[B! Security] shny_wdã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

shny_wd id:shny_wd

Securityã«é–¢ã™ã‚‹shny_wdã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (32)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

http://plus.appgiga.jp/masatolan/2013/12/05/49712/
shny_wd 2013/12/06
èªè¨¼

webã‚µãƒ¼ãƒ“ã‚¹

security
ãƒªãƒ³ã‚¯
ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã®ç›®çš„ã¨å®Ÿç¾æ–¹æ³•
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã‘ã‚‹ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã«é–¢é€£ã—ã¦ã€ãã®ç›®çš„ã¨å®Ÿç¾æ–¹æ³•ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ è°è«–ã®å‰æ ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€èªè¨¼æ–¹å¼ã¨ã—ã¦ã€ã„ã‚ã‚†ã‚‹ãƒ•ã‚©ãƒ¼ãƒ èªè¨¼ã‚’å‰æã¨ã—ã¦ã„ã¾ã™ã€‚ãƒ•ã‚©ãƒ¼ãƒ èªè¨¼ã¯ä¿—ãªè¨€ã„æ–¹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€HTMLãƒ•ã‚©ãƒ¼ãƒ ã§IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å…¥åŠ›ãƒ•ã‚©ãƒ¼ãƒ ã‚’ä½œæˆã—ã€ãã®å…¥åŠ›å€¤ã‚’ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å´ã§æ¤œè¨¼ã™ã‚‹èªè¨¼æ–¹å¼ã®ã“ã¨ã§ã™ã€‚IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å…¥åŠ›ã¯æœ€åˆã®1å›žã§ã™ã¾ã›ãŸã„ãŸã‚ã€é€šå¸¸ã¯Cookieã‚’ç”¨ã„ã¦èªè¨¼çŠ¶æ…‹ã‚’ä¿æŒã—ã¾ã™ã€‚ãƒã‚°ã‚¢ã‚¦ãƒˆæ©Ÿèƒ½ã¨ã¯ã€ä¿æŒã•ã‚ŒãŸèªè¨¼çŠ¶æ…‹ã‚’ç ´æ£„ã—ã¦ã€èªè¨¼ã—ã¦ã„ãªã„çŠ¶æ…‹ã«æˆ»ã™ã“ã¨ã§ã™ã€‚ Cookieã‚’ç”¨ã„ãŸèªè¨¼çŠ¶æ…‹ä¿æŒ å‰è¿°ã®ã‚ˆã†ã«ã€èªè¨¼çŠ¶æ…‹ã®ä¿æŒã«ã¯Cookieã‚’ç”¨ã„ã‚‹ã“ã¨ãŒä¸€èˆ¬çš„ã§ã™ãŒã€Cookieã« auth=1 ã¨ã‹ã€userid=tokumaru ãªã©ã®ã‚ˆã†ã«ã€ãƒã‚°ã‚¤ãƒ³çŠ¶æ…‹ã‚’ã€Œãã®ã¾ã¾ã€Cookieã«ä¿æŒã™ã‚‹ã¨è„†å¼±æ€§ã«ãªã‚Šã¾ã™
shny_wd 2013/02/21
ã‚ã¨ã§èªã‚€

é–‹ç™º

security
ãƒªãƒ³ã‚¯
å°±æ´»ç”Ÿã®ã¿ãªã•ã‚“ã¸ ï½žæ–‡ç³»ï¼Ÿç†ç³»ï¼Ÿï½ž Â« ã‚µãƒ¼ãƒãƒ¼ãƒ¯ãƒ¼ã‚¯ã‚¹ç¤¾é•·ãƒ–ãƒã‚°
ã‚µãƒ¼ãƒãƒ¼ã‚¯ã‚¹CEOãƒ–ãƒã‚°ã€€å¤§çŸ³è”µäººä¹‹åŠ©ã®ã€Œé›²ã‚’ã¤ã‹ã‚€ã‚ˆã†ãªè©±ã€ã¯ã€ ã€Œã¯ã¦ãªãƒ–ãƒã‚°ã€ã¸ç§»è¡Œè‡´ã—ã¾ã—ãŸã€‚ æ—§ãƒ–ãƒã‚°è¨˜äº‹ã®URLã‹ã‚‰ãŠè¶Šã—ã®çš†æ§˜ã¯è‡ªå‹•ã§æ–°ãƒ–ãƒã‚°ã¸è»¢é€ã•ã‚Œã¾ã™ã€‚ è»¢é€ã•ã‚Œãªã„å ´åˆã€æã‚Œå…¥ã‚Šã¾ã™ãŒä¸‹è¨˜URLã‹ã‚‰ç§»å‹•ã‚’ãŠé¡˜ã„è‡´ã—ã¾ã™ã€‚ æ–°URLï¼šhttps://ceo.serverworks.co.jp/ å¼•ãç¶šãã€å¤§çŸ³è”µäººä¹‹åŠ©ã®ã€Œé›²ã‚’ã¤ã‹ã‚€ã‚ˆã†ãªè©±ã€ã‚’å®œã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚
shny_wd 2012/12/28
Security

network

cloud
ãƒªãƒ³ã‚¯
Yahoo!ã€å€‹äººæƒ…å ±ç®¡ç†æ‰‹æ®µã€ŒDo Not Trackã€æ©Ÿèƒ½ã‚’åˆå¤ã«ä¸–ç•Œå…¨ä½“ã§æä¾›ã¸
ç±³Yahoo!ã¯ç¾åœ°æ™‚é–“2012å¹´3æœˆ29æ—¥ã€å€‹äººæƒ…å ±ç®¡ç†æ‰‹æ®µã€ŒDo Not Trackã€ã‚’åˆå¤ã¾ã§ã«å…¨é¢å°Žå…¥ã™ã‚‹ã¨ç™ºè¡¨ã—ãŸã€‚åŒç¤¾ã®ä¸–ç•Œãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å…¨ä½“ã«ã‚ãŸã£ã¦Do Not Trackãƒ˜ãƒƒãƒ€ãƒ¼ã‚’åˆ©ç”¨å¯èƒ½ã«ã™ã‚‹ã€‚å°Žå…¥å¯¾è±¡ã«ã¯ã€åŒç¤¾å‚˜ä¸‹ã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³åºƒå‘Šã‚ªãƒ¼ã‚¯ã‚·ãƒ§ãƒ³äº‹æ¥Right Mediaã¨ã‚¿ãƒ¼ã‚²ãƒƒãƒˆåž‹ã‚ªãƒ³ãƒ©ã‚¤ãƒ³åºƒå‘ŠæŠ€è¡“ã®interclickã‚‚å«ã¾ã‚Œã‚‹ã€‚ Do Not Trackã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã‚ªãƒ³ãƒ©ã‚¤ãƒ³è¡Œå‹•ã®è¿½è·¡ã‚’æ‹’å¦ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã®æ‰‹æ®µã€‚ç±³é€£é‚¦å–å¼•å§”å“¡ä¼šï¼ˆFTCï¼‰ã¯ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ä¿è·ã®æž çµ„ã¿ææ¡ˆã«åŒæ‰‹æ®µã®æŽ¡ç”¨ã‚’ç››ã‚Šè¾¼ã‚“ã§ãŠã‚Šã€3æœˆ26æ—¥ã«ç™ºè¡¨ã—ãŸæœ€çµ‚å ±å‘Šæ›¸ã§ã¯ã€Œ2012å¹´æœ«ã¾ã§ã«åŠ¹æžœçš„ã§ä½¿ã„ã‚„ã™ã„Do Not Trackã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’æ¶ˆè²»è€…ã«æä¾›ã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã¨ç¢ºä¿¡ã—ã¦ã„ã‚‹ã€ã¨ã®è¦‹è§£ã‚’ç¤ºã—ãŸï¼ˆé–¢é€£è¨˜äº‹ï¼šFTCãŒãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ä¿è·ã®å ±å‘Šæ›¸ã€ãƒ‡ãƒ¼ã‚¿ãƒ–ãƒãƒ¼ã‚«ãƒ¼å‘ã‘æ³•æ•´å‚™ãªã©è¿½åŠ ï¼‰ã€‚
shny_wd 2012/04/10
Security
ãƒªãƒ³ã‚¯
ãƒãƒ¼ã‚½ãƒ³Wi-FiãŒèª•ç”Ÿæ—¥ã¨é›»è©±ç•ªå·ã‚’èª°ã‹ã«ä¼ãˆã‚‹ã“ã¨ã‚’ç¦æ¢ï¼ - Togetter
å…ˆæ—¥å§‹ã¾ã£ãŸ LAWSON Wi-Fi ã‚’åˆ©ç”¨ã™ã‚‹ãŸã‚ã«å¿…è¦ãªãƒãƒ¼ã‚½ãƒ³ã‚¢ãƒ—ãƒªã®åˆ©ç”¨è¦ç´„ãŒã¨ã‚“ã§ã‚‚ãªã‹ã£ãŸä»¶ã€‚ ã‚¢ãƒ—ãƒªåˆ©ç”¨ä¸ã¯èª°ã®èª•ç”Ÿæ—¥ã‚‚é›»è©±ç•ªå·ã‚‚çŸ¥ã‚‰ã›ã¦ã¯ã„ã‘ãªã„ã—ã€çŸ¥ã‚ã†ã¨ã—ã¦ã‚‚ã„ã‘ãªã„ï¼ Pontaã‚«ãƒ¼ãƒ‰ã‚’è§£ç´„ã—ã‚ˆã†ã¨ã—ã¦ã‚‚ãƒãƒ¼ã‚½ãƒ³ã‚¢ãƒ—ãƒªã®è¦ç´„ã§é€€ä¼šå‡ºæ¥ç„¡ã„ï¼è©°ã‚“ã ï¼ ã€4/10 22:10ã€‘ ç¶šãã‚’èªã‚€
shny_wd 2012/04/09
security
ãƒªãƒ³ã‚¯
ã‚†ã†ã¡ã‚‡éŠ€è¡Œã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç´›å¤±ã—ãŸã®ã§ã€å†ç™ºè¡Œæ‰‹ç¶šã—ãŸã‚‰ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å°å—ã—ãŸè—åŠç´™ãŒå±Šã„ãŸã€‚ï¼¼(^o^)ï¼ - ãã‚Œãƒžã‚°ã§ï¼
ã‚†ã†ã¡ã‚‡éŠ€è¡Œã®ã‚¹ã‚¯ãƒ¬ãƒ¼ãƒ‘ãƒ¼ã‚’æ›¸ãã«å½“ãŸã‚Šã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨åˆè¨€è‘‰ãŒã‚ã‹ã‚‰ãªã‹ã£ãŸã®ã§åˆæœŸåŒ–ã‚’ãŠé¡˜ã„ã—ãŸã€‚ åˆæœŸåŒ–ã‚’ãŠé¡˜ã„ã—ãŸã®ã«ã€çª“å£ã®ãŠå§‰ã•ã‚“ã«ã€Œå†é€šçŸ¥ã§ã™ãï¼ã€ã¨ã‹è¨€ã‚ã‚ŒãŸã€‚ãã£ã¨è¨€ã„é–“é•ã„ã ã‚ã†ã¨æ€ã£ã¦ãŸã‚‰ã€æœ¬å½“ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒå¹³æ–‡ã§å±Šã„ãŸã€‚ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¿˜ã‚ŒãŸã®ã§éƒµé€é€šçŸ¥ã‚’ãŠé¡˜ã„ã—ãŸã€‚ å‰ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å°å—ã—ãŸè—åŠç´™ãŒå±Šã„ãŸã€‚ï¼¼(^o^)ï¼ ãŠãŠç´™ã‚ˆã€‚ã‚ãªãŸã¯è¦šãˆã¦ã„ã‚‰ã£ã—ã‚ƒã£ãŸã€‚å¿˜ã‚ŒãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒå°å—ã•ã‚Œã¦éƒµé€ã•ã‚Œã¦ããŸã€‚ ãƒžã‚¸ã§ãƒ‰ãƒ³å¼•ãã—ãŸã‚ã€‚ å¿˜ã‚ŒãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒé€ã‚‰ã‚Œã¦ããŸã‚ˆã€‚ (ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒå°å—ã•ã‚Œã¦å±Šã„ãŸã€‚) (æš—è¨¼ç•ªå·ã‚‚å°å—ã•ã‚Œã¦å±Šã„ãŸã€‚ ) ã•ã™ãŒã«ã“ã‚Œã¯ãƒ‰ãƒ³å¼•ãã—ãŸã‚ã€‚ ã“ã‚Œæƒ…å ±å‡¦ç†ã‚»ãƒ³ã‚¿ã®ãƒã‚¤ãƒˆãŒæ‰‹ä½œæ¥ã§å°ã—ã¦ã‚‹ã‚“ã§ã™ã‚ˆããƒ»ãƒ»ãƒ» ã“ã‚Œãã€ç´›å¤±ã—ãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒå¹³æ–‡ã§ãã®ã¾ã¾å±Šãã¾ã—ãŸã‚ˆã€‚å†ç™ºè¡Œã˜ã‚ƒãªãã¦ã€ä»¥å‰ã®ã‚‚ã®ãŒãã®ã¾ã¾ã€‚ éƒµé€ã§é€ã‚‹ã‹ãã€‚ã€‚ã€‚ã€‚ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¹³æ–‡ã§ä¿æŒ
shny_wd 2012/02/25
security
ãƒªãƒ³ã‚¯
å˜ãªã‚‹ OAuth 2.0 ã‚’èªè¨¼ã«ä½¿ã†ã¨ã€è»ŠãŒé€šã‚Œã‚‹ã»ã©ã®ã©ã§ã‹ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¼ãƒ»ãƒ›ãƒ¼ãƒ«ãŒã§ãã‚‹
In some of the feedback I have gotten on the openID Connect spec, the statement is made that Connect is too complicated. That OAuth 2.0 is all you need to do authentication. Many point to Identity Proâ€¦ è‹±èªžèªã¿ãŸããªã„ã¨ã„ã†äººã®ãŸã‚ã«ç°¡å˜ã«è§£èª¬ã™ã‚‹ã¨â€¦ OAuth 2.0 ã® implicit flow ã‚’ä½¿ã£ã¦ã€Œèªè¨¼ã€ã‚’ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã€ã¨ã£ã¦ã‚‚å¤§ããªç©´ãŒé–‹ãã¾ã™ã€‚ ã‚«ãƒƒãƒˆï¼†ãƒšãƒ¼ã‚¹ãƒˆã‚¢ã‚¿ãƒƒã‚¯ãŒå¯èƒ½ã ã‹ã‚‰ã§ã™ã€‚ OAuth èªè¨¼ï¼Ÿã¯ã€å›³ï¼‘ã®ã‚ˆã†ãªæµã‚Œã«ãªã‚Šã¾ã™ã€‚ å›³ï¼‘ OAuth èªè¨¼ï¼Ÿã®æµã‚Œ ä¸€è¦‹ã€å•é¡Œãªã•ãã†ã«è¦‹ãˆã¾ã™ã€‚ã—ã‹ã—ã€ãã‚Œã¯ã™ã¹ã¦ã®ã‚µã‚¤ãƒˆãŒã€Œè‰¯ã„ã‚µã‚¤ãƒˆã€ãªã‚‰ã°ã§ã™ã€‚ Site_A
shny_wd 2012/02/03
OAuth

openid

security
ãƒªãƒ³ã‚¯
ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒª - Wikipedia
ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒª (cross-site request forgery) ã¯ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã®ä¸€ã¤[1]ã‚‚ã—ãã¯ãã‚Œã‚’åˆ©ç”¨ã—ãŸæ”»æ’ƒã€‚ç•¥ç§°ã¯CSRFï¼ˆã‚·ãƒ¼ã‚µãƒ¼ãƒ• (sea-surf) ã¨èªã¾ã‚Œã‚‹äº‹ã‚‚ã‚ã‚‹[2][3]ï¼‰ã€ã¾ãŸã¯XSRFã€‚ãƒªã‚¯ã‚¨ã‚¹ãƒˆå¼·è¦[4]ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ©ã‚¤ãƒ‡ã‚£ãƒ³ã‚° (session riding[3]) ã¨ã‚‚å‘¼ã°ã‚Œã‚‹ã€‚1990å¹´ä»£ã¯ã‚¤ãƒ¡ã‚¿ã‚°æ”»æ’ƒã¨ã‚‚å‘¼ã°ã‚Œã¦ã„ãŸ[è¦å‡ºå…¸]ã€‚è„†å¼±æ€§ã‚’ãƒ„ãƒªãƒ¼åž‹ã«åˆ†é¡žã™ã‚‹CWEã§ã¯CSRFã‚’ãƒ‡ãƒ¼ã‚¿èªè¨¼ã®ä¸ååˆ†ãªæ¤œè¨¼ (CWE-345) ã«ã‚ˆã‚‹è„†å¼±æ€§ã®ã²ã¨ã¤ã¨ã—ã¦åˆ†é¡žã—ã¦ã„ã‚‹ (CWE-352)[5]ã€‚ ãªãŠCSRFã®æ£å¼åç§°ã¯ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° (XSS) ã¨ä¼¼ã¦ã„ã‚‹ãŒã€XSSã¯ä¸é©åˆ‡ãªå…¥åŠ›ç¢ºèª (CWE-20) ã«ã‚ˆã‚‹ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ (CWE-74) ã®ã²ã¨ã¤ã¨ã—ã¦åˆ†é¡žã•ã‚Œã¦ãŠã‚Š[5]ã€å…¨ãç•°ãªã‚‹ç¨®é¡žã®
shny_wd 2012/01/28
ã¯ã¾ã¡ã¡ã‚ƒã‚“

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
[æ›¸ç±]å®Ÿè·µDNS - DNSSECæ™‚ä»£ã®DNSã®è¨å®šã¨é‹ç”¨ -:Geekãªãºãƒ¼ã˜
ã€Œå®Ÿè·µDNS - DNSSECæ™‚ä»£ã®DNSã®è¨å®šã¨é‹ç”¨ -ã€ã®çŒ®æœ¬ã‚’é ‚ãã¾ã—ãŸã€‚ ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ç§ã¯DNSã®ã“ã¨ãŒè‰¯ãã‚ã‹ã‚‰ãªãã¦ã€Œå‹‰å¼·ã—ãŸã„ã€ã¨æ€ã„ã¤ã¤è‰²ã€…èª¿ã¹ã¦ã¯ã„ã‚‹ã®ã§ã™ãŒã€DNSã®æƒ…å ±ãŒã¾ã¨ã¾ã£ã¦è¿°ã¹ã‚‰ã‚Œã¦ã„ã‚‹æ›¸ç±ãŒç™ºè¦‹ã§ããšã«å›°ã£ã¦ã„ã‚‹ã¨ã“ã‚ã ã£ãŸã®ã§ã€éžå¸¸ã«å‚è€ƒã«ãªã‚Šã¾ã—ãŸã€‚ ã“ã‚Œã¾ã§ã€é€šç§°ã€Œãƒãƒƒã‚¿æœ¬ã€ã¨å‘¼ã°ã‚Œã¦ã„ã‚‹DNS & BINDãŒæœ€ã‚‚è©³ã—ã„DNS æœ¬ã ã£ãŸã¨æ€ã†ã®ã§ã™ãŒã€ãƒãƒƒã‚¿æœ¬ã¯BINDã®æœ¬ã§ã‚ã£ã¦ã€DNSã®æœ¬ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ ãã†ã„ã†æ„å‘³ã§ã€ã€Œå®Ÿè·µDNSã€ã¯ã€æŠ€è¡“ã¨ã—ã¦ã®DNSã«é–¢ã—ã¦ã‚ãƒƒãƒãƒªæ›¸ã„ã¦ã‚ã‚‹è‰¯æ›¸ã ã¨æ€ã„ã¾ã™ã€‚ è±ªè¯ãªåŸ·ç†é™£ ã€Œå®Ÿè·µDNSã€ã¯ã€DNSã‚„DNSSECã«é–¢ã—ã¦æ—¥æœ¬å›½å†…ã§è€ƒãˆå¾—ã‚‹æœ€é«˜ãƒ¬ãƒ™ãƒ«ã®åŸ·ç†é™£ã«ã‚ˆã£ã¦åŸ·ç†ã•ã‚Œã¦ã„ã‚‹ã¨æ€ã„ã¾ã—ãŸã€‚ è‘—è€…ã¯3åã¨ã‚‚ã€Œ.jpã€ã®JPãƒ‰ãƒ¡ã‚¤ãƒ³åã®ç™»éŒ²ç®¡ç†æ¥å‹™ã¨DNSã®é‹ç”¨ã‚’è¡Œã£ã¦ã„ã‚‹æ ªå¼ä¼šç¤¾æ—¥æœ¬ãƒ¬ã‚¸ã‚¹ãƒˆ
shny_wd 2011/06/05
DNS

security

æœ¬
ãƒªãƒ³ã‚¯
ã‚½ãƒ‹ãƒ¼ã€æœ€å¤§7500ä¸‡ä»¶ã®å€‹äººæƒ…å ±ãŒæµå‡ºã€€ã‚¯ãƒ¬ã‚«æƒ…å ±ã‚‚ã€Œå¦å®šã§ããªã„ã€:ã€2chã€‘ãƒ‹ãƒ¥ãƒ¼é€ŸVIPãƒ–ãƒã‚°(`ï½¥Ï‰ï½¥Â´)
shny_wd 2011/04/27
ã“ã‚Œã¯ã²ã©ã„

Security

privacy
ãƒªãƒ³ã‚¯
ãƒ¢ãƒã‚²ãƒ¼ãŒé€€ä¼šã—ã¦ã‚‚å€‹äººæƒ…å ±ã‚’å‰Šé™¤ã—ã¦ãã‚Œãªã„ - LazyLoadLife
ã‚ãƒ¼ã€ã©ã£ã‹ã‚‰è©±ã›ã°ã„ã„ã‹ãªã€‚æ£ç›´ã«ãã‚‚ãã‚‚ã®ã¨ã“ã‚ã‹ã‚‰æ›¸ãã®ãŒå…¬å¹³ã§ã—ã‚‡ã†ã€‚ã‚ã‚Œãªã‚“ã™ã‚ã€Twitter ã§ã‚¦ã‚ªãƒƒãƒã—ã¦ã‚‹äººã¯ã‚ã‹ã‚‹ã¨ãŠã‚Šã€ã¼ãã‚ªã‚«ãƒžãªã‚“ã™ã‚ã€‚å¥³è£…ã‚‚å¥³ã£ã½ã„è¨€å‹•ã‚‚ã—ã¦ãªã„ã‘ã©ã€å¿ƒã¯å¥³ã¨ã„ã†ã‹ã€ä¼¼åˆã„ã•ãˆã™ã‚Œã°å¥³ã®åã®æ ¼å¥½ã—ãŸã„ã‚“ã™ã‚ã€ã‚²ãƒ¼ãƒ ã®ã‚ãƒ£ãƒ©ã‚„ã‚¢ãƒã‚¿ãƒ¼ã¯å¿…ãšå¥³æ€§ã«ã™ã‚‹ã‚“ã§ã™ã‚ã€‚ãƒã‚«ãƒžã¨è¨€ã£ãŸã»ã†ãŒæ£ã—ã„ã‹ãªã€‚ ã‚“ã§ã€ã¡ã‚‡ã£ã¨å‰ã«ã‚¦ã‚§ãƒ–æ¥ç•Œã®èª¿æŸ»ã¨å¥½å¥‡å¿ƒã§ãƒ¢ãƒã‚²ãƒ¼ã«å…¥ä¼šã—ã¾ã—ãŸã€‚ã‚ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ç‰ˆã§ã™ï¼ˆç§ã®æ‰€æŒç«¯æœ«ã¯ iPhone 3Gï¼‰ã€‚ãã®éš›ã€ã‚ã¨ã§ã‚¢ãƒã‚¿ãƒ¼ã¯è‡ªç”±ã«ç€ã›æ›¿ãˆã‚‰ã‚Œã‚‹ã¨æ€ã£ã¦ã€æ€§åˆ¥ã®æ¬„ã¯ã€Œç”·æ€§ã€ã«ã—ãŸã‚“ã™ã‚ã€‚æˆ¸ç±ä¸Šã€ç”·æ€§ã ã—ã€‚ãã—ãŸã‚‰ã€ã‚¢ãƒã‚¿ãƒ¼ã„ã˜ã‚ã†ã‚¦ãƒ•ãƒ•ã¨æ€ã£ãŸã‚‰ã€ç”·æ€§å½¢å›ºå®šã§å¥³æ€§å½¢ã«ã§ããªã„ã‚“ã™ã‚ã€‚ ã‚“ã§ã€ã—ã‚‡ã†ãŒãªã„ã‹ã‚‰åˆ¥ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä½œã‚ã†ã¨æ€ã£ã¦ã€åˆ¥ã®ãƒ¡ã‚¢ãƒ‰ã§ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä½œã£ãŸã€‚ãã“ã§ç«‹ã¡å¡žãŒã‚‹ã®ãŒã€Œæºå¸¯é›»è©±ç•ªå·èªè¨¼ã€ã€‚æºå¸¯é›»è©±ç•ªå·ã‚’å…¥åŠ›ã—ã¦
shny_wd 2011/04/26
ãƒ¢ãƒã‚²ãƒ¼

security

privacy
ãƒªãƒ³ã‚¯
404 Blog Not Found:ã“ã‚Œã§æœ€ä½Žé™! - æ›¸è©• - ä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹
2011å¹´10æœˆ05æ—¥22:30 ã‚«ãƒ†ã‚´ãƒªæ›¸è©•/ç”»è©•/å“è©•iTech ã“ã‚Œã§æœ€ä½Žé™! - æ›¸è©• - ä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã‚¯ãƒªã‚¨ã‚¤ãƒ†ã‚£ãƒ–å‹ä¿æ§˜ã‚ˆã‚ŠçŒ®æœ¬å¾¡ç¤¼ã€‚ ä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ è„†å¼±æ€§ãŒç”Ÿã¾ã‚Œã‚‹åŽŸç†ã¨å¯¾ç–ã®å®Ÿè·µ å¾³ä¸¸æµ© [é›»åç‰ˆ@bookpub.jp] åˆå‡º2011.02.24; 2011.10.05 é›»åç‰ˆã¸ã®ãƒªãƒ³ã‚¯ã‚’è¿½åŠ ã“ã†ã„ã†æœ¬ã‚’å¾…ã£ã¦ã„ãŸã€‚Webåˆ¶ä½œã«é–¢ã‚ã‚‹å…¨ã¦ã®äººã€å¿…æºã€‚ ã¨åŒæ™‚ã«è¨€ã£ã¦ãŠããŸã„ã®ã¯ã€å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ä½œã‚‹ã«ã‚ãŸã£ã¦ã€æœ¬æ›¸ã®å†…å®¹ã¯ã‚ãã¾ã§å¿…è¦æ¡ä»¶ã§ã‚ã£ã¦å……åˆ†æ¡ä»¶ã§ã¯ãªã„ã¨ã„ã†ã“ã¨ã€‚åŽŸç†çš„ã«ã€‚ ãªãœã‹ã€‚ ã‚ãªãŸã®Webã‚µã‚¤ãƒˆã§ä½•ãŒå‡ºæ¥ã¦ã¯ãªã‚‰ãªã„ã‹ã¯ã€ã‚ãªãŸã«ã—ã‹æ±ºã‚ã‚‰ã‚Œãªã„ã‹ã‚‰ã ã€‚ æœ¬æ›¸ã€Œä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ã€ã¯ã€å‰¯é¡Œã«ã€Œè„†å¼±æ€§ãŒç”Ÿã¾ã‚Œã‚‹åŽŸç†ã¨å¯¾ç–
shny_wd 2011/02/25
æœ¬

security

dankogai
ãƒªãƒ³ã‚¯
ã•ãã‚‰ã®VPSã§ãƒ•ã‚¡ã‚¤ã‚¢ãƒ¼ã‚¦ã‚©ãƒ¼ãƒ«ãŒä½•ã‚‚è¨å®šã•ã‚Œã¦ã„ãªã„ã®ã«é©šæ„•ã—ãŸãŒ ufw ã§è§£æ±º - babie, you're my home
ã•ãã‚‰ã®VPS ã£ã¦ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ãƒ•ã‚¡ã‚¤ã‚¢ãƒ¼ã‚¦ã‚©ãƒ¼ãƒ«ã®è¨å®šä½•ã‚‚ã•ã‚Œã¦ãªã„ã¨ã„ã†è¨˜äº‹ã‚’ã¿ã¦é©šæ„•ã—ãŸã€‚ã¨ã€ã‚ˆãè€ƒãˆãŸã‚‰ Ubuntu 10.04 LTS ã‚’å†ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸã‹ã‚‰ã€ã©ã£ã¡ã«ã—ã¦ã‚‚åˆæœŸçŠ¶æ…‹ã ãªã€‚ ã¨ã‚Šã‚ãˆãšç¢ºã‹ã‚ãŸã€‚ $ sudo iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination ã‚ªã‚¦ãƒ•ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã¯ç©ºãªã®ã‹â€¦â€¦ iptables ã®è¨å®šã‚ã‚“ã©ãã›ã‡ãªãƒ¼ã©ã†ã—ã‚ˆã†ã‹ãªãƒ¼ã€ã¨æ€ã£ã¦ã„ãŸã‚‰ã€ã©ã†ã‚‚ Ubuntu ã§ã¯ ufw ã¨ã„ã†
shny_wd 2011/02/25
vps

security
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2011/02/11/20110210google-rolls-out-two-factor-authentication-for-everyone-you-should-use-it/
shny_wd 2011/02/14
google

security
ãƒªãƒ³ã‚¯
1åˆ†ã§ã‚ã‹ã‚‹ã€ŒX-ãƒŠãƒ³ãƒˆã‚«ã€HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ - è‘‰ã£ã±æ—¥è¨˜
æœ€è¿‘ã®ãƒ¢ãƒ€ãƒ³ãªWebãƒ–ãƒ©ã‚¦ã‚¶ãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢é€£ã—ãã†ãª X- ãªHTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ãã‚Œä»¥å¤–ã«ã‚‚ã‚ã£ãŸã‚‰æ•™ãˆã¦ãã ã•ã„ã€‚ X-XSS-Protection 0:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’ç„¡åŠ¹ã«ã™ã‚‹ã€‚ 1:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã€‚ XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã“ã¨ã§ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãŒXSSã®è¢«å®³ã«ã‚ã†å¯èƒ½æ€§ãŒä½Žæ¸›ã™ã‚‹ãŒã€ã¾ã‚Œã«èª¤æ¤œçŸ¥ã™ã‚‹ã“ã¨ã§ç”»é¢ã®è¡¨ç¤ºãŒä¹±ã‚Œã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã€‚IE8+ã€Safariã€Chrome(å¤šåˆ†) ã§æœ‰åŠ¹ã€‚IEã§ã¯ã€ŒX-XSS-Protection: 1; mode=blockã€ã¨ã„ã†æŒ‡å®šã‚‚å¯èƒ½ã€‚ 2008/7/2 - IE8 Security Part IV: The XSS FilterBug 27312 â€“ [XSSAuditor] Add support for header X-XSS-Protection X-Content-Ty
shny_wd 2011/01/08
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

browser

IE

xss

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
å²¡å´Žå¸‚ä¸å¤®å›³æ›¸é¤¨ #librahack äº‹ä»¶ã‚’å–æã—ãŸæœæ—¥æ–°èžè¨˜è€…ã•ã‚“ã¸ã®è³ªå•ã¨å›žç”ã¾ã¨ã‚ (8æœˆ21æ—¥åˆ†)
ç¥žç”° å¤§ä»‹ @kanda_daisuke ã¿ãªã•ã¾ã€ãŠã¯ã‚ˆã†ã”ã–ã„ã¾ã™ã€‚è¨˜äº‹ã‚’æ›¸ãã¾ã—ãŸæœæ—¥æ–°èžã®ç¥žç”°ã¨ç”³ã—ã¾ã™ã€‚ä»Šå›žã®ä»¶ã§ã¯ã€ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã‚„ãƒ–ãƒã‚°ãªã©ãƒãƒƒãƒˆä¸Šã®æƒ…å ±ã‚’ãŸãã•ã‚“å‚è€ƒã«ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ã¾ãšã¯ãŠç¤¼ã‚’ç”³ã—ä¸Šã’ã¾ã™ã€‚ #librahack 2010-08-21 08:50:36 ç¥žç”° å¤§ä»‹ @kanda_daisuke ã“ã®ä»¶ã§ã¯ã€ãŠã‚ˆãï¼’ã‹æœˆé–“ã«ã‚ãŸã£ã¦å–æã‚’ç¶šã‘ã¦ãã¾ã—ãŸï¼ˆæ¯Žæ—¥ã“ã®å•é¡Œã ã‘ã«å°‚å¾“ã—ã¦ã„ãŸã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒï¼‰ã€‚è¨˜äº‹ã«æ›¸ã‹ã‚Œã¦ã„ã‚‹ã“ã¨ã¯ã»ã‚“ã®ã‚¨ãƒƒã‚»ãƒ³ã‚¹ã«éŽãŽãšã€ã¾ãŸåºƒç¯„å›²ãªæ–°èžèªè€…ã‚’æƒ³å®šã—ã¦ã„ã‚‹ãŸã‚ã€ã„ã‚ã„ã‚ã¨è¡¨ç¾ã‚’ã€Œä¸¸ã‚ã¦ã€ã‚ã‚Šã¾ã™ã€‚ #librahack 2010-08-21 08:53:14
shny_wd 2010/08/22
librahack

security

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼šã€ŒTomcatã€ã«ãŠã‘ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†ã«é–¢ã™ã‚‹è„†å¼±æ€§ã«é–¢ã™ã‚‹è§£èª¬.
æœ¬è³‡æ–™ã¯ã€JVNã§å…¬è¡¨ã—ãŸã€ŒJVN#79314822ï¼šã€ŽTomcatã€ã«ãŠã‘ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†ã«é–¢ã™ã‚‹è„†å¼±æ€§ã€ã«ã¤ã„ã¦è§£èª¬ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ ã€ŒApache Tomcatã€ï¼ˆä»¥ä¸‹ ã€ŒTomcatã€ï¼‰ã¯ã€ã‚µãƒ¼ãƒä¸Šã§ Java ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å‹•ä½œã•ã›ã‚‹ãŸã‚ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã™ã€‚Java ã‚µãƒ¼ãƒ–ãƒ¬ãƒƒãƒˆä»•æ§˜ã¨ JavaServer Pages ä»•æ§˜ã®ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹å®Ÿè£…ã¨ãªã£ã¦ã„ã¾ã™ã€‚ ã€ŒTomcatã€ã«ã¯ã€ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒã¨é€£å‹•ã™ã‚‹æ©Ÿèƒ½ãŒã‚ã‚Šã¾ã™ã€‚AJP (Apache JServ Protocol) 1.3 ã¯é€£å‹•ã®ãŸã‚ã®ãƒ—ãƒãƒˆã‚³ãƒ«ã®ä¸€ã¤ã§ã€AJP 1.3 Connector (org.apache.ajp.tomcat4.Ajp13Connector) ã¯ AJP 1.3 ã‚’ä½¿ç”¨ã™ã‚‹ã‚³ãƒã‚¯ã‚¿ã®ä¸€ã¤ã§ã™ã€‚ã“ã®ã‚³ãƒã‚¯ã‚¿ã‚’ä½¿ç”¨ã—ãŸå ´åˆã€ã€ŒTomcatã€ã¯ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒã‹ã‚‰ AJP 1.3 ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–ã‚Šã€
shny_wd 2010/01/15
Security

apache
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ± - iãƒ¢ãƒ¼ãƒ‰IDã‚’ç”¨ã„ãŸã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ã®DNS Rebindingè„†å¼±æ€§
HASHã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°æ ªå¼ä¼šç¤¾ å…¬é–‹æ—¥:2009å¹´11æœˆ24æ—¥ è¿½è¨˜æ—¥:2010å¹´1æœˆ21æ—¥ æ¦‚è¦ iãƒ¢ãƒ¼ãƒ‰ãƒ–ãƒ©ã‚¦ã‚¶2.0ã®JavaScriptã¨DNS Rebinding(DNSãƒªãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°)å•é¡Œã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚Šã€iãƒ¢ãƒ¼ãƒ‰IDã‚’åˆ©ç”¨ã—ãŸèªè¨¼æ©Ÿèƒ½ï¼ˆä»¥ä¸‹ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ï¼‰ã«å¯¾ã™ã‚‹ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ãŒå¯èƒ½ã¨ãªã‚‹å ´åˆãŒã‚ã‚‹ã“ã¨ã‚’ç¢ºèªã—ãŸã®ã§å ±å‘Šã™ã‚‹ã€‚å±é™ºåº¦ã®é«˜ã„æ”»æ’ƒæ‰‹æ³•ã§ã‚ã‚‹ã®ã§ã€ã‚µã‚¤ãƒˆé‹å–¶è€…ã«ã¯è‡³æ€¥ã®å¯¾ç–ã‚’æŽ¨å¥¨ã™ã‚‹ã€‚ èƒŒæ™¯ æºå¸¯é›»è©±ã®ã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã¨ã¯ã€ã‚±ãƒ¼ã‚¿ã‚¤ãƒ–ãƒ©ã‚¦ã‚¶ï¼ˆãŸã¨ãˆã°iãƒ¢ãƒ¼ãƒ‰ãƒ–ãƒ©ã‚¦ã‚¶ï¼‰ã«ç”¨æ„ã•ã‚ŒãŸå¥‘ç´„è€…å›ºæœ‰IDã‚’åˆ©ç”¨ã—ãŸç°¡æ˜“çš„ãªèªè¨¼ã§ã‚ã‚Šã€ãƒ¦ãƒ¼ã‚¶ãŒIDã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã—ãªãã¦ã‚‚èªè¨¼ãŒå¯èƒ½ã¨ãªã‚‹ã€‚iãƒ¢ãƒ¼ãƒ‰IDã¯ã€NTTãƒ‰ã‚³ãƒ¢ã®æä¾›ã™ã‚‹å¥‘ç´„è€…å›ºæœ‰IDã®ä¸€ç¨®ã§ã€URLã«guid=ONã¨ã„ã†ã‚¯ã‚¨ãƒªã‚¹ãƒˆãƒªãƒ³ã‚°ã‚’å«ã‚ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ç«¯æœ«å›ºæœ‰ã®7æ¡ã®IDãŒWebã‚µãƒ¼ãƒã«é€å‡ºã•ã‚Œã‚‹ã€‚ç¾åœ¨ã€iãƒ¢
shny_wd 2009/11/24
web

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

èªè¨¼

mobile

security

docomo
ãƒªãƒ³ã‚¯
Site Under Maintenance
We'll be back soon! Our site is currently undergoing maintenance. Please check back later.
shny_wd 2009/10/11
ã¾ã¨ã‚

ã‚µãƒ¼ãƒç®¡ç†

*ã‚ã¨ã§èªã‚€

ã‚ã¨ã§è©¦ã™

apache

web

Security

centos
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ã€ŒWPA-TKIPãŒ1åˆ†ã§ç ´ã‚‰ã‚Œã‚‹ã€ã¯èª¤å ±
â– ã€ŒWPA-TKIPãŒ1åˆ†ã§ç ´ã‚‰ã‚Œã‚‹ã€ã¯èª¤å ± å…ˆæœˆã€ç„¡ç·šLANã®WPA-TKIPãŒ1åˆ†ä»¥å†…ã«ç ´ã‚‰ã‚Œã‚‹ã¨ã„ã†å ±é“ãŒã‚ã‚Šã€è©±é¡Œã¨ãªã£ãŸã€‚ ç„¡ç·šLANã®WPAã‚’ã‚ãšã‹æ•°ç§’ã‹ã‚‰æ•°åç§’ã§çªç ´ã™ã‚‹æ–°ã—ã„æ”»æ’ƒæ–¹æ³•ãŒç™»å ´ã€æ—©æœŸã«WPA2ã«ç§»è¡Œã™ã‚‹å¿…è¦ã‚ã‚Š, Gigazine, 2009å¹´8æœˆ5æ—¥ ä»Šå›žã®æ–¹æ³•ã¯æ˜¨å¹´11æœˆã«ç™ºè¡¨ã•ã‚ŒãŸã€ŒTews-Beckæ”»æ’ƒã€ï¼ˆç•¥ï¼‰ãŒQoSåˆ¶å¾¡ã‚’åˆ©ç”¨ã™ã‚‹æ©Ÿå™¨ã«é™å®šã•ã‚Œã‚‹ã‚‚ã®ã§ã‚ã‚Šã€éµã®å°Žå‡ºã«15åˆ†ã‚‚ã®æ™‚é–“ãŒå¿…è¦ã§ã‚ã£ãŸã®ã«å¯¾ã—ã¦ã€ã‚ãšã‹æ•°ç§’ã‹ã‚‰æ•°åç§’ã§å°Žå‡ºã—ã¦ã—ã¾ã†ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ã‚‚ã®ã€‚ï¼ˆç•¥ï¼‰ ä»Šå›žç™ºè¡¨ã•ã‚Œã‚‹æ–¹æ³•ã§ã¯ã€TKIPã«ãŠã‘ã‚‹å®šæœŸçš„ã«å¤‰æ›´ã•ã‚Œã‚‹éµã«ã¤ã„ã¦ã€TKIPã®ãƒ—ãƒãƒˆã‚³ãƒ«ã®æ–°ãŸãªè„†å¼±æ€§ã‚’åˆ©ç”¨ã—ã¦æ¥µã‚ã¦çŸæ™‚é–“ï¼ˆæ•°ç§’ã‹ã‚‰æ•°åç§’ï¼‰ã§å°Žå‡ºã—ã€ãã®éµã‚’åŠ¹çŽ‡ã‚ˆãåˆ©ç”¨ã™ã‚‹æ–¹æ³•ã¨ã—ã¦æ–°ãŸãªä¸é–“è€…æ”»æ’ƒã‚’é–‹ç™ºã—ãŸã¨ã®ã“ã¨ã€‚ ç„¡ç·šLANã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ŒWPAã€ã‚’ã‚ãšã‹1åˆ†ä»¥å†…ã§ç ´ã‚‹æ‰‹
shny_wd 2009/09/28
*ã‚ã¨ã§èªã‚€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ç„¡ç·šLAN

Security
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸