ ã—ã‹ã—ã€å®‰å…¨ã§è‹¦åŠ´çŸ¥ã‚‰ãšã®ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã‚·ã‚¹ãƒ†ãƒ ã£ã¦ã‚ã‚“ã¾ã‚Šè¦‹ãŸã“ã¨ãªã„ã®ã§ã™ã‚ˆãã€‚ä»•äº‹ã§æ‰±ã£ãŸã“ã¨ãŒã‚ã‚‹ã®ã¯ã€ PHP + SmartyPerl + Catalyst + Template-Toolkit Ruby + Ruby on Rails + eRubyã¨ã„ã£ãŸã‚ãŸã‚Šã§ã™ãŒã€ã„ãšã‚Œã‚‚XSSã‚’å›žé¿ã™ã‚‹ãŸã‚ã«ã¯æ°—é…ã‚ŠãŒå¿…è¦ã§ã€ä¸€ç‹ç¸„ã§ã¯ã„ã‹ãªã‹ã£ãŸã‚Šã—ã¾ã™ã€‚ ãŸã¨ãˆã° eRuby ã®å ´åˆã€
odz 2008/02/04
security
ãƒªãƒ³ã‚¯
NSM Console Â« :wq
UPDATE: NSM-Console has a new home on my new website! NSM Console (Network Security Monitoring Console) is a framework for performing analysis on packat capture files. It implements a modular structure to allow for an analyst to quickly write modules of their own without any programming language experience. Using these modules a large amount of pcap analysis can be performed quickly using a set of
odz 2008/01/16
network

security
ãƒªãƒ³ã‚¯
NetChildren â– tokix.net
Credit ç´¯è¨ˆï¼š ä»Šæ—¥ï¼š æ˜¨æ—¥ï¼š ãƒªãƒ³ã‚¯ã¯ã”è‡ªç”±ã«ã©ã†ãž Since 2001/07/15 IE6, NN7, Opera7 + CSS + Win IE5, Safari1 + CSS + Mac NN4, W3C Suxx Managed by. tokix (webmaster@tokix.net) Powered by. MovableType 3.151
odz 2008/01/06
security
ãƒªãƒ³ã‚¯
Rauru Blog Â» Blog Archive Â» MD5ç ´ã‚Šã«Googleã‚’æ´»ç”¨
odz 2007/12/20
ãŠã‚‚ã—ã‚ã„ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒå¿…è¦ãªå ´é¢ã« MD5 ã‚’ä½¿ã†ãªã¨ã„ã†ã“ã¨ã‚‚ã‚ã‚‹ã®ã‹ãª

security
ãƒªãƒ³ã‚¯
XSSå¯¾ç–:JavaScriptã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—(ãã®4) - ockeghem's blog
XSSå¯¾ç–:JavaScriptã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—(ãã®3) - ockeghem(å¾³ä¸¸æµ©)ã®æ—¥è¨˜ã«ã¦ã€JavaScriptã®ãƒªãƒ†ãƒ©ãƒ«ã‚’å‹•çš„ç”Ÿæˆã™ã‚‹å ´åˆã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ–¹æ³•ã«ã¤ã„ã¦æ¤œè¨Žã—ãŸãŒã€id:hoshikuzuã•ã‚“ã‹ã‚‰ã€è€ƒæ…®ãŒã‚‚ã‚Œã¦ã„ã‚‹ã¨ã„ã†æŒ‡æ‘˜ã‚’å—ã‘ãŸ(http://d.hatena.ne.jp/hoshikuzu/20071011#p1:TITLE=2007-10-11 - hoshikuzu | star_dust ã®æ›¸æ–Ž - JavaScriptã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã«ã¤ã„ã¦è«–è€ƒ)ã€‚ ä¸Šè¨˜ã¯é•·ã„ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã§ã¯ã‚ã‚‹ãŒã€è¦ç´„ã™ã‚‹ã¨ã€ç‰¹å®šæ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã®ç‰¹å®šã®ãƒã‚¤ãƒˆâ—ã«å¯¾ã—ã¦ã€ç‰¹å®šãƒ–ãƒ©ã‚¦ã‚¶ã«ãŠã„ã¦ã€Œâ—\ã€ãŒä¸€æ–‡å—ã€Œâ– ã€ã¨ã—ã¦è§£é‡ˆã•ã‚Œã‚‹ãŸã‚ã€ã€Œ"ã€ã«å¯¾ã™ã‚‹ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã€Œ\"ã€ãŒç ´ç¶»ã™ã‚‹ã¨ã„ã†æ„å‘³ã«è§£é‡ˆã—ãŸã€‚ èˆˆå‘³æ·±ã„å†…å®¹ã§ã‚ã‚‹ã®ã§ã€ä»¥ä¸‹ã«è€ƒå¯Ÿã—ã¦ã¿ã‚ˆã†ã€‚ ãªãœã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ãŒç ´ç¶»ã™ã‚‹ã®ã‹ ä¸Šè¨˜ã®ã‚ˆã†ãªã‚±ãƒ¼ã‚¹ã¯ã•
odz 2007/12/15
JavaScript

security
ãƒªãƒ³ã‚¯
http://www.jumperz.net/texts/anti_dns_pinning.html
odz 2007/12/14
security
ãƒªãƒ³ã‚¯
twitterã«ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(XSS)è„†å¼±æ€§ãŒã‚ã‚Œã°ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¤‰æ›´ã§ãã‚‹ - ockeghem's blog
ç§‹ã®DKåŽç©«ç¥ãªã©ã§é¨’ãŒã‚Œã¦ã„ã‚‹ã€ã„ã‚ã‚†ã‚‹DKç¥ã‚Šã€‚ ã•ã™ãŒã®ç§ã‚‚ã€ä»Šå¤œåŠã®ç¥ã‚Šã«ã¯maitterã€‚ ç§ã®twitterãŒè’ã‚‰ã•ã‚Œã¦ã„ãŸã®ã ã€‚ http://blog.livedoor.jp/dankogai/archives/50959103.html ç¾è±¡ã‹ã‚‰è¦‹ã¦ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã•ã‚ŒãŸã¨æ€ã‚ã‚Œã‚‹ãŒã€åŽŸå› ã¨ãªã‚‹è„†å¼±æ€§ãŒå°é£¼å¼¾æ°ã®ä¸»å¼µã©ãŠã‚ŠCSRF(Cross Site Request Forgeries)ã ã£ãŸã®ã‹ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯çªƒå–ã•ã‚ŒãŸã®ã‹ã€å…ƒã€…ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒé¡žæŽ¨ã—ã‚„ã™ã„ã‚‚ã®ã ã£ãŸã®ã‹ãªã©ã€è°è«–ã‚’å‘¼ã‚“ã§ã„ã‚‹ã€‚ ç§ã¯ã€ç¾è±¡ã‹ã‚‰ã¿ã¦ã€åŽŸå› ã¨ãªã‚‹è„†å¼±æ€§ã¯CSRFã§ã¯ãªãã€XSSã ã£ãŸã¨æ€ã†*1ã€‚twitterã«XSSè„†å¼±æ€§ãŒã‚ã‚Œã°ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã«ã‚ˆã‚Šã€ç¬¬ä¸‰è€…ãŒå°é£¼å¼¾æ°ã«ãªã‚Šã™ã¾ã—ã¦ç™ºè¨€ã™ã‚‹ã¨ã“ã‚ã¾ã§ã¯å¯èƒ½ã ã€‚ã—ã‹ã—ã€ä¸€èˆ¬çš„ã«ã¯XSSã§ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¾ã§ã¯çªƒå–ã§ããªã„ã€‚id:ha
odz 2007/12/01
security
ãƒªãƒ³ã‚¯
1 2 3 æ¬¡ã®ãƒšãƒ¼ã‚¸