[B! security] snj14ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

snj14 id:snj14

securityã«é–¢ã™ã‚‹snj14ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Re:OpenID account security - æ—¥å‘å¤ç‰¹æ®Šå¿œæ´éƒ¨éšŠ
è‡ªåˆ†ç”¨ã®ãƒ¡ãƒ¢ã§ã™ã€‚ ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®è‡ªå‹•åŽé›† OpenIDã®å ´åˆã¯IdentifierãŒURLãªã®ã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼åã®åŽé›†ã¯ä¾‹ãˆã°Googleæ¤œç´¢ãªã©ã§è¡Œãˆã‚‹ã€‚ http://www.google.co.jp/search?q=allint itle%3AIdentity+Page+for ä¾‹ãˆã°ã“ã†ã„ã†æ„Ÿã˜ã§ã™ãã€‚ä»–ã®OpenID Providerã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®Identifierãƒšãƒ¼ã‚¸ã‚‚è¦å‰‡æ€§ã‚‚è¦‹å‡ºãã†ã¨æ€ãˆã°å‡ºæ¥ã‚‹ã¯ãšã€‚ ã“ã†ã—ã¦é›†ã‚ãŸIDã«å¯¾ã—ã¦å®Ÿéš›ã«è¾žæ›¸ã‚¢ã‚¿ãƒƒã‚¯ãªã©æŽ›ã‘ã‚‹äº‹ãŒå‡ºæ¥ã‚‹ã€‚ å°‘ãªãã¨ã‚‚ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒã‚°ã‚¤ãƒ³ãŒè¡Œã‚ã‚Œã‚‹ä»•çµ„ã¿ã®å ´åˆã ã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼åãŒæ—¥ã®ç›®ã«æ™’ã•ã‚Œã¦ã„ã‚‹çŠ¶æ³ã¯ä½™ã‚Šã‚ˆã‚ã—ããªã„ã€‚ å¯¾ç–ã¨ã—ã¦ã¯ã€å½“ãŸã‚Šå‰ãªäº‹ã‚‚ã‚ã‚‹ã‘ã©ã€ JOE*1ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’è¨±å¯ã—ãªã„ ãƒ–ãƒ«ãƒ¼ãƒˆãƒ•ã‚©ãƒ¼ã‚¹ã‚¢ã‚¿ãƒƒã‚¯ã®å¯¾ç–ã¨ã—ã¦CAPTCHAã‚’ä½¿ç”¨ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ã®Identifier URLã«å¯¾ã™ã‚‹ã‚¤ãƒ³ãƒ‡
snj14 2007/10/21
openid

security
ãƒªãƒ³ã‚¯
mputã®æ—¥è¨˜ã€‚ - , rootã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯æ½°ã•ãªã„ã»ã†ãŒã„ã„ã¨æ€ã†ä»¶
snj14 2007/09/12
server

security

linux
ãƒªãƒ³ã‚¯
ãŸã£ãŸ2è¡Œã§ã§ãã‚‹Webã‚µãƒ¼ãƒé˜²å¾¡ã®ã€Œå¿ƒç†æˆ¦ã€ âˆ’ ï¼ IT
é«˜ã„å£ã‚’ä½œã‚‹ã ã‘ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã§ã¯ãªã„ã€‚æ”»æ’ƒè€…ã®å¿ƒç†ã‚’è€ƒãˆã€å½¼ã‚‰ã«é¸ã°ã‚Œãªã„ã‚·ã‚¹ãƒ†ãƒ ä½œã‚Šã‚‚å¤§ããªåŠ¹æžœãŒæœ›ã‚ã‚‹ã®ã§ã¯ãªã„ã ã‚ã†ã‹ã€‚æœ¬é€£è¼‰ã§ã¯è¦–ç‚¹ã‚’å¤‰ãˆã€æ”»æ’ƒè€…ã«é¸ã°ã‚Œãªã„ãŸã‚ã«ã§ãã‚‹ã€ã»ã‚“ã®ã¡ã‚‡ã£ã¨ã—ãŸå¯¾ç–ã‚’å–ã‚Šä¸Šã’ã‚‹ã€‚ï¼ˆç·¨é›†éƒ¨ï¼‰ å¯¾ç–ã‚’ã‚‚ã†ä¸€æ©é€²ã‚ã‚‹ãŸã‚ã®æ–°ãŸãªè¦–ç‚¹ã‚’æŒã¨ã† ã‚·ã‚¹ãƒ†ãƒ ã¯å‹•ãã ã‘ã§ã¯ãªãã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ãŒãªã•ã‚Œã¦ã„ãªã‘ã‚Œã°ã„ã‘ãªã„ã¨ã„ã‚ã‚Œå§‹ã‚ã¦ä¹…ã—ã„ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ã„ã†è¨€è‘‰ã‚’èžãã¨ã€ç‰©ç†çš„ãªã‚‚ã®ã ã‘ã§ã¯ãªãã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’é€£æƒ³ã™ã‚‹ã»ã©ã®èªçŸ¥åº¦ã‚‚å¾—ã¦ã„ã‚‹ã®ã§ã¯ãªã„ã ã‚ã†ã‹ã€‚ å€‹äººå®…ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ç’°å¢ƒã«ã‚‚ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«æ©Ÿèƒ½ã‚’æè¼‰ã—ãŸãƒ«ãƒ¼ã‚¿ãŒã‚ã‚Šã€PC1å°1å°ã«ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ã‚½ãƒ•ãƒˆãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã€‚ã„ã¾ã¨ãªã£ã¦ã¯çã—ããªãã€ã‚€ã—ã‚å½“ãŸã‚Šå‰ã¨ã‚‚æ€ãˆã‚‹ã‚ˆã†ã«ãªã£ãŸã€‚ ä¸€æ–¹ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«å˜åœ¨ã™ã‚‹è„…å¨ã¨ã„ã†ã¨ã€ã‚¦ã‚¤ãƒ«ã‚¹ã€ãƒ¯ãƒ¼ãƒ ã€ãƒœãƒƒãƒˆã€ã‚µã‚¤ãƒˆã®æ”¹ã–ã‚“ã€å€‹äººæƒ…å ±
snj14 2007/09/12
apache

security
ãƒªãƒ³ã‚¯
ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼(Hatena) - Port801 (åˆå¿ƒè€…å‘ã‘)ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š Hamachiya2ç·¨
ã“ã‚“ã«ã¡ã¯ã“ã‚“ã«ã¡ã¯ï¼ï¼ å…ˆæ—¥ã€Twitterã§å£°ã‚’ã‹ã‘ã¦ã‚‚ã‚‰ã£ã¦ã€ ç¬¬ä¸€å›ž Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼šã£ã¦ã„ã†ã®ã«å‚åŠ ã—ã¦ããŸã‚ˆï¼ï¼ (â†‘pw: security) ãã“ã§ã€ã™ã“ã—å–‹ã£ãŸæ™‚ã®ãƒ“ãƒ‡ã‚ªã‚’é ‚ã„ãŸã®ã§ã€ã‚‚ã£ãŸã„ãªã„ã®ã§å…¬é–‹ã—ã¡ã‚ƒã„ã¾ã™ãï¼ ãƒ—ãƒ¬ã‚¼ãƒ³ã ã¨ã‹ãã†ã„ã†ã®æ…£ã‚Œã¦ãªãã¦ã€ãã ãã ãªæ„Ÿã˜ã ã‘ã©ã€ ã‚ˆã‹ã£ãŸã‚‰ä½•ã‹ã®å‚è€ƒã«ã—ãŸã‚Šã€æ™©ã”é£¯ã®ãŠã‹ãšã«ã—ã¦ãã ã•ã„ï¼žï¼œ Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®1 (httpç·¨) Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®2 (CSRFç·¨1) Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®3 (CSRFç·¨2) Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®4 (XSSç·¨1) Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®5
snj14 2007/09/12
security

web
ãƒªãƒ³ã‚¯
1