PHP5.3.7ã®crypt関数ã®ãƒã‚°ã¯ã“ã†ã—ã¦ç”Ÿã¾ã‚ŒãŸ
昨日ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€ŒPHP5.3.7ã®crypt関数ã«è‡´å‘½çš„ãªè„†å¼±æ€§(Bug #55439)ã€ã«ã¦ã€crypt関数ã®é‡å¤§ãªè„†å¼±æ€§ã«ã¤ã„ã¦å ±å‘Šã—ã¾ã—ãŸã€‚脆弱性ã®å‡ºæ–¹ãŒè¿‘å¹´ã¾ã‚Œã«è¦‹ã‚‹ã»ã©ã®ã‚‚ã®ã ã£ãŸã®ã§ã€twitterやブクマãªã©ã‚’見ã¦ã‚‚ã€ã€Œã©ã†ã—ã¦ã“ã†ãªã£ãŸã€ã¨ã„ã†ç–‘å•ã‚’多数目ã«ã—ã¾ã—ãŸã€‚ ãã“ã§ã€ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã“ã®è„†å¼±æ€§ãŒã©ã®ã‚ˆã†ã«æ··å…¥ã—ãŸã®ã‹ã‚’追ã£ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ PHPã®ãƒ¬ãƒã‚¸ãƒˆãƒªã®ãƒã‚°ã‚„公開ã•ã‚Œã¦ã„るソースã®çŠ¶æ³ã‹ã‚‰ã€PHP5.3.7RC4ã¾ã§ã“ã®ãƒã‚°ã¯ãªãã€PHP5.3.7RC5ã§ã“ã®ãƒã‚°ãŒæ··å…¥ã—ãŸæ¨¡æ§˜ã§ã™ã€‚RC5ã¯PHP5.3.7最後ã®Release Candidateã§ã™ã‹ã‚‰ã€ã¾ã•ã«æ£å¼ãƒªãƒªãƒ¼ã‚¹ã®ç›´å‰ã§ãƒã‚°ãŒå…¥ã£ãŸã“ã¨ã«ãªã‚Šã¾ã™ã€‚ ãƒã‚°ã®å…¥ã‚‹ç›´å‰ã®ã‚½ãƒ¼ã‚¹ã¯ã€ã“ã“ã®é–¢æ•°php_md5_crypt_rã‹ã‚‰å‚ç…§ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚以下ã«ã€ãŠãŠã¾ã‹ãªæµã‚Œã‚’図示ã—ã¾ã™ã€‚ã¾ãšã¯ãƒ
高木浩光ã•ã‚“ã®ãƒ‡ãƒ¼ã‚¿ãƒ—ライãƒã‚·ãƒ¼ã¸ã®ä¾µå®³ã«å¯¾ã™ã‚‹æ‡¸å¿µã¨å¯¾ç–ã€ãã—ã¦å®Ÿé¨“ã®ãŠé¡˜ã„ - Togetter
Hiromitsu Takagi @HiromitsuTakagi ã„ã‚ã„ã‚ヤãƒã„。ãƒã‚¿ã®ã‚¹ãƒˆãƒƒã‚¯ã¯å¤§é‡ã«ã‚ã‚‹ãŒã€ã‚¦ã‚¤ãƒ«ã‚¹ç½ªã‚„ら番å·åˆ¶åº¦ã‚„らãŒå„ªå…ˆã§ã€æ›¸ã„ã¦ã„ã時間ãŒè¶³ã‚Šã¦ãªã„。もã†Twitterã§å…ˆå‡ºã—ã¦ã„ãã—ã‹ã€‚ Hiromitsu Takagi @HiromitsuTakagi UDIDやスーパークッã‚ーåŒç‰ã®å•é¡Œã¯è‹±èªžåœã§ã„ãšã‚Œå¿…ãšå•é¡Œè¦–ã•ã‚Œã¦è·¯ç·šå¤‰æ›´ã«è‡³ã‚‹ãŒã€æ—¥æœ¬ã®äººãŸã¡ãŒãã‚Œã«å–り残ã•ã‚Œã¦ã—ã¾ã£ã¦ã€å¾Œã§å›°ã£ãŸã“ã¨ã«ãªã‚‹ã“ã¨ãŒå›½å®¶çš„æ失。ãã†ãªã‚‰ãªã„よã†æ—©ã‚æ—©ã‚ã«å•“è’™ã—ã¦ã„ãã“ã¨ãŒé‡è¦ã§ã‚ã‚‹ã¨ã“ã‚。残念ãªãŒã‚‰æ”¿åºœã®å–組ã¿ã¯æ¥µã‚ã¦ãŠç²—末ã§ã€â€¦ Hiromitsu Takagi @HiromitsuTakagi …政府ã®å–組ã¿ã¯æ¥µã‚ã¦ãŠç²—末ã§ã€ã‚»ã‚ュリティã«ã¤ã„ã¦ã¯2003å¹´ã”ã‚ã‹ã‚‰ç©æ¥µçš„ã«å–り組ã¾ã‚Œã‚‹ã‚ˆã†ã«ãªã£ãŸãŒã€ãƒ‡ãƒ¼ã‚¿ãƒ—ライãƒã‚·ãƒ¼ã¯ãã‚Œã¨ã¯å…¨ãã®åˆ¥ç‰©ã¨ã¿ãªã•ã‚Œã¦ã„ã¦ã€æ”¿ç–課題ã«
How To Safely Store A Password
31 Jan 2010 Use bcrypt Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Why Not {MD5, SHA1, SHA2, SHA3, etc}? These are all general purpose hash functions, designed to calculate a digest of huge amounts of data in as short a time as possible. This means that they are fantastic for ensuring the integrity of data and utterly rubbish for stor
1
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
http://mail-archives.apache.org/mod_mbox/httpd-announce/201108.mbox/raw/%
{{#tags}}- {{label}}
{{/tags}}