[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] tmsanrinshaã®ãƒ

tmsanrinsha id:tmsanrinsha

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹tmsanrinshaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (29)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ä»ŠãªãœHTTPSåŒ–ãªã®ã‹ï¼Ÿã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ä¿¡é ¼æ€§ã®ãŸã‚ã«ã€æŠ€è¡“è€…ãŒçŸ¥ã£ã¦ãŠããŸã„TLSã®æ´å²ã¨æŠ€è¡“èƒŒæ™¯
ä»ŠãªãœHTTPSåŒ–ãªã®ã‹ï¼Ÿã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ä¿¡é ¼æ€§ã®ãŸã‚ã«ã€æŠ€è¡“è€…ãŒçŸ¥ã£ã¦ãŠããŸã„TLSã®æ´å²ã¨æŠ€è¡“èƒŒæ™¯ Webã‚µã‚¤ãƒˆã‚’HTTPSåŒ–ã™ã‚‹æœ€ã‚‚å¤§ããªç†ç”±ã¯ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ä¿¡é ¼æ€§ã‚’ç¶æŒã™ã‚‹ã“ã¨ã§ã™ã€‚TLSæŠ€è¡“ã®ç¾çŠ¶ã‚„ã€å®‰å…¨ãªHTTPSåŒ–ã«ä½•ãŒå¿…è¦ã‹ã‚’ã€ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®å¤§æ´¥ç¹æ¨¹æ°ãŒè§£èª¬ã—ã¾ã™ã€‚ ã€ŒSEOå¯¾ç–ã®ãŸã‚ã«ã¯ã€Webã‚µã‚¤ãƒˆã‚’HTTPSåŒ–ã—ãªã„ã¨ã„ã‘ãªã„ã€‚ã€ â€”â€” ãã†èžã‹ã•ã‚Œã¦å¯¾å¿œã‚’è¿«ã‚‰ã‚Œã¦ã„ã‚‹æŠ€è¡“è€…ã®æ–¹ã‚‚å¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ï¼Ÿ ç¢ºã‹ã«ã€Googleã¯ã€ŒHTTPSãƒšãƒ¼ã‚¸ãŒå„ªå…ˆçš„ã«ã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ã«ç™»éŒ²ã•ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€ã¨è¡¨æ˜Žã—ã€HTTPSåŒ–ã•ã‚ŒãŸWebã‚µã‚¤ãƒˆãŒåŒç¤¾ã®æ¤œç´¢çµæžœã§æœ‰åˆ©ã«ãªã‚‹ã¨ç¤ºå”†ã—ã¦ã„ã¾ã™ã€‚ã¯ãŸã—ã¦ã€Webã‚µã‚¤ãƒˆã®HTTPSåŒ–ãŒå¿…è¦ãªç†ç”±ã¯ã€SEOå¯¾ç–ã ã‘ãªã®ã§ã—ã‚‡ã†ã‹ï¼Ÿ ãã—ã¦ã€ãã‚Œã¯Googleã¨ã„ã†ä¸€ç¤¾ã ã‘ã®æ„å‘ã§æŽ¨å¥¨ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãªã®ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã“ã†ã—ãŸç–‘å•ã«ç”
tmsanrinsha 2018/02/18
https

tls

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Yahoo! JAPAN

å¤§æ´¥ ç¹æ¨¹
ãƒªãƒ³ã‚¯
ä»ŠãªãœHTTPSåŒ–ãªã®ã‹ï¼Ÿã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ä¿¡é ¼æ€§ã®ãŸã‚ã«ã€æŠ€è¡“è€…ãŒçŸ¥ã£ã¦ãŠããŸã„TLSã®æ´å²ã¨æŠ€è¡“èƒŒæ™¯
ã€å¤‰æ›´å±¥æ´ 2018å¹´2æœˆ15æ—¥ã€‘å½“åˆã®è¨˜äº‹ã‚¿ã‚¤ãƒˆãƒ«ã¯ã€Œã„ã¾ãªãœHTTPSåŒ–ãªã®ã‹ï¼Ÿ æŠ€è¡“è€…ãŒçŸ¥ã£ã¦ãŠããŸã„SEOã‚ˆã‚Šãšã£ã¨å¤§åˆ‡ãªã“ã¨ â€• TLSã®æ´å²ã¨æŠ€è¡“èƒŒæ™¯ã€ã§ã—ãŸãŒã€ç¾è¡Œã®ã‚‚ã®ã«å¤‰æ›´ã—ã¾ã—ãŸã€‚ç¾åœ¨Googleã§ã¯Webã‚µã‚¤ãƒˆã®HTTPSå¯¾å¿œã¨æ¤œç´¢çµæžœã®é–¢ä¿‚ã‚’å¼·èª¿ã—ã¦ãŠã‚‰ãšã€æœ¬è¨˜äº‹ã®è¶£æ—¨ã®ä¸€ã¤ã«ã‚‚æœ¬æ¥ã¯ç‹¬ç«‹ã—ãŸå•é¡Œã§ã‚ã‚‹SEOã¨HTTPSåŒ–ã‚’é–¢é€£ä»˜ã‘ã‚‹ã¨ã„ã†æ ¹å¼·ã„èª¤è§£ã‚’è§£ãã“ã¨ãŒã‚ã‚Šã¾ã™ãŒã€å½“åˆã®ã‚¿ã‚¤ãƒˆãƒ«ã§ã¯ã‹ãˆã£ã¦SEOã¨HTTPSã‚’é–¢é€£ä»˜ã‘ã¦èªã¾ã‚Œã‚‹ãŠãã‚ŒãŒã‚ã‚Šã€ã¾ãŸåŒæ§˜ã®æŒ‡æ‘˜ã‚‚ã„ãŸã ã„ãŸã“ã¨ã‹ã‚‰å¤‰æ›´ã„ãŸã—ã¾ã—ãŸã€‚ HTTPã¨HTTPSã¯ã€å…±ã«TCPé€šä¿¡ä¸Šã§å‹•ä½œã—ã¾ã™ã€‚ã—ãŸãŒã£ã¦ã€ã„ãšã‚Œã‚‚TCPãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã§é€šä¿¡ã‚’é–‹å§‹ã—ã¾ã™ã€‚ HTTPé€šä¿¡ã®å ´åˆã«ã¯ã€ã“ã®TCPãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ç›´å¾Œã«ã€HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®ã‚„ã‚Šå–ã‚ŠãŒå§‹ã¾ã‚Šã¾ã™ã€‚ã“ã®HTTPã®ã‚„ã‚Šå–ã‚Šã¯å¹³æ–‡é€šä¿¡ã§ã‚ã‚Šã€é€”
tmsanrinsha 2018/02/18
https

tls

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Yahoo! JAPAN
ãƒªãƒ³ã‚¯
ä¹±æ•°ç”Ÿæˆå™¨ã¨ã‚²ãƒ¼ãƒ ã¨è«œå ±æ´»å‹•ã®è©±ï½œRui Ueyama
ã‚²ãƒ¼ãƒ ãªã©ã‚’ä½œã£ã¦ã„ã‚‹ã¨ãƒ©ãƒ³ãƒ€ãƒ ã•ãŒå¿…è¦ã«ãªã‚‹ã“ã¨ãŒã‚ã‚‹ã‘ã©ã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã¯åŸºæœ¬çš„ã«æ¯Žå›žå…¨ãåŒã˜ã‚ˆã†ã«å‹•ãã®ã§ã€ä¹±æ•°ã‚’ä½œã‚Šå‡ºã™ã®ã¯ãã†ç°¡å˜ãªã“ã¨ã§ã¯ãªã„ã€‚Wi-Fiã‚„HTTPSãªã©ã®æš—å·ã¯ä¹±æ•°ã®ãƒ©ãƒ³ãƒ€ãƒ ã•ã«æœ¬è³ªçš„ã«ä¾å˜ã—ã¦ã„ã‚‹ã®ã§ã€é«˜å“è³ªãªä¹±æ•°ç”Ÿæˆã¯ä¸–ã®ä¸çš„ã«ã‚‚é‡è¦ãªè©±é¡Œã§ã‚ã‚‹ã€‚ã“ã“ã§ã¯ä¹±æ•°ç”Ÿæˆã«ã¤ã„ã¦è©±ã‚’ã—ã¦ã¿ã‚ˆã†ã€‚ ã‚²ãƒ¼ãƒ ã§ã¯ã‚¤ãƒ™ãƒ³ãƒˆãŒãƒ—ãƒ¬ã‚¤ãƒ¤ãƒ¼ã«äºˆæ¸¬ä¸å¯èƒ½ã§ã‚ã‚Œã°ã‚ˆã„ã ã‘ãªã®ã§ã€çœŸã®ä¹±æ•°åˆ—ã§ã¯ãªãæ“¬ä¼¼ä¹±æ•°åˆ—ã¨ã„ã†ã‚‚ã®ã‚’ä½¿ã†ã“ã¨ãŒå¤šã„ã€‚æ“¬ä¼¼ä¹±æ•°åˆ—ã¯äººé–“ã«ã¯ãƒ©ãƒ³ãƒ€ãƒ ã«ã¿ãˆã‚‹ã‘ã©ã€å®Ÿéš›ã¯ä½•ã‚‰ã‹ã®æ•°å¼ã«ã‚ˆã£ã¦é †ç•ªã«ç”Ÿæˆã•ã‚Œã¦ã„ã‚‹ã ã‘ã®æ•°ã®åˆ—ã§ã€åˆæœŸå€¤ã‚’æ¯Žå›žé•ã†ã‚‚ã®ã«ã—ã¦ãŠãã¨ã€äººé–“ã«ã¯æ¯Žå›žé•ã†æ•°åˆ—ãŒç”Ÿæˆã•ã‚Œã‚‹ã‚ˆã†ã«ã¿ãˆã‚‹ã€‚åˆæœŸå€¤ã«ã¯ç¾åœ¨æ™‚åˆ»ã‚’ä½¿ã†ã“ã¨ãŒå¤šã„ã€‚ç¾åœ¨æ™‚åˆ»ã¯æ™®é€šã®ç”¨é€”ã§ã¯æ¯Žå›žé•ã†ã‹ã‚‰ã ã€‚ æ˜”ã®ã‚²ãƒ¼ãƒ æ©Ÿã¯ç¾åœ¨æ™‚åˆ»ã®è¨å®šãŒãªã‹ã£ãŸã®ã§ã€ãƒ•ã‚¡ãƒŸã‚³ãƒ³ãªã©ã§ã¯ã€èµ·å‹•ã—ã¦ã‹ã‚‰ã®çµŒéŽæ™‚é–“ã‚’ç–‘ä¼¼ä¹±
tmsanrinsha 2017/11/23
ä¹±æ•°

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ãƒ¡ãƒ¢ãƒªã®ãƒ“ãƒƒãƒˆåè»¢ã‚¨ãƒ©ãƒ¼ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è©±ï½œRui Ueyama
ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ã®ã‚¨ãƒ©ãƒ¼ã§ãƒ¡ãƒ¢ãƒªã®å†…å®¹ãŒåŒ–ã‘ã¦ã—ã¾ã†ã“ã¨ãŒç¨€ã«ã‚ã‚‹ã€‚å¤§æŠµã®DRAMã‚¨ãƒ©ãƒ¼ã¯ã›ã„ãœã„ãƒ—ãƒã‚°ãƒ©ãƒ ãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã™ã‚‹çµæžœã«ãªã‚‹ã ã‘ã ãŒã€ãƒ‡ãƒ¼ã‚¿ç ´å£Šã«ãªã‚‹ã“ã¨ã‚‚ã‚ã‚Šãˆã‚‹ã—ã€æ‚ªæ„ã®ã‚ã‚‹ä½¿ã„æ–¹ã‚’ã™ã‚Œã°ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ´ã‚Šã«ä½¿ã†ã“ã¨ã‚‚ã§ãã¦ã—ã¾ã†ã€‚ã“ã“ã§ã¯ãƒ¡ãƒ¢ãƒªã‚¨ãƒ©ãƒ¼ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è©±ã‚’ã—ã‚ˆã†ã¨æ€ã†ã€‚ ãƒ¡ãƒ¢ãƒªã®ã‚¨ãƒ©ãƒ¼çŽ‡ã¯æ„å¤–ãªã»ã©é«˜ã„ã€‚ãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼ã§å¤§è¦æ¨¡ãªãƒžã‚·ãƒ³ç¾¤ã‚’å¯¾è±¡ã«å®Ÿéš›ã«è¦³æ¸¬ã—ãŸã¨ã“ã‚ã€1å¹´é–“ã«1å›žä»¥ä¸Šã®ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ãŸDIMMãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯å…¨ä½“ã®8%ã«ã®ã¼ã£ãŸãã†ã ã€‚DIMM 1æžšã«æ•°ç™¾å„„å€‹ã®ãƒ¡ãƒ¢ãƒªã‚»ãƒ«ãŒå®Ÿè£…ã•ã‚Œã¦ã„ã‚‹ã¨ã„ã£ã¦ã‚‚ã€ã“ã®ã‚¨ãƒ©ãƒ¼çŽ‡ã¯ã¡ã‚‡ã£ã¨ã³ã£ãã‚Šã™ã‚‹ãã‚‰ã„å¤§ããªæ•°å—ã§ã¯ãªã„ã ã‚ã†ã‹ï¼Ÿ ã‚µãƒ¼ãƒã§ã¯æ™®é€šã¯ã‚¨ãƒ©ãƒ¼è¨‚æ£ä»˜ãã®DIMMã‚’ä½¿ã†ã®ã§1ãƒ“ãƒƒãƒˆã®ã‚¨ãƒ©ãƒ¼ã¯å•é¡Œã«ãªã‚‰ãªã„ãŒã€ã‚¨ãƒ©ãƒ¼è¨‚æ£ã®ãªã„ã‚³ãƒ³ã‚·ãƒ¥ãƒ¼ãƒžæ©Ÿå™¨ã§ã¯ã“ã‚Œã¯å®Ÿéš›çš„ãªå•é¡Œã«ãªã‚Šãˆã‚‹ã€‚ ãƒ¡ãƒ¢ãƒªã‚¨ãƒ©ãƒ¼ã‚’åˆ©ç”¨ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ´ã‚Š
tmsanrinsha 2017/11/21
ãƒ¡ãƒ¢ãƒª

ã‚¨ãƒ©ãƒ¼

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ãƒžãƒ³ã‚·ãƒ§ãƒ³ã®LANå†…ã®ã‚²ãƒ¼ãƒˆã‚¦ã‚§ã‚¤ãŒä¸é–“è€…æ”»æ’ƒã—ã¦ãã‚‹ãŠè©± - Qiita
æ¥æ´ ç§ã¯åŽ»å¹´ã€ã¨ã‚ã‚‹è³ƒè²¸ãƒžãƒ³ã‚·ãƒ§ãƒ³ã¸å…¥å±…ã—ãŸã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¯ç„¡æ–™ã§åˆ©ç”¨å¯èƒ½ã€å£ã®ç«¯åã«LANã‚±ãƒ¼ãƒ–ãƒ«ã‚’æŒ¿ã™ã ã‘ã€‚ ãŸã ã€ã“ã®ç‰©ä»¶ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå›žç·šãŒãŠã‹ã—ã„ã€‚1æ—¥ã«1å›žãã‚‰ã„ã€Webã‚µã‚¤ãƒˆã‚’é–²è¦§ã—ã‚ˆã†ã¨ã—ãŸã¨ãã«ã€ãƒžãƒ³ã‚·ãƒ§ãƒ³ã®ç®¡ç†ä¼šç¤¾ã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã‚Œã‚‹ç¾è±¡ãŒèµ·ãã‚‹ã€‚ ã‚¤ãƒ¡ãƒ¼ã‚¸ã¨ã—ã¦ã¯ã“ã‚“ãªæ„Ÿã˜ã€‚ æ±äº¬ã®å¤©æ°—ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã¹ããªã®ã«ã€å…¥å±…è€…ç”¨Webãƒšãƒ¼ã‚¸ã®ãƒã‚°ã‚¤ãƒ³ç”»é¢ã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã‚Œã‚‹ã€‚ è…¹ãŒç«‹ã£ãŸã®ã§ä»Šå¹´ã®5æœˆãã‚‰ã„ã«ç¾è±¡ã‚’èª¿ã¹ã€åŽŸå› ãŒã‚ã‹ã£ãŸã“ã¨ã§æº€è¶³ã—ã¦ã„ãŸãŒã€é‡ã„è…°ã‚’ä¸Šã’ã¦çµæžœã‚’ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ã¦å…¬é–‹ã™ã‚‹ã€‚æ”¹ã‚ã¦Googleå…ˆç”Ÿã«èžã„ãŸã‚‰ã€åŒã˜ã“ã¨ã§æ‚©ã‚“ã§ã„ã‚‹äººãŒã„ãŸã€‚ è‡ªå‹•ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®å›žé¿æ–¹æ³•ã«ã¤ã„ã¦ã€‚ http://detail.chiebukuro.yahoo.co.jp/qa/question_detail/q10165027165 ãªãŠã€å¾Œè¿°ã®å›³ã«ã¯
tmsanrinsha 2017/10/10
ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ

network

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ ^ ã¨ $ ã§ã¯ãªã \A ã¨ \z ã‚’ä½¿ãŠã†
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ç‰ã§ã€å®Œå…¨ä¸€è‡´ã‚’ç¤ºã™ç›®çš„ã§ ^ ã¨ $ ã‚’ç”¨ã„ã‚‹æ–¹æ³•ãŒä¸€èˆ¬çš„ã§ã™ãŒã€æ£ã—ãã¯ \A ã¨ \z ã‚’ç”¨ã„ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚Rubyã®å ´åˆ ^ ã¨ $ ã‚’ä½¿ã£ã¦å®Œå…¨ä¸€è‡´ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¡Œã†ã¨è„†å¼±æ€§ãŒå…¥ã‚Šã‚„ã™ã„ãƒ¯ãƒŠã¨ãªã‚Šã¾ã™ã€‚Perlã‚„PHPã®å ´åˆã¯ã€Rubyç¨‹ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒä¸å…·åˆãŒç”Ÿã˜ã‚‹ã®ã§ \A ã¨ \z ã‚’ä½¿ã†ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†ã€‚ ã¯ã˜ã‚ã« å¤§åž£ã•ã‚“ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€ŒPHPerå‘ã‘ã€Ruby/Railsã®è½ã¨ã—ç©´ã€ã«ã¯ã€Rubyã®è½ã¨ã—ç©´ã¨ã—ã¦ã€å®Œå…¨ä¸€è‡´æ¤œç´¢ã®æŒ‡å®šã¨ã—ã¦ã€æ£è¦è¡¨ç¾ã® ^ ã¨ $ ã‚’æŒ‡å®šã™ã‚‹ä¾‹ãŒã€Ruby on Rails Security Guideã‹ã‚‰ã®å¼•ç”¨ã¨ã—ã¦ç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã®æ£è¦è¡¨ç¾ã¯ã€XSSå¯¾ç–ã¨ã—ã¦ã€httpã‚¹ã‚ãƒ¼ãƒ ã‚ã‚‹ã„ã¯httpsã‚¹ã‚ãƒ¼ãƒ ã®URLã®ã¿ã‚’è¨±å¯ã™ã‚‹æ£è¦è¡¨ç¾ã®ã¤ã‚‚ã‚Šã§ã™ã€‚ /^https?:\/\/[^\n]+$/
tmsanrinsha 2014/03/04
PHP

ruby

perl

æ£è¦è¡¨ç¾

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Validation

regex

security

xss
ãƒªãƒ³ã‚¯
Androidã®è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ã¡ã‚ƒã£ãŸè©±
JVN#53768697 Android OS ã«ãŠã„ã¦ä»»æ„ã® Java ã®ãƒ¡ã‚½ãƒƒãƒ‰ãŒå®Ÿè¡Œã•ã‚Œã‚‹è„†å¼±æ€§ ãŒå…¬è¡¨ã•ã‚Œã¾ã—ãŸã€‚ ä¸è‚–ç§ãŒæ˜¨å¹´9æœˆã«IPAã«å±Šã‘å‡ºãŸã‚‚ã®ã§ã™ã€‚ ã“ã‚Œã¾ã§ã¯æƒ…å ±éžé–‹ç¤ºä¾é ¼ãŒã‚ã£ãŸã®ã§å¤šãã‚’èªžã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã§ã—ãŸã€‚ ãƒ¤ãƒã„å†…å®¹ãªã®ã§ã¿ã‚“ãªã«æ³¨æ„å–šèµ·ã—ãŸã‹ã£ãŸã‘ã‚Œã©ãã‚ŒãŒã§ããªã„è‹¦ã—ã•ã€‚ å‘¨ã‚Šã§ICSç«¯æœ«ã‚’ä½¿ã£ã¦ã‚‹äººã‚’è¦‹ã‹ã‘ãŸã‚‰ã€Œäº‹æƒ…ã¯è¨€ãˆãªã„ã‘ã©ãƒ–ãƒ©ã‚¦ã‚¶ã«ã¯Chromeã‚’ä½¿ã£ã¦ã€‚æ¨™æº–ãƒ–ãƒ©ã‚¦ã‚¶ä½¿ã‚ãªã„ã§ã€ã¨è¨€ã†ãã‚‰ã„ã—ã‹ã§ããªãã¦ç”³ã—è¨³ã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸm(_ _)m å½“æ™‚ã®ã„ãã•ã¤ã‚’æ—¥è¨˜ã‹ã‚‰æŽ˜ã‚Šèµ·ã“ã—ã¦è¨˜éŒ²ã«æ®‹ã—ã¦ãŠããŸã„ã¨æ€ã„ã¾ã™ã€‚ 2012å¹´9æœˆ15æ—¥(åœŸ) WebViewã‚’ä½¿ã£ãŸãƒ“ã‚¸ãƒã‚¹ã‚¢ãƒ—ãƒªã®ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã‚’ä½œã‚ŠãŸã„ã¨ã„ã†æ§‹æƒ³ãŒã‚ã£ã¦ï¼ˆPhoneGapã«ã¯ãªã„ãƒ“ã‚¸ãƒã‚¹ç”¨ã®å›ºæœ‰ã®æ©Ÿèƒ½ã‚’å…¥ã‚Œã‚ˆã†ã¨æ€ã£ã¦ã€‚ãƒãƒ¼ã‚³ãƒ¼ãƒ‰ãƒªãƒ¼ãƒ€ãƒ¼ã¨ã‹å°åˆ·æ©Ÿèƒ½ã¨ã‹ï¼‰ã€ãã†ã„ãˆã° addJ
tmsanrinsha 2013/12/18
android

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
IE8ãƒ»IE9ã‚’ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã•ã›ã‚‹ã‚·ãƒ³ãƒ—ãƒ«ãªCSSã‚³ãƒ¼ãƒ‰ãŒè¦‹ã¤ã‹ã‚‹
ã‚ãšã‹1è¡Œã§Internet Explorerã‚’ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã•ã›ã¦ã—ã¾ã†ã‚³ãƒ¼ãƒ‰ã¨ã„ã†ã‚‚ã®ã‚‚ã‚ã‚Šã¾ã—ãŸãŒã€ä»Šå›žè¦‹ã¤ã‹ã£ãŸã‚³ãƒ¼ãƒ‰ã‚‚ã€CSSã«æ•°è¡Œè¶³ã™ã ã‘ã§Internet Explorer 8ã¨9ã‚’ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã•ã›ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚ Benutzer:Schinken/CSS-IE-Crash â€“ Hackerspace Bamberg - Backspace http://www.hackerspace-bamberg.de/Benutzer:Schinken/CSS-IE-Crash ãƒ‡ãƒ¢ãƒšãƒ¼ã‚¸ã¯ã“ã¡ã‚‰ã€IE8ãƒ»IE9ã ã¨ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸçž¬é–“ã«ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã—æ“ä½œä¸å¯èƒ½ã«ãªã‚‹ã®ã§æ³¨æ„ã€‚ http://schinken.github.io/experiments/iecrash/crash.html å®Ÿéš›ã«IE8ã§ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã¿ãŸã¨ã“ã‚ã€ãƒšãƒ¼ã‚¸ã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸã¨ãŸã‚“ã«ä¸€åˆ‡ã®æ“ä½œã‚’å—ã‘ä»˜ã‘ãªããªã‚Šã€ãã®ã¾ã¾
tmsanrinsha 2013/09/12
css

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
é‡‘èžæ©Ÿé–¢ã®å£åº§é›†ç´„ã‚¢ãƒ—ãƒªã®å±é™ºæ€§ã«ã¤ã„ã¦ - ãƒ—ãƒã‚°ãƒ©ãƒžã§ã‚ã‚ŠãŸã„
å…ˆæ—¥ã€éŠ€è¡Œå£åº§ã®å£åº§é›†ç´„ã®ã¨ã‚ã‚‹iOSã‚¢ãƒ—ãƒªã®è¨˜äº‹ã«ã¤ã„ã¦ã€å±é™ºã ã‚ˆãªãã¨ä½•æ°—ãªãå‘Ÿã„ãŸã‚‰ä¸ã®äººã‹ã‚‰ãƒªãƒ—ã‚’è²°ã„ã¾ã—ãŸã€‚Twitterã§å‘Ÿã„ã¦ã„ã‚‹ã®ã§ã™ãŒã€æ–‡å—ã ã‘ã§ã¯è§£ã‚Šã«ãã„ã®ã§ã¾ã¨ã‚ã¦ã¿ã¾ã™ã€‚ãŸã ã€ãã®ã‚¢ãƒ—ãƒªå›ºæœ‰ã®å•é¡Œã§ã¯ãªãã€æ§‹é€ çš„ãªå•é¡Œãªã®ã§ã‚¢ãƒ—ãƒªåã¯é–‹ç¤ºã—ã¾ã›ã‚“ã€‚ï¼ˆå®‰å…¨ãªã®ã§å®‰å¿ƒã§ã™ã¨ã„ã†è«–èª¿ã¯ã€ã©ã†ã‹ã¨æ€ã„ã¾ã™ãŒã€‚ã€‚ã€‚ï¼‰ å£åº§é›†ç´„ã‚¢ãƒ—ãƒªã®æ§‹é€ å£åº§é›†ç´„ã®ã‚¢ãƒ—ãƒªã¯ã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãƒ»ã‚¢ã‚°ãƒªã‚²ãƒ¼ã‚·ãƒ§ãƒ³(Account aggregation)ã‚µãƒ¼ãƒ“ã‚¹ã¨è¨€ã‚ã‚Œã¦ã„ã¾ã™ã€‚ã‚µãƒ¼ãƒ“ã‚¹ã®å®Ÿä½“ã¯ã€è¤‡æ•°ã®éŠ€è¡Œã®å£åº§æƒ…å ±ã¨ID,Passwordã‚’é ã‹ã‚Šã€ä»£è¡Œã§ãƒã‚°ã‚¤ãƒ³ã—ã¦çµæžœã®htmlã‚’è§£æžï¼ˆã‚¹ã‚¯ãƒ¬ã‚¤ãƒ”ãƒ³ã‚°ï¼‰ã—ã¦åˆ©ç”¨æ˜Žç´°ã‚„æ®‹é«˜ã‚’é›†ç´„ã™ã‚‹ã‚‚ã®ã§ã™ã€‚å£åº§ã¨ID,Passwordæƒ…å ±ã€è§£æžã‚¨ãƒ³ã‚¸ãƒ³ã‚’ã©ã“ã«ç½®ãã‹ã§ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆåž‹ã¨ã‚µãƒ¼ãƒåž‹ã«åˆ†é¡žã•ã‚Œã¾ã™ã€‚ ã‚µãƒ¼ãƒåž‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ ã¾ãšã‚µãƒ¼ãƒåž‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³
tmsanrinsha 2013/05/31
éŠ€è¡Œ

å£åº§

ã‚¢ãƒ—ãƒª

Webã‚µãƒ¼ãƒ“ã‚¹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾æ§˜ã«ã€Œç§˜å¯†ã®è³ªå•ã¨å›žç”ã€ã«é–¢ã—ã¦è¦æœ›ã—ã¾ã™
æ‹å•“ã€è²´ç¤¾ã¾ã™ã¾ã™ã”æ¸…æ „ã®ã“ã¨ã¨ãŠæ…¶ã³ç”³ã—ä¸Šã’ã¾ã™ã€‚æ—¥é ƒã¯æ ¼åˆ¥ã®ã”é«˜é…ã‚’è³œã‚Šã€ã‚ã¤ããŠç¤¼ç”³ã—ä¸Šã’ã¾ã™ã€‚ã•ã¦ã€ã•ã£ããã§ã™ãŒã€è¡¨é¡Œã®ä»¶ã«ã¤ã„ã¦ãŠé¡˜ã„ãŒã‚ã‚Šã€ã”é€£çµ¡å·®ã—ä¸Šã’ã¾ã—ãŸã€‚ ç§ã¯æ±äº¬éƒ½å“å·åŒºåœ¨ä½ã®è²´ç¤¾ã‚µãƒ¼ãƒ“ã‚¹ã®ä¸€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã§ã™ã€‚Yahoo! IDã®ç™»éŒ²ãŒ2001å¹´3æœˆã€Yahoo!ãƒ—ãƒ¬ãƒŸã‚¢ãƒ ã¯2003å¹´ 2æœˆã‹ã‚‰ã§ã™ã®ã§ã€åå¹´æ¥ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨è¨€ã†ã“ã¨ã«ãªã‚Šã€ç¾åœ¨ã¯ãƒ¤ãƒ•ã‚ªã‚¯ã‚„Yahoo! Boxã‚’åˆ©ç”¨ã—ã¦ãŠã‚Šã¾ã™ã€‚ã©ã†ãžã€ãŠè¦‹çŸ¥ã‚ŠãŠãã®ã»ã©ã€ã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ ã•ã¦ã€ã”é€£çµ¡å·®ã—ä¸Šã’ãŸã®ã¯ã€è¡¨é¡Œã«è¿°ã¹ãŸã‚ˆã†ã«ã€Œç§˜å¯†ã®è³ªå•ã¨å›žç”ã€ã«é–¢ã™ã‚‹è¦æœ›ã§ã™ã€‚ã¨è¨€ã„ã¾ã™ã®ã¯ã€å ±é“ãªã©ã§ã€Œç§˜å¯†ã®è³ªå•ã¨å›žç”ã€ãŒæ¼æ´©ã—ãŸã“ã¨ã‚’çŸ¥ã£ãŸã‹ã‚‰ã§ã™ã€‚ ãƒ¤ãƒ•ãƒ¼ã¯ï¼’ï¼“æ—¥ã€ä»Šæœˆï¼‘ï¼–æ—¥ã«ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã§æµå‡ºã—ãŸã€Œãƒ¤ãƒ•ãƒ¼ã‚¸ãƒ£ãƒ‘ãƒ³ã€ã®ï¼©ï¼¤ï¼’ï¼’ï¼ï¼ä¸‡ä»¶ã®ã†ã¡ã€ç´„ï¼‘ï¼”ï¼™ä¸‡ä»¶ã«ã¤ã„ã¦ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å¤‰æ›´ã®ãŸã‚ã«ä½¿ã†ã€Œç§˜å¯†ã®
tmsanrinsha 2013/05/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Yahoo! JAPAN

å¾³ä¸¸æµ©
ãƒªãƒ³ã‚¯
æ©Ÿå¯†æƒ…å ±ã‚’å«ã‚€JSONã«ã¯ X-Content-Type-Options: nosniff ã‚’ã¤ã‘ã‚‹ã¹ã - è‘‰ã£ã±æ—¥è¨˜
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦JSONã‚’ç”¨ã„ã¦ãƒ–ãƒ©ã‚¦ã‚¶ - ã‚µãƒ¼ãƒé–“ã§ãƒ‡ãƒ¼ã‚¿ã®ã‚„ã‚Šå–ã‚Šã‚’è¡Œã†ã“ã¨ã¯ã‚‚ã¯ã‚„æ™®é€šã®ã“ã¨ã§ã™ãŒã€ã“ã®ã¨ãJSONå†…ã«ç¬¬ä¸‰è€…ã«æ¼ã‚Œã¦ã¯å›°ã‚‹æ©Ÿå¯†æƒ…å ±ãŒå«ã¾ã‚Œã‚‹å ´åˆã¯ã€å¿…ãš X-Content-Type-Options: nosniff ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’ã¤ã‘ã‚‹ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†(ã‚€ã—ã‚æ©Ÿå¯†æƒ…å ±ã‹ã©ã†ã‹ã«é–¢ã‚ã‚‰ãšã€å…¨ã¦ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«ã¤ã‘ã‚‹ã»ã†ãŒã‚ˆã„ã€‚é–¢é€£:X-Content-Type-Options: nosniff ã¤ã‹ã‚ãªã„ã‚„ã¤ã¯æ»ãã°ã„ã„ã®ã«! - è‘‰ã£ã±æ—¥è¨˜)ã€‚ ä¾‹ãˆã°ã€æ©Ÿå¯†æƒ…å ±ã‚’å«ã‚€ä»¥ä¸‹ã®ã‚ˆã†ãªJSONé…åˆ—ã‚’è¿”ã™ãƒªã‚½ãƒ¼ã‚¹(http://example.jp/target.json)ãŒã‚ã£ãŸã¨ã—ã¾ã™ã€‚ [ "secret", "data", "is", "here" ] æ”»æ’ƒè€…ã¯ç½ ãƒšãƒ¼ã‚¸ã‚’ä½œæˆã—ã€ä»¥ä¸‹ã®ã‚ˆã†ã«JSONé…åˆ—ã‚’vbscriptã¨ã—ã¦èªã¿è¾¼ã¿ã¾ã™ã€‚ã‚‚ã¡ã‚
tmsanrinsha 2013/05/17
JSON

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
Security Engineering - A Guide to Building Dependable Distributed Systems
I've written a third edition of Security Engineering. The e-book version is available now for $44 from Wiley and Amazon; paper copies are available from Amazon here for delivery in the USA and here for the UK. Here are the chapters, with links to the seven sample chapters as I last put them online for review: Preface Chapter 1: What is Security Engineering? Chapter 2: Who is the Opponent? Chapter
tmsanrinsha 2013/02/12
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

book
ãƒªãƒ³ã‚¯
ä¹—ã£å–ã‚‰ã‚Œã‚‹å‰ã«ã‚„ã£ã¦ãŠã“ã†ã€€Gmailã‚’å®‰å…¨ã«ä½¿ã†ãŸã‚ã«ã§ãã‚‹iPhoneã®è¨å®šã«ã¯ã€ŽGoogle Authenticatorã€ãŒä½¿ãˆã‚‹ - ã‚¢ãƒƒãƒ—ã‚¹ï¼-iPhoneã®å°æŠ€ã‚„iOSç³»ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚’é…ä¿¡
ä¹—ã£å–ã‚‰ã‚Œã‚‹å‰ã«ã‚„ã£ã¦ãŠã“ã†ã€€Gmailã‚’å®‰å…¨ã«ä½¿ã†ãŸã‚ã«ã§ãã‚‹iPhoneã®è¨å®šã«ã¯ã€ŽGoogle Authenticatorã€ãŒä½¿ãˆã‚‹ mixiãƒã‚§ãƒƒã‚¯ Tweet 2012å¹´12æœˆ29æ—¥ ã‚«ãƒ†ã‚´ãƒª:iPhoneãƒ»ã‚¢ãƒƒãƒ—ãƒ«ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ãƒ¼app photo credit:Â comedy_noseÂ viaÂ photopinÂ cc ã“ã‚“ã«ã¡ã¯ï¼ @fplili ã§ã™ã€‚Â ã“ã®ã¨ã“ã‚ã€Gmailã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒä¹—ã£å–ã‚‰ã‚Œã€è‡ªåˆ†ã«å¿ƒå½“ãŸã‚Šã®ãªã„ã‚¹ãƒ‘ãƒ ãƒ¡ãƒ¼ãƒ«ãŒå‹æ‰‹ã«é€ä¿¡ã•ã‚Œã‚‹è¢«å®³ãŒå¤šç™ºã—ã¦ã„ã¾ã™ã€‚ Gmailã¯å¯¾å¿œç–ã¨ã—ã¦ã€Œï¼’æ®µéšŽèªè¨¼ã€ã‚’æŽ¨å¥¨ã—ã¦ã„ã¾ã™ã€‚ãŒã€PCã ã‘ã§è¨å®šã‚’ã™ã‚‹ã¨iPhoneã§Gmailã‚’ä½¿ãˆãªããªã‚‹ï¼ã¨ã„ã†ã¡ã‚‡ã£ã¨åŽ„ä»‹ãªã“ã¨ã‚‚ã€‚ ãã“ã§æœ¬æ—¥ã¯ã€iPhoneã§ã‚‚ä»Šã¾ã§é€šã‚ŠGmailã‚’ä½¿ã„ã¤ã¤ç°¡å˜ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ã™ã‚‹ã‚¢ãƒ—ãƒªã‚’ã”ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ï¼ ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ã€€ Goog
tmsanrinsha 2012/12/30
google

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

2æ®µéšŽèªè¨¼
ãƒªãƒ³ã‚¯
æ›¸å¼æ–‡å—åˆ—ã«ã‚ˆã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒä¾‹
ä»¥ä¸‹ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ãŒã‚ã‚Šã€nameã¯ç”»é¢å…¥åŠ›ãªã®ã§SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãŒèµ·ã“ã‚‹ã®ã§ã¯ï¼Ÿ ã¨ä½œæˆè€…ã«ç¢ºèªã—ãŸã¨ã“ã‚ã€"%s"ã—ã¦ã‚ã‚‹ã‹ã‚‰å¤§ä¸ˆå¤«ã¨ã®è¿”äº‹ã‚’ã‚‚ã‚‰ã„ã¾ã—ãŸã€‚ ãƒãƒƒãƒˆèª¿ã¹ã‚‹ã¨mysql_real_escape_stringã§ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ã¦ã‹ã‚‰"%s"ã§å¤‰æ›ã™ã‚Œã°å¤§ä¸ˆå¤«ã¨ã„ã£ãŸå†…å®¹ã¯è¦‹ã¤ã‘ãŸã®ã§ã™ãŒã€mysql_real_escape_stringãªã©ä¸è¦ã¨ã®è¿”äº‹ã‚’ã‚‚ã‚‰ã„ã¾ã—ãŸã€‚ ãªãœï¼Ÿã¨èžãã¨ãã†ã„ã†ã‚‚ã®ã ã¨ã—ã‹å›žç”ãŒã‚ã‚Šã¾ã›ã‚“ã€‚ ã²ã©ã„ã§ã™ãã€‚ã“ã‚Œã¯è³ªå•è€…ãŒæ£ã—ãã€sprintfã®%sã§å—ã‘ãŸã ã‘ã§ã¯ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è„†å¼±æ€§ã¨ãªã‚Šã¾ã™ã€‚ ã—ã‹ã—ã€ã©ã†ã—ã¦ã“ã®ã‚ˆã†ãªé–“é•ã£ãŸçŸ¥è˜ãŒå‡ºã¦ããŸã®ã‹ã¨è€ƒãˆã‚‹ã«ã€æ•°å€¤ã‚’%dã§å—ã‘ã‚‹å ´åˆã¨æ··ä¹±ã—ãŸã®ã§ã¯ãªã„ã‹ã¨æ†¶æ¸¬ã—ã¾ã—ãŸã€‚æ•°å€¤ã®å ´åˆã€æ›¸å¼%dã§å—ã‘ã¦ã„ã‚Œã°ã€ä»®ã«æ”»æ’ƒã‚³ãƒ¼ãƒ‰ãŒå…¥åŠ›ã•ã‚ŒãŸã¨ã—ã¦ã‚‚ã€%dã§æ•´æ•°ã«å¼·åˆ¶å¤‰æ›ã•ã‚Œã‚‹ã®ã§ã€SQLã‚¤ãƒ³ã‚¸
tmsanrinsha 2012/12/10
SQL

SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
åœ°ç„ã®JavaScriptã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
TopicsPlaceHolder SectionTitlePlaceHolder TIME rest time current/total en
tmsanrinsha 2012/11/20
JavaScript

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

mala

xss
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ã•ã‚“ã¸ã€ã—ã£ã‹ã‚Šã—ã¦ãã ã•ã„ - æœ€é€Ÿè»¢è·ç ”ç©¶ä¼š
æŠ€è¡“è€…ã¨ã—ã¦ã®è‰¯å¿ƒã«å¾“ã£ã¦ã“ã®è¨˜äº‹ã‚’æ›¸ãã¾ã™ã€‚ä¿ºã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ã®äººã§ã¯ãªãã€JavaScriptã¨UIã®äººã§ã‚ã‚‹ã€‚æ³•å¾‹ã®å‹‰å¼·ã ã£ã¦è‡ªåˆ†ã®ç”Ÿæ´»ã¨æ¥å‹™ã«é–¢ã‚ã‚Šã®ã‚ã‚‹ç¯„å›²ã§ã—ã‹ã—ãªã„ã ã‚ã†ã€‚ã—ã‹ã—å°‘ãªãã¨ã‚‚JavaScriptã‚„ãƒ–ãƒ©ã‚¦ã‚¶ãŒçµ¡ã‚€ã‚ˆã†ãªéƒ¨åˆ†ã«ã¤ã„ã¦ã¯ã€ç¢ºå®Ÿã«è‡ªåˆ†ã®ã»ã†ãŒç†è§£ã—ã¦ã„ã‚‹ã¨æ€ã£ã¦ã„ã‚‹ã€‚é«˜æœ¨æµ©å…‰ã•ã‚“ãŒã€ã‚ã‹ã‚‰ã•ã¾ã«é–“é•ã£ãŸã“ã¨ã‚’æ›¸ã„ãŸã‚Šã€ãŠã‹ã—ãªã“ã¨ã‚’æ›¸ã„ã¦ã„ãŸã‚Šã—ã¦ã‚‚ã€å¾ã€…ã«èª°ã‚‚æŒ‡æ‘˜ã—ãªããªã£ã¦ããŸã¨æ€ã†ã€‚ãŠã‹ã—ãªã“ã¨æ›¸ã„ã¦ã„ãŸã¨ã—ã¦ã‚‚ã€éžæŠ€è¡“è€…ã‹ã‚‰è¦‹ãŸã¨ãã«ã€Œå¤šå°‘éŽæ¿€ãªç‰©è¨€ã„ã ã‘ã©ã€ã‚ã®äººã¯å°‚é–€å®¶ã ã‹ã‚‰è¨€ã£ã¦ã„ã‚‹ã“ã¨ã¯æ£è«–ãªã®ã ã‚ã†ã€ã¨ã‹ã€ã‚ã‚‹ã„ã¯æŠ€è¡“è€…ã‹ã‚‰è¦‹ãŸæ™‚ã§ã‚‚ã€å°‚é–€åˆ†é‡ŽãŒé•ãˆã°é–“é•ã£ãŸã“ã¨ãŒæ›¸ã‹ã‚Œã¦ã„ã¦ã‚‚æ°—ä»˜ã‘ãªã„ã¨ã„ã†ã“ã¨ã‚‚ã‚ã‚‹ã ã‚ã†ã€‚ ã‚‚ã†è‡ªåˆ†ã«ã¯åˆ†ã‹ã‚‰ãªããªã£ã¦ã„ã‚‹ã€‚èª°ã«ã§ã‚‚æ¤œè¨¼ã§ãã‚‹ã‚ˆã†ãªäº‹å®Ÿé–¢ä¿‚ã®é–“é•ã„ã€ã‚ã‚‹ã„ã¯ã€æŠ€è¡“çš„ãªé–“é•ã„ãŒå«ã¾ã‚Œã¦ã„
tmsanrinsha 2012/08/30
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

é«˜æœ¨æµ©å…‰
ãƒªãƒ³ã‚¯
Facebookã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯é€ä¿¡è€…ã‚’è‡ªç”±ã«å½è£…ã—ã¦é€ã‚Œã‚‹ã“ã¨ãŒåˆ¤æ˜Ž
ã“ã‚Œã¡ã‚‡ã£ã¨ãƒžã‚ºã„ã‚“ã˜ã‚ƒãªã„ã‹ãªã‚ã€‚ Kampa! ã®äººã§ã‚ã‚‹ä½ç”°ã•ã‚“ãŒè¦‹ã¤ã‘ã¦æ•™ãˆã¦ãã‚ŒãŸã‚“ã ã‘ã©ã€ Facebook ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯å‰²ã¨ç°¡å˜ã«ä»–äººã«ãªã‚Šã™ã¾ã—ã¦é€ã‚Œã‚‹ã¿ãŸã„ã€‚ ä»¥ä¸‹ã€ã™ã¹ã¦é€ä¿¡è€…ã¨å—ä¿¡è€…ã®è‡ªç™ºçš„ãªå”åŠ›ã‚’å¾—ã¦è©¦ã—ã¦ã¿ãŸçµæžœã§ã™ã€‚ èµ·ãã‚‹ã“ã¨ Facebook ã§ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã« @facebook.com ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒä¸Žãˆã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ å€‹äººãƒšãƒ¼ã‚¸ãŒ www.facebook.com/namaewo ã®äººãªã‚‰ [email protected] ã¨ã„ã†å…·åˆã«ã€‚ ãã®ã‚¢ãƒ‰ãƒ¬ã‚¹å®›ã«ãƒ¡ãƒ¼ãƒ«ã‚’é€ã‚‹ã¨ã€ ã‚¢ãƒ‰ãƒ¬ã‚¹ã®æ‰€æœ‰è€…ã« Facebook ä¸Šã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¨ã—ã¦å±Šãã¾ã™ãã€‚ ã“ã®æ™‚ã€ãã®ãƒ¡ãƒ¼ãƒ«ã®é€ä¿¡å…ƒãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒ åˆ¥ã® Facebook ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚ˆã£ã¦ç™»éŒ²ã•ã‚Œã¦ã„ã‚‹ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã‚ã£ãŸå ´åˆ Facebook ã§ã¯ã€ãã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰é€ã‚‰ã‚ŒãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¨ã—ã¦æ‰±ã‚ã‚Œã¾ã™ã€‚ é›»å
tmsanrinsha 2012/08/20
facebook

ãƒ¡ãƒ¼ãƒ«

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
@â€XSS (ä¸€éƒ¨ã®ãƒ–ãƒ©ã‚¦ã‚¶ã®location.hrefãŒXSSã‚’å¼•ãèµ·ã“ã—ã‚„ã™ã„ã“ã¨ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·)
@â€XSS (ä¸€éƒ¨ã®ãƒ–ãƒ©ã‚¦ã‚¶ã®location.hrefãŒXSSã‚’å¼•ãèµ·ã“ã—ã‚„ã™ã„ã“ã¨ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·) æ¦‚è¦ ä¸€éƒ¨ã®ãƒ–ãƒ©ã‚¦ã‚¶ã®location.hrefã¯ã€XSSãªã©ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã‚’å¼•ãèµ·ã“ã—ã‚„ã™ã„å€¤ã‚’è¿”ã—ã¾ã™ã€‚ã“ã®æŒ™å‹•ã«ã‚ˆã‚Šã€location.hrefãŒè‡ªåˆ†ã¨åŒã˜ãƒ‰ãƒ¡ã‚¤ãƒ³ã®URLã‚’è¿”ã™ã“ã¨ã‚’å‰æã«æ›¸ã„ã¦ã„ã‚‹ã‚³ãƒ¼ãƒ‰ã¯å…¨ã¦ã€æ£ã—ãå‹•ã‹ãªããªã‚‹æã‚ŒãŒã‚ã‚Šã¾ã™ã€‚ å½±éŸ¿ã‚’å—ã‘ã‚‹ãƒ–ãƒ©ã‚¦ã‚¶ Safari 6æœªæº€(Windowsã¯ä¿®æ£ç‰ˆãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã„ã¾ã›ã‚“) iOS 6.0æœªæº€ã®Safari Mobile Android4.1æœªæº€?ã®æ¨™æº–ãƒ–ãƒ©ã‚¦ã‚¶(Android 2.3.6ã§ãƒ†ã‚¹ãƒˆã—ã¾ã—ãŸã€‚@bulkneetsã•ã‚“ã«ã‚ˆã‚‹ã¨4.1ã¯ä¿®æ£æ¸ˆã¿ã€4.0.3ã¯å½±éŸ¿ã‚’å—ã‘ã‚‹ã¨ã®ã“ã¨ã§ã™ã€‚@cubedlã•ã‚“ã«ã‚ˆã‚‹ã¨4.0.4ã¯å½±éŸ¿ã‚’å—ã‘ã‚‹ã¨ã®ã“ã¨ã§ã™ã€‚) æŒ™å‹•ã®å†ç¾ 1. http://l0.cm/atx
tmsanrinsha 2012/08/04
JavaScript

xss

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
æ—¥æœ¬ã®è¶…SFãªã‚µã‚¤ãƒãƒ¼æ”»æ’ƒè¦å‘Šã‚·ã‚¹ãƒ†ãƒ ã«ä¸–ç•Œã®ãƒãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ãƒ¼å¤§èˆˆå¥®ï¼ã€€æµ·å¤–ã®å£°ã€Œæ”»æ®»æ©Ÿå‹•éšŠã‚ã‚¿ãƒ¼ï¼ã€
Â» æ—¥æœ¬ã®è¶…SFãªã‚µã‚¤ãƒãƒ¼æ”»æ’ƒè¦å‘Šã‚·ã‚¹ãƒ†ãƒ ã«ä¸–ç•Œã®ãƒãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ãƒ¼å¤§èˆˆå¥®ï¼ã€€æµ·å¤–ã®å£°ã€Œæ”»æ®»æ©Ÿå‹•éšŠã‚ã‚¿ãƒ¼ï¼ã€ ç‰¹é›† æ—¥æœ¬ã®ç ”ç©¶è€…ãŸã¡ãŒé–‹ç™ºã—ãŸã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã‚¢ãƒ©ãƒ¼ãƒˆã‚·ã‚¹ãƒ†ãƒ ã«ã€ç¾åœ¨ä¸–ç•Œã®ãƒãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒå¤§èˆˆå¥®ã—ã¦ã„ã‚‹ã€‚ ã“ã®ã‚·ã‚¹ãƒ†ãƒ ã®åå‰ã¯ã€ŒDAEDALUSï¼ˆãƒ€ã‚¤ãƒ€ãƒã‚¹ï¼‰ã€ã¨ã„ã„ã€ã“ã‚Œã‚’ä½¿ãˆã°ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãŒæ”»æ’ƒã•ã‚Œã¦ã„ã‚‹æ§˜åã‚’ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ã§è¦‹ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ãªã‚‹ã€‚è©³ç´°ã¯ä»¥ä¸‹ã®é€šã‚Šã€‚ ä¸å¿ƒã«ã‚ã‚‹çƒãŒã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚’è¡¨ã—ã¦ãŠã‚Šã€ãã®å‘¨ã‚Šã‚’å›žã£ã¦ã„ã‚‹ã‚µãƒ¼ã‚¯ãƒ«ã®1ã¤1ã¤ãŒç¾åœ¨è¦³æ¸¬ä¸ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’è¡¨ã—ã¦ã„ã¾ã™ã€‚ã“ã‚Œã‚‰ã€æ”»æ’ƒã®æ§˜åã¯ã€3Dã‚°ãƒ©ãƒ•ã‚£ãƒƒã‚¯ã§è¡¨ç¤ºã•ã‚Œã€ä»»æ„ã®è¦–ç‚¹ã‹ã‚‰çœºã‚ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚ï¼ˆDigInfo TVã‚ˆã‚Šå¼•ç”¨ï¼‰ ã“ã“ã§ç€ç›®ã™ã¹ãç‚¹ã¯ã€3Dã‚°ãƒ©ãƒ•ã‚£ãƒƒã‚¯ï¼ã€€ã€Œã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã‚’ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ã«å¯è¦–åŒ–ã€è¦å‘Šã‚’ç™ºã™ã‚‹ã€ŽDAEDALUSã€ã€ã¨ã„ã†å‹•ç”»ã«ã‚‚æ˜ ã—å‡ºã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã«ã€ã“ã®ã‚·ã‚¹ãƒ†ãƒ ã®å‡„ã„ã¨ã“ã‚ã¯ãã®
tmsanrinsha 2012/06/22
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

å¯è¦–åŒ–

3d
ãƒªãƒ³ã‚¯
PHP 5.3.12ã¨PHP 5.4.2ã€è„†å¼±æ€§ãŒå®Œå…¨ã«ã¯ä¿®æ£ã•ã‚Œã¦ã„ãªã„ã“ã¨ãŒåˆ¤æ˜Ž | ã‚¹ãƒ©ãƒ‰ ãƒ‡ãƒ™ãƒãƒƒãƒ‘ãƒ¼
PHPã‚’CGIã¨ã—ã¦ä½¿ç”¨ã™ã‚‹å ´åˆã«ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³å¼•æ•°ã‚’æŒ‡å®šã—ã¦PHP-CGIãƒã‚¤ãƒŠãƒªãƒ¼ã‚’å®Ÿè¡Œã§ãã‚‹ã¨ã„ã†è„†å¼±æ€§(CVE-2012-1823)ãŒç™ºè¦‹ã•ã‚Œã€PHPé–‹ç™ºãƒãƒ¼ãƒ ã¯PHP 5.3.12ã¨PHP 5.4.2ã‚’å…¬é–‹ã—ãŸã€‚ã—ã‹ã—ã€è„†å¼±æ€§ãŒå®Œå…¨ã«ã¯ä¿®æ£ã•ã‚Œã¦ãŠã‚‰ãšã€æ”¹ã‚ã¦è„†å¼±æ€§æƒ…å ±ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«CVE-2012-2311ã¨ã—ã¦ç™»éŒ²ã•ã‚ŒãŸã¨ã®ã“ã¨( threatpostã®è¨˜äº‹ã€ Die Eindbazenã®è¨˜äº‹ã€ Yet Another PHP Security Blogã®è¨˜äº‹ã€ å¾³ä¸¸æµ©æ°ã®ãƒ–ãƒã‚°è¨˜äº‹)ã€‚ ã“ã®è„†å¼±æ€§ã¯2004å¹´ã‹ã‚‰ç™ºè¦‹ã•ã‚Œãšã«å˜åœ¨ã—ã¦ã„ãŸã‚‚ã®ã§ã€Apache mod_cgiã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹ç’°å¢ƒãªã©ãŒå½±éŸ¿ã‚’å—ã‘ã‚‹ã¨ã„ã†ã€‚æ‚ªç”¨ã•ã‚Œã‚‹ã¨ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ãƒãƒ¼ã‚«ãƒ«ãƒ‡ã‚£ã‚¹ã‚¯ä¸Šã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’å®Ÿè¡Œã•ã‚ŒãŸã‚Šã€DoSã‚’å®Ÿè¡Œã•ã‚ŒãŸã‚Šã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€‚æ”»æ’ƒè€…ãŒã‚µãƒ¼ãƒãƒ¼ã«ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã§ã
tmsanrinsha 2012/05/06
è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

PHP
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸