[B! * Security] uretaroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

uretaro id:uretaro

* Securityã«é–¢ã™ã‚‹uretaroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

Walti ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã‚¹ã‚ãƒ£ãƒ³ã‚’èº«è¿‘ã«
uretaro 2017/08/27
* Security

* WordPress
ãƒªãƒ³ã‚¯
æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼šã€€åŸºç¤Žç·¨
ã‚†ã‚ã¿ã®ç¤¾å†…å‹‰å¼·ä¼šã§ä½¿ç”¨ã—ãŸè³‡æ–™ã§ã™ã€‚
uretaro 2017/08/24
* Security
ãƒªãƒ³ã‚¯
SIOS Tech. Lab - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãŸã‚ã«ãªã‚‹æŠ€è¡“ãƒˆãƒ”ãƒƒã‚¯ã‚¹
ã“ã‚“ã«ã¡ã¯ã€ã‚„ã¾ãªã‹ã§ã™ã€‚ ä»Šå›žã¯ã‚µãƒ¼ãƒãƒ¼ä¸Šã®é–¢æ•°ã‚’å®Ÿè¡Œã™ã‚‹ãŸã‚ã®ãƒ—ãƒãƒˆã‚³ãƒ«ï¼ˆé€šä¿¡è¦æ ¼ï¼‰ã§ã‚ã‚‹RPC (Remote Procedure Call) ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã€GoogleãŒé–‹ç™ºã—ãŸgRPCã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã„ãã¾ã™ [â€¦]
uretaro 2017/08/14
* Security

* Git
ãƒªãƒ³ã‚¯
OSSã§å§‹ã‚ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚°åŽé›†/oss-securitylog-builderscon2017
osqueryã®ç´¹ä»‹ https://builderscon.io/tokyo/2017/session/ce1bf3ee-33bd-4899-897d-ba3c4364c1c5
uretaro 2017/08/06
* Security
ãƒªãƒ³ã‚¯
IDN Homograph Example
Hey there! This site is obviously not affiliated with Apple, but rather a demonstration of a flaw in the way browsers handle Unicode domains. This is proof-of-concept works in Chrome 58 and earlier along with all versions of Firefox. Check out the complete blog post by Xudong Zheng for more details on the vulnerability.
uretaro 2017/04/16
" "Ð°pple.com" uses the Cyrillic "Ð°" (U+0430) rather than the ASCII "a" (U+0041). This is known as a homograph attack."

* Security
ãƒªãƒ³ã‚¯
ã€PHPã€‘ä½œæˆã—ãŸãƒ¡ãƒ¼ãƒ«ãƒ•ã‚©ãƒ¼ãƒ ã«è„†å¼±æ€§ãŒãªã„ã‹ã€ã‚¢ãƒ‰ãƒã‚¤ã‚¹ã‚‚ã‚‰ãˆãªã„ã§ã—ã‚‡ã†ã‹ã€‚
PHPã¯ã€Webã‚µã‚¤ãƒˆæ§‹ç¯‰ã«ç‰¹åŒ–ã—ã¦é–‹ç™ºã•ã‚ŒãŸãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã§ã™ã€‚å¤§ããªç‰¹å¾´ã®ã²ã¨ã¤ã¯ã€HTMLã«ç›´æŽ¥ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’åŸ‹ã‚è¾¼ã‚€ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ç‚¹ã§ã™ã€‚PHPã‚’ç”¨ã„ã‚‹ã“ã¨ã§ã€HTMLã‚’å‹•çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¨ã—ã¦å‡ºåŠ›ã§ãã¾ã™ã€‚HTMLãŒãã®ã¾ã¾ãƒ–ãƒ©ã‚¦ã‚¶ã«è¡¨ç¤ºã•ã‚Œã‚‹ã®ã«å¯¾ã—ã€PHPãƒ—ãƒã‚°ãƒ©ãƒ ã¯ã‚µãƒ¼ãƒå´ã§å®Ÿè¡Œã•ã‚ŒãŸçµæžœãŒãƒ–ãƒ©ã‚¦ã‚¶ã«è¡¨ç¤ºã•ã‚Œã‚‹ãŸã‚ã€PHPã‚¹ã‚¯ãƒªãƒ—ãƒˆã¯ã€Œã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰ã‚¹ã‚¯ãƒªãƒ—ãƒˆã€ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚
uretaro 2017/04/10
* Security

* PHP
ãƒªãƒ³ã‚¯
Hacksplaining
Learn about security vulnerabilities in a fun, simple, and direct way.
uretaro 2017/03/01
" Lots of tutorials describing common website security vulnerabilities. "

* Security
ãƒªãƒ³ã‚¯
HTTP Headers ã¨ã„ã† 5ä¸‡äººãŒä½¿ã£ã¦ã„ã‚‹ Chrome æ‹¡å¼µã®ãƒžãƒ«ã‚¦ã‚§ã‚¢ç–‘æƒ‘ã€‚ã‚»ãƒƒã‚·ãƒ§ãƒ³ç›—ã¾ã‚Œã¦ BTC ã‚‚ç›—ã¾ã‚Œãã†ã«ãªã£ãŸè©±ã€‚ - clock-up-blog
ç–‘æƒ‘ã©ã“ã‚ã‹ 99.99% ãã‚‰ã„é»’ãªè©±ã€‚ ï¼ˆå¾Œè¨˜ï¼šã‚»ãƒƒã‚·ãƒ§ãƒ³ç›—ã¾ã‚ŒãŸã¨æ€ã£ã¦ãŸã‘ã©ã€ã‚ˆãã‚ˆãè€ƒãˆç›´ã—ã¦ã¿ã‚‹ã¨ç”Ÿãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã”ã¨ç›—ã¾ã‚Œã¦ã‚‹å¯èƒ½æ€§ã‚‚ã‚ã‚‹ã—ã‚„ã°ã„ï¼‰ è¿½è¨˜ï¼šç¶šå ± 11æœˆ3æ—¥ ä»Šå›žæŒ‡æ‘˜ã—ãŸ HTTP Headers ä»¥å¤–ã«ã‚‚ã€ã€ŒTab Managerã€ã€ŒGive Me CRXã€ã€ŒLive HTTP Headersã€ç‰ã§åŒæ§˜ï¼ˆï¼Ÿï¼‰ã®å•é¡ŒãŒå ±å‘Šã•ã‚Œã¦ã„ã¾ã™ã€‚ç¬¬ä¸‰è€…ãŒå…ƒã®ä½œè€…ã‹ã‚‰ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢æ¨©åˆ©ã‚’è²·ã„å–ã£ã¦æ‚ªç”¨ã™ã‚‹ã€ã¨ã„ã†ã‚±ãƒ¼ã‚¹ãŒå‰²ã¨ã‚ã‚‹æ¨¡æ§˜ï¼ˆï¼Ÿï¼‰ã€‚çš†ã•ã¾æƒ…å ±ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ 11æœˆ4æ—¥ Zaif ã«ã¤ã„ã¦ã¯ã€ã€Œä¸æ£ãª Chrome æ‹¡å¼µã€ã¨ã€Œã‚¹ã‚¯ãƒªãƒ—ãƒˆã‹ã‚‰ä¿è·ã•ã‚Œã¦ã„ãªã‹ã£ãŸã‚¯ãƒƒã‚ãƒ¼ã€ã®ã‚³ãƒ³ãƒœã«ã‚ˆã‚Šã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒç›—ã¾ã‚Œã¦ã„ãŸå¯èƒ½æ€§ã‚ã‚Šã€‚ Zaif ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³æƒ…å ±ãŒç›—ã¾ã‚ŒãŸåŽŸå› ã®ã²ã¨ã¤ã«ã¤ã„ã¦ã€‚JavaScript ã‹ã‚‰ã‚¯ãƒƒã‚ãƒ¼å€¤ã‚’å–å¾—ã•ã›ãªã„æ–¹æ³•ã€‚ - clock-up-blog
uretaro 2016/11/04
Chrome

* Security
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx