Build and implement a single sign-on solutionIBM Developer is your one-stop location for getting hands-on training and learning in-demand skills on relevant technologies such as generative AI, data science, AI, and open source.
é ‘ä¸ˆãªã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒžãƒ‹ãƒ•ã‚§ã‚¹ãƒˆ
原文(投稿日：2010/06/22)ã¸ã®ãƒªãƒ³ã‚¯ ã»ã¨ã‚“ã©ã®ã‚½ãƒ•ãƒˆãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã§ã¯ã€ã‚»ã‚ュリティã¯è¦‹è½ã•ã‚Œã¦ã„ã‚‹ã‹ã€å¾Œä»˜ã‘ã«ãªã£ã¦ã„ã‚‹ã“ã¨ãŒå¤šã„。ã»ã¨ã‚“ã©ã®é–‹ç™ºãƒãƒ¼ãƒ ã¯ã€ã‚»ã‚ュリティ侵害ãŒèµ·ã“ã‚‹ã®ã‚’é¿ã‘ã‚‹ãŸã‚ã«æ™‚間を費やã™ã‚ˆã‚Šã‚‚ã€æœºä¸Šã®æ©Ÿèƒ½ã‚’実ç¾ã™ã‚‹ã“ã¨ã«æ³¨åŠ›ã™ã‚‹ã€‚ãã“ã§é–‹ç™ºè€…ãŒé ‘丈ãªã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®é‡è¦æ€§ã¨ãã“ã¸è‡³ã‚‹é“ç‹ã«ã¤ã„ã¦è‡ªè¦šã™ã‚‹ã®ã«å½¹ç«‹ã¤ã‚ˆã†ã€Joshua Cormanæ°ã€David Riceæ°ã€Jeff Williamsæ°ã¯ã€Œé ‘丈ãªã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒžãƒ‹ãƒ•ã‚§ã‚¹ãƒˆï¼ˆRugged Software Manifesto）ã€ã‚’ç–定ã—ãŸã€‚ é ‘ä¸ˆã¨ã¯å£Šã‚Œãªã„ã“ã¨ã‚’æ„味ã—ã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ã€ã¨Bill Breneræ°ã¯èªžã‚‹ã€‚ã“ã‚Œã¯ä»¥å‰ã‚ˆã‚Šã‚‚ãšã£ã¨æ”¹å–„ã•ã‚Œã‚‹ã“ã¨ã‚’æ„味ã—ã¦ã„る。ã“ã‚Œã¯å …牢性ã¨æ”¹å–„ã«å¯¾ã™ã‚‹ã‚³ãƒŸãƒƒãƒˆãƒ¡ãƒ³ãƒˆã«åŸºã¥ã„ã¦ã„ãŸã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢é–‹ç™ºè€…ã®é–“ã«ã€æ–°ãŸãªæ–‡åŒ–を築ãã‚‚ã®ã 。Billæ°ã¯ã“ã†ä»˜ã‘åŠ ãˆ
WatchGuard Fireware OS
独自OSã«çµ±åˆã•ã‚ŒãŸ ベストオブブリードã®ã‚»ã‚ュリティ技術 最新ã®æŠ€è¡“を駆使ã—ãŸãƒ™ã‚¹ãƒˆã‚ªãƒ–ブリードã®ã‚»ã‚ュリティ機能群ãŒã€ã‚¦ã‚©ãƒƒãƒã‚¬ãƒ¼ãƒ‰ã®ç‹¬è‡ªOSã§ã‚ã‚‹Firewareã§1å°ã®ã‚¢ãƒ—ライアンスã«çµ±åˆã•ã‚Œã¦ã„ã¾ã™ã€‚ モジュール形å¼ã‚’使用ã—ã¦ãŠã‚Šã€å¿…è¦ã«å¿œã˜ã¦å„機能ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã‚’購入ã™ã‚‹ã“ã¨ã§ã™ãã«åˆ©ç”¨é–‹å§‹ã§ãã¾ã™ã€‚ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚»ã‚ュリティã®é©æ–°çš„ãªã‚¢ãƒ—ãƒãƒ¼ãƒ ã‚»ã‚ュリティã®æ”»æ’ƒæ‰‹æ³•ã€ãã—ã¦ãã‚Œã«å¯¾å‡¦ã™ã‚‹é˜²å¾¡æŠ€è¡“も刻一刻ã¨é€²åŒ–ã—ã¦ã„ã¾ã™ã€‚多ãã®ã‚»ã‚ュリティ対ç–ã¯ã€å¤šãã®é–‹ç™ºè²»ç”¨ã¨ãƒªã‚½ãƒ¼ã‚¹ã‚’投入ã—ã¦ç‹¬è‡ªæŠ€è¡“ã®æ”¹è‰¯ã«å–り組んã§ã„ã¾ã™ã€‚ ウォッãƒã‚¬ãƒ¼ãƒ‰ã¯ã€æ–°ãŸãªã‚»ã‚ュリティ技術ã«æŸ”軟ã«å¯¾å¿œå¯èƒ½ãªã‚»ã‚ュリティプラットフォームã®ã‚¢ãƒ—ãƒãƒ¼ãƒã‚’展開ã—ã¦ã„ã¾ã™ã€‚å°†æ¥èµ·ã“ã‚Šã†ã‚‹æ–°ãŸãªè„…å¨ã«æŸ”軟ã«å¯¾å¿œå¯èƒ½ãªFireware® OS(オペレーティングシステム）を進化ã•ã›ã€æ§˜ã€…ãªæ–°ãŸãªã‚»ã‚ュリティ対ç–ã«å¯¾å¿œã—ã¾ã™ã€‚以
クライアントãƒã‚°ãŠã‚ˆã³è³‡ç”£ç®¡ç†ãƒ„ール｜コンテンツウォッãƒãƒ£ãƒ¼ã‚¹ãƒžãƒ¼ãƒˆï¼’｜インテリジェントワークス
Macã¨Windowsã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆOSã®æ··åœ¨ç’°å¢ƒä¸‹ã§ã‚‚ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ウォッãƒãƒ£ãƒ¼ãƒ»ã‚¹ãƒžãƒ¼ãƒˆãŒã‚ã‚Œã°å„クライアントã®å„種æ“作ãƒã‚°ã€IT資産管ç†ã€ãƒ‡ãƒã‚¤ã‚¹åˆ¶å¾¡ã®ä¸€å…ƒç®¡ç†ã¨ç›£è¦–ãŒå¯èƒ½ã§ã™ã€‚ã‚‚ã¡ã‚ã‚“VPNã‚„ãƒãƒ¼ãƒãƒ£ãƒ«ãƒžã‚·ãƒ³ã«ã‚‚対応。Contents Watcher Smart 2 ã®ç‰¹é•· Mac OS Xã¨Windows OS両対応ã®IT資産管ç†ã¨ãƒã‚°ç›£è¦–ã®æƒ…å ±ã‚»ã‚ュリティ管ç†ãƒ„ール æƒ…å ±ã‚»ã‚ュリティã®ç®¡ç†ã¯ã€ãƒ—ライãƒã‚·ãƒ¼ãƒžãƒ¼ã‚¯ã‚„日本版SOX法ã«å¯¾å¿œç¾©å‹™ã®ã‚ã‚‹ä¼æ¥ã«ã¨ã£ã¦ã¯éµå®ˆã™ã¹ãè¦ä»¶ã«ãªã£ã¦ã„ã¾ã™ã€‚ 本製å“ã¯Mac OS XåŠã³ Windows OSã«åŒæ™‚対応ã—ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆæ©Ÿå™¨ã®ãƒ—ラットフォームをé™å®šã—ã¾ã›ã‚“。 ãã®ãŸã‚ã€å…¨ç¤¾çš„ãªæƒ…å ±ã‚»ã‚ュリティã®ç®¡ç†ã‚’一元的ã«å®Ÿç¾ã§ãã‚‹ã“ã¨ã‹ã‚‰ã€Macã‚’æ¥å‹™ã«ä½¿ç”¨ã™ã‚‹ãŠå®¢æ§˜ã‹ã‚‰ã®åˆ©ç”¨ãŒå¢—ãˆç¶šã‘ã€ ä¸€éƒ¨ä¸Šå ´ä¼æ¥æ§˜ã‚’始ã‚ã€ã‚»ã‚ュリティæ„è˜ã®é«˜ã„組織ã€æˆ–ã„
0x000000 Hacking & Security
is a totally awesome idea still being worked on. Check back later.
PHP: rfc:taint
This is a preliminary implementation of support for tainted variables in PHP. The goal is to help PHP application programmers find and eliminate opportunities for HTML script injection, SQL or shell code injection, or PHP control hijacking, before other people can exploit them. The implementation provides taint support for basic operators and for a selection of built-functions and extensions. A li
Linuxカーãƒãƒ«2.6ç³»ã«root権é™ã‚’奪ã‚れる脆弱性ãŒç™ºè¦‹ã•ã‚Œã‚‹ | スラド Linux
Linuxカーãƒãƒ«2.6.17ãŒå…¬é–‹ã•ã‚ŒãŸã®ãŒã€ã¾ãããã‚‹ã¨ä¸€çž¬ã§åˆ†ã‹ã‚‹ã®ã§ã™ãŒ 昨年……ã˜ã‚ƒãªã„や一昨年ã®2006å¹´6月17æ—¥ã§ã™ã。(ã„ã¾ã ã«2007年脳) 2.6.24.1ã¯ä»Šå¹´ã®2月8æ—¥(ã£ã¦ã¾ã 3æ—¥å‰ã‹)ã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸæœ€æ–°ç‰ˆã€‚ ã§ã€The Linux Kernel Archives [kernel.org]を見るã¨2.6.25 RC版ãŒå‡ºã¦ã„る模様。 å‚考:2.6.25 RC版ã®Changelog [kernel.org] ã“ã‚Œã«ã¯æœ¬ä»¶ã®ä¿®æ£ã‚‚å«ã¾ã‚Œã¦ã„るよã†ã§ã™ã€‚ 以下ã«Changelogã‹ã‚‰è©²å½“部分ã¨æ€ã‚れる部分をã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ç‰ã®è¡Œã¯å‰Šé™¤ã—ã¦å¼•ç”¨ã€‚ >commit 8811930dc74a503415b35c4a79d14fb0b408a361 >Date: Fri Feb 8 08:49:14 2008 -0800 > > splice: missing user p
PDF：弊社元従æ¥å“¡ã«ã‚ˆã‚‹å€‹äººçš„ãªã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒ¡ãƒ‡ã‚£ã‚¢ã®ä¸é©åˆ‡åˆ©ç”¨ãŒã‚ã£ãŸã¨ã•ã‚Œã¦ã„る件ã«ã¤ã„ã¦ï¼šã‚¨ãƒ•ã‚»ã‚ãƒ¥ã‚¢æ ªå¼ä¼šç¤¾
F-Secureã¯ä¸–ç•Œä¸ã§3,000万人以上ã®äººã€…ã«ä¿¡é ¼ã•ã‚Œã¦ã„ã¾ã™ã€‚ãªãœãªã‚‰ã€35å¹´é–“ã€å®¶æ—ã®ãƒ‡ãƒã‚¤ã‚¹ã€ãƒ—ライãƒã‚·ãƒ¼ã€ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã€ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ãƒ©ã‚¤ãƒ•ã‚’ä¿è·ã™ã‚‹ã“ã¨ã‚’ç°¡å˜ã«ã—ã¦ããŸã‹ã‚‰ã§ã™ã€‚
Character Encoding and XSS, by Chris Shiflett
Photo Location Maroon Bells, CO 39.0508° N 107.0208° W “I don’t think any human being is truly free. We’re so tethered to our own insecurities and hampered by our fears and our prejudices. I think it’s human nature that we’re never going to be free.†· EMILY SALIERS 29 May 2007 While lamenting Ronaldinho's red card and writing an overdue column for php|architect this weekend, I took a break to rea
Just Racing | Horse, Greyhound and Harness Racing News, Tips and Bets
*Palmerbet 2nd Racing bet. Excl NSW & WA. T&C’s apply.
mod_securityã§Webサーãƒã‚’守る(第1回)
一体ã€WebサイトをæŒãŸãªã„組織ã¯ä»Šã©ã‚Œãらã„ã‚ã‚‹ã§ã—ょã†ã‹ã€‚ Webサーãƒã‚’自å‰ã§æŒã¤ã€ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã‚µãƒ¼ãƒ“スを利用ã™ã‚‹ã€ãªã©é‹ç”¨å½¢æ…‹ã¯ã•ã¾ã–ã¾ã§ã™ãŒã€WebサイトをæŒãŸãªã„組織ã¯ã»ã¨ã‚“ã©ãªã„ã¨æ€ãˆã‚‹ç¨‹ã« Webã¯æ™®åŠã—ã¦ã„ã¾ã™ã€‚ ファイアウォールã¯ã»ã¨ã‚“ã©ã®çµ„ç¹”ã§å°Žå…¥æ¸ˆã¿ã§ã‚ã‚Šã€å¤šãã®Webサーãƒã¯ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã®ä¸ã§é‹ç”¨ã•ã‚Œã¦ã„ã‚‹ã®ãŒä¸€èˆ¬çš„ã§ã™ã€‚ ã—ã‹ã—ãªãŒã‚‰ã€æœ€ã‚‚æ™®åŠã—ã¦ã„るファイアウォールã¯IPアドレスã€ãƒãƒ¼ãƒˆãƒ¬ãƒ™ãƒ«ã§ã®ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã§ã™ã€‚ã“ã®æ–¹æ³•ã§ã®ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã§ã¯ã€è¨±å¯ã—ã¦ã„ãªã„サービスãŒæŒã¤è„†å¼±æ€§ã‚’ç‹™ã£ãŸæ”»æ’ƒã‚’阻æ¢ã§ãã‚‹ãŸã‚有用ã§ã¯ã‚ã‚Šã¾ã™ãŒã€HTTPを許å¯ã—ã¦ã„ã‚‹å ´åˆWeb自体ã¸ã®æ”»æ’ƒã«å¯¾ã—ã¦ç„¡åŠ›ã§ã™ã€‚一方ã§ã€HTTPã‚’ä¸è¨±å¯ã«ã—ãŸå ´åˆã«ã¯Webサイトã¸ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ã¦ã—ã¾ã†ãŸã‚本æ¥ã®ç›®çš„ã‚’é”æˆã§ãã¾ã›ã‚“。ã—ã‹ã‚‚ã“ã“æ•°å¹´ã€Webサイトを狙ã£ãŸãƒ¯ãƒ¼ãƒ ã‚„ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã¯
MOPB Exploits taken down - PHP Security Blog
Unfortunately I had to take down all the proof of concept exploits that were developed during the Month of PHP Bugs. The reason for this is a new law in germany that is official since today. This new law renders the creation and distribution of software illegal that could be used by someone to break into a computer system or could be used to prepare a break in. This includes port scanners like nma
TAKESAKO @ Yet another Cybozu Labs: LLé‚ãŠç–²ã‚Œæ§˜ã§ã—ãŸ[LLSpirit]
LLé‚ã€å‚åŠ ã•ã‚ŒãŸã¿ãªã•ã‚“ãŠç–²ã‚Œæ§˜ã§ã—ãŸã€‚ã¿ãªã•ã‚“ã®ãŠé™°ã§ç„¡äº‹ã‚¤ãƒ™ãƒ³ãƒˆã‚’終了ã™ã‚‹ã“ã¨ãŒã§ãã¾ã—ãŸã€‚ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ å‰åŠã®20æžšã ã‘ã§ã™ãŒã€Flickrã«å†™çœŸã‚’アップãƒãƒ¼ãƒ‰ã—ã¾ã—ãŸã€‚ 詳ã—ã„感想ã¯ã®ã¡ã»ã©ã€‚ã„ã‚ã„ã‚æ–°ã—ã„刺激をå—ã‘ã¾ã—ãŸã€‚ ã¨ã‚Šã„ããŽã€Lightning Talksã®ç™ºè¡¨è³‡æ–™ï¼ˆâ€»ç”»åƒã¯ã‚¤ãƒ¡ãƒ¼ã‚¸ã§ã—ãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ï¼‰ã‚’公開ã—ã¾ã™ã€‚ ã‚¤ãƒ¡ãƒ¼ã‚¸ãƒ•ã‚¡ã‚¤ãƒˆï¼ - ç”»åƒã«åŸ‹ã‚è¾¼ã¾ã‚ŒãŸPHP・XSS攻撃コードã¨æˆ¦ã†5ã¤ã®æ–¹æ³• - 11 竹迫良範（Shibuya Perl Mongers） http://wafful.org/mod_imagefight/ImageFight-LL2007.ppt 先日ã€PHPã®æ”»æ’ƒã‚³ãƒ¼ãƒ‰ãŒéš ã•ã‚ŒãŸç”»åƒãƒ•ã‚¡ã‚¤ãƒ«ãŒã€å¤§æ‰‹ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã‚µã‚¤ãƒˆã§ç™ºè¦‹ã•ã‚ŒãŸã¨ã®å ±é“ãŒãªã•ã‚Œã¾ã—ãŸã€‚GIF,PNG,JPEG,BMPå½¢å¼ã®ç”»åƒãƒ•ã‚¡ã‚¤ãƒ«ã«ã¯ã€PHPã®RFI攻撃ã§ä½¿ç”¨ã•
httpOnlyã‚’Firefoxã§
(Last Updated On: )PHP 5.2.0ã®setcookie/setrawcookie関数ã‹ã‚‰httpOnly属性をクッã‚ーã«ã¤ã‘る事ãŒã§ãるよã†ã«ãªã‚Šã¾ã—ãŸã€‚httpOnly属性ã¯MicrosoftãŒç‹¬è‡ªã«æ‹¡å¼µã—ãŸä»•æ§˜ã§ã€JavaScriptã‹ã‚‰ã‚¯ãƒƒã‚ーã®å€¤ã‚’使用ã§ããªãã™ã‚‹æ©Ÿèƒ½ã§ã™ã€‚httpsã§ã®ã¿ã‚¯ãƒƒã‚ーをé€ä¿¡ã™ã‚‹secure属性ã«ä¼¼ã¦ã„ã¾ã™ã€‚ Microsoftã®ç‹¬è‡ªæ‹¡å¼µãªã®ã§IEã§ã¯åˆ©ç”¨ã§ãã¾ã—ãŸãŒFirefoxã§ã¯åˆ©ç”¨ã§ãã¾ã›ã‚“。ã—ã‹ã—ã€ã‚¢ãƒ‰ã‚ªãƒ³ã‚’使用ã™ã‚‹ã“ã¨ã§httpOnly属性をFirefoxã§ã‚‚利用ã§ãるよã†ã§ã™ã€‚ httpOnly by Stefan Esser Adds httpOnly cookie support to Firefox by encrypting cookies marked as httpOnly on the browser s
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Google Code Archive - Long-term storage for Google Code Project Hosting.
Google Code Archive - Long-term storage for Google Code Project Hosting.
Confixx
Google Code Archive - Long-term storage for Google Code Project Hosting.
脆弱性診æ–ã¨ã‚¯ãƒ©ã‚¦ãƒ‰åž‹WAFã®ã‚»ã‚ュアスカイ・テクノãƒã‚¸ãƒ¼ï¼ˆSST）
TechCrunch Japanese アーカイブ » Facebookã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãŒãƒªãƒ¼ã‚¯
{{#tags}}- {{label}}
{{/tags}}