[B! security][algorithm] uchiuchiyamaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

uchiuchiyama id:uchiuchiyama

securityã¨algorithmã«é–¢ã™ã‚‹uchiuchiyamaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

LenovoãŒæœ€æ‚ªã‚¯ãƒ©ãƒƒãƒ—ã‚¦ã‚§ã‚¢ã€ŒSuperfishã€ã§å¤±ã£ãŸä¿¡ç”¨ã®å¤§ãã• - THE ZERO/ONE
æ–°ã—ã„PCã‚’è³¼å…¥ã—ã€ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—ã‚’çµ‚ãˆã¦OSãŒèµ·å‹•ã—ãŸã‚ã¨ã€é ¼ã‚“ã§ã‚‚ã„ãªã„ãƒ—ãƒã‚°ãƒ©ãƒ ãŒå¤§é‡ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã®ã‚’è¦‹ã¦ã€å«Œãªæ°—åˆ†ã‚’å‘³ã‚ã£ãŸã“ã¨ã¯ãªã„ã ã‚ã†ã‹ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚½ãƒ•ãƒˆã®è©¦ç”¨ç‰ˆã‚ãŸã‚Šã¯ã¾ã ã—ã‚‚ã€è¦‹æ „ãˆã‚‚ä½¿ã„å‹æ‰‹ã‚‚æ‚ªã„ãƒ©ãƒ³ãƒãƒ£ãƒ¼ã€ã©ã†ã§ã‚‚ã„ã„ã‚·ãƒ§ãƒƒãƒ”ãƒ³ã‚°ã‚¢ãƒ—ãƒªã€ã¤ã¾ã‚‰ãªã„ã‚²ãƒ¼ãƒ ã‚„ä½“é¨“ç‰ˆã€åˆå¿ƒè€…å‘ã‘ã¨ç§°ã™ã‚‹ãŒã»ã¼åˆå¿ƒè€…ã«ã‚‚å½¹ã«ç«‹ãŸãªã„è§£èª¬ã‚¢ãƒ—ãƒªã®æ•°ã€…â€¦â€¦ã€‚æ„šã«ã‚‚ä»˜ã‹ãªã„ä»£ç‰©ãŒãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ã‚„ã‚¹ã‚¿ãƒ¼ãƒˆç”»é¢ã‚’åŸ‹ã‚å°½ãã—ã€ãƒ‡ã‚£ã‚¹ã‚¯å®¹é‡ã‚„å ´åˆã«ã‚ˆã£ã¦ã¯ãƒ¡ãƒ¢ãƒªã‚‚ç„¡é§„ã«æ¶ˆè²»ã—ã¦ã„ã‚‹ã€‚ã“ã®æ‰‹ã®ç„¡é§„ãªãƒ—ãƒªã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¯ã€Œcrapwareï¼ˆã”ã¿ã‚½ãƒ•ãƒˆï¼‰ã€ã€Œbloatwareï¼ˆæ°´å¢—ã—ã‚½ãƒ•ãƒˆï¼‰ã€ãªã©ã¨å‘¼ã°ã‚Œã‚‹ã€‚ãƒ¡ãƒ¼ã‚«ãƒ¼ã«ã‚ˆã£ã¦ã¯ã€å€‹äººå‘ã‘ã ã‘ã§ãªãæ³•äººå‘ã‘ãƒ¢ãƒ‡ãƒ«ã«ã¾ã§ã‚¯ãƒ©ãƒƒãƒ—ã‚¦ã‚§ã‚¢ãŒå…¥ã£ã¦ã„ã‚‹ã“ã¨ãŒã‚ã‚Šï¼ˆã•ã™ãŒã«å€‹äººå‘ã‘ã‚ˆã‚Šã¯å°‘ãªã„ãŒï¼‰ã€ã†ã‚“ã–ã‚Šã•ã›ã‚‰ã‚Œã‚‹ã€‚ ã ãŒã€ã†ã‚“ã–ã‚Šã™ã‚‹ç¨‹åº¦ãªã‚‰ã¾ã è‰¯ã‹
uchiuchiyama 2015/07/21
security

ssl

algorithm
ãƒªãƒ³ã‚¯
èªè¨¼ï¼ˆAuthenticationï¼‰ ã¨ æ‰¿èªï¼ˆAuthorizationï¼‰ ã®é•ã„
èªè¨¼ ( Authentication ) ã‚µãƒ¼ãƒ“ã‚¹ ã¸ ã‚¢ã‚¯ã‚»ã‚¹ ã—ã¦ããŸ ãƒ¦ãƒ¼ã‚¶ãƒ¼ ãŒ ã€Œæœ¬äººã§ã‚ã‚‹ã‹ã©ã†ã‹ã€ ã‚’æ¤œè¨¼ã™ã‚‹ã€‚ æ‰¿èª ( Authorization ) ã‚µãƒ¼ãƒ“ã‚¹ ã¸ ã‚¢ã‚¯ã‚»ã‚¹ ã—ã¦ããŸ èªè¨¼æ¸ˆã¿ãƒ¦ãƒ¼ã‚¶ãƒ¼ ãŒ ã€ŒæŒ‡å®šã—ãŸ ãƒªã‚½ãƒ¼ã‚¹ ã¸ ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã‹ã©ã†ã‹ã€ ã‚’åˆ¶å¾¡ã™ã‚‹ã€‚ èªè¨¼ ( Authentication ) ã¨ æ‰¿èª ( Authorization ) ã‚’å«ã‚ãŸã‚µãƒ¼ãƒãƒ¼å‡¦ç†ã®æµã‚Œ ä»Šå›žã€ä»¥ä¸‹ã®ã‚µã‚¤ãƒˆã‚’å‚è€ƒã«ã—ã¾ã—ãŸã€‚ IPA - IPA ã‚»ã‚ãƒ¥ã‚¢ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¬›åº§: Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ç·¨ IPA ISEC - ç¬¬2ç« ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ ãƒ¦ãƒ¼ã‚¶èªè¨¼ IPA ISEC - ç¬¬2ç« ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ ã‚¢ã‚¯ã‚»ã‚¹èªå¯ ITãƒ¡ãƒ‡ã‚£ã‚¢ ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º - èªè¨¼ã¨èªå¯ã®é•ã„ æœ€å¾Œã«â€¦ ã“ã®ãƒ–ãƒã‚°ã«èˆˆå‘³ã‚’æŒã£ã¦ã„ãŸã ã‘ãŸæ–¹ã¯ã€ ãœã² ã€ŒFacebookãƒšãƒ¼ã‚¸ ã« ã„ã„ãï¼ã€ã¾ãŸã¯
uchiuchiyama 2015/07/21
development

security

algorithm
ãƒªãƒ³ã‚¯
å¶ç„¶ã«ã‚‚500ä¸‡å€‹ã®SSHå…¬é–‹éµã‚’æ‰‹ã«å…¥ã‚ŒãŸä¿ºãŸã¡ã¯ - slideshare
1. Attacking against 5 million SSH public keys å¶ç„¶ã«ã‚‚500ä¸‡å€‹ã® SSHå…¬é–‹éµã‚’ æ‰‹ã«å…¥ã‚ŒãŸä¿ºãŸã¡ã¯ hnw æ±Ÿæˆ¸å‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š (2015/1/24)ç™ºè¡¨è³‡æ–™
uchiuchiyama 2015/01/26
ssh

security

github

presentation

algorithm
ãƒªãƒ³ã‚¯
æš—å·åŒ–ã®ãŠè©± (2)
ã•ã¦ã“ã“ã§ã€å›³ 2 ã®ã‚ˆã†ãªæ‰‹é †ã§ãƒ‡ãƒ¼ã‚¿ã‚’ã‚„ã‚Šã¨ã‚Šã—ã¾ã™ã€‚ é€ä¿¡è€…ã¯ç›¸æ‰‹ (å—ä¿¡è€…) ã®å…¬é–‹éµã‚’å–ã‚Šå¯„ã›ã¾ã™ã€‚ é€ä¿¡è€…ã¯å–ã‚Šå¯„ã›ãŸå…¬é–‹éµã§ãƒ‡ãƒ¼ã‚¿ã‚’æš—å·åŒ–ã—ã€æš—å·æ–‡ã‚’é€ä¿¡ã—ã¾ã™ã€‚ å—ä¿¡è€…ã¯ã€è‡ªåˆ†ã®ç§˜å¯†éµã§ãƒ‡ãƒ¼ã‚¿ã‚’å¾©å·ã—ã€å¹³æ–‡ã‚’æ‰‹ã«å…¥ã‚Œã¾ã™ã€‚ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãŒç›—è´ã•ã‚Œã¦ã„ãŸã¨ã—ã¦ã€ç›—è´è€…ãŒæ‰‹ã«å…¥ã‚Œã‚‰ã‚Œã‚‹ã‚‚ã®ã¯ å—ä¿¡è€…ã®å…¬é–‹éµ å…¬é–‹éµã§æš—å·åŒ–ã—ãŸå¹³æ–‡ ã® 2ã¤ã ã‘ã§ã™ã€‚ã“ã® 2ã¤ã§ã¯å¹³æ–‡ã‚’æ‰‹ã«å…¥ã‚Œã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“ã€‚ ã€Œå…¬é–‹éµã§æš—å·åŒ–ã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã¯ç§˜å¯†éµã‚’ä½¿ã‚ãªã„ã¨å¾©å·åŒ–ã§ããªã„ã€ ã‹ã‚‰ã§ã™ã€‚ ã“ã“ã§èª¬æ˜Žã—ãŸã‚„ã‚Šã‹ãŸã§ã€ç¢ºã‹ã«å®‰å…¨ã«æš—å·åŒ–ã‚’å®Ÿç¾ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ãŸã ã—å…¬é–‹éµæš—å·æ–¹å¼ã®ä¸ã§æœ€ã‚‚åºƒãä½¿ã‚ã‚Œã¦ã„ã‚‹ RSA ã¨ã„ã†æš—å·æ–¹å¼ã¯ã€ æš—å·åŒ–ãƒ»å¾©å·åŒ–ã«éžå¸¸ã«æ™‚é–“ãŒã‹ã‹ã‚‹ã¨ã„ã†æ¬ ç‚¹ãŒã‚ã‚Šã¾ã™ã€‚ ã©ã‚Œãã‚‰ã„é…ã„ã‹ã¨ã„ã†ã¨ã€ä¸€èˆ¬çš„ãªå…±é€šéµæ–¹å¼ã®æ•°ç™¾ã€œåƒå€é…ã„ã®ã§ã™ã€‚ å®Ÿéš›ã®æš—å·åŒ–å‡¦ç† å…¬é–‹éµæ–¹å¼ãŒé…
uchiuchiyama 2015/01/26
algorithm

security
ãƒªãƒ³ã‚¯
1